What is centralsupcompleta.exe?
centralsupcompleta.exe is usually located in the 'c:\downloads\' folder.
Some of the anti-virus scanners at VirusTotal detected centralsupcompleta.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
centralsupcompleta.exe does not have any version or vendor information.
Digital signatures [?]
centralsupcompleta.exe is not signed.
VirusTotal report
30 of the 65 anti-virus programs at VirusTotal detected the centralsupcompleta.exe file. That's a 46% detection rate.
| Scanner | Detection Name |
|---|---|
| Ad-Aware | Trojan.GenericKD.31588132 |
| ALYac | Trojan.GenericKD.31588132 |
| Arcabit | Trojan.Generic.D1E1FF24 |
| Avira | BDS/Agent.lnvai |
| BitDefender | Trojan.GenericKD.31588132 |
| CAT-QuickHeal | Trojan.Presenoker |
| CrowdStrike | win/malicious_confidence_80% (W) |
| Cybereason | malicious.b75802 |
| Cyren | W32/Trojan.QEOJ-1376 |
| DrWeb | BACKDOOR.Trojan |
| Emsisoft | Trojan.GenericKD.31588132 (B) |
| F-Secure | Backdoor.BDS/Agent.lnvai |
| GData | Trojan.GenericKD.31588132 |
| Invincea | heuristic |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| K7GW | Riskware ( 0040eff71 ) |
| Malwarebytes | Trojan.Dropper |
| MAX | malware (ai score=94) |
| McAfee | Artemis!7CFFB2FB7580 |
| McAfee-GW-Edition | BehavesLike.Win32.Dropper.vc |
| Microsoft | Trojan:Win32/Occamy.C |
| MicroWorld-eScan | Trojan.GenericKD.31588132 |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Qihoo-360 | HEUR/QVM41.2.F235.Malware.Gen |
| Rising | Trojan.Paskod!1.A0E0 (CLOUD) |
| SentinelOne | DFI - Suspicious PE |
| Sophos | Mal/Generic-S |
| Trapmine | suspicious.low.ml.score |
| TrendMicro-HouseCall | TROJ_GEN.R011C0OJQ18 |
Sandbox Report
The following information was gathered by executing the file inside Cuckoo Sandbox.
Summary
Successfully executed process in sandbox.
Summary
{
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Windows\\System32\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\__tmp_rar_sfx_access_check_16897078",
"C:\\Windows\\Temp\\temp.000",
"C:\\Windows\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SWV5AB6.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF1C573A5B7A78604F.TMP",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_"
],
"directory_created": [
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local"
],
"dll_loaded": [
"C:\\Windows\\system32\\OLEPRO32.DLL",
"profapi.dll",
"C:\\Windows\\system32\\MSINET.OCX",
"srvcli.dll",
"LINKINFO.dll",
"C:\\Windows\\system32\\riched20.dll",
"kernel32.dll",
"UxTheme.dll",
"C:\\Windows\\system32\\ole32.dll",
"dwmapi.dll",
"slc.dll",
"C:\\Windows\\system32\\uxtheme.dll",
"ntmarta.dll",
"PROPSYS.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"CABINET.DLL",
"kernel32",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"user32",
"OLEAUT32.DLL",
"advapi32.dll",
"comctl32",
"ole32.dll",
"SHLWAPI.dll",
"CRYPTSP.dll",
"USER32.dll",
"IMM32.dll",
"HP32V301.DLL",
"gdi32.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"version.dll",
"C:\\Windows\\system32\\MSWINSCK.OCX",
"OLEAUT32.dll",
"VB5STKIT.DLL",
"SHELL32.dll",
"C:\\Windows\\system32\\shell32.dll",
"User32.dll",
"comctl32.dll",
"C:\\Windows\\system32\\OleAut32.dll",
"COMCTL32.dll",
"C:\\Windows\\system32\\kernel32.dll",
"SXS.DLL",
"KERNEL32.dll",
"GDI32.dll",
"C:\\Windows\\system32\\IMM32.DLL",
"Kernel32.dll",
"DEVRTL.dll",
"ADVAPI32.dll",
"advapi32",
"SETUPAPI.dll",
"ntshrui.dll",
"C:\\Windows\\system32\\MSVBVM60.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\",
"C:\\Windows\\System32\\HP32V300.dll",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Windows\\System32\\wbem\\wbemdisp.tlb",
"C:\\Windows\\System32\\temp.000",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Windows\\",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Windows\\winsxs\\FileMaps\\$$_system32_21f9a9c4a2f8b514.cdf-ms",
"C:\\Windows\\Temp\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Windows\\SysWOW64\\stdole2.tlb",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"C:\\Windows\\System32\\HP32V215.dll",
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Windows\\ST5UNST.EXE",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Windows\\System32\\VB5StKit.dll",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Windows\\System32\\HP32V301.dll",
"c:\\",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Windows\\winsxs\\FileMaps\\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Windows",
"C:\\Windows\\Temp"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\VersionIndependentProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{40FC6ED4-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Control",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WINMGMTS\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_CLASSES_ROOT\\InetCtls.Inet.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Programmable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CLASSES_ROOT\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}",
"HKEY_CLASSES_ROOT\\MSWinsock.Winsock",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A53-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Visual Studio .NET 2003",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ToolboxBitmap32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Winmgmts",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\Clsid",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A57-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Wbem\\Scripting",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A52-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A57-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_CLASSES_ROOT\\InetCtls.Inet",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ToolboxBitmap32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}",
"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_CURRENT_USER\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A53-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_CLASSES_ROOT\\.EXE\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{40FC6ED4-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\FLAGS",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Control",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{40FC6ED5-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CLSID",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Programmable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\VersionIndependentProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32",
"HKEY_CLASSES_ROOT\\MSWinsock.Winsock.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exe\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\CENTRSUP.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\EventLog\\Application",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.EXE\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\setup\\PnpLockdownFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exe\\UserChoice",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Control",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Control",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{40FC6ED5-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A52-2BAA-11CF-A229-00AA003D7352}",
"HKEY_CURRENT_USER\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}",
"HKEY_CLASSES_ROOT\\exefile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"command_line": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Windows\\Temp\\CENTRSUP.EXE \"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\\" \"C:\\Windows\\ST5UNST.000\" \"C:\\Windows\\ST5UNST.EXE\"",
"\"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\setup.exe\" "
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Windows\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Windows\\Temp\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Windows\\System32\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_"
],
"regkey_deleted": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}"
],
"file_deleted": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\__tmp_rar_sfx_access_check_16897078"
],
"file_exists": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\rsaenh.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SSPICLI.DLL",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ws2_32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\DXGIDebug.dll",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\apphelp.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\UXTheme.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ntshrui.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\usp10.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\setupapi.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\msasn1.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\cryptui.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\atl.dll",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\clbcatq.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\wintrust.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ieframe.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\comres.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ws2help.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\netapi32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\sfc_os.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\version.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\lpk.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\crypt32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\psapi.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\userenv.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_"
],
"file_failed": [
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Windows\\System32\\msvbvm60.dll\\3",
"C:\\Windows\\SETUP.LST",
"C:\\Windows"
],
"wmi_query": [
"Select * from Win32_OperatingSystem"
],
"guid": [
"{00bb2763-6a77-11d0-a535-00c04fd7d062}",
"{00021401-0000-0000-c000-000000000046}",
"{44aca674-e8fc-11d0-a07c-00c04fb68820}",
"{8bc3f05e-d86b-11d0-a075-00c04fb68820}",
"{00bb2765-6a77-11d0-a535-00c04fd7d062}",
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{000214f9-0000-0000-c000-000000000046}",
"{0000011a-0000-0000-c000-000000000046}",
"{00000000-0000-0000-c000-000000000046}",
"{4590f811-1d3a-11d0-891f-00aa004b2e24}",
"{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{674b6698-ee92-11d0-ad71-00c04fd8fdff}",
"{3bc15af2-736c-477e-9e51-238af8667dcc}",
"{0002e005-0000-0000-c000-000000000046}",
"{d5f569d0-593b-101a-b569-08002b2dbf7a}",
"{dc12a687-737f-11cf-884d-00aa004b2e24}",
"{5e078e03-8265-4bbe-9487-d242edbef910}",
"{172bddf8-ceea-11d1-8b05-00600806d9b6}",
"{cf4cc405-e2c5-4ddd-b3ce-5e7582d8c9fa}",
"{f309ad18-d86a-11d0-a075-00c04fb68820}",
"{eac04bc0-3791-11d2-bb95-0060977b464c}",
"{0002e012-0000-0000-c000-000000000046}",
"{7c857801-7381-11cf-884d-00aa004b2e24}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
"{03c036f1-a186-11d0-824a-00aa005b4383}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Windows\\System32\\wbem\\wbemdisp.tlb",
"C:\\Windows\\winsxs\\FileMaps\\$$_system32_21f9a9c4a2f8b514.cdf-ms",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"C:\\Windows\\SysWOW64\\stdole2.tlb",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Windows\\winsxs\\FileMaps\\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\syswow64\\OLEAUT32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RETURNALLATTRIBS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RequiredFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\CORELINTERNETENUM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\COINITIALIZE_COMPAREIDS",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STATICJUMPLISTSIZE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\950",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\CONTEXTMENU",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\AutoSuggest",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInterval",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\LOADCOLUMNHANDLER",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\936",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\OLDREGITEMGDN",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanWorkstation\\Parameters\\RpcCacheTimeout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\IGNOREDEFAULTTOKEN",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1999",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1997",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Visual Studio .NET 2003\\RequiredFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RETURNNONURLSASURLS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FLUSHNOWAITALWAYS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95BINDTOOBJECT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FORCELFNIDLIST",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Hostname",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2017",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V215.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\LastEntry",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Client\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FILEOPENBOGUSCTRLID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NormalizeLinkNetPidls",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2006",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2004",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2000",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInset",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95SHLEXEC",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\DOCOBJECT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\FirstEntry",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FORCELIBRARYPARSE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V300.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\WBEM\\Scripting\\Default Namespace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STRIPFOLDERBIT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\EventMessageFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NOVALIDATEFSIDS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NOTHREADUSECHECKS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WINMGMTS\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\ANSIDISPLAYNAMES",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V301.dll",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\ANSI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\IGNOREENUMRESET",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\949",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STAROFFICE5PRINTER",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2008",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2007",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Always Use Tab",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1980",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\LoadAppInit_DLLs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NODEFVIEWMSGPUMP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\APPISOFFICE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe\\DontUseDesktopChangeRouter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\932",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\MYCOMPUTERFIRST",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{565783C6-CB41-11D1-8B02-00600806D9B6}\\1.2\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Domain",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\StdOle2.tlb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95DEFVIEW",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OleAut32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2018",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\VB5StKit.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\OLDCREATEVIEWWND",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragMinDist",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category"
],
"directory_enumerated": [
"C:\\Windows\\System32\\oleaut32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V300.DL_",
"C:\\Program Files (x86)\\HartSystem\\ServerMasterService01\\*.cfg",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\WPDNSE\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\*.*",
"C:\\Windows\\Temp\\PRODENT.CT1",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
"C:\\Windows\\Temp\\PRODENT.USR",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\CENTRALSUP*.CSCFG",
"C:\\Windows\\System32\\VB5StKit.dll",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\StdOle2.tl_",
"C:\\Windows\\Temp\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CENTRSUP.EX_",
"C:\\Windows\\System32\\olepro32.dll",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CENTRSUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\CENTRALSUP*.CSCFG",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\*.*",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\CENTRALSUP*.CSCFG",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ST5UNST.EX_",
"C:\\Windows",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\*.*",
"C:\\Windows\\Temp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\*.*",
"C:\\Windows\\System32\\HP32V300.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Windows\\Temp\\CENTRALSUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\CENTRALSUP*.CSCFG",
"C:\\Users",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MOZILLA-TEMP-FILES\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SETUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Windows\\Temp\\PDW.INI",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\CENTRALSUP*.EXE",
"C:\\Windows\\System32\\*.*",
"C:\\Users\\cuck\\AppData",
"C:\\Windows\\Temp\\prodent.ctr",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"c:\\prodentw\\prodent.ctr",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\*.*",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"c:\\sistema\\prodentw\\prodent.ctr",
"C:\\Windows\\System32\\HP32V215.dll",
"C:\\Windows\\Temp\\PRODENT.CTR",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Windows\\ST5UNST.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\Low\\*.*",
"C:\\Windows\\System32\\HP32V301.dll",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\VB5STKIT.DL_"
],
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\StdOle2.tlb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\VersionIndependentProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V300.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OleAut32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V215.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\InProcServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\EventMessageFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\VB5StKit.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V301.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CurVer\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\TypesSupported",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\VersionIndependentProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CurVer\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)"
]
}Dropped
[
{
"yara": [],
"sha1": "2b075ca870864eb6bbbcff94b780b67463c52386",
"name": "e5402c505ae22e52_setup.lst",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e5402c505ae22e52f855df5225dad2d80f9974a9c8bd4faebd45dbacbcb76a10",
"urls": [],
"crc32": "5BE0B92A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/e5402c505ae22e52_setup.lst",
"ssdeep": null,
"size": 1357,
"sha512": "945273cbe4dfaa0cc57142cfec2f4a9cb4815e77c94042f24b4218b93a3d5b25b405d5753b89c31918df1a876da2fc4307688df91b7c0b804e5ab89cebfdee83",
"pids": [
2420
],
"md5": "079232f9aa2b2da5f42b2f5ea61de479"
},
{
"yara": [
{
"meta": {
"description": "Matched shellcode byte patterns",
"author": "nex"
},
"name": "shellcode",
"offsets": {
"shell6": [
[
235226,
0
]
],
"shell1": [
[
169280,
1
]
]
},
"strings": [
"VYvsgew=",
"ZItk"
]
}
],
"sha1": "13156552d657a52bda614877e23566285dc3c7f9",
"name": "c2b2fcdac70c118e_msvbvm60.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"type": "MS Compress archive data",
"sha256": "c2b2fcdac70c118e284888aff482270229b9bc168ebe9030173186466bbb7d36",
"urls": [],
"crc32": "E639CE19",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/c2b2fcdac70c118e_msvbvm60.dl_",
"ssdeep": null,
"size": 858628,
"sha512": "8d85479b17b4c12cbc8b36c41c04ccf1cd6ee0d6c7ce3b51e8ec072a2d932fe445442f6b33bd6ec5c7063d11acd65288bfd9dda9e8c50e7224fb0b3aa60c5dd1",
"pids": [
2420
],
"md5": "355efeb35c7317b6960a3152766f76e0"
},
{
"yara": [],
"sha1": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
"name": "e3b0c44298fc1c14___tmp_rar_sfx_access_check_16897078",
"type": "empty",
"sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"urls": [],
"crc32": "00000000",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/e3b0c44298fc1c14___tmp_rar_sfx_access_check_16897078",
"ssdeep": null,
"size": 0,
"sha512": "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e",
"md5": "d41d8cd98f00b204e9800998ecf8427e"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "42300249c7b7c4c5dd3e2d3bc0ea33f66c5bbe1a",
"name": "565a1198ed088d88_st5unst uninstaller.lnk",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Thu Aug 13 17:53:06 2020, mtime=Thu Aug 13 17:53:06 2020, atime=Thu Jan 16 07:00:00 1997, length=71680, window=hide",
"sha256": "565a1198ed088d8849e9eab0fc44d242dab206fb177cacdf5f4202d4252a0aca",
"urls": [],
"crc32": "204C0264",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/565a1198ed088d88_st5unst uninstaller.lnk",
"ssdeep": null,
"size": 889,
"sha512": "b0a94166ee70b5c5a4d882b7a224d130f471462ce6cbc85cc9b4d1134f3fa130e3121ae951b43d2098e7fc2be30f842577c727f963eaf2f4e27c1698dc3e51cb",
"pids": [
3016
],
"md5": "765b740b27676d1c717bac2b1c592cd0"
},
{
"yara": [
{
"meta": {
"description": "Matched shellcode byte patterns",
"author": "nex"
},
"name": "shellcode",
"offsets": {
"shell5": [
[
14642,
0
],
[
203111,
0
],
[
354296,
0
]
],
"shell6": [
[
59658,
1
]
]
},
"strings": [
"VYvsg8Q=",
"VYvsgew="
]
}
],
"sha1": "31de74fd74b782d963c3799cc22a2d7c7a1e58f9",
"name": "70705e178a859c0b_oleaut32.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"type": "MS Compress archive data",
"sha256": "70705e178a859c0bb4d3472124cc2b2b40626c86f6ba8368390fbc96e51bd073",
"urls": [],
"crc32": "E203FFC6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/70705e178a859c0b_oleaut32.dl_",
"ssdeep": null,
"size": 384811,
"sha512": "ada0d8275325f79a774841c4108b1e9005965ff76b97e4ab87af0e135af385f6390e4869c2ccb653c1c6d3152cfd7e333a02536e26d4e03fd57b0000108bd815",
"pids": [
2420
],
"md5": "240b0e638793a4f7c36b1b0f2c53d90c"
},
{
"yara": [],
"sha1": "ea50fd7e2d50aa069dc98933d3917d989959e6a3",
"name": "b4e7047c32ce4e0f_stdole2.tl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"type": "MS Compress archive data",
"sha256": "b4e7047c32ce4e0fecfd3fa7339c3f64afdf03c3122ca382392db2952d5d77b6",
"urls": [],
"crc32": "12BF3D1E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/b4e7047c32ce4e0f_stdole2.tl_",
"ssdeep": null,
"size": 7637,
"sha512": "9f3190a1f0170215d9ce9970088c14c4c2a6030e191d5d7397b6369e0cac07cb4cf1e6b3b98e251b604f98b224ed86aef79e1bd421c1a1c321e6e1d424752071",
"pids": [
2420
],
"md5": "2e31a906e2738650f5e6d0ee9b3afb6e"
},
{
"yara": [],
"sha1": "2fdf1878f0f0eb2c839636258acd94dba7e3c147",
"name": "334bcec5052af599_setup.exe",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"type": "PE32 executable (GUI) Intel 80386, for MS Windows",
"sha256": "334bcec5052af599271f5697b67a4e86970aa02184527c601ec2f6b7fadc1381",
"urls": [],
"crc32": "F148F859",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/334bcec5052af599_setup.exe",
"ssdeep": null,
"size": 89600,
"sha512": "f192148dd4bded2787baca74b214f70a838f43f91223c4fbb1b2a57f0fc5fff537e37eb8c936edb8291cef9e6dd4ff954bc787a775d8188c2bb87ee583a54556",
"pids": [
2420
],
"md5": "22eb82c45461cb2461e6098907193078"
},
{
"yara": [],
"sha1": "2a0fc49ccefe66220f8c413984efdc8cea450b67",
"name": "d88be86d77fdcc44_hp32v215.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"type": "MS Compress archive data",
"sha256": "d88be86d77fdcc44718ae5a3f86f5ab49150c4bd8adbfacec9c2c51d4671dc5d",
"urls": [],
"crc32": "EDB1EA6F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/d88be86d77fdcc44_hp32v215.dl_",
"ssdeep": null,
"size": 42615,
"sha512": "7d409cced8ad9c4ceab80955a79eb214fd8e52d17d7b44cf6b571a854175d45245fd7f423f4c217e74654a987b77d66b5fef58bd00bca7abdd24ae3de5cf2804",
"pids": [
2420
],
"md5": "c7e7cc5e740ad374a2ff2c6a4e4547b9"
},
{
"yara": [],
"sha1": "54a8e067228b8a9c2d5b3ff0f295a2f4f2284c6a",
"name": "c86f04ef52314297_st5unst.ex_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"type": "MS Compress archive data",
"sha256": "c86f04ef52314297dc6b158573e872e7040fe2bb715c35e579df43a724612c43",
"urls": [],
"crc32": "DB480816",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/c86f04ef52314297_st5unst.ex_",
"ssdeep": null,
"size": 37850,
"sha512": "b01dab2fda3f4dc5402573ec0904be8181eb7b6d0e5cf9d0b64c449589883640e27ad9bc1afdea48e26ad6d42e6ee9d5642df049e420d091487e0a7e36cdbe8a",
"pids": [
2420
],
"md5": "984f708c2f0e206a570d0db32e3fd908"
},
{
"yara": [],
"sha1": "20dcc142848ab49ce8713829ae1e44db9ba7a457",
"name": "176553d87bd32fad_vb5stkit.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"type": "MS Compress archive data",
"sha256": "176553d87bd32fad3a595c8e47dfc30b18f8d9ba4dd44e9ad7880bc374ada7cb",
"urls": [],
"crc32": "D8B3CD73",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/176553d87bd32fad_vb5stkit.dl_",
"ssdeep": null,
"size": 16457,
"sha512": "4a5e6a03d6514d7569342b42e291ac50a40c6ef8ac1f210d5aeaee4f5ff26efa6badbe9405f3fa1758cb5e1fa70b900462e5269e3dd7aa5dd8cef6ed7ef9debf",
"pids": [
2420
],
"md5": "5dd04cca72cdd3c32589dcfd500c9b0b"
},
{
"yara": [],
"sha1": "f452b49a714b720779d4718027b9afd9b98b4562",
"name": "3e0575270e3d6424_st5unst.exe",
"filepath": "c:\\windows\\st5unst.exe",
"type": "PE32 executable (GUI) Intel 80386, for MS Windows",
"sha256": "3e0575270e3d64248cf097178dc4a5e22fc07f9567e6e3adcee9db5019fd445d",
"urls": [],
"crc32": "F255B560",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/3e0575270e3d6424_st5unst.exe",
"ssdeep": null,
"size": 71680,
"sha512": "e06918dcac3d8702b7ec9d4cb4fb33b787ec93fba8b956ffec20628b121cfdf8a740f4f25e7f482dd00b52587a520f95bf90a5f4d9218df4833ca8174df323cf",
"pids": [
3016
],
"md5": "714ed5e4095af389d1c20d1e19fde793"
},
{
"yara": [],
"sha1": "cc00c2540d86dc9bf003e2215539278e317a9f26",
"name": "6b40c4e98cad0d6c_mswinsck.oc_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"type": "MS Compress archive data",
"sha256": "6b40c4e98cad0d6cbf679d7b3f32bc891e4ea3bfa1b37e21a2b07fcbf0960dae",
"urls": [],
"crc32": "273A6401",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/6b40c4e98cad0d6c_mswinsck.oc_",
"ssdeep": null,
"size": 69740,
"sha512": "3ee1c6bc49989348c2ab7646960878ee1a0d9b59d634762ef82f8ee41559ea34867db0c6915c701298e3267d957569fed3bf3d273ed095ba6712a1bc2f16c6b8",
"pids": [
2420
],
"md5": "4f948d7b2483429ccc68e565243b548d"
},
{
"yara": [],
"sha1": "b5ed4717e539f9c96099067d4284896e9cb491c6",
"name": "5ce61db557368ea7_centrsup.ex_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"type": "PE32 executable (GUI) Intel 80386, for MS Windows",
"sha256": "5ce61db557368ea7eb1fc5bf5c6be414ea6fd61928944e9ecfba3b40451e6c84",
"urls": [],
"crc32": "38F219D1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/5ce61db557368ea7_centrsup.ex_",
"ssdeep": null,
"size": 2404352,
"sha512": "616840dabb7dc81262eab672926e33e9ce58260560f03b9d6c8ec8c78720aa4863dfd7b20117c46cc7effce11924bd4c77986e12d55f34efe8d950b4d8efd0e8",
"pids": [
2420
],
"md5": "f69d0d7819313f7e0465c1c26221cacd"
},
{
"yara": [],
"sha1": "f72055924d0ee906986c698584d2bf0d7f77581a",
"name": "3cff50159b6c9f7e_msinet.oc_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"type": "MS Compress archive data",
"sha256": "3cff50159b6c9f7e61bc1191e140d2de46b1e8310e31ae633d68007763ddc452",
"urls": [],
"crc32": "6170ADFD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/3cff50159b6c9f7e_msinet.oc_",
"ssdeep": null,
"size": 69469,
"sha512": "ee124563ec12ba809ff6dd73a15b8dc0448a42b2fa7df61e865360005888559158e38b235ca33a9d9998c90add3d6f8e5851a5e3b7fc4129df2fdf3804724314",
"pids": [
2420
],
"md5": "ea36af5060cfd25267968cc39702ad97"
},
{
"yara": [],
"sha1": "b14340d1e5c13fb484d072e44f8c27696314a95a",
"name": "018e333a2d1c0130_hp32v301.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"type": "MS Compress archive data",
"sha256": "018e333a2d1c01304bafad7456b1eaf5211e7b57756559a0601f3093b6e11f61",
"urls": [],
"crc32": "0D282E2A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/018e333a2d1c0130_hp32v301.dl_",
"ssdeep": null,
"size": 129954,
"sha512": "3926f5c2b4c3c2c81ef12b9b2e66e22da965975bbc36e2411c33df4dc86eb0a99e8c552966f58c699aa3979c22812c3986cd68f9ab12d85d97a38e281f727ae5",
"pids": [
2420
],
"md5": "c0781303f2cc8155181f434bff304f31"
},
{
"yara": [],
"sha1": "c9a2d372cb1513108c59e3d4e7f37eb6742485bb",
"name": "38c49929967837b9_hp32v300.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"type": "MS Compress archive data",
"sha256": "38c49929967837b9c4b8d5a1e9b0ffcca43595f4a52c11905a7e7b489a81b89b",
"urls": [],
"crc32": "5AFDDB39",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/38c49929967837b9_hp32v300.dl_",
"ssdeep": null,
"size": 103134,
"sha512": "3a3ac1a443efd0a2e0372f3316e480657600405f159753ea2c2749086fc2da7d8c61ad937f08ff46c0117f0880c718d6de8624b2bee6448ff620ca9714ef3116",
"pids": [
2420
],
"md5": "2861d536ca1957e4b429ec4b3427c477"
},
{
"yara": [],
"sha1": "d9a9b3e3f59da19933fae116415086dbdfbad3fc",
"name": "6c9126d6604f5932_olepro32.dl_",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"type": "MS Compress archive data",
"sha256": "6c9126d6604f59320485973b076f3845e81cf259c7116a77eb549a196a5ff90a",
"urls": [],
"crc32": "DDC55355",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/6c9126d6604f5932_olepro32.dl_",
"ssdeep": null,
"size": 89431,
"sha512": "e2bdc29de1cc9ae48a33e788d6592532b6489acadabe9cc553234133176070a86f183e42700e33b344956f6647bd8050a7f0cedd53d56b0e25f5ed4db970b456",
"pids": [
2420
],
"md5": "c15ec03ba55c2bd9c5feed1e7c34d333"
},
{
"yara": [],
"sha1": "4d62eb4d5c367a152bfd120b8a01b0d9301f32ae",
"name": "e50c050f8378dd86_st5unst.000",
"filepath": "C:\\Windows\\ST5UNST.000",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e50c050f8378dd86ae1adbb08454b5c59e9ea011a076ef81c191c5c4b2ffb45a",
"urls": [],
"crc32": "69B8EB7F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/8918\/files\/e50c050f8378dd86_st5unst.000",
"ssdeep": null,
"size": 2210,
"sha512": "52f695ec24b54bd74eadf9c9f4b1d3322347452c8910a4aa79d0f097accd93a4ff3e73170561f6c5697472c0890bb1574b6cd2b0a6ebb4703e8c7a0aa6056c0c",
"pids": [
3016
],
"md5": "0e91acc20cdb863b1682e7e7762b07ee"
}
]Generic
[
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"process_name": "SETUP.EXE",
"pid": 3016,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Windows\\temp.000",
"C:\\Windows\\ST5UNST.000",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SWV5AB6.tmp",
"C:\\Windows\\Temp\\temp.000",
"C:\\Windows\\System32\\temp.000"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches"
],
"dll_loaded": [
"C:\\Windows\\system32\\OLEPRO32.DLL",
"profapi.dll",
"C:\\Windows\\system32\\MSINET.OCX",
"srvcli.dll",
"LINKINFO.dll",
"kernel32.dll",
"C:\\Windows\\system32\\ole32.dll",
"dwmapi.dll",
"slc.dll",
"C:\\Windows\\system32\\uxtheme.dll",
"ntmarta.dll",
"PROPSYS.dll",
"CABINET.DLL",
"ole32.dll",
"SHLWAPI.dll",
"USER32.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"C:\\Windows\\system32\\MSWINSCK.OCX",
"OLEAUT32.dll",
"VB5STKIT.DLL",
"SHELL32.dll",
"comctl32.dll",
"C:\\Windows\\system32\\OleAut32.dll",
"SXS.DLL",
"DEVRTL.dll",
"ADVAPI32.dll",
"SETUPAPI.dll",
"ntshrui.dll",
"C:\\Windows\\system32\\MSVBVM60.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\",
"C:\\Windows\\System32\\HP32V300.dll",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Windows\\System32\\temp.000",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Windows\\",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Windows\\winsxs\\FileMaps\\$$_system32_21f9a9c4a2f8b514.cdf-ms",
"C:\\Windows\\Temp\\temp.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\temp.000",
"C:\\Windows\\System32\\HP32V215.dll",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Windows\\ST5UNST.EXE",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Windows\\System32\\VB5StKit.dll",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Windows\\System32\\HP32V301.dll",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Windows\\winsxs\\FileMaps\\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Windows",
"C:\\Windows\\Temp"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\VersionIndependentProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{40FC6ED4-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Control",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_CLASSES_ROOT\\InetCtls.Inet.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Programmable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CLASSES_ROOT\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}",
"HKEY_CLASSES_ROOT\\MSWinsock.Winsock",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A53-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Visual Studio .NET 2003",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ToolboxBitmap32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\Clsid",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A57-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A52-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{0DE86A57-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_CLASSES_ROOT\\InetCtls.Inet",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ToolboxBitmap32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}",
"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A53-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_CLASSES_ROOT\\.EXE\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{40FC6ED4-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\FLAGS",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Control",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories\\{40FC6ED5-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CLSID",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Programmable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\VersionIndependentProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32",
"HKEY_CLASSES_ROOT\\MSWinsock.Winsock.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exe\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\EventLog\\Application",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.EXE\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\setup\\PnpLockdownFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exe\\UserChoice",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Control",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Control",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{40FC6ED5-2438-11CF-A3DB-080036F12502}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories\\{0DE86A52-2BAA-11CF-A229-00AA003D7352}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ProgID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}",
"HKEY_CLASSES_ROOT\\exefile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Implemented Categories",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"command_line": [
"C:\\Windows\\Temp\\CENTRSUP.EXE \"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\\" \"C:\\Windows\\ST5UNST.000\" \"C:\\Windows\\ST5UNST.EXE\""
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Windows\\temp.000",
"C:\\Windows\\ST5UNST.000",
"C:\\Windows\\SETUP.LST",
"C:\\Windows\\Temp\\temp.000",
"C:\\Windows\\System32\\temp.000"
],
"regkey_deleted": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}"
],
"file_failed": [
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Windows\\System32\\msvbvm60.dll\\3",
"C:\\Windows\\SETUP.LST",
"C:\\Windows"
],
"guid": [
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{000214f9-0000-0000-c000-000000000046}",
"{00021401-0000-0000-c000-000000000046}",
"{0002e012-0000-0000-c000-000000000046}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{0002e005-0000-0000-c000-000000000046}",
"{00000000-0000-0000-c000-000000000046}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\winsxs\\FileMaps\\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Windows\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Windows\\winsxs\\FileMaps\\$$_system32_21f9a9c4a2f8b514.cdf-ms",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\syswow64\\OLEAUT32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RETURNALLATTRIBS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RequiredFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\CORELINTERNETENUM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\COINITIALIZE_COMPAREIDS",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STATICJUMPLISTSIZE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\CONTEXTMENU",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\LOADCOLUMNHANDLER",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\OLDREGITEMGDN",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanWorkstation\\Parameters\\RpcCacheTimeout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\IGNOREDEFAULTTOKEN",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Visual Studio .NET 2003\\RequiredFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\RETURNNONURLSASURLS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FLUSHNOWAITALWAYS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95BINDTOOBJECT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FORCELFNIDLIST",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V215.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FILEOPENBOGUSCTRLID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NormalizeLinkNetPidls",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95SHLEXEC",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\DOCOBJECT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\FORCELIBRARYPARSE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V300.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STRIPFOLDERBIT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\EventMessageFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NOVALIDATEFSIDS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NOTHREADUSECHECKS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\ANSIDISPLAYNAMES",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V301.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\ANSI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\IGNOREENUMRESET",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\STAROFFICE5PRINTER",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\NODEFVIEWMSGPUMP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\APPISOFFICE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemPath%\\system32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\setup.exe\\DontUseDesktopChangeRouter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\MYCOMPUTERFIRST",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\StdOle2.tlb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\WIN95DEFVIEW",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OleAut32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\VB5StKit.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\setup.exe\\OLDCREATEVIEWWND",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category"
],
"directory_enumerated": [
"C:\\Windows\\System32\\oleaut32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData",
"C:\\Windows\\System32\\HP32V300.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Windows\\ST5UNST.000",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Windows\\Temp\\CENTRSUP.EXE",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Windows\\System32\\olepro32.dll",
"C:\\Windows\\System32\\HP32V215.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Windows\\ST5UNST.EXE",
"C:\\Windows\\System32\\msvbvm60.dll",
"C:\\Windows\\System32\\VB5StKit.dll",
"C:\\Windows\\System32\\stdole2.tlb",
"C:\\Windows\\System32\\HP32V301.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Windows",
"C:\\Windows\\Temp"
],
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\StdOle2.tlb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{000204EF-0000-0000-C000-000000000046}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\VersionIndependentProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}\\6.0\\9\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59294-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OLEPRO32.DLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V300.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{B28FA150-0FF0-11CF-A911-00AA0062BB4C}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSWINSCK.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D760-6018-11CF-9016-00AA0068841E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSINET.OCX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C2-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{14E469E0-BF61-11CF-8385-8F69D8F1350B}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\OleAut32.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C3-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\MSVBVM60.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{888A5A60-B283-11CF-8AD5-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C46780-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V215.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}\\InProcServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7BF80981-BF32-101A-8BBB-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{BE8F9800-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{7500A6BA-EB65-11D1-938D-0000F87557C9}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{41A7D761-6018-11CF-9016-00AA0068841E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{48E59290-9880-11CF-9754-00AA00C00908}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\EventMessageFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\VB5StKit.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\SharedDLLs\\C:\\Windows\\System32\\HP32V301.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CurVer\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C5-4442-11D1-8906-00A0C9110049}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C1-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4EF6100A-AF88-11D0-9846-00C04FC29993}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{83C49FF0-B294-11D0-9488-00A0C91110ED}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{E43FD401-8715-11D1-98E7-00A0C9702442}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\MSWinsock.Winsock\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{A4C466B8-499F-101B-BB78-00AA00383CBB}\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\eventlog\\Application\\VBRuntime\\TypesSupported",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{4495AD01-C993-11D1-A3E4-00A0C90AEA82}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\VersionIndependentProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{D4E0F020-720A-11CF-8136-00AA00C14959}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{48E59292-9880-11CF-9754-00AA00C00908}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{EB41E8C4-4442-11D1-8906-00A0C9110049}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59295-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{48E59293-9880-11CF-9754-00AA00C00908}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{737361EC-467F-11D1-810F-0000F87557AA}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InetCtls.Inet\\CurVer\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{C0324960-2AAA-11CF-AD67-00AA00614F3E}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{48E59291-9880-11CF-9754-00AA00C00908}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{CBB76011-C508-11D1-A3E3-00A0C90AEA82}\\(Default)"
]
},
"first_seen": 1597351987.46875,
"ppid": 2420
},
{
"process_path": "C:\\Windows\\Temp\\CENTRSUP.EXE",
"process_name": "CENTRSUP.EXE",
"pid": 1496,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF1C573A5B7A78604F.TMP"
],
"dll_loaded": [
"ADVAPI32.dll",
"C:\\Windows\\system32\\kernel32.dll",
"HP32V301.DLL",
"kernel32",
"SXS.DLL",
"KERNEL32.dll",
"advapi32.dll",
"Kernel32.dll",
"UxTheme.dll",
"user32",
"OLEAUT32.DLL",
"C:\\Windows\\system32\\ole32.dll",
"version.dll",
"dwmapi.dll",
"comctl32",
"advapi32",
"USER32.dll",
"CRYPTSP.dll",
"User32.dll",
"OLEAUT32.dll"
],
"file_opened": [
"c:\\",
"C:\\",
"C:\\Windows\\System32\\wbem\\wbemdisp.tlb",
"C:\\Windows\\Temp",
"C:\\Windows\\SysWOW64\\stdole2.tlb",
"C:\\Windows\\System32"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WINMGMTS\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\CENTRSUP.EXE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Winmgmts",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Wbem\\Scripting",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}"
],
"wmi_query": [
"Select * from Win32_OperatingSystem"
],
"guid": [
"{172bddf8-ceea-11d1-8b05-00600806d9b6}",
"{0000011a-0000-0000-c000-000000000046}",
"{4590f811-1d3a-11d0-891f-00aa004b2e24}",
"{44aca674-e8fc-11d0-a07c-00c04fb68820}",
"{cf4cc405-e2c5-4ddd-b3ce-5e7582d8c9fa}",
"{674b6698-ee92-11d0-ad71-00c04fd8fdff}",
"{3bc15af2-736c-477e-9e51-238af8667dcc}",
"{d5f569d0-593b-101a-b569-08002b2dbf7a}",
"{7c857801-7381-11cf-884d-00aa004b2e24}",
"{8bc3f05e-d86b-11d0-a075-00c04fb68820}",
"{f309ad18-d86a-11d0-a075-00c04fb68820}",
"{dc12a687-737f-11cf-884d-00aa004b2e24}"
],
"file_read": [
"C:\\Windows\\SysWOW64\\stdole2.tlb",
"C:\\Windows\\System32\\wbem\\wbemdisp.tlb"
],
"regkey_read": [
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\950",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{565783C6-CB41-11D1-8B02-00600806D9B6}\\1.2\\0\\win32\\(Default)",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\949",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Domain",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WINMGMTS\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\932",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\WBEM\\Scripting\\Default Namespace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CodePage\\936",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Hostname",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSINET.OC_",
"C:\\Windows\\System32\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\*.*",
"C:\\Program Files (x86)\\HartSystem\\ServerMasterService01\\*.cfg",
"C:\\Windows\\Temp\\*.*",
"C:\\Windows\\Temp\\prodent.ctr",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ST5UNST.EX_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\WPDNSE\\*.*",
"c:\\prodentw\\prodent.ctr",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\*.*",
"C:\\Windows\\Temp\\CENTRALSUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\*.*",
"C:\\Windows\\System32\\MSINET.OCX",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\EIDFNJNY\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V300.DL_",
"C:\\Windows\\System32\\MSWINSCK.OCX",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\*.*",
"C:\\Windows\\Temp\\PRODENT.USR",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MOZILLA-TEMP-FILES\\*.*",
"c:\\sistema\\prodentw\\prodent.ctr",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SETUP.EXE",
"C:\\Windows\\Temp\\PRODENT.CT1",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\CENTRALSUP*.EXE",
"C:\\Windows\\System32\\HP32V215.dll",
"C:\\Windows\\Temp\\PRODENT.CTR",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\I6GMLZZB\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\OLEAUT32.DL_",
"C:\\Windows\\Temp\\PDW.INI",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\QQUHP74Z\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\Low\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\MSVBVM60.DL_",
"C:\\Windows\\System32\\HP32V301.dll",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Content.IE5\\SHYNOLTK\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\Low\\CENTRALSUP*.CSCFG",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\CENTRALSUP*.EXE",
"C:\\Users\\cuck\\AppData\\Local\\MICROSOFT\\Windows\\TEMPORARY INTERNET FILES\\VIRTUALIZED\\*.*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CENTRSUP.EXE"
]
},
"first_seen": 1597351988.671625,
"ppid": 3016
},
{
"process_path": "C:\\Windows\\explorer.exe",
"process_name": "explorer.exe",
"pid": 1788,
"summary": {},
"first_seen": 1597351987.859125,
"ppid": 1740
},
{
"process_path": "C:\\Windows\\System32\\lsass.exe",
"process_name": "lsass.exe",
"pid": 476,
"summary": {},
"first_seen": 1597351986.4375,
"ppid": 376
},
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"process_name": "fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"pid": 2420,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\__tmp_rar_sfx_access_check_16897078",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_"
],
"directory_created": [
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local"
],
"dll_loaded": [
"SHLWAPI.dll",
"C:\\Windows\\system32\\IMM32.DLL",
"C:\\Windows\\system32\\shell32.dll",
"C:\\Windows\\system32\\riched20.dll",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"SETUPAPI.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"IMM32.dll",
"gdi32.dll",
"dwmapi.dll",
"kernel32.dll",
"UxTheme.dll",
"GDI32.dll",
"C:\\Windows\\system32\\ole32.dll",
"SHELL32.dll",
"comctl32",
"ole32.dll",
"comctl32.dll",
"USER32.dll",
"COMCTL32.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Shell Dlg 2"
],
"command_line": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"\"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\setup.exe\" "
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_"
],
"file_deleted": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\__tmp_rar_sfx_access_check_16897078"
],
"file_exists": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\rsaenh.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\SSPICLI.DLL",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V300.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ws2_32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\DXGIDebug.dll",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\apphelp.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEAUT32.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\UXTheme.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V301.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSVBVM60.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ntshrui.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\usp10.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\setupapi.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\VB5STKIT.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\msasn1.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\HP32V215.DL_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\cryptui.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\atl.dll",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\clbcatq.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSINET.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\wintrust.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ieframe.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\StdOle2.tl_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\comres.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.LST",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\ws2help.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\OLEPRO32.DL_",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\netapi32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\sfc_os.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\version.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\lpk.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\crypt32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\psapi.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\MSWINSCK.OC_",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\userenv.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\ST5UNST.EX_"
],
"guid": [
"{eac04bc0-3791-11d2-bb95-0060977b464c}",
"{5e078e03-8265-4bbe-9487-d242edbef910}",
"{00bb2763-6a77-11d0-a535-00c04fd7d062}",
"{00000000-0000-0000-c000-000000000046}",
"{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
"{03c036f1-a186-11d0-824a-00aa005b4383}",
"{00bb2765-6a77-11d0-a535-00c04fd7d062}"
],
"file_read": [
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin"
],
"regkey_read": [
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Always Use Tab",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1980",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\AutoSuggest",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInset",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInterval",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2018",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2008",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2017",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\FirstEntry",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragMinDist",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\LoadAppInit_DLLs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1997",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\1999",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\LastEntry",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Client\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2004",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2006",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2007",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Pacific Standard Time\\Dynamic DST\\2000",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66.bin"
]
},
"first_seen": 1597351986.734375,
"ppid": 1268
}
]Signatures
[
{
"markcount": 2,
"families": [],
"description": "Queries for the computername",
"severity": 1,
"marks": [
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1597351987.67175,
"tid": 964,
"flags": {}
},
"pid": 3016,
"type": "call",
"cid": 1091
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1597351992.046625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 582
}
],
"references": [],
"name": "antivm_queries_computername"
},
{
"markcount": 1,
"families": [],
"description": "Checks if process is being debugged by a debugger",
"severity": 1,
"marks": [
{
"call": {
"category": "system",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741816,
"api": "IsDebuggerPresent",
"return_value": 0,
"arguments": {},
"time": 1597351987.57775,
"tid": 964,
"flags": {}
},
"pid": 3016,
"type": "call",
"cid": 114
}
],
"references": [],
"name": "checks_debugger"
},
{
"markcount": 1,
"families": [],
"description": "This executable has a PDB path",
"severity": 1,
"marks": [
{
"category": "pdb_path",
"ioc": "d:\\Projects\\WinRAR\\SFX\\build\\sfxrar32\\Release\\sfxrar.pdb",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "has_pdb"
},
{
"markcount": 3073,
"families": [],
"description": "One or more processes crashed",
"severity": 1,
"marks": [
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "D\nl\nl\nU\nn\nr\ne\ng\ni\ns\nt\ne\nr\nS\ne\nr\nv\ne\nr\n+\n0\nx\n1\n1\nf\n \nm\ns\ni\nn\ne\nt\n+\n0\nx\nb\n2\n8\ne\n \n@\n \n0\nx\n2\n3\n4\nc\nb\n2\n8\ne\n\n\nD\nl\nl\nR\ne\ng\ni\ns\nt\ne\nr\nS\ne\nr\nv\ne\nr\n+\n0\nx\n5\n \nD\nl\nl\nU\nn\nr\ne\ng\ni\ns\nt\ne\nr\nS\ne\nr\nv\ne\nr\n-\n0\nx\n1\n8\n \nm\ns\ni\nn\ne\nt\n+\n0\nx\nb\n1\n5\n7\n \n@\n \n0\nx\n2\n3\n4\nc\nb\n1\n5\n7\n\n\ns\ne\nt\nu\np\n+\n0\nx\n6\n0\n7\nf\n \n@\n \n0\nx\n4\n0\n6\n0\n7\nf\n\n\ns\ne\nt\nu\np\n+\n0\nx\n3\n0\n9\nc\n \n@\n \n0\nx\n4\n0\n3\n0\n9\nc\n\n\ng\na\np\nf\nn\nS\nc\nS\ne\nn\nd\nM\ne\ns\ns\na\ng\ne\n+\n0\nx\n3\n3\n2\n \nG\ne\nt\nA\np\np\nC\no\nm\np\na\nt\nF\nl\na\ng\ns\n2\n-\n0\nx\n8\ne\na\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n6\n2\nf\na\n \n@\n \n0\nx\n7\n6\n3\na\n6\n2\nf\na\n\n\nG\ne\nt\nT\nh\nr\ne\na\nd\nD\ne\ns\nk\nt\no\np\n+\n0\nx\nd\n7\n \nG\ne\nt\nW\ni\nn\nd\no\nw\nL\no\nn\ng\nW\n-\n0\nx\n2\nc\n4\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n6\nd\n3\na\n \n@\n \n0\nx\n7\n6\n3\na\n6\nd\n3\na\n\n\nG\ne\nt\nW\ni\nn\nd\no\nw\n+\n0\nx\n3\nf\n0\n \nS\ne\nn\nd\nM\ne\ns\ns\na\ng\ne\nW\n-\n0\nx\n1\nb\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n9\n6\n5\ne\n \n@\n \n0\nx\n7\n6\n3\na\n9\n6\n5\ne\n\n\nS\ne\nn\nd\nM\ne\ns\ns\na\ng\ne\nA\n+\n0\nx\n4\nc\n \nG\ne\nt\nA\np\np\nC\no\nm\np\na\nt\nF\nl\na\ng\ns\n-\n0\nx\n7\n2\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n2\n6\n1\n7\na\n \n@\n \n0\nx\n7\n6\n3\nb\n6\n1\n7\na\n\n\ns\ne\nt\nu\np\n+\n0\nx\n3\n0\n9\n2\n \n@\n \n0\nx\n4\n0\n3\n0\n9\n2\n\n\ng\na\np\nf\nn\nS\nc\nS\ne\nn\nd\nM\ne\ns\ns\na\ng\ne\n+\n0\nx\n3\n3\n2\n \nG\ne\nt\nA\np\np\nC\no\nm\np\na\nt\nF\nl\na\ng\ns\n2\n-\n0\nx\n8\ne\na\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n6\n2\nf\na\n \n@\n \n0\nx\n7\n6\n3\na\n6\n2\nf\na\n\n\nG\ne\nt\nD\nC\n+\n0\nx\n5\n2\n \nR\ne\nl\ne\na\ns\ne\nD\nC\n-\n0\nx\n1\n3\n0\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n7\n3\n1\n6\n \n@\n \n0\nx\n7\n6\n3\na\n7\n3\n1\n6\n\n\nG\ne\nt\nT\nh\nr\ne\na\nd\nD\ne\ns\nk\nt\no\np\n+\n0\nx\n1\n8\n5\n \nG\ne\nt\nW\ni\nn\nd\no\nw\nL\no\nn\ng\nW\n-\n0\nx\n2\n1\n6\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n6\nd\ne\n8\n \n@\n \n0\nx\n7\n6\n3\na\n6\nd\ne\n8\n\n\nG\ne\nt\nT\nh\nr\ne\na\nd\nD\ne\ns\nk\nt\no\np\n+\n0\nx\n1\ne\n1\n \nG\ne\nt\nW\ni\nn\nd\no\nw\nL\no\nn\ng\nW\n-\n0\nx\n1\nb\na\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n6\ne\n4\n4\n \n@\n \n0\nx\n7\n6\n3\na\n6\ne\n4\n4\n\n\nK\ni\nU\ns\ne\nr\nC\na\nl\nl\nb\na\nc\nk\nD\ni\ns\np\na\nt\nc\nh\ne\nr\n+\n0\nx\n2\ne\n \nK\ni\nU\ns\ne\nr\nE\nx\nc\ne\np\nt\ni\no\nn\nD\ni\ns\np\na\nt\nc\nh\ne\nr\n-\n0\nx\n1\na\n \nn\nt\nd\nl\nl\n+\n0\nx\n1\n0\n1\n1\na\n \n@\n \n0\nx\n7\n7\nb\na\n0\n1\n1\na\n\n\nD\ni\ns\np\na\nt\nc\nh\nM\ne\ns\ns\na\ng\ne\nA\n+\n0\nx\nf\n \nG\ne\nt\nM\ne\ns\ns\na\ng\ne\nA\n-\n0\nx\n9\n \nu\ns\ne\nr\n3\n2\n+\n0\nx\n1\n7\nb\nc\na\n \n@\n \n0\nx\n7\n6\n3\na\n7\nb\nc\na\n\n\ns\ne\nt\nu\np\n+\n0\nx\n2\ne\n8\na\n \n@\n \n0\nx\n4\n0\n2\ne\n8\na\n\n\ns\ne\nt\nu\np\n+\n0\nx\n7\nd\nf\nd\n \n@\n \n0\nx\n4\n0\n7\nd\nf\nd\n\n\nB\na\ns\ne\nT\nh\nr\ne\na\nd\nI\nn\ni\nt\nT\nh\nu\nn\nk\n+\n0\nx\n1\n2\n \nV\ne\nr\ni\nf\ny\nC\no\nn\ns\no\nl\ne\nI\no\nH\na\nn\nd\nl\ne\n-\n0\nx\nb\n3\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n3\n3\nc\na\n \n@\n \n0\nx\n7\n5\nb\nc\n3\n3\nc\na\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1628424,
"edi": 1975278155,
"eax": 2,
"ebp": 1628464,
"edx": 3,
"ebx": 0,
"esi": 592257308,
"ecx": 3362652160
},
"exception": {
"instruction_r": "8a 08 40 84 c9 75 f9 2b c2 c7 45 fc fe ff ff ff",
"symbol": "lstrlen+0x1a lstrcmpW-0x3f kernelbase+0xa34a",
"instruction": "mov cl, byte ptr [eax]",
"module": "KERNELBASE.dll",
"exception_code": "0xc0000005",
"offset": 41802,
"address": "0x75dba34a"
}
},
"time": 1597351988.29675,
"tid": 964,
"flags": {}
},
"pid": 3016,
"type": "call",
"cid": 5259
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\nf\n3\n7\nc\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n2\n5\nd\nc\n8\n \n@\n \n0\nx\n4\n1\n0\n5\nd\nc\n8\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627612,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628144,
"edx": 63981056,
"ebx": 255,
"esi": 1628176,
"ecx": 64516
},
"exception": {
"instruction_r": "8b 1b 90 90 90 90 5f 5e 5b 8b e5 5d c3 bb 4e 14",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0xf356 hp32v301+0x25da2",
"address": "0x4105da2"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1581
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\nf\n3\n7\nc\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n2\n5\nd\nc\n8\n \n@\n \n0\nx\n4\n1\n0\n5\nd\nc\n8\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627612,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628144,
"edx": 63981056,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 64516
},
"exception": {
"instruction_r": "8b 1b 90 90 90 90 5f 5e 5b 8b e5 5d c3 bb 4e 14",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0xf356 hp32v301+0x25da2",
"address": "0x4105da2"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1582
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 256,
"ebp": 1628140,
"edx": 62,
"ebx": 1628148,
"esi": 1628176,
"ecx": 0
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1583
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 0,
"esi": 1628176,
"ecx": 0
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1584
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 0
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1585
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 1,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 0
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1586
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1,
"esi": 1628176,
"ecx": 1
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1587
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 1
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1588
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 2,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 1
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1589
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 4,
"esi": 1628176,
"ecx": 4
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1590
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 4
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1591
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 4
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1592
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 9,
"esi": 1628176,
"ecx": 9
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1593
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 9
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1594
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 4,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 9
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1595
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 16,
"esi": 1628176,
"ecx": 16
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1596
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 16
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1597
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 5,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 16
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1598
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 25,
"esi": 1628176,
"ecx": 25
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1599
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 25
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1600
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 6,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 25
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1601
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 36,
"esi": 1628176,
"ecx": 36
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1602
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 36
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1603
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 7,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 36
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1604
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 49,
"esi": 1628176,
"ecx": 49
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1605
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 49
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1606
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 8,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 49
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1607
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 64,
"esi": 1628176,
"ecx": 64
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1608
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 64
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1609
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 64
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1610
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 81,
"esi": 1628176,
"ecx": 81
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1611
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 81
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1612
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 10,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 81
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1613
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 100,
"esi": 1628176,
"ecx": 100
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1614
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 100
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1615
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 11,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 100
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1616
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 121,
"esi": 1628176,
"ecx": 121
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1617
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 121
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1618
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 12,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 121
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1619
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 144,
"esi": 1628176,
"ecx": 144
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1620
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 144
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1621
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 13,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 144
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1622
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 169,
"esi": 1628176,
"ecx": 169
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1623
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 169
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1624
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 14,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 169
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1625
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 196,
"esi": 1628176,
"ecx": 196
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1626
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 3220635648,
"ebp": 1628140,
"edx": 683910829,
"ebx": 3220635648,
"esi": 1628176,
"ecx": 196
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1627
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 15,
"ebp": 1628140,
"edx": 683910829,
"ebx": 1628148,
"esi": 1628176,
"ecx": 196
},
"exception": {
"instruction_r": "cc 8b 8d fc fd ff ff 0f af 8d fc fd ff ff 8b 85",
"instruction": "int3",
"exception_code": "0x80000003",
"symbol": "__DebuggerHookData+0x725c hp32v301+0x1dca8",
"address": "0x40fdca8"
}
},
"time": 1597351993.984625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1628
},
{
"call": {
"category": "__notification__",
"status": 1,
"stacktrace": [],
"raw": [
"stacktrace"
],
"api": "__exception__",
"return_value": 0,
"arguments": {
"stacktrace": "_\n_\nD\ne\nb\nu\ng\ng\ne\nr\nH\no\no\nk\nD\na\nt\na\n+\n0\nx\n7\na\nc\n0\n \nh\np\n3\n2\nv\n3\n0\n1\n+\n0\nx\n1\ne\n5\n0\nc\n \n@\n \n0\nx\n4\n0\nf\ne\n5\n0\nc\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\nb\n4\nd\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n1\n6\nc\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n8\na\n9\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n8\na\n9\n\n\nL\nd\nr\nR\ne\ns\nS\ne\na\nr\nc\nh\nR\ne\ns\no\nu\nr\nc\ne\n+\n0\nx\na\n1\n0\n \nL\nd\nr\nR\ne\ns\nF\ni\nn\nd\nR\ne\ns\no\nu\nr\nc\ne\nD\ni\nr\ne\nc\nt\no\nr\ny\n-\n0\nx\n2\na\n9\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nd\n7\n6\nc\n \n@\n \n0\nx\n7\n7\nb\nc\nd\n7\n6\nc\n\n\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n+\n0\nx\n7\nb\n \n_\ns\nt\nr\nc\nm\np\ni\n-\n0\nx\n3\n0\n4\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\nc\n4\nb\n5\n \n@\n \n0\nx\n7\n7\nb\nc\nc\n4\nb\n5\n\n\nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nL\no\na\nd\nD\nl\nl\n@\n1\n6\n+\n0\nx\n7\nc\n \nN\ne\nw\n_\nn\nt\nd\nl\nl\n_\nL\nd\nr\nU\nn\nl\no\na\nd\nD\nl\nl\n@\n4\n-\n0\nx\nb\n7\n \n@\n \n0\nx\n6\n3\nd\nd\nd\n6\n4\ne\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nW\n+\n0\nx\n1\n7\n8\n \nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n-\n0\nx\n2\na\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n2\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n2\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nE\nx\nA\n+\n0\nx\n2\n6\n \nF\nr\ne\ne\nL\ni\nb\nr\na\nr\ny\n-\n0\nx\n1\n8\n \nk\ne\nr\nn\ne\nl\nb\na\ns\ne\n+\n0\nx\n1\n1\nd\n7\na\n \n@\n \n0\nx\n7\n5\nd\nc\n1\nd\n7\na\n\n\nL\no\na\nd\nL\ni\nb\nr\na\nr\ny\nA\n+\n0\nx\n3\n1\n \nH\ne\na\np\nC\nr\ne\na\nt\ne\n-\n0\nx\n2\n5\n \nk\ne\nr\nn\ne\nl\n3\n2\n+\n0\nx\n1\n4\na\n0\n8\n \n@\n \n0\nx\n7\n5\nb\nc\n4\na\n0\n8\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n7\n6\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n4\n8\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n7\n3\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n7\n3\n\n\nD\nl\nl\nF\nu\nn\nc\nt\ni\no\nn\nC\na\nl\nl\n+\n0\nx\n2\n2\n \nr\nt\nc\nC\no\nm\nm\na\nn\nd\nB\ns\nt\nr\n-\n0\nx\n9\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\na\n1\n1\nf\n \n@\n \n0\nx\n7\n2\n9\n4\na\n1\n1\nf\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\nd\n6\n3\n3\n \n@\n \n0\nx\n4\n2\nd\n6\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n7\ne\nd\n4\na\n \n@\n \n0\nx\n4\n7\ne\nd\n4\na\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n6\nf\n3\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\nb\nc\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n1\nd\n3\n3\n \n@\n \n0\nx\n7\n2\n9\n9\n1\nd\n3\n3\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n3\ne\nc\ne\n \n@\n \n0\nx\n4\n2\n3\ne\nc\ne\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\n9\nf\n4\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n8\nc\n3\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n0\n3\n4\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n0\n3\n4\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n3\ne\n5\nb\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n4\n5\nc\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n4\n9\nb\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n4\n9\nb\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n2\n4\n0\n2\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n4\n1\n2\n9\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n5\n2\n6\n6\n7\n \n@\n \n0\nx\n7\n2\n9\n9\n2\n6\n6\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\nb\n7\n7\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\n7\n4\n0\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n2\n1\nb\n7\n \n@\n \n0\nx\n7\n2\n9\n7\n2\n1\nb\n7\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n8\n6\nd\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n6\n1\na\n4\na\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n1\ne\na\nd\n \n@\n \n0\nx\n7\n2\n9\n7\n1\ne\na\nd\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n3\n6\n2\n9\n1\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\nf\n0\n2\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\n4\n8\nd\n1\n \n@\n \n0\nx\n7\n2\n9\na\n4\n8\nd\n1\n\n\nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n+\n0\nx\n4\n1\n8\nd\n8\n \nU\ns\ne\nr\nD\nl\nl\nM\na\ni\nn\n-\n0\nx\n2\n3\n9\nd\nf\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n6\nf\nf\n1\n8\n \n@\n \n0\nx\n7\n2\n9\na\nf\nf\n1\n8\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nR\ne\nl\ne\na\ns\ne\n+\n0\nx\nf\nc\na\na\n \nI\nI\nD\n_\nI\nV\nb\na\nH\no\ns\nt\n-\n0\nx\nf\nf\n3\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n1\ne\n7\n0\n3\n \n@\n \n0\nx\n7\n2\n9\n5\ne\n7\n0\n3\n\n\nB\nA\nS\nI\nC\n_\nC\nL\nA\nS\nS\n_\nQ\nu\ne\nr\ny\nI\nn\nt\ne\nr\nf\na\nc\ne\n+\n0\nx\ne\nc\na\n \nE\nb\nL\no\na\nd\nR\nu\nn\nT\ni\nm\ne\n-\n0\nx\n1\n3\na\n4\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n7\nb\n3\ne\n \n@\n \n0\nx\n7\n2\n9\n4\n7\nb\n3\ne\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n3\nd\nd\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n2\ne\n3\n6\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n9\n8\n1\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n9\n8\n1\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n1\n5\n6\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n0\nb\nd\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\nf\na\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\nf\na\n\n\nT\nh\nu\nn\nR\nT\nM\na\ni\nn\n+\n0\nx\n5\nc\n \nE\nb\nC\nr\ne\na\nt\ne\nC\no\nn\nt\ne\nx\nt\n-\n0\nx\n3\n1\nb\n7\n \nm\ns\nv\nb\nv\nm\n6\n0\n+\n0\nx\n3\n6\n0\n0\n \n@\n \n0\nx\n7\n2\n9\n4\n3\n6\n0\n0\n\n\nc\ne\nn\nt\nr\ns\nu\np\n+\n0\nx\n2\n1\nd\ne\ne\n \n@\n \n0\nx\n4\n2\n1\nd\ne\ne\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n6\n3\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\na\n1\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\nd\n2\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\nd\n2\n\n\nR\nt\nl\nI\nn\ni\nt\ni\na\nl\ni\nz\ne\nE\nx\nc\ne\np\nt\ni\no\nn\nC\nh\na\ni\nn\n+\n0\nx\n3\n6\n \nR\nt\nl\nA\nl\nl\no\nc\na\nt\ne\nA\nc\nt\ni\nv\na\nt\ni\no\nn\nC\no\nn\nt\ne\nx\nt\nS\nt\na\nc\nk\n-\n0\nx\nc\ne\n \nn\nt\nd\nl\nl\n+\n0\nx\n3\n9\ne\na\n5\n \n@\n \n0\nx\n7\n7\nb\nc\n9\ne\na\n5",
"registers": {
"esp": 1627608,
"edi": 1628364,
"eax": 9127184,
"ebp": 1628140,
"edx": 683910829,
"ebx": 225,
"esi": 1628176,
"ecx": 225
},
"exception": {
"instruction_r": "8b 1b 52 ba b0 b8 eb 05 5a eb fb 58 ba e9 18 ff",
"instruction": "mov ebx, dword ptr [ebx]",
"exception_code": "0xc0000005",
"symbol": "__DebuggerHookData+0x72e6 hp32v301+0x1dd32",
"address": "0x40fdd32"
}
},
"time": 1597351993.999625,
"tid": 1468,
"flags": {}
},
"pid": 1496,
"type": "call",
"cid": 1629
}
],
"references": [],
"name": "raises_exception"
},
{
"markcount": 22,
"families": [],
"description": "Allocates read-write-execute memory (usually to unpack itself)",
"severity": 2,
"marks": [
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x745f1000"
},
"time": 1597351987.62475,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 313
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74ea1000"
},
"time": 1597351987.64075,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 584
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74c61000"
},
"time": 1597351987.65575,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 689
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x750b1000"
},
"time": 1597351987.65575,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 877
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x75b61000"
},
"time": 1597351987.65575,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 879
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x749e1000"
},
"time": 1597351987.67175,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 1035
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74581000"
},
"time": 1597351987.67175,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 1045
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74561000"
},
"time": 1597351987.67175,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 1049
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74541000"
},
"time": 1597351987.67175,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 1075
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x10009000"
},
"time": 1597351988.03075,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 3376
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x72941000"
},
"time": 1597351988.03075,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 3393
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74e41000"
},
"time": 1597351988.04675,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 3429
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74521000"
},
"time": 1597351988.20275,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 4689
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x22171000"
},
"time": 1597351988.23475,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 4798
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77311000"
},
"time": 1597351988.23475,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 4800
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77b61000"
},
"time": 1597351988.23475,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 4802
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x744d1000"
},
"time": 1597351988.23475,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 4864
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3016,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x234c1000"
},
"time": 1597351988.28075,
"tid": 964,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3016,
"type": "call",
"cid": 5099
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1496,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x744d1000"
},
"time": 1597351988.780625,
"tid": 1468,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1496,
"type": "call",
"cid": 81
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1496,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x744b1000"
},
"time": 1597351988.796625,
"tid": 1468,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1496,
"type": "call",
"cid": 147
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1496,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74c61000"
},
"time": 1597351988.796625,
"tid": 1468,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1496,
"type": "call",
"cid": 178
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1496,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x04105000"
},
"time": 1597351993.968625,
"tid": 1468,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1496,
"type": "call",
"cid": 1580
}
],
"references": [],
"name": "allocates_rwx"
},
{
"markcount": 1,
"families": [],
"description": "Creates a shortcut to an executable file",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "creates_shortcut"
},
{
"markcount": 1,
"families": [],
"description": "Drops a binary and executes it",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "dropper"
},
{
"markcount": 2,
"families": [],
"description": "Drops an executable to the user AppData folder",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\SETUP.EXE",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\RarSFX0\\CENTRSUP.EX_",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "exe_appdata"
},
{
"markcount": 1,
"families": [],
"description": "Executes one or more WMI queries",
"severity": 2,
"marks": [
{
"category": "wmi",
"ioc": "Select * from Win32_OperatingSystem",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "has_wmi"
},
{
"markcount": 1,
"families": [],
"description": "Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time)",
"severity": 2,
"marks": [
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1496,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 1,
"length": 24576,
"protection": 32,
"process_handle": "0xffffffff",
"base_address": "0x00c90000"
},
"time": 1597351988.780625,
"tid": 1468,
"flags": {
"protection": "PAGE_EXECUTE_READ"
}
},
"pid": 1496,
"type": "call",
"cid": 18
}
],
"references": [],
"name": "protection_rx"
},
{
"markcount": 1,
"families": [],
"description": "Installs itself for autorun at Windows startup",
"severity": 3,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ST5UNST Uninstaller.LNK",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "persistence_autorun"
}
]Yara
The Yara rules did not detect anything in the file.
Network
{
"tls": [],
"udp": [
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 546,
"time": 3.1122219562530518,
"dport": 137,
"sport": 137
},
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 5226,
"time": 9.148149967193604,
"dport": 138,
"sport": 138
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7070,
"time": 3.0966439247131348,
"dport": 5355,
"sport": 51001
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7398,
"time": 1.019869089126587,
"dport": 5355,
"sport": 53595
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7726,
"time": 3.0968480110168457,
"dport": 5355,
"sport": 53848
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8054,
"time": 1.6599490642547607,
"dport": 5355,
"sport": 54255
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8382,
"time": -0.09800505638122559,
"dport": 5355,
"sport": 55314
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 8710,
"time": 1.5797450542449951,
"dport": 1900,
"sport": 1900
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 28120,
"time": 1.0427160263061523,
"dport": 3702,
"sport": 49152
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 36504,
"time": 3.1313459873199463,
"dport": 1900,
"sport": 53598
}
],
"dns_servers": [],
"http": [],
"icmp": [],
"smtp": [],
"tcp": [],
"smtp_ex": [],
"mitm": [],
"hosts": [],
"pcap_sha256": "1efc63344eb6da81d3dd82315456038647e857d5258d21b512743e3c61bbdc92",
"dns": [],
"http_ex": [],
"domains": [],
"dead_hosts": [],
"sorted_pcap_sha256": "a8945e3e73de081a590c9f5b39e9c88c4782ebb623159fa45c8694e18a48a22d",
"irc": [],
"https_ex": []
}Screenshots
centralsupcompleta.exe removal instructions
The instructions below shows how to remove centralsupcompleta.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the centralsupcompleta.exe file for removal, restart your computer and scan it again to verify that centralsupcompleta.exe has been successfully removed. Here are the removal instructions in more detail:
- Download and install FreeFixer: http://www.freefixer.com/download.html
- Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
- When the scan is finished, locate centralsupcompleta.exe in the scan result and tick the checkbox next to the centralsupcompleta.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate centralsupcompleta.exe in the scan result.
c:\downloads\centralsupcompleta.exe 
- Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the centralsupcompleta.exe file.
- Restart your computer.
- Start FreeFixer and scan your computer again. If centralsupcompleta.exe still remains in the scan result, proceed with the next step. If centralsupcompleta.exe is gone from the scan result you're done.
- If centralsupcompleta.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
- Restart your computer.
- Start FreeFixer and scan your computer again. Verify that centralsupcompleta.exe no longer appear in the scan result.
Hashes [?]
| Property | Value |
|---|---|
| MD5 | 7cffb2fb758022bcdf00b1a1eb586d46 |
| SHA256 | fbcab21a25af23857dd13e0fe98b72a6dd83c65c6543cf35cab5ef4f7f50bf66 |
Error Messages
These are some of the error messages that can appear related to centralsupcompleta.exe:
centralsupcompleta.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
centralsupcompleta.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
centralsupcompleta.exe has stopped working.
End Program - centralsupcompleta.exe. This program is not responding.
centralsupcompleta.exe is not a valid Win32 application.
centralsupcompleta.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with the file?
To help other users, please let us know what you will do with the file:
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.