MalScore
100/100
MalFamily
Ispy

344638805252.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 34/67 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 861.00 KB (881664 bytes)
Compile time: 2017-06-29 07:36:01
MD5: 1c0b8c366932a1b7f403869f02f0c244
SHA1: 9d1fe7fb0631a824597e22a69d7e710e27f35a49
SHA256: 7a18e07b0401c38dd2d6171602c437dc8c53b7eb7feea6c996957dd4f9e24c75
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 eJ9tCwi .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-04-17 10:45:10
Last submission: 2018-04-17 10:45:10
Filename detected: - 344638805252.exe (1)
URL file hosting
hXXp://gamers-by-night.com/344638805252.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-17 07:31:47 [34/67] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
eJ9tCwi 0x2000 0xb48bc 739840 36a14b7bc8ef6390d33030b9170dc8a8 11c4b407f9fe0642f5d7d9b9b4b3abcb72393c05
.text 0xb8000 0x21b20 138240 aeb3250159d4592633c3f92fb56ebbe8 a8d6d4dde31e240ebc7a4663c1a925e4b3e8e4a4
.rsrc 0xda000 0x5a8 1536 68e6785c1c515e324fe82c75d87b1a82 6234afdfcf52aecee11ecfb8d64ff6e902c0b379
.reloc 0xdc000 0xc 512 30afacc5df066b2a5b6bc419b5f4f78f ea005830fc0347afb2a77cd3eda7d05b8f18b15a
0xde000 0x10 512 6097def1a06a278cd278b0e4aa016b8c c4f63f5416594d22a83b11a619e4a39bd33c3638
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0xda0a0 796 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0xda3bc 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018
Assembly Version: 1.0.0.0
InternalName: njghfcgfe.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: njghfcgfe
ProductVersion: 1.0.0.0
FileDescription: njghfcgfe
Translation: 0x0000 0x04b0
OriginalFilename: njghfcgfe.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
No IP detected
URL(s)
No URL found
VarFileInfo
Comments
OriginalFilename
aada66b8-bf84-eb
njghfcgfe
96fe4883-fc22-e57
96fe4883-fc22-e56
96fe4883-fc22-e55
96fe4883-fc22-e54
96fe4883-fc22-e53
96fe4883-fc22-e52
96fe4883-fc22-e51
96fe4883-fc22-e50
FileVersion
#-$
96fe4883-fc22-e59
96fe4883-fc22-e58
1.0.0.0
njghfcgfe.exe
Copyright
StringFileInfo
Translation
Assembly Version
96fe4883-fc22-e513
96fe4883-fc22-e512
96fe4883-fc22-e511
96fe4883-fc22-e510
VS_VERSION_INFO
InternalName
000004b0
ProductVersion
FileDescription
M!!"
LegalCopyright
CompanyName
LegalTrademarks
ProductName
2018
O^T#
Wi9v
B;Y3QvG
lRMg
: ,D
KC-K: ?,x
Xl9n
/27];G
K. i
xH*h>
~#NA*
PNG
1 6
%W(}W
-7DO;
$)+"F
>D}|
ctHw
bhv.Z
:,pT
$?qo
xhp`
^nO *
]e d
sO/)s
0m0
FaF]
XE"
$qW
ResolveEventHandler
h7<FV
_V = 7
lUcg
g\jt]%g
0 4!
!9{N,
X3nB
\ C%
6O f<4=U8
-Y<B6
QpZjX
|%zy
]u?k9%
^]_0
S{qu^
c %P
}P06
^Io
D$ 3Y
}*qL
Qbv
H$;B
jem4
79|}
E/jv
D6(ERH
3go7
X&h/
%Cax
\"r{
p.72
8:=w
3QU0
Qf0
U%q
+ _nl
y #^
{3E-
Ni=|
VNT3
EEFn$-
v$
Fj[2
pDBJ
/I;W
MFkEj
=zs'
0WJe
\~R~
/O#`
Wib_ _^
sf5YA
,cVO~
S F>
R4z|
Py(S
}M4dt
/l`]
kc5
V2[{
:z$gvg
[y8Q:y
<bj0pB
+<J\
5?.^
JGyRX!#
vi:!
liXo
qe+h
:>5Q'
=59rV
2$(?
-0L
w`qb-
g7\&
u &Mi~
+ l2
Cy]p
3>W
(E}<:2c
& q5G*
u4b7
r&WzS
JR% J'
WL;;
~xcK
)Wj*
:Y-9
`k[L
e/r5
D `L
vQsK
1c~z
O'];
o`fP
+z_c
-ySB
}\w0("
WPV4
n /6
7wJ6
%J{@6
TWmEO
,9Tg
Khh 4
:Nmr
=Hq~
LsFl
a>i#m
EnableVisualStyles
O! /
G~HLQ
Lo-h
P#zj
p=&vV
lt+]l
=+V1
6;C)
Lr^(
Oy-#
py6\r5
Xnd{
*JE1
P-vX
*Qc0;x
^ X!
P9Qw|
c]+q
o$
1!`3
,{(m
't8b
#Z[
Px M
Ikko
#@Th
nr.%E
yGS_'
C X`
b9T.
4D,Z
L"_'AE
^K$Y,
QXC7
YykB[
h;o:
V=Q?Gi
8>)_:/9&
:c\
^X.d
-YS m
*`Tt
t}uXP
;wdC
&vhL
&+|uNgv
`KB
J=8HN
5)d!
O)shi
&M<r
)5^.
6'e&
dqkL
.%
Bj9w
1G@w
GN<
5\'C
v5Hx
Ka"6
!!q(<A
u+S1
69pfDj|
*V[R*B#
ff)69Wm(\KOX
c<Op
Nom1l
`J/D
r*"H
>h3=
set_Text
'KcMw#
bd_0
6a
bGn~H
E4PF
&NlE
SBiA
<R[+
M xw
W3hC
:b5g%
t<b6,|>
E6]G
>7Tku
^kraUT
hF`
xE Y
28$t
'Z i
iUzbTA
8@W7.
\Vbu
=n/A
X :"
# pA
LQnD
q!@Ufw
!3+oJne
nK#;
Ke7,
BD4fw
Cv$jB
sP?.
S^;F
;rkI
2i#q
<u#V
9:m(
{[5R
:sU:
heClO
'~>]{
*-Wq
}Zef^
[?b-
&?0V
z #@x#
:W:-
e?xz
C\~}
7R7q
t0N~
4d^N
T3J5b
X1s!
Char
& `T
6o s
t Gzo
>K|9!
3@"B
TFZ&
UBk}}
%MGB#
)/6;-
g~na
W: V
kGmT4
;`Uu%f<Y
N%>F<Q}
1^>B
Y}u" <
.2F]
&545S
;ZF0p
rNE/F
o8w^
9(Pud
g8 od-
sIDAThC
idl<
rj,v
UtM{
zDMX{
get_FullyQualifiedName
0 &99
|l&QD~e
t.;4
#v%
68d4
N^LSc
deGC
r>t5
m4~!4D
0h@&D
u >|6
dX#-k
qBqeW]
Pq%b{\
^%`w
,6 ,
Data
y Q>
/ ?P
iPp'
B/<y
b;n;
}g0?
PL[||
sOv&
/4 4
/nWiu
uF>Y:
Be}Tm
{~mU
yc)tb
;&`8
fg
Dnztn:
Ao07
.text
6J+D7
S?Xqj
OW(|+
4=
b[ [
>CY)Kx
!nG|)[
B$+N
GetObject
aapW
0~ 0Hy
Igcu
7p5`
V=S3
*'Ak[
<z 51I17
nFHk
s~+Z
5 pt@
nqA&
73 /
HAug:
;w|*u
)QB!
"reW
&3U;J
*+y,
z@r2
2'`x
~zP3n
1 "2;8
LynK
u+ d
`qh2
ANS2
XG
:p\:
gzr
[txr
#kQu
n>M
1 ==9k $
%xz<{
DK(\{
RfvU
C1{9
N* e
%O5}
f6@l
%\T.
aAsSN(vH[
qnY^
0L||Z
8GZY
Bd=5
x[tI3
KZ`Szp]
7=kO
Qc(/
L3-4
(Q{c
&Ziic
CULtX
6oSnsC
r"nZ\hj
cC~Hm
t9+G 6
: s>
xYuL
zbI8
U]n {
|uc(
dmNA
.biK<
(/pSw
6'l
T2S1
^Z!8
Po %
`(h3
_@<#K
[Mze
Sf!w#
)vW&
x %
w <xr
#Schema
N:'
jJF `
+"nU
AQgr
?Kn'
VB2[
4%W;
4`_J
pPj"A
#z~L
]'bQ
eIq4\
<<o8
NP~h
A=s'aRl(
\'4B)
I !U
@oE4
"O9#6
/~Xm
?^\i
A@=
zPkuf
:Q"j
+ (V
y2JZv
7U:3"s
5'u.
\rs9
9Jk)
*+^,Ku
!9"
V {oP
+VnB
QCo7
1j>i
&.HC
9:(~Z+rw
\][~b
|:o6M
*Z/
I-R9
(vPo
g7*=
2avL
~t h
ZSx:
w~h3|3}
<IiFE
_tK)
G G
Vr.}
G,Y Mikt7t
w06i[%K
"900X}
~_uKe5
$9 )
t 1uH
wP%9
Tp/,4
, ^
vp'ObHE
CICP
OKiE
;JYy
WEW7^
| V#
3D23Sz
'sCwzI
yJ10N`
Eq4(nJ
"ZK>
\N B
WQak
\s,g8
;~<[C
o~Ff
:6)&
Ao m:H
Duj&/
:(B2
0 Ap
>nj
qXS4;E:
KX9Ol^
"<<B
-odk*
K\8 v
n:C)
9.Zru
-L-<
NK]9i
Fb(J
3ZAg_
CiWH
+GO >
q!*fa
251#
dA48N2
!\V|Fa
EgZW
$1$d
u$-G>
pCIfw
oyxy
BQV/
l]p:bZ
(z.k
|b^T\
V>V9
Q`hp
Lt~
%}luti
GHX
#=0:
get_Assembly
G8=# K
stE_My
87T1
h2v
,V?.
y!;(Ms
kU(8
5Sst_90
::Rij
%h#n
"(z~
<ETf
={=C
T\Vw
'!S]
f.C!
wun^m
DUT~J
F0!:!k
bW ec
:j/,D
tRrAs
ro!LG
NbG
)lIV
d a;
(x<H
8waf
]<_2QG
HUn$
#xE%~
k u:
",1o j
H4CT
hf A
&+rzz
l5Gj
#%&ZrlGxR+<
DdM KiG
D4~^
(VV
uY_~
< WF
xdHW+(F
(#mq-
SlH
6N^x
udWGf
r9ch_B
KMJ5Uw^
)Hie
p!7- jh
;k"w
m2U"
.xQX]
lroe
9^Rk sTUx
QWk[
ILh
I(#$
X.yI
UxZbx
Ad'#
SB=C
xcG'm
Nqw+V
#Sy
72Aj
%WXRzQ
}Aqtl|
<&^Z
IX}1
KD$
@58C
jrLd&
5]P}
_5E<q
Y> .W[
4! ~
jyG7"&
U,)p
b0Jbn
.yoW
System
EventArgs
8Ce'
0 [K
jnZo5
}&}:
]?Qh
U1 m
eF\6jq
l HC
esQi
!SI+
0=-t
\b ?
r@_QeK
WLqS
S6AsH+
Ypy0
Z9$fE
AV~5
P.}G
] cVr
++1S
i*}S
fqAb
D92|
,5)jI
wv(W
'ToX5
UK[,
K0p:[
/wIWY1
o-^u
0\ M
u9z|g
GjADX
5`?/
MethodBase
arwj
EX*b%8#
E*^T
4UT*7
#F2g"}4aTA
/lw>RW
B#_z
hoS;
6=\.!@6X
VF^@
iuKN:
W8{f>
"[ns
7u+msv
hmeqF
DIw(
"q:i.6
(bdD#
0ME;
&l$x
k'#:
[RaO
9~Q==6(
u VaB
2"I0
b}O[
d O&
T^A<z
(}a+
w6EL
nNy*
2G30
I|lQ
<Pp-X
'yOr
n5}If
`~+||
dOk8
wfuK
,j_e u
kB;R
<_kx
BeginInit
FwuC
99~ M
~ L
e7ug
UI l
xMdv
~dNo
1T|6:
~ f
Gb%Y
cQNi
e\3[
QsX$
f~.3
<2b9
rp.a
y8\<.}
2m} 9
_a U
0pQ=0
8kT.
b<ZF
|$QT_
p_|r
hf~
6+]BsY8
Wj/1
iJl~X
/1nGm
QgYD
paOL
[I 7IV4
'%LP
(|=v
D'l "Y
A=tH
~P_{
`eGr
K` p
Hs]?0
S dw
*(,_
|~[s
,.S!(
(?5(
v$bSA
f{z5
WZ
n#v7
!e@W3
/U+kVQL\
'69p
<_?S
c"]PON
8>@`
%?IL
'O%M
uCap
9 w9]o
@(e=
BmUg$
@r0l
oUTe
ja /
G<P}
|kOty
8n1m
Vn [D
^u& e
G0tP
e|(jI
.?;{
?*CMW
lWA;
C.`n
1`g$
ContainsKey
B\o;
YlH.
x,GG
9T?d
7w-W.[
d[(nY
3 sM
, 4
CHJQo
6?TKv
&vk;Y
I+S9
a W1
94~"91
:a0s
.TW? K
VNsI
;m!W
BOs'!I>
&NCp
?mVb
16
cM?krw
rSX
oh~Rz
[j
mK }>
jhL
{ +z
?^?
s-wk
$KxK
5 z!
Iag&
eR ku
PV6W
fIhO
+KCE
?lXB
5Vc%ji
@9KTN
MA =
DS>?
}-r;H
8bea
CKo&
iR4s
?d6h
hTuA XA
-X\R
;.xm58
ZKS9
Q{E8
_ 9{m
EaAW
oxVl
/?WHP
%`u;
Q Cj8C
/q&
}=E[%
=s<O-
u,Qer
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
=ae}
&S!O
"*:P
)\<*.
<}<e
8} q
~8Ve
qd#BFK]
6F*M
+6Ma
VK5Q
F r8
~f4
g"%
G)_`
i="3
[)TyJ
n}i3
*1s\'
kx|2
%gS[U
2$ )?q
mgT!K
;w 3
X*AL
e8[-+3
f DI
_'h{ULW
>5>Et
Q7=Q
z/&
$d8j
0`?IF
0Se/Y
&#Py
W2=[
V}Wt
a X}
sL`i
C& u
/j6I$B
2+$V!
Bq/q
jb[|<30
U"|+
lw-h
R,,Q
R3, tT
k;nr
>u*UQ
/iE}n
xIDAThC
Gj GU
set_Name
&!f(o
5gkG
l1e~e
n_c)zu
%@2,
K|WS
|sQ57
2~AqP
Z5h5
8 xA)p
?}m<+
=ljW
ima7(3
qF+^
A;^C]m
Q2]7
CM&T
Dqm
d6zd
UInt32
)X2+
t?s5
5k/]
SIc)hTw
7OF+
<J\4 3{VA !
J\&n
o[{;X
w~?^
qtK&
u`_0
]'f1
#A1 3|
]%ty
Y<UH
$3<z
~z(^
TBQ!
z oU
e}_v%
{*
1ml+
f j;
{9d `q
IB v
KvAK
vYR
?FJ?
MfpP
e e6=uN
QA,A
L2\D
/+k ~l
7*{X
Jw;f
+BGM
l:,.d
`F{t
VI1
gZhD
[n+s
;)iP&7( p
+du
GgqT J
qyW;D
1)VS<
UBb/?
b<S
\ (A
oglf
`45JM*
9Q o
>jQ:!
F5rM
|-( X=
15HO
v!!T
Q= B
}>3 `
`JHW
".Ww~
eoZ<
|KRq
wpmF
G<kN
8r\M
P;5x
twG3F
D;vy
v0:$cN7
1i]/o
QM8
6g+)@
Nj[&63
{ .eu
T0
Eyrd
uM*A
*vf(
"s38
}I=bAN
,bRP!:
-q?MP
unm"
FpJ`
s0V?
$DJc
{06n
M,h)
^4(#9_
e4I {
J!yH
U_W%
SQCh(i
+Jrq
@)vLV
} ,S
FJssDW
C&C6
@U&U
BCB
N_/u
zDqGfU
S.1=
E4l:k
5lBg
q:i]
f4Eq
iyR>y
iPYw
{NV;
lt|s
1Y=$
Kb-)
Ssw}
AOE'O
vj[,
/9$&
qgui
ZP<y2Gb
u&C&
31L a
gH i
}H$R
v'f
j{{8
@ %)
.59+B
H@#~^
wL(rM
/%v f#
4J3T
3| F
wB4v
)KZk
V@/&
F5)d
*5Ly
^tO4
j 0F
.N&?
Oe'8
9:>j
Oaw$^
dozzb
Bm^4
`n4;6
u;5]
F$$8/
!Y*]
:)4<F
LtbS
Ml^>Nv
}L8w
a Rf
Iuwt
zO[^
cZ0K
+1icTT!
C \F
<nZ'
gW=i
&4b+
,f+#
Ol={
YH"M
aq <
eJDO
k\0r
4;Jn
xoLb1
O ~>
o{c>
iDa^L.
q V;
9Juf
er9l
HRiG
VN5]
_]ZsB~
}82
+KUL
4/ 9a
ruicV
utgGa
S@+/Tuh
xnG;
@A/'z{
B ]l
B`y>Q
?hq8c3
nW}W
70*ne
#}WYOC
7 RTD;7MXg
]Er^
z^/
{ 'n
H5+Ny
TtN~A}
Invoke
e'
il *b9
+G0
V;r8
g ne<(n"N
]{cL
E55A$D
Ks\cq
50/c
`MVu
j@HY
c0iC
PA]f
d/9o4
s{S1^
Iq
,MP_]g
%rg0
?)xG
~p m
CxF_
e f?
a{B%AgJ
y (y
_ ms
O4nsW
'w4ra2
>s#
0bnX
cg@DB
gSA%
Array
>6Uj
Z< <D
mvD@
cC$
G (U
iHlY
$:Cmnd
,'=hv
!2I?
ul+
GXC3
]toO
, Vo
aL(C"
5,6m
8ye0W
lP]L
Dsgf
y'_'u
>1h (
R@G[
%P{I&
'h02
XZ+^j
GqXm
Ln:s/
/ t{_;
Gen
`#n:7
+M&A
m_jb
lu>D
Fzu+
BP i
:{LR
LP*5T
?hB+
X~m2
@jmPc
@#/2E
nE}W
[IM/
EC^L
F5 H
v7io
tN0X0
@X|t
H FI
ykY~
=-14
5I0&
[0&s
` ow
:tjof
FY`D
Q(j0
c[ J\
1G~A\
-!-S-
p2w&
2n<k
CwUQ
O cj
M;c *
0e _
t}.%
X*I Zc
C cE
1BFt
A<hK
.;~w]
GN4Y
6#Tf_
524h
5?lV
L_?Y
NceYT
O4Kp.
;+2q
*gQH
ki}M
TY|e\
bM,*FT
.;(=r
$J."s
#<j-
,-42
2% TV%m4
,i}7
0:lP
<tqOU&
EG[1
/SCh
6+lH-
"^&[
kdH)L+\/
g$YC
#N4%
~<n
j8<Z
pgRh
lhsw
mkHtC 2
uF\6L
RuntimeCompatibilityAttribute
4L 3
`J8
v"" pF
8k.,
gi(T
CD=EA
NWJT
set_TabIndex
MjJ/
'Yew9!E
7 |P_
z^-dO
"E`M2
[laq
Evvk
oDQ[5{L
-'(&
b9AO
V6}&
n^yn~R
A 9g
BR@6
)3-
W :
]^45}
GJ`"
5Hd2
ein:5
] J/6y
Ln[k
%\HV
^Z%
"JD"
V_z%
-y/Yk-
&a#F
8HGL
2eVrd
jSgQ
@$cP
Size
0Wb.
iJGV:
/Jst
5Itl"[X
|"Li
}MYjbc
^ &R
V]Iz
'U<_
`NyM
K3Pl
sh9f[
48pJ
80Ex
,HP:
<n3[
$|ow
+G ((a
k=8RS
zX%6Y
p@gw
QF4r$ 9
y; 4s
vWDh_X
C.>%
"tt^6MB
TsK4
F|0P?J
C_%G
IContainer
rIDAThC
7i0v
[9 -H0t
MM-<
C ]k
_k$B
Bo.U{ x#
<#K7
8,'< L
g'R.
~a]'R
5* ?#
:/J]/3<9
9iAN
W2rg
@=tfn
{ KM
(U[8
'|}dl
{Qxx
+ctcO
~z4G
p[9v
e*iz
[O)b
zEpT
x/|
XIvxz
2{b
[K-c
A# [
0-c3F
7"eL
a$_
Es)
cl'4?
;}>j
`M9o ?P-
A(ty
aU|:
dHIL
Bta
.i.8
If+`o#*p ;
*pV_
Mo9zxYv
)xes
NXzv
80[b*
. R@
o+k_
lyC'
[A `
&"Nu
&:Y
1y nS
|hXn
W,?9K
6HC T
=e/Y
,& e[
ez)Z
aiaf
#Q($
q>9@
/Lb?#-|
ResourceManager
J[/L
NIf;#?x
GetExecutingAssembly
X0'jfO*
=]_O
ypO+
RM0
S L5
BXBL
OfMyd
ContainerControl
\$O(w7
*v3O
jaGD
[=>z
E:Pz
s NR
JA`>
/\ 4
tw<(<
+5(~
Q1 N
TrTP
\>w1=`
`mVcVAH&g
EvQY
LHi6
0*!KN
9,f^
JfWq
)Bci+$
g{yL B -
sx9O:\/
'TUu
!wzQX
q!u8
5(\w
wE1 Y+
\;D_./
yAx
l 4A
23r2
\rw{;
}DB1
SG3%IN
S"O1-
>h$`-
ROX/
4oS)
f6GNWv
XOqW
%*_4
aB' \
c~E=6
E50BK
NRpG#
'ep>2
8 >g
.{aD
2M:E^
xh>"
( :^K
7xQ
3+i]
TQ9lZh
?>hL`
kub9f
7
NDs15
&+!
?SB'
P2Ad
Ivl3
cD sq;t?QQ
JE3=
I] o/
Y7{V
_um:
[Rrcu
c]!;
`v[X0
gwMw
m:<v
FP?:
I#pi1
>6mL$
#|
cI Y
~J&x
s>#&
aFa5
h[-"
c<Zf0
lbpm
buRt
Rn`lL
r=I*
1>s
FJi 4
Close
ii6Ac
jL6"
Q2T)
M)=GK8\
SW!\U
EF-,
!.hb
')w!
Yx}e
4pc>
n2t@
q=Y+
CQSL
M(>V@<
c)Owny
d%\v
9^_,
B<6&
3?/vJ
b'mnEP
fUl6
awLn
0Z5>
~<M$
O[iUX
eQ.{
'o{lZ
}\Am
_ml>
8V&1x
wa1`
XOs|4D
:Q.$
*}rP
<1yRwm
P; f
eZr
hL_*
GgS"
#M* 4
a *r
:cF5
+u[l
^YSOu
0W{`
PGiU
_./MpNxJ
i:5#8
? $b
Yh~@L
BDV}
73b)
WGk
23 $
pXF
Ol$GH
MarshalByRefObject
65z
N`3X
~/x2
L64D
o R
jQ<}
p(w2
o`(e
0=J4 t
yvs"3F{r
b}J:
, vg,
mscorlib
H@2X
x O9F
`H4~
p0 v{T
Rn$|
-@&(
B/)iX
Ozlx
*R;)
YAFY
(/4k:
c}8(1
BR0z
f*ln;
), :
=a!
y( \]
}@\@lA7
r}Ky
B,)=H
g;r3^
d`N80
23u8Q}G
1#H"
cg9fw
5Wkl
k n"
""De
v*8k,
b)0q^h
6e#
^ `i
2i>3l
{.'
k5A!l
(4x
k]&
=Scu
g_s~
q:'r
hwuT2
=^]&
K&@\
V rDM
ct]t
Rs{*
W5= ki
RuntimeTypeHandle
&s\"
R -+#
/(}Pm{
b W{
(May
[y_(X
8P*
\*`.5
<^yD
l2(
$j B
XRM 0*
&.xR(X
x`
PTO|
s5C09,
K$fU
<-;vJ
iW.U7
14|+
8au{-
T7?@7Q
ope8m
+!'X
$*-a
,&4\
+_I
Cptt
nH/\a
"EM
|RhV
5$C-n
Zw]Lq2
aB<;
ae a
ZM}p
%6sUY
}|P;
`#l;W(
=?^%
gG -
zTsD@
8vhX
O-,TJ
;8qJ'w
Y>tD
R<:m
h)$M
c6:;
DG4p
d9g "S\
ax}BY
Ey=5Rm
?peU
aU*\l{O
l(]ZW.Z
[-[-
$x 6
u.Y}
NmCu
,6 A
pmB5
j85C
h(D'G
,U^w
0Zr`
g$qB`;
yjdv6
QhUt
D~yM8
1 n8L
p}"0
f~rN
n4eM~
&\HN
gDeE
4a4_
[uAB_
._wK
c=j'|JLm
EOzh
. H|
2r0=>CB
I4t)
]+Y60
jsP)
ZPKZ9
n x }
'%8qO
IEND
#A80
& E{
'xT*
cTB9
"ykd$
uP(u
U"
2JeV
mm%'=u8J
]WR6
vIDAThC
xRCt
PI=qP
`Cif}e
=0Qn,
\Ql<
nT:Nl
oNq"
X< /
,#H|
Hg@_
vI%'
x} 5
(*d[
u0<=(
!This program cannot be run in DOS mode. $
MK1$&
N?I
'[+'9
KGZM
W Nc_w
( ;(b
V931
V~SO
1B#2<
El}9
NY)?
p]!Q
~ 8:yu$
<^Z$
4 4
/oo\
N%W~
_?}
s0F*
^C(w
qgL/
|| k
K]%*
5v)<c.
0DXH
^~r=
J$B%
'l6}|
z{ 3
t?wt
o_2Q
}040
)8F\
wC*z
Y8^&
FN8y
$1M?,
F' 8
.,$F
9i
k,}!
,qdp
W8ZI
J+H
`3v%
n|4K
m^t)
set_ClientSize
M0/eC
0K SU
- [-
nI=}QVY
w<^[
Ua)M
zKxKM
lLsf
%_ \k
74VX
.kkq
L~!`
^/Hy
EKP,
,vO
M|Y"=l
OgS
kYhV}
o{"!x
@,Eg
\
T52{"a0
^6p+Hq?D
k qY
0{t2y\J[^x
o}i[|j$
@<\
>= c
T]0b[,#
E4|L
mUv *
]n`Q
lE i
?-$7Sl
,iwc
Y9#[
_Assembly
x-\m
u)V{
]sVvY
+2 Sx
>Tu!
rJH
YYL4
IwB3
1 4#`
&kl
k];6P
(2hxl
^&c(
w~><'
[[MtZC
%NV.
'RAn
uu|5
sn_&%
45I+
DuV
CcoI
EQ nW&}wx
wu[y
CpR,
nxf[a
"0*z
ZL,3
bOz-C
Wom1_
J.,[\
]a()u
$L.w
6vQ^
VyN'
"x${
wH_/
R0Nt
n_7y
'd [
SRr1
d`M
wQ2~
FPrK4f
yXG@?
.K/D|
IJm$
Och*=
di`K
W=I
*u C
/h j
a!INg
R |h
CXErVz
?Mjw{w}
c=HL
@Inh/a
Vv[
EditorBrowsableState
L&E/
ST y
yYfr
bxrN
GH''
' P<
BlockCopy
}j0t
]F*I
\J=8
UsRjc|
TES!
xj*MQDaJ
'9IH:
Qx~ZAg@
$%__
0g:
,3Jj
Z}u<TJY
QzEX
(}?!0
hqU
FormClosingEventArgs
-G,.
c 'm
ABIb
EVC'
:RI=f
'q`E
+ ]y
V; Q
6I\ir
J1JP
HDc7
6EH PK
2i7q;
[XBP
Ji?j
.6Vr
$t.P
+qQ&<
Imx&
W*m6)
%F<jH
|wf;
rruP'
x+&=
?7dT
G*WU2i
=f AI
R+{}
Mua B
:Q m{
2>h7
Z[U>
z)*?~aq0
1y+4c
]&G)l4
TZ'4
*n`N/
FonV@
y}<@x
?a[|
MethodInfo
kP :l'86*
1.0.0.0
Uq8k1
#Czy
)QYY
(V} a
%A.VG
CompilationRelaxationsAttribute
!0gIO
D)FH(
G,vM
.W`z
Q;2:
C.Jz
MemoryStream
J4\0BmF
\'T(
c;fy
Gkkn\
*1dO
-jb~
k <
xIZu
99t'}
#kr'(
t`!8'N
Z' F
~'f5
n&Z8
$x=
bSA"
S=!{[
o l(
{'RD
aMJ6
A/:&$"
R _>
G"ey
P\9r
V*`AZ
jkZn
}pS_
r iz&
Q<J b
lfCA
Dw7D
)vfB
Hwz{
Kr,e
mkCq
2YfU
Qu=!
4D3xs
L^T'WR
B}y$RUC
-czr
zO v
+.dA
]-QEf,
v# ]
wB:k
oe)Tt
,F.Cq
2lIv
y\
Dj?he
c]U
{!Y.
>O6
K
j O'9
v^j@
Kf@d
o[#G
|\8&
D+PC
vT-
L;Xlsf
dD?$
a%Uao
p V(*_
jm@T
"n6 }d
vf=l
`Lp*Cdy
.c9@Y.
Md.THM
iUFk
8o.y
'eJ(u~
r5<4

Kq'P
.Ba%}
1)skf
3i.|"O
xAE^
N x0
ke+D\
n4MJ
X$gA
TR\5
U
P%a&
Ti!%
Concat
7"tS[oj>
GT ZWW
QBBv
Qahh
n~.U
2#j4~r
Q 1-
Q9uJ
?5DMS
,\ROU
BR9sI
zYE:P
7?/-r
%?Og
">95
%ZfE
Yeen
XI1~
Cz\f
C4 (8
B|h&
Jqw^
UtU-
TWZc
y'0~?
A2K1
qWu>hC
,qy4
TEZA
^#05!
.%_;
nx>n
Aam)
v 1,
l8%QN
1H52
zu;
nSlk
A}r
p9mZ
#-#W
tm{c
=%xN
^>>i
#N%XY
L .B
-#cRI
Tz.-
o N]
3]~`
9%WHL
/ug t=S
eBK$ex
kt/+
fRWc
l~+ YS
'&0O>
~M)v{
System.Text
U !5
zum
sRz
Q\x[b_
R6nk3
EY>f
+;lZ
F1;<-E
90/1
;]#Ue-
oIO%
bU=p;
Ol w
>6>*F
58w4
4*2Y
K$rT5+
7<#A
8ABo
~Rsg
UZZX
T8TJ
j~0
EuDJ*+
*2xu5\
Kc;k2f
V<VL9=
klU+K
C 3e
hY\d
XHb9Rt
;>h(
Z Z+
He9[e
P?`kiS/
qw}P[.
c[L=Qh-
_"wg
wQ
?(xV
>pa8C
KXn<
i,I5
%vU#?X
)ij^d'
*d6=
tG3Ub
CHr$&Ae,
V+.-
2mZR
%vyJ
)LN\
coV
'$4J
y/U.7
?X^/Q
D)9b
7dj;c
57a;L5
gg4n
E941q
x/TiT
}B0}e
z}`K-
eI1H<
3ARNB7
rEu{
bS0"
z8M/
nJM&I
';t
Do1
et:\
^m_
Y^o)
Ce*
8SEG
FnRL_
xOo(
A$w}S
n4.Q
_CorExeMain
&<uHjj1
L2 X
7POWD
7M<+JL
pbp
S 3U?
J+]>Q
$H8VG#;^
<&e}
A;VmA
^.P+
bqo>
kk<H
?|`2-E]
j.Q?Z
T_
kOH
LDc4;m
67/%
//v#
HAcsx
#ht|
;fyu$V
tE{7
"B16
@#Ef
-am~
n i)
"U0B
JS+
@R z0
b*<I7
&gD
w6H,
'W x
w#fY
N#0A
%x&e
qb:4
@"TP
@Irua
xF1}
?!W+;
+3as
|,6-
>!y#SV!
o:hN'
`+H#
u$#S
w4 4
,ky
B.d=Dc9
-FI:
3Nm5
!w!K1a
>!~Q#
\%`V
hh8k
>87m
SAZ)
|O,o
+[jU
A@yj
k0d^
e90R
di)
S%Mk$
"X "Z
HR~h
kc35
'}fo
R`%"
8q;VH2}
/#/<
y[:j#
!g7v)=
H{.+t
#"l>
~ub
}@JV
7}e#
c;<?
{soW
xP1f
s5UX
P I>r
\cx$
q=0R
rbIB
, k I
<>u{
9mfX
mcH{C
A12n
U2Xt
a$4)
A)l=
*<sZ
NL<x
cjqg3
d~ eLp
]&wm
}\#B
B%vT
n vyR6
xf ({i
} jd
J?zfqJ
_ Dg
N5I
huxd
-[GB
)}zzJ
k2za
_m..t
.}8]
),t^m
X-'L
;h>#
x}Cb
+i 1
6q>;
.O<mA
Yn)1p
?i]9
dt\yo
z*}4
_=:
Ee_
hYd>
8kA,
(%{t
-`;Y
x"V&:b[
hLF5
K20c
}sT1
RxUF
> 7{
1ib4(
5 (3
g [T
pmJ98
"5UL
d"Mz-W
2vH(
^ko-_?xM
y |G
:,ZG
S{\w
x,5avX
Df K;`
rset
7hRn)
IVw@
A}oN
>ZK3
"nXz
?,gG
JoX
g+ ^w
-& +uP
9dp$<e
nE#"
m)S JP
HGQ.
'E05K
5H<,C
SV@z
~vPnI+<N
w =(ivD
L+lg
P(^c
lya!
Hdld
xzeV
O?_2
#G U:
C;j
kV*v
TUQ:
1F[_
Q5RF
Zoj$j0
}[x6
H Lc
Y Oe
RI-f
CA=x
c#,I
.x Z;
e`
Pt|M
V-jQ7
1G7`tA
|^ '2
@1D>
M9-=
47iR
~ $w
+^eH-
ZDBc
W@C&iU;
<R,k
V' T
{;X]Q
:c;Eu)
_'^a
Qb$E
/\hP
_Zy&*
5(G*
5E{-
:i6M
Stream
F#sC
i<8/
El~|
r;?\
Mh-,
Qb_2
N7R
W? N^G
>Gg#G
}s7
{+7y&
fu=x
^!>/
yaa H/~
>, ,
amRf
DF\di
\97=
bSe!'
u~1c
23q7--
Wmp
~9^:IWi
QaGH
U/*i
o?:%
\[ozQC
@3iG
A#f&
A"pc
DqIcx
;H-F<?
'F$I
~gK[AWC
cCu[
#QwK[
r|'v
I 1`8
blF%=7i
BY|5,Q
=J0]
8s' N
?`{Q(
9`=mmt
S&",
8v$Dz,
vT-
zb~k
7B(p
8zxJ
c aF
6P@eW
;QXF
6 4R
Bhb'y(U,
h'Ab
y';"
-W+`
(P.Y"
]~>0
~!^k
,V=i
^-MOlZ
^vQ">w
pJ's
~8.1
\nEU
#8C2w
APD9|D;
W I`
]cpP^9
8O/q$
p/33
K{VF3m
0U7OQ
<2;_
!!De
`j$v
i7c-F
Jw~ $
{cEl
Hb6\
`x5
A2:v#~bl
{+Z*|
0z7PX
B[312T
7&%>
N~fI
@2o+
PkR9S
Ki0'
>ZZ#
>sqq
MP49
-FgnU
C5^Hw!
XXB4
K$b2
6E.|6
{R^P/
';iz
?)&s
ua\v
:4?X
D{ <
tQIn8<
yOG
D$ >
-g=X
)(W-~*
\dR/
0A99h
U.G
l] QqEZ
'vGv
Vo;cZ
?~Vj;
l{6/
y0G>.
}c^@
[sG!
k!70X
jfF.y
}0 a
Q jq)
/)ZX
jB\+2
V|.UsS#
>haF
V:Wh)_Y
1SQ}
T}fDK@j
Q>:qz
3 k*
/V|aV&z
ih}]
O`T_
Rr7(
vULa
C n|y7
JhkQ
6P^2/S
%l$S(
6Q^uR9
mzE>
3DwI
aoTi
j0BN
sZLEH
aTO~p
zqnO{
92eK
]ot{
de+d5y
k`Kt
O%+J
A| <
[>,6
|3qk
B="k
mXbc
.-Ob:
#m.>
~B/N
9D7K
9TJz
%H->a
PJm<h
+x=5
%!wg
7S/T
M#& #
( 4+9m
A(^T^
, om
3]vwE
w 2E
Uoc;
4)1
[F b
W-ER?
C(nu
!/`Kmp
x*/Z
wB-k
1Krxd
Point
25I
O3u
UB.e
jWM%
+|1xat
s%|M
]_&J
E`_ru
Lnoj #y
c %I
n'kD
+9]^
&=R>
Q =I02P
Fo#w
3u.mn
)]Dr
T0,5 7
W_J
Hcg\
q tb
ar,"&
LsHaR
oD`#pt
JW v!
T: r
76) k#
8qe g
/aNw
/y.=
$jFR<
]4oIc
%1@~
Fs9v
N_Y(
z"tmm
}mjH
Oj0h
-l/A)
UQN ?fk
t=Uv
yBsH
H<PjS
" _0
mDSQ
#>4
A&^
}] ?
wJ
Dj3a
n#Sm
c !]A
_ IJo
add_FormClosing
>b %
>K 4O
8|ks
\#*:
9T#)aZ
`kSa
":
nDSll
771o
% B|
[-" '
6\^i
j{ba
Pir&
H24
|h3|
MaQ'+@
y3}T
(~PT
ZayA
S~>X
:\1cD8X
H~57
|yfKf
Ij?)
FD]4
|@U0
|53$
S.ybJ-
4[ d=
0K0"n6
g!V0
n}d2
Lws,S
I^Bj
: K
N$Tuy
-\A!
md~X
a./V
]/W
A8z@z
A,~f%
nd_e
C8iH
Yq"[\
OQrq
d+c<`\8
*:y7
#P%gO
-Cn,
*q%U h
9Czp
NPy
\Dpq
i I|
tZ(]
*f3%A
sgJ:Nm
3;%3
%8+
O2C 7J
-BJI
Z:p`j
h{1(
'A _P
~ zH
AepP
?; f\
9E;8
2pT/
)?=A)
QM!Bhn
* qf
OT69
Fy ?J
Gnb*Jm
X1"}7}
=F{#
`(Z{
" QH
k JB
upHJ
(& l
b%3Rx
OIb%
K/ k
Xc`*
4RUreQ
^IRT
h?)XU
$|Y5:
`f`K
n7 q{Mx
pF49
*(b
BQX2
~uCm
`- $
RupDMc
&Kct(
!Cu''
JiC^j
#[ .K{
VKHM
?Vp y
? Ta
G^/V
a"
O |$
D58 L
7t~Mm
IfHr")M
OmA b
/EhF
R~mpK
.dZ
H=J2
@rTX
sW;,
|# g6
rY7oH^ i_
1]Ufg
u+4-%
2'+M
]vtb
LDy]#
o`j&
3 h=h
i:!Ss
f)?$
VH0;;
XyOZA
UrTwQ
K(zmY
fM<~
F1.nL
#^l_
|{B5,
*&TV
Vn<$
0Ao*s
OEy%
3pTon
JNN-
FL~?
MTjE
Y>K$
n{UK
2SB'
IDisposable
RPs$
o{x,
.^>*
Mo!TPRD
W|HG
")ZsU
Yk~Kd~
[@)z
R=>h
Yh&.mX
L^Z/
2YXrz
2QQa8
4;A6;6
te'e
)>SW
N0TH]
{f)N
bKV$h
b"9N
i" S
FWb.43
jU^C
a9vw
vcMv
Z
4C<W
uck=
2nW\
D[bp
ni E
w[4 .
q. n
+t%4;
md]*
e;YP:
3wRK^2I
[j8~P
@cR;$
;gS7
40U~
m6r#O
e?&A
:"WI
#RU"z
eo*"
L{I$
^LD
& ~
-T(xB
qi$rT\k
?*J-^ (
3%md
fR}_v=
EditorBrowsableAttribute
p""0
i d]
Inie
RT(x
z.':
%<n
Lo_KH5BI
`a&%
8V>Y
RF{XV
d==&z
M` $V
C01O
RX lY
S,<.
hHCn,
6UFao
uPC
O}6
(r6OD
vLq37K
a8q]D
'u=,
#GUID
55L 4
5;#)
g}r{
Trf%
V&>;
0AoZ
*GiI
.ct<{
%cV]
set_SizeMode
;<T'm
zDRw1-
d"K2
,j}&5}$
%_yd
]GPx
>bfZk
Wp4]N
-*((
bo~
LjLux04X
.A|7
N)%-!
0V^I
Cm J
CxN!
RR2eNru
9/|%/
W G=D
g{;a5
eBd*
4[s&{LD
- {
f4n{
w$D_
Q9<O
5j-B
ON-Y
iP|`
{tC j
?R^k
tdg3
gQ'
>iyb
foDW
`Lv?
*R ^
y]K
W.D?
%,CX
\0|U4
rax
"R/W
vOaC
M<ls
,Mi*!x
O2<kzL:
TS}P
M?"|
^tQR
B":GW
Hp*V
#|9[
2IV*
ZH1?
,)`f
GD=o}
<& H
|&#Pk
djoK\
#W]A
DjBWa
b ;bU
$K0=
@9vj%tv
;UP[
, +]
R3OG
=eoJ
kHN0
Py?9
Q&"I
6@/g
>%d2
4sPL
dBnH
jGb_go,
gKI~
k$q8
K~s)
T"142
JOz-
6Pc8|9|)
|PX)
N[qi[
]%Y^
!#l<&@C
;H5Xx
`;0ur
~K=9]
D0PwS
9?g]
T|hu
xvh^
b$`{
*DPFc
P~I:
Ckt)
ToArray
4hnO
u rN(
G0SS`
[4OwFj
jn X@
k @Y
PGJ$
{A\B
I;
2:zd,
QS)+
W3 Y+q{
+L;Eb
.A".
l,lG
B")I
{Ya' |
7 9.tr
p+1
W^&h
NQ(C
](>p
~1Y XO\
/YV"A
(t{$ya
Gc_g&
:Q3<Q
IEKqT
[QU"
YU"p
N737
=7P
@u:O
lT4-
"YQ-
+V'R
f_U 3fR
K2I&
_=!t
G1R
O94%
M N0](
E]p-
?[v7
IEnumerable
C92$
ko[0
L1Fd
DV`@
SL/D
mc-$q.2
B=$/
$J ^:
byM}_%w
=cyW
&@z nD
Lcs;
(=}Tg
+pR#|w
0ooh9
o"{7
/0(p
gx;}
rA5e
tK6.
ToGJ
`lspm
A^ g_
tn&5PiWeYj
C=YOL
+7Am
wB(x
F\u s
r h`
pTb@"'
YP+5
R6I~
`mpc
jHj!!C
Irgu
yUv0W.
-<p@
Y )%
5TMu
'K` ^
m~}aY
DG
$obr
FhIU]
d[u5
;V Sk
R?[vhy
F~h
wgOOt
l`:V
|V%of
O<s5
mr=G
1j 0
U+-/
x\YQ
+ Xf
]P;/
N6z5
S"ddR
U2+?gC
->'H
4 o8
k)WIf
V.(p
W0)^
QP1X
~ZGK
(zj<
WD Y;
%Y=Z
j? /Q
:pUX
<nQu
KF%pQ;
6O;?
B@Y0
=4lU
%{(b
@ g
H/$w8
[98/
L_"E]
1$Hsa_
btlB
qAC]1
Y;H
a}u~
UUO8J]
^f4N
Z<c0 ]Y
Nqui
p 7-
LO5u{
BN/'
|`P3g
\W OB
7c25
CaS_
=%Y$!
u0A n
/f;
Wv8
$Q|
z%E)s2f
HdDK
\/B%
SZ{H
]x.SB}
9YAD
EZ
^}|hICGS
mR S
6s&RK
V uv?2 j
X}(m
>O'z)<j
t8?k
K248
Qanm
Z y4
oOU9E
aX@
Xyle?
}}30
p!4A#
A?c9#
K S
-"mG
`#$+_2&
T q
$ fg@P
Kh16
2YuA
gr}(
5}^^[
,r.7
oe#M
W]Qb%
Marshal
'LWU
aMtcZT
52_k
CiH4zp
7=?
*sor
3MS|
tglg
Y3`Yp
!Ns!
5y]3
Pgz[ ]
xRpp
-pji
P5-f
f?Eg
"ihB
6j"Jc
qm' F
uNJ-
Khd7
R_4 0
GY <.x
MaHR
|;{)
|:f=
:UBf
E58d
~l2w
U{QRh_
-:(cRG
Ogfv$
'.w
V& (
{8s 9
~U:wQ
$ dP
DAez&
vnC!yS7
D5bD
_Zxdq
R+.M2f
Mih`
voWIu
LF9_e
B_@B
k3@)x
L,/Je
rRfL
F tH
_mCp1
Tc+M]
PWwFCs
~6GS
;[B%
dB39
Jm w
o&p\'
n@c9
:`Wx
HHZ=ik
Q*^<B
](M8FB)D
_3U
{HR3
'Ua#
a-v?!
( Z+
c%pO0
GxxboR9
qBi+%6
*B$|N
eTxl
~3.j n
0gbX
WQ j
^@y
tD"{
Mk5`k:
sJz3`
AppDomain
~|Yh
Ad;8>
bn>N!
xytc: Y
q Vs
"r8^
w_0+ 'fo
Fz7r
B+I3
S|Q@
CGj~"n
BKjEmw"
cw=1
J(
@|Yl
K&Uv
mIxF
I *FB-
~~x%2u
:r_[
uVk
iBH/
/K\m
w !I
xt)
!'f
+*>2'
!Cu)
4[.f
_j#
-ZLJ
nF7v&
P8 H
={{0M]n
es>5U3
2euk
1i6a
C6FNW
b x
:}@EhR
lep h
J7#5
f>^/
d"$i
waMX\
~-~8
g#Q0
Xv3'
f$ <
~NwQ
eAF6
saPWo
y?7
<lV@'`
Control
/52k
&^E`
\zP!
BL <
%:z:
yyrYN
#`S$
k-zBT
~2j94
]e{|
7_:B~a
yfx]
PGX@
Q-ka%T
tUQ
>p V"_
F_'
cy&P
a~X1
LDf/k
Type
_* :X
oNMi
Xm5(
7Sk<
JFx0
MD n
{69F
T9S
?\v#5}q
C4x"3/5
#;Xa
:M';
ZKfs.
`0,eb
I)^D !"i
Uw?G
'z:-bD3
A` (%I
]t$Y
v8p#s
>oI-
QNzO0et
G= _
&MD
)?-m
!O.w
"!|) ?R
~ g4
"ZIe
[_L
/qbZ
i1i?
}?)&
7%21
we5~
x^4!
G*v
'>Ut
vJ +6K
+?Or
^k#a
'iPqEg
XXF^
?M,M
,c|_
'D?W
[0)
iX+
C&DD
WowX
>Lp&
Oi.k
_L .
CWV<
PX4 @u>
>CQp
's.2;z
M>v6
k7~)
-b$G
rL>|
(p Q
AbIT
D"xfd
5&8Z{B
JlbE\p
4b'f
:`o}
..CQf
icOl
dae}
{5.(
5/+~
yM4F
T?1o#.r
f005U
'?)6
md:e
qR[+u
H4fGN>
>.v~H#
"R@J?w
HA5
)c"j
62TM
$-YQ1.
a9L/
SW ~
E9`E=
':aT
TZQX
System.IO
BWm_
L^g?`
3P^@
u6D7
WrapNonExceptionThrows
:c`i]6;@YBfro
<D8.
] 9N
M=a Sn
;q$5U
/lt**
`q)2r
\o/x
,$:
P\ Y5
1avM(
@h8C3Wk&
(exx
%G3W
K-U/
OOo#
g(c'
S0QQ o
-^.<Zk
I>VY
=c{W
j q;
gJQw
8n=E
~ 2:
0DT1
dI??L+
<_?h
Pr<n%
X^1&
SgmG
)LT}
$D3"
jCj 9
;dv1
dftgrtgt
Bo;t
B AU
B`01
Q La
JbDDL
:L[g
hn/%~r
*?0
F >l
s[Jq
Monitor
{*Q!`
L*P P#
P(;Jt
U`bp
<qn
uVB>Sl
PERl
a Fj
0)!z{
Z en
K*o30o;}
j #lD
N[)o
L^uu
0NUx
2F'b
5VS:
#]A8
f9z9
n}|z'7
@%qq
<4 F.
:cz`
St q
-9j
`b+5
&?7; y
ObK
+U,>m
ahE9?m
H)`8
19e+\
`,k
CZ;py
q@ W
& n2;
y*Q
e|&;n
OGRLj
8h3}
"#l_{/
mH3:
:"!.
lF9
AB63
t b
~gkO(&
`.rsrc
N;d|
rRCQ
F`KG
l.dp
\f4[ib
Y_`ln
vHp+
..OP(
n$lMm1
`]'8
Kk s
WQ*V
F0u\<-
-<~=
=m.2
G35gK
JA%5
\Bc'&
QnBe
6B""
5EyR_
KX[w
g"E {
K3Y2^
q|N%
pNWI
rYP]
xI^ld
*2L +
az h
j@]9
|\H_
PH]_
a!n9
Kbaz
*` A
CJ!
9[XranC$
Wv:#
WiIr
S48 )<X,
mZcDT
Ka@^
&;F!]fN g
V@Q^
gJ+g
AhxT
&gv!
S,U
^^ c
-!/|e*
^{P]
5] k
GO<7#
W7ak)
: y
yN>#
s* WS
,eIb
kA%r
9T[>{
@Ko/>!lpH
How6
B\ ~8{ <
!^U,Jd
S&5]
z^u.%
Daa [
rwOG
=Haz
o} !
bpg1
/ /.t`
q){
c.?O
w+ oN
bS4}
g'w~
NBum
B}_5
?hh U
{:aD
^layT
`-Y>O
(
@0r B=
c0p#
p*Q$~ X?
p/33W
| +m
m .A
8=V K
i%aU
8#v.&
W&s/
f[<w
&>#$?
fCJ%
q};z
vxpQ
7iONu~
#T~l
,^g
R4X](
({#fB"
9 1o|?
(^r
o8=V>
.0-5
9XGX
Xw_+
e.r*d
E7l_
<Z Al
I?L@w
RdkG
2t]Z
pH.*
Y{m-
3$sj
7{`
19j*:cW
sk({l
H0s++
E 4h
9U#<
c.jx
#C*3/
^^C
;c$/UHvB
PlzE
7tcy
@Xkz
TNTf
>]Q2
~T 5
[nTb
>v#&
1I}=
b8O(;
f?C
v8J.
IHDR
S_4Qe
nHZBm
f@H0
Vwh
}~i&
q<onh
(1!<kx
RDaiH"
Fg[w
2>"
>a5W
c [7
4hE
x0ZMs?i
kPJ)
K Cr
$93)
"MWM
(WbF
O%7Z
+ -
OZwk
h( 4
jX*r.
4@1vf
>F9$
p"-d/3Q0S
[!G
zLd(9
Fz)
XR?[Y
=d,
n3fe
12>2
>% 8
_3km
Vk}t
)d Bq
C_{`
W4$*{
~+B$ C{u
DXMYT
hy<31
"KIX2
v=n-;
n;v
y<I/L
$-gA
G%Wz
@lN5
bL#d\G,
=#(p,b
TJu4
h M'
9Q[
j+mO
mI~G
*LS
gW*zv~,O
g-iRT
t[ug
*:JN J
.#<PYB
2lA@
fnFx
"s-#1
dxUh1
L} D
omrh
^l44<
)R3~
cY'B
.&cX"O
%.!YsB
q1]Z
G,",
sDLxJ
': >j
gP+A
)s<k
x7Kh?
,ZhRL
Z4|4
v2.R
5T )
V\Y\
[b{4!
A+k
Lk3H
& s
: ?G
#Strings
}< hb
HGW`W
=Bc$wz
Image
0{/~
%R#I
\?l5
Vbp]
xu *
Nnw Q
~S&m
&qv9?`
xJ(4m
^@IT (
+b7[
9'h!
XI9#
\x#y
M`u(
{a=.
tHX fN
:U<s
N]|
A?DA
Y36
kH5
90]9
Tzz
[O8<
FvPk
^@Pyv?
ln`HH[
C =zc&
d64G
>_o*
6'LLbn
g<Wci
/Jeqe.
v =(
>N*@&,bG
-e&O:W+
'9|l
u%V/
v/\G!
H0bB
(XD"
9XX,E
!OSP
it_F
UJp_
Xm3G
`aV.
ys f
W tVI
!; Py
+E*+
KDVKP
$5JU
;"1y
g[[Q
Application
tUWJ
%'R6
E*] EB;I
R>u,
l lh
+(0P
T !%H
SRvrak
HE9v
UGHd
*A]#'AkR
8:2I
t!Xqz
P~8>
eJ9tCw
) lOB]ioT
._U!'0
400w
s*n
o.Um
h=Hq
9fo
E:yr'
GXi.j
{;k>
'SAF~
)u]GD
@Zb)
{cW`
S'9~!k~
yMoc
E:S#c
!AHMe
? `W
^fT\
>K,G
$0-o|
tFn&
F[-,
59d
g2qP
{:Hr(1WP
"foiq
P CJ"
y*MO
7}P.
tB7R
" rN
gV-nH
< x>>
hn[
@Zbp
imFm K
\IhhVC
ura
$ ?8U
PU/ i
xL\S K
Q).'
.=S +
va!5
]}E|h
yQ;p$
|`C;
fM_s4
Z1]
N0>dI
M{Xr
!LY\Jn
0}*b=
b(zwI
N vil
NKQ 1
I3zcH
1PwI8^)v
FJ{nZQ
(8KK
_E_.
~T3_
p(.g
3<Z%<Hh
UL(xw
VTzX
o35P
aYTT
u,sL
#2VW
PT<:
vhZp
};fV
+ g5
<+UB``o
!6 D
R I
#QrNZ
_/;Q
dP-X%Ba
5n5Z
h3ML
/nP]
(P r V
g@qTk
fE.[
% 1'
In]8
AJ9j]
4,Z'
|U'{!
M$.s
jDY@)
2y+r
>'NI
?^]P
V5?f
r-I5_
OiTB
77;2
BP]
=#WnAD3
4Hx}Z
!e+TJ
jOWR
Tq!M
T^ %
hY$1
j ju
ocjBG
!Q4T
Vmy~
"ll>H{
wb?J
*cRl
L\Y#
Qn`
8)ho9
/3>5h6
K*"
s;`)
tV(-Ld
o3^l
Y('7ok
%BH?u
HjyA
p*\X
JZ -
2*hB
[P2r5
"><<
8U$(<9G"
CgpkW
`v;@As
z/0=
eAag
t5Z3Q
VYBuL
+2u p
LS/(
\n{wj
PofI
ir]''
` ,(2}
{= ;
<>"*Z
tL$1
x{zC
_%GX
Uy`\(v
3;/L
=Ic[
|K5*F
Iy"pf
7{6;
,GE+4
G8^/
FqH@
"2`x
RU'? j<N
\{%P
k:bS
T(qR
yg3r
Oln`E
h q
b tz
IYp-NF5
tb:h>W%3
bqwT
$?cCk
Dd&(
#^z<j[L
oY&h
wa(<e
=FNA
ZpYy
Q FW+
bB5W
v{iz-]{
{SE!Cf}
ig+jD%
284oVzc
U ;F
|?0> HM
8b7N6
]Ba1
w+NZ
>6wv_
4ux4
WML9
0`m
6%!X
+9qO
NWfu
)lYU
Q/@3
fn#n
V<3M
}92X
r?E(
!}e( b(
L 9_
RV 0*|k
'"cq*
5%!}6/
ValueType
:l7e
)J,W
set_TabStop
3/d&
\.i&m
S}?)
Rf.k
L'=/
qx.
d"%g<=o
s0&=*F
kYA!
.~Nr
VZ.=
<' ]
2`*:h
-BD)
iJ'+R q
uHQw
Q%8P
Y~ ,
N f @
P?H$
Xf,99
Y_'K
;mG5>
k2r%
-\!44o
eX_W
#m|s
^$wJ
=2RI4
$0%;
3=f7
-`-FA
tBdC
ia\D
Nu]3
`H{v
8wh%
b9FW
G4Ub
/B u
>qk=
("E)
1gI1:
knW~fV[
sZ O
Acl|
FIw*&
Te
\(_{m
.B 0t
kz("
BGmS
;UbmYR
O|/a
lA0
0>M_o
k- Iv#
ON}
A?4?
RY&9
Z3c<8
Gt1L
+%*)
Be m
?2fO/
>?p?
V(a
oN>ik
J5Tp
U%`B
4t>[
URh<
.x9'/
L[2r
("Tz8
[!Y=
YPJ6
FRQe
eP`v
YP*\*
oF>8g7
l6 TW ;1
I[ 2.
rbt(E
pfQj
@/6t
H/WYj
t7VE
x(;0
`#Xp
p?$7
1nrB
$va=_
)h5,
,n#R
VRdU
z:'Q=OPp
}UVA
m;1S
o8-K
m'+;
qeA
,.%)O
0UJoh%s
V,EX
J'/O

iF NF9
{ BY/
\-}j
0WkKf4>
Q8|.
(&bR
V3)<2
uf4l`
yrM]
BuJ0
"4;w
a(wQ
k sF4
#"{'"
!5=d
M'F7
W;#'
bq1FE,ZS
:]8;lZH
aN<oo
rV .
M#9Ye
Wj)
@~2j
\aE|$
Y/G
<6x4Y&
M!Ocg
+Pw]
aHLzh9
L>od
=M-:,]
Bmiy
`dPrp
f\Z=
P39PO
@\{#B
?HJu
6CXe
QYNE
""%l
s# w
Y%K^ z{
[7.
gr @C
g+Y()>
5b'E
WnQmx
Y-gIK2p
2f| M
MWef3
PBU<
Nu@d
/?7-W
2|3
YS: .
A`;2
KZoX#
l3 9
kPx
F}>_<8!x
1XK"
;26bB
k7y
$ax\
+dwqEf!B
&r{d
.ctor
~}AK
H@y!
wOR9
PD32
/b`&{
Td35
ve/h
PyN~
U7",
-(,
Ry^1
\gk_
!U0{l
/:Dh
rXuH
)ksGOq
PY]*P
gV*S
]B,L:
G `
b|$P
'k;
7RJI{
"'(u
~{ D
D87=
|H(i
T0gR
Q$Y,
)g h
NKj_
_7V}
&.Et
&=G|
?V!S
Ve2\
&kil
{g4Y
cz!X
7=PY
ev'V
C2Ea
R&gX
MAhT
%f@(
tns:
FFYSY
_ZbF
_BXC
Module
l#[a
Cc~ |
Wop}
GetManifestResourceNames
TI1&?
hJ$[`,
H F/
*\sz
CN6Si
w~]$
{)Bw5
@.reloc
t :E\d
/^c%*
6& X
bHrw#pS5
ejmy
!;{@
;fuiq7
!K1}
?o;G
*m;d
>.%uX
=Qux
4W6.
\_7v
#^G2
KetC>
XWbL
_Q H
IXwH
Zct[
u:h*?
1msV
5L)<
=l ^
J<(v
B@&E
'*4.
Bo3)_3h
DYJ6
x:dCt
Is:%C
TOW^
=-{s
Hy+h
Eq0
3TO
5G$9
<1.Vo)
cl;&
IOJY
BF8,
25)j{
yFM^
*dcE
y p0X
GC#r
OTY]p
0YYW
'oh
geE
s<7WJZ
}_uGGV39^Oj
o3hIe
I7k3,Z
%xU%Q-
Qw%Q"1
cl pnG
1-K&
X9DJ4
{Z`H
1dlPE(
&/<7
!l4|
asZ
}L"1ma
4PUm
+dY4{
9dS:9
o6lX
i MIS
p9DwY
=cwc
>m6U
:R 4
=~pT
(cMvm
- Z[
*z| Z1
g4Pe
\B20
Y".a
_|$
dYn'{
6iNj
O2Cz
k @k
=Q1
w uD
P6bi
+^ E
]) b\j
FS nc
8lT 2
'uF-
0;Nj
bk,c
vqU_=E
)H 8
^VWR
6DeV
$ev{*
p(bR~
8X]Ja
R%~5
<Y)(
5^gO
9>Z@
VdB'In
T5:
?[u+O
d:i7
_]aU
yUN,
"'Kj
MUaY
$x&r+"
0VpfG
O<=&~gM)
aOyQ{Y
G|JjCY7
0!3u
XdU%
70]t
"'^
k zlV
VX"t
CUHO
o075J:
y SD
fner
N/7Iw
oP q
zte3
hVzl
dpFwKb
.yt E
Sey6(
L_!jK
pv<m
0.d;#
mzuD
xFytS
kiU]KMK
eit8
x [Y2
W,aY
r[2
V *h~kM
[tCd
b1]+
0j}W
0F"Mn
H1tU0
$a=?
\A8k
[Z(!
J aL
-`;.
0'A-
ctdT
`|$_
B;k\
G/y
FA}q#w
O<99nF
P7Y2
f+2L
{M*b
^&:s
.Me
VGZ$K
.bim(p
88;[ }2[
T#4t
" eX
a0=b)
BGj~f
=/ $
!89Lw
1/ ,{
oq"dE
ffu1H
2=SK
Ku};
vQL;I
5jfo
"j~
sH; %
wZH
"mWZt
^h+uF
T~q=
=NZ[&!
8cY=%
|iu9:
dd>j
-/ /X}g|.5u
om"_
,D}^
?/FH9
S:;d
o'"/
Z CN
)iiS
@` I
|`J^
v/X] o
}M,w0L|
_w9D
E[w]Q
IUhc
cB^{
P!F|
u}@^
;Ad3
jYeY
dhJ2}N
1+.#
J nDZ
U=[9
>>x
}lmWl
-DX:4J
bBP Ar
SQ@w
$`>L=LFk)
~bEo
w`R^
?yJX
Wu KJ
\Tpm&
2-%e
"WEg
T@"uB
N`m>
=,,&^e
uMpP
^N/Yn
! _;
9L\m
R#o_
AO3Y}
^ot,m
B5IC
{28-
l5;2f
)5;\v
k?R_AH
pl8d
0Bzi
"X0?j
Z77+ sm
:OE8
.]{ZI
"Xh
(p:!r
&vt9
IComparable
9h"R
Q#^ }
V@L[H-
cd[$P
g_e s
_B<M
2+lto
=_M3
[k-5
Cr@n
*&lV
He p
'09`
k0ZW
HT:S
~o0&
d:rE+
TQ{zl
mL[~
7 1#
r>}_b
6Pz/
8_-F
R pW>j!
O.}8
e@ !
?=5o`2
+'{:
N#T \
&VYv
]-YO
j: 2
dgSR:
?e 9
cv#%.
R6l7
:_f#
+Z *
Z_g3w
F|qu
Ruq@~
6f89
c ?|j
) ]a}
X &|e
{SI]
G(T 4
_Eg+4K
4/C.
set_Location
?B)D
Bwbi@
["jq
KVq
{>QX
_)1mc$
*{/pgz
pZ/,
<8 C
6dRy
dy\
13z
-7J&6
$TqB
\b?]
5k|5
get_Evidence
OM#E!_
BSJB
IpT"
\^ b
DtB
U)z3 AB
K%~M
~p8?S
W>,9
wOua.tI~@y
Tcs~4
"np!
4A2YlN[
obc(#}
F ($
z#-S
c,R
m,f+c
qug{
u2.T
Kq~$k
gZwP
l,n;(u5
Rw)r
}!]R
`( b
b='tyD`
gp!Fu
+\IH
ba9W
MxUVl{O
D`P&
lu3lCc
/nIF
, 4i
!jPM
cn!Y
c>^a
b@KZ
gAMA
m C
<,vD
_3tK
}%9a
/D".C
h+=B
~cZ;
/+E-
]?O[n
To\.DA
k1BGP\
z<uZ6?
L T[
U/I2
?B=Z
73dSEk
Q?*
kM"|
3h`E|
r} y`#
3RNy
YS/E
~C/ s
V0TXg
E$,IV
bov9
:7}fV
IN`f
wF3
BGt
Rb &lA#
Z<u [~
U?T3
`7<Wa
>R/V
^ Ro
vSB X
S>GV
c Y|
H,B7
77K
BDXr
mJ<d
,e(^
696
:]0=
`|~9
=r'+
g][?J
DGo
9)T"
\Gl(
/A<X
U6s;xQ
p=[
\h:Y
TTm\
&4Z4
L4]o
uh?y
V[.R
b aM
JN&u]
wm/T
/f$+
?7]+a
2cZ
$0V:P
f?"B
2018
Gae"
XgG/Be
zyy#
8ikr
=6Pd
IW4/
R)NX
i+1[
/;^Q
" @F
;{?L
[#BW
Oe73oK
_<ee
fs5]
{3:O
;bZ.
C1Ou
pE)X
-WrJ
pSfBd
xO$y
/qG+
s +<O
(Ca!
%H+CX
3d n
0`g]
OR%
\78T
BaZ/
?ug+3
},*_
'V|W
*JN\
F5)S1E
fe1h
"2G
<S6S
wQV#
':['j{A
P1vY-
7Q7z
tb!U
p1Yk
3 +@
R2mb
s1~P
kvXt
H^-0
\iviq
Qs2$\Vo
!F"m
\gYO=
2ONr
7Y\f
!(
FpGx
b5?m
YB\5
%`GR
I|b
H{bI
(3~)
tD;N
_Sme
[wd3
=u:L
p!'e
&3
k1n~
Jb|~
H$ j
wTea
o,$Z
xB`-],
etCi
'q>F
D]T'
cqG35Pw1
f{ n
=./c2
1SUo"o
KEhF @
>]"E@l
?G i'
C&xpf
0B0e
_7 &
R$TW
\BR~O
'/dM
4>&|
t4ag:
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
pvSk
L'f
@XDm
P,wNXF
$gzZ
r.%v
ifnJ0
~&I
0.sE
.| g:S
tw}}
4< +Z#Q
0ZW5
mscoree.dll
3A{1
k[S`2
EU{u
Kb%
ynr7r
-pua
4_Gm
yg?P
}5u
zWM{JU{X
(6z$
r yK@:4UO
^5d-
#P\2
#Gm'
1*1Q
K}o{G
C~cK
KE~R
SLb2k
\0Gf
O|k(
<BP7
`Fix
$b]L<=
]g|s
ZF,n
">kBM
2xIu
A0/iP
lb~+S
JmbK
v>z
dk8VJ
;_B9,
dFV
8g95
e1ae
r)P
2eNDG]; k
Gr|Hr
z:q5
0>zm
py'6z
E|hM
vM^!
%y8TEY-
IV]w5
Mt8`I
wa<2
{{,5
" Q `
;_[c
QE=(ND
{HOZ
!9lq
TjG_
OA""
E8&p
:qO.2
fw$G
*!IS
= &
cg?p
.u[;
,GVH
pi;m
73 "4
xE8"
todo
^ 5g
>zL26
`%P
(\q#
DD1>
61h
mR6 >h
~D={{"
UpX#
NDS;
UO t
^2~7
abh
j;Sgb<
Ng9R
)[Fj@
(W M
L BXJh
<X{!E
qArZ_
,(Kp
<GPE
ALiBpi
&MDF&
<m0P
y[_`
~2 T
6:{~*`\
u9HX
m}I5p
FXvoi
Q1Y<
Xnb^
D[o>
)~k!
u#H'
SOxF
qbYByFNb
!b@ 0
)m*}
_WJa
P*@N
3O.!K
0r{w
?]
`o>U
0Sy(D
jn>o<3
z\:/
k,tn
2ovZ
b.3
C73*/
QR+a
${
1 Ui
A8C4KkA
)CdA)
.(WW
`tA5
veYj
,eM6z
T\=1
<'#
hf0(
C<.D
Kh)E
N o{
E=}A'
[2 J]
~sgX
uSyz
86lM
Ewf\
o!p/
SyRK
kz,i
a`^z
Xj!,
S1-QP
5pC/
mbMsx
J7pa
% s2
M8_J
<-lx
1S@N
"*VAK
:V/-wU
*U!4
`< r;
2xjw
(6Re7
]3SV
=9C.`
okfg
IHbqge1
a9?g
t&7e
/\c~
w D6ub
z>1$X2
T4A6
4"-?
}OF{c
g/AwKH
yK#)g
l:_`
0gB/O
X]J^
R4\
VE3W
K\ K'
&* *9
D;u.h
QVO)
S;qn
|q1'
&}~
"@or
mC 5
GzdP :
6It~
3]^w
}\/_
%w
#Yk<I
gi[OJn
> d
@ L.
JQaS
I8@
/{gr
u#yY
*Lq$
dv=XQ1
E$Rx
1lVnO
.ZL8
v)ejx
\ )r
W6.r
.bK
Hnw%R
<:F^
wwOO
0eBp
D-ME
UG67
sc=(ic
&Sk
Y [8
4z [
V%/|
pln{38
o<BL
))*.V
JGTg
:; _Bh6<
6@@w
* O;
P.ar
EGGS
/Ifv
-se&
i&u-
n)aL
o18q
WpBA
|j1j
J @f
RQ" E
y^q*
1M<P
{i@077n
h9YB
iq eL
D+F6
<7U<
FG`t
*G
&?~Mg
$6BD
mG<e=R
4!2|
}K|
6q-<
V0=jq
kvG\
fGKx
beQ)ST
(@Id
=JZU
Th{9
9d'U
C3'Q
C Zn0$,
gXGG
D%*7,s
W> g
>1=
rn^
KV?U
9B#h
,O 4
Sq]$,
E/x`
qxW<
hi80
tA( b
E0m|
[l"Dx
;'t(
XQd
id/C
EpRmp
g|b9
x`Kj
H2r:
(h6_y
COksks
- u
y l2
O9o
[[uo
P+3s!{
h2:dr
K5<fF
%D_m
^J|
7+"i!
&f'A
/Zo;
)0]\>
K4mot-f
5m(*
5 V,"
x=d5-
$JOi
*gG[gS
/YSz)JP
QUV6
^9rR*p
n16p
@/ r
B_^
;yUj
x75H
/q&o
X1_ C
H{Re5FW6
? j1
`r &0
c!?4
^*
AkIsm
0P/@
aUqw
{^xP
g)cm
14h
||s=
nD28A#
4XiyP
>r,y_TR
Yg?(
,h 8
{ lw
6JG\
pLXI
DpRd
1H5YHoSLD
Y7H@
~wV$
:Hv=
!H}ZqY
Ep+?
NV;:
XR2M
15.P
-s't
$"WY
MV1sq
R1]_^F
R\+4
R;$sx7I
|#}/B
L 6|&
-/o^
FQ%0
x\d.s
az>
]E(w
PG(_`4
_PF:
/L
G!t{
!5v&Cu
{3?= '
Jk[
$(Aq
3XVB>
*h>*k w:
hsEe
ey9Lb
4A Xy =
I`%A
oPZ;
Ytk$R{
chP#
QD]
QQVZ|
|#Mu
7I@o
FW[R
\ 5l3s!
<iKQ`:
YbFD
.3"g
6H>>Q|
5M)d
SwZk
i1YQ
`.?RtY
al|p
<{5<,^
!v@0
}"h
Yn Tz
56!'1
D 0D
qvAe
3W&8
/ ^V
et(u
1LKh
]X 8
LD Y
$^jn
n>ep
wM|W
>,1L
_7 ;
{]n_
v0k:
}-CzrC
O
!i{-xl M
fZ Q=
KQP|D
Z*FM
Q'q_FQn
5Hv&
:y|S
gYUxb
&%6T
WFCW
0bx
H7$%
!r-+u
sDD)
ANQ&2i
3BSc:/
A$&d+
ZAc,&TF
S~NA26L
YOEm+A
N}hyo
; WS5t[
5K\A
zL '
,R3
ms3y
@ GHn
7hr>8
M 'R
BDt)B
!h6 T
c y>Q
k5%T>p
)O&P2<k
Q@q=
4+GW+m
8}WHvYzAA?
Y&W
>U{n
pNOw
0hCH
3_k
4e+f&
-j_^
UTKoG/m
`H8Kk-Q!Ts
rqIj
]j <
%[!,
}e|;
2swj2$
BTlZ\
ICollection
z %t
48O'AJ}1
wS6
_V>d[
)0=*
h| ;
CB5x
;7=QP
"g#4SH
6r[v$
:Ffgc<
"px
[w8@:Q
AQ <
3P:*
l'u .J
"Ot?q2a
R~pZ
ZZh%Y
#0"f
UsN5
w#/>{{
:sIRB
qBXcB
(` ^
Gnoz
q`G1!
"OQ\
Bn}= C
]g~"
VzO\
ltZ(
HkIli
#)oa=
j|$nnY
3Ha1
A3VR
jnt
<5Y/{
@,"8
~ Bk
$A(3
wP6:
;>65
C e8
s xo
F?}U
@xbq
/#91
1^_%K/
1XrR
9:j|
`/b]
2R+D
WzVs
2~1b
#R\6
Y5Q
~e)S
^Y[?
S;H J BG
&:0l
8{Bb
++c
i%4l
a]+8-
[Fsa*
V57c
uB<o
&NHEm_1}
>>'6
<5)L
CDrL
Xn\3
6hJF
y)&a
.}$
5kH/5
6 ;&U>
#qUX
BBnr}Hh
q~ >
NC>
nEj@
DK'F
_n m9
Q?nC
hafc
0("
*D%O Z
jC:
!;3GC
h6+m
T;pVL5}x
b,#_
m^fM4U
ef+d
PgdT
N4lqJ
Z:='1
V.sk
/Qp%
G{u)
lj,'
sdx{
wW@e
5kN*
[ @O
KZ_!KIT
/0y!
b#qb
EZAK
ytUB
(*7
JDG>
;M N
gS Z
TJ93
K2Di9
SL1Pz
EWNW&
8mM/
J!>"
jkg~
Nm1Q
sI 2&;
1y~.
^LPr
5p(n
V<>$
'cu*
sRo5Y'
I5l&
8fjEv?
\#EV
A@OB
IComparable`1
TNX:n
dT
3.uk
rKgt
;B'_
V^K}
gX f
@*|j
/#q_
%e ^
gzXS
6Bb ~Ox
-WcByh
Hyea
F~; f
U_Xt
~Ep'*l
I S8
ComVisibleAttribute
YVZ`
<pQ*7
e^l?
Xmb4H ]
g~kQ
\L3%
})Q7
++n*^
Jyp\
@9>#
xpk"
X4Gd)cc6yO
C0 {
nh ^XtX
/k?G
U~G
s5#[
P%@sH
R"[%6{
(4'}
Fp.4
lpSl\W[u
v'rO
.p_(
H.x1g?C:
8Q u
5!n<
7GJ
% [\
zZjcI
V`N*R:
_B!O'
b61S
`{~pk
k~|h
MA9z
'v1xg
-D f
Pn
vB{R
H^4X
tj8{
!\ju
hZ">
}Q|V
d7EA
,[>W
o,6E$%
\)3h
URw.4ERW
#vC1G
!:<
8V*1
tRv\
yx)~
NM~k
_tF.C
t0f2
J_i+
(DGI
}.=s
uAtw*
YXkl/
r]K5
/^8G,)<
!A@dj[
Ylq%4@
k[ =
tO,9E1
ControlCollection
p>Bc
e3bf
:LHO
Sd/tU
#44@{
\<Z`
QD~y
p F|
w A|
2{}d
I&3:w
.7XFw
}4 Q
'Eh;
w;cS7
,)
^ x[
CTJ[~
]WG9
n*VO
Zc#C
$38`D
qaQQ<
cA{kY
=ttH
WZoVe
$[Sd
3"Lv
S(L4
lS6
#G17+<
BI1
o9gb
%P5D
!]JN
UP+*
"Kk~
,qS(
ek85.
Az$593
LG>
pKXs
D!L
S51
:p/cY
RXN`_,C
BROh
@DGS
I>/;
N8.p
?WPG_
`NW:B
cCK&,
Ut^W=
vDs .
n@Q!
9!_OS+$
8vA_
9x]c
yoIX
Q/0F
N.8@
VU8.
/w_?!
%A[V
xrF~q
DBPL
1]pBem
X -l
K&)[
H>?lJ
DhQq8
{!6l0o
zz$u
4DThL
ey?LA
>?-`
p5
)I*5
\"PdT
xKmj
ZTyl
hb8
a) !
``rh$J
a9B7
7M=S
9vo 3
_Q.@
xJ9tb
U5C%6
! &u
1SB;j?
U&_
mD*S
? Zy |
5MbGW
kUzr_
BZw-
tC:0
PgI!\
GetData
X?<JA
q0A#Snt
'=@, S'
l8#Z6
V0$uAi
~8.cL
I\j
'MUm
SoFh
GetHINSTANCE
xLsi{
c'Qr7Y
R2i
uqEA
a-;~
n I&
v=ElE
`j>-L
~;Yv,:%
CJot
C`d]
\< /
.\.N
\'c{
V5;L
riQ;,
+z!!
th0d
*50-
p4}j
]in&
c`Qd4
{j]0
8/:[
EF3Tz29
2.x)_
2* .Z6
$YM[
m/,D(a
xAOBM
Z/XZ
D3WR
&^lN
Vj+
gNB)
o+A
D6cw
-bEG
mM ~
+r1?
GrE-Y
cLNa
s]"I
6:VW
VvOh`t
3s6Q
R7PAb
0$e>
]GQT|
- l<
Ex@p8
VZdb
pl~y
Tr_=
9DYI
CmQjz
(mu%3
JN's
[^tvO@
Kx9v0
.@T)
hu#rK
EF"r/
%~i1
8)RK
!5WE
QnoY
c: f)
C;
Nt "%
UC!~
y/] k
Copyright
F _
+26/0
nn|d
/&nZ
6{
h,$5
p}0{
'`Ek
7r&s
\6NbSs
)~#t%
[m\]
+ P.
brv
\9yD
}qpQ
1j_ g=
gs
:^u
<AwaE
Gd N
=C$"
d.;|
yl K
*}-%L
&RG2
`!S
prVQ>(
G6d>
rN<?r
`4B{
IGD9.
;al;;F
7N48
*>+!
qx;.4
Y#f6
:"h?x
,TIR_
nOP]E{
ipQGt
6#n
s3"hN
KN\u
*uI?
&qOd/
>&nc
Q 7U7
P{E8
&`;0
-)WE
"tjI
E!y
UUn(j
[2 ~
W2 S
2+
2V|T
#H'"
Zg *dl
f1;
^z+
k&+.
g%~x7t
y*p&
j5J;
~NF
QN$Z)
%8KY x
6N\6
f>07
+B0>
'oLJ(a
&yr$J
Szf3&
CYb Dg9
A]n
odf i
-m"3
SA,vk
U{LB
).O
jYcm
TkljY
cc_6
rxcJ
6pxJ
>fFT 9
sTbK
+uK
i`"]Y
9oOY
Enter
Rz8[nk<
ek5"
_6{
"WWR4`
{l Y0
/7[$
@(;M
JFIJ\
3=R(
,KUk
5EKn/
Fut
7PNd
}~<%
5SfU
^13I
ayfefAl
Math
vj ,C
P@3$D
(VP>Ie
rKok
c=N
Kg9X
dl`~o
h+Tr
X4wx:
yXU0p
DbtG
+X<[
> uM
'] f
0N0#;F?
B<nVF
/e@G
3s8n
J#.E
7ZP!
uQg,
zb9o<
moi
#zYp
6+3j
cuW]8
d#z
SuppressIldasmAttribute
2x`u
Q?h>
u_xJ
,$Q?
,}8A
m$<kS
"R3"
*@}`
OH ,s
.#g,U
;jQP
W5:ff(LL
%OX4j
e2TL7
d+zI
Zbm68UCO
E j6
B#'U
IVG/
$?F4
/lYd
M w]Aq
<#z/
&Cqu
d~-L
FH T
]h%g
TtY)
AIWo
%]IQ
W*nX
/DI
3y\O+
ACud
:@"|
qSco
)9$
MJ7R
"3W{
,( K
=rAe
]V~uN
N]x\
#}Yz
d|::^
:TF/
=.H./
08%z$9
<Em)
x V3
}%{y
3QL^?
M@*;
9b6(.
C*Tb
m|HF
W8
)TR
jV1eH
&\3o
iXeK
uR70
'23I5
#zs+ C!
_'N3
@9<
A, UYZ
9fjp
eFb[
#KF0O#
"uG'
8hMy
@}I%
,F \i
yQ)5
'`LIGF
WI$"
n*y&*
}\Jy
`(G m
VpO
<Module>
d%+o
d_kr
MLO
OHp_
,8#*p
4lC/
Q\/6
y:
`UPq
xr9.
UMeg
#S3
H1, GX
. w|/
\j1G
<2!5
w]N
Rw3>
5# U
u&n
SizeF
CB|vQ
c $`
dkd>(
yx+L
ysi{Y5
tw\x
R7u`
Iv1;
q$ZVcm
Q,oio?
UCN:
; kUC
p>}
zKI%
v o.
Y1:`
+ WN
]uh4wu
w`$Z
`IVb
q];iz
Bk~RA
njghfcgfe.exe
#i&r
A?NR
!p* j
98X
u:zwaV
#<O^
-R7|
(^ }
K[/
7(V\n
+){I
Yk`M
/t$c
89dv
;"j
2~'
OAHb_<
XiJY4b
6D}Yf
r%x3
#@j"
-0Co
1 A1@co 9
Q-M)]
i_ y
J+~sU
p vS
0S81
+AXd
R0fn3CMb
-BN|oE
):Y2
#v`
Idev
|eo!f
tK|R
_W/B
BkYW%B
d]U{:
n&eq
ll ^
D4#/
-dWhI6
f1>3
u*)$D
hPLL
q++Q
set_Image
*g{t
; ^bq
Ibw3
.kpS_
PfwTA
qquP1~
^5*Y
q}AJ
e8c6{
fo!U
(h9`
EventHandler
KP1$
(;^ C7.v{
0M2eP
V9K x
6<:~iB
[a^UpZ
duO
;2d>
g%TMT
B,~'r z
El \
j]JW
'PAX#;
}Z>;4
gqW!_
=8(@
2fo3I+
ddoEk
^=J6
"Q7c
b oe
~[$I
g7v&%i)
%D+a
FLs^D^
OY>]PD
(GG:Fq=
>~H{
.&?Z
QOo5]
y>8y
KnAv
^%= z1aa_x
h\#Q
(spng
1Z
fX$&~
"oiU
}M{3
(;!7
2<U
H L0.`
pW@\b
TZ75R
u5kj
w8V;q
}(\:ST
J tB
gC1mf
1(u(
,GA=
q)WDk
H@I-
QcJ\6
yqlG
System.ComponentModel
M6 0!
N{Z4tt
44:8
ws'30W
1qYoY
It]w
~6p0
XP|5u
/.Vpn
^ _l7
sO*0J!
<# }
VO9H
>ETx9SY
fn_
XE8,
\H&2
N|\{
%ivY
#!vf
9OOo~
&d]3
I7eL
g^$F
KA k
B$Cc
+Au/
^ P+(
x:r{
<11C
cO
cG&~4bFL
.CLm
+x/_
nm@Z
[V,ZXn
(;:bXv
LS#5
U{/EW
(=f&
f?t&
1D2Z&
X8h
~.-W
w..[y_
7`M>
;;T*~
>Ew*
k6qK;-
.Vk
System.Windows.Forms
a {M0
]:yi
#I ~
1 43
=m"H
$XpR
]mhE
v8g
^ Q"
HCCh
}{i(G&
njghfcgfe
|,XV
='o:
3xz c
12x!2
3~TN
@? ":
y/Dq
+*2s
(+,K
a.D%
/\npC
hU_iP
phrWQ}f
!d n%
_"68u
i|$+
_itre
(SU]
GFf3h
}lE4
_NF:
uNi@
Ll/-
.Z*MA
&([,2
xI8Z
83'w
/M{g
9u
( [7
* XC+
;;~2
Dx,tr
<wAy
?&#2
&CT6
(=h)m
MvI
Kv@Tx
gzhKx
rC:y
PBJ|_wt
pX(n
,&d~
0}XzM
>\8
>A *
&}<5
5Km (?
4_W36
9`>g@-y
vjM0e
tJ4"v0#
!-EI[Z
J4An$
N9_/
l>=!
cDT\
E(\}5
_:2LO/ l"
p<.Aan@
}I<Qf
7y^7<~
<_fA
1,.>&
tAM=
DD:eE
}2 yQ$K
A xK:Yz
3(bSO
%iK7/tV
xEw+
vdo
vE89Y
|bqev
z5y})
!y03 <,F
*=wZ l
m~:s=
NB"_o1|
[TOQ
%D)pK
kY{
Gac#
y.~0 6
8_"w`u
e\KP
u3bP
GTI0
Nvc
8xQ K
QK_6`v
ps16
<PrivateImplementationDetails>
C!C
6n=O
XhVc
En:F
get_Controls
% -
no~Z
&> X
5S`[
`E'YR
% r^b
qXRq+
0V8-`
(L7dK5.
hn{_[
9:nL9#q
% ru
g\t4
-)bbS
3R{p
-~gEZ
Sxn]Y1d
>EZ3
fC
!tr%
Lh`G!
n* r-
6qHFM
@`Hlu
R0b[
;v$eRE
( v?
5})'L
[l>G
Ql?{
W9V9
^".J
t@L}8
EC"! -1
4 %$S
:<I_
zN/T
m4aE
m$VD
/WrA
TX~Nd
0BbN
J`cK
op_Explicit
LRK
KSeJ
Y& !
1M+*xk
#c (
` &D_#
c< i
&QI~
2dy.Vd
8Tg]
2 0
_g?T
6>A]
+o-a
221{G%
DEW&1
h 2N/
@4F~
c?\&
~$v|
/IJ
6/%|
#_6?9
G\H]
uh
40e#
"xLI!
Q&/<
+Sk
$4#
6O`#
ir!9
whaU
WK/D
V@&O
RqLo
/kKvv
gw(I"/
a J>
E"bdU.
K}RI*
3IMK
R7_
{sE0
X?-]
;p0.c
k[ U
ms_H
K-F)
uE@b
TC;!_Y
KRQS
:GS{]
`<s>
4)<~
$Z#V>
K/dt
|m [
c=~i
#k-#
O`1a
m\ 8
O/9P
1scg
hL2e
2!)N
sa(55
n% sD
<{sft2
0o W
|K1xh
D}bk
L50LAn
`ywlN
C[WU8L
Fj75;
NfQJs
u|G,
/ j{l
C?HB
j.yL
PUIj
get_CurrentDomain
r8E
YuX)+6
vDune_
"aqEzb
rh Qs
)4mv
}58AG
8eG6E)
~By7
5L,[6I
b<`
jY_H.
F{we
\$(*
B:f5K
e_V]
Ve/q
ByRF
g,^k
#>#`
D@w|
" |/
Co/
Kt*\
MMp
c<mV
6~W+S
(zYh
Q@bJyf
mns+
{O^Q
?GTd
bvFd
$BwZ
GAA7
1|f
7;"
zvdO
{wbG
B|^A#
g,^-
q DB
Tko|:Sh
UH7n
#Blob
j)1z
l{<tF
?95:"]%
`)uTSiW!
Gc*3
;8[5
_fZ2
Q D\
5[u/
MSL7
*D/A
hkk{
kO)=/T
I:]<
WE
F>1BC
=$UR
[m]l
QhK]
ZVQU
naT>
T,:y@
z6:5
N <t4
&O At
6PR'
a)_v
+'vf"
|MXd"/z
yXIL
ruiC
6r>(
~3 |
4B&?
IH~s#
~,(7
<t*n
F4 ,
_9 p
xvr&:
/6(T>
oST%O
Uc H3
6 g#tC
/zd
]gG1
'cA|
:fR^7
.lfHJ
`\=nb
7O//
0?3}
LnIipH>
XwMpb
lfC!
m"DR
%h U
":PQ[r
0#p
QnX!o
$g z
g :Q
`1C)G}7
L Z^
^x u
*QK4
$DWj
#"e-
oaP{8
H 6/D
m@4E
SY<b
y6*:#9
A(q
|jZ
&XPK2
!`+J+T
=oTix
'g yY
N_pYI_
PkKB
0`cvg1
e_94%
}}Y8R
uMrY
bMPM-
[%TH
jT.n
1DvC
X{aZr
pRh-
gt%fE
;pY
[&U?
wIDAThC
}[/k
nHmu
C? }
;v:
_Sbw>
Z lA
{##pwbP
!eZ`
}8Z
N&RG
*89
YE()B
0blTe
{l}/us5
n:ciHo|G
J;qH
C\!R
lb j
bA{4
M.i
r-~ey
fyg
,KXi
my3/
PRP
>aKsA
TEZc
o*5`siA
43bp
taOf
3~#;/
Ga%i
a 1~
N=OV
Qpkl
6*0&O
YJd`
lX*,
49)C
v9LIs]#
3ar]
s< r
o]\Z
bC XD
"0#G
:"P:U
* lz
X 1dG
8! _
f6dU
U*(p0
Z.8}
.+a6
g0:#
<H
H^Um
JVW`]
?R A
nb 8q
6.P\
O.h7
cvtn
G` `
arpm
Vt#&
Bd&f
RgT
lRof
< (t
6n\+
k3 <
`NQ&
l9>
7XmVC(/
i4 1
Wym1b
_TZ6WX?
]z#w
GetElementType
}7x,
[tY'
V7a|
3F;2
_uGKb
dPh1
<5
5B*?
H(c5DbC
Z3zW<
eMf\
@ "[
5*O.
TADiN
Dy$T
6:?B
hEUH
e4!?
cf6M?
Ue-]
w5BA
b Kb
6* 6[Z
9~NR
i^AI
&8[C
9= U
c`EU
$6_:
fpfk
zi9x
FkjU
@hc!aV
UE[O
SEjH
K`,P
.C}.
v f~$
FeYLp
eS"2
@} H
Jkpj
5j*9Q
>S--
XYc[
j1!(
B" ':
'f'&E
1PG0
}0E{v~
?-oY
\W A
;=DFQg
fw'
[m =J
_z&3
DE , gu
wf/.
"o n
7(Y[
KW a
3<,I=pu
A6~J
qr c
);<A
gt){x
J'n}
wS(k
iVCw
$by<
U248
a0s\
+ %
w 9/n
FWCi(
>Y{I,
.{&B
bqGl'
=]x
Y;7o
op,eT
kSl:~
t,aQ*
5PJ39
VmEo
{90u
$xY_
g0++N L<:
-4 m
R,b>+
EU&O+
AEg
6L1 `
?#5T
G^TL
{c\"
sHb \
)}\X
+9F- GQ
XZc'
Sno'
9CN{XsvH
%Rmj
|N1x
[Q*Nw
ualz
^fFu
AG6OM
?1
[q_
ig .
cs5E
b%x]P
(`eC
`q4P
@tp2e
iz|z
u!'7c
NB>(+$L
qll'
&@[-
MV'u
DC{Pk8ah,
m*y,
a3 d*
y6<b9
XR[)g$
+.=-l
J`9>o;@
.Fs+
A\l|
/_`7
\sJJ
{q.z
j/~^ E
qEJ"\
xmVW)
JoLw)6@:
VjYD
F\;<
1G- az
00eue
U:$J
lPbL
U[E(
q[<p
-#Fc
9LnQ,M
#a 5B
[#Z2@%
34|Sl8
Y3z;\ yJa-
~!Wu
GEr5C-
{ ,<
m-_:d
PUN5
<+vk
W^JH
}EAT>
4iV;6
:bhT
80 5
N8O =^&
$$k$
Vebpa
~Wzsu
<pMwf
GaU^
Yc}
|lL
8D2OLo
t&,/R
_M~]l
wRzV
;ga=
>uW{
dpIG
qHgvp;
%@ L
R/y6
4H!z
AsNmJ
3Sjs
X0Y;
E62P
Nch<Y
IT@QcR
%a|\e
/jA--
T~O"
Rl&H{
pW(r
rO>Qi
}!kx
'&|x)
rA a
Pd 5
Nq)PqB
P~N'
zw e
[ b~i
Q`U$
dBSg
'<6d
U1JkFT
53M,
:g8X
j ^:
.Ln3D
2G/*
/DS#K
0HQN
J ?aFI
rvG7
Y)}A2
x;S V
x&sM
iV|C
$XZ}\
cZ~_
0kS1yu+
d|Kk
Q*_Z
_*#5
'@N T
G,e2
{U*+Qo
PV'&
Yjt\7
^2ks
|YG:
Ap2C
X'rUE2
eq8f
[0i_
:{M
$u`H
]$fxE
kE_,
7C-
Jm
F\ c
R$y0
]q)
(Ph]_
S|EM"
0 Lb[v
$\kU
$?QOB
%GkV
&8)O
Evidence
Tj@F;
sM7yN.
M\"VqI
J\z !0W
QfVP9
S=?\
\h_G
b]+I
|<ew
;XCj
t9jL
OL,]J@
j3o
VirtualProtect
I#uO
]'e{
4^tI
Q9kJT#_i'
BSl+M9t
v-[;
^#%94
aN}l
1bJ9
RK7|
e-+'
yI(xH
m%mX
0b,h:@
rp]|
&f]h[i
-N:$
A8sE
r}1X
c&SM+
A=PUH
`EDUt
L_b3
UgyX
!?5jf
tSex/?
9.gyS
mgo_Q
'eYxG
# 6GP
Os6c
=cl)%(
uVB)
f_s3
[*Z
vBM0
H! E
J]8b
&X$c
=pyfJ
wnG\
> j#
g3*,
z2ud
1#4E?
}LqK
V&
9hL\
eT3 UL
Q>[F&
bp$k
PkM0
A+g:
v1P2GW+
84cN
p@R12
`'cCR
^%#,
n0/rO*
YIVN
,DyQ
v$7T
1ZIs
mb o
0D]P
L.e%
$323e03d6-5d9a-4896-91c9-73b84b041785
9V:Ps
q84O
=QpL
"WO.=
OZXd
H =a
Xi9U
A mc
CS)P
_b'h
})\~N~
% uiWL
pZ"-4$'
a=0
ZYqn
1T.M
\bM2
@}($
{*cx_9
={K
=lSG
v!ux
get_UTF8
6Xm0_]
%,h3
]D]G>
UK{LJ2/j(
K`}KK
Q_t5
A1dv
2bUz
czU*
bZ$%f|
LTRq
O]U~
fYQB
h)(a
ulp@
CR .l
7[d[
OLQT
kD J
yUE>E
*hw 3
#b@,
W Ts
PT2P
u2 >
* d}
W-Y5
pTPI
iEuw
jcb
}YXwd
fyyk
5Kk[2
KTLR
*veG
1]LC
=ED
7!\C\t
8,s9
tw$
*hIm#
Km8h h
uSc_^FL>rW
Yvk<
,lIu<
l?Os
XL; S
-=Yh6$
?+Nr
?4~}
r>
|Zafj
]$ (
Ph Fa&=F
v%AZ
Fzux
!*o>
8 LJ
4;|6
t q,@
, l*>>
y=J3
<a%
/ikVk#0WC
iej,
(%CL
gj.2^J8
;LJM
{3e-
I@sk!
%} /
ufgY>
|R9+
["{n
x0kh
ydU<
Wm2"
cS(if
FpK`
` (ML
3kvr
M<hTqu'
iw;A
L%M!
> 7w
s-SB
JV B
I!G/Q
ib b
4k 9p
: S
bYES
5\U-
U.:LBgn
!MF!
d^z+
<j5O
/Vvy
^9G}+`
Hd[$
*E0*.
A{z#
AssemblyCompanyAttribute
W[n6
V0AY
wOcJ
`R,q
A.|i
TKjw
NRn\.:
a!~
nAVF
d8c^
Ow7A
E R"
&[L22
5 n
gRlz
MA6m JEy
f;\k
#9$F
38s`H
41J\
&SD,1>.Q
4$ Y
1x{l
qkhC
Pl7Ldm
Y/@W7
L ,i
pz..wN
>._
zFl<&!
RD!7
s~BE2
%v[l
^Eb#
[R$X
`@4d
N:L
(upe
Y.|:G
{4.os+
8%Kt
i-k*@
^`~hz
]\9u
Q,('
u ql
_V:*
1^`P
YkH\
\ KkT
#"ySYR
XR e
6"mGI6^,<R
]DHq-2
o@*u
`V1y
BK|6_#
$o&]U
G|3C
z8/a
% ^?(
GuidAttribute
n4CN
EPX9T
!C:U
qiYm(
0+,d
YX.y
}P@t
B?7$zq .F
il2!
k^0@
Btche
mb>{
)okO
X}W
g&c^
xus}
o-JFz
:)' .I >
_IeKCU
pg|n
h6#5
}A{]l
Ff2|
FZWZ
j\ah
Byk;
'2U \
/^b($(
"4t
4vk3
Z)4
=$j7
]u)52d
3u_j
7URM
=kpy
GRrf
Q 3
y Kc
N]t9@
Q5 [;O
CnkA
<q_T
-wP@rd:)
Tad}
b2%%
e&&t
,3"=
q0 E lg-
vKL|
{W)}`
7Rft
y8k
]6$-
3muB
AK )
S9c
i<~!i
9|LR
[P M
nPs?]:|1:H
{Eii7,
Qoie
0Y@01
jK)d
dM|GPA
1O{(
HTl
KIibd
9C F
pP0QPU
"W$Q
3)=r
AC?{$
YBBfTwns
kq|x
hh7{T&
g1<k
m= O
|dI,/
(F]p
=!> p
Dciyb<-
KG"<
IE?"
W=~J
J/:
ISfHrx
?E^q
FY4!
OAV,
hG
[ KYn
1MA1
{a1v
k"(
k[d}
_[\C
T%|O
bp W
@v ;
,EF3
+)y>
add_ResourceResolve
f^vS
WuB0
~AO}
{yIrx!@W;4u
h }*nt
L$ )
`fgea
PR1
AssemblyTitleAttribute
'- ,d
AxU
"bOn
V]"<t
<jV6
Dk9z
v@5a
m%#T
6 =5]&d
N[tY
QD5_
f5mA
vAS^z
o`qA@g
bw_Dq
.kJ1e
X7Io
_kZ [
G2IU_
B80
u@zO
add_Load
Fa}j
:| s
MemberInfo
D%R7
xu;
+heQ*
xb!&D
o.H/r
2bh-N
{=g:3<
;UJl
g4,{9
A],9
7(1g
U"{e
h3x (
.XD=
OZFe
zvx
oafT
7tv64,
1KW#
6Y&:
F NO
K6NX5
*zs^!\&4h
8w
v%J9
F-Jd
Kj,o
=~<H8
iUA
9D>M
%2>n
xgs
gu"
{F7f
lDCoa
Irh&
P8bw
\>h&
Y{EZ
D%R[
{x\w
c ^}
id!Z
\ n>O
qg_Od
W:<?
Z5da%
/g=E
1p._<b
!%EK
Uy`1gb#
vBm)}
E*Y}
MkgLh
_ Wa
PJ/b
H%k@_
3QJ^
FIDh]
#tBz{
aF6z
}vTLh
HFsK
U</)
b0`"
5}(/
)q e#
#NGV2
nw;-
V$xuJ
y2^k
V8 :
0U,~
;zw/
BJeqm/
Bk0x
>e`MSl
4-Qb
F~A
@:@_
tG:dB
Xz6Km
F?oH?
N@*^D
TP_!
JPXT)>
zna*i
lU /@Y
X8C<
&~h?KJ
in$P
G 5z
b-'bGJ
t6eY
XJ"%
'bI.
N5Rf
Y@@@~
q`$3
%W=b
.b}(
;ZTNp
| (6
) f
K(@?
[%=K
BF*H
P6 Dh`o
YQ wkx
p4.
D$SN!
"p6a
5 sp
S"T6
t{"A
O.[9
}>:"
_$5e3
aG)&r
( Z=
pZ>{4w_
Wx[S
*.g!<
zg(DcL
)a,8
87Q;
',^vC
N9vv
KUTR9
.Dl-
VhdE@
g!_r2
[YIP
3 FZ
.uhR
":b
L@KO,.
l\U%ge
HIch^u
e{?>
; G
$k7H
?(`'
8DmjI
t=/d
~R[+
uu # Ny~b
[V*1
['/*
wJK
uY(?:
=s8Z
b1Gp)
@/ 7o
C)ef.
@&3rG
dgMY
z5m)
:KJ%3^
W#rg
iF]^
EX+i
IDAThC
OU,b
-d@ ~g
0.:*
JNLv,
r|dy
hi{6 r
Hl@N<
Xw?:
c~?
8 S
Unl)u|
0g>W
.O20
0@w)
KV9
DjpJ
Lhii
#a; fP&
y),D^i#
)o0ZY>
A]Ii
#*<B
:mO
l.)_
n-r0
$1ifj
Z$Nr
?BiU
Jk4k
l0R_):2
+7=(
%7"
gr!-
4B?\
mnRE
6[/N8
Xh*f
;?\[
-f]7-f
8 4r
<~%c
%6$zy;
nm-}
3|T?
d,OxwS
e}p
AiV.
+bb6
b ?K;
=XRj8
+$|d
bki w
O.3t
8]$U
DR5+
ujDTi
Assembly
d$Y
+nBCrB
6nwO
8@lW
U +c
tZ
:|t
Hc
:a+V
SXYk
L)q@
|WNM
RZa)Y
' u_
SuspendLayout
pJwtD
e7O l
<]y\
#~=
2R2D^
x%p\b
b/X
e4%6
** ;
en6j
?4 @
Xq-b
LV&b
tk<5
ii?: .cg
4>9L
VY+l
~Lli
4}HL
DItz
A6%{
{WtQ_
set_AutoScaleMode
@@+g>_`
3a VL$eI
HP
nTbC
u6bS
ya8-v&
%Bmaz
.R^ `2
EO Bf@
.X<(K
m <{
h0_'
5N?aBY
HS\J
|{,9
1lDP
8pb`_
!FNn
O`s3
yNab
\xUP;Al
,Vbw
w6~r
Ln`*
?'(#
z Dj
YW<k
s$*bK
JGE4
jL!n
$3"d
w <3
t6[pp
0#upm<
k:'#L
c93Jh
< 9$/
8}#'
FR %.:+
cj' B;T
vGdZ
ADu$
6m_S
L["[
:\bN
uf`$
L^,Y9{I
0j6F~
3:ZH
m0!:q
-R.L
ul*}
3~a#
fPR<j}
eZ[.
x.`:
;k9DU
,92&
?%VT h
?1|}
&>.h
J>5N
O1 oj
9)}|
t]}a
ZjQ7U3
/izx
?Q;U
#&?2
>J3-?]
L9,>+
^;rs
6Q ~
_^<S
l &4
[r(
+b:2
d$U9
@bo
:hgP>
pQ~Ub]5q_t
T*Zi
9Pi-
[n{*K
>2&*+p
Pwo [
0Yv1
?CyQH
!wV
q/gI
;l#?
'7UW]y
9"ZD^\
:1q<
4['m
k!_0#
R>/"
yvHJv[
n&<i
T+" mv
sQNA
Z:l9
I.nG
)pn>n
b*yFe
VFJRssUB
2y^%
%_9E!r 2
Qt>*
v.w{
)W([
-pvY
caG Eu
8,E5
aD-*
I=,2
1/X2
uB .j
za6a
mN*2S
LR?T5
=<9v
6)=+
kEqM+2OB7
IohP
bILE
}+*:
2 >|
yxy#+
6H|
Ie [
q0_uN
=!js
#YP'a
#MP#
^ cw
\IG5&'j
>:z1
X$|
vb@y3
E 12>
*{}K6
v6Lq
*EIYq
"&
3IV@9
pWZN
`l@G(
^7v;S
Bc0i
AssemblyCopyrightAttribute
R5DW
!/V=s
@<|e
h A>
:D~v&
Z;O6
Op*{b
|14q
PSEe#
j ?Qk
50-l
`%Bj
sf7rK
4P}f
m D"
M3o-
$N$~?
OO3I$
&'Ip
^ 0{J
,% g
\YmD
gi|\
V{{y a
wut-
$ls5
c&G[`%t
QDN,o
6=3>
w6<PP
,T59
`#?S
/ p]
'$$ns
'j >H
RuntimeHelpers
m%!Z
]? T
S#3eV[9
jILt:
<^$$m
pA&a
/L 6
qM<)
bVVw
7&J>j
#1:e9
,FL&
MtI?a
2B"t
JTK\
)k.s
!mD`
^R{b+e]=
ckx
0bW0
r\\;
|_Y0
#s D
]IsWc3
f4N
ObpP
*1X'R~
7uIn
&a5h
5; "
31 k71EO
5/Z%y
?Jtx
Uyh;
;RKa
F3Lpm
eZ~0
Eav_
>9b[
$x]KE
c7s^
P'JK
T-c2
+ Yo
62B!W
7LMH
fB1H
L *
skpN
h#_^
bmFJ
u~ z
]6r3
d6y'
Oo0/
Fj73E
M)*[4"
u5E9
Q9L%q
#9qI
`Tl[
w r=
cmfo
6E` =6
H:!u
?Vb{-
kc<o
M+Og
d6<z'
vI0Ib
\eRq
wS&I3
e8i{
$Dy{S
k/n +
g2J]
|AN[
:g1 WdDUYL
1I<:J
br<fz
7K 9~
z<Gln
:"u
CB"T
+{sA
WwkpJ
SlIOc
&1L2)?
.cctor
2|O0
5f[*{e
iP3Fvo
88=t@5h
d+ $
<*xajFI
~*U!G
> n#
,04?
EKWP
a"YB
Gw("
?LF1
Z.q@
y!Cj<
kFjv
mUKXp
8.B
.d* 4<!C
kL_bN
KQc9}
\1lW
d,>e
K=TX
.nCi
4:{:
vW ]
a~)
eP?s0
bS5G
<]G@
48qb
A8wa
qZo2l`
=(+ O6h
= oh%
YIa
vtaA
5 %@
/Odg
k_ `<
Dzq(EP_
m5!kB?
ZcNq
!jm|
9`'M
kfI,
qn j
j K(v
System.Reflection
7TuP
!>Uj
dnI~a
/l*
hrKyPt
+lu
O17'
WY Qt
!$F
NL3AGctw
)fsnF
{Gx
!3t--
wVDLZ
e?.Q
OZ U
U>D"c-
Lx ?:
1V]^f
!(=L
.yz5
[`Ly
=Z~
Z dmZ
?"h=
"y"m
6g+Z)
5k*I
Hod6
<@$?
Fcojg
&O6KmH}
Object
RO*.F
Y0V^A
Rb1PF)
2yD3
~?T_
8d *:
5VG]
Pf[[;o<
*,GD
M/G)O
Y3P;
rO9
!._d~
b 3@
2[m"S
<<\k
z:b|{x
(BeBJ
y;U>
%je=
1z*<J
C9/zb
a8!g
Y8z[
^24Z
NA~L
5:*R
-um,V>~
Dqc{
ZA ;
qx~|
(1CM
ll-
TQ>[
P8\F
E}Z[w
# jG
ou)d
YstH
<dAAi
!NjX
h@#5
7r('
oRX#
9L5h
ChO&
O9Or
GV(V
_ -
xSm&
1F0@
mkzG
rExx
j_d/
>SJU<e
%1Wg
|oz
&]5j
4/Td
]Na2
v9@5
-7Cr
J ki
6t@P
Z q)
6_@<
hn1C
=jTH
]6q=~8
4 -[
)y,+V
$<)b
=%eM
HM1
)BS4&
G pe_;
ySmc<
%[h'
M4:;
(1J e%
#Q42
}-9o
R1Iz
vzY-
t /
!oCl
Bh}K.
2aPv
*VFP
h^5K0
+2:]
System.IO.Compression
Iu~
VU ]
}M;7
f J
z?9N
K9M-
~IJZMnYud
+vx(~
=_Xc
x4y
I@q)8x
y[0)
R7 0E
,CJw
4.+*
Cpk^
*`*
*CoA@
oSGr
VK e
8 ,a
pZg
cZ5m
"#?;
hlU
k*6_^
)4U *
z_ 9lfy
baab
5r>p
2njG"qL
a4%d
BbmL
bl, Q
^ 7.DC
UC50
-a^hFXQ
)YX0
\"V
frz~
get_Name
;gNw
}@"?c
ofps
i+"^&
iBw
44jl
kE=P K^
`HmY
@>Tj
VcnBM
zH&BK~
\A(m
*, ;L
y/'fA
c8\F
IB)V
/})u*
n;Oj
( bH
Un)6
*d"o9
CLv/
@3DQ
eW1
fHGyO
+]=w)q
O]vg
^,U5
vej,&!
|dx/\A.
\.by
d J9\m
7tmD@
F&?M
Z61Rl
yIZS
oQ92
@Tx6B
R{z>
so0]Wr
zvh|f
BUBJ
QWWdz
&%X0q
^IJOu`
WV!H
C/"I5Ds6
*-LR
fL%NC=3
KrP/
em`e
G{o4|[
0cQ]
j?# ,>!D
23TQ
+NC(
y>bk
|ax9
M@}`
RVu0'
f;<E~
kCVY
}f*`
-o17
ZzG|
uLP#y
8x@E
s\%qrc
D$qK
.7G!
za0R
4LF$
N|WVD8
A2?D
,d\Bz
oAZGe
SZw>%
1SNc
O]+;
t%^!0
oWC0
wiS#A
mZ`9Zu
.)W{
S Kg
tIgi
?/ 7
} E
[B'4
L|d,
=DfJ
7%+0
F[mO>Z
GB]Z
_,[g
D-Y?|
c[yH
!Eu:Fb
d] X"]+
gYI(#
|lV4\S
xQ(M+
zZg{
~KT)'Nv
'oM
!Rqt
664q6v
e;8C0
Gg:O
;3R
~PPn
0lH\_
-Y4+
OC&R^4
IxwaDZ EN!
Xy`o
{yrzn
1Mp
~@S\
}Xd
k#xJ
I1bA9M%
XVD&
CF8z
5P?p
s+_t
B&]4
=XGf;%BB
rr'B{
YKM6
+5Y]
SFi`
`8J/z
!NUi
`iav
qp;P
R"VGM
U1bz
_[@[
y`(
,f s
^HRY
J\[a
E612
3lyi
ju!D'G
I>!h
b%o:
uO([
XMQG
uwjoT
Ev >
~t$T
HP4$
2Hr1
njghfcgfe
i8N7
Y\X5
?=O[O
)T (
ISerializable
9N.m'
E|RPe
W=r?
-$bp;(
3a9ub*
X8*W
C|`7;
ms<&
(sH.< )9
STr$}
@07{
wS\0
0Phl
W]Mu
S a!
\aSU|d?
+Fv8
Ey/4
<$V.
2Y5T4d;
+O4q
rm,Q6
D[Ef
K4h$
EEG)
g(!W
0!S.
.O+F
"qd(y
0w4Q~%$B =xN
'q)Z
Tr@9d
?VPW]b
iy r%
#}'*nXt
f)rP
44)(F8
<.(Y2
"97=
z5)$
m9bF
r-bv
g }4
t=P
o3<G
ResolveEventArgs
V\O
p,a,
8I3-
t}!b
w)>+
q')9
lP\ D
!L3Z
tT$&~
QEN&
T&)HY.[
p!M @
3w{a
u}x [*
sE/P;2
7G};{
j CpZ)a
Id%/
?wX8#
jN9f
=^-)
w#
Zni?
GYl=
kqU#
Aq*z
^KO\
P;U*
rmdU
z9)^x
\1j>
1Y`
caP2@F
]S'~
Ckr
dOV
IAdd+
s>*)
`42 J?
M %
k|Gi%
M P7
Q= J
B=p+O
Fb/+
LC5iEk
6f7Uu_b
X|XZ[
4Y_bP
(;* )
^%<`
:O0U
%[2'
Y| c
U7GQ
9#+k
r^u]|
*R h[^.
!I>OW
1wTP
sPGm
System.Security.Policy
0xtd
NIk)'/b
R2}Q
OAY6.
;+Wc
CFp.$
ZaZGRq
_<
}.TH
2G m
"L^~
y%K}PB
c6m
c_^%D<
~A.{
.R,M
^;!M
n0hH:
0,,a
<Gt'BW^A
]sQF
c}ex
D\-)
ZA{Fv
-`zvn;
k r{
0YO:
]+$1
dp?
r1<T
r0 _U
JW`$
6w?W
Spr+
L.R k
HpHB
Z[^oQC
\lR0jH
txd|
>?V>;
dT
0mG3
yllF
F{JRj
HA9b
k!`&@a
AGRJ
5%v:.
zYK&G?
eR 5
6dBNw
mq\8'wn4
}s K
R3]Ob
eJ0sA
Ao(,,
PV"f
%\ f
>PJF3(
|wYG?
j9O
X21IOz
<a6v
d#23`
wKTl
fA'
Rj~D
lYOL
AssemblyFileVersionAttribute
f3KY
Q=T$'7
{l2,
;Z8tgc
I@L1
AjC,
vvhftghfd
oh7^
+o@
System.Resources
V cO
c3:o
'`]
W<-G
G4;$
J&6w
n22|9
l[Y$
Uq+i
K &}
, K@
fMYyM
AJ(%
)56Kb
p3_]
r3J*
lw!kpi
d$]
II.rc
RKy"
'$m\
=OZSX
dc7huF
Q1Gx-
lK:5I
f%l
Wlm-j
x^k<
t}+g
T-mb@
X5Fg
bddS
Z0ag
^Gfw48
tD-S
ki i
./ ^
'_.
Zqc!
Qx;i
S^w
cNl
qqwI.
, Z;
g`{j
V#jQ
:*"\?
HAk_k
&JQ$<
&F8=
-ZUj
cVZC!T
r3Ju
3c ff
8 P
{p)sn6
3A a
jn7c
8 ;W
T>t-
!s"pk
=2 M
8;<aN
#,-P$V
O"=4J
h0S!
$D,}
) )"w
PK:2
^$[k
@!G}
G )M
() *
kG1CQj
t`h4
h2G
GZ@r
ysl4
.4$s
TGb
z#{?
epF1
} >+
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
YIi}
F:hN
l4d$
Fex,
<5`e
6MM
1*Ti
2wOW
$jK>
!sq%
D\*1
sZtW
:~T
'.k^r
8EP)
7u<J
RuRdy>O
hpUwZ
NC|7XN
t>d;UV
XQXE R
,T\y
S,?8
%a}5k
ro'5
&.\]
lDo#
5yg|K
vS7%
:96S
>:F!
@ ~p
ur0b
RpL
Oa.d6-1
G4mU
fZMo{]
-|V*
lLI)
YHb
U|dr9
G=3N{
#K#8$C/
g8ek
BqY.`
q|IE#kc
% DS
7(sI
t'L &]U
&S. z
pi`Y
{t:^{
{=V??
PC :
nwkbd
`x:W
Qk^A
77_v
>jZ1
|K,{
'bUL>
YBZ$
!v?R
*w2@u
lFNB
=%)e{ @
J.na
*M#?j
Vo4&Z
<hR'v
Glc1
System.Drawing
J8xI
?*?J 8/
o`jA.CLI
1<xb}#
V$ Nc
^ T#(
@)e6
@<[qY`oO
a-s@+38"
bQ6XG
OFR2
KSb\U
Dictionary`2
',OvBT
)_p,5
m$4
3|h
F:
fgk7
bo49
gv$`*Ka
oXmjVF
#s#{
Mn^,
;fW_
, b{
f`cI
X;#Y
+$eP
4>g1%j
HIv
uf:.
">:[
Yww
rQD9/Y
POj@E
Fj$q
FRmP
BLQwS
"zT
U|<@F
g_nP
qKn^
JV@-?Z
{%~,
DrF
81zg
gbL+d
[ZB^
b_2{
'Uy6
d{T
ijU#
*kZ+
EgB6
6> \
i%CF
/^Z
J?}b#
8B_w
{)R\
Xe>nj
>cJf
{ TL
|~&
-Mq;
> *+
Uu9b
;% l
nKrm
b^/*
a"ClDx
_q<pM
) 9y
3.{[
xl:`
Ps]GU
]a$WF
wkV=l-
V}FG(
gk[bt
l5ga
aU1r
6%][R
%G~_=
(iOV3
0bS)
c=f.
k}3x
^FUY
h [~
!.H9
{)R;
_qj*S
sV(3
(JNu
s[X$
l @x
PR;/
]'%e
D2!Hq
u[HrIl
s {S5
AssemblyConfigurationAttribute
o*&=X
sV:8Nq\4L
>nQ-
w vf
|TA<
CultureInfo
0BM_
?) M
yj^
ec}`
~02q
GlNX
n_<
B\ICr
vs~U
4X s
t*;w
. %|=Z<
U-qu;+
N=U
m,c\
LOoJ
p^HT
)*8c
{RxDgH
hq ~
WuHC
Gymo
w18[
.C"E5/
1 f'
p'tc ^E
AEW+
rX48
[[eR
4g^d
9;-#
,*bM
L9V\PMpMkc
U';d
8$v
cbN7
riZN
DvIp
4'@T
*f<!6
[.?3S
J.p'cF8
:lN
;/u-r
2ocF
Ra?4
IUK!Lh
*J~?+
Ov'A
u1MC/
Pa~gY
sMrl"%}K#
t"m
S@wS"
El~5
VMcX
h8iK
lim@
Vj} *
3D0q
=C5}
`&!#.
<L{;
M(M#
T|-
RZZR
zB0&RP#-G
8 Kr
>C73
3BX}C
0L< gb7:
' "
y)EzC
oOHQT
fsK>
vPr8/D
H"\\?
AIaq9sL
HT]
H.~;
(kVQ_
PH$;:^
;| x]f
REFv
vZD0
PfR@
+BzX?
a+Gd
W4km
rOwQo N
kN
88O1
dvNf]A
+(m
at U!
Q *ZV*
GjCp
57?iN
q|4O{
S42+M{Q
Gpi
oS^i
=cc{
f5S2
aZg8H
:;(l
gL>
gDKx
-^'d
W2_q
'#MU
*7(`
a}vA
{~Ku
/Uku{O
*Hc_T
Px gUSYcu{O_
CgJ{|
a!>%
;45`
PictureBox
</ "
0 A;
Bbu\
K aS
LCFC
\P(;`
~y$a
ghg=
@{ Y
az s
5m3f
e`7t
n|8&
Y r
= Tp
<wCZ
MS [G
/WqY rt
~@!o
0I`ch
++Vso.X9
!F9I*
y{z+w
!<|\j
)J+:
ComponentResourceManager
632#
]QmEk
>QXi
xTs6
" Uj
vsYK
pqTdE-x
(i\u
xvsN4?@
-3 0
QEnd
n!FW
Y3Ty
Z$Hk
,&o}=x
cmiP.
)g}'
Lm\
5)5
'{jqt
Gbdd
=i>8|
4U}jj
;V28
jIr17
V{b{S
AJ.&
`uY
iuo(
pBSi
J,2+
+lb.
,,?}
>DUG
]SFU
ibh}
HeiL
'He)M
;m5p
zO a
3b{CM}C
*_PR
vW~
YVWp
#~z!
# d@
d,Q
t+L
~&~z;w0
d3)
V;v S
8$K@
System.Threading
!tQ-"
z~[R
bvt:X2
.X v^
#9s#$
Xq'@
PtaJY
f6Lzs:d
8s8viJ
yyw
waa-
5Q^7
@e4|r
T%Dqy
-T|9
"BO`!UE
f?xm
BeXb
%P2I
v2.0.50727
\c^5
MgB#+
@{G}m@
xH5<
z! ~Dl
'!|O
t0"Rk*
c)Y"
Tvm
*.al
Y[&J?
NF9P
\AOq
8H=:
ep<
$YdDk
L1dg
xyC8
+S*e
fr5O5
#K9/
pI,
5)noj
#9>jH
<E|X
D RmV
[yUY
)Gz>
QTt%
V i
f2bJ
b\v%
!_C
HQ /
w8 N56
set_Size
r\%7"
YglD
l"PY
C"D7
[xc
anfQ
tpqP%
cp:*
F|Mii
v+/'7
_:;{
sTr2t
XUM]
|8A
o4(-
lr<|
78i
h)<
i bl_}
z \q
<L}9ulc
}SGxvb
H,IM
UBV
`clV
pzDj
x[7i1
co-:
m]@*
:ui`
.<+6xw
~kEh
n/Qq
2=O
A!.
H5S
L^NI'
{5U C.
$m$5B`
7bA&/
(PV:%@]
m.$>
%aqN4
at~ D
g*/Tr
KF s
@;xj
~^YY`
FuzQ
JM '
3lFs
$ )^
Y Hh
$m2eg
uL#I
K @
>We%
fcZ ]
D;Vp
E xP
p0s@?
Jy`)
,h\eY
\U8i
,zjn
H1f$C
x7i;
!uMD>-
>SYH ZM
x@}c
2+#L
^ w.
[G7!
[p|:
hc/C
_NjB
TXXX
P?H"
= AMTm
s53.
WT"(
O.pa
<6o)
zkwq
Rho;
=/ -
:M
&qYY
lO@"(
!lv:
Ds\V
pi Q
u0nY
.j3C
|=JA
3do%
Y9^d
bP -n
h&3;;
| s
A.Ld
Tu2}
u$I/
C!wl
t6.rE
ZN&=
X! "M-
h=D)At*
B8(c
Q$G.)
jZB
8n>[
v;^~Y
q i^%
yko>9
@s!J
qGR)
T eO
B$>f
& 5u
;Q#z+?j;"
bfEtj
&P h?
q0SR
ERM'xu
}^<-
m Hs
2,"R&
/1_z6
( `e
|] V
;W@p;IlM
K@zC
4u8/
;f/
i N4c
2e| h
,trSfie
A<+] ,+
a99Wo
! +n
U;u|
6_6Hxc
Buffer
-8:"
v(!V
o^oyL
P:"ga1
AU?TQ
'%nZ:
5.tq
~5L^p
+y-[
W;Wgt
{BP.I
\W6H(
x%dT
6+e$
z`N3
eqnT:yE
H||JUT
6| Z
tIDAThC
.7aj
rzN
+VsW
dzn
Pg<X
nA8*^
&ui')D'
~6i;P
4c@R(
Q5.;
j,wO
Z |3
vDA
+gmK
/mxBH
&GWD
qR#=
.1?+Z
2pS9j
I|;}e
Wr~r
r v= |(6
1DJZ<`
@(Wi
mDa9
i 'w
/tck
$V*q
}IDAThC
'$
^C! [
xFofz
{G*Q
X 6>
>zdz
%KEx_
&hse
bIi2
Q{BI'K
zx Vj
9tK&
U.!T
rdzg
*z c
NY.Gz?
)t>j
mMl9FU
PLv$tD
BBR)
B;7=
S g
ew8h
Fau?
K!q ]
imU#
bDbd\
g_;6#|
sX b
{_A5
DvbkAn
xZQ=.
QhgaX
f~p/}]
J]2m
*quth
j9:F
_!uZRCB
>lmi
=Xad
EndInit
X> e
ddPt
} m+
wZcL
A$QG
Read
V?Im
BPC9
iCh3
pT2CV
c[9pX
'AhlW
JiVM=
GL],J
y 9_
ZmUL'#
`P+:
#(U
Fxd.3
[)`]8t
i&tT+
(*1~N
a61'D
vj2]
Ya$`e
B:w^b`T
='[px
G $
\_ 3
aQ@[mTU
u`V=
99Wu<
)!x:JiN
: iH
'A)\
]rGt
=3J%*
|4JQ
vZ2K@'
9`--
d20t
vbT\
|Es
41<M&
j u'
6=Lm
O7;@
<fs S
H;xX$
R*ea1
JR7F
1EA)
o\l<
tA\B
/_3Xh
xQx2Gq
k $b
>wK =
MUl7"U
i2O
o'~r
NS_`
L b]
GJ<d
^/fj
]U m
^#aW
iBo
$[TKB
Oqsc
FfrO5|
nWM}
~EFm
~Q~px
v ?
,D=3w)
SyI@
\Q?4
wS=z
?!FT
+>CL
1aq[
BB*Z
X n/-
PictureBoxSizeMode
"' k
dY4s
eB@i
*V5f
?ko
K<0z
hev_7
ceCiA>
QJ m
V]_mO
#V`WH
uEyn
{Mxp
wkS4={
1c|&
r-.|
2A(:UR
BO77
9{MFt
XVa[
2'fVou
uh u]
ke(y
=Hd{
c G!Hv
Xue23
P6wqh
3SCJk
Zp1M<
3s}3
5ix_
k3?;
?gfy
ol/g
E:4
8&"
H[LFL
wTii
#Bxz"
N)4
vANl
;63=7
<&Tet
" s[
j'B6
7M y
P?gk
>u (:
84>d3G
AX2YT
]$ -}
Z|-q
Y^OQ
V/J%
L#IY
jROR
b_+J
P&X
c6"/j
j]'3
%X[M+*3q
"z2gX
X]S#
kW%=t
X6fz
C@!F
B5Pp
2m;U.)9
6 ;X`LF5
FV)B
0K&lf
Z @-
aYI[p
:]C
{N]H?
6 yG
~5TP2
z>tS_
_if
H06]
jg{%I
2 9u
Rctp
FormClosingEventHandler
6q+\!
deO:8
GetString
f[B+e
95HP
s)Ut
M -t3V
MQG
Q4h3uR
gP4f
;u s
9IBS
!c0(P
rp`
K0b.1
mQ!n
O-&RD
?GH{
Sw5
kR_-I
$ r.vE
oS;K8S
M-tm
u}Z+
HI2[
0MH
.[xw0;79
AJ}0g
JN*l
fsTbb+
xVMOe
hXjp+{gk
5-\.z
t.>H
P F_
f4 N#
)BQ?
St*c
GM`;
e*T_
U a1
S>^i
' x\
)duQ
8jW`$
V&#!3
Y]6M
tg^>2Pi
?n|T
qNhY
ipja5
4w0u
F'tvz
0' W/
O/^?
Oya&
I,bQ 8
d&xhA|?
)aIU
LP?
Il+g
T+Pv
<bHT
mL\j
zjyF
zTm k
*OHv
^a2)
VD w
?)!8
Tp ~
!~}*
V]X8
1SO\b
"`f.
K9 K
DI v
E=Z
uwxA
q"3#
~Br~\
PDd{
_dV EJ
:Wm
|/BV%
&C%%
Cs dx#
t6MKo
gmKP
D(m'
8fko
J`kI@
iCRG
D/se
*?<24}q@
E{[ &
3XQGU
R@;K
z8H/]
*v-k
Z\R:
_}qT
LO!E>
M2Ug[
UqrHe0
vB|
ek{,Ky
nr( \
T(ak/
onO#f
+6L7_U
G8
pL
[,j>
E@Vf.
:51:d
W(Lh
rc[="
\OgP
;C c
Hi.J
0SpU
umBC
lj2P
[D/
.x V
RuntimeFieldHandle
rh\<
WIAd
U2k^{
cE};
p13|`dx7{
X?d^
Ox^|
;H6N
\[9SIT
O95z
8ho
>I@}
~F[&
N8cH
Q^Ac
O6vx
#w)e
y~CZ
}o8MfD9
/3yG
w*U4vYD
G1SF
2q(V
`Wj$=u
d$Tk
-Au5
`#7;
0=iI
B3AN
Ten%
H!B q
9W;;
kvS3
>B:$
1cVfGmk
9jZU@z iT
f&f1
9jKz
]H@ l
>uEN} n
r)(CX-
]-#R
r(86
/n9]
%j5R
b0&Q
F&f)40
"^D>
$zSb
B)i
K;RS
ttb*S0
3Z~1t
,uH[
ho5E
ey=q|
=ap
IME2
Ru^%
OA50
Q?2L3
ns
..4d'<&
DPO"
,='nl.V
xZJl
{Nd
a8WS
;E6=
|p_|B
}D^Z
$%@>
PyY3
*hPEK
+& u
5"A)
(IdD
7R<G Q3
k821
J %F
tH3
7SG
>o,Z
i_wy
W1[5J
=nNx
Pb G
k~sr7B
3?$<
"[CMM
3Us>S\
M(Ih
pI6*S
{%2-
5#c
1?s`
,aVf
o Xh%
3r.+AR
}%Ld
)<oqW
hM Q
g$0
g:b4
,hs!W
AssemblyTrademarkAttribute
;{)D
NI^t_e
>+D/v
)R,"^
,4H?
;9$G
L2kF
x[Zb4"
4Qg@8
MR4MA
jF )
$fW'u
L$rs
A[j\
aTvix
;j$||
2 j
"h;Q U
jCVi
-r>eA
\J|m
'hEm
$<4*
!-v+
qq s
-l9
FLdi[
[PXy
} c"
C-m(
PLTKw
:%^c*
j(9!
L}kuP
snf$%_
'MfE
uk.V
D,ni
|@$%V]
,BUf0
w>B*
42XI]k
HIT "^
\xvk6
xx {8
XO R
;(pQ
=[Ht`S
R`\xE
JRpR
F!-4
_Og!
_Dhp
rG[M
p\g\
{$WH
Nb5u
_QU
%Tna
F)@*
zw-['-%
/^Y x
%&r{
[]p~WT7
T(v\
pi 9Mu
!h41
koQ;e`6
SKm;
?(q#
<R{K&
5;Zw,
f.zS
ZojJ(
=<Emg
Cw/X
Qx;R7
jB[!
L;0Ym<a
,8Yl
3`p=
Md 2,
S"^\
@)vWP'
" 2x6
|flSP
4\YY
PNmk
Z.nRd
f]v9A38
Sayn<
evjs
+e81:
R pK
fy- att]
oFDv
- +:
\4 ]
u*Y2
p]r^
9N^1
TqlB
rpgM;
j4fF
?EHi0
k ls
#6$^
AqeP
jUhX
?M0R
"\
v A[
hK2q
"PUS<A:J
D%+0
#d-B]
YT(7WE
&]^)0
=@V
'ih3C
:!2
eAd1l
?vb)
e K=A
G C[b<
6Cx}
puc
nePa
m<C8{
i3$/. j
"=Uw
{ ;b
` FD
AN6r
%[`=
RlS6
z]`]
;KvSb c
> #N
-)eU
m=8X
Mw4l
ki x
AVqH
u0G7
`mR5
_#?:
VV8|
UUi5
_rT
loK%
::b^
XL:
>awy,
%8Q2
+lTl1
h-qb
Da 5
_ea%i
dy1y
EfB
LK1)
0AB BF
w|Uk
wQbfL
VP.R
3.Z
fLak
.;X_en?
K!@'
m5H8
b24z
j|m M)m
p\=ye
^r=:
-%Iz
;P^KxV
T7|t*1
rv#pV
wko2
t]Em
BvLm
mS_t,
Zx7;
?fQT;
-p0=
xoerrr
!8j<
rSQ(
R54 Y
C'^U.
tyR
#l~
WpI]
f &n
(D^$
h ,6
_qT@*_7
q$lx
lK!
3_ Nvd.}
Hxvh
#'A*k
Vk 50j
{RF}
9v2k}c
6./5NW
'9]%
/O^Fu$
O 8
t)64
joMG
[hGF
EL'1<
X|P#
+T8]
kOh!d
j}3Uo
tj!4 `
<vjf
BjH
@jx,Z`7
QRg9)
YpK Ar
|c g
kCci*
l9.F]
<9Y>
eG_0
"82Ep
Pu"yr
#W!-`5
E89/e
kernel32.dll
f:C^~
Bu~~x3x
2 .3
?#^$x
?6b*(g
ikh/
9*Kx
p Ri-
krGw#M
?8nK
z`a
TG1 N
( mW9
^1nx
E :d i
1 RN;
G 4>Tt*
~~<2(V
=+ 4
[l.r
?G?I
^c6GvP
Rw{j)
Z9rzs
(FD~E
s'C+:
T(~L
"7^u>d
4@/:
VDK6x
n_h^
+\xE<
0[/J
"7~O
"=pW
X`0
v\kA
+^Xq
"m[ jr
%v:i
9c`%*`
& t-
~ h+
tU;/
n>6)
sywT
KVM+
m$ 6
RdO
q|q[
mHzl
3(*
s5?F
KTP&c9
HeHC
/|Neh
\9*=
wJDY#
1"C$%
c7L@
u1vT.
_Kh6
_3w>
,cz
I9"
KmhC
v X=
gt ;
9SJ27
<K[IW
Gvj(
j'cU
vB~4
T<:=W
W@h^
y,E
y)2j
8fi0
:Hch*
T0cW
^yOH%
Write
mU~_
]f\}
s$R>
pa1f
4=(@u
5`X7AF
db}^H
LWEM
{:Xq
=wK:
z$2c
#i3[
u1 \
H\BF
'@_"d
aBSC/
s6R8
lEw*
@i]E
8-Wt
M~7`s.u
.z!+
TT~@9
D)2m
qu*
C$azS05
uQ^<#
P|\ -
&yp
N8KQ
@PL.
F3ooviR
!vp
4N n
\g>V5
\Kw
UVF^^
B+k!
F*+i
h6&\
27Pv
Kk<M
*0 |_-
S"%n
[LsR
AA^cKM
5KeH
m#JdO
?;h[kP
$^6h
Tu6
\&Bf[
#U/M
#q1t
Be,U
kHl;@
^1 A
_Rjs
)S4P_
']7O
s{Nc/[
JJ 8d\
zs,^
KD%u
zA9 q
ObJB
??w#a
+MYxg38B
gXoR@
m,i@
x07F
J|D#
?--4
2qf:
18h5
WBP#O7
System.Globalization
*#Nn
B2HC[
a{Qj
WJRdz)
P\e
?P~$E
L}(C
.UxD
r~2rp
zt2BU
ajY)K
j 2;
yA `
uVr2g
b{)YP
4Yb~
1@U~
KXxlWU
ou ~
edDj
b)-
~1~$
[iN,M
PZnD7
;sG >b
q("*
Oc*^
zUs=(
,8.W
3n("U
59Bq
>\k>
<t 0d
+6j@6
vHqQ
X]P}
PI~d
-9$?Z|S
RWJ?
E=$NL
AXP4sW{
CreateInstance
n+Ng.*
&3yH
ME)8
%%L'
F#KGQ
(.WDm
gq)J
@}bI
)8Q*
;F# )
System.Collections
[SB4
*Fz m
?Dl!
J! i
x?]>
t/8^
%x')$c
dz9
q"nX
yD6IRn
ymWL
6y%:;W
i!-oY
M>/z
F*H
IB`I
nP/)
.ZjT
_4al|
%pIx
P#0z
1r!*
W=WT
#>&p
=Q"G
M$h
,5L/
dsAY
`_oH
get_EntryPoint
@>vXM
,s[M^
T%jf5
j+4e
aHXI
a!:zf
di,c
-{a6
?QN
zM}*
73U"
t+k7
V'N<
bjRx
_>c|
lg//)
Y5@3EC
X=kh
;sWE
CX[1
|hCw
*-Biw
kvgn
>Chq
u |Q
6"7!
t o6/
chj;
yL!x@g
-ts|
&;yc
p@2n,3
Q<A
7?(z
AssemblyDescriptionAttribute
_.7@T
ox}$@
V,e%i
Jk"B
.qy/8
0 j(
2~Ll
^ gg
\fX_Cb
AhGp
<a.^
[. sI
`2<U j
<>&FGS/
|?DQ+
2s+s
" e!
~c,z
-J Z
SjXE
kZd #
'JRab
:CB^
+%C{<J
Wh/e
B`k?2W
o)d@
?'dZ
Z+pQZ
)" !
}iOcx
q]9W
vEN^
Intern
<N4|
,N8b
gtp%>Y
5R|>O
(e Z,
fwI/
EA|K
Z>Y
"\_;g
\>$kzb
1Oty
GB8-
c 5]
rK~]
V24M
*Kpo
<V@o ~
>btZ
D/hl
ncw~g
%wQb
i6A3i
6QA=
$C2
>ruu
<X2Q
vecAU
h}c>d"
uV4v
dy/p
F];C
=&kD
~YsA
`g3:
"P0}
QVI;O
a|<t
gYQTR`
N5=d])
Jq6S
JQj8
u&^1
:B7v
$1*tI
sn t
1^P
TcU*
u=4F_T
v5wj
<3'sV
^UFM
uO5
,^B~"
G0'~TkK
._9t
vU 0
2aW
:Y-`3
R)J$Q
Uc`M
xH;B
c9]|
zrP6wW
WgrUb
2}]
W4l3K5P+~
g7}n
6z0
/e $<
L{Dd
mzY<
Qhu
t 0&
~RPys
%<eg
6\4w#"
kj/ 9
5WfA
WRBX
uT:G
?;2w
{S0ee
W@RG
{nD'r:
4Oe%
RFnX
q ('SE
Fr S
i+E
{s@
txA5
2S@^
Ld ^
m44xG
G#Cf
@TG4
\Hun
=E>v
a=O(
Qf8/R&
sj%%
Ei&d"
~ c{(
B oE
@bsQ
?]*Bcd
VI-
Jnz
v]ars~
L{=VaN
?ln[
>OO;
Slq<
tv):
-U8x
[yO9
xz3!XCA
iE@0
,+FZ(
]wRWUZ
<7&mz
get_Length
E [D7
od 2
%9@+
m/vg3
4"0AFp
A?(<
k35?
qGE6,Y
p6+`
G%h]p:
\/@>p
\mFp
Y? w)
wf?S
T"=G
=KE8
qk<$X5=e
v<TF7`E:^
z`pHB
D3o0Ct
=.Z<*
1,v!
E H&{
v mB
0j1-\
! &g 0
k^e;
v'12
Q2S9
apn ]i>
&$Vl
B<j
`S;u
{|Bp
X& R
OdKT
fdU`
S^V`=
zz%I
X.[-l
Hce^q
-goG
%jN +
Ph;r-)
2 )*
L8 '#
B;
)T'@
]>=vU
0\N;
e:&"J"en
>g9
A\*q1
V, M
k"^l
p5(^
C0 2
n[u+8
^| t
KRfW`
I'k#
Y>>x
*X N
!t |
gIp);
7msuL^
s"2_

Pw(B
`A_B
O NP
cw1Hj
k ;U
j=A$G
GLYI@
q>QE*
cYD.|g
*S#)
7%Lv
nAI}
N!"E
HF?
s`~4
<Oo8Dq
} 4G(Y
N7>e
z2Es
5kfJ
1R=bmQM
@v:H+8
UOsSty
h'~)m
+>77
XJF4
N^Ti
?bD'|%W
6d%~
8VkI
_Q#hFg$
cGQB=
Oup&
A =ey
,=*U
i5 %
QayrO
r\UB2
o
2m8Z'
BB
}u^&
) >=
}*+l{
8p4d
QVWS
ZC;R??C
WrD%
TK_.
Q~ C
J~X$
},)%
kr w
QZk9
fIY2
2#8@ZY
g5kW
k16e
| T'
EU|K
0hJ=
o]Q;
dXXWJ
^;YJ
w.@ab
0ot;
` >
`&um<
4&Zp
Pw%j7
>_qt
BZ%:
& crB!Z@)X+;
Q\J9
j~'@
gr &.wh
{s t
,k~*
A81h4i"
A"t )
(B(ed
m;_I
1 nK}t?
\{rz\
h[ww"
~J69
}H65
:D)R
(8Lw
R i]I
eAON_
HU+Ap
y?e?#
HIDWs
[(zP
#oRl
k=f-;
7..v)2"=
ZX(
uIDAThC
)7 H
??^aA
- ^9
8zQd
1NeYh
accn
h(xFy*
v<"U:
\iU)
"a !
K=5v
#X$x
4b|^N
dsCC
&MS6/
IL t
u/}$
4BZ
P$u>F
9z4q7
pB:}
]-\mx/
n%Rj
9(VC,Q
qk|et
L ~)
otG|
nQK\3
4(p$|
<rk
v_>V
FTFO
D Y
O"
l,v
tX e
4-6
viv:
n%R0
3IiAq
Y-Yk
pHYs
c y)__
R .
X$0l
Awq6
BVgZ
E~ADn
ZNwFE
c =)b*
gyB
l6[j
}\`
}+"q
c (|
"YyKgA
b}Zp
$Qg-
I2vwi
Q<Gn(
&|'
0FE#8
U3 /
v&E]'
Wyc(3
6@`d
m]=(
'gm
f(4A~
Pq (
[I=I\p]X
Cy%e'
Lk)u
- i?C
0&M~
^UFOb 1
R4 kG,
v%RD
eQ>R
T6dq
MkA\A
_!qc
7d8T
6y-CF
wIo]>GD
@~"
g#<I
^T (
D }2
~KC%
L>K
4U5h28
M 3Y
`D a
l&Z]2
krU8
[X8@,
dmP O
Zg_3M
\NqfB
U s 7
\Ve6
Y0f]
0;s"
@Bu)\9
O;Tb
Y&"%<
!h8'
\NT#
WA L
#z=&
t tf
I7$V
^Eo'
Byte
jPj
B<&0{
r;TcL
fK/m.
Dispose
Bm ,
[GI(
>'C<f;
9%+W
.1<r
wXr'2cOt
k<qq9
og_0
l>A3
3J72
p ffN&
Y_MI
%|>1
y*}#:7
1hq{P
C<1+
.0!+M
3RB~
b`nB
`;05s9B
}?Bi
=WGL
~,sfe
FyS3
h3_;
Rt=r
Q@2L
AKNJ
\T c`
B{zx[
O g&o
Ke}ABUF
jj%U
V%Daw
8*);!
<niW
6 9S
%4~[
US d
^#" C:
0qhx
#7Lv
Vi-HS
DxS
i1A.
RgJV
bGGT
<*KW
D cMT2q!
" "
qHL
q rR7
^fy.
V]
I48=1
8fY%(
:3gq\
zTwHi
mt,;
%rgv
q*f|q
dUDP4
S/^7
'3Uy
iz)F
4@[bE
~bDN
L|8$
^M})5
[Pu
56L5DT0Km!
8d7E
CbJ^
?g`
ersjS
d]eo
2Jum
&x%~
J(qJR
<x I
BtZx
;sv@
JYJ8?
Vqs,
.0}fk=
Mb-y
L}KA
YZUV
[Kv
]}Q~x
@KWAj
}=@9
SiRaKt
w> I
X/&Q
&rgC
L7>_DZN
$yw
1p$[
Tl=<
2L{&
, n=
v <PUOd
d="u
X#(
6.MlO
V;C,
get_Chars
xFaQ
t#\]$by
Du{c
5 ;Z
\Wn+
S`+x
a;2
*b&S*
wtBu
E}2K
src.y
D)+-
\`,3
Z;^.
jopg
u6AnK
U Ho
a0.
t.8<
R[{eE
'c{F
q': t#
`guWwd
,DQ
Px0=
fvmmj
?ve<
8 iKaW
i:9&
,',E
Q~7$
1Na%
/,x[N
h,V,
9o k5P
_ @D4`C
H<9cp
7C&Z
T}T"
X @O
nm4`
I{yg
F]4Jl
\YWk
|Z{*
5F49
D%A_jn
gF';
T"d4
Nrm\
#f#
]r{K.
x;E!
H@zF
!TOo
G!kv
b{/|]=
ZX 0
UzX#
SetData
rAjm
Be]/oAK
P_"B{{
V[
-?_-2
``L\D
C6wd
QMcp
?1Iav
x"FH
[J64
iq~.
|[~T5
$47t
^]WL
YS"IY}
U,abmo
~a-"
-hUIU
<)iyX
^j^;
% Bh
I.`a
Ae9 $
cU{
wTK.
6*- `w
Na}ih=
!0'
z B=
39}XB
I'8MM
RKBb
.WRZM*
$Q^:{
> '5>S
q(Kv
XsI^f
~ lr
J9+4L
A$Vd*
m;unK
Gv9WSrJ
f& G3
.juAO[Z
RTg~
3K~ZV
}hT'[`'u'0 5
P5h~
X, Yw
$T*gK#
g^b`
Sd3Ch
%'UA
#H6Ud3
^Opqu
h3gq
K.gr
b(mg_6
:#C*;
Jd"
cU]%o
QA g
0&$WPY
.A"&
s a[
"p%|
4&s?3
u<4
6 ^s
+ ?]:
[eXRC
v "
4%nE9
1+BY
&maU
wiA+
bJo_wktpx_
ReadByte
u'V>z
r=AZ
^q9PN
eCxK#V
$F#l4
;ZEI
$ aRe?qU&
b!H3I
jKH
=F B
)E.i
AssemblyProductAttribute
7hG1
/S'i
)Wb-
OkRiGo
uT \F
mKOc
Y$*P
Kw`D`7
1'|B
M 'cC.23I
Wqb_G
qDW=
x)X:k
byS
v6fP
pd 6l+L
l<+v
ur5zw#
w8 n
msLC'=
mFt#
/s5n
Z|G~
Ud=J
Cx?
'd0^
tI/4
KD!{
&cp(1h
U&zQp
6\(!_
9L?A
534}
:oN
?{xx
JLTnZ3
:~Fbq
9>.K
UMq
~sEa
vCx
AZ U
Kztb
an'>LA$
^pNA;
rSofzp
/NAH
%"X,
XK.
`aaF
x8A
\e;"i
qyF>c
=^T:; ]
3PQq
CJ{{
6 nZ
n!5k
j~)
xG+_
V9/FZ2
1dr'e3
]Xec
nxOOb
V)M%
Jg]
H&t:
PyhE
qBLr (
pt2~5
5Q]S4$
)>sN~A7
CquIM$1Y
uV i
`D5<
QH:n]
9?CO
+B\C.
Fj" hF
JId
F$E< u
{H%l
)NM7
9&Y5
]Y!)
q(}Fm
0(d/
<%D1
\ ~,
{QA
$5U{4C\
^$ f/
@<;
_2=r
T=9C
OM=4
tf$v
PgDi
Q|4}
13cJ2&5,
$2Bz
X+..
|z,
YWe#T
rqL,
.Q?K
p>wu
:*7t
5 B Ld
J1e7
AutoScaleMode
~LA5
J79U
BU]<m
;-j*OvD
~'!E
!%Ra
-ojHY
gvK(
=t"
vc|0YO
HT&6
P# q9
}m$9rO
4~c6
O>Ms
_4AkK
?pKC
ybj+h
g2xD
Y#E
<4.?HN
se\
A b?
h7: ;
1=T
0R3B
TkBJ
`h("
QcC0
SKUF
xs ?
UQ]v
2FiJ|B
>S6X
*FC*9
?/q.
e5d8
7i T
_ZW
cI8
ufo$
krzq
0_$UlB
NGr
f'nk
i41J
j~4X
d|eZ
tX.r
6N53
z' \
*bcU
=Fjq
{+ct
> x(
mhRd
cv~,d@
GW;Pm;r
PWYP
<\uh
vgPI
p6t$
^ u
eK6v
FAS
?/*c
}j'}
_q '
/-D*pY
g+/b
Append
O6}@
r6'T
maQde
E8:Q
Ocf,
nXZN
2?_W
x!oS
}G) u
Y DT
kR,h
UQJpA
>T~nE
AzJCx
6y+J
,ex2bJ><(
J,8k
%B+*
^7aq
&XbC,
N1^G'@H
vBRO
O, +
}wSK
%=0!
1]
'*m
MYoG
Qj[T#
4U}
uN(W
df
R;N8
HJ ~
Lw L
z`4
wj jpq#
L.v)
f@N%!,
W)P{
SH N6
Pl"Qj
A:.h
` @6
?e #
EE{?#m
5P\(Z
!iHU
2Xrr
eV 6B
-%Sa
n;%9i
?-H-
sB2{
Cped
|!l6
\Vt*>
S/1
BIqG
E`rp8
Oxs{
'#*fz9
k.>?
`( ^
C1&h
DeflateStream
TJ~?
zWn&J
f!,
)V5%
uWSv
01jn 83
ZLyE
ld z
/5df
zbA,
Cfw#
20N_q[<
sBg
yw=x
^n*D8
U,hN!
\^MD)?f!='
%K1E
qxFh
ZBw'
b}{'
Vc@Xfl~
V2mP
5?`!
z^xcFd
vc'@
P! W
0A#^
K0C{
:HFk=O
d&'<
#Oi!
IYb`nocn
MQto
O~Y]
Dz<<M
T)@F
3f}k*;
|>]0
|sd3$
@VF
:&21~
@QBZ_
6F?vd
>Q*H
ez2~2#
%<
V 93
hK m
WCF`
tkF)
WN{M 2~
\,1.
9Ds8
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
YRgI
c Xz
qK)@\
5Rp}_
i I-
wN<,
XPT
_AppDomain
QRl*
d4vx
'j)4z
-,v-
-oaO-/
Z$vQ
W0=1
/"nX<
5:CR
^@r(
{\E}d#
n6=m? 3
P(!a
F{HOg
OD2~
{mJYSj
*68|;/
#r1({
GGSZ+G<
2HUG
%< j
G$.t=h
pI=#$`
HY:Z
%Eer Rf
H >|2$
j"Vy
ch '
0YfL
XRk)V
,!g^
-v=o
A/T|
}e- z
z]Tn
j.QT`G
fy*u
Wz]ku
2N 89
s-5'
r^ n
5JxK
Do0y6=
y.jv"a
TuGu
/\$
Su5"0
j-1z
n-A?
50\]c
oC^j
Ei+>
;@Q0
,y1%
vSB
Z<y>
Fa6
kFgi
zq v
TTQT^
jy :
jj7o
_Oyksh
M: ]
OHw4
&HgL
&BUHE
ilLI
A7${
`3e'E
<"ylO
WW_!
=W=|a
IntPtr
iy#H
K4w1Z
uNMQ"
R?TxR
yqp}9
!<CL
F# -
Werh
lCc[
I @3
b^ua
GEVw
[}9q
m/{( H
y ]5
Rhr;
~.G{L
WY" B
cT(8zh
XTG>C
@1AU8
@,}>&
JXBr64
#F 2
eCgj
:pAd
0H.B
li^4
y; I
"9`42
M32o
f.:
'D7/
{Lu
d?!2b)
m~~Y
FjEM
6jRU
.yeH
W8@/
-Q"@
rf BZ4
81B,>
u`Mw
,W}[RAo
(<9}
28jL
YA1#
6r7`
G[PR
=pGI
9$\ #
cV*C
g/\q
/y!t
3PW*
9=8&
b(Un,
. j?17
BZp0 zKJE
&ZSX
Ez x/ka
3( ,
nPwK
m/i
/t Z
[iT
30,
;5N3
qR)I
P`h8
=,DL
2Pgb
Z2(dp9
W|zI
:+;5ah
R?:d
-8[z
X<zf4
L'vt
P15w
.I{
9M)Zmw
&eD_
8Sx"
<9k{
L]JQsS
:VfQW
Form
Z)
:Gh31
WfT]
hdK$
Y(fW[
P% (
vb/?
"" \X
cA?j
W -b
|z6.
]/5 T
Y b#
3kAB
1hpB
?3H
M4Mv(
;e/j
ti&iCa
<t_ X\
3gQ~}Z
bst8
.z,u
HFO[
b Nx!q
LxasG,
zJ;e
D? J
h;tT
b$1O
T.PY
cs-\
JXQ8
+/]7
{^]T^
9QF#,
yY I}
M NP
u L1b
J6(BNuwJ
.c[o
=jm.
-f!G
HOQ2
C#$A
uk-\e
q}m
)0gF
uAP0,
R6Rn
?I5E"
0Pvy
~L ZNjv
@3Mh
[JW3
[I{5
+6 w
!=ya2
Pyn)
V2!M+
A6nh
@/(N+]
bmdCd
|>ct
12Ze
'v(+
Ht{/"
G'dA
S| JD
jGoiFL
FqO!
A<h$;
yUcF8
!3&Y
Z N}
M=
@);vGu
99x
PrR
>hiw8lO
v4: ~h|<
OgO
4S5iFS
Y=ej
w#><
NvI]Zxd
m(XBIRxpR
u v
4Q0bAP
0mI3
A9b,qK)l
J z.
6OB_
sx\.
< *|
t5.:
M#o 1
Q[/^
qHj&uiM?^SB
fDW1
Fm6H
y /k)
oc?j
NHH}
)9&g
%6 3
#4Nf
? 9?c
&NL7#
HKc7
tg 1
>g>w$
O,4 N
DD[
0ZTa
~d;i
b.OTg
K"xA
P $
w `3
dS4A
MX<:{jlxr
JNJl
\g!q
j\" o
oD73
U;)rf
P_ 6
.]NS
$q{WK
.%\DY
"{ l
B5 l
Y~9# 8
D5<L[
0Vb'
StringBuilder
lZ,27^
d9)
f`^~G
\NPK
~mF7g
u}?jsj
=b%I+
^W]
1+!u
{!k8
K-.
]X5 f
H K1h.#
{*Gq
cIN7-p
ISupportInitialize
'<ob
Dp'*G
1/
Rg{\
&%Ja#
87r7-
{GxM
o!m6UZ
dx[
<"o
#{@5
\rbnK
>mdx53
stl^fS
,sL <^8
H 8L
{k;~
g2"G
q Q%4z=
T#wQ
<99+g
Z%LI<
H O5
#~pg
jFgX
&E~+
$X3v
e9[,2
R={J '6
t|fS
l +T
INz@
cC*/p
g8(-@VH
:OJl
^H+pe
Zk&@
EtF@
dEKa?a
d$K[
^^Z,
)qrF.
=$]_l
N&ZL
W>a[:
qF{>
N>d ;
Rbl
w'wk
"J@7
kv+,
Vr Q
m F8
*NA'8
<,CT%`
B4z
CVpI
)*\w
H_"4
^+`D
+jh
@JXH
1c"B3JSWn =
I l-
_&U
pfW*
iur>
=7']
>mC8
1{kgp
iQz8
?d+U
DM6/
o1}A
L) B
E(*su
.+f*+BQ
az {
r9HC#
^}N3
>#'
+?{"d(y
:V@|C
vinf(
F.ywz
a)jJ
*Ts-lC
Ka9{
92m9q
I$2~
s#a(.
y3@A
V<C*en=
<*ndV
+T0B
tS9)V
=P|
Qu{Q
dMH*
pBjBt
6 l
*4 k Z
OEK[=
Yt9]
)Zq6
WNJB
YU<?
o"69
$Nwg
4oN
R @Z
Uy}R
+\zc6
String
m~,
xr+F
k_O8`
JTs7'
g[ y
UbhL
W p}
m`b9
@S1e
^MS|
s|lU?/w
CF%#
q|H+
.#3Y
D]~%
FCPV=|
"hL{
kTgY
lO^!
7(*4
&rk\
InitializeArray
$I 4
w ;g0
zKL2
H-W9
@ <
pIWa
+g|X
_v\$+
]~)J
T8 e
g<I)&
--X
Pb<
'z#\;H
:BZ7mDn
C .K
thG*{S
/JI\
,L*P
w+d}
~HFb
uXz]m
D \$
*A[m
X%-*($
/ -Q#
K~dG
qm7,H
xMvg/
xr3y_
Y!HCj)
TX,~
$F\
]h-1
Gvb#
\\u"ma
'IGQ
D4$5}
y,3z
ux7q1;r8'7{[
^t1d
GZ#}
?_'
Ny^>
} !4s&
+A 84
Load
2{V.s
";=^
/ H`c
<P"a5
jR<Rz =
K]4o
~_F
;aEo
EB,X
F@6x&
CW*m
:y7)
"=)R5j
|"F6
&;[ `
df
CAb#
fqs`
nS*,
di(
'Y8b
' #v
]2\H
[~0%
Z Q#
)G;0
[^[>L
9N&@
y/:Kwf71
t1b_
V^*y<n
U7v*KmB3`
(IlF
st[[
@4nW
DD0;
F~ gq
%&L8>
n# q
HQ>A\
J 7w
Mxaf
=,RC
P,LQ
4N]
BpPJ7
E0+7+=
UY$/
pG/ >|
z9Cf
uG @#
I5IY
fo$f
*Z 48t
%a,\
z5bV
Y{ys
YGVB
r1m,*
;j)7
IC5o
={aQ
6;W6|
VLj
LK>R
:zv_/
IYv+s
zL~b
Q6 "
TJgl_
#`u{
4l}u
~jP
;O j
6_0[
W$ 7
=Z _
uBGT
CjK
$cKvL
.<C!
*uh[ e
R=.%
SoA_
NqQ\MY
{C*&
p 52
;(6i
30%E
+8?f
vQ<ma
*9kn4m|
vu_Gv
h)sc
]qn
$L"6
A5/]
hWQf
5{N%w
&s?V/Y=
]C\$
`2))'
} 4+
(k|0?
C n8
PC&2
Y374
RePdK
[;x)
SN.>e[1f
G4C:
k,)k
~|+I
%?f.
$X(n,Z0
&lTCR
%fDrg
LO&1$
#FBSI
5;h0F
-ybX
2b |
T.^>
{BH|
STAVN
AHVu
e\LEspy
kj8 {
k~r~<.)
&!69
:Q"in"amI
iN&Wxt
(YL^
C_g3
\0? q%-
{ylE
R.C{
RY\Y$
P^_Z
?JFK
:0.?
l[F ]
e({%
+pn Y
3aG
PkP >:
ABlI^G
get_Module
'L@O
.kzs
ORF5
.N.
8" y
]LZ"
redz
|{U#
s,Rr
Exit
`8<@
$@o2X
qF ue
}^ t
7:vu
t= hN
RC1`
GN(.z
MK;- F
yh]$7
BcrjI
|WcKw
GRVM
i2-
p1f
9.JC
imX} u
mkJ .^
Av]BuO
EZ*t+
YdTBN
; a!
@d3f
ResumeLayout
Lxe
yD@ -n
RK!g
*D7m
:0a>@
ger)
ijl
y3 ,
t p#
}=Yc
/So2x
BwzZb>
"J-QE
psC8
~PF:
_ [ 9+
\PY|
Y(O~
?3z#
~Q V
lL\Y
Y)}oF|}u
$}:>?
|wwhj
OwG
8*@
q q^
^W[]
Li6b+
)ARJC
Lnk&
rH4q
TKm_
/ia%
`"=mp
!d<
5)rz
Y rR.:
Q~| .&
Ibs q^
oQax&
]l,
k/W
I2("
>KO6
,) v 3
qZ*;
p ]*f "J
]{[7
set_Item
iE*K
\P&=
0L'lQ
.$K
. x{
yjo1[_
5rb6
D4E]
d) ]
83{_F
)Flt
n {S
.NfQ
h(*<|
0.u!
r6+V
=m:>%v
d8)N
]#,|:
akvr
hKH
SetCompatibleTextRenderingDefault
8~KV<V
NB1[
:B?p
EUu9
{zl B
D[hM
,_VVD*\v
LGXF
g\}OZr
ZffH
e:>
G4^S
CKC !
_ Wi/
*Fb>
? 0
K={.
Q7 ,_Is
f9 m
e(#H
<}fe
j eV
&b
i3$oX#)J
0A1Rc}
oT;_
n1sP
?Yd
qy!0al
{JAN
AoFr
YR9q
&jd
p#|0
6"-h
O `R
>u J
w.1:k
tkh3.A
?Z.!
|f^
\F`|
95@ 3
c< &
`Rm6
Bx(x
#r^$
'?HK
m kR
AIAA:T
mw-h
bN-'
4=@0
<=+6
YsQLPI
T1W<
@KW>0}US
%4"AJl
"24`Jr
@!x~>/
n _V1
%zK}S
"PMs
d 8
RU W
T*J<T
Z8p`DA
U-#{
Z}og
uneo@
PI #
yyIp
&(bL
(cc
1N&3+
#D<8
NGL .
xO{y
Y|ipa
G@^x
5&?7T
h \
C }#
?#<}E
a y
'4Uv
-v0_
n5n<
&0sn
Cz~
!C-V
8)C :{C
zAt-
~ /B/
*T,
W#al
_Xo0
T>3M
g:*k
_8tu
9U!a7
rE}3
O#)?*
0B R
|NLb
=l1
[0X]G2
CV?Y=v
_ p&f
\)0g
GetTypeFromHandle
Y s
f\&?
#N7~,
M4qjQ
6Y6{
xXl\z
"!J5
'-=(.)
'l Cy
h65
>q1!
5D @
C~T8[
3+Ln
.=nM
)0x RGBJ
<*]c
m w[{
K~(R
m-k-
y#:
>|4
@]_b
j_"'
Jdd+;
F{rW
l})pw
J`$
Z Tjk
System.Runtime.Serialization
<Flp(h[r
{]!7
)krG`C?
"-'I
,*I9p
P G!9t
W'ZA !1a
gYMRu
_2c?
Z>7Xs(
f&U#y
&b5<
O7Oc
W \m
SC q
jCr
9]jA|&
x>WAw
B2u;b
8B/2
System.Runtime.InteropServices
ekc$
kl^_
2SO5
s[U$
3b,.*
eOJsx
ipJg
:"qH%eL
H 3g
^ <-
K"mJ^
<'u
uNvP(6
>V /
&}^o
^qzxovM
D< ft
TTbs
YDe'
/I9f
lfD]
((I-
tXt2d{
\2&=
VXAJ6
ROGa
c1.!0
System.Runtime.CompilerServices
&bjZ
?[c%
j37/

X# }
@^W<
%{8+
v`[|
'CZkj
b][S
'u 1
$8w
S7},
h0;]
M$U9
k0s!~
Y,ni
\yzL
-G(Ry
W\S
&&r'
set_AutoScaleDimensions
FHp5
vS]l
u v9>
P#r0
n7|3
hk<~
P l4v
x):q
:<Wx
7:cN
8FO5I
h) L
*#.^
~zYxu
b#kC
@cHK
Y%L;
/. ni
t'GO
rR q
7#+q5
c\mU
nR41G
u>ns
j4y#
VWe;PK&
I_Fh)?$&
gD3x
FQgS
>QM>
QSKZ
Oy:6
t+Gr
CHT)!
C]#Y
$hT'P@
GUE!
|p@
4xCd
N`C=
XlJ*=
w%l1
!IoC
xZp@
yk&
0~3J
sU3=
UNH#Q
b7Jh
* X9q
B1go
\;,
M2lW
CompressionMode
c+)X,
D 3
cMWm
xyS~
&~+J-
@}:U$N
9cp
0t|*
SlL;
^ Z>b
/:VA
zB`-l
R\VN<q
's1C
N=04
7i[1
HCS<NS
9Uf'
S(.n
y"8>~
(F:
L/y)!A
&6H/i
tE'J
2*>mJQ
'- @
[|3qv
uP@Q
I0+En7o
J5o?
yu,b$
&n`;R
.dHg
_1K\?
`D3r
]@0-f$):
$2Dn
^e ?~
;q bCn
keC
2}+c_JM
U&EDm r
q3]q
d&e3
vAc{Z
UFF
ip)P
vya[
ypu}6x2
6Ktx
>nSZ
_;Nf
tQ8N
_b`
d7db5788-88c0-a5.Resources.resources
w&T2
]=XIU
E4)&&
NaB0
,\;m
xSVy
%1$iGf$
xK/.
=&7B
t4)r
a9d~
TmT~
y8e$
aSIm
^z5#U45
l,aD3
ZT]Vvh
gW*2d
~ p:Gz
)rbJ
SNN<U
hGvI
n<l 2
OR@E
7H%Z
ToString
)'J"
X)eP
[(z 61
EpKk_
Zme%
QlQ(
E3Cv
Y<F_*
1W
c. K
nA&Cr@
xD$
]qIo
V@ ot
$6Ter
._GE
bTy<
}15 B'#
[2ytx
2,o4
B8'[~=
QDf:
uZn_
F\\9
UnU
b* ES
q_{zB"
E.6p
0lrR
#<8T
#aOq8
.jSW
a `Uc
(v]8\
4yX'z
HrPT
pMkVmDs
";5^3
B<Lr
SfR
LL09
Encoding
W.6
j\L`t
%DG;
&zM
|Cl)
aj6z
disposing
F'3}
mv$l^
]jd=
A7je
VG]w
]|{-
"cq2
3a@V%I
a~WE/)
lU;M
Cd$n
aT9Z{
G x$
_+v/
d_h]M
2(Tf
&T@l(}
1^ti<jG
WY<n*
fsM\:|
*Zbm#
K]X4
A'K
H"c"p$
:yA4
]>pk&
J$2.
/rb:
Be<8T
pf]O
T)JR,!
wy ^
.07
wbE8
b{\
-H*
rLE6
5o*p
L~A7
q)n
5/^+qQ
2W/g
`la"
6& 8p
,$R|
(R ;>V
C WsS*
|w 9
dy%6
(,GOA
0& q
M(kA(5W
[-^;2jm`
KlC
~\
eTgV
vc)+
I6d M
j #l
$>/Y
Wiq
2e=p
3JHS
F\Iw
;{d
JxjI
8.<,
i?gu
Tn=Pg
zF(F
|Bi
@='zo
@B V
1zmF@
MeA@ch
42F\
s?"~
F:5#
\3Uf
VykC
temZ
k[`C
el>q
W{ T
System.Collections.Generic
O(hg
uY)b
>&feD
HY +C
XSv"OW
{_|G
"j \
g.iD
hX;|
V- @a
fjf &
b&3?D
`+65
&jyh
k ~s
'.&6C
lp^C
uZq}
O4Ek
M&W0
;C9C
h@kZ
<<8w
fxh h
System.Drawing.Bitmap
}wyx`
k"VT`
m -B
z:BD[
j"\9
"ol_
}6A*
Q<3; >N
;)Sw/c
<G] Q6;
5u3V
W8R+
4}"D
/qW)
gQOPf
gvk%@
g6"
Gg9Y
e6Z&
4d9e
Or&b
Aqes!
u@*}
| 4r?
X{i|_
~G 5
Uz|L[
t7mZ
f2C\
o[@:9,
Qy[&
t#*PhDl
[ X2
;SS/
+#f:
kw?jM1l
pX(k
BM;|Z(
l)Z-
u"~QN
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-04-17 10:42:32 2018-04-17 10:45:23 171

8 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-04-17 10:42:32 2018-04-17 10:45:23 171

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe.config
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\344638805252.config
C:\Users\Seven01\AppData\Local\Temp\344638805252.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\ahronbd.ttf
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Users\Seven01\AppData\Local\Temp\it-IT\njghfcgfe.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\njghfcgfe.resources\njghfcgfe.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\njghfcgfe.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\njghfcgfe.resources\njghfcgfe.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\njghfcgfe.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\njghfcgfe.resources\njghfcgfe.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\njghfcgfe.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\njghfcgfe.resources\njghfcgfe.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.default
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.default
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.default
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2520.21673859
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2520.21673859
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2520.21673906

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe.config
C:\Users\Seven01\AppData\Local\Temp\344638805252.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll

Write Files

C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2520.21673859
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2520.21673859
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch

Delete Files

C:\Users\Seven01\AppData\Local\Temp\344638805252.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2520.21673859
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2520.21673859
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2520.21673906

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\344638805252.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\291f9fad\207ef96b
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_CURRENT_USER\EUDC\1252
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5db19cc4\62c7bbec
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|344638805252.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|344638805252.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|344638805252.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5db19cc4\689001cd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\(Default)

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
uxtheme.dll.IsAppThemed
kernel32.dll.CreateActCtxA
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
user32.dll.RegisterWindowMessageW
user32.dll.GetSystemMetrics
user32.dll.AdjustWindowRectEx
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetCurrentActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.GetModuleHandleW
kernel32.dll.GetProcAddress
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
kernel32.dll.GetUserDefaultUILanguage
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
user32.dll.CallWindowProcW
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
kernel32.dll.DeactivateActCtx
gdi32.dll.CreateCompatibleDC
kernel32.dll.GetSystemDefaultLCID
gdi32.dll.GetObjectW
user32.dll.GetDC
kernel32.dll.GetCurrentProcessId
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
mscoreei.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateFontFromLogfontW
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegQueryInfoKeyA
kernel32.dll.RegCloseKey
kernel32.dll.RegCreateKeyExW
kernel32.dll.RegQueryValueExW
kernel32.dll.RegEnumValueW
kernel32.dll.RegQueryInfoKeyW
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
mscoree.dll.ND_RU1
mscoreei.dll.ND_RU1
gdiplus.dll.GdipGetFontUnit
gdiplus.dll.GdipGetFontSize
gdiplus.dll.GdipGetFontStyle
gdiplus.dll.GdipGetFamily
user32.dll.ReleaseDC
gdiplus.dll.GdipCreateFromHDC
gdiplus.dll.GdipGetDpiY
gdiplus.dll.GdipGetFontHeight
gdiplus.dll.GdipGetEmHeight
gdiplus.dll.GdipGetLineSpacing
gdiplus.dll.GdipDeleteGraphics
gdiplus.dll.GdipCreateFont
gdiplus.dll.GdipDeleteFont
gdiplus.dll.GdipGetLogFontW
mscoree.dll.ND_WU1
mscoreei.dll.ND_WU1
gdi32.dll.CreateFontIndirectW
gdi32.dll.SelectObject
gdi32.dll.GetTextMetricsW
gdi32.dll.GetTextExtentPoint32W
gdi32.dll.DeleteDC
dwmapi.dll.DwmIsCompositionEnabled
user32.dll.SetWindowTextW
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.CreateEventW
kernel32.dll.CloseHandle
kernel32.dll.SwitchToThread
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
kernel32.dll.SetEvent
kernel32.dll.GetStartupInfoW
gdi32.dll.GetDeviceCaps
user32.dll.CreateIconFromResourceEx
user32.dll.MsgWaitForMultipleObjectsEx
user32.dll.SendMessageW
gdi32.dll.GetLayout
gdi32.dll.GdiRealizationInfo
gdi32.dll.FontIsLinked
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetFontAssocStatus
advapi32.dll.RegQueryValueExA
user32.dll.GetSystemMenu
user32.dll.GetWindowPlacement
user32.dll.EnableMenuItem
user32.dll.GetWindowTextLengthW
user32.dll.GetWindowTextW
user32.dll.SetWindowPos
user32.dll.RedrawWindow
user32.dll.ShowWindow
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.DeleteFileW
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
culture.dll.ConvertLangIdToCultureName
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptDecrypt
cryptsp.dll.CryptEncrypt
cryptsp.dll.CryptDestroyKey
cryptsp.dll.CryptReleaseContext
user32.dll.PeekMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
user32.dll.PostMessageW
advapi32.dll.RegSetValueExW
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
ntdll.dll.NtWriteVirtualMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection
user32.dll.DestroyIcon
user32.dll.DestroyWindow
user32.dll.PostThreadMessageW
ole32.dll.OleInitialize
ole32.dll.CoRegisterMessageFilter
user32.dll.GetMessageA
user32.dll.EnumThreadWindows
user32.dll.SetClassLongW
user32.dll.UnregisterClassW
kernel32.dll.DeleteAtom
user32.dll.IsWindow
oleaut32.dll.#500
gdi32.dll.DeleteObject
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
advapi32.dll.EventUnregister

Execute Commands

"C:\Users\Seven01\AppData\Local\Temp\344638805252.exe"

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-04-17 10:45:27

Detected family: #Ispy

TheSystem Itself @ 2018-04-17 10:58:02