Application.WPM_e9956fcd98

by malwarelabrobot on August 9th, 2014 in Malware Descriptions.

Application.WPM (AdAware), Backdoor.Win32.PcClient.FD, Installer.Win32.InnoSetup.FD, Installer.Win32.InnoSetup.2.FD, Trojan.Win32.Delphi.FD, Trojan.Win32.Iconomon.FD, Trojan.Win32.Sasfis.FD, VirTool.Win32.DelfInject.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan, Backdoor, Installer, VirTool


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: e9956fcd982c422b09c8e81480fc32a8
SHA1: 1cf5935331429c0149ad45cb49eb965010760866
SHA256: 4830db1eea409d6e90647a5565e3c047e11cfd7ef6d430bfc6d00049533cecc0
SSDeep: 196608:i0G3SVqUKGkA5AxHIXUOiVB8GT9pMaQIFKaMKq4M1M0d:iyKRA8Os8GUa7FKanW1Ma
Size: 8140328 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: BorlandDelphiv60v70_v2, UPolyXv05_v6, BorlandDelphi30, BorlandDelphiv30, ACProtect141
Company: no certificate found
Created at: 2014-07-14 11:46:56
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

%original file name%.exe:1992
rundll32.exe:1956
rundll32.exe:552
optprosetup.exe:2000

The Application injects its code into the following process(es):

OptProStart.exe:1908
optprosetup.tmp:324

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:1992 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\{49B5C40B-8B1B-4206-A52A-2968B8BAABD9}\optprosetup.exe (50495 bytes)

The process optprosetup.exe:2000 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\is-0EBL3.tmp\optprosetup.tmp (7386 bytes)

The process optprosetup.tmp:324 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk (749 bytes)
%Program Files%\Optimizer Pro\is-FIJ68.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\OptProCrash.dll (28498 bytes)
%Program Files%\Optimizer Pro\is-I7OJF.tmp (601 bytes)
%Program Files%\Optimizer Pro\is-T0GDV.tmp (48 bytes)
%Program Files%\Optimizer Pro\is-D1CDO.tmp (22 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk (755 bytes)
%Program Files%\Optimizer Pro\is-NFGPQ.tmp (1281 bytes)
%Program Files%\Optimizer Pro\is-8QFCA.tmp (712 bytes)
%Program Files%\Optimizer Pro\OptProCrash.dll (249349 bytes)
%Program Files%\Optimizer Pro\is-2PCR1.tmp (3073 bytes)
%Program Files%\Optimizer Pro\is-R4RJ7.tmp (6841 bytes)
%Program Files%\Optimizer Pro\is-D2H2L.tmp (54 bytes)
%Program Files%\Optimizer Pro\is-6HRJ9.tmp (898 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Help.lnk (749 bytes)
%Program Files%\Optimizer Pro\is-NBVGF.tmp (2321 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\optpro2.bmp (673 bytes)
%Documents and Settings%\%current user%\Desktop\Optimizer Pro.lnk (737 bytes)
%Program Files%\Optimizer Pro\is-G6QHS.tmp (3073 bytes)
%Program Files%\Optimizer Pro\is-D550L.tmp (7345 bytes)
%Program Files%\Optimizer Pro\unins000.msg (646 bytes)
%Program Files%\Optimizer Pro\is-ONRCV.tmp (6841 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Check updates.lnk (777 bytes)
%Program Files%\Optimizer Pro\unins000.dat (17021 bytes)
%Program Files%\Optimizer Pro\is-Q9E45.tmp (56 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk (729 bytes)
%Program Files%\Optimizer Pro\is-M0DC9.tmp (22575 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\_isetup\_shfoldr.dll (23 bytes)
%Program Files%\Optimizer Pro\is-O8NDB.tmp (673 bytes)
%Program Files%\Optimizer Pro\is-NRJNC.tmp (32054 bytes)
%Program Files%\Optimizer Pro\is-30E2I.tmp (7433 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\itdownload.dll (1281 bytes)
%Program Files%\Optimizer Pro\is-QJOC7.tmp (2321 bytes)

Registry activity

The process %original file name%.exe:1992 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "93 51 0A 60 03 0F 6B C7 7D B6 7C A3 BE 96 0E 5D"

[HKCU\Software\Optimizer Pro]
"setupname" = "c:\%original file name%.exe"

The process rundll32.exe:1956 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f2c53c49" = "UlAr/XJ/c//k////"
"fe94ce1e" = "V/////%%"
"e46c271e" = "///%"
"2e22d94e" = "///%"
"e8f9dcc7" = "UlAr/XJ/c//k////"
"7367429f" = "///%"
"340d3099" = "/P////%%"
"1520c6f1" = "V/////%%"
"3c09c42b" = "///%"
"2d71d5ab" = "V/////%%"
"a2e3b941" = "///%"
"c6c5dd44" = "V/////%%"
"f6ad6fa6" = "VP/l/C//V/////%%"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"iiid" = "1"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"6185d035" = "VP/h/CP/V//l////"
"c99a5f5c" = "///%"
"c5705860" = "Vx////%%"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"370856c7" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"d1abcdb6" = "///%"
"37b7a6d8" = "UlAr/XJ/c//k////"
"a0743acc" = "N/////%%"
"1c311243" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"
"414bc593" = "///%"
"7f69fa1f" = "///%"
"f1f24e29" = "Vl/l/C/////%"
"587b5709" = "V/////%%"
"48bd1aff" = "VP/l/C//N//l////"
"0c230bcb" = "///%"
"0e93c3f3" = "///%"
"72758a5d" = "///%"
"a1dcff5b" = "V/////%%"
"38583bc3" = "Ml/2/CF/M//g/CZ////%"
"51d2f2ea" = "IlAl/YP/J/Af/X6/PlAf/XD/blAq/B//VP/j/Cx/V//j/CD/NP/2/CZ////%"
"0dc3ee96" = "/P////%%"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9B 72 D0 57 09 F7 F1 FE 17 07 84 B4 01 DD EF 3D"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"d94388d2" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"
"8b9e4cbc" = "V/////%%"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"a47da861" = "o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06I0px1O02E0ix1S06h0nl1N07x0qx1Y06U0aU0%, o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0ox1S06q0nU0T07t0nl1D06I0mU1O0640n01Y02E0, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0qU1T06O0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06b0nU1Z02E0ix1S06h0nl1N07x0qx1Y06U0aU0%"
"493c7345" = ""

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f0bf0bde" = "///%"
"65114b36" = "VP/ ////"
"c24899a6" = "Vx/g/C//M/////%%"
"060df2cd" = "alAl/YP/b/Af/X6/UxAp/X2/GxAk////"
"27ddcf6f" = "///%"
"bbf88800" = "///%"

[HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"3efeb33e" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

The process rundll32.exe:552 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9A 1C CD 18 4A 3E 7F C5 7A A5 D8 23 5E FE 8E 1C"

The process optprosetup.exe:2000 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D2 7B 35 34 D0 79 AE E1 80 CA B0 47 02 BE 54 EC"

The process OptProStart.exe:1908 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Optimizer Pro]
"homepageurl" = "http://www.pcutilitiespro.com/"
"BuyNowURL" = "http://www.safeshopgate.com/r?s=111001356-PA-042&g=AE0902E2-130F-9AAC-5E61-5D8C6452C10F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKCU\Software\Optimizer Pro]
"UseAds" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKCU\Software\Optimizer Pro]
"ShowEUA" = "1"
"AdsDownloadURL" = "http://dl.softservers.net/121001356/DriverPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Optimizer Pro]
"AppStart" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Optimizer Pro]
"UninstallURL" = "https://safecart.com/pcutilitiespro/.op-special/purchase?sid=111001356-PA-042"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Optimizer Pro]
"DelayedStart" = "5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Optimizer Pro]
"WelcomeURL" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Optimizer Pro]
"SupportURL" = "http://support.pcutilitiespro.com/"

"ScanAtStartup" = "0"
"Querry" = "http://bi.softservers.net/t/op?sid=111001356-PA-042&dt=%dt%&gid=%GID%&tz=%tz%&ln=%ln%&lc=%lc%&bis=%bis%&bief=%bief%&biefx=%biefx%&bif=%bif%&os=%os%&f=2416718066"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Optimizer Pro]
"AdsBuyNowURL" = "http://www.safeshopgate.com/r?s=121001356&g=AE0902E2-130F-9AAC-5E61-5D8C6452C10F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9F B6 FD 47 80 26 31 E8 A2 32 FC 5D 94 29 68 A4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Optimizer Pro]
"InstallDate" = "12 AC 48 20 76 70 E4 40"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Optimizer Pro]
"AdsHost" = "dl.softservers.net"
"OS" = "102"
"MachineGuid" = "AE0902E2-130F-9AAC-5E61-5D8C6452C10F"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process optprosetup.tmp:324 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c24899a6" = "Vx/g/C//M/////%%"
"6185d035" = "VP/h/CP/V//l////"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f2c53c49" = "UlAr/XJ/c//k////"
"1c311243" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"
"587b5709" = "V/////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"370856c7" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c5705860" = "Vx////%%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"svpath" = "c:\Program Files\Optimizer Pro\OptProCrash.dll"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"uuid" = "3612686213"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Optimizer Pro]
"OptProStart.exe" = "Optimizer Pro Launcher"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c5705860" = "Vx////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c99a5f5c" = "///%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"d94388d2" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"appid.0" = "b8DqmdgcOqJAbLFHwybmrO2aLcvrvdoguSs9"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: Selected Tasks" = "desktopicon"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"dlpath" = "c:\progra~1\optimi~1\optpro~2.dll"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"bbf88800" = "///%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}]
"n" = "1"

[HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}]
"n" = "1"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"iiid" = "1"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"iiid" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"0dc3ee96" = "/P////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"3c09c42b" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"data.0" = "nfgPJbh7ESvQs3qomjB8hVcP7JcnD1QkoqV7ZJCtQlIQb6HdyqAmJNHvIft8zqNm3qz1udABa XGSmMX4lLTUthkZGQPQJlZ OAY73RJH0"
"data.1" = "tlBtqpncxFzTbabcdeYLxuDgO4KFegKOqsZXn GQT/v9WVwmw18CiGV8Q5nb94X94xjnjgbh/Ad4R6jfiLHMrZLAGECyXcbdWM33mxKMyt0xvEkS6w7V6FNmrGlVWPoW7"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"493c7345" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c99a5f5c" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"d1abcdb6" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f2c53c49" = "UlAr/XJ/c//k////"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"Mode" = "4026531840"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"a2e3b941" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"2d71d5ab" = "V/////%%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Optimizer Pro]
"cufValue" = "CUF=0"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"65114b36" = "VP/ ////"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"uuid" = "3612686213"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"date" = "1407497746"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"38583bc3" = "Ml/2/CF/M//g/CZ////%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f1f24e29" = "Vl/l/C/////%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"51d2f2ea" = "IlAl/YP/J/Af/X6/PlAf/XD/blAq/B//VP/j/Cx/V//j/CD/NP/2/CZ////%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Optimizer Pro]
"Language" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"e46c271e" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"NoModify" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"8b9e4cbc" = "V/////%%"
"f0bf0bde" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"InstallDate" = "20140808"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"72758a5d" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"370856c7" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"1520c6f1" = "V/////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"340d3099" = "/P////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"usr.0" = "710RLl/XZTVNPRJLFH"
"usr.1" = " N8uplWYSUMOQIKEG "

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CC 00 06 DA 66 95 FF 3F E5 94 57 06 0D 3F 2D 71"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"State" = "0"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"7f69fa1f" = "///%"
"0e93c3f3" = "///%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: Language" = "en"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"414bc593" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_f1fdc481\eae10f9d]
"340d3099" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"svt" = "1407504936"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"2e22d94e" = "///%"
"0e93c3f3" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"a47da861" = "o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06I0px1O02E0ix1S06h0nl1N07x0qx1Y06U0aU0%, o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0ox1S06q0nU0T07t0nl1D06I0mU1O0640n01Y02E0, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0qU1T06O0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06b0nU1Z02E0ix1S06h0nl1N07x0qx1Y06U0aU0%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"e8f9dcc7" = "UlAr/XJ/c//k////"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"37b7a6d8" = "UlAr/XJ/c//k////"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f1f24e29" = "Vl/l/C/////%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"0c230bcb" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f0bf0bde" = "///%"

[HKCU\Software\Optimizer Pro]
"culValue" = ""

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"340d3099" = "/P////%%"
"0dc3ee96" = "/P////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"e8f9dcc7" = "UlAr/XJ/c//k////"
"a1dcff5b" = "V/////%%"
"c24899a6" = "Vx/g/C//M/////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"1c311243" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: Setup Version" = "5.5.3 (u)"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"usr.1" = " N8uplWYSUMOQIKEG "
"usr.0" = "710RLl/XZTVNPRJLFH"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"DisplayName" = "Optimizer Pro v3.2"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"a47da861" = "o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06I0px1O02E0ix1S06h0nl1N07x0qx1Y06U0aU0%, o01O07x0m00K02E0aU1T0700i01P06I0ox1S07b0i01e06U0n01U0780nU0S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0ox1S06q0nU0T07t0nl1D06I0mU1O0640n01Y02E0, o01O07x0m00K02E0aU1T0700i01U0780nU1M06t0nx1T07q0qx1Y02I0qU1T06O0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06h0nl1A06E0aU1P06I0ox1S07b0i01e06U0n00T00%%, o01O07x0m00K02E0aU1T0700i01D06O0ox1K06t0ml1P06I0ox1S07b0i01e06U0n00S06b0nU1Z02E0ix1S06h0nl1N07x0qx1Y06U0aU0%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"3efeb33e" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"LRTS" = "0"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_f1fdc481\eae10f9d]
"dbaf3ce3" = "/P////%%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c6c5dd44" = "V/////%%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"72758a5d" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"Mode" = "4026531840"
"Version" = "22022078"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"27ddcf6f" = "///%"
"d1abcdb6" = "///%"
"0c230bcb" = "///%"
"38583bc3" = "Ml/2/CF/M//g/CZ////%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"date" = "1407497746"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"svn" = "Optimizer Pro Crash Monitor"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"6185d035" = "VP/h/CP/V//l////"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"svi" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"a1dcff5b" = "V/////%%"
"587b5709" = "V/////%%"
"27ddcf6f" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"fe94ce1e" = "V/////%%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: User" = "%CurrentUserName%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"bbf88800" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"svx" = ""

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"7367429f" = "///%"
"1520c6f1" = "V/////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"a0743acc" = "N/////%%"
"2e22d94e" = "///%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"a0743acc" = "N/////%%"
"7f69fa1f" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: App Path" = "%Program Files%\Optimizer Pro"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"060df2cd" = "alAl/YP/b/Af/X6/UxAp/X2/GxAk////"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"QuietUninstallString" = "%Program Files%\Optimizer Pro\unins000.exe /SILENT"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"dbaf3ce3" = "/P////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"LRTS" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: Icon Group" = "Optimizer Pro v3.2"
"DisplayIcon" = "%Program Files%\Optimizer Pro\OptProLauncher.exe"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5]
"data.1" = "tlBtqpncxFzTbabcdeYLxuDgO4KFegKOqsZXn GQT/v9WVwmw18CiGV8Q5nb94X94xjnjgbh/Ad4R6jfiLHMrZLAGECyXcbdWM33mxKMyt0xvEkS6w7V6FNmrGlVWPoW7"
"data.0" = "nfgPJbh7ESvQs3qomjB8hVcP7JcnD1QkoqV7ZJCtQlIQb6HdyqAmJNHvIft8zqNm3qz1udABa XGSmMX4lLTUthkZGQPQJlZ OAY73RJH0"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"060df2cd" = "alAl/YP/b/Af/X6/UxAp/X2/GxAk////"
"51d2f2ea" = "IlAl/YP/J/Af/X6/PlAf/XD/blAq/B//VP/j/Cx/V//j/CD/NP/2/CZ////%"
"48bd1aff" = "VP/l/C//N//l////"
"414bc593" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"c6c5dd44" = "V/////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"65114b36" = "VP/ ////"
"2d71d5ab" = "V/////%%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"Inno Setup: Deselected Tasks" = ""

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"d94388d2" = "alAl/YP/b/Af/X6/clAu/XZ/UxAp/X2/GxAk////"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"fe94ce1e" = "V/////%%"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"3c09c42b" = "///%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"3efeb33e" = "nU1U07x0m01M06E0ql1M06E0iU1N06t0ml0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl1D06I0pU0S06h0nl1A06E0, nU1U07x0m01M06E0ix1O06h0n01D07x0jx0S06h0nl1A06E0, nU1U07x0m01M06E0mU1P0780pl0S06h0nl1A06E0"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f6ad6fa6" = "VP/l/C//V/////%%"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"48bd1aff" = "VP/l/C//N//l////"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"8b9e4cbc" = "V/////%%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\00000000]
"493c7345" = ""

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"7367429f" = "///%"

[HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}]
"ca82e1a5" = "%Program Files%\Optimizer Pro\OptProCrash.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"f6ad6fa6" = "VP/l/C//V/////%%"
"a2e3b941" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"e46c271e" = "///%"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
"UninstallString" = "%Program Files%\Optimizer Pro\unins000.exe"
"InstallLocation" = "%Program Files%\Optimizer Pro\"

[HKCU\Software\Optimizer Pro]
"CBM" = "1"

[HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_ca82e1a5\eae10f9d]
"37b7a6d8" = "UlAr/XJ/c//k////"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Application modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Optimizer Pro" = "%Program Files%\Optimizer Pro\OptProLauncher.exe"

The Application modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
6fcbcc864a5e370d451b03a74b5de879 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\is-0EBL3.tmp\optprosetup.tmp
cba024c84f5017fc01ed82a8f53e8516 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\is-4JTJE.tmp\OptProCrash.dll
92dc6ef532fbb4a5c3201469a5b5eb63 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\is-4JTJE.tmp\_isetup\_shfoldr.dll
d82a429efd885ca0f324dd92afb6b7b8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\is-4JTJE.tmp\itdownload.dll
f3799939a40effb7d9451b6842242c0c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\{49B5C40B-8B1B-4206-A52A-2968B8BAABD9}\optprosetup.exe
cba024c84f5017fc01ed82a8f53e8516 c:\Program Files\Optimizer Pro\OptProCrash.dll
24d20c56ca4bb46ccf01b66e8b586096 c:\Program Files\Optimizer Pro\OptProGuard.exe
cab4157beebd123bb659b304941afd86 c:\Program Files\Optimizer Pro\OptProHelper.dll
7726cb269f6bbf996c1a86b126b04cce c:\Program Files\Optimizer Pro\OptProLauncher.exe
accb9d6208d011ad64ec17280daa2065 c:\Program Files\Optimizer Pro\OptProReminder.exe
b33a650974b6b1dda2892482a541c281 c:\Program Files\Optimizer Pro\OptProSchedule.exe
9c1a05e10364fa3b21722af627370b03 c:\Program Files\Optimizer Pro\OptProSmartScan.exe
4a3e6bfc420f75aebb13d86a0d5928cf c:\Program Files\Optimizer Pro\OptProStart.exe
7fb4398fc07f6c242e60de3a06391968 c:\Program Files\Optimizer Pro\OptProUninstaller.exe
55600465fd852b1c12d95de82e89d597 c:\Program Files\Optimizer Pro\OptimizerPro.exe
d82a429efd885ca0f324dd92afb6b7b8 c:\Program Files\Optimizer Pro\itdownload.dll
0f66e8e2340569fb17e774dac2010e31 c:\Program Files\Optimizer Pro\sqlite3.dll
6fcbcc864a5e370d451b03a74b5de879 c:\Program Files\Optimizer Pro\unins000.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description:
Comments:
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 881040 881152 4.48236 31d1aff03f08ea465eab45db25c6337c
.itext 888832 2940 3072 4.25316 eaabfd280dbbf29b8547397600dc5ea0
.data 892928 14964 15360 3.63951 e7301e7e1334603f81823155ad7e91c9
.bss 909312 20528 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 933888 4530 4608 3.39002 dc54b0a1dbf85f50eb541da666e881e9
.didata 942080 464 512 2.16145 aa1bd1278a403125fffce2bf2717d356
.tls 946176 20 0 0 d41d8cd98f00b204e9800998ecf8427e
.rdata 950272 24 512 0.146134 71fb01babd7aa03894831e303e70de3e
.reloc 954368 81236 81408 4.64935 c746ccff3d2c7880880b55749e4b4581
.rsrc 1036288 7145984 7145984 5.5409 5ba190bbf46b55c2f74b0977293e9dc3

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 21
804f7f46860ee262afaf240bbaf51dc0
5e249d4ee1739ad53ecf484d9b3969ba
cad411817651a86ccc35a96f78fd4750
6da37ba248d0366d93b36be126949a55
1f1e4118328291035fe2917422fe6c9d
9f02206c77dec7c3c7fefcc403cf6ca9
c34c6e8fe4528fec5af10dbf2de2f4c9
5a4eca6297af09fa2f8720739e23e432
97ad3b05ad68bb9b3e1af95b21cf2acf
3605f1fe20a7ea1f7abe5d38e869aefc
0619b66936169bf46f8b6f1151f0bab2
9faab8be96b3694b70a83055dcee7a51
e35e729431029edb49bd5239e2ef85d4
65fb1ba4b7931af1e90e85b33923aa74
1041ac6d6d12429539fce77d95bab43c
b1bdcfecc761c4798e36d6ea22dae509
99d1aeb1468c77c2a3ab62ac90af688f
126a8133f54fe182670cdfe22a519edd
53936b4f6db19f88fc3a71f022ac16ea
a4f9e5dcd10072938ef9ca8d70432548
c3ee86c137237e32df32c7a943996d0e

URLs

URL IP
hxxp://optpro.info/install/ 207.244.66.33
hxxp://cnnintl-56m.gslb.vgtf.net/
hxxp://optpro.info/get/?q=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 207.244.66.33
hxxp://dl.softservers.net/171001356/LiveSupport.exe 184.154.145.171
hxxp://bi.softservers.net/t/op?sid=111001356-PA-042&dt=1407515741&gid=AE0902E2-130F-9AAC-5E61-5D8C6452C10F&tz=2&ln=1&lc=0&bis=0&bief=0&biefx=0&bif=0&os=102&f=2416718066 107.6.170.117
hxxp://edition.cnn.com/ 157.166.248.13


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET USER_AGENTS Suspicious Win32 User Agent
ET TROJAN W32/SpeedingUpMyPC.Rootkit CnC Beacon
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
ET TROJAN W32/SpeedingUpMyPC.Rootkit Install CnC Beacon

Traffic

<font color="red">GET /t/op?sid=111001356-PA-042&dt=1407515741&gid=AE0902E2-130F-9AAC-5E61-5D8C6452C10F&tz=2&ln=1&lc=0&bis=0&bief=0&biefx=0&bif=0&os=102&f=2416718066 HTTP/1.1<br>
Host: bi.softservers.net<br>
Accept: text/html, */*<br>
User-Agent: Mozilla/3.0 (compatible; Indy Library)<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx/1.4.1<br>
Date: Fri, 08 Aug 2014 13:35:52 GMT<br>
Content-Type: application/octet-stream<br>
Content-Length: 0<br>
Connection: keep-alive<br>
content-type: text/html<br><pre></pre></font><br><br
<font color="red">GET /171001356/LiveSupport.exe HTTP/1.0<br>
Host: dl.softservers.net<br>
User-Agent: InnoTools_Downloader<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx/1.4.1<br>
Date: Fri, 08 Aug 2014 13:35:52 GMT<br>
Content-Type: application/octet-stream<br>
Last-Modified: Tue, 18 Mar 2014 15:25:14 GMT<br>
Connection: close<br>
content-length: 1503528<br>
ETag: "5328655a-16d478"<br>
Content-Disposition: attachment; filename=LiveSupport.exe<br><pre>MZ......................@.............................................<br>..!..L.!This program cannot be run in DOS mode....$...................<br>..............3.......................2.....................Rich......<br>......................PE..L....((S.................(...........g......<br>.@....@.......................... ......(.....@.......................<br>..............P.......p...............(...............................<br>.............q..@[email protected]....'<br>.......(.................. ..`[email protected]...,..............@..@<br>[email protected].....................<br>......@[email protected]...'.......([email protected]....................<br>......................................................................<br>......................................................................<br>......................................................................<br>......................................................................<br>............................................U.........l.A.3..E.V.u.W.}<br>.h..........j.P..;...........Qj.j.j(j...8AA.....j.........#.PWVh.AA.j.<br>..<AA.3... ..._^...M.3...;....].U...U....@$R.U.R.HTTP/1.1 200 OK..S<br>erver: nginx/1.4.1..Date: Fri, 08 Aug 2014 13:35:52 GMT..Content-Type:<br> application/octet-stream..Last-Modified: Tue, 18 Mar 2014 15:25:14 GM<br>T..Connection: close..content-length: 1503528..ETag: "5328655a-16d478"<br>..Content-Disposition: attachment; filename=LiveSupport.exe..MZ.......<br>...............@...............................................!..</pre><<< skipped >>></font><br><br
<font color="red">GET /get/?q=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 HTTP/1.1<br>
Accept: */*<br>
User-Agent: win32<br>
Host: optpro.info<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: ngx_openresty<br>
Date: Fri, 08 Aug 2014 13:39:40 GMT<br>
Content-Type: text/html<br>
Transfer-Encoding: chunked<br>
Connection: close<br>
X-Powered-By: PHP/5.4.16<br><pre>0..</pre></font><br><br
<font color="red">HEAD / HTTP/1.1<br>
Host: edition.cnn.com<br>
Connection: close<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Fri, 08 Aug 2014 13:35:46 GMT<br>
Content-Type: text/html<br>
Connection: close<br>
Set-Cookie: CG=UA:--:--; path=/<br>
Last-Modified: Fri, 08 Aug 2014 13:35:09 GMT<br>
Vary: Accept-Encoding<br>
Cache-Control: max-age=60, private<br>
Expires: Fri, 08 Aug 2014 13:36:46 GMT<br><pre>HTTP/1.1 200 OK..Server: nginx..Date: Fri, 08 Aug 2014 13:35:46 GMT..C<br>ontent-Type: text/html..Connection: close..Set-Cookie: CG=UA:--:--; pa<br>th=/..Last-Modified: Fri, 08 Aug 2014 13:35:09 GMT..Vary: Accept-Encod<br>ing..Cache-Control: max-age=60, private..Expires: Fri, 08 Aug 2014 13:<br>36:46 GMT..</pre></font><br><br

The Application connects to the servers at the folowing location(s):

%original file name%.exe_1992:

.text
`.itext
`.data
.idata
.didata
.rdata
@.reloc
B.rsrc
TArray<System.Byte>
TArray<System.Char>
TArray<System.Word>
TArray<System.ShortInt>
TArray<System.SmallInt>
TArray<System.Integer>
TArray<System.Int64>
TArray<System.TPtrWrapper>
System.Types
HKEY
System.SysUtils
ENoMonitorSupportException
ENoMonitorSupportExceptionH
TArray<System.SysUtils.TLangRec>
IEnumerable<System.string>$
TArray<System.string>
TMarshaller.PDisposeRec
TMarshaller.TDisposeProc
TMarshaller.TDisposeRec
TMarshaller.IDisposer
TMarshaller.TDisposer'
TMarshaller.TDisposerT
/TArray<System.SysUtils.TMarshaller.TDisposeRec>
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
System.SysUtilsL
UhÛ
&TArray<System.SysUtils.TUnitHashEntry>
System.Variants
Operator
EVariantBadIndexError
UhX%C
System.Variantsd
TTimeSpanParser.TParseError
System.TimeSpan
System.SyncObjs
System.Generics.Defaults
IEqualityComparer<System.string>
IComparer<System.string>
TCustomComparer<System.string>
TCustomComparer<System.string>pdC
System.Generics.Collections
doOwnsKeys
System.Rtti
GetIndexedProperties
GetIndexedProperty
GetDeclaredIndexedProperties
TMethodImplementation.TFloatReg
):TMethodImplementation.TInterceptFrame.:1
%TMethodImplementation.TInterceptFrame(
*TMethodImplementation.TFirstStageIntercept
%TMethodImplementation.PInterceptFrame
*TMethodImplementation.PFirstStageIntercept
TMethodImplementation.TParamLoc
!TMethodImplementation.TInvokeInfoE
!TMethodImplementation.TInvokeInfo
TRttiIndexedProperty
TRttiIndexedPropertyt
FIndexedProps
TArray<System.TCustomAttribute>
-TFunc<System.TArray<System.TCustomAttribute>>
TArray<System.Rtti.TRttiMethod>
TArray<System.Rtti.TRttiField>
!TArray<System.Rtti.TRttiProperty>
(TArray<System.Rtti.TRttiIndexedProperty>
%TArray<System.Rtti.TRttiManagedField>
TArray<System.Rtti.TValue>
3TArray<System.Rtti.TMethodImplementation.TParamLoc>
8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>(
8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>
8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>-
8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>l
;TList<System.Rtti.TMethodImplementation.TParamLoc>.arrayofT
System.Generics.Collections(
6IComparer<System.Rtti.TMethodImplementation.TParamLoc>
CTCollectionNotifyEvent<System.Rtti.TMethodImplementation.TParamLoc>
:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>
8IEnumerable<System.Rtti.TMethodImplementation.TParamLoc>$
=TList<System.Rtti.TMethodImplementation.TParamLoc>.TEmptyFunc
>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator5
>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator
2TList<System.Rtti.TMethodImplementation.TParamLoc>&
2TList<System.Rtti.TMethodImplementation.TParamLoc>
"TArray<System.Rtti.TRttiParameter>
&TArray<System.Rtti.TRttiInterfaceType>
-TPair<System.Pointer,System.Rtti.TRttiObject>
AKey
ATArray<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>(
FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>0
FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>-
FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
9TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItem
>TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItemArray
!IEqualityComparer<System.Pointer>
&TCollectionNotifyEvent<System.Pointer>
/TCollectionNotifyEvent<System.Rtti.TRttiObject>
TArray<System.Pointer>
TEnumerator<System.Pointer>(
TEnumerator<System.Pointer>L
TEnumerable<System.Pointer>-
TEnumerable<System.Pointer>x
BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator;
BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator
BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection;
BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection
TArray<System.Rtti.TRttiObject>
$TEnumerator<System.Rtti.TRttiObject>(
$TEnumerator<System.Rtti.TRttiObject>
$TEnumerable<System.Rtti.TRttiObject>-
$TEnumerable<System.Rtti.TRttiObject>L
DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator;
DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator
DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection;
DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection
CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator;
CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator
FOnKeyNotify
FKeyCollection
3TDictionary<System.Pointer,System.Rtti.TRttiObject>9
ContainsKey
3TDictionary<System.Pointer,System.Rtti.TRttiObject>
Keys
OnKeyNotify
TArray<System.Rtti.TRttiType>
TArray<System.Rtti.TRttiPackage>
-TPair<System.TypInfo.PTypeInfo,System.string>
ATArray<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>(
FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>-
FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>4`D
9TDictionary<System.TypInfo.PTypeInfo,System.string>.TItem
>TDictionary<System.TypInfo.PTypeInfo,System.string>.TItemArray
System.Generics.CollectionstaD
 IEqualityComparer<System.TypInfo.PTypeInfo>
0TCollectionNotifyEvent<System.TypInfo.PTypeInfo>
%TCollectionNotifyEvent<System.string>
TArray<System.TypInfo.PTypeInfo>
%TEnumerator<System.TypInfo.PTypeInfo>(
%TEnumerator<System.TypInfo.PTypeInfo>
%TEnumerable<System.TypInfo.PTypeInfo>-
%TEnumerable<System.TypInfo.PTypeInfo>$fD
BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator;
BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator|gD
BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollection;
BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollectionliD
TEnumerator<System.string>(
TEnumerator<System.string>
TEnumerable<System.string>-
TEnumerable<System.string>
DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator;
DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator
DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection;
DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection
CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator;
CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator
3TDictionary<System.TypInfo.PTypeInfo,System.string>9
3TDictionary<System.TypInfo.PTypeInfo,System.string>
-TPair<System.string,System.TypInfo.PTypeInfo>
ATArray<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>(
FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>-
FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>,~D
9TDictionary<System.string,System.TypInfo.PTypeInfo>.TItem
>TDictionary<System.string,System.TypInfo.PTypeInfo>.TItemArray
System.Generics.Collectionsl
BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator;
BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator
BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection;
BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection
DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator;
DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator
DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection;
DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection
CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator;
CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator
3TDictionary<System.string,System.TypInfo.PTypeInfo>9
3TDictionary<System.string,System.TypInfo.PTypeInfo>
#IComparer<System.Rtti.TRttiPackage>
%TComparison<System.Rtti.TRttiPackage>
#TComparer<System.Rtti.TRttiPackage>2
#TComparer<System.Rtti.TRttiPackage>p
,TArray<System.TArray<System.Rtti.TRttiType>>
$TEnumerator<System.TCustomAttribute>(
$TEnumerator<System.TCustomAttribute>P
$TEnumerable<System.TCustomAttribute>-
$TEnumerable<System.TCustomAttribute>
'TList<System.TCustomAttribute>.arrayofT
"IComparer<System.TCustomAttribute>
/TCollectionNotifyEvent<System.TCustomAttribute>
&TArrayManager<System.TCustomAttribute>
&TArrayManager<System.TCustomAttribute>`
$IEnumerable<System.TCustomAttribute>$
)TList<System.TCustomAttribute>.TEmptyFunc
*TList<System.TCustomAttribute>.TEnumerator5
*TList<System.TCustomAttribute>.TEnumeratorX
TList<System.TCustomAttribute>&
TList<System.TCustomAttribute>
-TArray<System.TArray<System.Rtti.TRttiField>>
7TArray<System.TArray<System.Rtti.TRttiIndexedProperty>>
.TArray<System.TArray<System.Rtti.TRttiMethod>>
0TArray<System.TArray<System.Rtti.TRttiProperty>>
&TEnumerator<System.Rtti.TRttiProperty>(
&TEnumerator<System.Rtti.TRttiProperty>l
&TEnumerable<System.Rtti.TRttiProperty>-
&TEnumerable<System.Rtti.TRttiProperty>
)TList<System.Rtti.TRttiProperty>.arrayofT
System.Generics.CollectionsT
$IComparer<System.Rtti.TRttiProperty>
1TCollectionNotifyEvent<System.Rtti.TRttiProperty>
(TArrayManager<System.Rtti.TRttiProperty>
&IEnumerable<System.Rtti.TRttiProperty>$
 TList<System.Rtti.TRttiProperty>.TEmptyFunc
,TList<System.Rtti.TRttiProperty>.TEnumerator5
,TList<System.Rtti.TRttiProperty>.TEnumerator
TList<System.Rtti.TRttiProperty>&
TList<System.Rtti.TRttiProperty>@
$TEnumerator<System.Rtti.TRttiMethod>(
$TEnumerator<System.Rtti.TRttiMethod>
$TEnumerable<System.Rtti.TRttiMethod>-
$TEnumerable<System.Rtti.TRttiMethod>
'TList<System.Rtti.TRttiMethod>.arrayofT
"IComparer<System.Rtti.TRttiMethod>
/TCollectionNotifyEvent<System.Rtti.TRttiMethod>
&TArrayManager<System.Rtti.TRttiMethod>
$IEnumerable<System.Rtti.TRttiMethod>$
)TList<System.Rtti.TRttiMethod>.TEmptyFunc
*TList<System.Rtti.TRttiMethod>.TEnumerator5
*TList<System.Rtti.TRttiMethod>.TEnumerator
TList<System.Rtti.TRttiMethod>&
TList<System.Rtti.TRttiMethod>p
5TArray<System.TArray<System.Rtti.TRttiInterfaceType>>
#TEnumerator<System.Rtti.TRttiField>(
#TEnumerator<System.Rtti.TRttiField><(E
#TEnumerable<System.Rtti.TRttiField>-
#TEnumerable<System.Rtti.TRttiField>x)E
&TList<System.Rtti.TRttiField>.arrayofT
!IComparer<System.Rtti.TRttiField>
.TCollectionNotifyEvent<System.Rtti.TRttiField>
%TArrayManager<System.Rtti.TRttiField>
%TArrayManager<System.Rtti.TRttiField>D,E
#IEnumerable<System.Rtti.TRttiField>$
(TList<System.Rtti.TRttiField>.TEmptyFunc
)TList<System.Rtti.TRttiField>.TEnumerator5
)TList<System.Rtti.TRttiField>.TEnumerator<.E
TList<System.Rtti.TRttiField>&
TList<System.Rtti.TRttiField>
*TEnumerator<System.Rtti.TRttiManagedField>(
*TEnumerator<System.Rtti.TRttiManagedField>
*TEnumerable<System.Rtti.TRttiManagedField>-
*TEnumerable<System.Rtti.TRttiManagedField>
-TList<System.Rtti.TRttiManagedField>.arrayofT
(IComparer<System.Rtti.TRttiManagedField>
5TCollectionNotifyEvent<System.Rtti.TRttiManagedField>
,TArrayManager<System.Rtti.TRttiManagedField>
*IEnumerable<System.Rtti.TRttiManagedField>$
/TList<System.Rtti.TRttiManagedField>.TEmptyFunc
0TList<System.Rtti.TRttiManagedField>.TEnumerator5
0TList<System.Rtti.TRttiManagedField>.TEnumerator
$TList<System.Rtti.TRttiManagedField>&
$TList<System.Rtti.TRttiManagedField>
9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>M
9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>
8TComparison<System.Rtti.TMethodImplementation.TParamLoc>
6TComparer<System.Rtti.TMethodImplementation.TParamLoc>2
6TComparer<System.Rtti.TMethodImplementation.TParamLoc>4
>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>
E.TList`1.Pack$599$0$Intf<System.Rtti.TMethodImplementation.TParamLoc>
E@TList`1.Pack$599$ActRec<System.Rtti.TMethodImplementation.TParamLoc>
E@TList`1.Pack$599$ActRec<System.Rtti.TMethodImplementation.TParamLoc>P
S:{System.Generics.Collections}TList<System.Rtti.TMethodImplementation.TParamLoc>.:1
System.Rtti(
ITList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.arrayofT
DIComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
QTCollectionNotifyEvent<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
Item-TPair<System.Pointer,System.Rtti.TRttiObject>
HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
FIEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>$
KTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEmptyFunc
LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator5
LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator
@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>&
@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>|
TList<System.Pointer>.arrayofT
IComparer<System.Pointer>
TArrayManager<System.Pointer>
IEnumerable<System.Pointer>$
TList<System.Pointer>.TEmptyFunc
!TList<System.Pointer>.TEnumerator5
!TList<System.Pointer>.TEnumerator
TList<System.Pointer>&
TList<System.Pointer>
'TList<System.Rtti.TRttiObject>.arrayofT
"IComparer<System.Rtti.TRttiObject>
&TArrayManager<System.Rtti.TRttiObject>
$IEnumerable<System.Rtti.TRttiObject>$
)TList<System.Rtti.TRttiObject>.TEmptyFunc
*TList<System.Rtti.TRttiObject>.TEnumerator5
*TList<System.Rtti.TRttiObject>.TEnumerator
TList<System.Rtti.TRttiObject>&
TList<System.Rtti.TRttiObject>X
ITList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.arrayofT
System.Generics.CollectionsX]D
DIComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
QTCollectionNotifyEvent<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
Item-TPair<System.TypInfo.PTypeInfo,System.string>
HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
FIEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>$
KTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEmptyFunc
LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator5
LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumeratorL(G
@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>&
@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>D*G
(TList<System.TypInfo.PTypeInfo>.arrayofT
#IComparer<System.TypInfo.PTypeInfo>
'TArrayManager<System.TypInfo.PTypeInfo>
%IEnumerable<System.TypInfo.PTypeInfo>$
*TList<System.TypInfo.PTypeInfo>.TEmptyFunc
 TList<System.TypInfo.PTypeInfo>.TEnumerator5
 TList<System.TypInfo.PTypeInfo>.TEnumerator
TList<System.TypInfo.PTypeInfo>&
TList<System.TypInfo.PTypeInfo>
TList<System.string>.arrayofT
TArrayManager<System.string>
TList<System.string>.TEmptyFunc
TList<System.string>.TEnumerator5
TList<System.string>.TEnumeratorPJG
TList<System.string>&
TList<System.string>
ITList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.arrayofT
System.Generics.CollectionsP{D
DIComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
QTCollectionNotifyEvent<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
Item-TPair<System.string,System.TypInfo.PTypeInfo>
HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
FIEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>$
KTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEmptyFunc
LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator5
LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator
@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>&
@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
$TComparison<System.TCustomAttribute>
"TComparer<System.TCustomAttribute>2
"TComparer<System.TCustomAttribute>
*TMoveArrayManager<System.TCustomAttribute>
*TMoveArrayManager<System.TCustomAttribute>hnG
1.TList`1.Pack$599$0$Intf<System.TCustomAttribute>
1@TList`1.Pack$599$ActRec<System.TCustomAttribute>
1@TList`1.Pack$599$ActRec<System.TCustomAttribute>hpG
?:{System.Generics.Collections}TList<System.TCustomAttribute>.:1
&TComparison<System.Rtti.TRttiProperty>
$TComparer<System.Rtti.TRttiProperty>2
$TComparer<System.Rtti.TRttiProperty>
,TMoveArrayManager<System.Rtti.TRttiProperty>
,TMoveArrayManager<System.Rtti.TRttiProperty>`tG
3.TList`1.Pack$599$0$Intf<System.Rtti.TRttiProperty>
3@TList`1.Pack$599$ActRec<System.Rtti.TRttiProperty>
3@TList`1.Pack$599$ActRec<System.Rtti.TRttiProperty>`vG
A:{System.Generics.Collections}TList<System.Rtti.TRttiProperty>.:1
System.RttiT
$TComparison<System.Rtti.TRttiMethod>
"TComparer<System.Rtti.TRttiMethod>2
"TComparer<System.Rtti.TRttiMethod>
*TMoveArrayManager<System.Rtti.TRttiMethod>
*TMoveArrayManager<System.Rtti.TRttiMethod>XzG
1.TList`1.Pack$599$0$Intf<System.Rtti.TRttiMethod>
1@TList`1.Pack$599$ActRec<System.Rtti.TRttiMethod>
1@TList`1.Pack$599$ActRec<System.Rtti.TRttiMethod>X|G
?:{System.Generics.Collections}TList<System.Rtti.TRttiMethod>.:1
#TComparison<System.Rtti.TRttiField>
!TComparer<System.Rtti.TRttiField>2
!TComparer<System.Rtti.TRttiField>
)TMoveArrayManager<System.Rtti.TRttiField>
)TMoveArrayManager<System.Rtti.TRttiField>H
0.TList`1.Pack$599$0$Intf<System.Rtti.TRttiField>
0@TList`1.Pack$599$ActRec<System.Rtti.TRttiField>
0@TList`1.Pack$599$ActRec<System.Rtti.TRttiField>H
>:{System.Generics.Collections}TList<System.Rtti.TRttiField>.:1
*TComparison<System.Rtti.TRttiManagedField>
(TComparer<System.Rtti.TRttiManagedField>2
(TComparer<System.Rtti.TRttiManagedField>
0TMoveArrayManager<System.Rtti.TRttiManagedField>
0TMoveArrayManager<System.Rtti.TRttiManagedField>H
7.TList`1.Pack$599$0$Intf<System.Rtti.TRttiManagedField>
7@TList`1.Pack$599$ActRec<System.Rtti.TRttiManagedField>
7@TList`1.Pack$599$ActRec<System.Rtti.TRttiManagedField>T
E:{System.Generics.Collections}TList<System.Rtti.TRttiManagedField>.:1
FTComparison<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>2
DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
a:{System.Generics.Collections}TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.:1
TComparison<System.Pointer>
TComparer<System.Pointer>2
TComparer<System.Pointer>
!TMoveArrayManager<System.Pointer>
!TMoveArrayManager<System.Pointer>`
(.TList`1.Pack$599$0$Intf<System.Pointer>
(@TList`1.Pack$599$ActRec<System.Pointer>
(@TList`1.Pack$599$ActRec<System.Pointer>H
6:{System.Generics.Collections}TList<System.Pointer>.:1
$TComparison<System.Rtti.TRttiObject>
"TComparer<System.Rtti.TRttiObject>2
"TComparer<System.Rtti.TRttiObject>d
*TMoveArrayManager<System.Rtti.TRttiObject>
1.TList`1.Pack$599$0$Intf<System.Rtti.TRttiObject>
1@TList`1.Pack$599$ActRec<System.Rtti.TRttiObject>p
1@TList`1.Pack$599$ActRec<System.Rtti.TRttiObject>
?:{System.Generics.Collections}TList<System.Rtti.TRttiObject>.:1
FTComparison<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>2
DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>t
LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>t
S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
a:{System.Generics.Collections}TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.:1
System.RttiX]D
%TComparison<System.TypInfo.PTypeInfo>
#TComparer<System.TypInfo.PTypeInfo>2
#TComparer<System.TypInfo.PTypeInfo>t
 TMoveArrayManager<System.TypInfo.PTypeInfo>
 TMoveArrayManager<System.TypInfo.PTypeInfo>,
2.TList`1.Pack$599$0$Intf<System.TypInfo.PTypeInfo>
2@TList`1.Pack$599$ActRec<System.TypInfo.PTypeInfo>
2@TList`1.Pack$599$ActRec<System.TypInfo.PTypeInfo>,
@:{System.Generics.Collections}TList<System.TypInfo.PTypeInfo>.:1
TComparison<System.string>
TComparer<System.string>2
TComparer<System.string>\
TMoveArrayManager<System.string>
'.TList`1.Pack$599$0$Intf<System.string>
'@TList`1.Pack$599$ActRec<System.string>
5:{System.Generics.Collections}TList<System.string>.:1
FTComparison<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>2
DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
S.TList`1.Pack$599$0$Intf<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>
S@TList`1.Pack$599$ActRec<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>|
a:{System.Generics.Collections}TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.:1
System.RttiP{D
,TDelegatedComparer<System.Rtti.TRttiPackage>8
,TDelegatedComparer<System.Rtti.TRttiPackage>,
?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>8
?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>
 TDelegatedComparer<System.TCustomAttribute>8
 TDelegatedComparer<System.TCustomAttribute>
-TDelegatedComparer<System.Rtti.TRttiProperty>8
-TDelegatedComparer<System.Rtti.TRttiProperty>H
 TDelegatedComparer<System.Rtti.TRttiMethod>8
 TDelegatedComparer<System.Rtti.TRttiMethod>
*TDelegatedComparer<System.Rtti.TRttiField>8
*TDelegatedComparer<System.Rtti.TRttiField>
1TDelegatedComparer<System.Rtti.TRttiManagedField>8
1TDelegatedComparer<System.Rtti.TRttiManagedField><
MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>8
MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>
"TDelegatedComparer<System.Pointer>8
"TDelegatedComparer<System.Pointer>
 TDelegatedComparer<System.Rtti.TRttiObject>8
 TDelegatedComparer<System.Rtti.TRttiObject>p
MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>8
MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>
,TDelegatedComparer<System.TypInfo.PTypeInfo>8
,TDelegatedComparer<System.TypInfo.PTypeInfo>
!TDelegatedComparer<System.string>8
!TDelegatedComparer<System.string>
MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>8
MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>@
System.TypInfo
mkOperatorOverload
PFieldExEntry
TFieldExEntry
PVmtMethodExEntry
TVmtMethodExEntry
TPropSet<System.string>V
TPropSet<System.string>
TPropSet<System.WideString>V
TPropSet<System.WideString>,
TPropSet<System.Single>K
TPropSet<System.Single>
TPropSet<System.Double>K
TPropSet<System.Double>
TPropSet<System.Extended>K
TPropSet<System.Extended>
TPropSet<System.Comp>K
TPropSet<System.Comp>
TPropSet<System.Currency>K
TPropSet<System.Currency>\
TPropSet<System.IInterface>V
TPropSet<System.IInterface>$
System.Classes
AOperator
TOperation
TObservers.TCanObserveEvent
TObservers.TObserverAddedEvent
Operation
FOnExecute
OnExecute0
TArray<System.IInterface>
TEnumerator<System.IInterface>(
TEnumerator<System.IInterface>H
TEnumerable<System.IInterface>-
TEnumerable<System.IInterface>|
!TList<System.IInterface>.arrayofT
IComparer<System.IInterface>
)TCollectionNotifyEvent<System.IInterface>
TArrayManager<System.IInterface>
TArrayManager<System.IInterface>,
IEnumerable<System.IInterface>$
#TList<System.IInterface>.TEmptyFunc
$TList<System.IInterface>.TEnumerator5
$TList<System.IInterface>.TEnumerator
TList<System.IInterface>&
TList<System.IInterface>
TThreadList<System.IInterface>&
TThreadList<System.IInterface>P
&TArray<System.Classes.TCollectionItem>
 TEnumerator<System.Classes.TCollectionItem>(
 TEnumerator<System.Classes.TCollectionItem>
 TEnumerable<System.Classes.TCollectionItem>-
 TEnumerable<System.Classes.TCollectionItem>
.TList<System.Classes.TCollectionItem>.arrayofT
)IComparer<System.Classes.TCollectionItem>
6TCollectionNotifyEvent<System.Classes.TCollectionItem>
-TArrayManager<System.Classes.TCollectionItem>
 IEnumerable<System.Classes.TCollectionItem>$
0TList<System.Classes.TCollectionItem>.TEmptyFunc
1TList<System.Classes.TCollectionItem>.TEnumerator5
1TList<System.Classes.TCollectionItem>.TEnumerator
%TList<System.Classes.TCollectionItem>&
%TList<System.Classes.TCollectionItem>
TArray<System.TObject>
TEnumerator<System.TObject>(
TEnumerator<System.TObject>h
TEnumerable<System.TObject>-
TEnumerable<System.TObject>
TList<System.TObject>.arrayofT
IComparer<System.TObject>
&TCollectionNotifyEvent<System.TObject>
TArrayManager<System.TObject>
TArrayManager<System.TObject>4
IEnumerable<System.TObject>$
TList<System.TObject>.TEmptyFunc
!TList<System.TObject>.TEnumerator5
!TList<System.TObject>.TEnumerator
TList<System.TObject>&
TList<System.TObject>
!TArray<System.Classes.TComponent>
&TEnumerator<System.Classes.TComponent>(
&TEnumerator<System.Classes.TComponent>P
&TEnumerable<System.Classes.TComponent>-
&TEnumerable<System.Classes.TComponent>
)TList<System.Classes.TComponent>.arrayofT
$IComparer<System.Classes.TComponent>
1TCollectionNotifyEvent<System.Classes.TComponent>
(TArrayManager<System.Classes.TComponent>
(TArrayManager<System.Classes.TComponent>l
&IEnumerable<System.Classes.TComponent>$
 TList<System.Classes.TComponent>.TEmptyFunc
,TList<System.Classes.TComponent>.TEnumerator5
,TList<System.Classes.TComponent>.TEnumeratorh
TList<System.Classes.TComponent>&
TList<System.Classes.TComponent>
3TPair<System.Integer,System.Classes.IInterfaceList>
JTArray<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>(
OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>-
OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>@(I
?TDictionary<System.Integer,System.Classes.IInterfaceList>.TItem
DTDictionary<System.Integer,System.Classes.IInterfaceList>.TItemArray
!IEqualityComparer<System.Integer>
&TCollectionNotifyEvent<System.Integer>
5TCollectionNotifyEvent<System.Classes.IInterfaceList>
TEnumerator<System.Integer>(
TEnumerator<System.Integer>
TEnumerable<System.Integer>-
TEnumerable<System.Integer>4.I
HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumerator;
HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumeratorx/I
HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollection;
HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollectiont1I
%TArray<System.Classes.IInterfaceList>
*TEnumerator<System.Classes.IInterfaceList>(
*TEnumerator<System.Classes.IInterfaceList>
*TEnumerable<System.Classes.IInterfaceList>-
*TEnumerable<System.Classes.IInterfaceList>,5I
JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator;
JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator
JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection;
JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection
ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator;
ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator
9TDictionary<System.Integer,System.Classes.IInterfaceList>9
9TDictionary<System.Integer,System.Classes.IInterfaceList>
'TArray<System.Classes.TBasicActionLink>
,TEnumerator<System.Classes.TBasicActionLink>(
,TEnumerator<System.Classes.TBasicActionLink>
,TEnumerable<System.Classes.TBasicActionLink>-
,TEnumerable<System.Classes.TBasicActionLink>
/TList<System.Classes.TBasicActionLink>.arrayofT
*IComparer<System.Classes.TBasicActionLink>
7TCollectionNotifyEvent<System.Classes.TBasicActionLink>
.TArrayManager<System.Classes.TBasicActionLink>
,IEnumerable<System.Classes.TBasicActionLink>$
1TList<System.Classes.TBasicActionLink>.TEmptyFunc
2TList<System.Classes.TBasicActionLink>.TEnumerator5
2TList<System.Classes.TBasicActionLink>.TEnumerator KI
&TList<System.Classes.TBasicActionLink>&
&TList<System.Classes.TBasicActionLink>
4TPair<System.string,System.Classes.TPersistentClass>
KTArray<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>(
PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>ddI
PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>-
PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
@TDictionary<System.string,System.Classes.TPersistentClass>.TItem
ETDictionary<System.string,System.Classes.TPersistentClass>.TItemArray
System.Generics.CollectionsPgI
7TCollectionNotifyEvent<System.Classes.TPersistentClass>
ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator;
ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator
ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection;
ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection
'TArray<System.Classes.TPersistentClass>
,TEnumerator<System.Classes.TPersistentClass>(
,TEnumerator<System.Classes.TPersistentClass>
,TEnumerable<System.Classes.TPersistentClass>-
,TEnumerable<System.Classes.TPersistentClass>DoI
KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator;
KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator
KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection;
KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection
JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumerator;
JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumerator
:TDictionary<System.string,System.Classes.TPersistentClass>9
:TDictionary<System.string,System.Classes.TPersistentClass>
OnKeyNotifydhI
/TList<System.Classes.TPersistentClass>.arrayofT
*IComparer<System.Classes.TPersistentClass>
.TArrayManager<System.Classes.TPersistentClass>
.TArrayManager<System.Classes.TPersistentClass>T
,IEnumerable<System.Classes.TPersistentClass>$
1TList<System.Classes.TPersistentClass>.TEmptyFunc
2TList<System.Classes.TPersistentClass>.TEnumerator5
2TList<System.Classes.TPersistentClass>.TEnumeratorl
&TList<System.Classes.TPersistentClass>&
&TList<System.Classes.TPersistentClass>0
TArray<System.Classes.TRegGroup>
%TEnumerator<System.Classes.TRegGroup>(
%TEnumerator<System.Classes.TRegGroup>
%TEnumerable<System.Classes.TRegGroup>-
%TEnumerable<System.Classes.TRegGroup>8
(TList<System.Classes.TRegGroup>.arrayofT
#IComparer<System.Classes.TRegGroup>
0TCollectionNotifyEvent<System.Classes.TRegGroup>
'TArrayManager<System.Classes.TRegGroup>
%IEnumerable<System.Classes.TRegGroup>$
*TList<System.Classes.TRegGroup>.TEmptyFunc
 TList<System.Classes.TRegGroup>.TEnumerator5
 TList<System.Classes.TRegGroup>.TEnumerator
TList<System.Classes.TRegGroup>&
TList<System.Classes.TRegGroup>
TArray<System.Classes.TIntConst>
%TEnumerator<System.Classes.TIntConst>(
%TEnumerator<System.Classes.TIntConst>@
%TEnumerable<System.Classes.TIntConst>-
%TEnumerable<System.Classes.TIntConst>
(TList<System.Classes.TIntConst>.arrayofT
System.Generics.Collectionst
#IComparer<System.Classes.TIntConst>
0TCollectionNotifyEvent<System.Classes.TIntConst>
'TArrayManager<System.Classes.TIntConst>
'TArrayManager<System.Classes.TIntConst>T
%IEnumerable<System.Classes.TIntConst>$
*TList<System.Classes.TIntConst>.TEmptyFunc
 TList<System.Classes.TIntConst>.TEnumerator5
 TList<System.Classes.TIntConst>.TEnumeratorP
TList<System.Classes.TIntConst>&
TList<System.Classes.TIntConst>
%TThreadList<System.Classes.TIntConst>&
%TThreadList<System.Classes.TIntConst>|
TList.Sort$1743$0$Intf
TList.Sort$1743$ActRecd
TList.Sort$1743$ActRec(
!TArray<System.Classes.TPropFixup>
&TEnumerator<System.Classes.TPropFixup>(
&TEnumerator<System.Classes.TPropFixup>
&TEnumerable<System.Classes.TPropFixup>-
&TEnumerable<System.Classes.TPropFixup>
)TList<System.Classes.TPropFixup>.arrayofT
$IComparer<System.Classes.TPropFixup>
1TCollectionNotifyEvent<System.Classes.TPropFixup>
(TArrayManager<System.Classes.TPropFixup>
&IEnumerable<System.Classes.TPropFixup>$
 TList<System.Classes.TPropFixup>.TEmptyFunc
,TList<System.Classes.TPropFixup>.TEnumerator5
,TList<System.Classes.TPropFixup>.TEnumerator
TList<System.Classes.TPropFixup>&
TList<System.Classes.TPropFixup>`iJ
&TThreadList<System.Classes.TPropFixup>&
&TThreadList<System.Classes.TPropFixup>
"TArray<System.Classes.TPersistent>
'TEnumerator<System.Classes.TPersistent>(
'TEnumerator<System.Classes.TPersistent>h
'TEnumerable<System.Classes.TPersistent>-
'TEnumerable<System.Classes.TPersistent>
*TList<System.Classes.TPersistent>.arrayofT
%IComparer<System.Classes.TPersistent>
2TCollectionNotifyEvent<System.Classes.TPersistent>
)TArrayManager<System.Classes.TPersistent>
'IEnumerable<System.Classes.TPersistent>$
,TList<System.Classes.TPersistent>.TEmptyFunc
-TList<System.Classes.TPersistent>.TEnumerator5
-TList<System.Classes.TPersistent>.TEnumerator
!TList<System.Classes.TPersistent>&
!TList<System.Classes.TPersistent>L
TComponent.Create@$2544$0$Intf
&TComparison<System.Classes.TComponent>
$TComparer<System.Classes.TComponent>2
$TComparer<System.Classes.TComponent>
-TDelegatedComparer<System.Classes.TComponent>8
-TDelegatedComparer<System.Classes.TComponent>|
TComponent.Create@$2544$ActRec
#TComponent.GetObservers$2556$0$Intf
#TComponent.GetObservers$2556$1$Intf
#TComponent.GetObservers$2556$ActRec
#TComponent.GetObservers$2556$ActRecT
TComparison<System.IInterface>
TComparer<System.IInterface>2
TComparer<System.IInterface>
$TMoveArrayManager<System.IInterface>
 .TList`1.Pack$599$0$Intf<System.IInterface>
 @TList`1.Pack$599$ActRec<System.IInterface>
9:{System.Generics.Collections}TList<System.IInterface>.:1
 TComparison<System.Classes.TCollectionItem>
)TComparer<System.Classes.TCollectionItem>2
)TComparer<System.Classes.TCollectionItem>
1TMoveArrayManager<System.Classes.TCollectionItem>
1TMoveArrayManager<System.Classes.TCollectionItem>xlL
8.TList`1.Pack$599$0$Intf<System.Classes.TCollectionItem>
8@TList`1.Pack$599$ActRec<System.Classes.TCollectionItem>
F:{System.Generics.Collections}TList<System.Classes.TCollectionItem>.:1
TComparison<System.TObject>
TComparer<System.TObject>2
TComparer<System.TObject>
!TMoveArrayManager<System.TObject>
(.TList`1.Pack$599$0$Intf<System.TObject>
(@TList`1.Pack$599$ActRec<System.TObject>
(@TList`1.Pack$599$ActRec<System.TObject>htL
6:{System.Generics.Collections}TList<System.TObject>.:1
,TMoveArrayManager<System.Classes.TComponent>
3.TList`1.Pack$599$0$Intf<System.Classes.TComponent>
3@TList`1.Pack$599$ActRec<System.Classes.TComponent>
A:{System.Generics.Collections}TList<System.Classes.TComponent>.:1
RTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.arrayofT
System.Generics.Collections@%I
MIComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
ZTCollectionNotifyEvent<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
Item3TPair<System.Integer,System.Classes.IInterfaceList>
QTArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
QTArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>l{L
OIEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>$
TTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEmptyFunc
UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator5
UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator
ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>&
ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
TList<System.Integer>.arrayofT
IComparer<System.Integer>
TArrayManager<System.Integer>
IEnumerable<System.Integer>$
TList<System.Integer>.TEmptyFunc
!TList<System.Integer>.TEnumerator5
!TList<System.Integer>.TEnumerator
TList<System.Integer>&
TList<System.Integer>@
-TList<System.Classes.IInterfaceList>.arrayofT
(IComparer<System.Classes.IInterfaceList>
,TArrayManager<System.Classes.IInterfaceList>
,TArrayManager<System.Classes.IInterfaceList>l
*IEnumerable<System.Classes.IInterfaceList>$
/TList<System.Classes.IInterfaceList>.TEmptyFunc
0TList<System.Classes.IInterfaceList>.TEnumerator5
0TList<System.Classes.IInterfaceList>.TEnumeratorx
$TList<System.Classes.IInterfaceList>&
$TList<System.Classes.IInterfaceList>8
,TComparison<System.Classes.TBasicActionLink>
*TComparer<System.Classes.TBasicActionLink>2
*TComparer<System.Classes.TBasicActionLink>
2TMoveArrayManager<System.Classes.TBasicActionLink>
9.TList`1.Pack$599$0$Intf<System.Classes.TBasicActionLink>
9@TList`1.Pack$599$ActRec<System.Classes.TBasicActionLink>
G:{System.Generics.Collections}TList<System.Classes.TBasicActionLink>.:1
STList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.arrayofT
NIComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
[TCollectionNotifyEvent<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
Item4TPair<System.string,System.Classes.TPersistentClass>
RTArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
RTArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>P
PIEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>$
UTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEmptyFunc
VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumerator5
VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumerator
JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>&
JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
,TComparison<System.Classes.TPersistentClass>
*TComparer<System.Classes.TPersistentClass>2
*TComparer<System.Classes.TPersistentClass>
2TMoveArrayManager<System.Classes.TPersistentClass>
9.TList`1.Pack$599$0$Intf<System.Classes.TPersistentClass>
9@TList`1.Pack$599$ActRec<System.Classes.TPersistentClass>
G:{System.Generics.Collections}TList<System.Classes.TPersistentClass>.:1
%TComparison<System.Classes.TRegGroup>
#TComparer<System.Classes.TRegGroup>2
#TComparer<System.Classes.TRegGroup>
 TMoveArrayManager<System.Classes.TRegGroup>
2.TList`1.Pack$599$0$Intf<System.Classes.TRegGroup>
2@TList`1.Pack$599$ActRec<System.Classes.TRegGroup>
@:{System.Generics.Collections}TList<System.Classes.TRegGroup>.:1
%TComparison<System.Classes.TIntConst>
#TComparer<System.Classes.TIntConst>2
#TComparer<System.Classes.TIntConst>
 TMoveArrayManager<System.Classes.TIntConst>
2.TList`1.Pack$599$0$Intf<System.Classes.TIntConst>
2@TList`1.Pack$599$ActRec<System.Classes.TIntConst>
@:{System.Generics.Collections}TList<System.Classes.TIntConst>.:1
System.Classest
&TComparison<System.Classes.TPropFixup>
$TComparer<System.Classes.TPropFixup>2
$TComparer<System.Classes.TPropFixup>
,TMoveArrayManager<System.Classes.TPropFixup>
3.TList`1.Pack$599$0$Intf<System.Classes.TPropFixup>
3@TList`1.Pack$599$ActRec<System.Classes.TPropFixup>
A:{System.Generics.Collections}TList<System.Classes.TPropFixup>.:1
'TComparison<System.Classes.TPersistent>
%TComparer<System.Classes.TPersistent>2
%TComparer<System.Classes.TPersistent>
-TMoveArrayManager<System.Classes.TPersistent>
4.TList`1.Pack$599$0$Intf<System.Classes.TPersistent>
4@TList`1.Pack$599$ActRec<System.Classes.TPersistent>
B:{System.Generics.Collections}TList<System.Classes.TPersistent>.:1
%TDelegatedComparer<System.IInterface>8
%TDelegatedComparer<System.IInterface>D
2TDelegatedComparer<System.Classes.TCollectionItem>8
2TDelegatedComparer<System.Classes.TCollectionItem>
"TDelegatedComparer<System.TObject>8
"TDelegatedComparer<System.TObject>
OTComparison<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>2
MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
UTMoveArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
UTMoveArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>$
\.TList`1.Pack$599$0$Intf<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
\@TList`1.Pack$599$ActRec<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
j:{System.Generics.Collections}TList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.:1
System.Classes@%I
TComparison<System.Integer>
TComparer<System.Integer>2
TComparer<System.Integer>\
!TMoveArrayManager<System.Integer>
(.TList`1.Pack$599$0$Intf<System.Integer>
(@TList`1.Pack$599$ActRec<System.Integer>
6:{System.Generics.Collections}TList<System.Integer>.:1
*TComparison<System.Classes.IInterfaceList>
(TComparer<System.Classes.IInterfaceList>2
(TComparer<System.Classes.IInterfaceList>
0TMoveArrayManager<System.Classes.IInterfaceList>
7.TList`1.Pack$599$0$Intf<System.Classes.IInterfaceList>
7@TList`1.Pack$599$ActRec<System.Classes.IInterfaceList>
E:{System.Generics.Collections}TList<System.Classes.IInterfaceList>.:1
3TDelegatedComparer<System.Classes.TBasicActionLink>8
3TDelegatedComparer<System.Classes.TBasicActionLink>p
PTComparison<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>2
NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
VTMoveArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
VTMoveArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
].TList`1.Pack$599$0$Intf<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
]@TList`1.Pack$599$ActRec<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>$
]@TList`1.Pack$599$ActRec<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>
k:{System.Generics.Collections}TList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.:1
3TDelegatedComparer<System.Classes.TPersistentClass>8
3TDelegatedComparer<System.Classes.TPersistentClass>
,TDelegatedComparer<System.Classes.TRegGroup>8
,TDelegatedComparer<System.Classes.TRegGroup>X
,TDelegatedComparer<System.Classes.TIntConst>8
,TDelegatedComparer<System.Classes.TIntConst>
-TDelegatedComparer<System.Classes.TPropFixup>8
-TDelegatedComparer<System.Classes.TPropFixup>
.TDelegatedComparer<System.Classes.TPersistent>8
.TDelegatedComparer<System.Classes.TPersistent>\
VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>8
VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>
"TDelegatedComparer<System.Integer>8
"TDelegatedComparer<System.Integer>
1TDelegatedComparer<System.Classes.IInterfaceList>8
1TDelegatedComparer<System.Classes.IInterfaceList>
WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>8
WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>L
System.Win.Registry
TRegKeyInfo
NumSubKeys
MaxSubKeyLen
FCurrentKey
FRootKey
FCloseRootKey
CloseKey
CreateKey
DeleteKey
GetKeyInfo
GetKeyNames
HasSubKeys
KeyExists
LoadKey
MoveKey
OpenKey
OpenKeyReadOnly
ReplaceKey
RestoreKey
SaveKey
UnLoadKey
CurrentKey
LastErrorMsg<
RootKey
RootKeyName
System.RTLConsts
System.IniFiles
System.SysConst
System.Character
Winapi.Windows
System.UITypes
System.Internal.ExcUtils
Winapi.PsAPI
Winapi.SHFolder
Winapi.ImageHlp
System.Math
System.Diagnostics
Winapi.Messages
System.VarUtils
System.AnsiStrings
System.StrUtils
Winapi.ActiveX
System.IOUtils
System.DateUtils
System.Masks
Winapi.ShellAPI
Winapi.IpExport
Winapi.Winsock2
Winapi.Qos
csshiftjis
windows-936
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
windows-874
oleaut32.dll
advapi32.dll
RegOpenKeyExW
RegCloseKey
user32.dll
kernel32.dll
GetCPInfoExW
GetCPInfo
RegUnLoadKeyW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
ole32.dll
RegDeleteKeyExW
4"4&4*4.42464:4
< <$<(<,<0<4<8<<<@<
7 7$7(7,70747<7
> >$>(>,>0>8>@>
3 3$3(3,3034383`3
3-373;3}3
3M4t4x4|4
363=3^364?4
8 8$8(858
2 2$2,242<2
="=)=0=:=_=|=
6h6X6`6h6p6x6
00Q0c0
>%>->5>{>
5-555C5U5g5o5}5
5X5F5X5m5y5
3%4x4
8 8$818`8|8
1!1%1)1`2
: :$:(:,:0:4:8:<:
6d6D6L6T6\6`6d6h6l6p6t6x6|6
5%6U6b6
4 4$4(40484@4
? ?$?(?,?0?4?
@.rsrc
Inno Setup Setup Data (5.5.0) (u)
Inno Setup Messages (5.5.3) (u)
GetKeyboardType
MsgWaitForMultipleObjects
ExitWindowsEx
GetWindowsDirectoryW
comctl32.dll
KWindows
6MsgIDs
Msgs
name="JR.Inno.Setup"
version="1.0.0.0"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<windowsSettings>
<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
.wt1F#
e?).KB
.cL&9?KpW
%s;$hu
H:\.g!
%!2.Cj
})4!%d
.XfaaTE
y4W%s@TF
gUA]%d
?P^6].Rv
.%f')JA
A_%s_Se(R
.az:j
|7[6%s
tj.xa
;N%sL:
.tIg)V
ôJR_
B%cOS
6,N.ik
.tQw}
_.zkP
Fe.lO
.wtDv
.xL7Er
3X.MY}
1a.mg
_X0%X 
4%SD_@
.cB<,
kÁM"
.wifc
%s?Z,
6.Pa~s
.rIO^r
%D#2h
KIO%Xk
%dm@ L
A]%UQ
%s"`x
HEc%f
.ul[r
._L%xL
yT&`%X~y.O
8"%fX
ÎoK
TK_%xu
%UfFz
.hf(Mt
?Je%s
Üd;
31%S^t2
Ki%d(
z*d%S5
W.HpI
%S<*`
<.Lg.
P.ZaW
.YWJ7
%Xa%%W
;%Clkh
&0.TJ
A.Cos
.qOP3
_.nhqFf
sm.Vz(
*.viZMiQ
OpKEy
.eFx#
R\.SB
)mc%D
JR.UT
.xmm ~
ub4.vp[<
\h.Duy
ZF,]%U
.GL s
.KW,j
)/.oo
.CkdP<
8(
.Hi/[]
27]-e}n 
C=.QG
wsU%U
.yD[b
<.ZEN
_{%f_
~%ch$
P%xl]:
V3e%u
F_Q.vX7a
wI.tCz{
V.YOS
jk.uN
ÝpdR
%7.Iq;0J|
6'C
)1.kh
2[.Fz
%D/m%
me.uB
uDPq
?Eõ
c.hiSc
]Z%SgL
!.GlM
#4.Nk
o.jw}P
T.WD{m
.WcK1
v(.Xu
\%s%H
Y6.cQ
*,%sLK
(%f]4
5.CA#/
<k.xo{
%Xj]4
%uxv?
h%S J
Cmdw
I:\3V
 w.ixJ/yL
f%s}[
<~TG%sp
.rQae
b:\![
(Y%dO
%CxtW
%D-AI
.snYRXEd?=
 7V.ha
%X=mo
.KLiM
g2^ExE
.kP"J6Kf
\%u:pO
.vT d
.fOXlv
E9^W%CP
%utmJv**O4
.sDUie
M%UMr
zgG%U%
l2.LY
0.VTg
.LCbT
c"%4uD
bG
N`.lQ4s56
Tjf.oG
\i.Vm
QsQl
.YWJP
6%F#j
.Tl83
. UÚb
1%Uv:
G2.lAv
H~uRL
VbT.He
CmdJ
?{5c -Z}
90.GTOT
3.Jy{k
%X9&?
awf.HpL_
o\.Et
i%4SH*
C.cw'
]u.eLt
%sXRzO
.DNFUH
>.IJGF
%SXZ-
wCH%C
8.tNZ
2k".uR
.Ty!2
%U`c*
.bR]"k
%f_DX&N7
}?.oJ
.HT^0
47.VI
.mD:;Ss
F:\DC
e%9un
OV.eh
h.9O%d
X6.Ll
p$%x%
S!%d<M
~>y~.PZ
.dD6x
msql"N
.Frx'nb
.yzyg
:%c,2vn
%c\Yq$
.Zxf=
%.Jay
.dg$I
%uj T
3N^.Xeo
.hT1vm
.rZ>*q
.cW`.
gQÚb70
%C}=6
-.tT)
t!.hD
ysw%XhA
%f-mM
zx%xKl
.cxys
%d.FI|
r)%fv
mwv
.Hw=@
;b.yxpA~
T.LXA
.cQZDKx
b6#%FG
!.Dn0
}^"V.yB
<%U]Y~
{L].rC
WI.ov
w-%d]
g%XvsMu
V.GQz
v.rVq
.QGWpj
tMU%U~
n.qdr
%sZ;l
!$?.Oa>W
8-Ý
=n%u.
rj.He
"Y-b}
~jÿ7[ 
q.aw[_1
O.dN-
|/T%x
3.HFR
.XuHq1x
.i\u>.Wv/%
.Ny5x`
(Lv.pn
I.nkVW
z-LQ},
Ii~ .Rf
\'%3u
c %UN
6>:.NZh
h.PRQ
-Gk9nKEy.
u5Q.HK
>.Xu4
.umNdMD
%uj(w:
vEXE
@.vz4G>
<D*&sR$.iD
.Ih'.
-DBo}M{;
DA{V.Kd
4).eJ
,9 %D
YB^%c
Qkg.tC[@
D)y%D
^U.YQF
z_%X^
3_BI%s
JQ%f)
yoÜl
%UX{$|
eq]S%f
2n%0s
OH.ye6
6$.Gn
;4k|.Cdw&
&Y.Cm2
wEBk,
v%C{y
%SZVe
'r]%xj
L.mXU
6>.qw2R
.rvvE
X#c%x
}.OGC
s.KI*
b.Ff8
*ÀG_
.YpR`'
cB.xX-
3%.pG
.oUeu
=×I
.Cs'x
gCRT
5ZUDP
7.TS^
z~b<-\.jH
m[.WK
cRtjl
P~%x'%}y>z
4l&%F
DH%D^D
.Rrkp
.sp|_
]:V%u
J".tZ
mb.pj
Gx.Ow
C4q%%F
]s=%X
.gk7y
.zMKK
.Qq]o
h.PE|
2PVt%x
V'%CMg
.Eepiw-
n%C_OSe
.yf6$rA
%s,hd
.hqs[
x&.lk
.ts!l
.IZdJ
!!I.UL1n
.koQNRH
.Mp)D>
!.zb-C
.gW9_
X%c!U)
_!.YU
s2%uCH#
.IuA1
y-l}u
_%u_R_
.TMDr
P%5sE
.TgAw
0.RhA
qp.ZX
%CPl9Z
!K.xYu
]%X]!
(<%3u
i)m.HN
5a
.CWRd!i
%1UwO
^f=c%d
8b<y.dS
5.VV`
7.GU 
.FY?d
.Je43
TDþ_
hs.NVb
hEG%x
%UN8X
vI<Û
F[.zt
^aH%s
S.RMA
S!.sZ
|R.DsU
.Qwv.*
.xPy|
b$;%f(
?O%DX
/LcMd
LE^%c}
y.d%C
;/i%f
A%x <
.cB.(,
l.aj 
Rmh.bA
.Mn^$
<;(
H_.Sn|
!RT0v.ae
%6s2>
:Ex%D
%ck\_
.GGtE
H.sw<
-h}F/
.fx!6
Bc.RQ
@.UF\
-3r}P
%0U1a
3U%dQ
d|%sz
Q%CoQ
MpePi%s
IF}.Oe>
.uX`:
`>.Up
B8j[%U
x.rV 
S$.bF
e.vY6
H%sA]:$#
7IkX.Dv
^gUrl
!Wð
KZC%UFL$
7`Q0.Kzz*
*K%.s
2]%XW3
F$.hS z
}}.pm
.KQ6:.
6ýn
o.ZV*
.lcK,5`
i.Km@5oiW
zb%fk
{%u:x
%Va%C
h.llB
o}%1s~
0Z_.UZ
%cQrw
%U )?8f
-L}H/S
cK:.Pi
HXa%c
a/M%X*
.YS;Kr
!G.CE5
.ci$,
tcpN
xN:%C
%.uf3]
h.UK{
aGxt59.zf
-RM};r
0%FwT
|.OKm
%undB'
5_.aJ
w .ve$
<.Xq'
_%fqu
.jt&i
lG%D~R
p9.LK
a[y]SÍA*E
S.ZCa
%xs[WV
.qtoM
d.dS,
zkC%xY
=)%d>
;.NZT%%x
Y.VE46
):ÆM
;K}.hK
.SIO.
E.qXai
v_6Wq.bl=
%Dtn3
%DiI!r
).UW@
&a.wW
8.BpF
]yT
~*.xv
s2,%CTP
%ss`V
%D"hUq
7.VD|"
cfw%d
.LJ 5
4.Nbz
bw.MP
..iJ!s
r].px*
-YIu}-
.FBP~
PB%dPl
nao%S(
SX
H%F'O
 %X9Y
Tv,m%D
Q.aq,
A{..uv
.xO'j
gf]?%x
bd.mR
%C Z|
%u67:}hPJ%^
zI%CJ
-.gx^Xq
X%XRu
m-Y}3v
o%uhad
%s4>|q
y}.Azt
8%uu]
@.NM|n
-.co:
=÷)M
z?.bG
w].TO
D.Mr2
i].Ky
5z%X <Z
_Z1
v'.wT
i k.Fvc
!.vA2
k:U^.BW)v
,@.nO
7ÎQ
!F#iÿ{]U
b`*%F&$
s%DPLYn
7E]%fv
?.SSoJ>
S%U.a
f.hK/.
^.sEA
V.cJ7
-O;%X
_%c}r{
/ÍV
dKm.Sf
x.WmUN
.rS@7
j2l.wN>
<7~;]7)~
umc-.jkK
.Ci)h
zE.pK7
$%ut=^F
n6"2%F
DB}%uH
4.CO(
!{.PY
.|S%0s
v.TM6K:
Web>b
.yt!9
#S.Rv
DzP.Se
.Ih,$
$.ii F\u
sl.RA]
.YiN?u
$~%U?
AM.jaw8u
t5.iP
G$'.eo
mM.dUW
 *7c%C|
>.GQs
.NK6n[
l.Mh9
%SO,z
r1.mt
t.Db&
.yQra
.iIXPD`
%SE<%o
-.MqrD(
Ca-5};
.gLw1"
I/b%x
M.FnK:
&a.PC
(-%uk}
2%C[~
p{%cw
.MbH.
0,.Ef
R):-N}U9
{ET.am
C%1so1
m.MTF
p_G%UBk
"UjU.oO
{ Í
4R].OX9G
*<FSQl[
&@%Xq3Y
cCRTg
Thawte Certification1
hXXp://ocsp.thawte.com0
.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0
hXXp://ts-ocsp.ws.symantec.com07
 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
(Go Daddy Class 2 Certification Authority0
GoDaddy.com, Inc.1301
*hXXp://certificates.godaddy.com/repository100.
'Go Daddy Secure Certification Authority1
079692870
hXXp://ocsp.godaddy.com0F
5hXXp://certificates.godaddy.com/repository/gdroot.crl0K
*hXXp://certificates.godaddy.com/repository0
"hXXp://crl.godaddy.com/gds5-16.crl0S
 hXXp://certificates.godaddy.com/repository/0
hXXp://ocsp.godaddy.com/0J
>hXXp://certificates.godaddy.com/repository/gd_intermediate.crt0
07969287
ISystem.Internal.ExcUtils
dSystem.SysConst
,System.Character
kWinapi.PsAPI
-Winapi.ImageHlp
System.StrUtils
YSystem.AnsiStrings
%System.Classes
fSystem.Rtti
iSystem.IOUtils
&System.DateUtils
<assemblyIdentity type="win32" name="App" version="3.1.0.0" processorArchitecture="*"/>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" publicKeyToken="6595b64144ccf1df" language="*" processorArchitecture="*"/>
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<windowsSettings>
<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
%s-%s
(%s @ %p)
(class '%s' @ %p)
operator
%s[%d]
%s_%d
.Owner
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
optprosetup.exe
C:\Temp\
FNo multi cast observer with ID %d was added to the observer collection
Windows
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows 8
Observer is not supportedLCannot have multiple single cast observers added to the observers collection4The object does not implement the observer interfaceGNo single cast observer with ID %d was added to the observer collection
bThe duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue
Timespan element too long#''%s'' is not a valid integer value
Duplicates not allowed5Insufficient RTTI available to support this operation
Parameter count mismatch<Type '%s' is not declared in the interface section of a unit7VAR and OUT arguments must match parameter type exactly"%s (Version %d.%d, Build %d, %5:s):%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$%s not in a class registration group
Property %s does not exist
Stream write error'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found2Length of Strings and Objects arrays must be equal
Invalid Timeout value: %s
Timespan too long#A component named %s already exists
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
Error reading %s%s%s: %s
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s*Can't write to a read-only resource stream
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)
External exception %x
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
<unknown> '%d.%d' is not a valid timestamp
I/O error %d
Integer overflow Invalid floating point operation
.DEFAULT\Control Panel\International
File I/O error %d
lzmadecompsmall: Compressed data is corrupted (%d)
lzmadecompsmall: %s
LzmaDecode failed (%d)
/SUPPRESSMSGBOXES
/PASSWORD=password
Specifies the password to use.
For more detailed information, please visit hXXp://VVV.jrsoftware.org/ishelp/index.php?topic=setupcmdline
shell32.dll
/SL5="$%x,%d,%d,
Operation aborted(Exception %s in module %s at %p.

optprosetup.exe_2000:

.text
`.itext
`.data
.idata
.rdata
@.rsrc
ENoMonitorSupportException
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
Inno Setup Setup Data (5.5.0) (u)
Inno Setup Messages (5.5.3) (u)
oleaut32.dll
advapi32.dll
RegOpenKeyExW
RegCloseKey
user32.dll
GetKeyboardType
kernel32.dll
MsgWaitForMultipleObjects
ExitWindowsEx
GetWindowsDirectoryW
GetCPInfo
comctl32.dll
KWindows
6MsgIDs
Msgs
name="JR.Inno.Setup"
version="1.0.0.0"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<windowsSettings>
<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
.DEFAULT\Control Panel\International
File I/O error %d
lzmadecompsmall: Compressed data is corrupted (%d)
lzmadecompsmall: %s
LzmaDecode failed (%d)
/SUPPRESSMSGBOXES
/PASSWORD=password
Specifies the password to use.
For more detailed information, please visit hXXp://VVV.jrsoftware.org/ishelp/index.php?topic=setupcmdline
shell32.dll
/SL5="$%x,%d,%d,
Invalid file name - %s
Invalid variant operation
External exception %x
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
I/O error %d
Integer overflow Invalid floating point operation
Invalid pointer operation

optprosetup.tmp_324:

.text
`.itext
`.data
.idata
.rdata
@.rsrc
Windows
ENoMonitorSupportException
.uvCOu
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
EVariantBadIndexError
ssShift
htKeyword
EInvalidOperation
Uh.xB
EInvalidGraphicOperation
UhU%C
Uh%.C
PasswordChart
OnKeyDownTME
OnKeyPress
OnKeyUpPLE
ssHorizontal
OnKeyUp
TCustomButton.TButtonStyle
AutoHotkeysP
AutoHotkeys
TKeyEvent
TKeyPressEvent
HelpKeyword
ssHotTrack
TWindowState
poProportional
TWMKey
KeyPreview
WindowState
EXPORT
TPSExec
TPSRuntimeClassImporterPkP
TPSExportedVar
TPSCustomDebugExec
TPSDebugExec
OnKeyUptKE
t.Htb
1.2.1
TPasswordEdit
PasswordEdit(
Passwordt
PasswordPage
PasswordLabel
PasswordEdit
PasswordEditLabel
CheckPassword
<requestedExecutionLevel level="
IMsg
FormKeyDown
PasswordCheckHash
TKeyNameConst
TOutputMsgWizardPage
TOutputMsgWizardPage,_N
TOutputMsgMemoWizardPage
MsgLabel
Msg1Label
Msg2Label
function CreateOutputMsgPage(const AfterID: Integer; const ACaption, ADescription, AMsg: String): TOutputMsgWizardPage;
function CreateOutputMsgMemoPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String; const AMsg: AnsiString): TOutputMsgMemoWizardPage;
function MsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons: Integer): Integer;
function GetIniString(const Section, Key, Default, Filename: String): String;
function GetIniInt(const Section, Key: String; const Default, Min, Max: Longint; const Filename: String): Longint;
function GetIniBool(const Section, Key: String; const Default: Boolean; const Filename: String): Boolean;
function IniKeyExists(const Section, Key, Filename: String): Boolean;
function SetIniString(const Section, Key, Value, Filename: String): Boolean;
function SetIniInt(const Section, Key: String; const Value: Longint; const Filename: String): Boolean;
function SetIniBool(const Section, Key: String; const Value: Boolean; const Filename: String): Boolean;
procedure DeleteIniEntry(const Section, Key, Filename: String);
function GetCmdTail: String;
function StringChangeEx(var S: String; const FromStr, ToStr: String; const SupportDBCS: Boolean): Integer;
function RegValueExists(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;
function RegQueryStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;
function RegQueryMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;
function RegDeleteKeyIncludingSubkeys(const RootKey: Integer; const SubkeyName: String): Boolean;
function RegDeleteKeyIfEmpty(const RootKey: Integer; const SubkeyName: String): Boolean;
function RegKeyExists(const RootKey: Integer; const SubKeyName: String): Boolean;
function RegDeleteValue(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;
function RegGetSubkeyNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;
function RegGetValueNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;
function RegQueryDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultDWord: Cardinal): Boolean;
function RegQueryBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: AnsiString): Boolean;
function RegWriteStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteExpandStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: Cardinal): Boolean;
function RegWriteBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: AnsiString): Boolean;
function CheckForMutexes(Mutexes: String): Boolean;
function Exec(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;
function ExecAsOriginalUser(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;
function ShellExec(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;
function ShellExecAsOriginalUser(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;
function MakePendingFileRenameOperationsChecksum: String;
function CreateShellLink(const Filename, Description, ShortcutTo, Parameters, WorkingDir, IconFilename: String; const IconIndex, ShowCmd: Integer): String;
function ExitSetupMsgBox: Boolean;
function GetWindowsVersion: Cardinal;
procedure GetWindowsVersionEx(var Version: TWindowsVersion);
function GetWindowsVersionString: String;
function SuppressibleMsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons, Default: Integer): Integer;
function CustomMessage(const MsgName: String): String;
function SendMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Longint;
function PostMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;
function SendNotifyMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;
function SendBroadcastMessage(const Msg, WParam, LParam: Longint): Longint;
function PostBroadcastMessage(const Msg, WParam, LParam: Longint): Boolean;
function SendBroadcastNotifyMessage(const Msg, WParam, LParam: Longint): Boolean;
procedure RaiseException(const Msg: String);
function SetPreviousData(const PreviousDataKey: Integer; const ValueName, ValueData: String): Boolean;
CREATEOUTPUTMSGPAGE
CREATEOUTPUTMSGMEMOPAGE
MSGBOX
INIKEYEXISTS
GETCMDTAIL
REGKEYEXISTS
REGDELETEKEYINCLUDINGSUBKEYS
REGDELETEKEYIFEMPTY
REGGETSUBKEYNAMES
CHECKFORMUTEXES
SHELLEXEC
SHELLEXECASORIGINALUSER
MAKEPENDINGFILERENAMEOPERATIONSCHECKSUM
EXITSETUPMSGBOX
GETWINDOWSVERSION
GETWINDOWSVERSIONSTRING
SUPPRESSIBLEMSGBOX
GetWindowsVersionEx
IMsgt
Inno Setup Setup Data (5.5.0) (u)
Inno Setup Messages (5.5.3) (u)
oleaut32.dll
advapi32.dll
RegOpenKeyExW
RegCloseKey
user32.dll
GetKeyboardType
kernel32.dll
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MapVirtualKeyW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
ActivateKeyboardLayout
msimg32.dll
gdi32.dll
SetViewportOrgEx
version.dll
mpr.dll
TransactNamedPipe
SetNamedPipeHandleState
GetWindowsDirectoryW
GetCPInfo
CreateNamedPipeW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
comctl32.dll
ole32.dll
shell32.dll
ShellExecuteExW
ShellExecuteW
comdlg32.dll
`.rdata
@.data
.pdata
COMCTL32.dll
SHLWAPI.dll
SetProcessShutdownParameters
KERNEL32.dll
ADVAPI32.dll
SHELL32.dll
OLEAUT32.dll
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
KWindows
6MsgIDs
Msgs
UrlMon
.rsrc
@.reloc
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
shlwapi.dll
SOFTWARE\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion\ProfileReconciliation
RegKey
GetWindowsDirectoryA
RegOpenKeyA
RegCreateKeyExA
SHFOLDER.dll
dll\shfolder.dbg
Font.Color
Font.Height
Font.Name
Font.Style
OnKeyDown
Lines.Strings
name="JR.Inno.Setup"
version="1.0.0.0"
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<windowsSettings>
<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
</windowsSettings>
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
%s_%d
USER32.DLL
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
uxtheme.dll
DWMAPI.DLL
clWebSnow
clWebFloralWhite
clWebLavenderBlush
clWebOldLace
clWebIvory
clWebCornSilk
clWebBeige
clWebAntiqueWhite
clWebWheat
clWebAliceBlue
clWebGhostWhite
clWebLavender
clWebSeashell
clWebLightYellow
clWebPapayaWhip
clWebNavajoWhite
clWebMoccasin
clWebBurlywood
clWebAzure
clWebMintcream
clWebHoneydew
clWebLinen
clWebLemonChiffon
clWebBlanchedAlmond
clWebBisque
clWebPeachPuff
clWebTan
clWebYellow
clWebDarkOrange
clWebRed
clWebDarkRed
clWebMaroon
clWebIndianRed
clWebSalmon
clWebCoral
clWebGold
clWebTomato
clWebCrimson
clWebBrown
clWebChocolate
clWebSandyBrown
clWebLightSalmon
clWebLightCoral
clWebOrange
clWebOrangeRed
clWebFirebrick
clWebSaddleBrown
clWebSienna
clWebPeru
clWebDarkSalmon
clWebRosyBrown
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebOlive
clWebForestGreen
clWebGreenYellow
clWebChartreuse
clWebLightGreen
clWebAquamarine
clWebSeaGreen
clWebGoldenRod
clWebKhaki
clWebOliveDrab
clWebGreen
clWebYellowGreen
clWebLawnGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkgreen
clWebLimeGreen
clWebLime
clWebSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebLightCyan
clWebLightBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebIndigo
clWebMediumTurquoise
clWebTurquoise
clWebCyan
clWebPowderBlue
clWebSkyBlue
clWebRoyalBlue
clWebMediumBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebCadetBlue
clWebDarkCyan
clWebTeal
clWebDeepskyBlue
clWebDodgerBlue
clWebBlue
clWebNavy
clWebDarkViolet
clWebDarkOrchid
clWebMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebMediumOrchid
clWebMediumPurple
clWebPurple
clWebDeepPink
clWebLightPink
clWebViolet
clWebOrchid
clWebPlum
clWebThistle
clWebHotPink
clWebPink
clWebLightSteelBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebWhite
clWebLightgrey
clWebGray
clWebSteelBlue
clWebSlateBlue
clWebSlateGray
clWebWhiteSmoke
clWebSilver
clWebDimGray
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlategray
clWebGainsboro
clWebDarkGray
clWebBlack
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
crSQLWait
%s (%s)
imm32.dll
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
RegDeleteKeyExW
.DEFAULT\Control Panel\International
%s, ClassID: %s
%s, ProgID: "%s"
oleacc.dll
MSFTEDIT.DLL
RICHED20.DLL
Rstrtmgr.dll
File I/O error %d
Messages file "%s" is missing. Please correct the problem or obtain a new copy of the program.
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
WININIT.INI
Software\Microsoft\Windows\CurrentVersion\SharedDLLs
RegCreateKeyEx
RegOpenKeyEx
sfc.dll
cmd.exe" /C "
COMMAND.COM" /C
PendingFileRenameOperations
PendingFileRenameOperations2
@Software\Microsoft\Windows\CurrentVersion\Fonts
Software\Microsoft\Windows NT\CurrentVersion\Fonts
IPropertyStore::SetValue(PKEY_AppUserModel_PreventPinning)
IPropertyStore::SetValue(PKEY_AppUserModel_ID)
IPropertyStore::SetValue(PKEY_AppUserModel_ExcludeFromShowInNewInstall)
IPropertyStore::SetValue(PKEY_AppUserModel_StartPinOption)
OLEAUT32.DLL
Log opened. (Time zone: UTC%s%.2u:%.2u)
%s Log %s #%.3u.txt
regsvr32.exe"
Cannot register 64-bit DLLs on this version of Windows
HELPER_EXE_AMD64
Cannot utilize 64-bit features on this version of Windows
64-bit helper EXE wasn't extracted
\\.\pipe\InnoSetup64BitHelper-%.8x-%.8x-%.8x-%.8x%.8x
CreateNamedPipe
helper %d 0x%x
Helper process PID: %u
Stopping 64-bit helper process. (PID: %u)
Helper process exited with failure code: 0x%x
TransactNamedPipe/GetOverlappedResult
Helper: Command did not execute
SOFTWARE\Microsoft\.NETFramework
.NET Framework not found
SOFTWARE\Microsoft\.NETFramework\Policy\v4.0
v4.0.30319
SOFTWARE\Microsoft\.NETFramework\Policy\v2.0
v2.0.50727
SOFTWARE\Microsoft\.NETFramework\Policy\v1.1
v1.1.4322
.NET Framework version %s not found
Fusion.dll
Failed to load .NET Framework DLL "%s"
Failed to get address of .NET Framework CreateAssemblyCache function
.NET Framework CreateAssemblyCache function failed
MoveFileEx failed (%d).
Deleting directory: %s
Failed to delete directory (%d). Will retry later.
Failed to delete directory (%d). Will delete on restart (if empty).
Failed to delete directory (%d).
Deleting file: %s
Failed to delete the file; it may be in use (%d).
The file appears to be in use (%d). Will delete on restart.
Decrementing shared count (%d-bit): %s
Unregistering 64-bit DLL/OCX: %s
Unregistering 32-bit DLL/OCX: %s
Not unregistering DLL/OCX again: %s
Unregistering 64-bit type library: %s
Unregistering 32-bit type library: %s
Uninstalling from GAC: %s
Running Exec filename:
Running Exec parameters:
CreateProcess failed (%d).
Process exit code: %u
Running ShellExec filename:
Running ShellExec parameters:
ShellExecuteEx failed (%d).
Skipping RunOnceId "%s" filename: %s
Unregistering font: %s
zlib: Internal error. Code %d
bzlib: Internal error. Code %d
lzmadecomp: %s
lzmadecomp: Compressed data is corrupted (%d)
DecodeToBuf failed (%d)
c:\directory
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Could not find page with ID %d
Software\Microsoft\Windows\CurrentVersion\Uninstall
%s\%s_is1
RestartManager found an application using one of our files: %s
Can use RestartManager to avoid reboot? %s (%d)
PrepareToInstall failed: %s
Need to restart Windows? %s
/:*?"<>|
\/:*?"<>|
%s-%d.bin
%s-%d%s.bin
..\DISK%d\
Asking user for new disk containing "%s".
Cannot read an encrypted file before the key has been set
LoggedMsgBox returned an unexpected value. Assuming Abort.
Software\Microsoft\Windows\CurrentVersion\Fonts
Software\Microsoft\Windows\CurrentVersion\Uninstall\
5.5.3 (u)
URLInfoAbout
URLUpdateInfo
Creating directory: %s
Setting permissions on directory: %s
Failed to set permissions on directory (%d).
Setting NTFS compression on directory: %s
Unsetting NTFS compression on directory: %s
Failed to set NTFS compression state (%d).
Failed to set value in Fonts registry key.
Failed to open Fonts registry key.
Setting permissions on file: %s
Failed to set permissions on file (%d).
Setting NTFS compression on file: %s
Unsetting NTFS compression on file: %s
Dest filename: %s
Dest file is protected by Windows File Protection.
Time stamp of our file: %s
Time stamp of existing file: %s
Version of our file: %u.%u.%u.%u
Version of existing file: %u.%u.%u.%u
Existing file is protected by Windows File Protection. Skipping.
Uninstaller requires administrator: %s
The existing file appears to be in use (%d). Will replace on restart.
The existing file appears to be in use (%d). Retrying.
Registering file as a font ("%s")
Cannot install files to 64-bit locations on this version of Windows
desktop.ini
.ShellClassInfo
{0AFACED1-E828-11D1-9187-B532F1E9575D}
target.lnk
Filename: %s
Desktop.ini
Software\Microsoft\Windows\CurrentVersion\App Paths\
Setting permissions on registry key: %s\%s
Could not set permissions on the registry key because it currently does not exist.
Failed to set permissions on registry key (%d).
Cannot access 64-bit registry keys on this version of Windows
Registration executable created: %s
Software\Microsoft\Windows\CurrentVersion\RunOnce
Registering 64-bit DLL/OCX: %s
Registering 32-bit DLL/OCX: %s
Registering 64-bit type library: %s
Registering 32-bit type library: %s
Directory for uninstall files: %s
Will append to existing uninstall log: %s
Will overwrite existing uninstall log: %s
Creating new uninstall log: %s
LoggedMsgBox returned an unexpected value. Assuming Cancel.
RmShutdown returned an error: %d
Fatal exception during installation process (%s):
ExtractTemporaryFile: The file "%s" was not found
ExtractTemporaryFiles: No files matching "%s" found
Invalid symbol '%s' found
Invalid token '%s' found
QuerySpawnServer: Unexpected response: $%x
CallSpawnServer: Unexpected response: $%x
CallSpawnServer: Unexpected status: %d
ShellExecuteEx
ShellExecuteEx returned hProcess=0
Wnd=$%x
Expression error '%s'
Password
SuppressMsgBoxes
srcexe
Cannot evaluate "%s" constant during Uninstall
Cannot access a 64-bit key in a "reg" constant on this version of Windows
Unknown custom message name "%s" in "cm" constant
Cannot expand "pf64" constant on this version of Windows
Cannot expand "cf64" constant on this version of Windows
uninstallexe
Cannot expand "dotnet2064" constant on this version of Windows
Cannot expand "dotnet4064" constant on this version of Windows
Failed to expand shell folder constant "%s"
Unknown constant "%s"
Software\Microsoft\Windows\CurrentVersion
SOFTWARE\Microsoft\Windows NT\CurrentVersion
cmd.exe
COMMAND.COM
\_setup64.tmp
_isetup\_shfoldr.dll
Failed to get version numbers of _shfoldr.dll
shfolder.dll
Failed to load DLL "%s"
Found pending rename or delete that matches one of our files: %s
Windows version: %u.%u.%u%s (NT platform: %s)
64-bit Windows: %s
Processor architecture: %s
Defaulting to %s for suppressed message box (%s):
Message box (%s):
User chose %s.
MsgBox failed.
/SPAWNWND=$%x /NOTIFYWND=$%x
64-bit install mode: %s
_isetup\_isdecmp.dll
_isetup\_iscrypt.dll
/Password=
/SuppressMsgBoxes
/DETACHEDMSG
-0.bin
Setup version: Inno Setup version 5.5.3 (u)
Original Setup EXE:
Not restarting Windows because Setup is being run from the debugger.
Restarting Windows.
Inno Setup version 5.5.3 (u)
Portions Copyright (C) 2000-2013 Martijn Laan
hXXp://VVV.innosetup.com/
hXXp://VVV.remobjects.com/ps
Cannot run files in 64-bit locations on this version of Windows
Type: Exec
Type: ShellExec
RmRestart returned an error: %d
Need to restart Windows, not attempting to restart applications
Will not restart Windows automatically.
RegDeleteKeyExA
System\CurrentControlSet\Control\Windows
Cannot call "%s" function during Setup
Cannot call "%s" function during Uninstall
Invalid RootKey value
Unknown custom message name "%s"
%u.%.2u.%u
%u.%u.%u.%u
Cannot disable FS redirection on this version of Windows
Runtime Error (at %d:%d):
Exception "%s" at address %p
TScriptRunner.SetPSExecParameters: Invalid type
TScriptRunner.LoadScript failed
Remove shared file %s? User chose %s%s
/INITPROCWND=$%x
/SECONDPHASE="%s" /FIRSTPHASEWND=$%x
Original Uninstall EXE:
Install was done in 64-bit mode but not running 64-bit Windows now
Removed all? %s
Not restarting Windows because Uninstall is being run from the debugger.
isRS-???.tmp
isRS-%.3u.tmp
DisableProcessWindowsGhosting
Interface not supported
7Dispatch methods do not support more than 64 parameters
Exception: %s
Cannot Import %s
Unable to insert a line Clipboard does not support Icons
Text exceeds memo capacity/Menu '%s' is already being used by another form
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.
Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
No help found for %s
Unsupported clipboard format
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread$No help viewer that supports filters#''%s'' is not a valid integer value
Cannot open file "%s". %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Failed to get data for '%s'
Resource %s not found"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
External exception %x
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
I/O error %d
Integer overflow Invalid floating point operation
n%USERPROFILE%
r%SYSTEMROOT%
5.50.4807.2300
Microsoft(R) Windows (R) 2000 Operating System
Datos de programa%Configuraci
51.1052.0.0

rundll32.exe_1956:

.text
`.data
.rsrc
msvcrt.dll
KERNEL32.dll
NTDLL.DLL
GDI32.dll
USER32.dll
IMAGEHLP.dll
rundll32.pdb
.....eZXnnnnnnnnnnnn3
....eDXnnnnnnnnnnnn3
...eDXnnnnnnnnnnnn,
.eDXnnnnnnnnnnnn,
%Xnnnnnnnnnnnnnnn1
O3$dS7"%U9
.manifest
5.1.2600.5512 (xpsp.080413-2105)
RUNDLL.EXE
Windows
Operating System
5.1.2600.5512
YThere is not enough memory to run the file %s.
Please close other windows and try again.
9The file %s or one of its components could not be opened.
0The file %s or one of its components cannot run.
MThe file %s or one of its components requires a different version of Windows.
UThe file %s or one of its components cannot run in standard or enhanced mode Windows.3Another instance of the file %s is already running./An exception occurred while trying to run "%s"
Error in %s
Missing entry:%s
Error loading %s

OptProStart.exe_1908:

.idata
.rdata
P.reloc
P.rsrc
kernel32.dll
Windows
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
EVariantBadIndexError
ssShift
htKeyword
EInvalidOperation
u%CNu
%s[%d]
%s_%d
EInvalidGraphicOperation
USER32.DLL
comctl32.dll
uxtheme.dll
!"#$%d
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
TKeyEvent
TKeyPressEvent
HelpKeyworddRA
crSQLWait
%s (%s)
imm32.dll
AutoHotkeys\
AutoHotkeys
ssHotTrack
TWindowState
poProportional
TWMKey
KeyPreviewP
WindowState
OnKeyDown
OnKeyPress
OnKeyUp
tagMSG
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
User32.dll
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
WS2_32.DLL
127.0.0.1
TIdSocketListWindows
TIdStackWindowsU
IdStackWindows
%s, %.2d %s %.4d %s %s
%s, %d %s %d %s %s
password
Password
IdHTTPHeaderInfo
ProxyPassword<
ProxyPort
Mozilla/3.0 (compatible; Indy Library)
ftpTransfer
ftpReady
ftpAborted
ClientPortMin<
ClientPortMax
Port
EIdCanNotBindPortInRange
EIdInvalidPortRangeSVW
libeay32.dll
ssleay32.dll
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_CTX_get_current_cert
des_set_key
saUsernamePassword
Password<
0.0.0.1
TIdTCPConnection
IdTCPConnection
EIdTCPConnectionError
sslvrfFailIfNoPeerCert
TPasswordEvent
Certificate
RootCertFile
CertFile
KeyFile
OnGetPassword@<F
EIdOSSLLoadingRootCertError
EIdOSSLLoadingCertError
EIdOSSLLoadingKeyError
TIdTCPClient
TIdTCPClientXdF
IdTCPClient
BoundPort
PortU
Uh.qF
CommentURL
TIdHTTPMethod
IdHTTP
TIdHTTPOption
TIdHTTPOptions
TIdHTTPProtocolVersion
TIdHTTPOnHeadersAvailable
TIdHTTPOnRedirectEvent
TIdHTTPResponse
TIdHTTPResponse8
TIdHTTPRequest
TIdHTTPProtocol
TIdCustomHTTP
TIdHTTP
TIdHTTP4
HTTPOptions
Porth
EIdHTTPProtocolException
HTTPS
https
This request method is supported in HTTP 1.1
HTTP/1.0 200 OK
HTTP/
OnActionExecuteX
%s, ClassID: %s
ole32.dll
driverpro.exe
Driver Pro\DriverPro.exe
hXXp://VVV.pcutilitiespro.com
UninstallURL
AdsDownloadURL
HomePageURL
SupportURL
BuyNowURL
AdsBuyNowURL
WelcomeURL
BannerURL
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
?456789:;<=
!"#$%&'()* ,-./0123
user32.dll
GetKeyboardType
advapi32.dll
RegOpenKeyExA
RegCloseKey
RegFlushKey
RegCreateKeyExA
GetCPInfo
version.dll
gdi32.dll
SetViewportOrgEx
UnhookWindowsHookEx
SetWindowsHookExA
MsgWaitForMultipleObjects
MapVirtualKeyA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
EnumWindows
EnumThreadWindows
ActivateKeyboardLayout
shell32.dll
ShellExecuteA
wininet.dll
6!606@6`6
5!5%5)5-515
> >$>(>,>0>4>8><>@>\>|>
0#0'0 0/03070;0
= >$>(>,>0>4>
3 3$3(3,30343
9%9u9
5 5$5(5,5:5
8"9&9*92989
2 2$2(2,20242
5"5&5*5.52565:5
2"292\2?3
=#='= =/=3=7=;=?=
KWindows
UrlMon
0IdHTTPHeaderInfo
 IdTCPServer
IdTCPStream
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
Icon.Data
Could not load certificate.#Could not load key, check password.
SSL status: "%s"
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Command not supported.
Address type not supported.$Error accepting connection with SSL.
Error creating SSL context. Could not load root certificate.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Chunk StartedDThis authentication method is already registered with class name %s.
%s is not a valid service.
Socket Error # %d
%s is not a valid IP address.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
No data to read.$Can not bind in port range (%d - %d)
Invalid Port Range (%d - %d)
Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
No help keyword specified.
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.
File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Alt  Clipboard does not support Icons/Menu '%s' is already being used by another form
Unsupported clipboard format
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Thread Error: %s (%d)
*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Interface not supported
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
External exception %x
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
!'%s' is not a valid integer value
I/O error %d
Integer overflow Invalid floating point operation
3.2.0.0


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    %original file name%.exe:1992
    rundll32.exe:1956
    rundll32.exe:552
    optprosetup.exe:2000

  2. Delete the original Application file.
  3. Delete or disinfect the following files created/modified by the Application:

    %Documents and Settings%\%current user%\Local Settings\Temp\{49B5C40B-8B1B-4206-A52A-2968B8BAABD9}\optprosetup.exe (50495 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-0EBL3.tmp\optprosetup.tmp (7386 bytes)
    %Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk (749 bytes)
    %Program Files%\Optimizer Pro\is-FIJ68.tmp (4545 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\OptProCrash.dll (28498 bytes)
    %Program Files%\Optimizer Pro\is-I7OJF.tmp (601 bytes)
    %Program Files%\Optimizer Pro\is-T0GDV.tmp (48 bytes)
    %Program Files%\Optimizer Pro\is-D1CDO.tmp (22 bytes)
    %Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk (755 bytes)
    %Program Files%\Optimizer Pro\is-NFGPQ.tmp (1281 bytes)
    %Program Files%\Optimizer Pro\is-8QFCA.tmp (712 bytes)
    %Program Files%\Optimizer Pro\OptProCrash.dll (249349 bytes)
    %Program Files%\Optimizer Pro\is-2PCR1.tmp (3073 bytes)
    %Program Files%\Optimizer Pro\is-R4RJ7.tmp (6841 bytes)
    %Program Files%\Optimizer Pro\is-D2H2L.tmp (54 bytes)
    %Program Files%\Optimizer Pro\is-6HRJ9.tmp (898 bytes)
    %Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Help.lnk (749 bytes)
    %Program Files%\Optimizer Pro\is-NBVGF.tmp (2321 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\optpro2.bmp (673 bytes)
    %Documents and Settings%\%current user%\Desktop\Optimizer Pro.lnk (737 bytes)
    %Program Files%\Optimizer Pro\is-G6QHS.tmp (3073 bytes)
    %Program Files%\Optimizer Pro\is-D550L.tmp (7345 bytes)
    %Program Files%\Optimizer Pro\unins000.msg (646 bytes)
    %Program Files%\Optimizer Pro\is-ONRCV.tmp (6841 bytes)
    %Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Check updates.lnk (777 bytes)
    %Program Files%\Optimizer Pro\unins000.dat (17021 bytes)
    %Program Files%\Optimizer Pro\is-Q9E45.tmp (56 bytes)
    %Documents and Settings%\All Users\Start Menu\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk (729 bytes)
    %Program Files%\Optimizer Pro\is-M0DC9.tmp (22575 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\_isetup\_shfoldr.dll (23 bytes)
    %Program Files%\Optimizer Pro\is-O8NDB.tmp (673 bytes)
    %Program Files%\Optimizer Pro\is-NRJNC.tmp (32054 bytes)
    %Program Files%\Optimizer Pro\is-30E2I.tmp (7433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-4JTJE.tmp\itdownload.dll (1281 bytes)
    %Program Files%\Optimizer Pro\is-QJOC7.tmp (2321 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "Optimizer Pro" = "%Program Files%\Optimizer Pro\OptProLauncher.exe"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet


Lavasoft is the maker of Ad-Aware, the world's most popular anti-malware software with over 450 million downloads.
© 2026 Lavasoft. All rights reserved.
Terms Of Use |   Privacy Policy


x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now