MZ@ !L!This program cannot be run in DOS mode. $W[9[9[9 5_9ҳ2Z9ؙ7M9ҡ Y9ҘdT9[8ү9ҳ3!9Ҝ?Z9Rich[9PELD  @ #) `p@ .text  `.rdata  @@.data@0@@.rsrc` p@@D$\=8VW6-t6HVD$pJAD$hjP"A_^\t$hL$QV"A="AP׍T$RVjT$(|$ L$D$ +׋|$RT$(+׃tDu_^2[ÊGt1^t( .3ID)0lA<*tLAE<*0lAtLAQUPD$hLAPb~$,T$$QRu t{r_^][_^]2[ÐT v`AUVW=x#AjjhP׋tJSLA@B:utP^:uu3 @BBPH"A `AjQX#A`Ajjj R׍u`AL$4QVD$dh-RD$lD$Ll$\D$X׍D$\jPD$l$,~`AL$ D$ QVh-R׍D$\Ph@BtL$\Qh@Bt`AjVhRN\`AjPX#A `Ajjj Q׋`AjjRL"ABPH"A_^]T ÐQ hAD$jPjjhh@BhQ!AuT$jhLAhLART#Ah CP!AYÐv~$SUVW-Hj@B3$ +T$3@B+T$3@B+ȋ$f=k$5@#A$hQhW֍$hRhW֍D$hPhW֊$fLAuf$$uf$L$ufD$$3h@B+ы@BʃM3@B$PV/tG@B|Gt8׍o @B3+ȃMu֍$3h@B+ы@Bʃ󤍼$+@Bȃ3@B$QVhtG@B|Gt8׍o @B3+ȃMu֍$3h@B+ы@Bʃ|$+@Bȃ3`BL$QVtG` C|Gt8׍o `B3+ȃMu֍|$3$+$ ы`Bh@BPt `AjjQD#A5\#AhUփhUBBփhUCBփhU @BփhUABփ@BDB@BLA@B:utP^:uu3t%@B3+@BȃLA@B:utP^:uu3t%@B3+@BȃjjU`"APX#AU"AP_^][f=uC$jV`"APH#AtjjhVx#AjV"A_^]3[f=u$jQ"A_^]3[f=$=L#AhLAhVh0lAhVh0lAhV׋=P#AjhVjhVjhVjhVjhVjhVjhVjh V׍$ h@BR{t`AjjPD#AjjV`"APX#A_^]3[f=t ftf=u$jjQ`"APX#A_^]3[$-`"AhRՋx#AlA@B?tKLANJ:utP:Vuu3u0lAPlAjhCPӁ@B|$hQգ$lA@B?tKLANJ:utP:Vuu3u0lAP$lAjhCPӁ@B|$hQգ lA`B?tKLANJ:utP:Vuu3u0lAP lAjhCPӁ` C| lAjjhNQӋ$lAjjhNRӡ lAjjhNPӊBB5P#A$3ɄQhW֠CB3҄RhW֊ @B3PhW֠AB3ɄQhW֠DB3҄RhW_^][$jP"A_^][D$@V-:H*D$Pf=t$HD$j@PhV@#AL$LT$QhMARSu uj0hMAhLAPT#A^@D$LjV(lA"A(lA `A5x#Ajjj Q֋`AjjhR;(lAr+`AjjhP֋ `AjjhQ;(lAsՋ`Ajjj Rָ^@f=uD$HjP"A3^@f=uL$HhLAhQL#A3^@(lAD$RhMAPqt$T L$QhVL#Ah'jhehV`"APx#A^@T$HjR"A^@(Vt$0W=x#Ajjh V׃uj0hLAhMAVT#A_2^(ËL$SSj Vס,lA;(lArSShVס,lAH,lA;(lAsSjj Vס,lA ASAt;tSSShVHPhV׋ ȨBQH"ASjj V#AMd _^[]Ð1]0lASUVW$@3$$1f$1u9hpAt0B3$+ȃ3LA LAfLA$$ pAf$D$3퍔$PD$L\$ L$$D$(NAl$,l$0D$4T$8D$<l$@l$Dl$HD$LOAfl$Tfl$VD$XNAl$`D$P #A$h OAQ_Y;t$ujhOAhNAUT#A_^][Ā1S"ABRH"AȨB$1UUhPx#A3;ʼnD$3Ƅ$$1T$dRS$h-PƄ$l$|DŽ$$x#A$3$+уOʍ$NA+уOʃEVL$$PhNAQ_D$ C;%t$V*V$3+ȨBыBPhpAH"A#A_^][Ā1Ð|pAtSU$V5(#AWujj jU|pA$w?sQI3ɊLK@$@K@`pA-P8#A!t= `pAtP8#A$jj jUXpA$jj jUXpA֡dpAL$Q4#AT$D$PFGu\$ 1L$ T$Qh|PAj:R#G@PHD$ j:P GL$ T$QR ;t$$u @_^[Ë@_^[ËT$ D$$PQD$RP$$,tB5$"Ah$h`Q$$SRh$ h`P$$SQ`PA$f$|5"A;uhS։$|9$uhS։$Uj$QjSVET$(jRq pAu$D$$jPYpAu hP"A5`"APjhrh SPx#A|$O4QhSՠDAujhSP$#AW8RjSՍD$P4#A]D$=~TL$~H=,~3jjjQPjS"A_^[Ą$jQ"A_^[ĄSUV$WPjjD$$fDŽ$"A `Ax#Ajjh QӋЃA3$D$`L$X$QR`Ah-RDŽ$D$|Ӏ$0u%$(j0hLAh@TAPT#A_^][j$h8TAQ? u~$$Rh TAP< L$$QRh AL$Q$ ALPA3$+O̓j$hTAPa? u4$$QhTAR; D$$PQhbj$hSAR? u4$$PhSAQ; T$$RPhj$hSAQ> u4$$RhSAPN; L$$QRhj$hSAPt> u4$$QhSAR: D$$PQhu$3$+ȃS$j\PJC$@j\QD$(6C5"AjhSA֋-"AuV3|$T$RD$ <D$$@D$,0@AD$0SAD$<,"AD$TjPjhSA֋L$QW"AT$Rjj!AD$Tu%$(jhLAhhSAPT#A_^][jW$#AW"AjhXSAjW"AV"AVl#AL$TjQjhhWӋT$TjRD$jj%hVӋD$TjPՋD$HD$u$$L$tCT$<\u jj'hP@jPhVӋL$TjQՋD$@D$8uT$TjRՋl$tgjh@OAjW"AV"AVl#A$v h!Ajj$hVӊEtP@jPhVӊEEuW"AWl#A_^][ÐD$V$jjPhVjh!AL$$QRD$hTAP&8tt tu!DAtL$T$QhTAR"A $jD$ hLAPQT#Aj"AT$R!A^ÐD$SVt$W|$WP29t@WPC9u_^[ÐHL$dSUVD$WPj Q D$@SAT$:t l$``t$\=x#AjjhVD$@D$H׋Kx(D$0\$4PjhVׅtL$PD$`;tKy؃Kl$PD$8tdL$`QhMAh A6j0: 3 AQ:п A3U+ȃL$dT$hl$lMU DAt -PA #A]E3|$D$t9t$~8tP`L$xL$tFL$t|ЋT$:tut$\D$0PjhVD$@\$DD$HD$Tl$`x#Au4L$`QhTAh A5 jhLAh AVT#A_^]3[Hã,lA_^][HÐQD$UVD$(t$l$SDAWD$$L$ D$$L$ ;r;sbV3IۋtvƆF NRVRVPQRPUbL$,DA ȄۉL$t>uF댡(lA5x#A_[tJD$tBjjj U֋ ,lA(lA;r!jjhU֡,lA (lAH;,lAsjjj U֠ASAt0D$t(`pAtP8#AjjjhUHPhU^]YÐtB h CSU-!AVt$W=x#AD$L$hT$jRj!A؃Ht -tաBPjhdVנ@SA hAjh\AhhAjjhQ!A\Ata`APhARVtBjP=tjjheV듃t tBjQ=xjjhfVgjjhfVjjheV_^][ÐD$S\$ Ul$(VW3P;}!At|hUAV!AXAtI3ɍT$L$RL$D$L$L$ L$$Ћ|+D$L$VM!A_^][EV!A_^][_^]@[ÁPS$dU$`V$hW$d  S E3Ɋ@$@5\"AhjhjBhPAB(A AT$ ABhAhVAh A'$p j@hLAh ART#A AD$PhYAh AL$hVAQD$  A5 AT$D$jRjjhLAAPjhDSAL$jjhVAQ֍T$ jD$RjjhVAPD$8֍L$ jT$QjjhdAARhYAhVAhA&A3 IQhAjPD$ h8AAP֋L$Q$ A"A$dPhVAR n AD$PhYAhӅuSL$5( AhVAQh|VAT$R֋=$ AD$P׍L$QhXVAhӅuT$hLAR֋D$P׋$dQ!$t`ARl#Aoj"A_^]3[PDAK"A>$d$PV"A$QV"A_^][P(A B;PH"A_^][PE=3Ҋ,@$@$l$pE=l=jt_^][PMu,F#A@ADAt!D$LPV AL$XT$LQR AjFL$LD$4F QȉL$ fRQ AT$XD$LRP A3ɸMbfN3ѹfT$dfFfT$f$$j@RD$`jPjh A,A$$j:Qu,$,+Š$t t %@u$3+$ȍ$$T$f$QM RPhLVAQP#3_^][P$$3+ы} ʃ_^][PFE $hDVAP"3_^][PDAtt,tu _^]3[P_E 0lA^]3[PthE 0lA_^]3[P`AjjRL"A_^]3[P`AE $DŽ$QjhR$x#A$t P7),|ዌ$Q)3_^][Peb3Ҋ$@$@$djhSWASAl"APx"AdAjhSh+Px#AL$4Q4#ApAh@0D$VPj(D$ "AP, Au^0ËT$8L$ QRj Au^0ËD$ L$5 AD$(T$D$L$,RT$ PL$,jQjRD$<D$Hօu^0ËD$ L$T$D$D$ j jD$(D$L$$L$RPjQD$,^0Ð(D$,VW3hZAP|$D$0m@|$|$D$ "AhWD$$\"AD$ D$$D$(YAxPrt$ +}F;]rFt V~Yuy}t 3u+Wuvy tGE+;r>})EVP>YYt.EFKEEPE_^[ÃN E+3u Vu^WVt$t$t$VA _^j@t$ t$ U EVEEEEBPEu EP MxE EPjoYY^ËL$D$VfpfAAft ffFF^ËL$f9At f@@fu+HËL$ WtzVSًt$|$uuo!FGIt%t)uuQt FGt/KuD$[^_tGIuulGKu[^D$_ÉIt~Ѓ3‹tބt,tt uƉ3҉3It 3IuuD$[^_̍B[Í$d$3D$ST$t B8tфtQu WV ؋ ~333ƃu%t%uu^_[3ËB8t6t8t't8tt8tt^_B[ÍB^_[ÍB^_[ÍB^_[Q=L$r-=s+ȋą@PU EEIPEEE(EEPEu Py̋L$WSV|$tiqtOL$F8tt F8t u^[_3ÊF8u~at(8uĊAtf8t3^[_cG^[_Ë^[_UWVSM&ً}3ˋu F3:GwtIIы[^_SUVW|$=ƃY C dt W/Y3_^Vt$F ttvff 3YFF^Vt$V#Yt^F @tv?Y^3^SVt$ 3WF ȃu7ft1F>+~&WPv ;uF t$F N Ff_^[jYSVWj33t3Y95C~t Ct_@ tYPV CYYH t0|$uPYtC|$utPYu C4VYYF;5C|jO|$Yt_^[USVu F ^@tfN$F F fe $ f F u"\At\Au S?YuVj?YfF WtgF>+HNIN~WPS~ E 6tˋ C8eA@ t jjS.> FMjE_WPS( E 9} _tN E% F ^[]Vt$;5 Cs@΋ CDt%WV<t$t$V(V<_^'- %- ^USVW39}}}u3fE CE4D0 tjWu= @E 9}E}M+M ;Ms)ME uE @@ȍ+ʁ|̋+EjPWP40`!AtCEE;| E+E ;Er3E;9}tbj^9uuL, ,0A"AEǍMWQuu 0`!At E}E"AEuM+Y,D0@t E 8++8+E_^[UWVu M};v;xur)$H@Ǻr $`@$X@$ܲ@p@@@#ъFGFGr$H@I#ъFGr$H@#ъFGr$H@I?@,@$@@@ @@@DDDDDDDDDDDDDD$H@X@`@l@@E^_ÐE^_ÐFGE^_ÍIFGFGE^_Ðt1|9u$r $@$@IǺr +$@$@@@@@F#шGNOr$@IF#шGFGr$@F#шGFGFGZ$@I@@@@@@Ĵ@״@DDDDDDDDD D DDDD$@@@@@E^_ÐFGE^_ÍIFGFGE^_ÐFGFGFGE^_UQQSV58AW} 3ۉ]]M5M,*u#EPYEM؉EEˍDAU*uEPYEMˍDAЉEIt.ht ltwMMM ?6u4uGGM} lUЋ 0_AUDAtEPuP G} EPuPf %ÃgeXxCHHtpHHtl fE0uMuuEPfEYȉMu _AMENf8@@E M@;ʉ}EfE0uMfEEPt;0PP7 E}2E)Zt2 tHYEEEPYt3Ht,EtMEEeM_AEPu guEEũEuHM@EPPEP$cAut}uP0cAYguuP(cAY-u M}WYiHHtQHHE'<+u _AMNt8t@+EEEEt]EE0QEEHEEt;M5EPE Yt fMfME#M@E Et EPYAE t!E@EPt Y%YE@EPtYY3E@t|s؃ڀMEu}} Ee ueEEEM t;ERPWVEU6uċ؃0uWV59~]ԋEM뵍E+EEEEtM90uu M@M0E}]@t&tE-tE+ t E Eu+u+u uEPuVj EPEuuP2tuEPuVj0}tA}~;E]xfCPEPC3YY~2MQuPEPOuEPuuuEtEPuVj q} Gۉ} E_^[ @@@I@@@@P@UM IxE Qu&YYEu]]VW|$O~!t$Vt$t$ >tO_^S\$ KVW~&|$t$WFt$Pu ?tK_^[ËD$@ËD$AQËD$f@UeSVu 3W]] }}3ۃ=%eeeeee3e]]]E]^F=t^*t2FtTIt Lu7EE~6u,~4Fu#EЃee'E"htlt wtEEEMM}O}u uEEE@EԀe}uM}u>%uME xnuDV0uMuMWSYYMWP}MWSs}uE̅u 8EuE_^[Ã=WjjYuj Yj>YWu \!A>8Yj Y_6h!A^]UE4TaAd!A]h@j5 C!A CuÃ% C% Cj C CXá C C ;sT$+P r3UU MSVA+q ZW΋ziK}D]M Muj?I_M ;v} L;LuHM sL!|D u+M!9$M L! uM!yL|yL|]y]O?vj?_MM+UMj?UIZ;ʉM vU ]]O;v;tkMQ;QuHM sL!TD u+M!$M L! uM!QMQIJMQIJU}u 9} M IJM JQJQJ;JucL MLs%}uM DD )}uOM YO 8]E\ C C=P!AH h@SQ׋ C C P C C@ C@HC CHyCu ` CxulSjp ס Cpj5 C!A C Cȡ C+ȍLQHQP'E C; Cv C CE C5 C_^[U C CSVWu; CuM; Cu% CMB_^[á C CVW3;u0DPP5 CW5 CD!A;ta C C C ChAj5 C4!A;ljFt*jh hWH!A;ljF uvW5 C!A3N>~ CF_^UQMSVWqA3ۅ|Cj?iZ0DE@@Jujy hhWH!Aup;w^fN jX_[^3^Ã|$Vt t$ F tVf f&fY^Ujhx$AhD@dPd%SVWe39=AuFWWj[Sht$AVW4!AtA"WWShp$AVW8!A"A9}~uuYYEAuuuuuu u8!A9} uܔAE WWuuE$@Pu -PvYY>-u-G9] ~PH @aA38]h$AM Q#9]YYtEF A80t<^Ky-Ad|jd^ÙA |j ^ÙY_^[]U(EVPEPEQQ$*uEPEP3}-E P*EjPVu E ,^USVu]WFH}t;E u3Ƀ>-ˋ0`>-u-{FjW?Y0YG} ~DjW'@aAYvGY}+}t9u |u u Wu j0W_^[]U(SVEWPEPEQQ$)E]p3}-E EPSW(EH;|&;}"t Gu GEjPSu EjPuSu _^[U}et2}Et,}fuuu uN ]uuu u4uuu u]W|$ tVt$ V-@PVV2^_VvL$3@cA;t"F=dA|r"$wB ^5 DcA^Árw ^^tk V ,!AdAt:jtjOYYt)V5dAx!AtVY0!ANjX^3^ËD$@PdA@VW"A5dA(!Au?jtjYYt&V5dAx!AtVY0!ANjYW!A_^ádAVt$u P(!AtlF$tPYF(tPYF0tPYF8tPYF@tPYFDtPzYFP=dAtPiYVbYj5dAx!A^SVt$ Wt$w uj^3w:;bAwj Sj u+Vj5 C!Au"=HAtVYtSjWY _^[3x\Ath@Ah@Ah@Ah@Ajjt$  jjt$  Wj_9=(Aut$"AP$!A|$ S\$=$A Au< Ct" CVq;rtЃ;5 Cs^h @Ah@ACYYh(@Ah$@A2YY[t_t$=(Al!A_j EYj YVt$;t$ s tЃ^UQSVAvPu&YYXۉ]u `jXNTMM NTH(eA ,eAW;}' R~P d9=(eA,eAB;|]~X=u FX^=u FXN=u FX>=u FX.=u FX=u FX=uFXvXjY~XY_`QYEFT u  !A^[ËT$ 4eAVt$92Wt"u F < vF> wt< v^S39 CVWub(58A3:t<=tGVYtPY;5Auj 4Y=8A8t9UWGYE?=t"Uf;Yuj YW6YY8u]58A2Y8A_^ C[UQQS39 CVWu',AhVS AC5A8tEPEPSSWMEMPƿ;ujcYEPEPEPVWEH5A_^A[UMESV!uW} Et7} 8"uDP@"t)t% Ct tF@tՊFt&F8"uF@CtF@ Ct tF@ t t ūuHtfe8 t u@8t7} UE3ۀ8\u@C8"u,u%39}t x"Pu}} 39U‰UKtCt\FKutJ}u t? t:}t.t CtF@F Ct@@Xt&Ft'E_^[]QQ0ASU-!AVW333;u3Ջ;t 0A(!A;0A;u Ջ;f9t@@f9u@@f9u+Ƌ=@!ASS@SSPVSSD$4׋;t2U3;YD$t#SSUPt$$VSSׅut$ Y\$\$V!ASuL;u !A;t<8t @8u@8u+@U̼Y;u3 UWV[ W!A3_^][YYUHSVWh菼Yuj.Y5 C C ;sffF C$ލEPp!Af}E8X;E;|9= C}V ChYt< C ;s``@ $9= C|= C3~LEt8t2u Q!At#΋ CM  HEFC;|3ۋ Cۃ<4uMFujX HP!AtW!At %>uN@u NNC|5 C !A_^[á@At u*=\Au!h4AYthYUU3ɸ`eA;t A=eA|V;`eA@Au =\A\hPj Au\h'APYY\WP\@Y C C;s``@ $WOYjY_^][YYËL$V; CWsU< C4<0u6=\AS\$utItIuSjSjSj"A03[w u _^ËL$V; CWsX< C4@t78t2=\Au3+tItIuPjPjPj"A 03 _^ËD$; Csȃ CDt ËD$SȃVW4 C C<~u#j~Yu F P\!AFjYD8 Ph!A_^[ËD$ȃ CD Pd!AS\$; CVWsr< CÃ4D0tRSJYD0t)SYP Au "A3t0 SbY _^[Vt$;5 Cs@΋ CDt%WVt$t$V(V_^< : ^Vt$WV9Yu  -t$jt$P Au"A3t PkY΃Ƌ CdD_^DAh}YL$At I AI AAAAaËD$; Cr3Ëȃ CD@UM S3VWE ]t ]E eEu@u9AtMj^#+tHtHEE@EEt& t0t @utuE E]#ʿ;1t*;t&;ttMu+ELECu>t/t;t#@>EEE t A#Muj^@t Mt t t؃;u *jVuEPuuu!A;u"AP YV!Au V"A؃uM@ uMVShYYM< CÀM 4e HL0uxtsE tmjjS Eu8tKSYXeEjPS# u}uuSYYtjjS t} uE t L0 D0S?Y_^[USV CWV!A=!A39 CtVjYj[u uYE Yt jYV׋E _^[]UEu]Ã=̔AufM fw9jX]ÍMeQj5EPj^Vht$AV AtEPVhp$AVS AjX1uBW~@PWV_^[]U(VEWPEPGYEYuPjj f u}FEډE؉FEPW ~ _^UQU SVWfB%#ωE Bپ%ۉut;t<(!3;u;uEXfXK<] ȋE M Huɋ ٍ XߋM fH_^[j/Yjjt$  D$L$ Cu|$tE:_A#D$3ujXUSVWjuY;l CY]u3pV3Ҹ(fA9tt0B=gA|EPS Aj^;!j@% CY3 C9u󫪉l C}MA; C@ej@Y3 C4R8fA;t,Qt%;wU fA C@;vAA9uE}rE| CPl C,fAp CY CRAAyGƀ C@=rSY C5| C%| C3p C=AtjpY_^[ËD$%AuA% AuA% AuܔAAËD$-t"t t Ht3øøøøWj@Y3 C3p Cl C| C C_UEVP5l C A3@;rEƅ t7SWU ;w+ȍA ˃BBBu_[j5 C5l CPVPjj5l CVPVPV5 Cj5l CVPVPh5 C\3ft C Ct C 〠 C@AA;rI3ArZw CȀ Carzw C Ȁ C@;r^Ã= CujY CS39AVWuBh (A!A;tg5!Ah(AWօAtPh'AWh'AWA֣AAtЋ؅tAtSЋt$t$t$SA_^[3USV3jVu ;ÉEjVu ;W} +~uSVPhu E ;}PPuK t+~S8u @ u uK YYH}Fju uu-P AN;u "A8juu _^[UWVSu }ĔAxu; t.F'G8t,A<ɀ A,A<ɀ A8tx C= Cj Cj菾$3ې t'FG8tPS,؃"8tX u C j蟾[^_UWVSM u} ĔAxuNAZ I& t! tFG8r8w8r8w8u Iu38 C= Cj Cj蟽$33ۋ t# tFGQPS;؃1Y;u Iu3;t rX u Cj蠽ˋ[^_ËT$Vt$ 3 2;r;sjXT$^ Vt$W|$V76 tFPj0 tFFPw0 tFFPw0 _^ËD$VW0x04? H׉p _H^ËD$VWPH ΉH _P^UE S]3;VEN@SSvQWE}SpSjEPSSZEeeEEPSEMu3_9Su(KC EsӾsuSEYfE^fC [U\SVW}EjE3ZE؉UEEE܉EEԉEЉEEE} t t t uGj^G w$A1| 9j:@aAujFÃ+tHHtjEX맃ejX란1U|9~:@aA+t1-t,0tRCE~c{erjOj 1| 9V:@aAY0U9<.<<<;;;;;;;v;j;R;:;,;; ;::::::00////////t/h/\/P/B/4/$///........x.h.X.F.6."..4=.:9:776661122,2@2N2*7666z6X6F686,6 6665>7J76555\2j2z225555p5T5>5.55554444444|4h4V4N4B464"4443333333~3l3Z3L3<3&332222222h6|:f:T:888888C@C@V]@\]@V5B@V@@@EEE50P (8PX700WP `h````ppxxxx(null)(null)6@:@@@?~PAGAIsProcessorFeaturePresentKERNEL32e+000runtime error TLOSS error SING error DOMAIN error R6028 - unable to initialize heap R6027 - not enough space for lowio initialization R6026 - not enough space for stdio initialization R6025 - pure virtual function call R6024 - not enough space for _onexit/atexit table R6019 - unable to open console device R6018 - unexpected heap error R6017 - unexpected multithread lock error R6016 - not enough space for thread data abnormal program termination R6009 - not enough space for environment R6008 - not enough space for arguments R6002 - floating point not loaded Microsoft Visual C++ Runtime Library Runtime Error! Program: ...@@GetLastActivePopupGetActiveWindowMessageBoxAuser32.dllH:mm:ssdddd, MMMM dd, yyyyM/d/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMarchFebruaryJanuaryDecNovOctSepAugJulJunMayAprMarFebJanSaturdayFridayThursdayWednesdayTuesdayMondaySundaySatFriThuWedTueMonSun1#QNAN1#INF1#IND1#SNANSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDec*1 ,V74"*8@ -8#P*9 t,(:$"*F:4 -:#9999999x9f9X9H9494:d8T8B848887b7r77777777z877@0V0h000000011,1D1R1n11111=====|=j=X=D=20&===<<<<<n<`<T<><.<<<;;;;;;;v;j;R;:;,;; ;::::::00////////t/h/\/P/B/4/$///........x.h.X.F.6."..4=.:9:776661122,2@2N2*7666z6X6F686,6 6665>7J76555\2j2z225555p5T5>5.55554444444|4h4V4N4B464"4443333333~3l3Z3L3<3&332222222h6|:f:T:8888884CloseHandleqGetLastErrorBGetCurrentProcesseLockResourceUSizeofResourceWLoadResourceFindResourceASCreateFileA(SetLastErrorGetProcAddressGetModuleHandleA\LocalFreeRLoadLibraryAXLocalAllocSetEventDeviceIoControlGetTickCountGlobalReAlloc GlobalUnlockGlobalLockGlobalAlloclstrcatAHeapFreelstrlenAlstrcpyAHeapAllocGetProcessHeapReadProcessMemoryOpenProcessVSleepGetVersionExAGetUserDefaultLangIDFormatMessageAWaitForMultipleObjectsWaitForSingleObjectFreeLibrarySetFileAttributesAGetTimeFormatADosDateTimeToFileTimeFileTimeToSystemTimeFileTimeToLocalFileTimeOCreateEventACGetCurrentProcessIdXGetEnvironmentVariableADeleteFileA}GetModuleFileNameAGetSystemDirectoryA@GetCurrentDirectoryAGetVersionQueryPerformanceFrequencyfCreateProcessAGetCommandLineAExpandEnvironmentStringsA^GetFileAttributesAGlobalMemoryStatusKERNEL32.dllMSetCursorInvalidateRect<ChildWindowFromPointZGetSysColor[GetSysColorBrushLoadCursorAGetDlgItemMoveWindowtGetWindowRectEGetParentEndDialogDialogBoxIndirectParamA;SendMessageASetWindowTextAInflateRectVSetFocus;CheckRadioButton'RegisterWindowMessageAPostMessageAIsDlgButtonCheckedEnableWindowMessageBoxA8CheckDlgButtonSSetDlgItemTextAIsWindowEnabledInvalidateRgnGetDlgItemTextADefWindowProcADestroyWindow GetCursorPos1ScreenToClient@ClientToScreenzSetTimerShowWindow]GetSystemMetricsGetFocusDrawTextA GetDCBCloseClipboardJSetClipboardDataEmptyClipboardOpenClipboard)ReleaseCaptureDSetCaptureCallWindowProcA`CreateWindowExAGetClientRectDrawIconExSetWindowLongALoadIconASetWindowPosFindWindowExAWSetForegroundWindow{GetWindowThreadProcessIdWaitForInputIdleFindWindowAEnumDisplaySettingsAPostQuitMessagewsprintfA*ReleaseDCWinHelpALoadStringAEnableMenuItemDestroyMenuTrackPopupMenuLoadMenuAEndPaint BeginPaintDialogBoxParamA9CheckMenuItemInsertMenuItemA2GetMenuItemCountYGetSubMenu,GetMenuRegisterClassAUpdateWindowDispatchMessageATranslateMessageIsDialogMessageATranslateAcceleratorA:GetMessageALoadAcceleratorsAIsZoomedIsIconicUSER32.dllSelectObject<SetTextColorSetBkMode:CreateFontIndirectAGetObjectAGetStockObjectEndDocEndPageHStartPageEStartDocA+SetMapModekGetDeviceCapsSetBkColorGetTextExtentPoint32AExtTextOutAGetTextMetricsADeleteObject-CreateCompatibleDCPCreateSolidBrushGDI32.dllPrintDlgAChooseColorAFindTextA GetOpenFileNameA GetSaveFileNameAChooseFontAcomdlg32.dllAdjustTokenPrivilegesOLookupPrivilegeValueAOpenProcessTokenRegDeleteKeyARegCloseKeyRegSetValueExARegCreateKeyARegQueryValueExAILookupAccountSidAGetTokenInformationRegOpenKeyARegDeleteValueAADVAPI32.dllShellExecuteASHGetFileInfoAShellExecuteExASHELL32.dll CreateToolbarExCOMCTL32.dll VerQueryValueAGetFileVersionInfoAGetFileVersionInfoSizeAVERSION.dllRtlUnwind(InterlockedDecrement,InterlockedIncrementResumeThreadoCreateThreadfTlsSetValueExitThreadGetStartupInfoAExitProcessEnterCriticalSectionQLeaveCriticalSectionWriteFile#InitializeCriticalSectionHeapDestroyHeapCreateVirtualFreeDeleteCriticalSectionVirtualAllocHeapReAllocWideCharToMultiByteuMultiByteToWideCharDLCMapStringAELCMapStringWFGetCurrentThreadIdcTlsAlloceTlsGetValue^TerminateProcessnUnhandledExceptionFilterFreeEnvironmentStringsAFreeEnvironmentStringsWUGetEnvironmentStringsWGetEnvironmentStringsW$SetHandleCountGetStdHandlefGetFileType7SetStdHandleFlushFileBuffersSetFilePointerGetStringTypeAGetStringTypeWReadFileGetCPInfoGetACPGetOEMCPSetEndOfFileT@ A@openhttp://www.sysinternals.comHANDwbBINRES\\.\Global\%s\\.\%s%s\Security%s\Enum\Registry\Machine\System\CurrentControlSet\Services\%sRtlFreeUnicodeStringNtLoadDriverRtlAnsiStringToUnicodeStringntdll.dllRtlNtStatusToDosErrorImagePath\??\%sStartErrorControlTypeSystem\CurrentControlSet\Services\%sSeLoadDriverPrivilegeAA{\rtf1\ansi\ansicpg1252\deff0{\fonttbl{\f0\fswiss\fprq2\fcharset0 Microsoft Sans Serif;}{\f1\fnil\fcharset2 Symbol;}} {\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\qc\lang1033\b\f0\fs20 Sysinternals Software Licensing\par \par \pard\b0 This software is provided "as is" and use of the software is at your own risk. Sysinternals disclaims any and all warranties, whether express, implied or statutory, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose or non-infringement of third-party rights. Sysinternals does not warrant that the software is free of defects. \par \par You are allowed to use software published by Sysinternals at home or at work without paying a commercial license fee provided that you downloaded the software yourself directly from Sysinternals, and: \par \pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Use the software on computers for which you are the primary user; or \par {\pntext\f1\'B7\tab}Use the software on computers for which there is no primary user (e.g. servers, including Terminal Servers) and you are a full-time employee of the company that owns the computer; or \par {\pntext\f1\'B7\tab}Use the software on computers within your residence \par \pard\par A commercial license is required to use the software in any way not covered above, including for example: \par \pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Redistributing the software in any manner, including by computer media, a file server, an email attachment, etc. \par {\pntext\f1\'B7\tab}Embedding the software in or linking it to ano\tab ther program including internal applications, scripts, batch files, etc.\par {\pntext\f1\'B7\tab}Use of the software for technical support on customer computers \par \pard\par Sales of commercial licenses support Sysinternals product development and assure that this Web site continues to offer valuable, up-to-date tools. Established software companies redistribute these utilities and incorporate the code into their products because this offers the potential to save significant development time. Sysinternals commercial licenses are priced according to the complexity of the licensed code and its role in the target application. If you are interested in licensing Sysinternals tools or source code for redistribution or for inclusion with or as part of a software product, please contact licensing@sysinternals.com. \par \par } RICHEDIT&Print&Decline&AgreeMS Shell DlgLicense AgreementRiched32.dllEulaAcceptedSoftware\Sysinternals\%s%s License AgreementSysinternals Licensecommdlg_SetRGBColorcommdlg_ColorOKCHOOSECOLORFG%s%s%s*Couldn't access device driverRegmon 0Invalid History Depth.Filter Error%dNo process selected;Filter size exceeded:......MAMAMAMAMAMAMAOtherResultPathRequestProcessTime#Cannot find string "%s"No items to searchUnable to create Find dialog %s The file contains invalid log entries and will not be fully processed.Log File Open ErrorError opening %s.r*.logOpen Regmon Log File...Regmon Data (*.LOG)*.LOGAll (*.*)*.*Regmon.log%s Create File Failed.Save ErrorwSave Regmon Output to File...BALLOONballoonSysListView32RtlFreeAnsiStringRtlUnicodeStringToAnsiStringNtQueryInformationProcessModule32NextModule32FirstProcess32NextProcess32Firstkernel32.dllCreateToolhelp32Snapshot\Process is not accessible%X%d.%02d.%04d.%04d\StringFileInfo\%04X%04X\%sn/aCompanyNameFileDescriptionUnable to query properties for %s%sG dRST ]V [X \G dRST ]V [X \System Bus ExtenderSysTreeView32Regmon was unable to launch Regedit.regedit.exeRegEdit_RegEdit\HKEY_USERS%sHKU\HKEY_CLASSES_ROOT%sHKCR\HKEY_CURRENT_CONFIG%sHKCC\HKEY_CURRENT_USER%sHKCU\HKEY_LOCAL_MACHINE%sHKLMThe full name of the selected key or value is not available.%s Make sure that your account has the load driver privilege and and that Regmon is not already running.%s: %sError adding item %d to list viewDllGetVersionPropertiesFilterRegmon has been configured to log Registry activity to %s during the next bootUnable to copy %s to %s Make sure that %s is in the current directory and that you have permission to the \System32\Drivers directory.Historyregmon.hlpAboutBoxCONTEXT%10.8f%s.%03d%sSystem\CurrentControlSet\ServicesEnumSecurityRegmon could not configure boot loggingSystem32\Drivers\%sTagGroupDeleteFlagRegmon is configured to log Registry activity to %s during the next bootInitFilter%s is not loaded properly.\\.\REGVXD.VXDCould not install Regmon VxDRREGMONVXDREGVXD.VXDRegmon located a driver with the wrong version. If you just installed a new version you must reboot before you are able to use it.%s\REGMON.LOGCould not resolve SYSTEMROOT environment variableSYSTEMROOTError loading %sCould not extract Regmon driver to %s%s\%sRREGMONSYSRREGMONWNETSYSRREGMONSYSX64IsWow64ProcessRegmon is already running on this systemRegmon requires the Load Driver and Debug privilegesREGMON701%s\Drivers\%sGetSystemWow64DirectoryASystem\CurrentControlSet\Services\REGMON701\%sREGSYS701.SYSLog &Bootcomctl32.dll%d-%dLISTMENUICONRegmon usage: Regmon [-q] [-o] -q Don't prompt for filter confirmation on startup -o Start with capture offRegistry Monitor - Sysinternals: www.sysinternals.com-O/O-Q/Q-?/?%TEMP%RREGMON6464.exeACCELERATORScommdlg_FindReplaceYour account does not have the Debug Programs privilege, which is required to run RegmonSeDebugPrivilegeUnable to extract x64 image. Run Handle from a writeable directory. HiFiltersExFiltersInFiltersSettingsSoftware\Sysinternals\RegmonMS Sans SerifSoftware\Systems Internals\Regmon us@@@@ C Ch$AX$A - ]]:_A:_A ((((( H .PAAAhACCCAAAAAA        ! 5A CPR S WY l m pr   )     x @'A'A &A &A&Ah&AD&A&A%A%A%AH%A %Ax%Ay%Az$ANA$A5 @ `y!@~ڣ @ڣ AϢ[@~QQ^ _j21~ gA8)A4)A0)A,)A()A$)A )A)A)A)A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(A(Ax(Ap(Ad(A\(AP(AD(A@(A<(A4(A (A(A.gAAAAAAAAAAgApPSTPDThA\hA;Zx0Nm:Yw/Ml@@@@ @P@$@@ @4@N@ p+ŝi@]%O@qוC)@D@<զIx@oGAkU'9p|Bݎ~QCv)/&D(DJzEeǑF e uuvHMXB䧓9;5SM]=];Z] T7aZ%]g']݀nLɛ R`%u?q= ףp= ף?Zd;On?,eX?#GGŧ?@il7?3=BzՔ?aw̫?/L[Mľ?S;uD?g9Eϔ?$#⼺;1az?aUY~S|_?/D?$?9'*?}d|FU>c{#Tw=:zc%C1About RegmonMS Sans SerifP / OKP1 0Regmon v7.03P1)zMark Russinovich and Bryce CogswellP1JCopyright 1996-2006P ICONP1rSysinternals - www.sysinternals.comȀ DialogMS Sans SerifP~2&OKP = P 1Path:P "Version:P/"BStaticP  P/ P/P N/Command line:P Y P nUser:PntStaticȀ%Regmon FilterMS Sans SerifB#P./@B#P.?@B#P.O@PEnter multiple filter match strings separated by the ';' character. '*' is a wildcard.P2Include:PBExclude:PThese filters were active the last time you exited Regmon. The settings you configure will be enabled when Regmon starts monitoring.PRHighlight:P*2&ApplyPh2&DefaultsP2&CancelP2&OK#PcB Log Successes:#PnB Log Errors:#P\c8 Log Reads:#P\n8 Log Writes:#Pc8 Log Opens:Ȁd2:Regmon History DepthMS Sans Serif P? 0 Po msctls_updown32Spin1P2&OKP2&UnlimitedP&2&CancelP"-History Depth:P|A History Depth of 0 signifies no depth limit (all output is retained).Ȁd2'iRegmon FilterMS Sans SerifB#P,@B#P,+@B#P,;@X*2&ApplyPS2&DefaultsP2&CancelPEnter multiple filter match strings separated by the ';' character. '*' is a wildcard.P Include:P -Exclude:P>Highlight:P2&OK#PNB Log Successes:#PYB Log Errors:#P^N8 Log Reads:#P^Y8 Log Writes:#PN8 Log Opens:(興興o`3x n`ww33333fff``wx333303|y po`33333w n`` x33330333333yppf`{x33陙 w```{x0~~~~p`f``{x0陘 pwwwwp~```p0yy~f`g` 0~~wwwv戀| w{0~p~px`p wx0ww興vxwww4VS_VERSION_INFO?StringFileInfo040904b0Comments: CompanyNameSysinternalsdFileDescriptionSysinternals Registry Monitor*FileVersion7.03.InternalNameRegmon:LegalCopyrightCopyright 1996-2006 Mark Russinovich and Bryce Cogswell(LegalTrademarks> OriginalFilenameRegmon.exe PrivateBuildHProductNameSysinternals Regmon.ProductVersion7.03 SpecialBuildDVarFileInfo$Translation  AS Cg ER FX H[ J\ LV Pe SG T].bpQrfrcXT ( @?/o   @4( @~v~~n~vg`L~v~~n~v`g``Lffffwv``````L~v~~f`dfff~v~~ffvhpf`wwf~vnpffx`~~~f~v`hgww``x~nff~``wv`gff`nfnvv`f`gfngf~~v`fgfvxnv~~px`~~~vv``ff~~v`fv`fg`v`~~pp????( `Ўnff` h~p``~h`n`n`<I$H$@   _ (MZ@ !L!This program cannot be run in DOS mode. $}ȧ?ddd⛣d㛦d盦RichPELD  D6PLP,QxQ@P.textD;< h.rdata$P@@H.data%`D@INITpT .rsrc\@B.reloc.`@BUVuF Puv Fv$vV(^]̋UMfAAf;Ar u AQ, U P]̋UEt<*t2]̋UVW}t5u <*t0t[*tt9u25G(t&,P ~NM 0F+AujS4P_[^]̋USVW3WWWW}V,P]% ~3;t*9t Ћ@;u;t;tHJPWP(PWV4P_^[]̋UV39uv#M U+ъh4|*?)$[)  ( O;tw?O)$)< sL iX _h Ux K A 7 - # V;TtH=Pt7=Qt&=Tt=U   !$!=~t7=t&=t=`0!D!\!~h!t|!j;U? *$)!0!&!!!!""("4"H"X"h"x""";;vtj=tY=tH=t7=t&=t= "F"<"2"(""# =(tH=Kt7=Lt&=Mt=|# #,#@#L#X#;Ht?=t1= t#=Wt=muDp#y#r#k#d#]#VȁtGIt=t1t%ItVPh# VP ^!### #$]T%%h%%%^%J%|%r%)   %& && &%%*&%)   O'Y'c'm'w'''''';'''1''E')    ̋SV339sW=(PvS4@|F;5sr39svS4F;5sr_^ss[**%s%s%s̋UW}?S]V3?ut~<>;t F<>uutjhDdk F Pj$PM <tI~*E *t*?**t*RWPh*4PE u?t G?g^[_] ̋VW3WWWW}V,Phsh@|h thshh xWV4P_^̋USVW3SSSS}V,Ps3;vu4u)G;rs3;vu4@|uG;r] SV4PE _^[]E ̋U eVuEPjF PF(ES^,W=\\REGISTRY\\_CLASSES\Software\Classesj$h QDoE}!Ddk Shj=$P׉Eh@}&u}E}3PPPP}V,PE% ~ M9t@ut U+Њ @ujV4PjV4PShj׋ujY4.}ffFEPhVu|LjVEPPh2lP tF0|3_^Ë:%d???̋U=(|VtNXP (|ujQVDPƃ FH@u+WPPh43WP _ u83^]̋UQSVW3SSSS@WE,P5~~ M9Nt6;uSW4P3_^[NSWH4PE;Ë>tNF;t Ph@}Vh̀=st5~5~s̋UW39=su =sSVWWWWh`,PE Pu`oVP V3ɸtAsLr s|tGPPjPG W~)G ~Gȃs3Wh`4P^[_]%s CloseKey %s %s̋U$DoVuEE tEP'=$|t+jet jZPVEPPh`5Vh@}`M3^%s DeleteKey %s %s Key: 0x%X̋U$DoVu W}EtB=#|t.ut"WuPVEPPh5Vh@}ME_^ %s DeleteValueKey %s %s j0h0Q$DoEu }h@}JEePWV3@ËeM}tE=#|t/ut#uPuEP:Phz6euh@}EM4 %s SetValue %s %s %sh8h@QiDoE] uEh@}t`+Њ @uet f>u Dž0`WSM3@ËeMƅu|#t.Pu u"u PZtD=#|t0Vt&PVPWEPPh67Wh@}ƋM%s EnumerateKey %s %s %s̋U(DoS]Vu W@}WEAPjVuƅ|hPSuw"u PstJ="|t5Vt+PVPEPPh8'WM_^[%s QueryKey %s %s %s̋U,DoSVW} EEh@}EThDdk VjE$Pu؋jW}}tjtY|VSuux"uSz="|t,Wt"SWPu؍EPPhr9@uh@}t jS(PM_^[%s SetInformationKey %s %s %s̋U,DoSVW} EEh@}EVhDdk VjE$Pu؋jW}tZtIVSuu=#|t0ut$SuPu؍EP*Phf:Uuh@}t jS(PME_^[\%s EnumerateValue %s %s %s̋U$DoSVu W}h@}EjSjV}ƅ|RPPWuoOGGuR;fp@u+ƹ+QPS@P }"u P]="|t4ut(PuPSEPPhV;Sh@}ME_^[ %s QueryValue %s %s %sh8hPQDoE] uEh@}u Dž0`WSM3@ËeMtƅu|jPu"u P="|t0Vt&PVPWEPPh~<Wh@}EM E OpenKeyRenameKeyCreateKey%s %s %s %s %s̋UHDoS] VuEAW$IA=$|Pt~|6cW6à t HHtttHHuh= h=h=EPPYYFƅ}="u PvHt,Pv5PWEPEPZPh=Wh@}72P6vj{ppp pp6vjNp6vj-ppp pp6vjzppp pp6v\jMpp pp6v2j#ppp pp6vlPw0,j^jRv FvP6P hy 73;މGtJtE tt tt twCh@}:;ƉGt2Puq11qh@};ƉGt PV0VVVV@V,P ~G @~jAV~4P_M^3[ @)>?4?a?]@6>???@Q@3@8A  38suh~Ph=t |sjh`Q3}$7wE ===c=tn=t7=t jY9ME;O}9uu t3@EPuuPMVVVV`S,P}sVS4P 2As90u9puVS4Pw!!};=stEVS4PEw}ȃEU$Jj}t P(Ps S4P3@ËeE$ MPVVVV`S,PHQPQ(P tsV9pu߉05tP~~V@}r4E;t-usM3@ËeE$ M $̋U4SVu F`V 3W~^+ˉU tnIItN tII15s!H uN<M uWp pQpRjpIs!3@sB;~jẺEXEԍE3PM؉]PPPEPEPPEPu P"P8stTusP=,PSSSSh`SEPE]]0PSSSSh Sh`4P2ҋP_^[\Device\Regmon701\DosDevices\Regmon701Start Regmon is logging Registry activity to \SystemRoot\Regmon.log Start̋UlSVWDoj ] Yj E}YE}E}j YEEE@hDdk @Pjf$P3;u ffȋ3ʃPsP jYj3_VVPDž VDžtFPPhPDžDž@P|DEPPDž xPW PWVPPP=xPEPP׍EPP׋hVVhPVWP;|+PPP;޸DGpG@G8Gx};PP=PVh`Vh}Vh}׹k$X@u+Éρ8p|`iX@u+Éρk|=PhRegmSjVVVh׸~Vh@ ~~PhShVVVh@}(|hDdk 3hGW$P;ƣsu"5PPPz0sp=t8` ttHjjh sdPPPxPPP5P3M_^[4̋UQMj5@o5DouhP; Dou u%HP%TP%\P%`P%hP%pPhKdPD$l$l$+SVWEePEEEEdËMd Y_^[Q%tP%|P%P%P*N *8Pd|Ԓޒ.H^~“̓ؑ $6NbnΔ*L^Εڕ ȑDVQA006677==CCTCXCHDo RRSDSw5XGF8e:\src\filereg\regmon\sys\objfre_wnet_x86\i386\Regswnet70.pdbK*** Invalid Name ****(Default)`*\\REGISTRY\USER\SHKCUHKU\SHKCU\\REGISTRY\USERHKU\\REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENTHKCC\\REGISTRY\MACHINE\SOFTWARE\CLASSESHKCR\\REGISTRY\MACHINEHKLMNot enough disk space for log file D@UDo@t;u#PDo3%DouDoУ@o]:PFPdP*N *8Pd|Ԓޒ.H^~“̓ؑ $6NbnΔ*L^Εڕ ȑ?InterlockedPopEntrySList@InterlockedPushEntrySListcZwCreateFilelRtlInitUnicodeStringKeSetEvent^ZwCloseZwSetInformationFilesprintfZwWriteFileEExAllocatePoolWithTagWExFreePoolWithTagKeWaitForSingleObjectzExQueueWorkItem~KeReleaseMutexORtlFreeAnsiStringRtlUnicodeStringToAnsiString strncatstrncpyLsaFreeReturnBufferuObfDereferenceObjectjObOpenObjectByPointerPsReferencePrimaryTokenIoGetCurrentProcessPsReferenceImpersonationToken9KeGetCurrentThreadJKeInitializeEventZwQueryInformationTokenstrncmpkObQueryNameString_except_handler3PsGetCurrentProcessId,CmUnRegisterCallbackvIoDeleteDevicexIoDeleteSymbolicLinkkKeQuerySystemTimevsprintf+CmRegisterCallbackProbeForWrite IofCompleteRequestIoUnregisterShutdownNotification.SeReleaseSubjectContext%SePrivilegeCheck\ExGetPreviousModeSeCaptureSubjectContextIoRegisterShutdownNotificationoZwDisplayString_ExInitializePagedLookasideListNKeInitializeMutexlIoCreateSymbolicLinkcIoCreateDeviceZwSetValueKeyZwOpenKeyRtlQueryRegistryValuesmemmoveKeTickCount&KeBugCheckExntoskrnl.exeBKeQueryPerformanceCounterHAL.dll GetSecurityUserInfoksecdd.sys0 H`DD4VS_VERSION_INFO  ?StringFileInfo~040904B0: CompanyNameSysinternalsZFileDescriptionWindows Registry MonitorLFileVersion6.12 built by: WinDDK6 InternalNameregmon.sys7LegalCopyrightCopyright (C) M. Russinovich and B. Cogswell 1996-2004> OriginalFilenameregmon.SysHProductNameSysinternals Regmon.ProductVersion6.12DVarFileInfo$Translation 40]0Q1[1s11111111 2.2L2S2y2222223!3)3/353<3^3g33333333333344.474@4F4K4Q4W4o4x444444444445 55^5t5}5555556$66666667777778,8S8n88888w99999999::/:?:R:g:u:|:::::::::::::;e;l;;;;;<>>I>P>w>>> 4/44444444555$5?5F5K5U5_5i5s5}555555555556 66!6+656j6t6~66666666777(727<7F7P7Z7d7n7x7777777888&808:8D8u8888888888889#9*979>9E9L9S9[9_9c9g9k9o9s9w9{999999999999999999999999:: ::<:C:M:V:`:j:s:}:::;;;;';0;i;p;z;;;;;;;;;;;;< >+>>>>>??*?Y?g???????0 0F0O0\0000001:1L1W1v1111112 2 2W2`222222333I3S3Y3h3333333333434>4R4[4a4l4444444444555!5)5D5Q5W555556(6Q6_66666 77V7`7w777,8W8e8889H9999:/:?:Q:::::;*;<;;;;<%>%>+>>>>>>>@000 111#1.141I1M1Q1U1Y1]1a1e1i1m1q1u1y1}111111n22222222373A3K3r3y333333333M44444555"5-535>5G5U5a5j5r5x5566666637|777788!8F8\8v88888888888 99*91979<9A9G9_9d9z999999999999::::D:J:X:d::::::::;(;4;@;P$$1(14181D1H1T1X1d1h1p1t111` 40 00#020;0B0MZ@ !L!This program cannot be run in DOS mode. $ۋa҈a҈a҈aӈa҈Ba҈B؈a҈a҈a҈LgԈa҈G؈a҈Richa҈PELD N@02DI nP@vyT,.text,G@G h.data$I$I@INIThnn .rsrc@v@v@B.relocyy@Buu|ppppppppq"q:qFqbqvqqqqqqqqr.rDrdrzrrrrrrrp s.s:sNs\slszsssssssst,tFtZtttttttt u u8uJudu|udpLpst?u2;Gt.^t%VjS jj|$N03+ȃ[_^SVW3WWW@iWV3ҋ\$% jj;t)9t Ћ@;u;t;tHJPPWV_^[V39t$v&L$ T$+ъ} 3FOfh} 3VOa} 3bOfV4j* ^ =(tH=Kt7=Lt&=Mt=|JVb&:;JtA=t3= t%=Wt=mt Dyr>k d*]:VȁtGIt=t1t%ItVPihRV ^!F JB`   1EOYc'm;`   ~jt``    SV3W95]=v`3F;5]r395]v^3F;5]r%]%]_^[**%s%s%sUSVW}?]3u<;t D>FuutlF hDdk PjM <tK>$>E ~*t?*tRWPh4E u?t G?`_^[] VW3@_WWWWVh]h`h ah]h^h eWV_^SUV3WSSS@_SU39]v ^t$7u6F;5]r39]v `t$7u#F;5]r\$SU_^D$ ][D$UW<u}ujuu &_] ]t} tEt;r$;w VH#U#;u^2U eVuEPjF P(F(ES^,W=jPE]PEPuSEM \N,EDEEPjEuPE}PuWE $8EPu%_[jjV^U SEVPEPEP%P%uP%EPjjjjjV΋^[}3ËENT_AUTHORITY\SYSTEMUSW}3ۈs;ÉEMVQpj8Qj P8%|ix|Eu;u j "YBEE E]SEjPESE̍EP}ԉuSSSESPu,^_[\\REGISTRY\\_CLASSES\Software\ClassesUjh(hdHdPd%DSVWe}FDdk Vhj=׉Eh_(؉]؅}E #uE P3PPPP@iSM%jt<9t@t/x3+}ȃjSjSVhj׋ujY"}ffFEPhVu##|LjVEP|;E8t)f#}fhEPWPuW EPV]3E9E Eju EPE8t~j Puj h#u  u f#f%3I|\tO#f]؋3I+PEPPuS EPMIjXËe}t EPI3+ы}؃OʃM]؃e@S$7Su#7Pu  EU|˃eU7Su7Pu  EZ|ˋ3+}ȃuh_u!Ei$@S]؊ t\tC S3+}ȃsj VV/jh#V  u}O(#f7Ei$UӍhU3+}ȃ3+ы}Oʃuuh_.}t ut Sh_jY"}fMd _^[ SystemVW3>jPh'  tF0r3_^Ë:%d???=]VtJW ]t$ jQVf P3Ih(Q _ t$(^Access: 0x%X Access: 0x%X %s OpenKey %s %s %sUjh8hdHdPd%tSVWeh_(؉]t"I3+ȃejuVjct SvvMjXËeMuVu uVj؅|6VJV&u}e| uVu hn(EP 4"u,u h~(EP }3ID PW=$it/St%EPSqPuEPPh($uh_ËMd _^[ Access: 0x%X Access: 0x%X %s CreateKey %s %s %sUjhHhdHdPd%tSVWeh_(؉]t"I3+ȃejuVjt SvvgMjXËeMuu uuuVu uVj؅|64VVfu}e| uVu h *EP 4"u,u h0*EP }3ID Pf#iut/St%EPSPuEPRPh@*_uh_ËMd _^[%s CloseKey %s %sU3Sh_E[%s QueryValue %s %s %sUjhxhdHdPd%4SVWeh_(E3;t#I3+}ȃ]u ;t-jVSt;PvSwt*;t f9u DžJuuMjXËeM3ۋu uuuuVua9]t~;|SPuuJ"u P8"it5Vt+PVPu䍅PJPh`4Wuh_ƋMd _^[%s LoadKey %s %s %sUjhhdHdPd%,SVWe3}ju VW6tFjvW't7jvWt(FQpWtPvv(I3+ȃj]S3VtFjsVt7jsVt(CQpVtPss6(I3+ȃMjXËeM]u Sa="it9Vt/PVPPPPh5ƋMd _^[%s UnloadKey %s %sUjhhdHdPd%,SVWe3uj]SVtFjsVrt7jsVct(CQpVOtPss(I3+ȃMjXËeM]Sa="it2Vt(VPPP[Ph7hƋMd _^[S28]! _V5`F8u% ,i( / _jF5, _F8u% ,i+  _`_F5X _F8u% ,i1  __FF _8u% ,ix2  _(iF5T _F8u% ,iw4 Q _aF5P _F8u% ,iY3  _aF5L _F8u% ,i0  _jF5H _F8u% ,i,  _iF5D _F8u% ,iw- m __F5@ _F8u% ,i/ 4 _iF5< _F8u% ,iV* _jF58 _F8u% ,i. _jF54 _F8u% ,i6 _aF50 _F8u% ,i7 P _aF]^3[S28]X _V5`F8t) ,i<( uj F _5, _F8t) ,i<+ u`_ F _5X _F8t) ,i<1 u_w F _F _8t) ,iIoUnregisterShutdownNotificationGSeReleaseSubjectContext@SePrivilegeCheck2SeCaptureSubjectContextInterlockedDecrementIoDeleteDeviceIoDeleteSymbolicLink(IoRegisterShutdownNotificationhZwDisplayStringHExInitializePagedLookasideListsKeInitializeMutexIoCreateSymbolicLinkIoCreateDeviceRtlQueryRegistryValuesmemmoventoskrnl.exeRtlUnwindDKeQueryPerformanceCounterHAL.dll GetSecurityUserInfoksecdd.sysMmMapLockedPagesMmBuildMdlForNonPagedPoolMmCreateMdlKeServiceDescriptorTable0 Hv$$4VS_VERSION_INFO  ?StringFileInfo^040904B0: CompanyNameSysinternalsZFileDescriptionWindows Registry Monitor*FileVersion6.126 InternalNameregmon.sys7LegalCopyrightCopyright (C) M. Russinovich and B. Cogswell 1996-2004> OriginalFilenameregmon.SysHProductNameSysinternals Regmon.ProductVersion6.12DVarFileInfo$Translation D,404<4@4L4P4\4`4l4p4|4444444444555556 666M6p6z666667"7'7D7L7R7X7_7o7x77777777778 88%808A8J8P8U8[8a8y888888888888999%9-9>9D9M9Y9r9|9999999999.:C:M:c:j:::::::;U;n;;;;;;<<<<<<<=;=K=r======>>>>>>??+?=?T?i?|?????????????hT0[0000(1F1b1w11111L2f2m222233_8r88889 99?9I9S9]9g9999999999999:::(:2:<:F:P:Z:d:n:x::::::: ;;;';U;\;a;k;u;;;;;;;;;;;;;;K>>">&>*>.>2>6>:>>>B>F>J>N>R>w>}>>>>>>>>&?G?R?Z?a?k?t???????????? ,0 0$0.050N0\0x00101X111111x222222@3E3y333333#414I4~444444 555D5r5555556676M6w6}666666677n7v7|77777777 888+8I8R8a888888=9999999: :\:a:}::::@;J;_;i;;;;;< <"$>@>F>>>>>>??=?C?Q???040c0s0y0000&1Q1a111112/2A2L2222223 3+3d3j33334@4N4T4}444445Q555556 66 7H7P7777B8z888888889 999-929@9E9R9X9f9k9y9~99999999999999 :::#:0:6:D:I:W:\:i:o:}::::::::::::::;;;;(;-;;;@;M;S;a;f;t;y;;;;;;;;;;;;;;<<<(>>*>3>9>G>N>Y>g>p>v>>>>>>>>>>>>>>???'?-?;?B?M?[?d?r?w?@$0P0W0h0z0000001'1.131G1M1W1^1c1i112C2_2p2222222222233 3(3.383B4R4a4m44455?5X5l5u5{55555555666666=6W6^6j6r6x666666666667 77$7*717G7Q7W7]7l7r7x7~7777777D80969<9B9G9X9i999999999: `QI2@comp.idX$SG6901`$SG6953*$SG6937"0Y$SG7154 $SG7157 $SG7159 $SG7191$ $SG7202@ $SG71940 $SG7210L $SG7213X $SG7216h $SG7218| $SG7253n$SG7251b$SG7249V$SG7247F$SG7245B$SG7243:$SG7241.$SG7239&$SG7237$SG7235 $SG7233 $SG7231 $SG7285$SG7284$SG7282$SG7299$SG7297$SG7288$SG7323$SG7322$SG7342$SG7503B$SG7506J$SG7491$SG7473$SG7410F$SG7601R$SG7500:$SG7548*$SG7542 $SG7599>$SG7545$SG7383$SG7551:$SG7422$SG7593&$SG7371b$SG7368V$SG7365J$SG7512^$SG7590$SG7494$SG7560j$SG7413V$SG7449$SG7428$SG74072$SG75962$SG7587$SG7584$SG7581$SG7578$SG7575$SG7572$SG7569$SG7566$SG7563v$SG7539$SG7518z$SG7461V$SG7434$SG7398$SG7380$SG7419v$SG7557^$SG73622$SG7386$SG7509R$SG7401 $SG7404$SG7497&$SG7515n$SG7395$SG7485$SG7464j$SG74552$SG7446$SG7443$SG7431$SG7416f$SG7389$SG7377$SG7440$SG7554R$SG7536$SG7533$SG7521$SG7482$SG7470$SG7458B$SG7452"$SG7374v$SG7467z$SG7359$SG7425$SG7530$SG7488$SG7527$SG7476$SG7437$SG7524$SG7479$SG7392$SG7635$SG7634$SG7633$SG7632$SG7631$SG7737 "$SG7768"$SG7812(#$SG7811#$SG7801#$SG7798#$SG7797#$SG7789#$SG7782"$T8990($SG7828'$SG7841($SG7839($SG7870($SG7868~($SG7864n($T90258$SG7908@*$SG79050*$SG7901 *$T9038H$SG7927+$SG7940,$SG7952Z-$SG7968.$T9060X$SG8004.$T9071h$SG80310$SG8056n1$SG8076Z2$SG8107>3$SG8102:3$SG8142`4$T9095x$SG81655$T9108$SG81807$T9120$T9141$SG8659&D$SG8645C$SG8642C$SG8639jC$SG8636FC@comp.id$R000000v.idata$6nu.text\HG$$$00001dH $$$00004-I #RHH I_lh_topHHH.textG=G$$$00001G $$$00003G "(G $")$$$00005G +0$$$000078H 9>$$$00009[H G_lu_done*H9GD(H_lu_topG_at_doneZH.idata$6u@comp.id@comp.id@comp.id.idata$6u@id.compheader 1 hTm 6 E . e  % ]  7$ (W, 0 41 8K <a @y D H L P T X\ `3 dO hy l p t`x- |E c    8YB$ g|   4 I _- tj             #  6B  D  V  r     U p    " 2r  H  f! y" :# ' ( ( V* + ,  w-  . 9/ P0 h1 |x2 Y3 w4 6 7 8 < l? /A 2D ojG T pG f vG  |G  G  G A G  G G G 8H  dH I  .I  4I  :I w@I  FI } I _LogFileIIItJhJ[ R_RootKeyhT_MaxLogX@ Y]]]]]]]_Log]Q]_NumLog]-]]]^___ _@_`_l_\`Fa6a$a aa a(i,i@i`iiivikiYjIj4jjjynnnynendQ_DriverEntry@8_MatchOkay@4_MatchWithPattern@8_RegmonOpenBootLog@0_RegmonCloseBootLog@4_RegmonWriteBuffer@4_RegmonWriteBootLog@4_RegmonFreeLog@0_RegmonNewLog@0_RegmonOldestLog@0_RegmonResetLog@0_LogRecord_Minimum@8_RegmonHashCleanup@0_RegmonLogHash@8_RegmonFreeHashEntry@4_ConvertToUpper@12_GetPointer@4_ReleasePointer@4_AppendKeySetInformation@16_AppendKeyInformation@16_AppendRegValueType@8_AppendRegValueData@16_AppendValueInformation@16_ErrorString@4_RegmonFreeFilters@0_MakeFilterArray@12_RegmonUpdateFilters@0_ApplyFilters@4_ValidateParameter@12_GetSecurityInfoWorkRoutine@4_RegmonOpenToken@0_GetUserName@4_GetFullName@12_GetProcessNameOffset@0_GetProcess@4_HookRegOpenKey@12_HookRegCreateKey@28_HookRegCloseKey@4_HookRegFlushKey@4_HookRegDeleteKey@4_HookRegDeleteValueKey@8_HookRegSetValueKey@24_HookRegEnumerateKey@24_HookRegQueryKey@20_HookRegSetInformationKey@16_HookRegEnumerateValueKey@24_HookRegQueryValueKey@24_HookRegLoadKey@8_HookRegUnloadKey@4_HookRegistry@0_UnhookRegistry@0_RegmonDeviceControl@36_RegmonDispatch@8_RegmonUnload@4_Sequence_CurrentUser_BootFilter_DefaultValue_DefaultValueString_InvalidName_NumExcludeFilters_NumIncludeFilters_RegHooked_HighestUserAddress_BootSavedLogList_BootLogging_GUIActive_HashTable_RealRegDeleteValueKey_RealRegEnumerateKey_RealRegOpenKey_RealRegCreateKey_errstring_RealRegFlushKey_StartTime_RealRegSetValueKey_LogMutex_HashMutex_KeServiceTablePointers_RealRegSetInformationKey_FilterDef_RealRegEnumerateValueKey_BootSavedLogTail_RealRegUnloadKey_RealRegLoadKey_RealRegQueryValueKey_IncludeFilters_FullPathLookaside_RealRegCloseKey_FilterMutex_HookDescriptors_LoggingEvent_RealRegDeleteKey_RealRegQueryKey_ExcludeFilters_GUIDevice_ProcessNameOffset__imp__ZwCreateFile@44__imp__RtlInitUnicodeString@8__imp__KeSetEvent@12__imp__ZwClose@4__imp__ZwSetInformationFile@20__imp__sprintf__imp__ZwWriteFile@36__imp__ExAllocatePoolWithTag@12__imp__ExFreePool@4__imp__KeWaitForSingleObject@20__imp__ExQueueWorkItem@8__imp__KeReleaseMutex@8__imp__KeQueryPerformanceCounter@4__imp__KeQuerySystemTime@4@InterlockedIncrement@4__imp__vsprintf__imp__ObReferenceObjectByHandle@24__imp__ExGetPreviousMode@0__imp_@ObfDereferenceObject@4__imp__RtlFreeAnsiString@4__imp__RtlUnicodeStringToAnsiString@12__imp__strncat__imp__strncpy_ProbeForWrite@12_LsaFreeReturnBuffer@4_GetSecurityUserInfo@12__imp__ObOpenObjectByPointer@28_PsReferencePrimaryToken@4__imp__IoGetCurrentProcess@0_PsReferenceImpersonationToken@16_KeGetCurrentThread@0__imp__KeInitializeEvent@12_ZwQueryInformationToken@20__imp__ExFreeToPagedLookasideList@8__imp__strncmp_ObQueryNameString@16__imp__ExAllocateFromPagedLookasideList@4__except_list__except_handler3_PsGetCurrentProcessId@0__imp__ZwUnloadKey@4__imp__ZwLoadKey@8__imp__ZwDeleteValueKey@8__imp__ZwCreateKey@28__imp__ZwSetValueKey@24__imp__ZwDeleteKey@4__imp__ZwFlushKey@4__imp__ZwEnumerateKey@24__imp__ZwEnumerateValueKey@24__imp__ZwQueryValueKey@24__imp__ZwQueryKey@20@InterlockedExchange@8__imp__ZwOpenKey@12__imp_@IofCompleteRequest@8__imp__IoUnregisterShutdownNotification@4__imp__SeReleaseSubjectContext@4__imp__SePrivilegeCheck@12__imp__SeCaptureSubjectContext@4@InterlockedDecrement@4__imp__ExDeletePagedLookasideList@4_RegmonUnmapServiceTable@4__imp__IoDeleteDevice@4__imp__IoDeleteSymbolicLink@4__imp__IoRegisterShutdownNotification@4__imp__ZwDisplayString@4__imp__ExInitializePagedLookasideList@28_RegmonMapServiceTable@4__imp__KeInitializeMutex@8__imp__IoCreateSymbolicLink@8__imp__IoCreateDevice@28__imp__RtlQueryRegistryValues@20__imp__memmove_ZwCreateFile@44__IMPORT_DESCRIPTOR_ntoskrnl_RtlInitUnicodeString@8_KeSetEvent@12_ZwClose@4_ZwSetInformationFile@20_ZwWriteFile@36_ExAllocatePoolWithTag@12_ExFreePool@4_KeWaitForSingleObject@20_ExQueueWorkItem@8_KeReleaseMutex@8_KeQuerySystemTime@4__imp_@InterlockedIncrement@4_vsprintf_ObReferenceObjectByHandle@24_ExGetPreviousMode@0@ObfDereferenceObject@4_RtlFreeAnsiString@4_RtlUnicodeStringToAnsiString@12__imp__ProbeForWrite@12__imp__LsaFreeReturnBuffer@4_ObOpenObjectByPointer@28__imp__PsReferencePrimaryToken@4_IoGetCurrentProcess@0__imp__PsReferenceImpersonationToken@16__imp__KeGetCurrentThread@0_KeInitializeEvent@12__imp__ZwQueryInformationToken@20_ExFreeToPagedLookasideList@8__imp__ObQueryNameString@16_ExAllocateFromPagedLookasideList@4_RtlUnwind@16__global_unwind2__local_unwind2__abnormal_termination__seh_longjmp_unwind@4__imp__PsGetCurrentProcessId@0_ZwUnloadKey@4_ZwLoadKey@8_ZwDeleteValueKey@8_ZwCreateKey@28_ZwSetValueKey@24_ZwDeleteKey@4_ZwFlushKey@4_ZwEnumerateKey@24_ZwEnumerateValueKey@24_ZwQueryValueKey@24_ZwQueryKey@20__imp_@InterlockedExchange@8_ZwOpenKey@12@IofCompleteRequest@8_IoUnregisterShutdownNotification@4_SeReleaseSubjectContext@4_SePrivilegeCheck@12_SeCaptureSubjectContext@4__imp_@InterlockedDecrement@4_ExDeletePagedLookasideList@4_IoDeleteDevice@4_IoDeleteSymbolicLink@4_IoRegisterShutdownNotification@4_ZwDisplayString@4_ExInitializePagedLookasideList@28_KeInitializeMutex@8_IoCreateSymbolicLink@8_IoCreateDevice@28_RtlQueryRegistryValues@20__NULL_IMPORT_DESCRIPTORntoskrnl_NULL_THUNK_DATA__imp__RtlUnwind@16_KeQueryPerformanceCounter@4__IMPORT_DESCRIPTOR_HALHAL_NULL_THUNK_DATA_RegmonUnmapMem@8_RegmonMapMem@12_KeServiceTableMdl_Signature__imp__MmUnmapLockedPages@8__imp__MmMapLockedPages@8__imp__MmBuildMdlForNonPagedPool@4__imp__MmCreateMdl@12_KeServiceDescriptorTable__imp__GetSecurityUserInfo@12__IMPORT_DESCRIPTOR_ksecddksecdd_NULL_THUNK_DATA_MmUnmapLockedPages@8_MmMapLockedPages@8_MmBuildMdlForNonPagedPool@4_MmCreateMdl@12__imp__KeServiceDescriptorTable_?diskFullError@?1??RegmonWriteBuffer@@9@9_?text@?1??LogRecord@@9@9_lh_continue_lh_dismiss_lh_return_lh_bagit_lh_unwinding_gu_return__unwind_handler_uh_return_lu_continue/ d:\winddk\1381\lib\i386\free\Regsys70.sysn%-= jҤ%V    n 3B ?т  UЏ _ f[UpYӞLr n  Ө!a "% :#&'6(e(~"&V*"&+ ,  w- .&/}R)ө0IӃ1  x2 Y3 w4vR)6)ӷ7)84<il?^ &A{ 2D8Y FIMZ@ !L!This program cannot be run in DOS mode. $eԛ3qƇ|և|Ň|Շ}ÇhՇćRichPEdD# xb@?(+4p.textBvx `.rdatacd|@@.data@.pdata@@.rsrc(+,@@HSHH@H$8HRt#t>EA3H$AtHĠ[HT$0HԄHT$@HƄT$0DD$4D$LDL$HF+D$DD+L$@AAAL$L$L$L$H$H$HH$=lH(H(H\$8Ht$@-H|$HIIH';~u%FH 3DB{D #FH 3DBxz{D [QE3H}H|$HHt$@H\$8H(L; A-ItwH=w3H|$HHt$@H\$8H(H%AwIE3ɺA'^)}zH HA]|H Vh|DBDHˉQ|D H>E3H|HhzH|H|$HHt$@H\$83H(LHHD$`HIKHD$ HD$(HD$0ICICICICD$XHfICHD$ ICICȋ@IKD$xH~AC5ICHICO|H 3DB|yHĸH(H\$@H|$HHHtdfff<*tlDEt+ff*t*MDHD$ HL$0HuHtHH{bH$pH$PL$@H$HH$xH$0[gHX22̸(VgH+HH$(H }H$(H$(E3E3H$(L$(yHL50nt H={Iu =r1H ,L$(vH 3xH E3AQ E3xDcEH$(L$(L$(L=qIcL-7{fffffffffH H$pLL$0Lź-HD$HƄ$pD$8D$P1xH$p3D$8D$P2H ;LL$0Lź-HD$Hw m< u =lIH$pffffff;HӟHHuH+HHLcFHcHcH+3HHH,zL%zHHzLˀ|*HL$pIDŀ;*MDHD$ aH$pHL$pouHH~Y2p< u = pIH$p;HHHuH+HHLctHcHcH+3HHHZyLSyHHAyLˀ|*HL$pIDŀ;*MDHD$ 菜H$pHL$puHt!H~]H tE3Lź3vHAL$(L$(H$(H 8uH &E3AQ EAuH 3DBsH :msL$(L$(H$(H$(H$(H$(^cHĸ(̸fcH+HH$PL$pL H$H$H$H$L$L$x[L$hDE3L=QIfffffB9H O uIH-Uff)HD OuIH=fffffHD OufAAL$PIAQ;tAL$PAQI tALD$PAQIt$P$PA:Թ fDA:fDf$PHVqf$PD$PA:fDIfD$Pfffffff PHDuH`AfHcH$PH HDt ǃ|ǃtZGHcH LcHIH LHfffHHI+fffffHDuHHIIuIfff PHDuIL-8ff PHBD)uI4_AHcH$PH HCt ǃ|ǃtZGHcH LcHIH LHfffHHI+fffffHD uHHIIuIfff PHD)uIfffffffD PHBD9uIg^AHmsfffffffffHcHT$PH HBt ǃ|ǃt]GHcH LcHIH LHffffffHHI+fffffHD uHHIIuIfffD PHDuH$P I@BtH 3DB!qICqI΃[n+qIDnqI)npInpH=sImD%iD%eHetIffffB*H„uLmH=wsItIBH„DuI:n3HGpInH Ld$8HHD$@AHD$0LúDd$(Ld$ muDHLrHrHoH LlL$hL$H$H$H$H$L$xL$pH$Pi]HĨfAuEISmHBotE3ɺIEAYoIm3^fAuIm3BfA)LqInLqInLqInAInAInAInAInnAIZnAIFnAI2n AInH$P I>tH S3DBmIkHm3AfAt fEtfAuIkHm3kH6AHZHMfff;t4H=lpHL -pCLEE3H^mHHHIuIkH-ONMHHf}t4H=oHL oCLEE3HlHHHIuIjHmHoHfff;t4H=oHL MoCLEE3H~lH/HHIuH E3E3NLlH E3E3N4lH E3E3NlEĺD8/iIAkEĺD8iIAkEĺD8hIAkEĺD8hIAkD8%hAIEpk jHSHHHD$pHmPfADJ@LD$0jLD$ H(nHL$0FuDH0LmHm3jjD$ Hˉ[i=EH E3E3AQ jH E3E3j;Qr?fffffH E3E3hjH E3E3Pj;sH q E3AQ EA0jfAu h3HL$pWHĀ[fAuLli3HL$pWHĀ[DHlHL$0ޏLD$0HiHugA'E3HȺei  hHL$p:WHĀ[HHH$AH$HMA H'iu DH1LkH0lHhD$LH$LL$HE3HHD$`D$HD$PD$hhH$3L1IHH$HHQHHHD H=v"LOkHkA0HAh+-1H$t;< t7H=jIu 1"3IH@kfG03IH3H$fffff HDu3H5\ffffffBHD1uHSH'fH HD$8HHD$@AHD$0LƺD$(HD$ UdH$uDHL&jHiHgH D)dH$H$H$THĨHHbH$AH$HMA Hfu DH1LiHiHfD$LH$LL$HE3HHD$`D$HD$PD$hcfH$3LjGIHH$HHQHHHD H=v"LhH@iA0He Gt< t3IHifGF3IH3H$ffffffff HDuH$3H5ZBH1uH ^QHcH HD$8HHD$@AHD$0LƺD$(HD$ bH$uDHLgHgHdH AaH$H$H$RHĨHHH$AH$HMA Hwdu DH1LGgHgH?dD$LH$LL$HE3HHD$`D$HD$PD$hd3H$H$H5EHHH$HHQHHHD H=v"LfHfA0Hc)HfH$(Dt< t3HHffGtD3HH3H$fffffffff HDuH$3H-0X1H)uH \"OHqaH jHD$8HHD$@AHD$0LźD$(HD$ _H$uDHLpeHIeHhbH Y?s_H$H$H$H$PHĸHHH$AH$HMA Hbu DH1LdHeHaD$LH$LL$HE3HHD$`D$HD$PD$ha3H$H$H-b*HHH$HHQHHHD H=v"L'dHxdA0HaBHudH$H$谉)t;< t7H=cHu )"3HHdfG)3HH3H$ffffff HDu3H5Uffffff)HD1uHLH^H HD$8HHD$@AHD$0LƺD$(HD$ ]H$uDHLbHbH_H <\H$H$H$H$MHĸHt$H|$ H=WbH5\uZ=h$tH5_$H=`bu:=\t1=\t(=z\t=o\t=g\t 2H|$ Ht$H|$ Ht$HxH\$pHl$hHt$`H|$XLd$PEIHtyte 5^3HHXHXHrHiXL HcAHD$  ]}HdmIH -ARH]H]HtoH E$HˉE WL HAHD$ P]DAD9~ HN5]Du H%]D؋lD BD A;~AA+у LjDCAHD$(D$ [34 *H\E3AAQH\ AHT$0D$0AD$4k\H HT$0a\uFY 9L$0u" 9L$4uȺ+ ,BHD$0H{D$4H MLcHD$0L M\IHL$8[H aHT$@ZL\$8D;\$@|D;\$HD$<;D$D|;D$L~ H[ML͋H[Ld$PH|$XHt$`Hl$hH\$pHx̸IH+HH$`BH$H$$HHL$ H <HL$L$xAE3E3V[Lu"DH0L$^H^H[2lH VA MAH$L$[HLy EdE3=t:HLL+8B +uHuuErAE;'HN HHBuH$L$3McffffffffH H$`LL$(Mź-HD$@Ƅ$`l$0D$H5ZL^ 3IHH$`HHQHHHH;F38$`H$`tfff< tIcLL$(LǺ+D$8D$4VH E3LǺVH VHSH HH Ht H [H%VE3L H~IffffffffBHDuHH rhPHq[H\HmL nfmOfD aL `L aL b\VHHuDHLXHYHUH [HhH A MAUtDffffffffH LcE3ɺxUH AMA \UuH A MA;Ut*H _LL$ Lc+D$0D$, UHh̸BH+H\H$`AH$HH MA TH$H$Ƅ$`HcH$H HD$`LL$ Lƺ-HD$8D$`\$(D$@WT3H$`HHT$`3ɐfffffffff HDu3H$`HWÃfGl3H$`HWHfGWGSL$xS3H$`HHHHѹ ZPH$`HLNPffffHHDŽ҈PuI7PH ALƺ &DD$8DD;wHOH>AEHI>>LH3>ny>L3H>U̸(/H+HH$LcAH$8H$HH$ L$L$L$LqHLL$pIL$E2D$pCAGE3L$E3IΉ$DŽ$ D$ AAH$EoH$@ffDGHcL$H -IHD>$H$DŽ$@EutH HDHIuGL$t.AM(>HO ,:AM >HO >:UEt"HO 9)!HO :.=HO 9=HO 9EAffffffH HcE3Lƺ?W(B "LL$P ÃL$XO,L$TO4L$\t$|M0+t$t?;| M0>1>H$0T$PDD$tHO D$@L|$8D|$0Lȉt$(\$ <>1(l$Pfl$`>L$`H_ D H$0H$D$`;DL$hH$D+L$`AHH$j;DD$dT$`L|$8D$0H$HD$(HD$`AAHHD$ 8H_ H H$H4;DL$XH$D+L$PAHH$:DD$TT$PL|$8D$0H$HD$(HD$PAAHHD$ 7EGL$L$L$H$HH$@H$8t.^;HO b7G;HO s7H$ H$6+H(HHHXHpHx H6DfjHT$`iHˉjDgk;H3Lw?HAH|$XHD$PHD$HH\$@|$8|$0AP3ɉ|$(|$ ;HHL5W0E3H^<D$p|$tH{ffffffffCLL$pLcljD$xHHΉ$H$<taHrA 6HM;L3H:HHH$H$H$HĨ3H3L$LDBpH$)3DŽ$xL$h8H$H$DŽ$L;uL$HH$ H$(H$0H$83L$L$8H8H$L4H$ r4H$X]4H$ZH4H$E33Lt$ PHD$(HD$0HD$8HD$@HD$HHD$PDt$XHD$`HD$hHD$pHD$x3L$ǙDt$DDt$@L\$ L\$(HL$@iD$LřHT$0iD$HHHHAHL$0HB`D8H$HHHT$XHD$`Dt$PD$TD$X(3E3AVE3I9H$H3LL$ EF9Ih9H$Ho3;L$H$0H$(}RffffffffH$\$PD$TF3LL$ 9AI8H$3;|E3E39I8H$2If6L$H$8H$ L$HH(H\$8LH3AHt$@H|$HHHIHHD;OILcLaH|$HHt$@H\$83H(LHxHH$PI[I{IHt~t''u65H;u&5HAt;t*t3H5H3H%6yH6iHHFHL$@HD$ HMHD$,D$(o]HT$@HA6H 5LL$ IHA7HH$hH$pH$P$HxLHxH?H$`IkLHIs 3HL$PHFHt$8t$0\LD$8HT$PH/u4HL$8HD$@HaFHD$(HD$0E3E3D$@HD$ n/9t$0@H$H$p2H EH2Ȁfw fw fG8fGfGH EHWfwfwH+ffffffffffHffD uH PEHWH_$D34 H u%LH#D3 HH H#H HHt- HҤH9ǤL=#H=m#tH8H I#IEIՇL&H #IH$`A3H$`\O<HtH$`\8<L #L$`H"IH19u8^H="IEIH4uHa"H M 1LfH #I过u(IJL"H"H 0I"H$pH !AIHYIHSIHMIHGIHAIH;Af4^HHDHdL$pH H /H [H\$8HD$xE3E3HD$0H$D$(HD$ t$Lb HDHW HL-I3HIHB|)\tIHJfG3IHHiH RHG_IfGSG uL HDH+H\$0H E3E33D$(D\$ HHuAI LHtH ]HJDHoIH $H\$8HD$xHD$0H$L$AD$(HD$ Z3$E3E3335E3E333HH L3H{6:LoH=p IL-tHffffBH„B*uHH=& Ht"HfffffffffffHBD)uA$u,Tt#H 9L rHLH\$ H ^H\$8HD$xHD$0AMź\$(H\$ tzH 'H\$8HD$xHD$0E3E3\$(H\$ ntFA$u^H H\$8HD$xHD$0LA\$(H\$ ,vHHD4H|H͈TsE3RH87s+ARLKeAMAA2==jtHIcA Iy@G.Rz==§t*HOH$H$H$uHOL$HH0H YH$H$KWMbMbf$Oi+f$H$L$E33ҹD$(@HD$ =uH$:M5H$+HcH :tff: t H:uHH$ H+HH$H+HHDuD$IL$0H$ L$HHD$ )7IT$0H$fffffffffHHBuII0ZHdfI~)=t&H|tHDIA0HIA0H|t+HLIQ0fffffffffHHBuIA0|H 83DBdAAH L$E3$DŽ$H$fffffH<tH 1H$HHH|1t#HrHHoCE3SHJH +AASH$H ?H3HH D$D$3H3H\$0Hl$(\$ HH ԣA MAH ףybAHH XgAHH 7\AHcH teAHBH SqAH!H 2pAHH nAHH oAHH ϢqrAHH P\AH|H L$BA\DŽ$Ƅ$DŽ$0H^H @E3bHH "E3gHH E3\HH E3eHH ȡjE3qHH LE3pH{H .E3nH]H nE3oH?H PE3rH!H 2E3\HH ,L$BA\DŽ$Ƅ$DŽ$0HAyAT$H H=ņLAI|$H IAHE33DD$(|$ H 6WD$(DΉT$ 3DB`H قH>H ʖH;  gHI A9f H ŸHMHHAH$H $HAD$H x 38jtQH H\$8HD$xHD$0E3E3\$(H\$ uIHHDO H c58Gk8uC8LH'H "LtH}A@Hf8hLD$pHHHHL$pH\$|kHL$pHD$|H>AE3D$(HD$ nHL$pHZiHcAE3D$(HD$ ?HL$pH$H/AE3D$(DŽ$HD$ HL$pH$HAE3D$(HD$ L=LHIw!3HIHDDHE3HHɉL$(HL$pL|$ HL$p~HQ SH$HDH, LD$pHXHuiHL$pH%HL$pHHL$pLD$pHtHuHL$pHOHL$pHf H zd 3 =m =` H$HwH$HHV A=Gj=GtOht5=, LH 3L rHH\$  E3E3AQ HE3W -L& L5}bHA$IH A E3H EA LH Y3L H H\$ f =DHȺaH E33i! =E<DHȺ]H A]+MI ^H ǚ3DB3H8ؙ7DHȺafH OE33|SkfAcu(t  =٫8H ԫfH׻HHt?HdE3SHH +AASeH λ莡=dd,DHȺR3=ddH LDE3HD$xH\$8HD$0DK\$(H\$ c8d+ARLKH=ccDHȺS3ۺ+8cASLKH Ԙ^H ǘ3DB=/&)DHȺZ0==t H= =6|L= H=| IEL-9}HIquKHsL H H ~MHD$ LzH~AHlILzHC H L~wL0H9~A@H"$H | LH K3L HH\$ X=}rt$3D$0E3HSE3\$(\$ "3D$0E3HSE3\$(\$ y#HzDHȺ^_wHyH =HaH jŊhHIH R]PH1H :赑8H KH$PHTA<HHeHHH$0Hҕ3H$(H$PH$8HH$ DŽ$ hDŽ$DQ $HH$hH$PH$pfDŽ$x $|DŽ$H$XHDŽ$`sH H$PDC<H H ZH S0LE3HH DC3lH H$$D$$D$H ”A+A+D$0T$(3҉D$ 2$D$$D$H }A+D$0T$(A+3҉D$ oLH 83L _HH\$  ;HE3/'HA若--d;AA@t3ۃHXvrZH NIHHft?Hi^E3SHH j+AASH uE3EA,H CwHlHH !3HD$xH\$8HD$0E3E3\$(H\$ fu'HHDrHH LH _E3AQ E3H HE3E3 H 0E3AQ EApH E33H rIL `MM̋H_H tHtC3L$L$L$L$H$H$H$H$H$H%;0=b      f&((((-(ˡ(ў(,(ޤ|(((((آ(HSHPHD$hQLD$x(HntZLD$pH3 tFHD$pHL$x3HD$DHD$hDKHD$(HD$0LD$@3D$@\$LHD$ u3HP[HD$pDL$hHL$xL$<LD$03H\$(HD$4D$0H\$ HP[HHxHXHhHpHx L`LhE3IIDHAJHBHHH=HHH%HHsHuHH_HtHrHFHuHZH2HtL AHD$X Ht$PLl$HLl$@D$8H3ɉD$0H5D$(ۍD$ UHH{|AHH bDH eAۺ+A]MI H C3DBwDWH AۃDHȺ]DH Aۃ|DHȺaH A8RDHȺaD8-tH D8-tWH nE3D$0IQE3Dl$(Dl$ DH =AۃDHȺ^HLHA@33Ll$hLd$pH$H$H$H$HxLH(HWH$IkIsI{HH !AIVu (HH$ HL$E3HHD$(H|$8Dd$ Dd$0Dd$43HD$@HD$PHD$HHHD$XTMHH$DDL$HL$ L\$`sft{HOLd$XHD$(zHL$ HD$PHaHD$`6=t5H u%EL$LH3H$DŽ$8L$H L L$LŋHωQHHtHjHqHL$pE3E33Ht]H hmHtHT$pu+LD$pHHuHL$pHL$pHL$pE3E33u3H$ L$H$H$H$H$H(̸X=H+H,UH$@=H$`=H$h=HHH$p=L$P=H$3A PLD$@<H5D$PD$@3HL$\\$DAL%4A3fA HL$@AHddHÈHAyXHHAh,HHA{HHA jHHA(YHHA0KH|A8I83+c  #ڇZԇF·Fȇ‡2FƄ$*$$$ $0)7H53HA H-3HA LD$8HEHPHL$8HD$4HD$(H$HE3E3D$4HD$ $\HL$8HD$0HHD$(H$E3E3D$0HD$ %HL$8HD$0HD$(H$ HoE3E3D$0HD$ HL$8HD$0H5E3HD$(H$0)E3HD$ D$0HL$8$u$|$4uH H$A[ %H ΨH/ eA<DžH$x= } H 8$L$HDˉ~rt?ffffIcIH HAHH„Au3IHHLA8u8$ L$ DtHH; Ct,Bu;HȋH [LHuffHI;t8uH8uH3HOH "WH{DHPH eDHnDHNH xDHaDH:PH[DSH H <Ht<HHtHHHtH8?3H8H\$0H|$(Hً B[gHHu!HӋ nBLgu=B*HHHHHCHGHHHD;HtАHBH\$0H|$(H8UH HHHы VH ]HXH\$PHl$HHt$@H|$83HLd$0IHDuHWHHtZH:LAL3H|$(HHD$ HHHGtHu$HthHHH|$8Ld$0Ht$@Hl$HH\$PHXH(7;HiCÞ&HH(HH$H$HL$@.HA3HHu,=duPCA>,HuAHL3SCdCdCdC %dHL3 =dt-ddddf=E4MZuSHcx4H=54Hǁ8PEt3ۉ\$ ?fx t3ۉ\$ /w3ۉ\$ 39É\$ 3ۉ\$ H=3yBu"=cuB?s=;u#=cuA?H=^y =vH/\HCc6Yy <Uy <+=D$(t<UHD$0D$|t D$A L3H]D$$u>>|$ u>>H$H$HUH HHHыQH ]H(3ҹ`KH(H8H\$0H|$(;dHtDtu!dHdH;tdHu 3ۋcLcH|$(IAH 2HMk8HBDtEH\$0H83H\$0H8̉L$HXH\$PHt$HH|$@Ld$8; shHcHHL%@Hk8IDtBcIDt D$ Q D$ H3HHD$ - R H\$PHt$HH|$@Ld$8HXUH HM`cH ]SH AH٨t tHIc3HHCCH [H8H\$0Ht$(HًI3H|$ $<uAt9;+{~+HSKD ;uCyC K H|$ HKHt$(H CH\$0H8H8H\$0Ht$(HًI3H|$ $<uAt9;+{~+HSKD};uCyC K H|$ HKHt$(H CtH\$0H8csK7eH\$0H83H\$0H8̉L$HXH\$PHt$HH|$@Ld$83ۉ\$(D\$$hÉ\$ fff;jHcH BH<ttHBtjH"H At4ut%É\$(ut;DDDd$$H3HP|$`\$(Dd$$D$ D$ dH3HYD$$|$`DD$(H\$PHt$HH|$@Ld$8HXUH HM HcHsHbH ]UH HfH ]̹H 2SH %u;LHcȺNHHu*HˉNHHu H [E3H1IffffffHHHH0HuH}1ALDfffAIHIHk8LItMuIH0Iu3H [H(=]tfH H(H(H0H;r6HY4H;w*H+H*HHHH?HʃH(eH0H(H(} H(eHJ0H(H(HE0H;r6H3H;w*H+H*HHHH?HʃH(cH0XH(H(} H(cHJ0)H(̉L$HHJH\$@Hl$8Ht$0rH|$(H^@U3tzHBHJBz Bu/>H0H;t0H`H;u huHgC+HS+kHBHC$ȅC~;DŋqHKD$P JH|$(Ht$0H\$@HHÃtHcHHȃHHk8HH7@ tA3ҋeHKD$PHT$PD;Hl$8t K tD$PH|$(Ht$0H\$@HHHt$0H\$@ JHHHH-H$H$H$H$L$L$x3L$pE3EL$hEHH$Pu3HcL DHHAIHT$8Mk8AD tA3yfHT$8L MI ADE3EH*H\$@3fffff+A;s&H< u  HHHHH|I HD$@DI LL$0HT$@D+Lt$ )thD$0HL$@DHH+H;|HT$8L +A;hH$EEtpAu[E jD0DI LL$0EHHt$ t Dl$0E3ԻDAGEHT$8L IAD@t }u3#D+AL$hL$pH$L$xL$H$H$H$P趫HĨ̉L$HhH\$`Ht$XH|$PLd$HLl$@Lt$8AL; syHcLIL5)@Hk8KDtSYKDtDIԋD$  D$ H3HGD$  H\$`Ht$XH|$PLd$HLl$@Lt$8HhUH HMpPYH ]HXH\$P]Hl$HHt$@H|$8Ld$0E3LM$%HH H0ܳLIIEL$D|$4 AD|$4 C @D|HD|$4 @It;@ht)@lt@w  l$0} l$0q l$0e A<6l$0uAx4uIl$0= <3uAx2uIl$0! $HtfffffȀ9tHu+DLl$@ II@ L$tfD D$PD D$P@ l$\l$\Dt$0H\$pA@EDt$0yALu@guIAA΃Dt$ t H׋0IEK|$(.Hl$8L$)HT$`D$PL.H$xD$+HH$xE;L$+H$Dt$ EHD$D$+HH$H$xD$+HvAODt$ xHHXH HEHʼn\$$;up6Ff$Hs1OxHHD@H HDMHA;u#Dt$ u }%u3}nu-M At HAGt H׋GLl$8D$TL$(L$@H$PuI.uD$Pu L$+tDl$PAL$0L$8H$HH$XH$`H$SHhff# fDD7DSHPBAL=wH@HcPA#HP[I@DAAf$HsDD$DT$ED$FAT$DD$EAAAD$0HT$DD$(AALL$@D$ 9HuHP[D$@#HP[HHH(H\$@Hl$8HHt$0H|$(HttH H;thH8u\H Ht9uH(LHHt9uH(MLHH(H0Ht9uH8H|HHH^H;t`uIHHOH_XH-H9ktH Ht 9u'H{tHKHt 9u H HuHH|$(Ht$0Hl$8H\$@HHHHHtH HtHHtH0HtHAXAL =L9Ht HHtHxt HHHtH IuHH`H HHtH HtHHtH0HtHAXAL fffffL9Ht HHt Hxt HPHt H IuHH`HSH@6H؃t$=GtHtH 6HHD$(HhH\$0HtPHtKLLT$8L;t7HHQMtIMtA:uHL;tIH\$ HD$ H3HHD$ H@[UH H 4H ]H(NH(SH HH1HA0t ǁƁlCƁC 5H`HH R]H3HH [UH H ^3H ]H8H\$0H|$( *HHuB7HHt+ H*tH>HCTH|$(HH\$0H8H8H\$0H|$(\ rF*HHuBHHt+ EH *tHtHCčHH|$(u HHH\$0H8HHL$SH0HHI8Ht謿HKHHt螿HKXHt萿HKhHt肿HKxHttHHtcHHH;tK 2HHL$ Ht uH; tH3Hr 2HD$@HH\$(Ht*HH;tHH;t ;uHH3H<HL$@貾H0[UH H 0H ]UH H 0H ]H(H ot!Hu;(Hk Q3-(H(SH /<H HHH֪HHHH'HHH'wHpHH'`H'HH'tH=}'tH={'tHuAHHHW'HHA'HJ'HۉHD'H#'H \҃=thHHt6 H&t#HMHCH [Ë t&b.3H [SH }H [SH H jHtHHHHtЋH8H]H\$0H|$(HtHeH=v3H;su@H HtHH;ru)HH=&H;sHHtHH;r3H|$(H\$0H8DD$L$HXH\$PH|$HA؋*/=%%%urH Ht4HfffHHH;rH8tH HzHH\$ H=H|$0H;sHHtHH\$ HoH\$(H=kH|$8H;sHHtHH\$(H3H9|$pu%,L$`H\$PH|$HHXUH H}pt ,H ]E33E3A33A3ApHhH\$`Hl$XHt$PH|$HLd$@L%I3fffff; t HrHcHB; ##ou =^H5]H-$H$HȶA3HEHжHEHضHEfE$~uCHH0HH00Ķf0ƶ0Ht$P3H=#HHHHuHE333ҿHE3DT$0H-f<"u3EA"HDBAHDT$0tHDHAD(tAHDT$0t HˆBHEtDEuA tA uHtZE3ffffff9fffff< t< u HHЀ9HtHHfffE39\Au fHA9\t9"u&EuEt y"uHE33EDAEtAEHt\HHuDEt^Eu A tSA tMEt@HAt'D(t DHHAHAˆBHPD(tHAAH8HtHADT$0HHl$XtHIcHclj|$4H<HÛHHuH|$HHt$PH\$`HhLHD$0LL$4HHHD$ D\$4H|$HHt$PAHH\$`D3HhHh^ H\$`Hl$XHt$PH|$HLd$@iHHt% Bkxu\ ]iHH8tH8uH8u+HcH轚HHH i3 hHHf?HtfffffHf;uHf;uE3H+LLd$8Ld$0H33DDd$(Ld$ htPHcHHt@Ld$8Ld$0DL33ɉl$(HD$ hu H(IH\hHDHNh373H|$HHhLHH菕HhHLd$@Ht$PHl$XH\$`H|$HHhHH$H$H$L$L$L$L$HL$ 6hLHu `H gHL;s83fffffffAsIAC As I8HQHL;r3 f|$b:Lt$hM,AILcMAA;DLA;}~H=fffVLHtWHߋ IL;s.ACIAC As I8HHL;r؋qHA;|D=`H=wE~|IMHtXAtPu ftBHcHHDAMk8L$IEI$AAD$IL$GtAD$ IIA;| DHHHk8HH;uoCHu AeLHt>Hnet1L#uK@ uKHKt!C K@KAHHi (e3H$H$H$L$L$L$L$HSUH(HËH(][HHHH\$@H|$8HHI2-+tH;uTHL$ LdH\$ icDI3dDI3eHL$(DI3 dH3\$(HEH\$@H=#H|$8HHUH\$Ht$H|$Ld$Ll$HpHl$ HHHHt tHL%5AHL%_AƅAHU3bu7HMHчHHχHA͇ALJfAAHu3HH}HHA HD$ s H\$PHt$HH|$@Ld$8HXUH HM`@H ]HXH\$PHl$HHt$@H|$8Ld$0L%lLl$(3H-I3L-f{u"HcƺH IDHH t3HH;|͸Ll$(Ld$0H|$8Ht$@Hl$HH\$PHXHcHJ 3HHH\$@Hl$8Ht$0H|$(HLd$ E3H-HH7HttHZHL'HH;|Ld$ H|$(Ht$0fffH Ht {uYHH;|Hl$8H\$@HHH(HcH2HH LZH(HHH\$@Ht$8H|$0Hd$(H=wuw=HcHH5H<3t (ڊHHu- 3s H<3uIHd u2H، D$ H HL$(43H<3H蠌H3H%H\$@Ht$8H|$0HHUH HH YH ]H8H\$0H|$(HcH=HH<;uu zH ;XH|$(H\$0H8HXH\$PHt$HH|$@Ld$8E3ADd$ \$$;S}hHcH/vH<tOH AtAtlj|$ |0HvH H0WH uH lLuM$É\$$H3HD$ H\$PHt$HH|$@Ld$8HXUH HnH ]H8H\$0Ht$(H|$ AHu$ H|$ Ht$(H\$0H8DE3HVu*Xt H|$ Ht$(H\$0H8HcLrHHIHk8dH|$ Ht$(H\$0H8̉L$HhH\$`Ht$XH|$PLd$HLl$@Lt$8AD; pHIHk8dHD$ HHHT$HL$HH$H$H$H$L$3ELl$xLt$pL|$hAD$HMH\$Py \$X@T$X@2ArAr =t@πAɃt4t(tFkAA@A$At! t0t @udEADDA%=+teta=t=tH=u%ADA<=t2=t#=t$菜贜ADAsJ"$DA@tA=*uAA sA t AtZu#^H$HD$0LL$HH$EAIωt$(Dd$ XSHHtHQu HyScSܛu@@ u@H֋Hc@@LL5pmIDKHk8AH@|@y{@tuAu%8tOfWHT$@AD$@8u|$@u׋t$tE33ҋstEu@t KL Lt$pLl$xL$H$L|$hH$H$H$HĨDD$LL$ HHD$0HD$hDDL$(DD$ DLHT$4HL$0D$8H3HD$8HHUH0H}0tM4H0]H(vOH(HHH\$@H|$8HHHue=nuHHrLH dPHt,HuHPHGHuHsH4HcH$HD؉D$ =u PE3AH\$@H|$8HHUH HHE3ہ8AAAH ]HhH\$`H|$XHLL;ytu褿LHf\$@u3H|$XH\$`HhAzufwcH|$XH\$`HhAJHD$HLD$@HD$8A HD$0D$(A3H|$ D$H0Nt|$Ht*H|$XH\$`HhH('HH; t/uľH@H(H@H(H8HH\$0Ht$(H|$ HHuHH|$ H\$0H8~Hu3H|$ H\$0H8þ3Hw!H =kHLHD3LNHu=tt HuHt$(H|$ H\$0H8SH $HH;tϽ ~AHH [qH@HcˊHH [SH ĿHH;6to ~AHH [H@HcˊH%H [SH dHH;t ~AHH [鱹H@HcˊHH [H8H\$0H|$(HtJBuy?u;HzuHHH;Cu {uHHH C@Ht@88tHHH|$(H\$0H8@8CcK@H|$(H\$0H8HHMH\$@Ht$8H|$0IHItMtAu Htf3H|$0Ht$8H\$@HHÃyu$HtfH|$0Ht$8H\$@HHH@f$HsaD A~(A;|#K3HD$(HT$ }JuHc H;rMtG H|$0Ht$8H\$@HHËK3HAD$(HT$ (JGH|$0Ht$8H\$@*HHHHH\$@Hl$8Ht$0H|$(HHI HHH; tt u蟺HLLHH|$(Ht$0Hl$8H\$@HHFLL$ DD$HT$L$UHHl$0H]XHuPH}HLe@Lm8Lu0L}(MLDfHH;=tnuH uOLMAHImATHt $pJ xDΉ 1)3DDEu DgD 9EЉ\$(H\$ DMAEHDE NLcMI@Hl:H+H|$0H}3H:!3HDLuxDD} HuIcHHHAD|$(H|$ DMƺAGtLDH׋MpFEtH&{33DEuDguwAu3W;t'\$(H\$ LMƋЋHHHt/LLl$ DMAArFHtHzH]XHuPH}HLe@Lm8Lu0L}(He`]HSH HHIFzHK=zHK4zHK +zHK("zHK0zH zHK@zHKHyHKPyHKXyHK`yHKhyHK8yHKpyHKxyHyHyHyHyHyHxyHlyH`yHTyHHyH] [\$8D$0H$`LD$`DϺ|$(HD$ H$xH ffffff\`t` A `%t` A `Ƅ `HHuXHH 2fDCA@ w AC `"Aw A C `Ƅ `H;rH$pH$H$`w3HĈHxHH\$pHl$hHt$`H|$XLd$PLl$HHD$8uAH ZA333=[=Z=tZH=[=[b33L-RIŋH9HH0rHT$ ?H58ZA3H83|$ ![=YE@8|$&HT$&t9fffBt,DD;wA+ID0fHHuH@8:uHYHHHu f=dYjYH5nYA3Hn2LTmHBILALAM„t?ffAHt3DD;AwAA+ID1HHuA@IuIIIuLd$PYXt:t) tt=X.X"XsX gXHLmHBD)fYBD)fvYBD)fkYBD) f`YBD) fUYBD)fJY 3WXHWW2WWWW=WH=X=X3&9=tH WA30Ll$HHt$`Hl$hH|$XH\$pHL$8/HxHhH\$`Ht$XH|$PLd$HADd$$ 諰HD$8HHL$(H; tu >HHD$(3=ui<5uX<uqt$pt$p;5WHuVH\$0Ht9;t %nHHD$0HmDD$$; JWK -VK VK ׉|$ Lfff}HcAHPfDK‰T$ ׉|$ }HcB@D‰T$ |$ }HcB`lj|$ HUAuH;UtHo|$$H3H&D$$H\$`Ht$XH|$PLd$HHhUH H H ]H(=YuY3H(HxH\$pHl$hHt$`3H|$XLd$PH95"AHLH Dh;HHHhHb<HHtlHgHF<HgHH/<=|HuH|$hHL$X"Hx@u@tH|$hHL$X!HxH|$hHL$X3!HxHxHUH\$pLHH|$hHD$X3HT$@HL$HD$0D$(E3ɉD$ HL$HHӋ @H\$pu#t*u>H|$hHL$XH!Hx@u@tH|$hHL$X#!HxH|$hHL$X3 !HxH8H\$0H|$(IxDL0HA~+DE+ffffftH0HIuEx?5|HȀ89u 0HȀ89tA;1uA@H|$(H\$0H8I{3HISHLIH|$(H\$0H8x[HHҟH$H|$xILLI0I HEfAAfAHD$`fAAхttfA<$fAEuu 3D$4D$0JfA<3A L$0A T$4rfAL$0 sT$4fE HT$ HL$0fDT$8HLL$@E3HAHL$ fBHHL$DCD$BD$@CHD$DH+ffffHD uH{H|$xHH$HL$`HĈ̹馣HJFHXH\$PHl$HHt$@H|$8Ld$0A3Ll$(3Lt$ D.A3ҋ+؅,AHM,HHuu DDA;HEMƋot+؅u8u ]u Aԋj,LH3|,Ld$0FyDE3ՋH_*σut "uH,E3AՋLt$ H\$PLl$(H|$8Ht$@Hl$HHXHHH\$@Hl$8Ht$0H|$(HHHH;-_tu芛H}uC HÍAw HǍBw t;t+ʋH|$(Hl$8H\$@HHHH͋HsHDžt;t+Ht$0H|$(Hl$8H\$@HHHHH\$@Hl$8Ht$0H|$(IHLd$ HLL;%wt u袚LHtuA|$u7f HÍAw HƍBw Htt;t+ʋ8II̋HHHtt;t+H|$(3Ld$ Ht$0Hl$8H\$@HHHhH\$`Hl$XHt$PH|$HLd$@Ll$8DJLt$0AAAL|$(E3HDAAMc+D+BDAAIcЅu!AEHcH{9,u HH|kAA#ЋA#+ºD+HcAL A MˋHcx%H4tHcúLHˋyHt$PH\$`AAAMF!$L|$(Lt$0Ll$8Ld$@HcH}H AL+3IH|$HHl$XHhH8H\$0Hl$(Ht$ 3H|$LA DՃL+‹ȋA+AfffCIA A#É$CTD$AI|H|$LcHt$ H\$0HI+IfffI;|AA,HHyHl$(H8HT$HAH$Hl$xHt$pH|$hD$(ALd$`Ll$XL|$PDy D$,AAI?D$0u.3ۋH9\(uHH|H\$(\$0APHL$(HHD$8AHL$(D$@tËV+F;}3H\$(\$0;b+HD$83HA HL$(H™L$0DDAAD˃L+‹DA+ABT(AIA A#‰D$ BT$DL$ AI|McLl$XHT$0JH+fffI;|D(\(HHyVHL$(F DLÙD؃A+‹DD+BT(AIAA #ʼnD$ BT$DL$ AI|Ld$`Hl$xMcJHT$0H+I;|D(\(HHyA;V HL$(|"3H\$(l$(\$0~>Ft$(<3H$F+N AL|$PHt$pɁ |$(@u L$,z  u:H|$hH$HĈLLDL$ HT$HL$HHcH$H$H$H$L$L$L$L$E3f3HD$xILl$XD$<AD|$(D|$8D|$ EEAfL$$SLL;śLD$@tVu LHD$@HH\$0< t < t< t< uHL <;Hà HcIcuIG<w HI(H@:9u@+t%@-t@0띾fD$$돾fDt$$낍GD$(<w HfI(H@:9u M@ǃՃ:eHAuIcuIH˾ G<w HI(H@:9u @0@D$(t.fffs@0IA}A@;H@ZuLD$@I(H@:9uHT$0`@ǃՃ:L HAvIcuIHT$0)HT$0H˾ D$(D$8u@0u@;AH@0t@t(s@0IA}A@;H@u@ǃՃ:L ލHAPvIcDvIHT$0LD$@vHT$0LD$@H˾ _@D$8HT$0LD$@H(GHS<HT$0w H@+@-@0@0t$ ufffff@;H@0t@1H@ G<w HD9$@+HSHT$0t@-D$<`V MvH\$0o@Ͼt1C @DtHAP@;H@uAQ@tHuH HHˋt$ H$H$HD$(H$vD$o<|D$oIͽAIE8}ufffI̓AE8}tLD$HHL$XD$, hPB0rbT>. xhXJ|p^RF:." zj\L<*`ND"p ,|pdR:,l^N<* tbP@0 rXD86$p\P@-A@WA@openhttp://www.sysinternals.comHANDwbBINRES\\.\Global\%s\\.\%s%s\Security%s\Enum\Registry\Machine\System\CurrentControlSet\Services\%sRtlFreeUnicodeStringNtLoadDriverRtlAnsiStringToUnicodeStringRtlNtStatusToDosErrorntdll.dllImagePath\??\%sStartErrorControlTypeSystem\CurrentControlSet\Services\%sSeLoadDriverPrivilegecommdlg_SetRGBColorcommdlg_ColorOKCHOOSECOLORFG%s%s%s*Couldn't access device driverRegmon 0Invalid History Depth.Filter Error%dNo process selected;Filter size exceeded:OtherResultPathRequestProcessTime#Cannot find string "%s"No items to searchUnable to create Find dialog %s The file contains invalid log entries and will not be fully processed.Log File Open ErrorError opening %s.r*.logOpen Regmon Log File...Regmon Data (*.LOG)*.LOGAll (*.*)*.*Regmon.log%s Create File Failed.Save ErrorwSave Regmon Output to File...BALLOONballoonSysListView32{\rtf1\ansi\ansicpg1252\deff0{\fonttbl{\f0\fswiss\fprq2\fcharset0 Microsoft Sans Serif;}{\f1\fnil\fcharset2 Symbol;}} {\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\qc\lang1033\b\f0\fs20 Sysinternals Software Licensing\par \par \pard\b0 This software is provided "as is" and use of the software is at your own risk. Sysinternals disclaims any and all warranties, whether express, implied or statutory, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose or non-infringement of third-party rights. Sysinternals does not warrant that the software is free of defects. \par \par You are allowed to use software published by Sysinternals at home or at work without paying a commercial license fee provided that you downloaded the software yourself directly from Sysinternals, and: \par \pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Use the software on computers for which you are the primary user; or \par {\pntext\f1\'B7\tab}Use the software on computers for which there is no primary user (e.g. servers, including Terminal Servers) and you are a full-time employee of the company that owns the computer; or \par {\pntext\f1\'B7\tab}Use the software on computers within your residence \par \pard\par A commercial license is required to use the software in any way not covered above, including for example: \par \pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Redistributing the software in any manner, including by computer media, a file server, an email attachment, etc. \par {\pntext\f1\'B7\tab}Embedding the software in or linking it to ano\tab ther program including internal applications, scripts, batch files, etc.\par {\pntext\f1\'B7\tab}Use of the software for technical support on customer computers \par \pard\par Sales of commercial licenses support Sysinternals product development and assure that this Web site continues to offer valuable, up-to-date tools. Established software companies redistribute these utilities and incorporate the code into their products because this offers the potential to save significant development time. Sysinternals commercial licenses are priced according to the complexity of the licensed code and its role in the target application. If you are interested in licensing Sysinternals tools or source code for redistribution or for inclusion with or as part of a software product, please contact licensing@sysinternals.com. \par \par } Sysinternals License%s License AgreementRICHEDIT&Print&Decline&AgreeMS Shell DlgLicense AgreementRiched32.dllEulaAcceptedSoftware\Sysinternals\%sRtlFreeAnsiStringRtlUnicodeStringToAnsiStringNtQueryInformationProcessModule32NextModule32FirstProcess32NextProcess32FirstCreateToolhelp32Snapshotkernel32.dll\Process is not accessible%X%d.%02d.%04d.%04d\StringFileInfo\%04X%04X\%sn/aCompanyNameFileDescriptionUnable to query properties for %s%sSysTreeView32Regmon was unable to launch Regedit.regedit.exeRegEdit_RegEdit\HKEY_USERS%sHKU\HKEY_CLASSES_ROOT%sHKCR\HKEY_CURRENT_CONFIG%sHKCC\HKEY_CURRENT_USER%sHKCU\HKEY_LOCAL_MACHINE%sHKLMThe full name of the selected key or value is not available.%s Make sure that your account has the load driver privilege and and that Regmon is not already running.%s: %sError adding item %d to list view$tIL?DllGetVersionPropertiesFilterRegmon has been configured to log Registry activity to %s during the next bootUnable to copy %s to %s Make sure that %s is in the current directory and that you have permission to the \System32\Drivers directory.Historyregmon.hlpAboutBoxSystem\CurrentControlSet\ServicesEnumSecurityRegmon could not configure boot loggingSystem32\Drivers\%sTagGroupDeleteFlagRegmon is configured to log Registry activity to %s during the next bootCONTEXT%10.8f%s.%03d%sInitFilter%s is not loaded properly.\\.\REGVXD.VXDCould not install Regmon VxDRREGMONVXDREGVXD.VXDRegmon located a driver with the wrong version. If you just installed a new version you must reboot before you are able to use it.%s\REGMON.LOGCould not resolve SYSTEMROOT environment variableSYSTEMROOTError loading %sCould not extract Regmon driver to %s%s\%sRREGMONSYSRREGMONSYSX64RREGMONWNETSYSIsWow64ProcessRegmon is already running on this systemRegmon requires the Load Driver and Debug privilegesREGMON701%s\Drivers\%sGetSystemWow64DirectoryASystem\CurrentControlSet\Services\REGMON701\%sREGSYS701.SYSLog &Bootcomctl32.dll%d-%dLISTMENUICONRegmon usage: Regmon [-q] [-o] -q Don't prompt for filter confirmation on startup -o Start with capture offRegistry Monitor - Sysinternals: www.sysinternals.com-O/O-Q/Q-?/?ACCELERATORScommdlg_FindReplaceYour account does not have the Debug Programs privilege, which is required to run RegmonSeDebugPrivilegeHiFiltersExFiltersInFiltersSettingsSoftware\Sysinternals\RegmonMS Sans SerifSoftware\Systems Internals\RegmonEEE50P (8PX700WP `h````ppxxxx(null)(null)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~FlsFreeFlsSetValueFlsGetValueFlsAllocCorExitProcessmscoree.dllruntime error TLOSS error SING error DOMAIN error R6030 - CRT not initialized R6028 - unable to initialize heap R6027 - not enough space for lowio initialization R6026 - not enough space for stdio initialization R6025 - pure virtual function call R6024 - not enough space for _onexit/atexit table R6019 - unable to open console device R6018 - unexpected heap error R6017 - unexpected multithread lock error R6016 - not enough space for thread data This application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information. R6009 - not enough space for environment R6008 - not enough space for arguments R6002 - floating point not loaded Microsoft Visual C++ Runtime Library ...Runtime Error! Program: e+000Program: A buffer overrun has been detected which has corrupted the program's internal state. The program cannot safely continue execution and must now be terminated. Buffer overrun detected!A security error of unknown cause has been detected which has corrupted the program's internal state. The program cannot safely continue execution and must now be terminated. Unknown security failure detected!InitializeCriticalSectionAndSpinCount ((((( H h(((( H HHH:mm:ssdddd, MMMM dd, yyyyMM/dd/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMarchFebruaryJanuaryDecNovOctSepAugJulJunMayAprMarFebJanSaturdayFridayThursdayWednesdayTuesdayMondaySundaySatFriThuWedTueMonSunGetProcessWindowStationGetUserObjectInformationAGetLastActivePopupGetActiveWindowMessageBoxAuser32.dllSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDec1#QNAN1#INF1#IND1#SNAN 0I IdD4t TB!!!== dT- -)%!t4 t d 4B  t 4B!P$!d 4P$!P$!4d P$$$t  T  !p!:p!T:p!pN NFt3d+4 !`!!\! tdT4`!!\! tdT4`!!\!`!!\!!!4! !!4!0 0( tdT4`!!\''  0!-%.!%..!d9%..!t4-%.$$485!/0 !0O1!d90O1!t4/0 $$485!022d!23L!T;23L!t5d6022d$$4:7!4G5!G55!d6G55!t5T;4G5$$4:7  td t d T 4!12t3T9 ;;! ;;!;P<p!1T9;P<p!;P<p!1T9;P<p!2t3 ;;U U/M0/d4'48 520!A,B!,B!C!,B!C!##td4A,B**T  TEI=J5K-L%tMdN4S O G7I7I!JRL!RLL!DERLL!CJRLK KBԏ6Đ.t&dT42P& &! t d 4  r; ;% tdT 4 BBtd 4b2P td 4  FpcXQPRHS@T8tU0dV(TW 4XYf^EVFHG@H8tI0dJ(TK 4LM0" "tdT42Pr0 >`B2P20 t 4bt 4b2P2PR0 )lB202020t4b2Pt 4     t d T 4 BbB20td 4b  20 =E=951-t)C$d4P t 4b20R02t d 4MH 3.t)d!T4UM > 3.t)d!T4 tdT 420t 4btd4b!!tT4" t d T 4 % % t d T 4 BP0 ??7/'td4 **-B-t4 4%&#!.)*t+ d,4-P ...! !tdT4td4bB2P  R0 22@322@3B2P2P" "   t d 4 c4453464454562P td 4  v667) )tdT 4 $ $tdT 4B2Ptd 4 89}99999t 4b2P td 4  ^::;td 4b2P& &! t d 4  R<<<20t 4MM HC91t)d!T4RP .BTBpBB2P t 4 4CDCpCDCt 4 Btd 4b202020t 4btd 4 tdT 4 <5< 8 4 0,t(d$4 3P QJ|J|J2 0  202 0[91t)d42 + & !t d T 42P  t d 4  UVVB  t d T 477 - ( # t dT42P& &! t d 4  [[0\%b HE=951-t)C$d4P ]]]2 %2.t# d4Pt 4 20 t 4 t 4t 4bJt455,tdT 4  tdT 4# #tdT 4::+"t d T 4  tdT 4b<< 7 2 &t !dT4 h]UME=t5d-T%4Y= 83t.d&T4B0& !tdT4]X SKC;t0d(T 46"td 4 t 4b &E& "td4C P ݃ p68xPh>0|nXD  *6LZlz".<Rd|(@\rnbVL>, hPB0rbT>. xhXJ|p^RF:." zj\L<*`ND"p ,|pdR:,l^N<* tbP@0 rXD86$p\P@3CloseHandlerGetLastErrorDGetCurrentProcess^LockResourceWSizeofResourcePLoadResourceFindResourceASCreateFileA+SetLastErrorGetProcAddressGetModuleHandleASetEventDeviceIoControlGetTickCountGlobalReAlloc GlobalUnlockGlobalLockGlobalAlloc__C_specific_handlerlstrcatAHeapFreelstrlenAlstrcpyAHeapAllocGetProcessHeapULocalFreeKLoadLibraryAQLocalAllocReadProcessMemoryOpenProcessXSleepGetVersionExAGetUserDefaultLangIDFormatMessageAWaitForSingleObjectWaitForMultipleObjectsFreeLibrarySetFileAttributesAGetTimeFormatADosDateTimeToFileTimeFileTimeToSystemTimeFileTimeToLocalFileTimeOCreateEventAEGetCurrentProcessIdZGetEnvironmentVariableADeleteFileA~GetModuleFileNameAGetSystemDirectoryABGetCurrentDirectoryAQueryPerformanceFrequencyGlobalMemoryStatusGetVersionKERNEL32.dllSSetCursorInvalidateRect<ChildWindowFromPoint\GetSysColor]GetSysColorBrushLoadCursorAGetDlgItemMoveWindowxGetWindowRectGGetParentEndDialog\SetFocus;CheckRadioButton+RegisterWindowMessageAPostMessageA?SendMessageAIsDlgButtonCheckedEnableWindowMessageBoxA8CheckDlgButtonYSetDlgItemTextAIsWindowEnabledInvalidateRgnGetDlgItemTextADefWindowProcADestroyWindow GetCursorPos5ScreenToClient@ClientToScreenSetTimerShowWindow_GetSystemMetricsGetFocusDrawTextAGetDCBCloseClipboardPSetClipboardDataEmptyClipboardOpenClipboard-ReleaseCaptureHSetCaptureCallWindowProcA`CreateWindowExAGetClientRectDrawIconExSetWindowLongPtrAInflateRectSetWindowTextADialogBoxIndirectParamALoadIconASetWindowPosFindWindowExA]SetForegroundWindowGetWindowThreadProcessIdWaitForInputIdleFindWindowAEnumDisplaySettingsAPostQuitMessagewsprintfAWinHelpAEndPaint BeginPaint.ReleaseDCLoadStringAEnableMenuItemDestroyMenuTrackPopupMenuLoadMenuADialogBoxParamA9CheckMenuItemInsertMenuItemA4GetMenuItemCount[GetSubMenu.GetMenuRegisterClassAUpdateWindowDispatchMessageATranslateMessageTranslateAcceleratorAIsDialogMessageA<GetMessageALoadAcceleratorsAIsZoomedIsIconicUSER32.dllSelectObject<SetTextColorSetBkMode:CreateFontIndirectAGetObjectAGetStockObjectSetBkColorGetTextExtentPoint32AExtTextOutAEndDocEndPageHStartPageEStartDocA+SetMapModekGetDeviceCapsDeleteObject-CreateCompatibleDCGetTextMetricsAPCreateSolidBrushGDI32.dllChooseColorAFindTextA GetOpenFileNameA GetSaveFileNameAPrintDlgAChooseFontAcomdlg32.dllAdjustTokenPrivilegesMLookupPrivilegeValueAOpenProcessTokenRegDeleteKeyARegCloseKeyRegSetValueExARegCreateKeyARegQueryValueExAGLookupAccountSidAGetTokenInformationRegOpenKeyARegDeleteValueAADVAPI32.dllShellExecuteASHGetFileInfoA ShellExecuteExASHELL32.dll CreateToolbarExCOMCTL32.dll VerQueryValueAGetFileVersionInfoAGetFileVersionInfoSizeAVERSION.dllExitThreadResumeThreadnCreateThreadGetCommandLineAGetStartupInfoAExitProcessEnterCriticalSectionJLeaveCriticalSectionWriteFileeTlsAllocHGetCurrentThreadIdfTlsFreehTlsSetValuegTlsGetValueGetStdHandleHeapSetInformationHeapCreate=LCMapStringAWideCharToMultiBytenMultiByteToWideChar>LCMapStringWqUnhandledExceptionFilterFreeEnvironmentStringsWFreeEnvironmentStringsAWGetEnvironmentStringsYGetEnvironmentStringsW'SetHandleCounthGetFileTypeDeleteCriticalSectionQueryPerformanceCounterGetSystemTimeAsFileTime:SetStdHandleFlushFileBuffersSetFilePointer"InitializeCriticalSectionHeapReAllocGetStringTypeAGetStringTypeWGetCPInfouGetLocaleInfoARtlUnwindExGetACPGetOEMCPReadFileVirtualProtectVirtualAllocGetSystemInfoVirtualQuerySetEndOfFile......hA`AXAPADAc{#Tw=:zc%C1T>{Dop P$P88]]aaep:p: T #!D#!Z!4`!!\!!4!' '2'2'O'O'')')Z+Z+o+p+-h-%.%.../////p/0 0O1O11122#2022d23L3E48E4}4(}444G5G5556677#7p0777; ;;;P<pP<Z=XZ==H=?0?? ?T?T?$@0@A AAA,B,B!C!CEE2E2EOEPEJ JRLRLLLMhMMXM(NH0NRRS@SS,SlTlTqTqTTTTTU U@U@UhUhUnVnV7Yl7YYXY9[@[[[]]O^P^^,^_@```ata[c`[ccPc\d`dBePepgpgaipik4k!l !ll lllllVm`m3qL@qGrdPrssttttttvvwwww {8 {}$}}~~~|~d|~ LӁӁ   F(F̓Ѓ<Xpp JDJ,PPh T0͹й  7@!0GPļ@м0l sY`w'0P0P8L`T^l`{\rbp R@`v0pCxP DPh~4@ (v0Hp JPsl p<<d@LQ`x(0U$`TD4            DP . 0( V<`D S`4!!!4""<"#L#%`%(t({**----7.@.00I1@P12X 2z2l243@3X3t`33355566 67T7&7D0777|88889999/:0::4;;$ ;;d;<<<x=U==`>`>BBeBpBBBB0BkCHpCC8CDpDDDEEEEGFPFFFGGPGHH IIKKM0M N8NN@NNH OAQPPQTdTVVVW(W0WXX=[@[-\ 0\F\P\\X\_`_``aa.b0bbbcchdpdefggh8hviPijljkknnvvzz-{P{{ 0|a~(p~́@Ёh|ĄL HpH p Vl0H`x  8 P h 4>    0 @ P ` p             0 @ P ` pppg` 48  (0^HJH` :h L 0p x H"LISTMENUCONTEXT CHOOSECOLORFGABOUTBOX PROPERTIES INITFILTERHISTORYFILTER ACCELERATORSHANDICONBINRES RREGMONSYS RREGMONVXD&Filed&Open...G&Save Ctrl+SLSave &As...e&Process Properties... Ctrl+PR&Capture Events Ctrl+EhE&xit&Editg&Copy Ctrl+Cb&Delete Delp&Include Processn&Exclude ProcessoInclude P&athrExclude Pa&thX&Find... Ctrl+F\Regedit &Jump... Ctrl+JTC&lear Display Ctrl+X&Options`Fo&nt...lHighlight &Colors...V&Filter/Highlight... Ctrl+L[&History Depth... Ctrl+H^Always &On TopS&Auto Scroll Ctrl+A]Clock &Time Ctrl+TaShow &Milliseconds&HelpQ&Help...,&About...Popupe&Process Properties...p&Include Processn&Exclude ProcessoInclude P&athrExclude Pa&thȀ d2Regmon FontHelvP( @&Font:Q !P ^@pPl, AFont St&yle:!Pl @@qP B&Size: !P @rPT-OKPe-CancelPN31Sample@[DAaBbYyZz Ȁd2*Choose Highlight ColorsMS Shell Dlg PPg &FG Pkg &BG PVPPq2&SelectP6&CancelPN6&OKP &Color choices: Pv P P(P&C&oP9 ColorP9 |S&olidP  Hu&e:P P. &Sat:P, P< &Lum:P: P  &Red:P  P. &Green:P , P< Bl&ue:P : PH&Add to Custom ColorsP g? Preview P ȐN>About RegmonMS Sans SerifP / OKP1 0Regmon v7.03P1)zMark Russinovich and Bryce CogswellP1JCopyright 1996-2006P ICONP1rSysinternals - www.sysinternals.comȀ DialogMS Sans SerifP~2&OKP = P 1Path:P "Version:P/"BStaticP  P/ P/P N/Command line:P Y P nUser:PntStaticȀ%Regmon FilterMS Sans SerifB#P./@B#P.?@B#P.O@PEnter multiple filter match strings separated by the ';' character. '*' is a wildcard.P2Include:PBExclude:PThese filters were active the last time you exited Regmon. The settings you configure will be enabled when Regmon starts monitoring.PRHighlight:P*2&ApplyPh2&DefaultsP2&CancelP2&OK#PcB Log Successes:#PnB Log Errors:#P\c8 Log Reads:#P\n8 Log Writes:#Pc8 Log Opens:Ȁd2:Regmon History DepthMS Sans Serif P? 0 Po msctls_updown32Spin1P2&OKP2&UnlimitedP&2&CancelP"-History Depth:P|A History Depth of 0 signifies no depth limit (all output is retained).Ȁd2'iRegmon FilterMS Sans SerifB#P,@B#P,+@B#P,;@X*2&ApplyPS2&DefaultsP2&CancelPEnter multiple filter match strings separated by the ';' character. '*' is a wildcard.P Include:P -Exclude:P>Highlight:P2&OK#PNB Log Successes:#PYB Log Errors:#P^N8 Log Reads:#P^Y8 Log Writes:#PN8 Log Opens:(興興o`3x n`ww33333fff``wx333303|y po`33333w n`` x33330333333yppf`{x33陙 w```{x0~~~~p`f``{x0陘 pwwwwp~```p0yy~f`g` 0~~wwwv戀| w{0~p~px`p wx0ww興vxwww4VS_VERSION_INFO?StringFileInfo040904b0Comments: CompanyNameSysinternalsdFileDescriptionSysinternals Registry Monitor*FileVersion7.03.InternalNameRegmon:LegalCopyrightCopyright 1996-2006 Mark Russinovich and Bryce Cogswell(LegalTrademarks> OriginalFilenameRegmon.exe PrivateBuildHProductNameSysinternals Regmon.ProductVersion7.03 SpecialBuildDVarFileInfo$Translation  AS Cg ER FX H[ J\ LV Pe SG T].bpQrfrcXT ( @?/o   @4( @~v~~n~vg`L~v~~n~v`g``Lffffwv``````L~v~~f`dfff~v~~ffvhpf`wwf~vnpffx`~~~f~v`hgww``x~nff~``wv`gff`nfnvv`f`gfngf~~v`fgfvxnv~~px`~~~vv``ff~~v`fv`fg`v`~~pp????( `Ўnff` h~p``~h`n`n`<I$H$@   _ (MZ@ !L!This program cannot be run in DOS mode. $kY/8/8/80͢-8/88Y͢*8Yˢ,8Yۢ,87.8Y΢.8Rich/8PEdpD" lBilP Ё.text bd h.rdatat h@H.data,r@.pdata@HINITL .rsrc@B.reloc @BH(AH\$@H|$HHH{qf;CrC HHC8H|$HH\$@H(HHHH|$HH\$@H(H%GqH(H\$@H|$HHHtdfff<*tlDEt+ff*tAHHKHCH=t H BHYHH.H E33H|$HH\$@H(H%iHXH ݏH\$pH|$x3H@8=tDHHL$HHL$03H|$0HD$@iH sE3E33H|$ iH 9u9H|$xH\$pHX99tMADdk piHt)H<8H3HX5H|$xH\$pHXH8H|$xH\$pHXHSH0H #E3E33HD$  iL͎IKHtHY3hHHuLAHH ¢3H@H0[H%hH8H\$H3Ht$PHH|$XHHHADdk HHQHShHHthH TE3E33H0HD$ :hHӘH@HHGH*LHL$ MDH^T,z7H>t Hƀ>[=2~Ld$hH5&~338fff<7;t H<7utoPADdk HS yHIDtG|7*77H _BLXBHABID΀>*LHL$ MDHSoy7H>t Hƀ>XH у3Lt$8Ll$@H|$`Ht$XH\$PHHH%{SH8H\$@Hl$HHt$PHH|$XLd$0H yE3E3E33Ld$ #S5xA܅H=KffffffffLLA<*uUD8et:EZEtAA A<wD:uIQIJtIE8!uABt<*t2TPD8et6A*t-A A<w:u7IIE8!uAt<*t2E8!tIIYH;/=wHfffffffLLA<*uV}t;EZEtBA A<wD:uIQIJIA9uABt<*t2VR}t7A*t.A A<w:u5IIA9uAt<*t2A9tIIfu?AHD;.H w3?Q2Ld$0H|$XHt$PHl$HH\$@H8H H3QH8H|$XHLD$@H8HD$@5G@HT$@HL$ AHH\$PH_HPDD$ HT$(HPD\$ A\L$ HGHH\HL$ }PHT$@HL$ ArPDD$ HT$(HnPD\$ HL$ A@PHL$@3H\$PHO E33OH|$XH8HH8HpHeH %LL$PL@HT$@Hx 3HHuPHl3HHD$HAE3HD$03HD$(HD$ H$HOHϋOH|$HHA8HD$DL$AQHHD$ 3H$u)HH u H=HH=HF=FpHE3H$HD$pHD$`APHD$xHD$`OHL$`3H$H$NH$E3E33HD$ yNH@NH$XH$PH$HH8MLD$HHHX HpHxL`LhLpLxMLHٺJADdk MHHD$8nH m4OLHD$@Hu'mnDm mmLHD$@M2H)AAEH~E3Lt$ E3E33H e}_MHHH=HHtH9t HIHuHt3HIH+ff Hu3H }MH|$83H |LADdk LHHuLHpoIHxoIGoAGofAG3HL$8LIH l6f@LL$0AHH[0xQAHHL$HpLx7dHL$0HA6D$?Q7L3H|$0HH%HHL /6D$0???HHT$0H &LLH\$ VH V7f;VrVHVH XVH7HLd$pH|$xH$t 3H6H$H$HL$P1HĘLHHUH$PUI[IkIsI{McL$H UAH6HHu"UDU UUUHL3HHcD$Px`L$PLD$PIԋ3HHAH$P#HfG3HHHL+H5"u HL$P=bH=btU5bHL$0HA4D$?5L3H|$0HH#HHL /D4D$0??? HT$0H $LHD$PLHD$ `TH =T_5f;@TrHTHWTH TH=5L$`H$hH$pH$xH$H$PHĈDL$ L$HHHXHpHxL`LhLpHSH$`EILL$Ll$8|SH aS4HHD$0Hu'`SnSDcS YS_SHHD$0HtH CHH+fff HuHtf?uH=CLHID$$H\$0Ll$8HD$`xE3LD$`IA#"u HL$`=J`H=3`tU2%`HAHL$@Y2D$O2L3HH|$@HHL ?HKHL$hHpLD$HHH$H HD$(LH\$ gPH O1f;OrPHPfH OH0QHL$@HT$@H9LK)3sHH DHL@HL$0HHHL$(HL$ K34HL@HK3HHH DH D@HHL$0HL$(HHHL$ K3HuHH DH D@HHL$0HL$(HHHL$ KD3H4HH LHD@HHL$(HL$ K2 3VHHH(DHL@HHL$0H L$(HHHL$ KHL$@HL$@H33HKCLKHDD$ uRH R/HHu"RDR RRRHeH%H3ۅHFt| tt ttt H^vMH [M.HuvMDkM aMOMaMHHFtju HHQQHHHIHMH M;.HuMDM MLMHHFtH3H L^H WfE3E33H\$ ,H\L^H\IH (fISLX3L\a,H$H$H$3H$jHĸfRRRTRRRRRTRzORzORPP%QlROIQQQR`RDRRzORzOH(=MQu8L\H U3D'QEIQAH(3H(HXH\$PHt$HH|$@Ll$8E3H$D+Lk$|H XHჼ$r H$HtHCh ]Ar.Mt)IHTP<H$ ) D8-+PH ZcD-PLl$ E3E33H Ad;*LOM9kt(IKHAIC3*OLOM9kuE+D-O3)HeZ3H c)}$HAH${*Ll$ E3E33H c)s3H c) 2"H=O8uHxu3H `cj)Lk,L OIIICHtffffHHH@HuHtLiNLNI;t@3H b)@2DHWH$Z DL[@t 3H(eHND(3H b(JH$ 2:Ar!MtH _NIA H\$PHt$HH|$@Ll$8HXÐUWWWUWWW VWWWWWWVWWWWrUHHLRHXHhHp3Hx Hj8j0Hz0HHHڊDIDAItv<t[<t<H HMKA<uHSpHt$@H|$8DD$0DL$(DIHI0HT$ M²| LoeL~" L3H'<D$Pl$THD$PHL$pD$XD$\HD$`l$h''HT$pHL$XDt'u&HL$p]'3H"l'"HL$p7'@8-LH@-K'@8-KtH V7 @-KH '`E3E33Hl$ &L-H$3L$H$H$%H ~_E3E33Hl$ %H _3%3H&3H$H$H$H$HĸLHhHEH$0I[Ik IsHII{HHHHqAMkHHqHAHqHAHqHAqA HoIHHoHAHoHAHoHAHoHA oHA(HIHCAI8AADdk AHf$HHu S3HfL$PDwDHWH3H$DBpTHD$@H$H$HD$@L$E3E3H3H$DŽ$ $$Ld$ $LD$pHL$HD$p0Ld$xDŽ$@H$L$L$$xPH$0H$D$D#HL$HHD$DH$DE3\$(HD$ `$HL$H"H$@HL$`"H$hHL$P"H@_LD$`HT$0AH3Dd$(Dd$ #x6HT$`HL$P#HHHHFpHy$H ^Ht-#HL$P*#bH t\3|#H eR3m#H R3^#L>H=3HHI$H$HHHAuH+<L;DH3IHH$I$HHIɉufD$0H FE33D$(RegmHD$ ("H"RH [[HRH R3"!AHffffffHcH AH!t ǁ0|AfD$0H XAE3E33D$(Regm= OHD$ "ADdk A HHFu"H ,]!HL$P!D HFH FL`H1AD-|F#|$@t|H 0ZE3AD-'F D8%.Fu(LPH 63m FAI͈ FH$H$H$(!H a\!3L$PL$HH$XH$`H$H$H$0HhH8L ?L?HѹHD$  fffffffLH+Irbt7t  IȈHtf IfHt  IHMIuPMItH HHIuIMuIff HIuIffffffffffffffffIsBH LT H HALQHD LT IHALQuIrfffffffffHr  D @HuH@L LT L LQLL LT LILQLL LT (H@LILQLL LT LILQuIIq $ffffffffffffffftoIIrat6t HɊ IȈtHf Ift H IMIuPMItHH IHuIMuIffHɊ IȈuIffffffffffffffffIsBHD LT H HALQHD L IHALuIsffffffffffHw H D @uH@LL LT LILQLL LT LILQLL LT H@LILQLL L LILuIIq $%x%%%%%\%%fffffffHIrSIII@rHكtL+HHMI?Iu9MIItfffHHIuMt HIuffffffffIs0HHQHQH@HQHQIHQHQHQuffffHHQHQH@HQHQIHQHQHQu $T%fffffffH; :uHfuH\SystemRoot\REGMON.LOG%d: WriteTime: %I64xUser Flags: 0x%08XUnknown Info ClassUser Flags: %0x08xSubkeys = %dName: %sUNKNOWN TYPE: %dQWORDDESCRIPTORREQ_LISTRESOURCE_LISTSZNONEMULTI_SZLINKEXPAND_SZDWORD_BIG_ENDDWORD_LITTLE_ENDBINARY%02X 0x%I64x0x%X..." Name: Type: REPARSEMOREOPLOCK BREAKNOTIFY CLEANUPNOTIFY ENUM DIR%xPENDINGPATH NOT COVEREDSUCCESSDFS UNAVAILABLEDISCONNECTEDPIPE BROKENINVALID DEVICE STATELOG FILE FULLCANNOT DELETENOT A DIRECTORYCANCELLEDFILE CLOSEDFILE CORRUPTREGISTRY CORRUPTIO FAILEDKEY DELETEDNOT EMPTYIO TIMEOUTPIPE EMPTYINVALID READ MODEPIPE LISTENINGPIPE CONNECTEDPIPE CLOSINGPIPE DISCONNECTEDPIPE BUSYINVALID PIPE STATEPIPE NOT AVAILABLEINSTANCE NOT AVAILABLEDISK FULLNO MEDIANETWORK ERRORWRONG VOLUMEINVALID DEVICE REQUESTINVALID HANDLEINVALID INFO CLASSALREADY COMMITTEDIS DIRECTORYNOT GRANTEDDELETE PENDFILE LOCK CONFLICTOPLOCK NOT GRANTEDSHARING VIOLATIONACCESS DENIEDEND OF FILEINVALID PARAMETERPATH NOT FOUNDBAD NETWORK PATHNONEXISTENT SECTORNAME COLLISIONNO SUCH FILENOT FOUNDNAME INVALIDBUFFER TOO SMALLNOT SUPPORTEDQUOTA EXCEEDEDIN PAGE ERRORRANGE NOT LOCKEDDISK CORRUPTBAD NETWORK NAMENONEXISTENT EA ENTRYEA TOO LARGETOO MANY COMMANDSEAS NOT SUPPORTEDCRC ERRORDEVICE DATA ERRORBAD IMPERSONATIONPATH SYNTAX BADOUT OF MEMORYINSUFFICIENT RESOURCESACCESS VIOLATIONNOT IMPLEMENTEDBUFFER OVERFLOWNO MORE FILESINVALID EA FLAGNO MORE ENTRIES%s%s%s*NT_AUTHORITY\SYSTEM\Software\Classes_CLASSES\\REGISTRYSystem:%I64d\DosDevices\Regmon701%s CloseKey %s %s%s DeleteKey %s %s Key: 0x%X%s DeleteValueKey %s %s %s SetValue %s %s %s%s EnumerateKey %s %s %s%s QueryKey %s %s %s%s SetInformationKey %s %s %s%s EnumerateValue %s %s %s%s QueryValue %s %s %s%s %s %s %s %sCreateKeyRenameKeyOpenKey Regmon is logging Registry activity to \SystemRoot\Regmon.log \Device\Regmon701Start* ":HRj~0Hbx,>Vbx@RtpDYiRSDS%:wBONϔe5e:\src\filereg\regmon\sys\objfre_wnet_AMD64\amd64\Regswnet70.pdbt 4Bt 4B B!! t 4##d!T t 4Bt4R0t d 4 bt 4 bt 4 p!`H!T4`H, ,%!td !!2"!t !2"d T 4 B!d **܃!d H **܃t 4  t d T 4b!p//,!4 p//,  t b{{4)/t+d* ' 44 0,($t d4Jde4>5>5!99!t 994B!d `::!d `::%%t T 4b!;<@!<c<,!AA4 d <c<,!t;<@! =J=l!t =J=ld4!>7?!t >7?%%d T4 '  t d 4 Jd@@@ 1 "./t0d1423JdBBB!t-d.@DcDP!, t-d.T/@DcDP##40 1!d40FLF!4LF^F!\\4 LF^F! tdT0FLF !4PHpH$!4pH~H!\\4 pH~H!  tdPHpH$  T 5 5L/tM+dN'TO#4P Q :+/'0#1t2d3445Jd}MMM!d60OjO!0OjO!d60OjO$$t5 4; 7B  td 4 JdUUUVVW tdT4 !Z\P!JZ\PU UI3tK%dL!TQ4P Mb*** Invalid Name ****(Default) *\\REGISTRY\USER\SHKCUHKU\SHKCU\\REGISTRY\USERHKU\\REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENTHKCC\\REGISTRY\MACHINE\SOFTWARE\CLASSESHKCR\\REGISTRY\MACHINEHKLMNot enough disk space for log file ] f2-+iHpUX`khp!x0+@&̂0܂(p 0P`Hm 0m !2"2"#p##` #{***܃* , ,,-d/p//,/G0G0`0p028 29L999;:;:N:`:::;̄;;;<@<c<,c<<<=== =J=lJ=>X>>H>7?7???!@|0@AA.D@DcDPcDE0E)F0FLFLF^F^FFF Ht HVbx@RtExpInterlockedPopEntrySListExpInterlockedPushEntrySListrExQueryDepthSList*ZwCreateFile>RtlInitUnicodeStringyKeSetEvent%ZwCloseZwSetInformationFileZwWriteFilesprintfFExAllocatePoolWithTagXExFreePoolWithTagKeWaitForSingleObjecttExQueueWorkItembKeReleaseMutex!RtlFreeAnsiStringRtlUnicodeStringToAnsiStringstrncatstrncpyLsaFreeReturnBufferRObfDereferenceObjectGObOpenObjectByPointerPsReferencePrimaryTokenyIoGetCurrentProcessPsReferenceImpersonationToken.KeInitializeEventhZwQueryInformationToken__C_specific_handlerstrncmpHObQueryNameStringuPsGetCurrentProcessId,CmUnRegisterCallback_IoDeleteDeviceaIoDeleteSymbolicLinkvsprintf+CmRegisterCallbackgProbeForWriteIoUnregisterShutdownNotificationSeReleaseSubjectContextSePrivilegeCheck]ExGetPreviousModeSeCaptureSubjectContextIofCompleteRequestIoRegisterShutdownNotification6ZwDisplayString`ExInitializePagedLookasideList2KeInitializeMutexUIoCreateSymbolicLinkLIoCreateDeviceZwSetValueKeyOZwOpenKeyRtlQueryRegistryValuesKeBugCheckExntoskrnl.exe:KeQueryPerformanceCounterHAL.dllGetSecurityUserInfoksecdd.sys0 H`DD4VS_VERSION_INFO  ?StringFileInfo~040904B0: CompanyNameSysinternalsZFileDescriptionWindows Registry MonitorLFileVersion6.12 built by: WinDDK6 InternalNameregmon.sys7LegalCopyrightCopyright (C) M. Russinovich and B. Cogswell 1996-2004> OriginalFilenameregmon.SysHProductNameSysinternals Regmon.ProductVersion6.12DVarFileInfo$Translation  @MZ@ !L!This program cannot be run in DOS mode. $j.z`.z`.z`ej#z`(Yj/z`.z`2z`Rich.z`LE(\ L6 6 '\^#^dLE 'LCOD\ (ICOD  !"#$%&'(REGVXDnD'r ^P& 1i?>I>S>o'+7j\'82' =Oyl  'T&A't`gR\G9$'*''5 A G t; pM 'S x|| x t p l'ZgUNHB<61p! (,l4a05@,<"8 'T' k{'$dt'DoHcP\XU`NdGl@t;h&'Tm'b@'1U'T! ?|'tb%|[%xi%tT%pM%lF%h?%DeQXT'lX<@X|$mY 4'4Z8H<a4'<&>DX|8H'4hA'<9] '4_'</zXli#H4?8X}(4uLJ'$31 /``.40-`Xu)pf\*WMTC *>4*(% 0( @X`'@t0)& 'ynbTXTL\D'E6 '` `@@ | 7'r'`fX4Q$G=`6'8r.$5'@c  @5'T'eu`>Y>'{um'Ua3>'Z'\ /DEF$\61=d== ~==eP?FDF' :t'$-C??????Xp@D<nA8yC4A0A,1B(@$YC BCDD$LKKLLXPL'HQ%s %x BADDBCORRUPTIOFAILEDBADKEYKEYDELETEDNOMOREMOREDATANOTFOUNDACCDENIEDOUTOFMEMSUCCESS%s%s%s*:%X??????:0System:0\0x%XHKDDHKCCHKUHKLMHKCUHKCR%s OpenKey %s %s %shKey: 0x%X%s CreateKey %s %s %s%s DeleteKey %s %s%s DeleteValue %s %s%s CloseKey %s %s%s FlushKey %s %s%s EnumKey %s %s %s%s EnumValue %s %s %s...%X ": %s QueryKey %s %s%s QueryKey %s %s Keys: %d Values: %d%s QueryValue %s %s %s(Default)%s QueryValueEx %s %s %s%s SetValue %s %s %s%s SetValueEx %s %s %s%s RemapPreKey %s %s Root: %s%s QueryMultVal %s %s%s CreateDynKey %s %s hKey: 0x%XDYNDAT\%s0X0x0 +-SVD$ uL$D$3؋D$ Aȋ\$T$D$ ud$ȋD$r;T$wr;D$ vN3ҋ^[̋D$L$ ȋL$ u D$S؋D$d$؋D$[SD$ uL$D$ 3D$3Pȋ\$T$ D$ ud$d$r;T$ wr;D$v+D$T$+D$T$ ؃[WVS3D$ }GT$ڃD$T$D$ }GT$ڃD$T$ uL$D$3؋D$A؋L$T$D$ ud$ȋD$r;T$wr;D$vN3ҋOu؃[^_REGVXD verPBBBBBP   D$t!HttËD$P VD$t<*t2ðÐSVW|$t7t$<*t5t*ttOu_^2[ÊGt<^t3+>_H[R,^]ÐSVW3t~FjP,jV,ur_^[ÐVWjPY,t$3уjQ[,tDL$  PP3+ȃ Q+_^ÐVjP+T$43Ʌt;9tȋ@uR~+^ÅttPQHjP+RP+^ÐD$u uÊ u3=wFutbF jP(MT$ >>D><*t<*tQWPEh Q->E@E<>tD>|>o_^][ÐjPK(hhh*hhh Q'Ð(u$D$ȉQQË@8j P'P' uD$ȉffQSVWtvuR%t~3+sw1$:3,%WD$hPG |$3+ыOʋT$(tT:tO3+O̓+ыOʃT$,tT:tO3+O̓+ыOʃ_^][ÍI SV$0D$(W$0PjVW $HSVWƄ$,u- QbT$0RP $8QhRVt;t2$,PVL$0T$PQRPh_^[ Ð SV$0D$(W$0PjVW;$HSVWƄ$,u- QT$0RP $8QhRVt;t2$,PVL$0T$PQRPh_^[ Ð D$ V$,W$,PjVWlVWV\t3t*VFL$(T$PQRPhe_^ Ð D$ V$,W$,PjVWVWVt3t*VL$(T$PQRPh_^ Ð D$ VW$,PjjWrWVct3t*VML$(T$PQRPhlW_^ Ð D$ V$(PjjVVVt3t*VL$$T$PQR Ph^ Á D$ V$(WPjjV$H$D$@QWRVV[$t?t6tPV9L$ PD$0PQvPhX_^ Ð8SUV$H$DWPjjV$x$t$p$l$h$dQ$dUSRPWQV0t$D$H$hD$3+T$HуOʍT$H+уOʃt{uM+T$HًOhD$LUP T$HEL$PhQ |$T$Hzl$v3ۅ~Q$d3T$ PhR\|$$3 +T$HуOʃC;|$h8v.T$H3+ًO˃t$Vt;t2D$HPV$LT$,PQRPh_^][8Ð D$ SV$,WPjjVq$l$h$d$\$PQ$dR$`P$`Q$\WR$`P$`SQRPV@Vt}uOt?tWPjL$4T$PQR Ph_^[ VL$ PD$0PQPh_^[ Ð S$(UV$4$,WPhVS4$P$LUWVS؃ D$0}f hT$4WRfL$<3 Iv,+T$0O̓3T$0+O̓Sgt;t2D$0PSL$4T$PQRPhh_^][ Ð4S$@U$@V$@WPSjU$l$h$d$`QWVRSU؃(ۉ\$D$DWO6ujfhL$HWQfD$P3 Iv,+T$DًO˃T$DL$DPhQ $\*v3ۅ~S$X3L$;PhQ |$ 3 +T$DуOʃC;|$\8v.T$D3+ًO˃\$SLt;t2D$DPS1$HT$(PQRkPhM_^][4Ð S$(V$0$(WPhVS$P$L$HQWRVS$؅D$,fUhL$4WQfD$< 3 Iv,+T$0O̓3T$0+O]St;t2D$,PS$0T$PQR Ph_^[ Ð8S$DUV$DW$LPSjW$p$l$h$dQUVRSW(؃\$D$HfhL$LUQfD$TM 3 Iv,+T$HO̓3T$H+O̓$`D$wD$L$3ۅ~U3L$+PhQw |$$3 +T$HуOD$ʃC;|$`v.3T$H+ًO˃\$St;t2T$HRSL$,P$PPQPh_^][8ÃuEL$HPhQ 뎐 D$ V$(WPjjVb$@WVVKt=tPV+L$,T$ PQRhPhJ_^ Ð D$ V$(PjjV$H$D$@Q$@RPQVV(t3t*VT$$PD$RPPh^ Á D$ V$(WVhPA$L$H$D$@WQ$DRPQVV (t6t-RVL$ PD$0PQ.PhuT$(RP_^ Ð D$ SV$4WPjjV$\$X$T$P$LQ$8RWPSVQ$LR$0pV/tuQt?tWPjL$4T$PQR5Ph_^[  VL$ PD$0PQPh_^[  QWj#jj 3D$hPhjjjjjjj2 T$hhhH@ AhhhIhhhJhhhKhhhOhhhLjhhhPQhhhU8hhh^hhhMhhhQhhhNhhhRhhhqhhhwhhhvphj@8_ǀYÐhhHehhIVhhJGhhK8hhO)hhLhhP hhUhh^hhMhhQhhNhhRhhqhhwhhv eÐS\$VWC ==w/t =_^3[_^3[=jP3p;tENHRWP~ jQJp;uhxh= Rx_^3[ájPu{s QP_^o[áHu"HuR(C _^[3U; QM{эu jC MUR H]_^3[| 3Ɋ$_^3[S_^3[Ës_^3[ËC;r7Ct09sr+Ct$ K3 SC 0_^3[_^W[_^[ÐB4$USB[]US<[]QWVRSP-s["t#t [Z^_Y ÐD$ L$T$PQjRZÐL$T$D$ PQjR:ÐUSVW}2u OM u2I uE_^[]̃@L$HD$ɉL$u@ËT$LIL$HSUVWT$\L$X<%ttIL$XL$TAL$TBT$\C3333L$D$L$ 3D$ D$BBT$\wM3Ҋ$T$\D$ ҋT$\NjT$\D$0뼋T$\뱋T$\릋T$\<*uD$`BD$`@D$0t$T$DPЋT$\BD$T$\u܀:.uYBB<*T$\D$uD$`BD$`@D$0t$T$DPЋT$\BD$T$\u܊ Registry Monitor Capture (Ctrl+E)Autoscroll (Ctrl+A)Clear (Ctrl+X)Filter/Highlight (Ctrl+L) Find (Ctrl+F)History Depth (Ctrl+H)Regedit Jump (Ctrl+J)Time Format (Ctrl+T) Save (Ctrl+S)FontOpen0 *H 01 0 +0h +7Z0X03 +70% <<<Obsolete>>>0!0 +`}(/e_R)s*0&0,HUA%fs0  *H 010UMark's Certificate0 050101050000Z 110101050000Z010UMark's Certificate00  *H 0;t啋|,G3aZR8FR1v^O]_o W#:K ڎ(.Ԋ:jtAW6yK<ᶅc=k>؂O4 ~!"$g0e0U% 0 +0NUG0Eʱ{3:4c<010UMark's Certificate,HUA%fs0  *H  {kz`~6G[(R=zJy"}ɵ/{9bVhǐ.*CHޣ I07mK_6+,iTZm䖋mCү"Ğ,Ѐ;1I0E01010UMark's Certificate,HUA%fs0 +p0 +7 100 *H  1  +70 +7 10  +70# *H  1I"e -<>/,N0  *H Z~m=o_&]l2* 8A"lǓ* iVG %:?Kqˤ?Q&j{Zo0}_w$LdaDaDbhoke٠鹜U>F!!§a=‚EXtMZ@ !L!This program cannot be run in DOS mode. $j.z`.z`.z`ej#z`(Yj/z`.z`2z`Rich.z`LE(\ L6 6 '\^#^dLE 'LCOD\ (ICOD  !"#$%&'(REGVXDnD'r ^P& 1i?>I>S>o'+7j\'82' =Oyl  'T&A't`gR\G9$'*''5 A G t; pM 'S x|| x t p l'ZgUNHB<61p! (,l4a05@,<"8 'T' k{'$dt'DoHcP\XU`NdGl@t;h&'Tm'b@'1U'T! ?|'tb%|[%xi%tT%pM%lF%h?%DeQXT'lX<@X|$mY 4'4Z8H<a4'<&>DX|8H'4hA'<9] '4_'</zXli#H4?8X}(4uLJ'$31 /``.40-`Xu)pf\*WMTC *>4*(% 0( @X`'@t0)& 'ynbTXTL\D'E6 '` `@@ | 7'r'`fX4Q$G=`6'8r.$5'@c  @5'T'eu`>Y>'{um'Ua3>'Z'\ /DEF$\61=d== ~==eP?FDF' :t'$-C??????Xp@D<nA8yC4A0A,1B(@$YC BCDD$LKKLLXPL'HQ%s %x BADDBCORRUPTIOFAILEDBADKEYKEYDELETEDNOMOREMOREDATANOTFOUNDACCDENIEDOUTOFMEMSUCCESS%s%s%s*:%X??????:0System:0\0x%XHKDDHKCCHKUHKLMHKCUHKCR%s OpenKey %s %s %shKey: 0x%X%s CreateKey %s %s %s%s DeleteKey %s %s%s DeleteValue %s %s%s CloseKey %s %s%s FlushKey %s %s%s EnumKey %s %s %s%s EnumValue %s %s %s...%X ": %s QueryKey %s %s%s QueryKey %s %s Keys: %d Values: %d%s QueryValue %s %s %s(Default)%s QueryValueEx %s %s %s%s SetValue %s %s %s%s SetValueEx %s %s %s%s RemapPreKey %s %s Root: %s%s QueryMultVal %s %s%s CreateDynKey %s %s hKey: 0x%XDYNDAT\%s0X0x0 +-SVD$ uL$D$3؋D$ Aȋ\$T$D$ ud$ȋD$r;T$wr;D$ vN3ҋ^[̋D$L$ ȋL$ u D$S؋D$d$؋D$[SD$ uL$D$ 3D$3Pȋ\$T$ D$ ud$d$r;T$ wr;D$v+D$T$+D$T$ ؃[WVS3D$ }GT$ڃD$T$D$ }GT$ڃD$T$ uL$D$3؋D$A؋L$T$D$ ud$ȋD$r;T$wr;D$vN3ҋOu؃[^_REGVXD verPBBBBBP   D$t!HttËD$P VD$t<*t2ðÐSVW|$t7t$<*t5t*ttOu_^2[ÊGt<^t3+>_H[R,^]ÐSVW3t~FjP,jV,ur_^[ÐVWjPY,t$3уjQ[,tDL$  PP3+ȃ Q+_^ÐVjP+T$43Ʌt;9tȋ@uR~+^ÅttPQHjP+RP+^ÐD$u uÊ u3=wFutbF jP(MT$ >>D><*t<*tQWPEh Q->E@E<>tD>|>o_^][ÐjPK(hhh*hhh Q'Ð(u$D$ȉQQË@8j P'P' uD$ȉffQSVWtvuR%t~3+sw1$:3,%WD$hPG |$3+ыOʋT$(tT:tO3+O̓+ыOʃT$,tT:tO3+O̓+ыOʃ_^][ÍI SV$0D$(W$0PjVW $HSVWƄ$,u- QbT$0RP $8QhRVt;t2$,PVL$0T$PQRPh_^[ Ð SV$0D$(W$0PjVW;$HSVWƄ$,u- QT$0RP $8QhRVt;t2$,PVL$0T$PQRPh_^[ Ð D$ V$,W$,PjVWlVWV\t3t*VFL$(T$PQRPhe_^ Ð D$ V$,W$,PjVWVWVt3t*VL$(T$PQRPh_^ Ð D$ VW$,PjjWrWVct3t*VML$(T$PQRPhlW_^ Ð D$ V$(PjjVVVt3t*VL$$T$PQR Ph^ Á D$ V$(WPjjV$H$D$@QWRVV[$t?t6tPV9L$ PD$0PQvPhX_^ Ð8SUV$H$DWPjjV$x$t$p$l$h$dQ$dUSRPWQV0t$D$H$hD$3+T$HуOʍT$H+уOʃt{uM+T$HًOhD$LUP T$HEL$PhQ |$T$Hzl$v3ۅ~Q$d3T$ PhR\|$$3 +T$HуOʃC;|$h8v.T$H3+ًO˃t$Vt;t2D$HPV$LT$,PQRPh_^][8Ð D$ SV$,WPjjVq$l$h$d$\$PQ$dR$`P$`Q$\WR$`P$`SQRPV@Vt}uOt?tWPjL$4T$PQR Ph_^[ VL$ PD$0PQPh_^[ Ð S$(UV$4$,WPhVS4$P$LUWVS؃ D$0}f hT$4WRfL$<3 Iv,+T$0O̓3T$0+O̓Sgt;t2D$0PSL$4T$PQRPhh_^][ Ð4S$@U$@V$@WPSjU$l$h$d$`QWVRSU؃(ۉ\$D$DWO6ujfhL$HWQfD$P3 Iv,+T$DًO˃T$DL$DPhQ $\*v3ۅ~S$X3L$;PhQ |$ 3 +T$DуOʃC;|$\8v.T$D3+ًO˃\$SLt;t2D$DPS1$HT$(PQRkPhM_^][4Ð S$(V$0$(WPhVS$P$L$HQWRVS$؅D$,fUhL$4WQfD$< 3 Iv,+T$0O̓3T$0+O]St;t2D$,PS$0T$PQR Ph_^[ Ð8S$DUV$DW$LPSjW$p$l$h$dQUVRSW(؃\$D$HfhL$LUQfD$TM 3 Iv,+T$HO̓3T$H+O̓$`D$wD$L$3ۅ~U3L$+PhQw |$$3 +T$HуOD$ʃC;|$`v.3T$H+ًO˃\$St;t2T$HRSL$,P$PPQPh_^][8ÃuEL$HPhQ 뎐 D$ V$(WPjjVb$@WVVKt=tPV+L$,T$ PQRhPhJ_^ Ð D$ V$(PjjV$H$D$@Q$@RPQVV(t3t*VT$$PD$RPPh^ Á D$ V$(WVhPA$L$H$D$@WQ$DRPQVV (t6t-RVL$ PD$0PQ.PhuT$(RP_^ Ð D$ SV$4WPjjV$\$X$T$P$LQ$8RWPSVQ$LR$0pV/tuQt?tWPjL$4T$PQR5Ph_^[  VL$ PD$0PQPh_^[  QWj#jj 3D$hPhjjjjjjj2 T$hhhH@ AhhhIhhhJhhhKhhhOhhhLjhhhPQhhhU8hhh^hhhMhhhQhhhNhhhRhhhqhhhwhhhvphj@8_ǀYÐhhHehhIVhhJGhhK8hhO)hhLhhP hhUhh^hhMhhQhhNhhRhhqhhwhhv eÐS\$VWC ==w/t =_^3[_^3[=jP3p;tENHRWP~ jQJp;uhxh= Rx_^3[ájPu{s QP_^o[áHu"HuR(C _^[3U; QM{эu jC MUR H]_^3[| 3Ɋ$_^3[S_^3[Ës_^3[ËC;r7Ct09sr+Ct$ K3 SC 0_^3[_^W[_^[ÐB4$USB[]US<[]QWVRSP-s["t#t [Z^_Y ÐD$ L$T$PQjRZÐL$T$D$ PQjR:ÐUSVW}2u OM u2I uE_^[]̃@L$HD$ɉL$u@ËT$LIL$HSUVWT$\L$X<%ttIL$XL$TAL$TBT$\C3333L$D$L$ 3D$ D$BBT$\wM3Ҋ$T$\D$ ҋT$\NjT$\D$0뼋T$\뱋T$\릋T$\<*uD$`BD$`@D$0t$T$DPЋT$\BD$T$\u܀:.uYBB<*T$\D$uD$`BD$`@D$0t$T$DPЋT$\BD$T$\u܊ Registry Monitor Capture (Ctrl+E)Autoscroll (Ctrl+A)Clear (Ctrl+X)Filter/Highlight (Ctrl+L) Find (Ctrl+F)History Depth (Ctrl+H)Regedit Jump (Ctrl+J)Time Format (Ctrl+T) Save (Ctrl+S)FontOpen@0/ *H  010 *H 0g +7Y0W03 +70% <<<Obsolete>>>0 0 *H /4-ϳa򢉮00-GߍRFCmH 10  *H 01 0 UZA10U Western Cape10U Durbanville10 U Thawte10U Thawte Certification10UThawte Timestamping CA0 031204000000Z 131203235959Z0S1 0 UUS10U VeriSign, Inc.1+0)U"VeriSign Time Stamping Services CA0"0  *H 0 ʲ }uNgadڻ30X~k6xw~o< hlʽR-H=]_/kLR`@~ ?Ǵ߇_zj1.G 1s W-x43h/Š*Ë!fXWou<&]'x1"ijGC_^|}bM "Vͮv M٠h;004+(0&0$+0http://ocsp.verisign.com0U00AU:0806420http://crl.verisign.com/ThawteTimestampingCA.crl0U% 0 +0U0$U0010U TSA2048-1-530  *H JkXD1y+LͰXn)^ʓR G'/8ɓN"b?7!Op18UN$ҩ'NzaA*^ݻ+>W~ +;R8'?J00 +)2 ^v0  *H 0S1 0 UUS10U VeriSign, Inc.1+0)U"VeriSign Time Stamping Services CA0 031204000000Z 081203235959Z0W1 0 UUS10U VeriSign, Inc.1/0-U&VeriSign Time Stamping Services Signer0"0  *H 0 P(HhzDfu]~ĸc&=C|8%Usu'iN \ *UV!a3kݣ7e S\|f5_EvNS \0"7LB U?R,z򢪍5]j=k㿖`@DQn*(P{J 0kX@( ~|vqiOG05!b<+َ*{\{❥o<00(AZ9xIef8Lu0  *H 0_1 0 UUS10U VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority0 040716000000Z 140715235959Z01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)041.0,U%VeriSign Class 3 Code Signing 2004 CA0"0  *H 0 ~7O8Ҍ} kBRH%czQeӪ;+f$n96Уv"'$l8'I%,0q(wJQTom dc-N'm)G|-Wg32 #m„Kvhq,]! &-+UMm5(k\٪_̓c";Bi:^,(Sݵ Qp7HRHo8l{D00U00DU =0;09 `HE0*0(+https://www.verisign.com/rpa01U*0(0&$" http://crl.verisign.com/pca3.crl0U%0++0U0 `HB0)U"0 010UClass3CA2048-1-430UQ==d6|h[x߹70U#y0wca0_1 0 UUS10U VeriSign, Inc.1705U .Class 3 Public Primary Certification Authorityp)48{̺0  *H :J{UdU@IA.x#h2و8?Ӊ?Z.&|n H @yg#$P.̀lROuU"Au/cU}TZY4_^z0"0 uuC5njݿ0  *H 01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)041.0,U%VeriSign Class 3 Code Signing 2004 CA0 060202000000Z 070404235959Z01 0 UUS10 UTexas10 UAustin10U  Sysinternals1>0<U 5Digital ID Class 3 - Microsoft Software Validation v210U  Headquarters10U Sysinternals00  *H 0;ngŐ=&b; "qTXBw`V~~u;B;Wj<Džڱ-g)_2?/`7W oѹi"b1Jkƴn҇ƻG -"_+tWF00 U00U0@U9070531/http://CSC3-2004-crl.verisign.com/CSC3-2004.crl0DU =0;09 `HE0*0(+https://www.verisign.com/rpa0U% 0 +0u+i0g0$+0http://ocsp.verisign.com0?+03http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer0U#0Q==d6|h[x߹70 `HB00 `HE" 47009c3de442d876ef3ae87cca155f6d0 +700  *H ZwTKcmj~Rf1iY%oyk:"x}?MnG (dʛVA\U|Ѭy a4F3.qb5F /-YeܲƼ~8 0^9O<\}]D8^x|%2ӓxem1mH7PNCUaEaM~2=̅H+c kElG4NuU[fQ؎k4ceY]7:Zx10001 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)041.0,U%VeriSign Class 3 Code Signing 2004 CAuuC5njݿ0 *H l0 +7 100 *H  1  +70 +7 10  +70 *H  19/űd^< 0  *H \K^GmUhCp`?'=LJ? |ÙV1}[&yBpڌ)U;S^aX*4U+F|FxyFN {Lx.0s&$}"0 *H  100g0S1 0 UUS10U VeriSign, Inc.1+0)U"VeriSign Time Stamping Services CA +)2 ^v0 *H Y0 *H  1  *H 0 *H  1 060714141814Z0 *H  1?} SlWr0  *H ,AZtDxUrOakq 6dmcc| "~>-wɱDb0cH*'|̈IkM3\|C?qLt9;sQ0+O箚_dW]GkV8 ?wȵB-v|xى3%u]w8X[oP"WX0n򣄣A%3&SBF?-S,qME*