MalScore
100/100
MalFamily
Malicious

1.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 32/68 Related 2059
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 1252.50 KB (1282560 bytes)
Compile time: 2017-12-07 21:11:00
MD5: 2cbc203aa9608408193403adcda7de9c
SHA1: e1f88866996463cfd1a6bb859c7bbefcd750a70d
SHA256: 67b141b297329006cefca1c703bd92237e72f1f727cbcd56cd7ef4375c63cb67
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 1]0F1f .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2017-12-12 20:24:02
Last submission: 2017-12-12 20:24:02
Filename detected: - 1.exe (1)
URL file hosting
hXXp://fast-cargo.com/images/file/dde/1.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2017-12-12 01:18:42 [32/68] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
1]0F1f 0x2000 0xd5bc0 875520 7605ef0f8b88a75223ca86a56fef51bc 30b911dd4c616f35e93e6388a8974ea5d3c06b61
.text 0xd8000 0x7f90 32768 fa91c1a5eb9cd231f22b6d1304bfba11 00bf843382dfdc1901d433ed9384922da302eeaf
.rsrc 0xe0000 0x5ac78 372224 c34062de501fed52ef82d2d5f0f3feac daa45d6d11e18aeaafdeadda373b83c4532a85bf
.reloc 0x13c000 0xc 512 cc1ba4995b8456b728e64adb64954a88 7a105600b93cd842eb4679d918d958ea36d0f396
0x13e000 0x10 512 6a01a95513164daad9a7f66c7c33084c 80e3977dbdc334639bb2b72f1d268ea8631d066b
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x136528 16936 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x13a750 90 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x13a7ac 736 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x13aa8c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: XXrm
Assembly Version: 15.22.64.81
InternalName: file.exe
FileVersion: 83.24.44.59
CompanyName: LqzV
Comments: SrjE
ProductName: dhy5
ProductVersion: 83.24.44.59
FileDescription: J2Ib
Translation: 0x0000 0x04b0
OriginalFilename: file.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
83.24.44.59
15.22.64.81
URL(s)
No URL found
J2Ib
Assembly Version
VarFileInfo
Comments
file.exe
1'K
ProductName
LqzV
FileVersion
InternalName
S;,
15.22.64.81
1-W
5#E
StringFileInfo
Translation
LegalCopyright
S;,?
VS_VERSION_INFO
5.]
83.24.44.59
000004b0
ProductVersion
tAB
FileDescription
OriginalFilename
SrjE
CompanyName
5(O
dhy5
XXrm
1.]
Xl9*:
i9AR
4<R
|<0
#HIt
@Zyn
fZJQ
]<]{$)
-fc_
~iK
z ZV
Int32
:T!r
n u;
*o,w
qle:
(q/b
aQ5j0
<X c
'H`~
mv M
!ai
E|BY
ResolveEventHandler
}@@&
][.T
.WMSF
N8r
51 M
vsq_
mEao
^: $
_:+|
_{tq
uG'6\
d "n
LTgQ
9| R
9bRQ
S<_/m
O^TZ
})-XN
f5Qb
KEn=K
F's@aU
"#nc
&ee%g{
)r@=H
|W)'ap
lB-r
YL#ys
l^G^q
0{j"#
&r7s
BE6-
T,v[
.aR+
K'j(
S]#'r
(WIiw t
Ui| u
_3 A`
E3+^(
1dC9[M
!w$!|4
((bh6
[z8:Z
z5H%=
jheE
UbaLQ
6xIQhl1
o7lu
pq3
VYRr
VzHCHrAipUfq3RDa
Cu.I
svM3Ec0Bagl
uTc
p/4i
vGozg
0f` o
# G~
X. L9
Weo!CK,
3Dd,T
Ho6o:
S2'7
1<=v
bhKZJ
:~+3+
zBJJqbKy1NGx
.8.F
}m{d
pZy
o|be
nS.X
iK-H
kt\{
uUa\\
f9Vb`Y
N\gn
x.7l
eD"e
.>e%
)j#%w
n3dp
GrI)
EybaKe
\u>N
{vf9
2d<ah|
Sx{K
j @9
61">'
Og*h
[V/S
~_%p&%$
]qF:6
1PZ9
ctHo
]0<,&
lVb?
:+hy
>lvH:]
_^-?6
j=O0.
y}A]
1+} M
>kWC[
YZ}
.<2l
y`v
xuD
S'( 3
i(I1
wG&b
[#_
[&Jc
p%
NVJI/
=;,$
!}@k$3
lUo
^HhB
C;dR
Q]S
. aa
]"Z
Vv"uc
<~[E
D?&i
$:z}
_hG
;6@
_+,{
?)N
R;^6
,s:4
}-U
a( T
F#h.
SH<o
ulA0T0ZwFp
g6*bpeO\
a Q D7
^`id
p0d~
3 2e#V
<B[T
! i"N .7~ Z%zN
T:>}
X_>%@1
uPI):nR
_J g
E[*I
, 2$
hEV3
+|$gQ
x(Tn
t7:/;
j~1L
\!T@y
+4umC
z'`W
$&xP
AaBok
+WHp
G-7t
iM,}0
j(<
.^J_
@m|{
COH6
Q ZO
rN Ac%
Wgi%_P
^nWb
G H
i-VVj
C}f>
IPi
Z8H,
5p_veV;
wn,{
RfcvY_
99yY
k$ c
vP;g
<I5tv
TW F
HT{~
a4A#
Rg8.F
Eo`p
UnverifiableCodeAttribute
9[jV
$8VG
p~cA
7{T 6
R4BJ
1 'z
VEb@
>)9H
HaR[X
Z '?
".j
//# P
=m#Z
5J5Nn
||ck
OH3r
Copy
~z
#(T
^>O M
;3KQ1m
'C~>
Jw"|
+B]'a
M;Mu
e]LZ44
Bi6J
)O_
7h"
.eE_
NmA=
qXA
ws/#%
x8qJ
lzCf*o
~G(V
!+,
GetString
gHH`
_w!T1
L[xV
pTzG
BB0?c$
!,'}
KFZP
Xo` am
Ol3*sDI5
HhF(
w4SK
a9:`C
R?7t`
sL?M
d"*<
#y !Y'
wB2R
D#"
3[%~RJ
>} I
nHW /
'_Y4S
:*_n9
m1P6z
D^+s
F`Z52&
xI|7r1CZ
-/AI
+uFf
|I+~
VYVw/`
BOZbSRlT92xVHIw
6}2s
gN"N
5+!E
ufTC
?vJ:
A|H*&
\ 1Y
?n4#
/1 .
BmTZxnAo0kJBB9ro5zP
` 9h
o0a
QK7P
?vq;
< X3
Ey- sB
zG >d
RX.t
A m?UZ
+W>n
wAr?
6+3(k
A8HH
2]vi
LGGex
,S:l
n_GhZF+
r,f]
get_FullyQualifiedName
#7@W,t
f {~
ZetW
(P(y
M"i&
K&Z;
hz1r
` 99
!>V6
n~c`
= h
[ZVC)
_j~'C
` > E
!cf^%M
z*M{
i.FE
BG '
b.Nh
?=P
n^c]p
[+S
m1V5=;C
E3M7x|
jCO9PoKEuB0BC
LHHc
C[:e
pI. q
aV[$<
]wxZ,
Ct9M@
Z&\e
xK $
1%IU
.RViW
7<Rv'
$4o
.text
,Se!
Z;TE
lJ>H
Hbc2X
7S97s
_Nq;
6G9/
um <
HuLH
|$,#
b3 O:
nb%e
+JM7
.# f
5ZmX
3i![&
6gw
Je6Q
XuYk`
]yDO
pcwtTse3hsXodKF9
+4*OD-
Wwdp
}S>|
^pj+
!W&#t
zeW8G
I$p{u
B+$E;
D 4q
8k>9iQ
U sU
A:Fz1'|
:;N1
q7tm
KXna
bi_>
a0\OkU,i
?l7a
YI T(
.UP.]dQ
4p@!
_:xK
eU_q.$6
!TDBXMmo
7ybrN1
mDYz
gYvB
)JA
Kdmd
'a/[0
,F"|Gv
jaNk(
!#ic
4d;"
:D87
R ;.9
;}#
I<er
EX H
0^0-
1h1dbse
$14?-
%@l`
&)'
u?x\
Y~#A
TG5
rOnQ
tOqP ^C
G1^-
\K C
{$,z
xJ5u
Wz*+
0P~{
-bFr[&:
5 rr
*6c!
zbIU
vJ@#
VQ9X
@NWdb
ResolveEventArgs
E]9M
2f|(dA
3[0O
kTau
{2dux<
m(Xo
koxU6xiTqBH0HN
O'l8
nX5ay
= k5R
81\!jR
gV'&
zh_kh
GOboO
]n[
lT=4p
JGP;
z# H
bmC8
OQy
?!k%
sVWT6
4'Y]
fY30
Th@, /
M2|`De&
y5Ic
4Pxc)N
(o !@
xjY7
A)Fm>
W94r
HJP;
=qYMg]n
cR=@k
9*U9
d#Z
set_IsBackground
o}x
3cQs
{^*}
Hika
XLUUP
jJ\
MR'x
a&$
#qwP 1
xC(!S
fda3
3RYs
X211
o{*8
>Fit
HB3[
[U-N
rX@Q
fBLY/
hus
Kt!~5,
Object
Zr'~MIs
ubC$
OY5z
;kV\?
T6 y
{?/G
th
ZC'qcUX
b?=3 5\~
3~r _
6i[y
7@Np
ZN8t
+Tb
\~Pj
'$tt
)Iz&
n$6X
<DrI
|slC
IQ?@$
RqP\I
[u(A
/`Bs
?CvY
tg`H
ER03
s"W
<8ko
7awT
J9u)v
Vs~~e
NM4KP
2!p*
~j{v
y@h+
2I,B
6W|4eF
ZdvZNZxHjcPQ5squQA
TjO=
?N2`
@ M!
7#B >K
b$qI
Ltjd
_t R}
RC]q
$4Aj
Qc$N:z
F">
vlZ(
\McFA
^ Db
!(ZzL-
) V"
5 eP'
(c^b
<9v\[
H\v}i
j>BT
'1F@
Us@I1
A91['o E
XU=
=Wvg
C+qn,
V|^LT0
FarsU1buigc63l
)Wt;
79$bg
t-cJ
-y,q
IP&k
1wu3sH
p Fz
2BjS=,y[x
w&1FraG
KSi8
@{#8+
`m48
&QpS
a{48
>O;!
J}mP|5
[?G/
78WJ
^Q~)
D^4P
`=P_
S CRC
60)j
7QLWm
HBN<o
X'3!
pzjX
;z%+
^QEN w (
Eq1C
D^a.
H65fWS5P-
}9w
u8g
& -'
- fJ2c"
a Kec
.KaY
N!z3cs^ C"
Bwyv[q
(GT0f
':A+
EN\"9
BUbq^t
&>L~
u@ZU
bqzh
{;TH
(Wvv
`$$h
P,2a
'
1U )fsJ
'qZ0u
k{YI
ldQbQEIUUXNOo7a
^~2Y
WaLDF
:nU]R
'|aX
QCa8
i_NUh
C"rB!
S3bO[A
[DWF
HH*@
_WlcJf3
Bz;)
YX05
d(E-c
4%2
`Md
O,uo
j_4
`'3z
j@o'@
FtF
5c<9u
5G4>"a,
Q.+
}" E
r<zm|
*hj'
`) .
aehpcZa}?6r
og! ,HKq
*(K
iZa!
|`s 6a
+t[o
`Yly
6zX,G/y
kFW)
)5De$
=NyB
}-Se
X]3X
5:oUC
(SI B
[xDK3I
FC>B
07x"B
M;$]
Y7Q<
v4.0.30319
(Z\$
pF Ks
% .A
BauV
CcbS
*?m
S'z
kRnZ
@"bT
6a U
dHW}$
]Vm/
!L_i
1zh,
/#0M
K Uo
wag7
'Xv'
b'[~
c.\V
*1n4
tT!S
;5|'0s
@zA}j
`cL\J
3'*>
YB'
4IWr
{CzAE
$F.V%
6O`R
b/[R
B]T/
w;,/~
d8I
@A}il\1
Vypc
zXgm
x?>R
UXlwTg
m @]
PSII
BbFsy!
jKa
[`~*q
*K*n
hFR
tn:x
vfb E
4?lVO
C(^8
pAo)J"i
bTq#
NuP0
\v xz
)SnMig K
*v)`@
e5g`4
((*+
n07k
H d
i\30
-0.
zfVD}uN
.(co
}sa~
( d~
IDz9vO
p {<n
mvkg
YQk
E&Sy
)Tmb
kUO"|
G.Vx
uC^^2_
;5ka
~w.|
G I [_'
Z_g
a'BmI
tp4H
<o!4
cDh_R
T9S
x4tmx0tYsVidjBbTq
N"Ad
;['!
Z:Mwp
=M/=
`r@kb
XN sW
kF[&
&hfj]
$^]'
=$kq
5N!3
o Q
AY;/7 t
D@\f
~"B7
I00a|mn
rz/
S m
@ ~x
Module
0#-O
=,2Z
] Ol]
ppR0U
=g[
cs}y
ib)D
NoQ/
4.v
B`Ry
beY'
@VY7E
?6e;
(|=n
N)dZ {9
r,1b
&<Ya
5l]oQ
M)p*
YWwhN
4G@8k
5nvZN
8|;D
}X3e9}
Bxme
pbUW
2 3,
[rzb
]hiY
N_iB
gMD%
w]`z
!z\<7{
Msk_,
}o8cr
dDnw
V:2?
."Y_
_8C>Q
Cdhv
vBq
Ffjf
[ @w
I*
geUm
3 =+
/`xs
TR#4
N=uq
H&y`
>@*ewt
#-%'
#"^e
#0F>
)$Ol
2e1c
lB4W
6 **R
"KVT
E+]s
tC P
h%#^k
(X /
nr Zq
w ?e
{#@_J
+{[
\R>J
,=Y-
cM0R
P?Zw?
n)x%
Fjr^
L&\}
K;6Mp
O=Kh
%'`dA
mtE
[s,iU~
'g2:
<4B|
T7iR4NUXlF
58o63wDfazy1y7
(##/
~.En
B'$jNuz0
CC81
JlmAoZiviObsOfq2h
Ve!u
f9nx
XewhGQb562N8KacIM
_aa.
?cH$
~(;;
zP 2BvbB
^z
aP2C
@`WI
@ SWwZ
uZ"h
' q
y_ Y
K\fgoO
]"H *
O3&H
i8{-@iP
>&A 4
17](
v i<K
q9*A1
z)'Ez
lxOVQ
rZQ%
b1
4}&_
,MpK
6o~a7J
=x@4!
gi.
0?)L
~ !
YRO=
Kx6E
z"/R
-Z{9
0 DG
-)=)T*
h!W!X
M%f0j
&+N
\Rv~
%./_
q!&OD
/ika
L} s>
$g0"5
p d{
K_ZUq
7<aL
o]#
/#huE
h#p]
!"[/)x =]
C .O
C>K1
"zN
< r
6 U
m1IM
iWsh
#-5X
ZlCpH
Tzes
}!O~7
1uZ}Y
+G8>$
<S8E
Kv-^^
<~oq[,Yw
4;@&
c7|G
V2)#.
1m;2
Lk:(
)gQr
#s~g_
;<WT
5-.o
|krcY
"q4C?l
4b!]M
oDUy
U6:h
4:c\ Z
X0t~
Bc}k
7W\C
2[=BbJ
XDSA
' mOs
BKe&
Zi//
Ymlx
5{$K1w
w"Ld#
&Ii}
(cO-
\KhuL
XW23
:f&4
$wJ
e0 a5
9fh$T
dO*Zp
f3vT4
g@"p
n$4+
M][Kr4
EK!^
ZF:|
-U%Y
rQ5%sI
2AsB
o}PBe
i%aL^
kHmPA
e
o 8
\0u}
PB
"H s
)lK/
g6Ed
w4tV
;z'^
(\ -
q^z3#
`hNK
bMJ+
Z; )
8$g*d0
k+9#8fm
s"@iU$
j>D]
Cx+5
~7gX
6<{:
)_v$d
ZB^
s)a l
/ @n
Ijl>
$U
HaTK
r{I /
y1W6
Dco {
}D@t
(1l
U1;|
E{Tn"
v(Nf21c
s} By
jdkf
;33K
AKBgPMaNyOEBvFBXHqNPWKBcVkgOc
!&GN
/.TGWv:
EX o$.
YO1%
X_5
S9$0
WhAM
*u/z%
507B
AssemblyCompanyAttribute
/ Q>
zg"Z
8Ip
Q{gx7
(rIsL
}4-,
x78b
Q2:8
Q7B~
+0'
Y]xDI
:@u
o,Do
\5S\>
\qVM
SikM5
6*uE
Z!c)
y<5>
Y_Me
&NrF
sqW{5R
" HW
r@3"
Lr7-
6fG'#
[IoD,
O|PS
f@1N
7*:A
z'dx
GCN.
Z U2
/8RdF
%0+ 1@V
SH7^@
WJE$
;V5]
}Nl7?
"]zor
DY8OU
?]1>=
]~Ar
oor\=
Ir`L4
RK~7
-f/L
? qN_
]^#ht
*z^gAb
ctUEl8Sp7IJaNQ
p"Rq
5>O}
Bt/:
`K=WFK
eN{91
Qt&@
#2k!i$
F[9u2
Jc{ k`
.N].
<6C*
Oe Z
*?'3
".3-
#=5<Z
Ty8
6M6Y
^SLn
zE S
. h^
&!Uv
;f5#
w!17sy;a
J`{>
?-sGSy\6
Di+J
|?K]s
Q/HMJ
!{~M-G
DGWn
1Z Ld
o\kyF
:f.ki(
^?Oq
l~R*
c%Fs!
J(|d
J4KE
Wnv>
_gR p#
,\!rk3
Z(m~
d2sV
_Q_g
Uj L].
\/7$
}bDM
qW`cd
Cp`$
u#YSve
4@A;
x Yj
A%Nu
H~dP
AuV~
VeK|
:Y 0
!#Pg
Iq ~
G]=H
+uT9p
Wx6s p
pebu)
*f(Z}R
i=T?oN
Uqn9
ths;
96uV
kB=.
c\0qK
0+xc
iYIH=m
gccGA@
w' 4
ZKND
G?-q
3Hy3lZK>U
&ERZ6
OGSlWXhvNfxQl2IbG
E]@u
1+jw
Rkpt
>s
HJ -i
: ,'
{{|>x6\
VNl\#
q9ij
W:SPc;`[
r|x'Szo
mA'n
$ R1Pj
F%;$
;|y6,?
]9eM
d#sX
{gmzJ:e
$w]H
^ j
.OV]
]YjXK\
+w:6h
.OVV
L)VM
zW&<
E=RL+d
}-0_ u
KA=
3:[&
UnBI
.{JY
`'e.
>Qn7
7(f2
a>ve
f#,r
T,|m
&|.G
p@ x
X{W-)*%:
Y8v0
sl53@+
dr}8B
>A)2P
p]@U
:96;
dAP(
mhq
v gbk
YHz2
i@+x
#}H$n'
-rIK*
I&o4
`_4K
TA/d2
v="G
rB#(O
{T_@
${(A
-^69eh
2T e
V/f.
:i/
K, zG:
i%Nw
t?(gLe
P7cs
#Xq>
2<kf
[;"t
Fqp>
0D&"
jhQ> ~r
'?<;y
+D@bD
4jtk
L_?A
naK*(
cM2,
9sGZ
:j0D
Gb>t(tQ
1*it
:;~3
r%=Z 1}
."P
6tYNZQ
xUcs
\G|O
oJ&+
@?bv
%(BN
K=T)o
h$_0
t3
/Z}j#
%F(f
ousI
qG[S
a=}l&$
0\2ZZ Q
|! "LpD
F 2
Ik0h_=
R]+U
<9:>
'YPL
$t*@{c
(y6l
` /D
S!^?
3>f|7
<~%K
rAx7
>!p`
qQ-
4+h4
RuntimeCompatibilityAttribute
vY!f
x[~l&WKeaI
# K1
_ H.
#L/d
;B}3
cT-.
1!jM
VQ`d
sol"wHjm"
DL-m
Kq Ek
,D4h
k[oV
N)j^
NN-0
p[bw
9{LK
VA5T/
ConfuserEx v1.0.0
vu,
f;!+
pru?
x;.J .
!Ol9
r2l
WkXbf
S,'G
LVoz{
`=r
Td}
vV&|
6` (:
EaG>
f;~t
ePYiZ
=VZL
rS0{f<e"
*xeF
IhO:7].
Bu-7
-#fHz
'<]e
W0Ge
~}vT
p|J{
Qq>l
yqWK
#W)x<.
;4R .=N
;%&8*
+I-{9&I@
9}f>T*OF
lL ;
-U/L
.?x%
ZB- ]
Q6+=`
dHc&
4Zu+
1bOK
@PYa
3I U
t-^[P
G nN
WE,i5Mp
| c0ks
w)*z
oa<E
a<Mn3
-r;IG
B;y@
Ei]OPv
8n:n
G1,@.~{
8 !+
,R3Vr
T=(|
+_j/
}?Pc
xc=r[h>
Z Vf
S#+AG
<rR k
i~M:c/i
6_3Y
2'SV
zPGI+
*E)T
94v%
=K8A
4> hm)
zt<4
Xoqo
fpZ791nIica5Lz
( c9D
h!|K
.peahUk
bUM+
9Z3R
f>}f
[ZM'
Z[g`C
$QtL
_%K.
edLe+
/J`V
Eq2IjZ:
'^f)
#lD7
j%w"
2(;[U
#mhr
. }S
# M]
d${fI
?in-w
yVI[
EYxSU
#y5
}^s5
#G&k
0pEY
]J3Y
ORU
,:jM
.)M%e
\Bf
.o\c
MethodBase
:Iy=O
UNgXM
XQU;P
HRBX
Ov Z
U ERD
5p{w
W2J[
v ^]]
l-0 ,
7kL
L7#d!
0,!'
f]n2
4(c
"NI4
7n#$
KJ12r
sLQ&
kQ[,
+ap:q
aJLJ
GetExecutingAssembly
" FdBL
#x_R(
. Is^#
IT]&
vl5m
3VyC
EDllsp
x_bf
q1r>
@:[>w
c~lm
'}V?l
ku+=
V RG
@&1S
=b >5[
hu!7
o3 Xd
*G_<
E(&gx
_c1M
o\FB
Wo@LL
hB6
f!h] 0
.)K[s
Olq
%q5
Lx'J
}I_qF
^R2a
Plp4
h as
N`ThF
=`hj
wW$x
:~)$
Ra}>NU:
SGq
4iQ|VH
_o]Q
8)HL
B*BB
s^ &
FkUA
lS\M
gfLX
;k>\
l[\
K)lV
Vo\,nX
! X
aZ<jh4
AdtX
=3XbTL
o 05
S]I
"L[tr
tWG\
|rRo
Ze_2
l @Q?
{-a$yCrS
V#Ou
AiWK
#K9/
?9%H
V|T7
"%l(7
bv(2
3LBo
qq1U+7
^k1i
ttJV
.9'
b#cF
Av{e
\=no;
8N[.
Ogq
.1xk.J4
];9f
J_w%8
lhyd
hq20
X9JQ
O6L6
C Tj
GU"E
9RY?T
FW8J
`o.!
.^@]
! W'
(P=
|F=
=u[cMH
vnt
9<%$
XMOG
gaDEJ
(m(K
m_ ]
IL*5lk3
wuM~
I,dV
v8`.=
`!W"I
f^T?b|
`Z*zowm
I 0s
@Yb
R/Cr?f
@H.N Z
Read
s W#)
/n{^
x{m
:rW4
T=\^p
~E/mz:
X>k=H
?]{MQ
Aw=Ha'
%K"l
A*]u
IuzQ
pM)nbO2
Y*Uv*O
[$N{
D(%;
exu-
`U$/
\ef
{9Kl
+TAT
/u L
;Dl[W~P
'=cG
xe&T
J;PP4
*S@.
Zy*<
|\F<
>ZxsQ%
/@`V
x8wZ
<c( #O
3['BV
!doP(
]n$>d
5y rsV)
EUDD
u`= X
hVMw
m\PJ
Vcp
m(4(}
a7xV
G\4g:sL
w4UA
Lz&H
<f/<
mm^
!pWe
t7O{.tO
qEIg
f OFR
a<i:6r
R}hf!
0^)X
9 2S*OQ]@<
[!x-b
G;H&
i&0*
?}}W
VjZD
w9u@
sBy!P|
4){=[
zw*,<A
"b w
t:32o
y+@Yu
k+S5r
pgy.
[IUS
PeCM-
U8RU
3nz <
a`0&
E8t7\I!
[@%
`5!6F!
Y\U7T
#iqM
?5
:,E;
> 9T
qFoP
(V/&x
B'.R
0p*]
uoq
YFnr
(lf%
6J"{
I-&:
`u(w`
K22',
KrwudezDt8s0npdT
@n9Q!
e>Z@
oO`"`t
5z=dh4.G[A
K &bal
4fh,Mi
RCZp3
}( =
](h
AvJC
!A:o'
X*T(j
4``o
UPd'
72D92
r}OmXz
]3q<
l=e#n
'<PM
=@M7Z
7 f
=Mts
G67$
Rv a
3cFA
oIMG
pZ8x/~
U)mL
m5g+%
z] 4
DYV5
U]V0(
FB/a`
,kpn_.
Ckjw
CzSF9qIDLrlFtq
1^ GCF
`x*<.D
f=N
Q3 T
WR=J
pd
?6=`
G|xE
jz r
_[Le P&
jqA4b
[!?3
dTP`a
o|O-
?^q,"
b)4z
?QG`,
q3m!
;`Z|
Be{`%7
,i}4N
"%io
6iB!
}.]
U"Ad
~X#X
l&kVB
Coq4
fFAK
ct+Z\~
=@rG
-&?M
W"/T
:=2z
WJ*r
uE<t
[!?o
"%iC
"_G,ad
+s*[
Cc w
:aT^
.@i
t)#I
Yb#3
{ZT;
2$?<
Z" [|*HTPg
BSJB
2 D.=
HhpWb
YEw6
U2(p5cN
vuHv$
*.Y+
|e80
3RJds6j58qr4lF0d8r
A#o>S
hgv |
E#yOr
sMP
7"<$
5>pX
M2nR|s
<\@F
5iyx
+IQ/
GwtA
"Syh
#w33%
wh;i
/d'V}
)brTxu
G<y-9
5N+!y~
)q=/
|Cez.
A'w@Z4
R=eQY
7uN3
:gfc
Y_uK
|\~O
k`G4
I8FqkUtsNUotAuhw
rYe9G
.`)b
M D/l
fiYM
iOHe
7d lQe
!This program cannot be run in DOS mode. $
P2M7
LF j]
Me'KU
g`%[I
T4OQo\\
0\ ebAT
SKA|
8i6}$>
BwNd :j
hS:u
W(OY
Y13U
zswEb
R=6+D@r
eA6H|
J<\A
]NE|
<Jv6
:9H:
328Q
|/+H
b,{H
`UhI
h#30-
9t_nqv
/2?4!
`pKc
!2E/
(u/#OD
rt~v
n\jr.*
k ;X{
Hz F
6uwUJ
4Gj
L[pN^%
4TM6
9btv$
4s8
/ ii
:9Sr[h
$k8cq
/$t3
M&2L
3jeU9
9(A<
OuYewx
!q*r
)j}
t|O/
s\|!
qQ723[
lX<S
7[nXPwz
!tC`
K`w/
d`sM%
<O0RAi OtK
9kY4
5XXJtRf
i~>h
l]t8
x<-2
|G$_it
Bly
f\q@\
MX@+BT
T|A|*
zl~vCm&
p|l+
/6{B
t Kj
UqWFv
*;W-
4sy}
s{qg
[z5H"{
+)YO
!r97
F*?o
8uhI
M `o
^9,<)
7}cr
G`T:
Tk&x?a
0'}
vBj 0
!Psj
|OwG
cy8?
\f F
40 Ns
v{zK
/.z"
m9u]a$si
%zJ}
;#?w
H9)7
r#Bge
MS03
_.)`
z3>r(
$!~%5
S/ d
+L:F-<GAUZO
C2.'
xHm)
3H$@
W 3C
zK%L
Fk+C
*-`E
,L#8
$z8d
6zf[.
_ FZ
Iq}W
5y[+
c5Lw.
a [$?
V-(R=B
Sx'u:I
WM_Y|
}KsS7
T($%
Ow/
yBRm+
BkIxE
kD[ )
EAx.s
D-'y:
ANFl
=s;%
Um($
iB>m
&Y ;
}"[5
gua8
|9fg
Uj.f
tN|C{
J <E
cAx-
2<Ji
E*k`s
+\8>f
3U ?
f2b'8
BlockCopy
PnH0
qK@X
F%JH
"ySd
x`e8
WTt<
J9dg
RJ o~
ZE di
-SBg
_r<b
/"_R
[b5Cr
kreV
uzdL
031!
fNKR
zr|Q
!@ WQgX
rPB[
jyxr
%_~r\-
~.&1
)f/n)
mE !
6l x3
EyV78
z(}&O
!Fu!D
OM3F
}v.
UYj\
JbHI8b x
H)mV8f
+y5E
\ 3?
"/Z_
v!%Y
E=+<
$a &
Xat
8gDE
/N$k
(a5T
'`;3
m&cRG
^9 Z
(z(w
qy:r
v'XyN
Mjs?p
Atw
tZA?
g`\.
(guLT }
P"m #qb'S
D\Qq?
)_`J.
Nwp`
8Pp
f<dY
bXqK
C.
MethodInfo
PU}n
2=9q
lE&H
s y*x
cM)!
CompilationRelaxationsAttribute
MNS4N
h>L.
nZc@UI
P }}
o?<E
6V5?
$wL+3
MemoryStream
t`,}K}
n?"a
dAa;
$=5Al
UQmb
1 [C
"C(HD
y86p
aeo #.
~k^[
>C|
`owi
; -OLG
G @z
]M"HZO?
&QC {
wq3ok(
,MkBV63q
Z56z
Wup1
O|Oq$
)k4'
9@o~
&<[?
`C>3
y_,}|
d%.bN
fZm&s
aY]]
6nia
L 2S%
TVSJ
n}@4l"
P6 G
x5&
H%Az
dwqy
n*1h
`j wO
])yn
H9n.{
ui&2Q
pXY4}
'ziy
u:<q M
>Z0
_E{:Z
2CRJ
]=el
F9 l[
U;TN
x>-
Ygf
Jgr.
MgWzH4gDh5
[ &^
[Yi[
qn3E
%q\Bg
qM{4
qUx%
r.d=(1
^$ZF
woJD+t
lz9(
JH(S(
7Iv/^p
/(s#
mhJ2
@os'om
Sdz9
R|+Z
1o4<
umYl
5?1&2
"?pq
x=bX
ENq=

r~oY
^9iV
F&8<
s>h1
r'J
.IQ)
kI?h\
ztB0^%
+lxX
2@h:^W
*]V>
AU0
45?T
*E(Hb
0r1.
88z<WR\69
+PC'
=S}O
k@hw
>g2P
Concat
~#kj.
[ PK
i{,J
HCIn
fdL
(vfi3
dS(
?6V9
7a@%x`
XPgh2
*9)5b|
%<0,nOR
f$W:Z
y0i
4U:C
Owj3GS8UlnXzRF6s244
W&wb
mo vPm
i 9Yc
}%5=
aQOs\
{ka^*
<WI{a
n(t
i1o+
76mve
*%<}
B %;/
tQJUr
A#^JUF
]3xsy
D'}d
ztsCO75EtEes88hwrva
4Qiw
6>W"
h;!
B-x2
`EdE
baIqrp5RO4ptGW
)@ M VH
o56%pS
T]dz&
;CR\f4
,({$=
-:'*
pVTI
H 2p@
=Q 2
$!Gh
MLn;
&g.uG,
ed=W[c!
{s'=
W9Bi
~)C
o2$*
j,^>
5\wU
(OIp
t]2`
W2s|
{q5`
xxn4
bW#k
3ln!W
r~n@
u)B(
uh^Z
DD Z
gwSV/n
| r>.
x!~q
l~.\uD
0L-i
LEzh
0NF8
Gj]
nAe#
|0'i+7kf
qHH~
Nsnf
d@P)H
6*rRr
0hc;
0phj
50u[
W'
/A5-"
(Qsc
I ;<
\ 2RI"
B:=1
&*-W$
A :x
;bDEEr
`h 6
LgD]
Bvqp-
y(<
/Iu{
Y\[F
;j8f
@uSz
Z)f
njxG7
EZU[
rVqu
%+yY{
hNlK
dWmw
+39`
(m+UU
}oME
k6388@q
YH *
o1D
A<@\1
<N#g"I|
^8F*,
"4|
YQ^
PyI$\E
o3=.
`;Z
d^\ZN
6q,p
UWLU8KgLalwB
% D
]3 %
\:zh(t
6$@h
b nRj
@ (}
.e`"
qe6c
U :j
bEul
_CorExeMain
]VuKS
nd;/$X
8k,"X
<. c!
p"Qy?
T[T%
><Gp
j%"
(Ug!
FlWtT
PropertyInfo
g7Ha
(.Z:C
.+ Z
x"nU
6U'\
nOGA
)h u
(<R%
5A!\
KvNB
??"D
\dM}
P 80
NG5z
8LSlD-j
g]8<
'>*^
WsZN
O|iwWv
&{X H
vZC
F G+
4s{j
ZwmX
"zz,Z
i"j7
POMME
Lxv{
?pF:
;Nnb
eNWPkyDCMAped0po
OeeU
[CX9;
Dpf^
FM56_
a}:
,.m]7
IJ8R
cOd~
8=Q~
y)'0|PE
'UU$
h;1D\N
^hZb
G5=
sqH~75P
0_|~
Aw%c
-!O%59
Pt_s
@}f8
U8T|)
:rkk
zSVC
CT@Z
gt#{
z|M!IVQ
>(`j
m}KE
V|9ZS
O.+S
Qw$O
9`a@\&
ck8.^U
5@?&zre
J[+_
!d#Sl
kR{9
)kYC
get_FullName
#3{[
c ?(
.jB(
A12c
i $^
h,xE
[VzY
%\kD
S^No
TuYU"
,}-6
I~2r
6br1
VCjZ
^ B
Nk}y
LNPnEHb32u4VfAds
QK".x
"Ks6
K/^w
"r tFp\
:}"'
s@b
U7 M
B /t
!A_ld
!x-PS
[ 0/:
_[ ]
#lp)s
Huw_
:- Z
b'a!18
dJ uX
q\^J
{2.(
HrcI
Y2Iy
astQ?#
>c92
c\_ro62
|#Rg
v9 ^
TbHq
:(uEz
P.rZ)
_:K
'5Q-%9
rh-*
9; (
Jxrq8J
Q|l,M
h9"u
) $
phAYrOz97wq485G
4&h)Q
a#(m#
B mC
FE ;
KX0R'_f_
,3<D2
L?3/
Qj> S
6lYv
>3roW
K8G1
P%|<
J%_hW
c7.-
rtQW
nUUe
n.'
_f
K[c)<
#h1cZ
fZ|
"{sl
?y0v
%Qmiv
yg9 S
UsGWPQdsR7EmKxINj
-2b>
1IM /
3]KC
G`;u]
'IUYB
K%YD
AO)3
`L^U
V.Az
8[?VGT
=q7]
]"\4
#"Ky
X%kW9
K0-&
R90L
q 8T
H6xgc]
4{E?
`@fAs
<6M5
&!KA
t~\?
ga_dt
'Kt3
njm|
o(vHm
+\C[
O`?ax
z:bx
~2]l
{|f+
^f^E4{
[I #
R@5Rp
/lI
5,t1
Zz }[
1z;>
" I g(
N-I,
:VD>
#?D(
f*o=X
c|HD/d
L !)kYq
SI78
:8
rSYa 0
K@3'
ge`
d_m6[1
M-y+
M-y/
Xe!S
x{a-
Sh)(
. 3@
a2C8T3F
Stream
:b)D
N ^,
`Cmf
$w/ 9
pLl]
zH!O
"Qk 4_z
$,sK ij
avytM
KYTEuA3zADnPRe
%`{,
*B\=
HY-B
w%@I
bCy
65O7lY
cH3C2C
^HD
UnAL
(i'P
^bJg
=mW>
Ifk9
o`4p
Qp:s
Olig
(x!a@$
3=&+
Puzh
2lG
/B!i
{_ 1 1i
tp at
r|Xon'
sj=cW
wHpm
fpop
3NBC
|DD"
kB3v
C (5
>X"
E z!Eb4m
w%i UJ
,x@4xe
<j,C
TTn
C*57
.Xz
gO(I8
OD ij
$>mDK
D3 v
NF8G
?9MWA
Y4o5dq6H6nNro
Zp?
fhnX
f }E
LSTT4e
Z*mF
? iEk
1 =,"
wV"}
AwUV
C> D
jF_j
6f[e)
*!ai@
s<d2
e-Dn;U
oXn,
S{6Fb{
]0+
V]_&
zV S)A
umG_
gOA"<:
i%G
c?kG
M~ 8
2:m:
~E}C
7i\@mV[
:bq4
o,+L)
uN3T(
h4MQ
TfDM
|pyA
l3PG
}q$;
E> >E
2\7/
KOgbH
:Xjy
]>M@
O!rn
huZ2MRdjiVJ
%|"d
G>Kh
jaSUK
Xmz
Rkxp
5qPp
[1w>
:91f
%}Ux
',o
ph'j
l CJ
v*>Hm
@"Ow
XV[\A[
t)_T
5wR19
?Yo>3
5p9L
rC loM
f=J,
dUYL
JmM'
pUPB
;%`t
i Fc
9}<V
N++V
h&V]</K
DBFu
V.-Nl)
nZs@'
Jz-=
w.O5
x |'
hs"r
1D c
C q{
* B]{
gB(j
3}Mm
<MXQ
`1%Ik
zrN
% -W#
9z l
45?P
EN2IO01b5h
Gv:c
z dq?
&'}y
l%jO]
x<DI
\Ak%K3
C.|w
KX=ym@
t mH
U cH f_2
]`>-
T _]h
ORlJ
D&v|h
fv,Y-
"v=k
%\NH
;RA1
?/@6
48b#n+J
MX@]
]g g\j
b4HtqnHwKBN9Obr
@k{4
TrMP
:~2`
9`O*
}.N-
*x}F
VM/#e:^u
TV2L
2o5D|
cF9-9
+9Zfe
=r4t
X< H
J!iiL
8'Qx
? O
ZVk
(F#B
ud =
fx[N
bire
v]==
'$:D
}6Mp
"7#k
y__,
xAV%
IWI<R
=P,~&
6F"D
J'@k
Iyh"|,aZ
F-C
~!]
nZ5?
eB=
&@D
-Vk
{h8d
s2%U
L{rw
+\fh
e)q7G5`
8J mg
-Dmt[y,
M|%]
a =i`
Mypm
32\)||_
BG N
G1ab_
6Zt^B
8Y^9
eLC'
;tzE
~=:V
}gSD"
wjzG
KA\n|
vC+6
u0rT
g"q6
]^Xb
QE':
,!*x
"7Iu
HpE
{BDp9
xufS
zu2xPU
x0Kab
&Z '
V|m?
C Su
vhSb
rUm,
RVFfku
A:t^
]Bu6z
XD]YZ
4ak[
o_pZ
)HY&
Z sd
;6_v*
x#re
R ND
v Z}
Er )
Y%S ^
q7R_
B'&o
zuv-h
uy+i
}K2=
jD~
o<$S
+yq<
^aC*
XXNXX
g '}
WZ*qG
Ofss
>z8h
|T g
wbl(
TLs
w5zW
~C>-=
YoV8
`y!/
Bze!
cg~wy
{%$
Ng3]
1*NL
lhX
9z4:
+BWir
qi7
h268y\P
l5RP\;
YD{r
:k~
Ar.J
N 5=9
nGM6<4)V
%Ek7_
T pv
sU(n
Z\Hy
2(@lsQ
\}P|8
[P>^
y*9&
+\.!
;cGD
@s?L&k
. LK
0YXB
mdyPx
#Q0)
R_JF
sNN
"lx_
:*/ o6
Z'i! c?
!8J;
>Y.=Tm
%Wn>
V@ bZ
*k%P5
|ThYrF##
jHKdY
+)+
1]0F
]l>*
vYoK
*8s>
}`Hv
=sJI4
8N;2n\
KgG\
a')@
6Y Y
={\A
wLZ/
-L72
UAxk;
TXS@/4
"e;iT
CxSx
wu u
V'sT
7"@hc2
nn7 :D
$B'Jma9
f:Ghyj
o<l6
r`z8h>
]Awc
M{w>
j39J
|M"H{5I
=E6K12
eI?J+b
\7
XxfE
J.t
-v3@
=9-xd
zx*[
B 7\
A_ e
hj`,K+Q
% /1B
>f&c
! :=?
wKjw
w=c
J9`}
HB3r
*E =
EizW
]!5L
S%&8
'd_Q
RMT9
'o5fg5
l=mA
.d/s
AV\m
Ays(g
34{tw#0
[>oJg
@2Hv
c| O
|lAPN
$rsX"A>
z(bw
\0 09nn
pKd/
#)v;P
(_O X
@,n_;v
) vN
G9oE
1qqC
>TJO
47CUp
h<-k
,;fX
V::|*
<uS
<O{E@
T um
(>q
,N5^
h^o1
&J%J'
5$3d
DQ+56
N"WIH~b
R?ke
2y0
R:52<
Bn?j
?1f~
Ms:D5\
mtlvozNdjd
)$"z
UJq0' r
=Pyb
Ukz1Sf
&zPM
uYQN
rD"
9e o
@7WI
+'s"
/6'o
ub (p
d|HD{ d
PqI.
W _J
Y!gw
,6H#
X(vLn
#.:?
+tWV$
o&^`|
alc#
w~R$R
jS g'
nT":
CA?&
hLxR
kjBR
@EsQ
ilK=$
$,y
?mcT
BzNS+u
8= <
\raBE
5y/
({[
X0w#
^Eu
|tJ&
0/\X
|;cl
x+^_
~2>2
aIl%
NF:/
e5',
E9{X
B)55
dr-{
~ovyxC
EnrW
y3tsK=
7+J8.
pha:
tj[
mkv
8[zU9O
:R/z
s7V!
Rb_,9
Si:o
Ec%P
N]R u
#GUID
_FXa)
kw oAv
-d){;P
B\$4Q
Kuqz'[
Z,@=
S))@
{A8n
oZ=Q=
ZAuX!
HW YO
sdZ< c
q KF3
#]e;.
i0&
38-0
b(tA
!h^"z
?QfF
@^]>c
J?zg
,p'\
!jXa
Nw|k
G:<g
/}p 1
B(^'|TJ
*Ys/
niE?
>C]3
m5 ap
UgW[
+sg/k_
^r|:K8
!xEZuP
T*8&
@DX%7T&U
p[5!B
^\@j
H!>h
Z8|7S[g
=oS}D
.}ax
Dl=k
{iSs
dP iGW
aWJ+$x@
ZfDL
}g<N
t~[lI
!Xc[ Z
HB"y
4Ut?K>(ugx
6K9{
L\Q$hw
2\S{n
YN~A
2qGQ
skFs
qL9
`jy{
P8#x
GqP>
nlZ3
\ply=
#Ga(*
;&w?
myEdY
ksz|<"
3zI*G
Debugger
cSrp
.+IX
Ia
IPD
x&zI
:6b
:LDI
h9h4
cD-)
(pies
z [c
@pc`
"R"A
MYS?
z\T}h:W
oNow
BCHY
ERE1Y
,I`-&
^AgK
Py?<
?DJCA],S
M-/O
it$
} [Id/
D\5j
]# m0
Es:G
OE{'
NguYN
W<mb
`9kE_
sL;1
*fsO
CJ}7?
bEOJ
%=Y6
:(-9
S33L&
&KrK
5 CxO$
Q}If
s?`~
(OUD
K%
(h`'
k|FA
SkZT2|
4P) J
}@s]
(~5m
UKeJ
HE<yL
H7Ld
`34E
MYSW
n+L'
Cu?T
$]}}
>%d[
'v [
}Ni4
/zKoq"1Vi
LhrrHsojOJZk9BLSIr7
(*3!
"|]P>
A(Zt
L3U0
~H10
^ U|
ws([!
XLE
MJi!<G IG(
zLkw
:^E:
UJ,E
c,{E
4)D
N@*
HkSR,|
<e]m
(' \
5Ap\
T IZ
1yGC
: KX6
aQ/@
#,Fjf
Mvdas)
_Dw
Y'lH-
.+,
J('T
m)R
O\
,U[l5@;s
N}2&
a:RF
V -
iU[Qw
|:Uq..@
\"hAA
g0/e
|}Og
S 1!
LLf=
yS;ycJ
JGy4
m2OqNTf4Ft
<%t._
gDxW+
zCy$k/xt@tU
~Hjc
s JT~
#rNn
=>)5
:AO(#8Tj7
8(@?
"j#Qu
XsZ{
L~?%L
'rh6
2x[vM
)]i
BklL
jgBU
f3L!v
,X"(
9G:*
eEt!a
}V* ^[
|2b@m0
,'27
GL#e
3"?ChX
>F W
nWT!
$ N;a
@huLk
Umwu
7h ^
pDyeO
f RU
CL*.{
/Y)E
t=[m
vN^H
H|dZ
Xu0Z
:h5<_6
$nIQ*V
RJ((
_{fj
D_r3
';Hu
=$/Lu
OVro
R1mBQ
?>CTs
t=[]
ECt"M
b_<cM
A[xvti
|&fa
w8$]
RC<o
"aOa
H!tPt
3wHXU
g2z,7m
~]'>
g.;8
]\j2
jyX3
bxGVE
K nU
nv4]L
,XKE24(
*:{E
VdSB
n7N''h
wiltMpm
bikg
NZnG
=I!Hx
|h=C
)G_
GQik
kfMce
=e\[
Z15**zd
Z3bT(7
L{$<
[N4xY
K1'][
oC.{7
59l7fGyFlogerwYt
&F};
)^GsjvcyI
.b @4C
SA^A
!!<uyOw$T
XgGnGJ U
0R_a
/>
*zW'
VNZM
w#1Z
f(?nH
l:+KzK
pKPk@
, BU
Q"f}
W6 5
<nMD3
xgetR
b3&Z
IHic
J:J/
GHv;
XKX5
vog!
`=3c o-B
je!wCV
}<`o
`?IS
|3 %[
1(@R7
PC}+
[F# -
pHG+
</?H
9pVV
PNlTnBXdbBrsLusp6Z6
+w7
P.LK
( -7 dlBzy~
?iY?
=p.`
<Hf31
mQ^I
uHUn
7Lej#B
iSOZ&
?iY
p"U<x
x:['Knc
XO:)]2
x1_M{
{`&wr
;-YP
,sVj
ohge
mmg4
KLqf
-1tD
y VY]
|;Y
g)Ft
}{sk
Tt*E
Q@"x
820ZzY
FCLm
h" t
k|6_
0Z@A
l02f!
?/@}
z[6N
`j?M
5csS
Di?=p,
jb-]
lym~
x%.j
aV;wd
Rd0!
-#)s
+ju
O}qM
~e9QM
!NMr
/6SWv
I5Bc7
1&Sw~
s8MA,
{S2u
0vD%\S
BLJkQ
K_ry
W$08
n6} e
"_fg>
?f3~(
r. L
}4'!
V4P'
7]04
I|#
lQSj
(fCq
x(R%|
e06,A
~_l
eRbS
/c_0
Bx=@
(?q<
Q#(Y
q6ap{Rv
)&B,
Bws~
?`++
Nr&S
4XGKc4
Ud\#n
+6dMG
P>NB
P)?t
7J:S
ed
@|Y1
\[enpTvN
>TGW
Y`e/<\
Wv`p
nQ*&
pUI
&4hi
j('l
TZ"8[8
a7(4
J VY
{U,Q
f[v:
BWq#8
hLE{
K3~SA
Aq*
<<,aP
Uyl
=*=R
xvMh
DVoS8
-&$~
83T{
F?W/)
,lvU
xv-x+
Lf#TN
rg]R
G ot
fCJA0
kJYm
A3IF
u@70
n hPP
3qV <p
"MwO
?V||
:o(S
fHw$JJ
mydC
'yqY
V_MU
.m?ud
HY1w
&|hzf:D
b?2<h
HjFY
.\
=NUl9F
_w ,
/% h
9i;p
+6'@
1xU8N
w[j~
*N Iy
8_h
SR@]
nhk;J
; U)
^'H&
\}`u
,Vku
RYb!
j#P5>^-W
8zdX
IDn:
+sExk
[T8Jf
W~RZs
v * #D
|'MVm
36Si
)93"
?HnI
fK*R
U-&^
H""OG
Le;h
^eA%}-
/J1 i\
p%!7
<c&
_ZTW
]I9y
Y5^+
]N2w
bR(B
[]k2
Type
C&=Cc
M2{/
H=*!
f*Y0
9;5'
F=Mj
QoX}
q'nUbv
UY5y[h
DKeP
[yLP
$]-1h
y~x\
aXQ5
f<Ld
kusMQ
A52z
.5@%
iiuU
#+]kd
y>y
dL_^v{
REw &
rO]d
H5P"
lP*"
s -8
<& X
$>T b
^"P}a0
?a3Y
>ket
r5!z-=IS,^
&Y4e
_)dZ
[r]lo
6b/K,
6[OiP RL
0rT/
+ArL5
sp[0}b
&8-ob
FS~r
Z dw92
x4Zd
`oP8
h]:7
Kp]L
6kd6
W7&KL
0Tsl
cF>mv
BN `BE
hU`n
gWKc
?1oc
qSt1
7<R"
2>Ks
W l2=
)KQfgf
f^Y'
t\{F
|,t6
Elo^&
}5?'
@75g
2 q~@
]A9a
9g ]
kW<h
1*nzB
BQ 3Y
vTp}
B[E1L
g1tq
P8x;':
yFR^
+"><}Du
+}shW
J4lDPtJKxpen
|?T'
pk [
eVQG
g*,)
DJ!'
nwMQ
System.IO
\t=YO_)
\MX|
Z5ss
]%00
AVcFz
x,[
X r{
I~)D
g#q
PT"{
cJJ[|
ir Jt
iO ?I
?T"-
UoIt
B] a~
YkqQ
h,a>YH
b@</a
In}?
zThf
Po9Y
&rg\
CI ,
+\b/
VCQG
wb> k
-wC7
v r&
?K":
G4c:T
Z+ &
+@/`
Yi.Tc
k-f=P
UT h
:)@
1"wf
_YaS
X0[|8
YAci
Wh :
|"qfY
9T)^
*fN#?
Cml(
53R+
SkipVerification
# `d
c+H]
~L=l
j,r?
EqFI
xUqvYd
xppR
F0Pg
93L9
6:\?
x 48
2"n_
_c42q~
-q=
fB:,
HJxv
iB/t4
nWh/4GwN
jFrQiUC
=qqL
tws1
?cc#x
n=ao
Qf!V
x\4dMAi
OMu>#
;lga
\ -]
9#|
>dFb\
[& !
2u/'$
^Ei-
aTT
Z+f\
<q!
oj[H
]yp-
Tmu ['O
,i8^e
j|$=_
2y)%
F~W,4
7[wD<
*10+
;'4t
v\qmX
]/B
kphh
@m8X
_ZK<
65c:eU
JN<F
`.rsrc
WCxT
kbq>
ri+ :0
$_ ycb
-{u@y
/u&u.
`Q[w\a
o!UM
9'gW)
Gfq6/
;;7~
|Y7f%
Lw{`\
_DRH
|Ei
va]Z<
OxCU+
]P9a:
O@ 1
Gl!Y[")gA
;9cDB
v5. oGC
%L=b
LL=m5C {
eM!3
z3<"
At+G+
>Ucd
e.jQ
l yR
=:n71
mWP2K
6=IA
d~B"
C'.)\)
NpHE
;+m,
V=yO
7RN
yu!<
.:n-
Mz`#uc
Gx2#
DiEpTyRixFXBtXyKamu
8lxV
MGWw
DVo#Y
TBM~
I 4^V
[4Q4K
pt2{
ndS)
:Qg rO
BVF
W0X9
'J'k^
! b
NlP5
1 +
Q u%
>&dj
~HrW
)x{V
H=-C
>9!VG
Zy|w8
j@f[
&(K8o
\SV.
[>JI
5~$C
jn|
.42
@ %
@"C
v: Q
uvX3
go,=
-`\]
nr1<%0p
tj dj
+DI9
upD/
ST'Un
=Tzz9
46H9Sv
[/:s
X 1}"
z&y`
xj1m2C
{2Qr
{T;8
yBSO"
zulXK
B*%#
Wz^j
9[}K
q #"+
dcfk
fEt:
(
89(>]
HooM
J+tf0
L&e=
sV S
W=VZ
ES/d
`5'e
3rl/
k=h
3SETnJ
,Gu-;
Xr`X
J?cs
kcV,
KB"M<
E`V+
Ha.*?
LIiN
P(i
$]F}
+WXM
LR8PU
z{"dQ
] /2
LqzV
cDc1M
Ymv=`~
CG R
e4{_
93#&Z
@JO]b
&Xk=
RKbM
H]`q
|]c
y}2{
Do U
?n9z
Jq7U
("G_
zPw{1
{~{CO)
"aU
sR e
JA;3L
E2!K
`Y+U
3.4wZ
+%WHrIx
Duo7&I
sq@M
7vcJi
kk( s_
V4#h
O&y%
vZ11$
mN9AG

MLY u
EW)r
GpG~
/N@^
F9y;
y8.N
H+z5
Tt{lS
[w
R1c<
US>n%
pK =_
,>h( 0IF
ajq_
6S3Lw9
dhtMm
Kb99
-fN-
Xal.
*J!j#
+M-l
'Uc5
11P_
Qg1|
q2UZ
*^j[
jA6&
^=bsc
T6 1
E^Nb
$hJ oN:{
NMdS
op_Equality
VRxSuojqaOTiFxsj5
ll5~
E% C
vz5V
b1tw
OZV&GI
A*K3
6V7 I
`wH_
b!"K
"ODU
_`4`
,@?s
.9#W
]e :
7& dh
XB**
KsX}
|(vu@
gUv "j
XV\Q
D8G
? tL
Ek&Jr
$r":~
hQ d
x I e
4Xfm
Q}8Uw Y6m
\ BMT
U2jJ
nIN{
Pp-$
~S]*EO
=;DT
t TF'
Ikdl
g>|i
J0NI
?i|1R
QJRPr
@o`m0
q /=
:YRO
|8<%
s(.}
nh2/
, P 5
9Fwn
#Strings
\5'k
4$n
Bo%L!
F["g
?T7]
+4rs
rP K2"
A3K
j (`
9%1.
[]6-h
KDCgl
3# o
YdS[
c|Y2C
BfKM
J6}'
&Pkh
)?ta
5' {
A;P"N'
R7oW
s_gC
b\8B_
V@)Z]
n;z1[W
`Vh:
.#m'
;I$;)
M?&f
*E6:
# @.
yQ+hQR
_khc
|8j6j
t}`3
_D&Wu
`Y6P
{lc\
E(bP\i
`^=Y
5qjn
ZG>`
18|A2Yp
kN-I
g|j]`
;=|3e
Fc.f
=o^
qU`H
USStJ
42Bq4kGz8OXn
N{>F
1(0(m
- 2Dt1
X^\s
H5^>
8>RC
046r
p0<+
mX O
' E
(qOG
$fLp
q9km
7j['/
b0%z
w8 X
^3dPq
[1tm
)9m%p
G0Fg
UR%3#
}AZG
AQ/Q
1V&:
X&]a
P!2d
iiv5
/dN2
e-&S6
2Lq];:
r! }
2Xr3eM
F`]4B
2+.v
K .S%
|`/9
4TQ^ G
S7d%
~%zS{
"{5fH
jU*
)oca
i?>p>0
0{Nf
iKPd7
, Oqa
^Tjg
\:OvK
wChm
&UT
t&uy
"ynp
>ji\
+eRp/
N]Ul
i` )
x6&0
|}8L(
4~^PKV
n]]
wk$v~r
p ba
QDW]
/0O}
](r:
Cy.yY
uAL'I"
P2 o
|oP`
+^z+
eZd
xSSRB
*Ki"#
`JYV
+BBXF
N-x
;>DHw
KoQX
J {=9
15Zc;}?
\'k
2sGO
Q5OGuqkv7EgabjSOMaM
-@7+
IZ%O
}FM%
6:Od
Ke^r
. F9
Qsa8
bK/:
m|E9
0 !r<*
xGbd~.m
[>q;
_u%_S
|\h{
uZsxo6i8Uy
}J)
+6S3
o"qi
QO3J
*Nm84
`^p7
ek0ETu
C,[RH
{MD7Z
9S.O9
dhy5
bN {
;iV.
x,U~
-81X
QMI'
L,Ny
me%1
0,V
tGo<T
B^/8C,
d"znW
P=a\
u|5Zd
i0VbyR
&|Z7e
zsP C
D@ju
X$7@
Y(k~r
WI{bZ
+lHL
V.fq1
xt4B
Slp
3P88i&
})96bK
ug{uTe
+/-F
X]kE
y)T2
C>Yq
8L;C
\%N:
gdKd
9a)+
@5jVQ
^b 8
5Ufx~9
:|BN
["?*Z
3UKQ
tHEv
z~eg
;m Je]^}
ZIC!r
vhd6o
.W"J^
EfirT+
nB`
W^:hW
e#XZ
@P93V
^bxZ
E{23
pP2xa7
JKCB
3:oc
T[!N
4f!^
+ H<
zV\$l
v."WN
m,Z15?
:{A%-^
V8MVT
(f'HT
N{uO
6h1E
E|`&{
W96k{(
T0<%=H
I #F
'Xc
1o] Y
r ((d
^>MY{&
di+V
h=k(
Z?3e
;fs$
vR&b
HfR7
j gK
,iI$
hfDU
]'SM,(
Yr1 r
i"5-
C5] Mk
wED>k
V/Ef
*]+X
UQ^c
^8Xc
2Nce
"O_K
cfcJ
Z{QCX
"lr+
U]<E
* 4,
I,!OD@Z
'`y[*a
9KZ^#
:5>5
s(+c
]Y.u;
y;c9
4+Mz
v\ f
24gM
%tt?
3eaQW
r_h a
6S _
<4}w
cM 1R
a79D:
(3)W"I
g m m
ZrE)
WSF/
zSfQI
#mB=-
?]-u<i
jd'F
Oq@iO
Qv1R
'+
]+=IJ
y4;H
nYg+
?*F
if2i
Y#A6V
^1T3
7.o"
RrRR
{5MI
a>!bi
.T
'Tn@
xZ3}
5=G?
3sxr|
:vWH
maQ"
JdY2l<N
f}}+
N9oV
$dL%
LP64
$Lc&
%d0%{@
]x h
eW/
hgSyO
.v %M~
okD>8
^h}<\zK
|Cci&|
*oJo
dVj)+
_9 OM
7Nt\
j-_YNOL}
Kx7 `O
,gq]
}p`vm
!4`&
N/Pw
lPnd
5:7pw
GQZXPo
{-BX
=(R'{
:)/I
#HP
C6<-
jCB;hLl
-lkX 2|xu<y
0 V;
_f(u
c]tVt
mH, c
+FmE
6K{d
z{8R
F~<i
CNFz
!II?
!tbe9
D@< @r
XwYr
Coy~
:iL9)f
=Z%|
Sr"(
;7 s
2 -
J9c5N
zcmu
aTLW
:o`69X
2dzt
W gi
-knM
X G?:
`](
=UtN
9g)d k
R54
dH L?
6|36"*
)d!> u
oes`.
>=~M
. +2
[hDC
3 y~D
9^>k
jeuL
XR
0h*T
bdmR
TWHF
dYV50m
wk7q
p] '
#:co
7~tG
:*i 4zh
ZEj
SIJz
+*Gd
jsf*
hn<|
cj"F
I:Ze
?I8J
JX/n^
:RD
`5A=mV3
>U5u
0K\
K& /
O z'
e>kh
CKw<b
Q\qFx
bKGU
Z{e9
2ijEr
o|XY
`<Yb
$|6ZVIBL
}ekq0
cB<r6g
rIK
6T=T
eFB1E
e;uO
F-))
BAdE
Ome?
xp0
!W]^
W|Vfm
woMJ@
>Zl:
T=|jp
mW'f
W5pO
c>+~
qnT\
Y)f1%
VKmR
pDd9
?S^N
Zo,|4Z
j)/C
wvYuu
K%|h
P=lBbZ
h{Rj
1fBR
YL?X
PBUH
1#t
XYR-
F[M!>
QMe+t
9 fy^B
yz@G
5kBA
X@yiP9fu
XQ!W-e
uH3]
OmeM
V&o'
p^-:
]nY~
flh@
%`fK
jzct
< &6S
.ctor
z;d&R
*#Zd)S
ZTU ~K
%6#.x
Bu5fKQE
Po}&
mscoree.dll
8I]:
2P u
} a<
(:w_
}~NSC%G
EGF ,
\Z>c
`wQ&
H?@D
x% R
%S0b
O> v
#F"f
- 8
iX4M?
8SPQ
/n=}
y@2/
9=x S
4Om:
T {R
Et]\
yk<9
48a)
Nv8Bzu
i"n4OP
\b8
pK6ELOKafegb
z=+
Y-}w
s^[>
z{e@K
6[pH8:
w}`=j=X
VX;7
Vnlc
dd3@v
&0h{
:22A
<PO@A
,T"r
+Eq6
@ Osy
)[|qb
uh=F
8CnxM
@.reloc
<qy
>M{`
L~m9
;vY9
Qq tjW\,&
[Ug$
tA"x
+G{Z
|)W#
hGA[
&<)
Q[tN
olz:
ITeu0l+
KOMh
_ZW
,33;
/.a)c
z<tB
oVhN
VLL1;
/g]P
S3l7
wCh(%
El1Y
K~Z]
rWE8B
pP#u
@Z`R
.y+M
,`&
{=*M
Nk<\
gvp
8 AZ
Dfpiqseb[
J< Ax
!< z
*$er
Bg,.1S
WX:y
^gn^
qs!?U"B
me#L
ziL O
PKpd;
BV?Es
>tey
lToH
C4M2
`Y '
f.aA
Y:!MK
2f09
3elMQ9QUQNvZxC
=+-]
bOA
7AC|
} %\\
")QII
K(9c
p*7xZ '
uE&p <
)U[1
2Jiz
424IOx2a0zUHI
lc- uKQy
Pe+&[
3 ?K
o- R
{S"C.8RV
4 kY
e/yYE %j
=p1C
&r.c
3^ GR
'Y- xOOV
`N{*]
t A
"*}y
^R^m
FVKD
hgI8
@q_ n,
B9>w
w;l.
{pmB
)N G}/
%;E`,IuAl
zw&1r
@.<oZi
i*xf
uX<$
Y- Qo
(tQcW/5
Ry\v
$] g17X
-gOx
"-=x
\?D7
`9 !H
Ew,f
q
hGoi(
:GGQb
E5zJ
~JlD
SGl
;U0fg
uo,
RQ]~
O->"
N^O\$
uS]W
2b
WyB3
t=]g
+EUQ[$
jjlj
F Om
'X{(s
?P 9
.0%Jo;0
n:f%6
yXhjWgMz8s
u7$|
VVI*w
T:\@
XXrm
CQ &"
}W4J
2/ ]
+Q0U.
XtBZ
n[T3
>qZ6
wmDE#p
l%<Gwe
H<83
P kMx
PT'c <
$9R^P
6/z
H9be
_+'/
%dW#
ZibF
@\F
\}#n7pM
6;<}CIz
'n|~
*g;.
3bp|
}&id|<
A *N
`9JF
R Ed#
K*zuE
$KHu
3_g\
~>5f
$ qB
*P7!L
d0dX
iyguF]{
uPM5*
[7kv
'JJy
K:wCnh
Cf
"h9?
nCyA:
6|_^,y
c<-V
mp%*IE
R`^7
jN$1
,<Fxy
PhM&
{_XB
vR(Y
jy,s;
@sm 7
W~>V
RmaV
HFt@^
.3 *
R[k
vy If
mx8
W+M**
~($<cf
NTp
(OW} {
PiA1
?7u |
m~%+
clO[V0L
"i 5xK{
6Z%ap
PTvc
P#XK
kW[tU
&w:+
tS)|
%C.ea
e$`=
$ >o
K[WR
$`,#
Hg6e
L2!Mk
D;+m
B*Tp
A==vMo
[SW
R*gQ
6"`j
-..;F
Tk
#`]fH
@H{|U*.
wHcp
JyNQ
>S^)K
p@ 0@
^W)BX
Show
}90%
DH| w
GFjN
%Hqyn
BYPU
TR|{3Y
O!PL
5]C~% 6c
cQs*
s~ @ y
'[YL
6Do(>
sW(93
K]Q'
\h@p%k
ZnLT%
|C2S
$?hkn2 0G
6,&<
o;dK
L35Sn
<{Hp
m^XX
YU|4p
'p t
tc-[
QjBo
F# wS
Zm3K
4t0^
;k08
VJlR
rw4xd1m2ccQ
/tc>
LCp9h
)Ud]
~l42
-Z5<^
:)d~{+vjQ >*
' V)
5y!G
1J}_,
~V1ix
YkRs
0n:&
X\8gAme
scVD
w<"S
, ]Y
fC&V1
pv8$
#K 6
F{8d
%f wC
"WE<
|(vFC<T3&|A8
u#LN[T
ksZ(
'hcx#
(qG}i
Thlx
&h/w
Hp{\
dMKo
PqQ*
DpU4|t
z-7$
9FMa%
3zYz,n
Yy{!
7R)C
~^ND
$]J(
?e !
?7;C3
c+w^
&P/&
6@)R
h"D9
!ljQ
-Al
Gewr
?K5
G'!$
+ ULs
$C2N
Vo{T)
8y/]
mK_xyX
Go>&
2Tir&
YXW3
q5T,pX
q/;2H
3kgu
3>rmI
)+D?
@ JU
cH0
u&^ W 9
<f}+T
j]<E
6^),
&I4
#*)d
m-GY
kTj<
`J8*
VxB
$j@YD
e/#`
joNH
VJHw
x $6
4P2=n
Vy-I
Il0b
=p"|R
RIMl
(Hhw
HV_i4#
#Sl*
X~DY,v_E
(&x$(
=OT_
Uv$I
'9E_
g/ivu
cI Ey
vPm*
.V
qi<M
)9=5
#[L
G`dw
Z`_0
*)rbq
~/5T\H
(H#D.$
w(;[
Cw p
sO=6?<g
i2c?
=QK!
Mpnk-
R%(S
wA<L*
CS[d
]\9\/
;Q"&
%R/+
N*4iUp
YA+kJx
CV"R
zg C
%\]0
BxXX
]@[1#
f,fL
, E$
%2eP
%mO
tr$
Bno
E~{0
meXbB
.`XWx
D-VM
A$el
t?34
fTM&
4i~F
6I:V
To(;9
U8Cw
p]PH
H6l
t*_nsyF
7%&|C
s|^e
?Jfy
W& +
r |Dg
.]?Q
p/MSO*
)%/$
MH@Eh(
*u&{.
SJ#&
^h!$$
XW}
,c<ze,
GX8J
k` f
`r_5287
UlQ]
VkN?
n80e'
-.l=;;+
;"o
_B#P
,c;1& >,
IR.?gxN`
B04z
> %}U?
1$C7
x"XG8
uT/-S
e;QK$
e\{1F
kji4
q1$%U9
Yr*q2'
ukDjl%h
q05H
%>#f
vPqz{
r>X0
t46;
2!F[E
p2*9
o8c*
K5cE
;25/
HZ<)p
v VN
4WOh
-C!d
'"!@
'*R5
P5zi
dq:5
oyDlQ
Da^5
sZYH
_483
C@\Hb\q
r<r"
h.6k#
CE,%v
Se(z
t3H|
Z\]
(Zs6
K0?0
w.Y}
^^|F
})~;
JglyO
!/QL
0-n7Umw
fUv
C74r
0mv"U
h]tUHPr
mM-<J
mCpK
U|Ji
.k9CD
I[0If
^5qL
]iWDa
IHmu/
Op>mG;
o%xw
L / }9
Lg#L
ki8s
]m U
&; 2fN-
|r<IcD
j]$ /8
pwS
5Xwe
5&(E
>J=RhH
8hdd
tRD;6'
l1@g;
$SVTh
rV}*
Bp`X
a$pw
?TOx
U{D?
s0t&A
75)mS
`.3=
66~m
2Yn=
((D)
OCE]
;uk
N5^t
X C?
%\xZ
y#J7
_@
w axT
J{m
mp@x9HV(T
'~r
#`
lkIX
`-cY
G56zt[0
UM~'
hRdV
e0%2
qLmy!
=OO gMn
| #C
l>T.
}.DL
q^8 ^
UvfG;
H #J
!%@+}
: ;|t
a-P=g
MiZkL
+ I+fcF
3Gu4
Xe=*
ok7t4
<|J?
U$
a-Y Gn
T7v+So8
lw3T
h(@)6
Et5+
5tX%
REsQ
.Jr?
xF*rFx
~Ykp
,Kzu
<F ?
UiA;
Qa.;
Ig()
Jb~a
`*nh
.eDS`
8?6}
/P!m
V >y
w\u[
uw7"
F$F'
>v>cR
sWPR
u;%Nb}*
!7F<
"5?L
dIrO
L`?E1
Zcq`:K[
G S`1l@
LX-Nc
/1tn
MOng60ga
0Op,
d4 qPW
9'fy
(E&B
vy_j|
r-Q[
Jb5;o=<
2Ng
,[u%
B Fs
Ld=c6
mj@E>
&CRT
7>yi
mU>i@
oWy8
O}AM
at$:
05:e
@{B3>
/4Gb
_T# N
skV;s
Xa{)
S8VJQezDD6mmRZPAd0
z+-
G[kt
0 0
k+&;
&!X_
x?Y
4>oZ
CMU.1| d
p|lEz
zv9Cx)
PP{oMn
bkVq)
@HA~
2Tb:
di'/
n&
S5 Y
yQH,
v5*R
"qLI1L
SW Z
7O49
Vy H
[-q.
uVY*,X
x{~6
{}m7
CYLY
q]d
4UeDG
xk0G
D1E#i
c(o7
d>hf
w$oy
y|fv'
u,x&
w}J@
H%%6
R.Et4
2=cu}
"#x+
R1D8
@k w
rI<?
`A z2T
u1Hlb
aj3
l)<h
@, 6
-,1
J%OZ
px7n
[1U6
9J %q
QT1z
P.D*
inh4
'#0GO
- 0M
BoCP
6k4h`
`otp^5+
l"dMo
x{%X
r?9
-J+.
~p}"
SGj<u
_^ )
m`;0
|Gua
Zx5uWu
Q&0p[^
2Zo~X.
.u[A
"$mQ4s
Ux-V
/7^eT
r~6Lu
>F:j
#<*m
1v*J
EgNfKGPG3jBx
"` Cf
e16E;>
s7K
0%Zto
UZzlb
s=Tn{
.;IY.
/4]n
F>_*L
]-ds;
sU 3
b F=,
X6vH>
X3#7
OnAGQ
(<h+]
J%otmtK
]x- rKp74
l:o^ A
s=6~p0
A"{
#<h\*
XU
++O"X
8*(;
rxo<\
;Qk^
r/A :
md36
*316
<rM,%
I: C
kq'!
az!y
L\'i
{rp(
U~UI-
YN[4
cfBD
H6MB
P{\d
\$5'Ud
s6$
k|iHP
uZ3nA
zP{/
6xy4[
5 [u 5
kO-l
;D |4
^^&
H1&d
J,91
, 8_
NpC
i8 ){X
=l?
G~U1
tu@YJ
Ocg.
ou ;
,r~,'z
UD b
>OnPW
#dGE
0BpjA!
k ?\
_ Re
=AVpd
^`sz
GsgQ
&x2U/ ^qg
B Yu
p'OK
,!t>~
*:K&
QCTN;
tMf8m
9:GY
@>j4_
|g G~`
a+_y7V
1"\;
iF iG
-!
;7S-R
pYW?
c#>z
!}k4
,V N
B~;X
y{ Y
6 @n
UZI@
<ucdr
;gY)
J'qO
OYs
GDp1c
'<K{t
yL~4
cG t
1 $,
j4`,Q
MMoXDS
zbBm
mu0k
7 #=
>Z)~EZ
ANJ`
>vn~
<V _A
Q{`65
QMW8/\
0Y2R
k03R
_M(4
>xpZ
C[3v
I9$<
a>d\
?z<tk
[X Wl 7d
wGa3Ev?
G'p
RPRt)
N~Z$
8yhGT
~ n{L
fHG*
~#d^
(Wx
(1 |1
BD@*ie
S-lV
^cj6~
E[?@X
A4&<}
^"58
860_H
L+(,xE
Vol63VAx7fSRR
\ATVw
Dy\u
/3B 5lx
g26{m_
bOZ
e#Kh`
; Do
p:?NBDt z
dDRl
6gUR
Cszc
k6A4
S|bg
^}X
:qYj
fO@&(
9j.>a9Z
t^W]
o9_
7]>^'
VVrV
7i-"
^DUaU*
2nyw
"4o
a(V%
pTC>
<Lk@
v%:G
@.d7
hz|WG*[
Q)_`
,##j
qM @
;]IQe
get_Message
7v z
C/$N2
j;_i't&
nf\$
x-I{
U\aOZz}
XFVZ7wuZdt6A
Mu}ZJ
g 4/
5 =x
NR6`o
MNt.
.p"*
pKLmf
)!\|
S% ^&q<
KTOt}< 9
ds[D
rO6|7
.%m1
hehYy!
dZyo
6!yK
ZO@m
L #h
Aja/
\0b Qv0
vD9IwgzxzOrIDB
L1]J.
"|.LgZ
HIaJ
?u)~V
JyV7OF
CDj'TxM
o,<Hxx
z%A.+
+?Gv
rcs X
1'7y
7`t}
f0po
E e
Jd%k
_xv^
2)67
3A`
}Q[g
; )B
2u+\
oh%z
n\3kL
A&sV
{K`
1]#v
/, $
`E`;UmQ
Jk>Q
-5}|
DWxig7Dn
H *9
~VW~
]<YD
FXb&Iv>#
<W]S
ehG~
`s1L
wLj&
rD(}
'C-}
vaPZ
#oi
]ih*
wZS(
H *X
cO.O
SRgV
'TH&
e0xN
v$\HBC
=ubC
nY6X
7:5KO
HK]2j
KByL
J %5
]c5D
\"b/
xU'`
bVG~
W+D{6
@ee[
F%h!
Pku-b!
m.[qQ%
8)Ln
X@FV
*N A
R;kX<
l V:
] qs7
P Z7[e_
<-l_
6NTa,
KYSvb
,2'`v\\
3nH^
T .MA
cEaZ
!if, 4N
!Z]M
cr'
4(4M
Array
$A:
w<nV
Pkh$
zVw]%m
<&W
GBWz
:.Mh
b;kK
A :2
F8Xe
l@]/=]|u
v 9H
uf1qxbAltFjcqKiI
\.(|+
v/o9
#5FT
Z QO
#L)Q&
Y5yN
Oy?c
4zj|
i7Ptugqgc9G9E4E
Q9x[?1
*Rh?
}7m
ywCD
:S;[>
rI"v
u8V|
xDo&"
+nL]
QIG"
a|};
B1*I
E,|!/
k86Q5
&!C
$3}O
hU0N
rlKQ
V}~ 0
SISx
EsTR
'F*>
7'h6
V'<G
G-G6
E87h$<
ATk.
+iCGd
Y[yY
vh [7
C@f{
K6#vC
}$
9u`g
"%"t#Sb
os?r`
q5Du
N>1Os
a}c9
>Hd_I
A|hvG
Qt!B
+Ut}e
|JD!
oh_|[^m
92J{
LujP
]Tq)pP$
.=@E
@R$]
Vaj<
zA^EB
nL5dCTlCERG8IMj
j{N_j
XHvZ
//x`
E5vs
ErXe
=fw
o87O
hWuh
o4X[
#\ 5
\2hp0
<pUb]e
>BK?
?L(!
k*8.\
"VE,
kvb
2.!z ]
(-'*5[
f|<H5"
,X5i|
6T*t
s#%I
]( >
lx>)
v2FNv
)'O,
8VGI~
jzXh~B
8At*
l]U, Tm
5CDr
]s )
+ejF
Uv=$
Ifzt
hbZ
Ez:O
>1)<s
\NYa1H'}
Start
@GTmQ
YZ
bbBP
w!!x
XFv +
Attribute
* k3
g#\ozl=$
*9C
AHx2
3^kF
vXc
Jx$}
^@LS
imD|
qr^
iZ I
&8 H
gGmSK5TwJlkUF6zwx
Y UH
cjU@
hz4@
f*4h
[m<\.
1CWl
o"roo,l
; 3G
IHv2
rWO
<k8,
7L7=h'
4>9k
[u.
s /9
>u9n3
Z *(
Yh`X
Wh(@
;w"^
I;a0
UK]bw6
~ \Vy
1Hsm
~[VO
XZy<
wf|C
n=L&
B7{g
K"{N
jA'Z[.
Y[h7&
5IVg
2 %p
|mg;
6&0U
\[IC
u E@
L'0
06):
,eQg
W aX
{V&N)-+
VbOs
-7.v|r
/P\X
6L53-
_dM
lF(NO
/ 1lK
WI=>R
ws"n
Bis2
6Od|
:qT~K>
DWU]
aKRm
%3f
nZH\
k=iq
LarW
Y\9l
`j5/
&WO
wye$
OLtjh^
izzT
ci3`
)6w
Iefk9
(&3{
m7[c
WMR;
/_ 8qX
P>sm
KaRkZtVuGV8DPRlkR
nH|p (=_l
+kaJ
# wb
J^e>
5t&(82
XN=iq
z1!,
JYs+
eLyWP
P<:fJ
:%b+
JQeQ:B
*;?|
md~E0>
33T,Y
=69G
<8 ,
d{b
uu$9
OHpl
w#X-
*A"
GT /
cJ*O
ZBrE
M>CY
8 ?5
JGjn
d &[2
mexET
~A ` "
HyFW?
Z>!D
> Xd
=~bu
JC@Mr
;."v9
wB*s
08eWj
AXvOAy
\:Bi
'DLo
n}Nr
Kx=X
#T.O
6X ok
~K1a
mir0;
k^p
@n1oq0
P}/,{
]ZcX
W5w b
=^cX
dSRp@u
D `qK<
*7F
VG*:^y
!$W) \j
`G#
%g8`0)O
ku R
i{WDU,g)
EBjr
)b bg*
#w?(w
/%8`I
2AbQF
0A[N
"$h}
1up*
d-r-
QrVG
(8_t
Uc^Z
7c 0o
3vgy
sS"w1j
OsYG9mr
HK("z
D5[Z
9| N
nJt"j
a%(|
UMN i2"
i E\GU
f zS/
Yyf
}YHTh[
\mDJnG[N
'=U>5
/ 2
_P;"
3`fw
>&^Dbz
GpEGCXcikdfGRH
L^ff
).jG
3sd@#b
SzM
Yn}4
&(eB
.,9l
hE1!
IuW[/
QFb(+
a:MGvL
% [3
gXw8)
3cT?
9 [2
H5f;
3y/JLk8
g$4E%
-@1o,O
P8,n8j
|CFF
+F"hPN
w0UG
n6rg
L+A4
,3b&
22|O
hJ I
nAtD
xU][
m{p;6>
<`r-
Xgo'
!K7a
Z"%+
h0:o
pJK|0m
$/)u
4 9[
3>P2
aFVU:^
K!f*
`)k4
pr#Is
`JgK"
^50
g@R?!
QmdS
,+R6
"iqNx
`eQ*
5sU
^o
J3cj
$s4|
g`/3
GRi8
e(cT=s
4JoI
&qTX
KM2)
v4+jR4
;c>)F&_
nk|
t< '
` gbA
[Dyw
sXk^
<iO`%5
_vCg
N`{Z*|?
-S"-Vw
>$S4
K)e:'Bn
.b_)c
B|xu
}7W5
2 *=_
rSN0
4?'HF[
`g_$
7xx.2*Og
WQy$
&+W1F
hp:7r
PKaP2Fl2tNIyPvB
v |;
95`c
OCYw
Lhnc|
=i z
Jn)~
#w$*
p1A@
szxW
GetHINSTANCE
f"
{*5kv
'7]{S
Y#>J
-,U{|
lxpe
>o(ana5'
D K<
j=2
4@%j
Z{}#Uey
agv(
A"{O
)> C
X74U
Y&@&
rxF,
`wrn`
b'Z (a
D2w7
'$8+
]%MB
Iaq@
X74D
Mu Z
#/Wn9
G}XD
7~
f d'
VTzi.
iV\@Q
F` t
g@Zv
!VTT
#A*@
\8}\
dM}?y0
!9k^
S`.2$
!r'
8`HO
]:6I7
L^U }#
oasb
omW$
)2)U
.cA)X
4oDLV
ONq]
A&|~
|$A5
xtN\
F3sB
g\{yu
94be
HH\]
*qU
bfj[
:G7C
YVq6/
e+Hy
|;v>6
XvRN
&s ]
O^~D
/tc47
kzhv
]zAC
md `*U
7ua o
r*=GW
l[%e
trEc
EvZY
)XQ ,
1U1|
P0x0
AB<-
)aa\
O&c{
l$o=n
]UV*
QfPj
m'Zo
3G^~N)
}y^v
J# p&
wb$:.Fa{;F
_"g~
!ANI
K%p
~ {c
g=7p
td W
j~Yq
j4@m
]Y:5
n$uz
>y|o]
?D{=
T~.r
0U7:
xNp<<
ZMryiz
?mfzL
BE k
<}q) <N
H:h
i&^<[
m=w`
^`*U=
Vcz8
09dB1. f
JcdB
Exception
_NP-/R{
v>?
?")o
/ UrG
F !vuL
Y+V7
|< *
! /T
pBNC'a
a#A~
Ub9mh
2<\}M
^2.8q
a9g$
&wi*
4 :V
D97"
nO"c
QqjF"
Oc4`q
~]+6
RZii
X RAj
X N2
6N&LT
:2Vj
nRvhJ1:
h<DO
>b`I
,+qG
r ^?
tXPo
n&R%q
WA\v
~LiqP_r
E#ro
sF
e8A%.
"Y5vm
? )YE
sh/'
`-B3
ZJ_f
^xj|
~(]e
lYxy
_xWN
uN[z
]7\^
^#=6
|m<W
g_'u
!71Yx= [f
9hUn
xGX
W3>V
OfAc
t6 ai
1WX2
L+C, e
rzy}
5E5z
,? g
) 1mq
. )r
;x+
OM'c{
Vd_c
Y&W<c1
H>4r
HST<
?T{,
Nh!-'
&ed
y(=4
~`Hr P
? Z@n
rDl~
!O~j0
"Y}x
FJQr
:B8p
,w*v
[a%_
FX!c h8
IICR
<&Ss[
NwaC
=Gm=
::((
BB?L
=ls5n
-ndJ
@a 7}#
5GB!zJ
{2>:
]U2W9
Math
HoE%m?
-' yp
5M2d
g};
ZSXO
\ot,
;a6>
_n}B
LA&k
I _
9BoN
vY]7
_>~qA-
"}\
&D:j_i?
:rYUK.
\oKsR
>39 9
uXY(
8j m
sEyN
/ "H}
gu;J!
Y*NiX
boM_
SuppressIldasmAttribute
`'+"
5WYb
|:r,
;C/f
$tkN
eh]z
@q8HV{V(
')cKh&
\115
GGjB
PpSS
Oq v
4>jX
+LP~{B
Cs@Q)
zr]E
8<~Ui
~$p:
g=S6Pk1m
Zw5X
rYbn
d{PA$E
8hWL
J2Ib
f/j=
gq9/@
hmFDud
gWzG
PQ|=>
3 8B
Q00Ek:
h"Vm
ioO;
BJm]K
+f55Ap
O k}
uu!)bR
m^R
a"b^
kU&Y3
V0 )rf
?fM)
mkiJX
=*![
fJq.ef
iN 8y
F)u
9k/aE
m,oOSJX
~#p<d
:?%A
s"Vx
FEt\
X iWc
8!0J
sL>UAlP
Lap*
2(WW
c CvV
XeG1A
)4C06B':
~4qO
%='s^
?mQ:
{]
"[F4
poN
c"-G
Y[XW
ih|]\
qIH,
u-kH
{U ]
{>M%$C
K56Z
:+FY
GaYA
vdz.
ufZxm 3
k?q0
@Iy{
=fP7
^vyo
4Bko
X8 4
AssemblyProductAttribute
aQ<_
}%'+
*%!~
S/>Hvn
mE6:eS
_;G,o
Aq%%BS
feM%
;JNs
63k
iwOe
e7Cg
FK^Mdc,
+S"|
O2TY
kg5x
_\ R
M. :
`*Nq
7;K4
P9U`
PB]|
hM=yC
L1wz gi
7c[y
'o_P
1c\g}s
dHml
QX}*r
1n&w'
Gl~S
g4=M
pN".
FZ]}Pm
UL!W
>fI.
Ef|/
MZq
'zcI`#+
0S8Q
o<9=
XL }oR
Q[/o
#WOM
dg=I
W!J^Y
;@TJ
8>8
zd@o
(o)(
O>N7X
0 V.J
_l1D4D`
Sij]O
N[:a
fB y
R e$6
[O6z
d)jT+
:yeX
U~R+s
]Jc 4
`zcH
hQ S
8enZ
c(-PM
3]"@.s
gfh=
}Ak(Q
*H`#Uf
RJCn
CK?~
ps4xZ
`?`g
rlGye7
5*eE
"RP<
5( 3=
b.dX
s~r^:z&
j8N8\
B~?b
@@BMYI
Kh$)
_A;[
rX8\
/ITcy
0dfZ
W-x5
_BY>
a@cs
Tr e
a i
dz_/
f +g
P {.
ad4e
W:O
z@B v
8 sm
a{ah
WJ1jr
#c1+K//Y*
j09h0Ibt3Ji
98WKV
Fb%J
i7K_
<%&8
0 4H1R
"lK?
7 ^8c
=(wd
Q8#]
fLJ$
h}k7WR!
*Qbx
Le%C$r
cvWs
G {?z
)w1w
A;(i
Mwg:
?o#E
.6?%
7vZl
Sv+T
$:XL
,^SR843
s BT
?R;(
VZ9Z
9u,4
%8y#
l{VK
. G_
B[{2?
+MI^
SetValue
O6_;]
KkF!
q\BBG
;3 Q$
6 ewu)
1A Uw
pcnZ *
BiE`
<s2,y/
#kC
jwd<
I5Sh$
SE0pz
k\)>
&r67
x&&t
SpDO
i0~o
y{lK
tVlX3
u M+
]xc.
ne7q
2R|Kp
yCF8
r 9F*
(2?=3
TH}0p/
D\*ujd
nJ\g*
/+3Veq
2MKEA[
w?%p
o:KN
FJat
z_D&7_
{5"F
\1#A'
#6_U5-
ItOF45RMLanytc
G fM`06
]+2
:T+V
x G
Z;&}oe
{U#Yr
;AO7
>AC=
?-*z
G xFO
i<42
)@mmU
h J
"*EY
a\yw
#{h_
j`_
Mc8[
xeE:Ds
'W)nJ
<1D 0U
$I#F(
FGV=
DRN6
<3M!n
/s,T
t$ Tf
[ d%
GDkSPKlCH7jVpjwA
6RcF
{C)%
F /@s
mkr8
2rFPP
f3WaDy.
1B2Tm8j
7q\`t
a-F3
$ u%
-@lV
D71Hg
_aY8
,/'
0gO|
5%X?
51)$
Tzz
M:(6
JgV#
x.6z
o(g?
UJp_R
+?;P
HGeuv3jJEK
4?DX
!|1>7
X"v,G
SrjE
gvS9C
"7F~
`v7
l ",
fYM
~xbB
/}_*
ue ?pa
gqF"`T
EJ m
l8Pt?
HM<x
t-S<
>(^<
l>bK
s v@
NX (;\
?aKVG=
_p{F_
Og"wA
Wi]_
5Ng{
e [ _
GnS4
mkrE
1|eC4P"
[l>
o:n>C|Q
&%D#c
V$`Y .
3w7Zh
bL9J*
7Zb*
W)H%
6 Wj(
||4W
0B<s
x5E
0SZ"
] {G
Y*B|n*
<M9&t
!.w 0
vZUv
{{&*
k0_Fd
Q]'K
N-D|
"zf^
QoH@
n`ETy
<xI4P
>\C5/
[t L
,]}w`
OE!T
/Ds#
q.=[&AI
kR;H
dCyH4FoAlAT2nQ4GgKj
> ]/
'8.n
a)9"2
)u/ u
A cO
R!)F= a
g;<-
nv%r
*()B
:u;1
RT_c
tZh6ze0XFypXp6csT4U
_[P
u]~^T
JM@{
3rxx
7zHx1p
Y2_E
&:O
\jJ6
8k n
`j\3
f0Dj
V9wc
>IK_
ConfusedByAttribute
JZ(Z
fR80AaMDJEGzibIKy3D
aN=
)E!i
)$/,
s4dM
6M;e
)qa<
.vpO
s* d
KlpO 4
voi|
z @mj
|vQe0
o, Fd
d7'C
ci 0
c'Di@[
ZrO+c
iY?%
^B-@
0*5Oo
>]x=z
0c
}YWj
QebY
JNMw:
5]vT
_iQ"
2 !%
!f)r
}:7|
QmpQz0xmppB8YUZmDp
o$r?~=
2KE"
m4a9
32DBKT
9D :_
Jn&
=i# {
LLi|\t
h,j$
2e72
Is ~g
`zgV
E~IHZ4
Zi=U\\
(j'mj;
LP*&# e
\6kL
n-q=g
Yqs`
FRR
^/q;k
[U#Z
L2QA/
yTFC
r7\_
4R(
Ot($
>h{8
4zKc
bv>E
,QgO?,
s Zy#
.fk0
fD?rr
c|N
Ey|
FY4k
='f3s
O;6>
,*XbR
U:[U
!}|:[`
)l>F
@]Hfno
m;CjC:
[Qc d
@3LF
,4=<
<M$wK
pI S;
E69q
AvE;^
]WI 6
$D#S[^:m
op_Explicit
\0"g
System.Security
>=`I
e%oG
zzri[
1>z*
H:k?
SNFH9M
<86#Tg
n]wq
@]9*
SBEr
Z)k2
Tt["
>+bUF+
vRMd
qj/MFh
< Rr
()uk
8vX}
^HR u
tXk
,{";:`
#1r&
{c y
Fr@/
p9v.
^|oC18;|,
(]=b
YBz8@
l{im
b ;0
+#TQ0
0bP6L
^&ZLu
-Y<R
cylx
D=|`
]z`[
o |
pn:j
Bh
=*tX
:a_)
-&6E
uycqC
M<`v
m(01
6'Y*>
Oun2
Sl8a{e
z@}&
I_3TM3 34
$eAF
QA4-
+!u*
<11!n>M
q$sR
]0rF
V0fM
I4bS
g(r5
uiQB
<odz
s~)2
6`f].j
o{ @]4
$!`
+BX*A4
{R)0
BD LM~
u+ >V'(KA Wp
V~e0xW
Cf!D
&kIM"
DO/~
H0<,K
vz3y
;+ol&
wOH7
2p e
p<1G
?-w6
jDdT2kbMawhKDyX
get_CurrentDomain
rBY
.8gt
or</
1r\S
^6 [
RN4DC
49S7p
:PxUC
%737
+0z{
9F%I^
I~i'`:.~
m55<'7z2u
`jik
e~ $
,S:4
/ ER
'-6o
=o-y
jwZuq
>?^o
MemberInfo
fBV
,,@0
g9ea}
Qfi'
ZeK]J
2F8{
Ta8e
Xw
,;5m
`s( OGG
vjN3
,3.xv
*=lR
Nh]n
G9G2
gu.n
Bng[
L[&fk
+{is
jat ,c
MJos
Tu/a
7&7f
7(]=Dh
uP~a
e&5{qm{
#Blob
PPi9
07xs
ND3@k]
=}*&M
E.fc
fc=C
Q;9Fvb!>[[
*i4%
y#~
}n s
8^u{
byT$
mDFU
_Iw
AayP
'0 1p
f?*-
WBuk
/l){{
3o/[Sg
=zB:a
Q`R#gx!b
{Cw5.
D"3
s.zqf
">M"
Yd)`k,
b{` R
%U{Q?
3$Z6
4' F
[".>m
|5yV
{t<b
atv
C=8 *2
2|UA
,OsS
?+/
FgSj
\Y/CWc
2TI$
74 7
2B\7
Y= >
+<W_#}7w
EbF5HUF3oWUvL3jPKBz
5,8.;
t{&
~O4 E
j( F
%2mo!q
Lgm0
(;O^J
_tTf
G=&o
\ BO
@V`6
Y8 :c<
z4:>%Z
m9"N
a~g,ep
Z~P9
5cY
6Y2?j
#wXM
ULNU
QO'&
7Z"~]F
pCzP
'AW3@;
M {.
'_} h
7AUF
MjTQK
Y$q7"
UdqK
qIwkM
#5 |2p
XaJ^
E>;jEf
^}d9
ee PJjV
I HKX
m5N2
b \ qzRB
9)Gk 0p
;3[T
M@"X
J G]V
v Lq
Is^2I
= $
.Ldt
7' -u
kwk
vMnJ;
|; /
DZGJ
#T,=~6
Zm2(L
k$>:BN/
BAV%
]!y2nmw,3
b/xa6
$z\2
qg-n@
JjP k}7\
^pN"
[VCbi*
&nIj
p#(yix
xnnmr
CJPMj
8KxO$
_$&c
b/YB
o$wb
&QtT
DialogResult
]8;6
}Lg:n
BlVh
4Lch
3b{J`
La3
\^X4J0
|b";
QR%.U
4yXD
-]>Zo2
6I O
&dJ[
+mR*
+A=_
*z+PR
uqfDs@
}{D[I
8| ;%#
n_vq/|i
!h}W
9U0R
ztzcs
Yjx4K&
Tsp9|.-
xr|]
|y@\g
56 ,-
z%2*
6 g[
Va<O.%
9GeDj
>M*2
2Wd,
;\.
t+H ~
]%L>5
$Pe.C
hFLF,dB
)w(,7
10 D
-aA0
En]P
Yk{}.
+l`SG
R`aAN
DC.z
pP.c|(
x?8f
=.0$z
bUK~6
QA>ot2b
$"f"
6t>?
u<$&,X
MauRe
byP:
Szbk#
./5S
+G)h
6]`M
7T~s
kFo1z
)Q0u
`;&E
,& y
q;PP
\~ k
(Z_^
+bn"
&31Dn ~
;OFf
$]U,
"/D
wY.
2hJ+
~=TG
A0MdCe
14Is
YR&!s
/Y9t
&id]
$)B*%
{ yS
?X8M
Djg
Pk32
|FyZ
bB ~
!ig 5R
e-VAA
0Y3
l3>E1h=c
tvgP
D6o&
.{~`
R mP
" C1Z
ktA ]t!
c*=.6
)B@
H2 2\$
=k :
^%-`
CcY
~ fXn
b&{u
upa[7{
O'TmY
Lil:\
S[{X
7 7TtH
'an
@g:Oj
G5rv
EC#g
Iaz3s
Fn]_
fv0
|dY`qQ1
nj9i
~H&}/V
9jw2
{+n:
]:*N
Lh5Z
Ru
9-]_
Rqrx
<{w0
~oL_
xth G
J+_S<
tv0O
.mB#
_j]j
k#I?RM
H++RNH
YW0a
L!DR
83.24.44.59
?>n?
=%Hv.
T)VAx
'rQH]
4m2q
@- kH
ySCq3w
9s|W
HY&7
VLPt
Gi !
E 1;x7
#YK}
p&de\
JOKF
j> 3
_Vf,
yz4D]}
sc(FM`
Zd=\wh
*8a$
GKBp
qWf24
k X4
;z%&8,
Y- 5
lrKs
T5 {
J-P
` lZ
8<V'
m+xu
oG2F
MyRLgq
]@El
>Z<y
d3/)8#
rv+?X
:?vf
_6w9z
RG0B
Fk=2
YaxV~
M e,
`cRo
s>V0
Yp g X@
e.g'$
7{_
,+ L
k^6B
`T8a
Z6|LY
T2w]
Hao_
H*IA
4t_,
x cECEz
yL ;
f{w'
C3 A
OTO|}n1
%r1`q42T
0\iH
\o
En8"
uMG-@
UZ H
#Hs4
qw2\
nMp-
Tm`_p
\t 5
`1%
zv9qo8 h
O~Pr
gw/O
S2M7FN4YNDS
]M gP
@N&+q
ld~E
Hga2FDMgPq4a7k2kBK
0*'@
a sH
!H @
))#]
&LY+~
eyUL
3+2RV
Itb"
19ITM2
q9SnO)
GRp]
O? I
&F%U
? /&
H(*1d
HMra1tCkHP
F|:*
J>F
YlI0
t)(
%H8)ac
(|<X
fDs 1
%@{)
pW},
pcm
|PEk
g<1/
68 j2
i1![
_<qd8,6
Z )4J
Invoke
5T~s
WrapNonExceptionThrows
>}7
(];M
}hI@
'_O,;/
d~|f
x,L H
[Fnt*X
ljifk
O'`{
[}zv
b-<]
lI\z
sxm>
+=u |q
d?1O
y8Lu52
VCq9T[
]@w
BuEH
j|PB
!&pc
:r/R0
P*HP
44/X#
_}o[
:TB.
!ymi;A
.Z4p
f*z1q)T
H*+s
9<Vv
5=misCE
`]mjo
l4?Y
V 20
iTGV
97cl
O'`/
0{=e
B5VjG
'V6#'
}te}V!_
9[SV
=H U#B
,#vvxl
@6v(
eRr(
>[UB
Yh!
uMHU
D=^BA1
gS},9X
Zl*
#ny4
a@r
q_XG
ggLe
NY"_
hGVz
T*Ne
Sd~~
^{||
{.O~
O&CU
iRXc
p8_~
kv%Ta
"2s*
Q;
j gK FG
b:HI
i$KZ
Q"1\
D{nr[
)y0N
{Le{x1*
|sz
NZ8S
ZIR#
nI0?
v7Oa
~t!S
?!?r
"e;k
<AE0
s 5_I
=KVN $
sQ.lZ
%+ 3z[
%LA
hv
hfu^+x
`JfE
2a{%2
5Uim
Ey%G
Dep}
9'T6M"
)p])
E!I0
J!#
tM$)
.:=L
Fl'a
:.8_
HaJ_
m1HA
@bAu9
(;mU
RRwH(|pd
"]%b;k~G>Z
N*:T/
!M,3
Y! [
Y[ w<
Pyz+
Y;cnt
q}Ef
eCWDnGSPOO1wLOtL
W<(\
V _[Pk
0%x"
T8~hyis
VirtualProtect
=3mn;
eJkKK
ZOH;
g:n-
MP_H
EqaeJlzq4qiDaX
A%A{
?# -
q`-
z:wKT
Xxg N
9ETYyJOjkLzT
I {BY
]L$n
R4yO
1I1776mW8BD4
+<9 '
,~?
ValueType
}C {
<n?v>0
D6U3
;Na"7~
>G)(
V"47
46_uV
;Mw=J
pZ"
<6f|l9
id 5
h !R
"IslL
S w.
S:MK+
System.Diagnostics
s{2G\
3<WA
'PAMb
jqRO
T}>m
X vjE
}Q.T
YZ=f
UY@X
l%9Lyh
O,^ E
V "TX
B'*"
3_,jo
._4~
hq[^
wN90rTkhOXKHBOip12L
01R \m
4)rd
<N"H
?>EI
;<H%
Ty#Lo
hNa8
M}W([!
=B,
4'|C]
)4r,
Q@f)=|
jh(e
yK:w
thR/0
*L W
9\Dc
t~M_
OK2 h
>0j!x ?vR
GetType
9'![
#hZ'9
e<TQ
q u%
MNlX
l Lfv
*I}:.!
CI7[
R(Q#]
7@&]w
*"y)
_f ]?
a1e,
CCs*
V.{Pr
w(Mxe
{Ses
mIjF u
};V(
:g[?
twet:,
#mn<
O,tOP
UiO&
k<2
j a%
1juU
x`;
S k
get_UTF8
+X+p
s99a
X18+
Ba=2T
js!
it0L
2oDwK
QE;k
0?
?6eak
V1 U
(P pC
Onq:=R1
HD i.
4VOD
D_t0T%K54
y~ #
YPW<t
';5$
a_+Y
@LrE
\w$p&D
vD#T
/>]-0
iME+
qU:Y
; R-t<
$ fka
v_v"
0xI
y:z8
K'"|
& z
N8 D
TQ4n
70~Oq
xuXz@ [
C_K4w
QoGaq
Nxzu
'60/
H4<O8
B@OX
<yWY
$sQn
,xqD
q-m$r
W7qz1
mw7i
4IV`
iw;8
_@"i
UA=2
`spcI
zQ^1
S*7H
)hk[
b=*3i
2x`mP
wia
,2i4k
jD:N
As@*qo
er:|
S_C7
?C/9
{{yr
42Q#
T8O@0A
Supq
,Vgn
AV}
?q-M?
m}U#
kj;r
"O&I
S&];o
lY$Ii
_kWF
g_|y
^(P4
*`H2o
UF6x
<VXkMQ
Jl:]
_<N,
n]\=
f4Du
C 9,0
9>No
h3Oq
a+>
1 "
rAZS
rT=~
n`Z }UDY^
,amA
(VFc
InitializeArray
'+;G
S\ I
b tK
}H:W
T>L0
pAE
2RVd
k3%% us
|~<&
> Y *<
QxHF
5P,L
EM*m|
-?jk v
7mU|cV
U=ctS
x,2I
(upL
Z :D
X 6x
<IK$
Ln9d
mbxW
c`{<
goSO
J7 sw
=!Cb
:`Xp
get_Chars
*#(#;
[65#
up a
3 ]
OJ>K
v ?@7
L{VU
` o7
Pu ?6=
.CsE
<?
~loE
/a"|
q@5+
OVC^
aWHw
(E^lP
=lNH
[cnkm
1OIVNaXtRrtG3
ln32]
>g\L
/-br
v7_!w
_qmM
4gv
=3gx
_G<Si
Ac+{&|
0KY>
t41Z
8QMs
1 vA"
##)NH
nz(P
cTQ+(
[|o,
Z>aC
TxX6
l $(
UiFoD
hn#pM3
oK%M
ThE}
O/}Z
u1\v
~j/1
SSZZ
$t6
MWOl
S?G
'<]=4nv
AR%K7B
%~WAM=o
2u.Vt2
mJh]p
XG1|
x {@
][(Zq
VKrWRNrVKLu73APGX
&"Pt
N@:T\
F(=>
` :
vG>l
3ob
~//Z$
1h T
pj n
gsdy_E
FE1Ic8Vv1p9HD5sB
XZa1
O%ek
hKX#Q
_W@'
v>Tx
UInt32
Y4mPRcloaiDQi6Jgs5K
uyh5THM
V`BH
;f4l}
w0oy1LXSIfdOfeKU9
4Uj]
.86/
<!m?
)/f]l
o-o
>(U6
'HwNz
`-a_ !
,W4i
2VJG
8t1t_r
fv@T0
GYXS
7jI`J
6N0J
E%P`
No,,@^
KoL$n
#Lh;
Bi (
>uQp
y9KPr
y`*s
$Dn@
NTYj
97m'
tQK
'@+]
h3>N
P# T
f~wo
[uj'8g
k S
WW Bf[O
GO9F;
:&:{
)( 6I
d`S_6
6,M*|
^nwm
YcAZ|
>)7E
hEvD
rCdHa
BW6Ph
Ls.v
z N'*
>,#X
~}w$
l4>$B$t
AppDomain
AssemblyTitleAttribute
Rmw"e
y$y'bN
'|gP
_=vll
*HDO
^d{3r8
4u%:
u~~\
pc=z[
n^8PL
ZKR7
0BZ&
/0!.
Q#OP
OuM,
%Zp;Cg+O
G_^Zx
[LOx
~zqPy"
?Qhu
bwA3C
/Pj0(jfT
.u:rL
Zuon
~849
4[X'
2wNHm
FMav
jl{}.r
u(Em
.+ 4
n{dl
O=73&
EsAwz/y`
4_Tt:
`wgz
bn!(n)
J0b/\
}G \)i
-iXDnO
]IK/3
MU~X
GkN>
_:^B
9ZY4
Z<lZ
iLVVY
jsml`W
r{"V
tX2
G.4H
N3urkV-
+ot4
u' U
#b*
ER*
.I@He
hbwu
AC -
&Dc~m
*;R^N
"8_h
drQA
uF`
r@Bo
=;>yR
gH6P
%,Oa
}Ho
`wd]-:
),n~
i<lI_
'.Q9
|};Z
NDo?zTY_
do"F
a.?H
!L$%Qa
v()3
3\`?HO
f<{|0
S8a{
2`bk
/^5[e
s`$w
ZFV1
dt}j
7/ 18
t%{ID
=NJYF
)= +
vctU
v4B(j
[(
9)`3:
s Ehy
)|ba
kV l^
JJeEe
\!Db
k$2^
[Iiv
v`XH
]*UIP
{%1
C[~C4
Y^ ]'
v
4~})
,a@#
xyyv
bX e
FPv%
XEx*
r}op
@H3<
/38,E
p4(
U}'K
B .S
g05IK3Kj7PZmxx
e^7&
k[&m
45qN-mp
Fe4"
!e^7
pXZNmGDIg1l99ibmhIa
:}/f
Z%C#
1CS?B>^
;Ns
p~:\!.
TG@M=Y
2b"8(}
>elMj"
4dvi
w$wH{j
<2 @
)R[Y
u^f
Io58
B1tt
Ax;^
8>.<
=$q ?
n]_fs
L%d+&`
c3 W
Dxy0
*:bP
^<p"^XOG
~:E(
l9xO
xE^g
xKla
-,vdm
75l?
\h$YN
>,kN
V@Nh4NW
.b@KV
GAWOS
=^FL
]`j
7oZM
&|R7^
, !b
QdK&
~D!
iMm>|C
0Odd
A!yP
?>8$/
qof"
d,A$S^W
)-IPC
]|mn$
eqv
MessageBox
-kr6_
uN8L
hT"E
8bZ9
e0\F>
)U>e
&.y]4
Zm"d
|or.
`wz=
Sst1
?0Pw
=v51
z=m
&d%U<
//5&
"7Hi
CA!R
:vb^
+T ,
ksUD3
6P D'{
?o 1,
}~!T*
*58`
A{u;
w%sn
*.3x
?U!5
8N=sR
#yHQ
io496y
LS?
8W2j
=em4n
Erf>
.;Zg
U#3+[ $
c1;M
i+qu6
a]X0
WJD&
y0OM\
FV(u
?4 ,
> 0]/
~=P(
Assembly
=i~n
'SUhRO#G
Jw?81
rvagZVZ3
9m%2k
BqIbsTLWRhGMCzubkG
XG\%
]6O.
BzS^
dwqf|],z;
z/Faz
<Fe pGGF
n^ta
ZVrU
7ZXi
0iwT
mOt .
*W.4q>
l{/;
[tU
%2f@B=+5hS^
6VH,$t
F+hB
'Vbe bw
tkBg'
Baw^h1
Z/Nez
7ZXw
l2N]
<8>+
}|,H}s
Adwh(
Wlw
c~dl]f
%dGD
3+hM
hw/j6
#wZira
J;FE%1
|y2D
FVu-
myox
^)Tg
iv\p
sTW4f_
)S.
`i.L
IJK`
h,L.l
E#-+
5 Tw
RPNt
?'Pq
}3v
n`Ov
!)`_Hi
5,&)]
rW9:_
e r;
!%_
ck
[ 9c
,{ZvQ
2B5
^GW7
N;
492
FbH:
V\A-F
{ Lh
$/L4
U)$w
$!S&;{
?qH/
C[B_
N#XG
'\Aa
+b4=6
o TO
\1- K
)(ZAn
47`*
)#C9X
ShYa
Oe g
]TTM
2tv} g
}Ln;
r`&k
4:l`*n
2/HF`
4Pc:
{K[7
/7wvI
,p*=&
O2(}
rx,P?.
\,!
AbeJ U<
BOK0
5bqM=+c
:Z0F
}]u$
lblT
Y=m$ t
%y|r
h|_p
_iO(
u/YC-0
:mjq
hRceM p
"]Bv 2
9Y}'
oCX'
- Su
=sz_Y
zc}g
`@K*
M e{?[(xJ
fCx0
kJoBK
xe }
Y3;y
"(ZQ
2gE9=
3k<1
al j9
f|S>
a*a8
%~Lm
3Dx%+
H?Le4p
{` -=|
GUia
*HE.
mVDS
<7 DSu4$*
1F9>
idk
F>d|<
zR8S
* =p
#4wR
q6/
P8,
"_<~
*.YA
ulmc$<if
M5$9
cabg
%=OA5
K&<o
wV/4
#+:2
[`G|
wx)
C\0r
' 1zC
ZF+.s
>DddtnV'
/Qz,
w)G`"
i7h95
g`BX
.84O
zb9wN2_
#XA|)
IX%
k_hj
Legsqx
<-UF-
S98f
%gC*
eem0z
+6r7
{U[
.r'a
h>1d
oO/4
n#!>[
hn3t
f4gO
SWth
S-Wt
n[!+
XJ8vA
YgmN?
i!sY
{4$i
S8D#
AssemblyCopyrightAttribute
X>4aX
UeJ=
}':N
P~?}y
KKyn
fMsIS
*M<^A}%
\{X?
JQC9mg0
>j#v3U
..x(
9 )D
=l{
*aB!>K
%w'!T
P>R;
-u(&
xpgS
f\jD
zbVv
s NW6Ivd
dR4
ue|D#1
SK@l
Thread
Ldr|
<0 Pe
E)RU
,u^~{
=72j
&_^
fL?5
w33EpkbaN5zJM2E5J
'Zpu
f<MhX
|6n3
S,{X
@sDB
n fXn
?FPr
dju!b
T\[%%
~9[,
_ /)
)ES_
((UI
C/op
<Z9y
=1|H%
U=>sFo
XoJH7
J@
Y`|
^\0R
V\hur5_
-{S
,+SMvf
rxIN%
ZY5)
@9_&
&Q).
W^'LO
:My~j
}b Bj6
W@8WZ
nt,jAf
{*lq
&&38
file
Y~h5Z`J
R7}g
@J,; :
R>s_
/' y
w )
OwUW0
_;1GV
"-.B
d!7X
ZL m
o[ZvM
.V/]2
l+]@
K\ b'h
u0'-)82
X3<{5:
8d!A
L%&]m
&RSb
vF-F
OD-D
#$IM
W:NQ
M2QVy!hJ
>LH?
lw{/
K<k!
^z33
{o]O
@0@m
#6t$
6)E6
JZKp
B nv
yU]R
g&agm
zvz{
Vut]
*""M3
'I UM
m:X9
C`z;
oPv]fy
zYddH
>5]Jr
M&3(
=o^;
5ixI/)
*utx
f?BSu
KW6}
KCdS
ihEjSDzy5HYaL
U]=x
x+o'
Gm%X*
e|NvuKc|<
mV2^
/QcN
t`i1+
BWO;m
Yu9m
fU'P
Yr2l
gpQl-O
.cctor
ZC(C
<` 85L
-FkL
.i!o
vk-R
]IelHA
P^I6
"WmT~'
"TPrai8
&w_Y :
a$u,@
dE{tC
Z #^ Qa8
GetMethod
'q'_#"
!\TT+
!EKnP
3C^i
g tv}PG!
{G $
UVqs
<43}
'HbnD
Ct[|[
AA:r~
waC]m
i FA
%wl[]
vb8FN
,D}t
}cF
D q!
t J'
Fm"z91
Eba#
xRyY
'o/=
-`w-
G!RO
System.Reflection
S'e8,
'ywU
Np0x;V
{(Q'
=y0vTJ
6SD^
Hd!?z
ZR#%
OEL/
hU|d
1s51}
XQ=0
c$iOs
zV1m
Z_ +)
]m9K
#YTm
@ Pq
GetMethods
CTsYQtc|
uaDM
>q/ZC
u7t
KRb'?
g 4:
M|L8H
(NE
yGwX
yP?@
CmMPqu
+tVS
|}$4
l ;c
=7X.'
>m=I7
,gd{
a5DO
!y;F
}K}A
^9 D#
jHIf
[w
04X>
eBQ0tkXQgKgKhpA
+C{,:
0rh^
n)f
bWg
kGB1U{
Zn/)
AssemblyDescriptionAttribute
2kFS
b`bQ
Xf+5A
6{f
@[-\b
Oee
rTqo
)o/r
Dvp?_|P
j8kRx
gVN~
M(]~.
W*b$y&
r.np
g0}#r
Q+9P{!
/]cK
dK@$9i
Yfh :o>
l#.*
g954
6DmT
>>Cl#p
RS|j,p
uY@8
A&Dx%
lAadC
< 6s0
n^I
%!T2H
0ybOT
w))Xf
nO0e-
Gm?b
jgT1
gU}9
C0mFR
yHMD
~4b2
Rb|q
#KS#
,lY]
[i|7g
/[T*CA
@b%@
q5!p
A"nI5j
4UZcw
+W$e
-}%3
wEr,$!
vzY-
P 87
2{%5c
aB3g
':2&V
3Cc
i %u
-t,w
! GwN5
^?[
2XxR_
aPMA
VGv\
D!c, `
uB #
xX[!
5d
dpgJ
oKtx
KY5\
Y2W`
;NPT
xB[2
)Et4
{Y[~3?
yuU5
/e 5tt
7uo~
[E 'mn
Uk$&
*uS>
?n`=
<rPm4
Y8\8
QuK9
pMk
`F24Eu
M6 Q
"Z/8}
>l *%)
]5l:
N,`P
NK ,
:6fF
n'O|^
h^>!,"
cGH
=S{
:"O
k6Jp
0~rG=O
] XuL
: pj
|8,s%
t@`[
CF"m`
4=rQ
e*OU
TH _z
u%p*|
}Yo@
U6wn
s+ Y
`\=]
vBjs
}c~{
<5b]
*7)c$
pmnq
+QZE
C'T
1iC!U
&<38iT
b!6
LfN|F W
<i[+
&Ca8n
o(i G
O u
bywp
,w=s
s}QwX
kG H2U
veOh
Q/S +'
.?vEQ
'`` p
tP2w
!G E
QWEJ
"bGa}
hwW2
OLHR@
!#V5tLSI
V$VI
\lTx
2iG!
O Tl

N= ^F
G"?[_
< S+
\7tG
I-E
zATZ
+&#[
/Ho;
6g9:
+*t:O
{*;&I
coje
BDW[
O^Jo
IG?C`Z
46f
&BEam
h8_
fq| M
^0c
Z/m`e
ParameterizedThreadStart
rLZ8
]&V
jzTH
+E)]
/wZY
!0P6
{SY3
(y;g
Cv U
] Pj
V.}w
0iP-
lM2f
;.4e
zX0)
6F<(R
?yZ'
0\2]
HIy(
HlGYQT0bKqCXs2
!?HU
UWB4hEQwO43N
'6 0
_|Qn
$K59
Ty2(Z
6QrF
xPx1
}mx7l^
!en<
zB`@M
L(wUQ
w o7
Cl3h+
F<Xi
lj8M
|r1K
u09>
VHqPu
}"%m
}g7|
?~f'
cZ
DpNt7XZy6eiRr2
Ej/{
</pe
kyZy
mI`%q
Cln
ehVD
P9PT
u4JhE
IiXKF
'mg*
,h ~`
, G\p
r/LZ
k<~
ne >!kJ
2;lx
Wzp}u
:v1s"r2c!
p`4,
5!Z.
L7Qwf
Qi=DS ~l ?
F1~P
/H:dWf
r1YX
Ja[-
_jcK
-L1f
vL&
-}SR
;AA^f
Pe`|
hs!l
NsxN>?D
f/`6Fe#
D#WV1QPoSc
I&O-yJ
g/X+N
!dzx
R[C{
sF K
:xQ]}
^Ir^
S>wc
3sIb
6 1rOB
V&)@.
m%6
1Ww?
$NxR
mLn@:5h
E0cO
iR/+
$J^NC
Yn&E
fJ#>
TP5 [
nfUz8
x#q^
vOi5S
C:=|17
B#,j\
VTm;
D@j +>
%q*
4PIL:
'{SY
KS(I
%A{\9A
_|>vZ
i&g)
CUEv
Sl3b
N[1C)
]I~,
9 u~
@:U2
Z%w$E)
4HAplJo
/W m
`4 .
Gl%|
AL~
5=[m
T^ju
+SEF
q/xL!
=.$.D']
`U@oM
L*H/s[
)Xb
xY~)
"ej@
aA\E
)' z#:
JW0y
h(T0E
e=*
1h ZaPv
9z^ T
2I~/
G@ v$
Gf~{
&cDYx
7f=
y= i_
}o7C-RU
:rjb
`{.|
ZrZ.
System
dD)ejx$
P lw
'%y:
pn@F
:l@;
= 4q
0L#V
xD\7
EgO
DNw)
v'r'0g2
C[f%
+/<2iA
FEJ#
sIj-GZ'
\R,*
>z`1
9?[2l:
Q)1z
(5+Z
[_{h
=c 2Y
.4'FR
\ M-
ZLqK
+2D#
# bP
vR=;
'('o
xA~w
0?;S
qbiA
;bsL
X tk
+qG`#
\* CQ
Tew|
j%&c
sC~D
zg%m
Z *`
?!g
i=oi
YvDF
~dV<R
=].(da
g=~R
EH-d
+Kgg< l
RhoGm%]]
3w3E
/ P|
ccBM
|_vU
xpTH]d
pZ=X#
qKSvHp
D~kq
urpL4n
1=-6
<z2L
&Il^
`Gf2
L;8?
)7qWh
_A7
/+N)
U+h25
%ZlCF
~'=f
dJf&
K=^l3
eg_p
IJ9y
aSu
Xdh(g
=DYh
"K5@
G7"k_
`t_E
FM'z=
YkOQP
k)_;
e@v-3<
e#4f
o0\gb
E{\k
u|Iz
c,b@sG=q
(w,#
M2HD
%|S6XWf19q
]_@&
$ J
juT4
`uhq
InI7
8TC
1.dt
XyL_
ztsH
D2c2
T\~H
q65
%!mhp
KpQa
.Rqk
]dI}
WLR_ImMD
wq,:
5V#sy
%N;bk
\T$+4O{
yUtRZI5oWn
r]G%
vYjL
G%_<9
Rlpa
!bS^l
X *f
1+1`O
n8P{
N+Wge
V t0
MzZ ju
OLdT3
-8Hl
t@!b
7IWB
f :7
CO*n
^9P,
|5I_
jg=a
" V>
UPB&
m07c
}&fh
Y\gtg
ThPCo
')ro
')rj
x\\hc
Anx&
}SY+
rR5k&
s|18
v'af
lFrJ%#/
YT7Q
)(u/SM
}kYLCp
2T%rEs
bXy4m
\.=<d2
.nw\I,5
z qhZ
vEH?^
P5F&6
_n1z
_$Av
:0vM
iZjP
"g9$A
D[4,lo
nO6s
iYB
(M&N
J ;YD
_t;
mKEB
o8fWd.u
c aS
2%UV
f0u O/d3
YnTN
#UdUR
CCegh~y
!QZ!
: Me.
Buffer
h ?L
k_(?/
j@WNJ
,PiSNO
FI)5
.xl1
$.Sa
xT9C
l4d<
gRj~
8DA
&z]
1"Ql
.DtOJ
[>H{2}
NF?F
}#'
1+kz
G"3?
pZw
3z~dK#T
n)6WsB
3!jt
(>jj
{tWK
@m^Q
~< Gb
<so'
/T'N
^AC;0
4~pU
Q>2o
Ytnkk
jBMK
.]@N*!
Jx[yHvN
_ xA<I
v@ZP
3~^d
k`8.
k(-"
"a8d
CA6
0h_6(-w
Z Zt
@i x
s8>}
G:T}
ZLu.
s8>g
Hmkm
$&Ta
HQ[x
.L (
/Ox?t
s"/5
B gK
cI|n#
8ooLi
TP>'S
C/I~E
Cs=f
C j;)
kC!j
]jYty
==n)_
kM_E
^ f$f
"TxJ2
V+uT
*OD<
g'a@
h}#H#
N)Bc
?T"n
Y84
J(wonP
mX|w
-@Or
o)q@
n=kVh
&)J& |cs
1de_
S4$*M"q
m1we
Q o^
a XHIQ
2 c%
E)N!
0zkS
8<!~
JP(m
GUm2
^tR?
|br`
y :k
AR$ieR
{i 0
6E$02
W |CO
6qwf
+&PG
<E&P
gdrf&
pneI
K7f!7
*o>>
552D;
;B;g
/Yvx
[WXA
r j_fy
E9mV;>
&2@Fg~
a{HZ6E*g
f}`{V
+}R)#
}O{$l
CKZ^Y
1h\
]o7Vo
2_Utx
q>_ygT
}2RB
'n Y
JgL9X
<qr h
~wC^s
W@nD
dU76
] k"
z=Lu
!iE
c &n
eB2i
f1/B
AtU-
a.XR6OB
~}}}
n7\*
+7e{;S
%kd{K
6&`;b
:C%r
Zc#0
n=;l$
X.Q>
c ud
w05jaWICLmeCVcqBKj
wvdsv
mzF1
6 =1
olaZ
*+"O
Kxdc
_<v2%
45c!
1Z C
([2R4F
V~^A
]-RA&
jhWz
Z4=?
iE\"q
npb%
T(.rO
INd:z;gn
o2'X
@t}M[
{M4
B0q$
x*=o
t;sb;\
*}]d
Xi+4 \m
O5oDd
kV,2a&<
$p_>>
U8#n/
\7A #
|] d
get_IsAlive
:#5
4h5Cyryr0cIr6vf
g 5}
uQ`$YG4
e|gS^
km^F
SFk
>!w9
SIj+R
C,>G$;
y4JW
EluI
6!Ps B
_ !L7)3$z`
ms>=
R&[e
5a3H4Z21bSzpaJv
3*WM
?) B
M"F7g
qa8?
!B^%
) lt
~6gc
28) c
wBi`$
[.4
xM@I
<^,w
6FNe
:7MsmV!?
*|Sth
{AG>$
L- AvCQ
W=,l
t\uM
i@Vi
P+0C
ya7Z
HmG3 P
^=^rp
a0#9
!>=n
Pp'M
CB&U
G30 t
c!zd
[+`&
W1&<b
ng7$I
qA9*
#jm<
}S !8
H5{K$P
__LOs
L=%Ri
hPw&S7
E Ux
gOR_
2\_v
^dU!s
add_AssemblyResolve
EtD'2
oP4[)
DV R
*<$A`Nu
oZA6
20x%
tB!A5
1dP:
&UJPJ
m ZZ,
OBj
JLz1
X:8/=c
-gD=
CQ~G|
zJDQi
mk@0\
)@%O
+/$0o'
{32w> Nf
4 lj
Va 2N
EYA|w
f?E L>
Z8!"
5HQH'
@U<t
4]An
=t6S
FailFast
S0KK
x N1
| M_)
Ay;h0
$5m*
W<K-
2u;x
Uc.
7jWHc:
J"Fb
D515&
1~KN
lul|ZL
qTjN
.>3Q
QbbyG
.jQ
Rtm%
^2:[}\Zv-
S: [
2pWN
3MQN"K
H+*u
7XYI77CGcYz0nQ
&eW^
/`$\
v;L#})
Cf1X
Cn42
#T$.
3;F'h
9fQx2
~Hcqt
d*G6a
HJ Xh
iaE&
Cw[
'K=W
%cpw
lIl5
O?U;ZCsi
+BKKw
Lx,5
KQW0
OS=
7pdq
?Zpm
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
< 9B/
ffb1
gBB3c
$'Js
MKEkW
d s?
1_ <
&4x0Ji]>M
EWq[I)`
ET'M
)J+(
Qv H
tJdp
d<PwJ
LGVJ
;0)v
En+R
v88isxSv5P8w
Gr[,g
8<kP
#OZ?
t@#6
@&oN
lIfy6P
4%fE
bt:|0I
5rf{#
I *9l'
! =%
kp+[vw]
n>ka~e
j Q&a
o"|^
6tr`
Z Wd R9
tqz2N
(}}L2x
ic:7+
!{Em
_c*g
y't\Z
!q ,
t}U;
` \t
4Mw.
] z
%qUC
Tg:3i
gbq,
H!u3)Q
mlM~4
pdp0X
E7V
k>W1-
$R82="
uLkz
]tkK
zr wl.
i8_
%Bp.
CZXw
tRu+$
ZN`0eo
J,#r1hN
gtj%
<+N'
VGMb
-w+T
U7s'
sK/IU;b
( Yb
? L~}q
Pd}.
dU*m
KT6a!
:9h/
XeG"
*X'
fj$j|
l ZS
NgS1 T
TAJHG
=$0WeE
s$X}nC-
+f1i(
Dp D<
M:\i
#X_-
r+iJ
,$?
lYb >X
OhkMC
jOIj
W gRL_
G8ru2D
@HV
1$e,
`$=;
*^v`=R
Z75o
Marshal
Y ~J
.T%
pQ~#K
/M2o
kSOo
C~}
~{s]f.
UQ5<
/=JG
ZvUb
2cTV
5 v=
n6%(
.-Pp
"Vut
=\vD
tzaU
*}]}-
^HBe'n
vw},
~%L=@
qWt\h
P_&q0YF(P.
N#R+
Y89:
f}<O
f7 y
+Q^r
:Rq
;+ut
Y& %-
@6?SC
3ob
e8+C
Ehyr
)c ]
BuSjwlQdw9enKy
T3c5
f<M.
iV'D
"N+\
6Ul)
igvI/
eC u
iSNA
P):{
h/%
1"W'
vLo
&@r@
tL!"@l
@i e
0T8
I,co
2(ea)j"
>t*E
xmzX
HyvdQ
Wwhx
5Uz!
(fiV
&f~nm
J{Fn
pu?!
"7>;~|
JU@I$76
n51?
.g_pM
>9 \
oeKw
~ R2
& !4=
:t*E
|g v
U9U"
-|X
:nAp
|l'w+
jGte
x |U
Om3\
i(zN
~3f
zfD?'au
a~[1
OLaT
|'V?I
=f)q
&P:zdi
aQf<
>uDv
B3os
Z1 L
?e /p
+@6b)(p
<xAm7
|NP
{l =WX
MA'/
kJf 7
GI_Z
1d2=
.;@,o
._H
QMo#{./
Pia9R
^&.
I(e1
g&xQ
m-KR
d N
bq f
5PIQ
*gjs
\ok[`+
b dnFl
o%4@
\9:BXtE
kyb$
AN79MGk
*\x@l
}o_
BP+ M-
Qiy0W
58O3KFKaBCxgMurfApg
*SNj
dCGm
:eW t
5WV
K R*8
TB8F
1Y8>
( bX
F^R
]D^osdi+
F li}
{qct
i,^w
cLJt.@
(n B
&@A)
n|T
ZwH&Z
oYlUQSIaNfb6Zb8
Tj(&L
qSsU%
z/_JAP
+Sv+_p
Z1qy
j#+=
3:~l
](wI
hNsk
Mxm
vnZ f!
*.80!&
$W'$
tZa>
fkux
s+i,\
sSI81K1jqAn
wK6^K
MQ"p
t{rAFp(
z9EH9S
vlt)
"eRN`
dYSkQ
=BwB
pW]y
K>e@
oMBQC
3aPTb
_joO
$6v4
:jbT
+_ *2
/LWd
)Rp8
<&Z.Z
g9Mye
eC!M
cT{H
ow`E
%IA8[
aP:<F
_UW
sX*~
s-qj'rN
{PCmx
U!O-v
~ kd
X'!I
A)jeC
EwAW`~
9ZA+
qvvk{M
,e.zW
JpBEfLEDf7TPsZ
Vu'
V|!2I
GTDUc
L\Di
Equals
~ O<V
U*(yb1
esg
k [S)
CP {
uI&
QpXw
W h U
AYG%}
==gg*
xQrJ
]8w,
@czq
GbG@
#zd^(Q
@Xez
pSk1
Cw[Xc
q 7a
E5AY&
mFlk
8+SrU
tVUU0
}'L"
Q_6?
6`By
W]4sL{
5S<;
Xr-w
1[GQpE
kP7
t OM\%
9iLS
5mFx
Hij(
%jGop
F5D&C
RXFu
&8@<!
Bhdt+
on\3\
6X8w
f#YF2IY
E( W
C[4rJ$G
r)GF|D,
Odqb&
N? <^
mk*qI
\X:0D
"y+f
iCkUP
pdI}
bj8rp
h 3a
}bUM
8m`D
j 9x
p`OH AD
iw0fE
sc^>Y
)%r**
5U8bhA
[_*[
,@C^9
u bt
*~<,Jn
E^w@
@l.
V)l*|
KMtIN>
?vYT
j}5%0t\r
.)4n
get_IsAttached
qRIWcrZsCXiOnd0PDY
1s>2
)Qq#
!9{U
+dX4
l.FDX
7O@Fj
v+6Z
K%Bq
GS7N
4HSo
$Pf~K
tior
_V*"
p ZZ
H6|
on?xZ
~,Z?
aI+;<
pYe7
Gw)6
:jPGv
0$W"s
\Ujh
df].b?j
F`9
!^tK
H#i-m
A>_-r
'n+`f
k$?
Au m
cTqB
Z%KA
DAir
vFc4
"1:X
}6<ar
X0ki
Gt00"K
D$m=i
z\U`
.S'TE
5O 55fm%
s N
Tx;O
get_CurrentThread
_V)&
iyX{
;ebc
T(!-
I[v3
ST*^
e>6pg
J`yL
5dKH>
;ul
j x-H
&P
'.A !
D8cKKi
}"V$
Q/04
UG.&|
L+i`
Svn |
+ ag
*q%o
m.;0
<9"|
D#s !
Q6 <
xT}%
JM(W:W%=
~dX<
;KA x
Ar=x
g1e!`
0dLy
!y5:
R d,,
QJ v
K7zl\'%:
yU0
;f4Cd-
r8rt
0d9
KHMS
xTVb+
z{h Ui
2*J z
x#==
g@Q?
E 'Q
+7pO
x73N
qAQ0
akz+
tQue
G-.0(
bqNah2TSN73Pj
39j^p
7Si$UM
aC
8.2T
U%[A
:B+:
O~:y
6tCY
d#2o
[! x
o#]y
d]E2
2r u@
_'#B
+p,
L#IU
dra:"
oSSU(
1l_)`
9UQL
eE7S
cs8(
JeF3
.oc?B
f@MM
#.@m
}kti}
NDZ/+9
V_9n2op
3I;V
AssemblyFileVersionAttribute
9X)
!xHQY6
j6Mes
j qw
a60JO
?v~Y
$@"
m:L$>
Kg>D
&8O~
w+n [
}S{O
)s9v
A)2xP
!Nur-
&Fa-
U\CZv
|c^u
f$X5fA
\A"7
jb<`
Tp(
do3 L@
Fm#.
3 AuD!
*.;DX
wd<Y\
kai)
^pZo
=<y6
2_O'Su
hj"9
n>`&v
+p9;
~h<R
V[ N
r.+'
v:Ikp
! o
76m)
- d|
c3r#
lE)o
-6dL)
.~v"
c@1.J
d<w
4$:V
&"i)
$GW.
Kv8
N4ub
3F/}
"oSl
2:/
vynK
Sleep
l7R\
y4&&?
dE%b
<e{fNIx
:~ 0
qoCn
kI|&&20
CPl%
k$y.
WER(
+Ki
_)kB
dI!K
<& D
oJNN+
#r ;
(gA)
e%n/
rEVt
!cud
W)eH-B
FF'u
fcT
5k!wA
Cdm>B
i`j3K
D P$V
SosZ
`GAH
AGLW
^ N%R
*ZXD
E% <jQ[R
B3(c
<Y;Im
JG]f
o/PP#%H
K Tv
j*.V
qO<@
x9:E
xLC!
g/&v4`
P 7`
tOmM9IZ0NLzNq2A
{@*fcRi
&Z~c
wqVce
3xPd
K4*F
0x9F
dv&}
is|
uGb4
JnIW+
vNA;
r #^
pX<ZMy}
)PZZ
c]]R'
] 3$
{fpL
nWXm
I LV=
YY9t
M";MT
\*Z @
Db5?
9z^h
MnPW
N -+
H|-4
8/9mIO
SW j
zsdh
*CGT
SV`B
Mt$Q
Zxkl55
z+dS7
0/B<
d=0 2{
Lq`P
8sl9
_+RfWaPz
Q}N'
|&cX
VOnJ
J`])
pV}S
A0E#
KHx-
Tf,C
DT^&~WG
~++c"
.5r8
f x5
be"bPA
4iEg
.+Hk
55?WI
i9_&3
09H&wJs233
R@;y
,*}u
Z)Y;
]xgco
BZLJ
%]63{
RuntimeFieldHandle
P6q+
h'::
3R/v_
EWDto"bZ
I>;(
\*vMfB
*Y:q
E93 7
GTi
V5sUL2
*6-u
2uPM
%?2Y
BJH\_'
mscorlib
5sdi+>
6 ,P
0\wiJD
/.;_
1p F
)>[i
K#A%
C?OyC7 )
) J8
V;\ |
9g|7
1mGI9
J7dP
Rp87
]"g#
`H2:KHc
V(1I
q0U)
d?-$
SHRdU]uS
ts0a25Dv6dB
y>"3
B|#.|
H%("
sWeSZ
Wj?n@
L59j)
E~S8Z^-
OyB%
[^9
Z ]7
.dE,q
Jvd(
"wXwJ>
B>kL
L "
(d22
<WM},]
&}5M
vpONe
2J13
3w}2
I/ (
g/DC
*u5mk
Q|3.
:&z3Y
{bI_
] 5DZ
:~5'
3y R
i#iI
1$!kA
"IE.
L <Q
>&J"V
5_Z4
| |jgC
mjUS
8@ }*
!{<R
&8v
9-Z x\T
}M=7*I
=rVG .WJ
xe[d
RG1I+"
pC+w,0{
&kq0
szoJ
,_BY8
~kse
m6$E
;S"/
Eflo
jZ);
%xZD<
*hRg
u]c^
GetConstructor
I~*|
9Cnlq
fN?cA
u:A^
JT l
Ci+!Q
%Jp!3E
R"{F
[yKX]
$iWP
'G\x
tIDj
Beq,
I0l`
Gy30Gtd8xUgLK1gKXJ
iF`/
/v2P
lE!
i3Beoh3jfRMB2yTxsUU
!}U.Nk
-~m)M
#(+1P]
VT0e_
e [
HcFW
TWLEfKlN8K
PQGb
)t)1
'Xf9
!w3v
.HQ`
rty{
V=J6T
A U8af
SsIo
VsN#
ibA.
w,9W
6B!1
%g|^x]Q
*>g).
\LGi
c et
=_s`
DIgz
fQd$
]1_
W338
?QLL
dV6O
X-"u
xKxq0DR1Ys6nshPq
Hkjz6
W64747
c> H
EL/_
$c,,
6n(8O1
(ua;
O7GRi&
[; L>8
$#zC[
+oi #
%+X6
BTW(
7;#]E
.#LhA
M-`
X% 2
rBXN~)
nAd2^
. :rR)
Y! pVd
8.Hp
&:eLlf
|,Ks
\{>Tb
[4f/Z
qbh4
MyHy
get_Name
wcj}5
a$n$
~ QQ
,/`3
k46j
+8 )
lL"
N:b1\
v/ {
rW@}
{b{p
f1qxF
nj IYq
yy?rD
+A(v
oxGO
4g
~'qA
{Dyyy
O/lt
)7T:6
rR /
-#`
p5_X
"DXk
[.R
6DbNg
#^i;
l{b"m
jC24g2J
2XXM
VZ!W
[#/;^
o)jx
AMd_
t5EI
G2Zq
Z(uQ *
46@D
2)hD
5tn7
+Ch@\_
&9EQ0
mKC5
GetProperties
X;W'
}]k0
6J`g
Eojh7
2^n2
DfGz
=a. "~
0!=~]
(sVz
oYn/
|B )]7
$@;Z
?:%3
R; ):V
\*5B
]r+v(M4
N-tQ
x,O;j
"l/m
/}(I[
v<vw~{
[/M@
)|\T
MOCy
6|(B
U g!G
6/;/a<~S
#o5f&
s4%f
zhHS
yhfV
8 5+
0UE8
}Zo_
)Ij&W
|['_
O)Za
FK]g
Wc;Ozz
wBwZb
#Schema
y5 A
`}jZ
?l@58
fWFBS
-"Od
[4 [8
X2vZ
&% ND+qQ
1^>*l
5*kNqv<m(
mw$Z
{2DW8
k?zT
IsLogging
:`A.
AFqh
`_`G-
Z5
w-5g
tbtK
R!Q6>L
5PPX
r[ -
}$GiPR
` :|]A
,U/ao
*9}
CEeDj
(9jC
d/0rp
U&%N
UX<?-
4Vf1q.
LRE9
la!d
#l~\
4C6X0dy ,_
v-0( v;
yW\)
58%"
a;E,<
+6lu>U
g=6K
v$k0
k~qS
Z\(q
;ywFT
k?z7
%-Si++g9
6aK99
M3|=
TJ7D
:Tsm
9- n6
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
oH9b
0Af-O%
!k,Q
2Kuo
kernel32.dll
m:kJ
6e*b
.p1 _
q'<E
,/G
: i;e
%`H:|
n$|IP3
!I*UV
$g/C
A=28K
s;[@
9P4joYlHADL
NW\}
?f2!$
)1m'
^3x1
YtuW[rb4
$) <+
JH \
(jAa
Ddm9
LOR7l_
ix8Q
U6nz
)F{<aqQ
B[eDy
=jZxee
Q:
/>Ew99
4gi[
xp9L
yZm
^@/E
Z){
Q2.y.
cgnJ~
ik1m
P3d c
>w+&w
c$X@J
` l1+
qYW[
:xc
S5F
{dt"
VkkZ3
;9
!o(j
g_hJ
q p7
8irCx\^
J7OA
U`%t
2b`4
RN/J
vqNB
PznS<
uqvvY>
(&lW
7t_*
;ze86
Txd6gdu1Th
)M&9C
zZ@JX
V`I>
{
1.jXJ
XJK;,
VB7
g_Z\
!/?P
=|r&
X6lB
v'3`
Nc?|
;7'N
A'}+gZ{
3V iS
-j0 d
&#P`l
[> +*[
FJNs
Js:c
rY~D&T
1b ?
Ws'#
QKqf
:vB+7U\uJ
t>:e'
u=&6
sYRu2
D4\
aK4
4km"
|Mmi
Xz~}7n
dvq;
XrvZ
HiqYr
WfaK
U;+<
`J/y
XdO+T
Write
,\iv
U0F,q'
qq/T
O&{)A=1
(;|S
Ox\t
y J
50'Z
_E|Eo
9xR96y3GWu
F$u%B
([{n1p
E#T[
D\^W%
9AMW61AZOPDK9WFwt
]k>#
||b63
RBpcZK
a<0E
a2E22
}&Ke
4F2z
f2Ap
-"
6(k). 6.
h{)6
SCfD
P2 <N
#<A>l
v9tM
|Z?3
'2; z}]N
#:.kb
\lhM!iG
BE:o
y& nW
$,Ds
.U'j
YL ^{
g)V<O#>1
1yB8
U.N5h
SkwL
K***
,dCF
/| 'f
'qd
0nZr
t})
qa&;g.
r7[7
` r{
*]{}a
:xo
I.UVy
DI:
M&f
Tr=/
Hdbv
Cg
*bBu
|4&w2
b{zz
xu N8
PFtC8
T88g
vSaR
%:\l
|p*
4d1g
AV
hH b
{gu;T0l:
-%=EK6
B]9h
q|7:3(g
.4{c
EfbQ
C":j
(o;^
x`^]9j
eopXkSb
dIw(
cA9b
2zH(F
JH J
S<qW
&%)(
7^MC
Es nc
4SJO
4" Q(0
@\3
+L#F2y
*KP
#yWO
"Z\Km[P
6IOa3
s=*]
]*Ip
G {D
dJ"w
'JHSu
6+qK4
\Jz+6U
7{-\9
VBf.>SY
5%vV
`[(nt
BF9ZDm9DMZ5090Nsm
pO}*"7
Q(_J
%oEn
4-0E
,tf
S7?U
(*\0@
^Oddk
7 +;
dk,b-
j`6o0
[; A
&oCE
@S~D!
-@{L
J 6Xr
Rjn@
:,4X
CreateInstance
sgjy0\\
x*>N
U,69m{
K.Nb
BleE
-hV>gPX
CB7vN
l &B
!(p-
GeW
fJRxLyF(
q91Xz
dDgJb
/Jd0
\a<D
_vW7
V;\t
]l;RW
" ~U
" A#
A4+zy
2&sj
D<[`M
f`N!
QX"
Environment
iG(A
*Bfa
?q+xn
(H'w)
KO<z
Z +9
y6.M
>.u8
J@=Z
xR"
`Efm
C:rj
6&^
u) q
B G,h
_pE8
>$(i
E v@3
\2`r
})F<6
DOwv
-,*
9eI"
Ol-_
<h J
89QfV
e_C+g
ExB
nK3/Wb
cjD0%I\c
I~`
ld)z
oyQ2Oe?
$E{y
@GEL
dRn,
kd5v
q 2x
oQJa
Ivqf
TYkI
kDjh
e%2H
N%8cX
R1}+
/XEOj
\gMi
^/bg
cX`3V*
d4:E
Activator
!FK }
P/CC
U5"?!
.|0R
yyWJmYnczD2wk
] =Um
v"X
vN~L
C!H=
@UZx^:
")g$cN
0<$ 2
5 k[W
JWjl)8~
FGNcgi2UFgFQ
9Rp.
v?Za8D
=;=q
1WGe
UQ'3z
%Z <O
cr]+
/&/B
(/EWl:0@
DIT@e
hPqq
6`<1
f]O]K
WOg
Ya%
Gfb>
R%5G
R}<~HF3
(M<:P
okcE >&NC=5
#a_>
g;@R
Intern
#"_! =
]+<
5J2w
u[zh'
D "|p
ha07
q j^
@MN:
.2J%
5HI6
^.tG2
8BCCG99pgrX90j7BuFC
WE-=e
K_t>
9)~
(S<.wo
K1$tr
8c] %
mN9Q
(?rU
EY*V
''3`
e$@c
ALg?;
a:? <
s Y/
:V[c
UIX*H
,4gc
'\yqJ
X. 6
V:$p
Y<I
x)V5
[a<X
d^H(
O}:S>{H
%_EXQ
2vOj
S'Xf
jr&'
VXb*
E/T8G*
N&\C
jL+)6a
6O Xp
*boj
RuntimeTypeHandle
QUp5
zqY5
;n8U
nN#@
~'m
O sL
iL_&
%c`G3r
xY~m,`
EMp [
vn=|<ba/VA
) *E
BI!5Y
PI{oF
)3phL^&
ItTtY
f2p
'wWS
`hWQ
G?
zn6O
lsD
pA7x
\AIT
*f0_
t(_t
#6YW
)4'f
er([J
)y~iEu
XloM
)AgD[
7cR
xH+
<\):
48|2u #
3+'K]
eG x?
]Hd
1eam
6F3DIe
vknI-
_{OT
+*Dg
4{$ 2F
)>nH
0/UBX
0LHd
7R,g
m @1v
Mrzw
3p1g
%{cg
\[Wj
n"o@
*r%
1KX$
uj~Ii
P= o
G#pi:)
4 ]W@
^.$
MS-.]f
~*$AQ
z?wI{
F]sw
QsE o
;\ b9
`&e|
+\z
H2-Hn
Q &}
8r)p
ggfn
+w A
E:h%
V4
755C
$0T&|
eyGqpWyZ73XiHTnF5v
>oiP(L
f'U)
nQ
9;mrP
r}+d
,k?@X
get_Length
dG"N
L R9p
Vq
$G.`
+c7oz
zY <
o3Dzp
!O\;
M)0/
:WF p
!=K~E,f
-+]W
Cz?4Q
\~3h
h=/a
I%+-8t
-O,M#
r&Y
DL/
/JC_
J^{}{
C4dj
}KD6
j7+p
?_W}
#d_@
Zi9M
>bLx
$' u
&|Hz=1*
R5Pz
$C &
^0t#
EVe5
_=|\c
|Es[
+PV`
@fR?V~{ 3
Qtk) .cP#_0z
G=+s
{;?v
HD\O
IML m{
KVOb
=$>
1j"}
p:x0
n.hu
!t u
5eX
6dH'
]5,
'+pnE
7?M|
1j"j
kJGYr
[c#,
@.XMI
^w$-
aK8E
pbx;
KP}K
VDx}
YP8
|zA
_-{W
@V7+
YLMY
h]ASX
u_}k
{~|)
T6C
6rDL
e4fNe
><w3Ky
ZrJ}4
NoNb
u}nq
G[\
\`/&I
i8X(&
Df&?
G9kIq
)B Y
a RZ
lb u
Em#
W! y
N7Cq
2ndj
>(C%;fP;
"Q u3Eu
cC%OG@
X5!U
wOC
F V=
{ if
<K_D
Q^M<
#JeJ
>d#
.%=8
f'<
Va_I
@n^
%~+'}
(.U6
EP?
+}l ^
@A l
u7#V
dIuN
O$<|
c#0yL
-OOT
b{x^
d*TN
xL<m
.g`1T
[)Be
I6B
Ekjp
M'}/
ZP}Z
qv'n
Pxtv
JqF\
d'z/
U~#L
Y00 /
5 K
o#rW<
.T`On
/hI}
ken
DrEv
Z8Ep2
T xcF
?iqw
yw` R
nIl}
\C:n
vS ;M>Z
e;Yw
Zv2+w
W [3
g@{:H
?8$)
Q1R
PT=A
V+/Q
&$ug0 G
c:LUH
ZQLXF
L jZ
ConstructorInfo
z6LA
2?Af
T1;R
d_8p2
vndU
Xg.5
:{J[T
9WDQ
nT3j0z7HjSV9J0
_*N#
1I f
A=@F
*Mt
{A <#
tfsb
AZ dg
$E(J
*k8(
GKxf&
.( (T
mfQS
a_(BQ
q($x
a U
>5!+
sf$C
T?-9
NfeS
O^y~
9l/7
;]B5
0J[_
$g, d
dSVjo
} 2r
F?V]
SZ<mTI=
y\7X
B 0S
ky~0P
#-Y2
7!ux
d|!W$
pSC^
&[-Y
2T0G
mW .
\a5CT
4HfxW
kASU
:]Z&
pLmGeihUNda3f94U
[MSb
7"Q]HF|
^7}n1
b$Q^
J?`q
4x8<8
LYx)
eH|\
4rI
lgw[
iAH?y
`rI
NVyl
L47A
GetTypeFromHandle
go+3
xP_z
G`pO
O`v~r@m`Z
,t 6
=L6w
L|<.{*
wfaXw
qY#]
LdF9
l_0V
y vG
Z H}
jh'R
6G~"
Aya
oM*XR.
U*'H_
!F <
~H\Y\
0#Js
~!9[s
V&P
p~zP
Q?^L.D
'j:Z~p
51Y+
f^YvC
/VK"
Ra!4
Q"i`
FK 1cAh5
F,Qli!
^ ;l
oP-^
W'}LeA7
Wum
Byte
F F.-J
}'5u
XSWuH1
U-h~
5v|R
YIf`
;n K2U:E
?z!K
|r:.V
V</y}Y
D7jRt"
b>9C
k h:
2s)
/0qyi"
F-p~
DeC3
ze~y
6=pCY
~f%~
~X b
;pom
:8B9
{w +
Ac]@/G.,u
2 t
e~ E
5< ]M
woo-
.~4A
, ;F
HnGh
"r5Z
-Nbi
[ v+
)+\b{
mG+
f. YE
7 Qyq^
@ p0W
*lz#
6_xGw
_`1@
\36V
Im'
?{ MuW
9%KI[r
qqZX
@~3v
aX,x
P,#N
^$&cJz
>ES+R
=fuY88
Ik/;|{
(y$H
e}l.(O2f{
fg*9
Oc }
hn==
dSgO
7|q#
*_QZ[p
D`GG!
[ vs
`^2@Tq
M, W
8yB
Q1={M
[`GORynm
bF%Q8{
&s'u
y|5
@N77
2{=c
k_bL
P$YM
-xg^J};)
_?B@
/L:;I
2K t
CbJK
'=*aO
W/c%
,I4H,
/>7&BXe
Y6tr
!.{P
@G;#I<{
! j7
>\kHK
Uh2)
~r n>n
4F-!
hZrh
(#@O$
YUWu
DVV[
p5ffKKSJmClgaYe3
=v\_b
j XS=o
KY-*s)
.resources
3upt
Kqdoyf4XVc
IP[z
+sc(
m- -
>]e39n
sT!,
Ld5ynYeKK3r6gff
XTIl
zGTK
VLZr(
,0H3b
Gx:>
kIpNh
l w[
A0x ]
l4nk
!2AC
+x~qe
E6"F
A>lN
x~!GQ
;PBN'
28Kg
y~ju:
D>}'
QY"8
D'kQ
SwzY
UV]rj
` >87
u4)
`d `9 B
F!LB
T mr/u
X89C
XiMotj
$}sVEm
vPV;
!3Z&L
F)u#
uVX~(
P h35O
y{=/
+-H1
7Q~:
e\"/
ZV2E
?RG#h
h@U[
Jzm0pRudR03A0
#[O!
w4@l
a0>c
!L u
Rko[
h)l=
3zLW
Td4N
ahxI
4-iZ=h!
,Scb}
d :"
)3-`4
;Aa5
Y*2y
OK+B
hhC~
N8%k
A:}tp
2 y:
Mq (p
]^sy&
BACn`
GR/_
6Od< ~
iklu
whVF
~Kj#
rl1 U
!3mf8
.{'Qq.
3mhgq
u#&4
`CC}
lU!v&za+
yrod
mCGh
fMzrr
/9VB
TE 7
qG=6L
V!.I
6b1o ?
[I!b
>|
0z~t
/ s|e
Rf l5
Dfod
*+R(
ft m
U s0
L^1
Ir}W
,b{Z
B,N}#
~Mv+Eq3
Qb&
l=rFBg
{f~:
~{-Zf
~w l{4
jOln
3]a[
wUa
)bRu$
h<}R<
A\ p
F:v
k #"
[ kX
Hd\
lCa|
#@$>
jrhH
1NqX
Z+\*L0~@
&F wo
#7i)
RpbA6mJBPN8YjYC641
HD^m
c#<__!
t-bk
BwsOH
I>5K
YD:G
]*Q>
h7^T
=gy`#
68t
>e
.q(ik[y
;u({
JI=9
c{y~+
4dym
g<',
.@>>
'xdx6
X8!Ec
WrVkqThJeG4QLeo
G\+
0' U?Nm
( a*=Xa5^J
^S5
sTIp(%
ReadByte
5M*e
\|m\
N, m
xDt
pv@P
;ab9
@It.
RI7]5:
MW5'
L5H<4@b
MmhgX
vhPFonokEC1
ix2X
Nz/2
\s$m
=8z+!Bt
`vN2Y
@ WyM
.%?3
c[['~
dackU
+/`3z7
n%j@0
r?EDd2
MzMb
)VlO<
4:=]
"Y"'
Je+s
{B}q-
N{kL
1 o+sz
|0ns
]aEc
0)"
A E!.
u:r)`
A\MbD1
TiNu
Bm3T
Fk[2
U\rX7
_Y!D
ufq$
-E$T#
_zwt
W w=
~wy
x6>vq
.V2dz
+8;u
iz!7
\>R7
gAqM
%*Eh(
FFhzw67nTwIDWGt8Pls
mX)V
9 ,v
[lRJ
l>[
v#|k
kTN}
)2C'
#tE\
$"c0
M#>
&4>S
W\g
Al
VboQ
[w}0wV\
HH"H
B\.zp
lKP&;b
OWx&f%
Bf+%
~!sHL]*
9X3_d
tq?o
L|+s)~
hP ]
lUV"
Pc6>
sIY2
uu|Z
A7O.
$ d^
<bAr\E
}8uW
7"0K5
q~[1
-P)$
( TW
&]$W
v5\&
olTK
*jpa
oH]B
#qG 2b
E$o
/\zj
x:k%
j7O|
}P^|
]%Qzs
h;rH
jNp[
iRN[
[x~ `}i1
G%+?,
YB9im
O,oF
E 'o
ezbW
!irM
6XnR
ft=*l
nce&2
{Qx
6;1F_
`wwq
4%$M
^bz$V
{T/|X
ky)u
>v#!j
:q2DB
.F"-
<[}*
gW)(
{85L
f&5=g:
$fl[
B@Bep
03MhHV9mPWYYwCkgwm
@G<s
F|)/
*[iY
3~y1(
;S3[-V
:&_Ea
dtvA
nUf1pMKM2KK8q
Z;dn
KI:iEC
1 SxL
A xk
tC"Z
MgH;
ds(1
su1Fm
vV Z
$'T5
b?N$
Wo3x9MT
XchjG
Pe7o
^r{9
2.@gm
:gIK
[sxT
QnZV
!Pne
9]H@:
,{_k
O;YZh
;#rK-
~9!2
b' "
mfh]
IRYs
ORJ{
2A"
t(c&
{3^n
XTV!
@5_
x5Ly<m
m[6hE
gp? ;.
qqulW
u,&1O
`B i
xq'u
!z"NGT a*Xy
IxNJ
f6ls@
sTg;
VJt[
IsC7
?E&*
'po"
#,SW
uH)I
(z={
?4\9'YX
o`&7
5NRC0
VOE T
,7=?
#g6
}/ U
eWeO2fM3GkGzsT5b9
]Hi|
vNzX
tcG[
( $=%
}6w1
7Q[:
{%&8
xu RMe(
3a1<
+q
v>H/
i XKtc
A9Bz
7$`r
V5
XN`
\K[ `
uy 8
+W4rXa+l
<)a/
So^Z
'%6a
Ov(k
$GqlBi
N'D#
EyCh
<:o&n
]v(3
_Pn&
238Y
6OF<#
,Ho;
= *
%.C9
+^ c1b-
mh R
ax\N
37kI
m) %
)T[p
jB'gg
)g '
sGO
fH2:
#dxY
W(ie
brC}
f(+l
^^X6
^]2>
$* &cl
MJ,S
{6^\V!
d" GH
h%1k
SB)n
%Hs0
NBws=t
lZ$R
Z)7,
c9Af
)Z;m<
^k|<
_&<U
j D3
6|"o
EjE?
`ekiA
Gsf4
T j[W
(JK}e|N
f@.>
ap*[p
cXj7
X;Md
1 N#
D|u
o=:b7
oW0U
nf>E
5"@I
%vS
`T#d8j
j\sz
5h/%
'xBi
v\(P
/5d$
G)8%
n}Mz
/De7
/Dn""
(Ze3}
gFO
|ByN
rSy;
G=$!z
4,_ @
lYNNi
SKjb/
Z%Ao!
/f@=8
3:/un
69z4j
o!kA
6j/gq
%|edD+6
qqDLf!N!
opL|
/=tQ
;(Bb
&_Yz[
VcC ;
[SG=]8
,MqAO&
1B 0
$nT=
+K8H~
qbBa
-eQ9
r:X
j#>a
-wUk
e.5@
40:D Vw
-m 2
urxR
]Ot [q
yQ,3
1BP
>Szn6
s-J
GRIg
Y7S>>!
CG ^9
e:tp
OLd{3m
>~m$
E!//
?C=P3
0 B"
*5gX
9ZFK
u7:R
~8XO
4NOfp
GsqwQ
i~A8
n{=K$d
)!!$:
f"xgc
4kPBrf1NfM9L
Ef,\
>G .
TLp;
~}9b
|u[h
,g<
:9:U
qB?GM}"-i`
"C[l
v7XD
D28z
Fulu
M< l
lTu4
p ]]
(xqST[
K[lH
u@,\
cFX+
7g}c
IOF0I#
E~z"
fI~w
A>xHO
&|\)E
QzcuM0HysRP
%.'M
=xH7%
t|")b
-b]l5x
HDL+p|/g
K^<5
/@|+
M< -
aYLY
q<1
/ c)
O0B<pm
3KiI=
aJ)M1
R7"f
h+H1"
}+mb
-nHCf
X{`oQ
0}+`ak
]AoZ
T$'R
?]yL
0J.$h
]{z;Joy
?f5.
+bQD
Ppk(
7!7XF_
PMC(
,WI+U~_ .
P\oDm
#(@0`[u!
m^8d
LrfH
9 h!
,tO_
2|h'
-<=
]zz8
7*a-
gV/X
?G9Q
) )x
?PwC
}PeU
!GtMq
e\{ND
y,1O
n-Ap
Sv,-
#RloLk|
C'v'S
|:Z`
l_Z[B
8mSl
'!.0
p1Xq
r:}d
Sc7
=V"+
w!7v
yK1b
h~^1l
)z?i
I`l8jk
_F>U
& hC
K}ZJ
rLjS^
W/}
6np@#R*
uvr*J
\aBrw=
1{?e
oGF6#Nf
JmF6
@@~z0
F!mb
@ wO
w.42^
NBSeT
P%)[vK
fIt *
,?a?
:i^h
gt?F]
JG-9
R]:e
G}0M
f0&7
x.IXH
7M!Ev
'[[-
.x%r<.
&bff
^}@K
2J?&
oS);
X+%J
*_ *
]ipL_
lgld
l'pca=
dLm$%
D}ub
|H^AC
>&;t
H9FXmXOzOk
*o+ F
;(01
II*h
|WiL
EaTW
bW<
K`cwN
:BCE
H%|0
p>=7
3|,"
3@$Q2(
bD^<d
o4^|t
(i(%
%h;-
V^
th!Zi
(8%X
U>,=
5;(6n@2
$\M,@
3WSvTo5lkZ3akUdEF
Jyd}
$`gL
O9Zu
9YUK
CEo2u
5u XM
) WW
>,1S
O?p34
KRGG
4H I
&~b6
)y=
#q ,
Cu~;cR{/O
wXt@r
G.&3
Q)rhd
(FU$H
N}E>
dr_t
X,J
BvaB
h<j3R^
B^-o
a_/@1
vFv|U58
Q H)
48AS
DAj-b#
o/N50
bGhv
TBDj
ct ~
cM[|
|/e9
RD B
e@T-
xs>mB
{|5/
@>O
w8|r
)e^y
m ~kU
E Fi
a x!8)
Iq l%-f
T @@O
7=O\'
$io_
QvH,
[^6zz
rXU}
|o|Lc
H]pPx1
R6'"
{4 Y
gBE1
hfy;
2^.>
LgAwR
fE"
%oK9
! [s
x0Mj
LB~DG
5,D7
'hM-
3|4~
[y `
XCk+u
rfq7
)eFJl
wZ,e2
lb9S
'()G
SSr
UZa;
{~_S
ep 7
~S<V
}z:v
r;LE9u
f^H-
s` 5
y&@^
8.p4
D3sw
x0_y`d
99s
=[euc[H
.HJ
w @
wA$I6b
fF2S~
7clQ
[|`^L
^r}>
_}a8j
WQ!)
}_h5C}
4d p9
>e'0
l/'a\m
}m";>H
*A<L
7O5j
)m^B
}u}L!
K8w%
R%Q|
_ g/
\=n
o?`2(
nw)~
)D@P
,Bf1$
k\tJ
( ^t
xX.T
R^HAZ
Op9
kOG
03=63
,W a
]y 9_%
kJF
Z<0)(
?)b<,"
6I7W0KwOzvBK5YkgHA2
bl%M8b
p\|
e*G^
P~.4&
N w
PY']
tHzG
j>WR
YsTZZ91SZACIvkvwK
f)(z
e2@X
+7uT,
r wELj
V.1EV
V_ K
v lqG
br)@0K
+'px>04
"|Gs
nS Dg
~9YFE\
Kk{y7
lBJoC
3LDLN
=a@<
KpCk
k/ V
P_ B
Bm$(
ykO,
[Pu^7
N_l#"
Kn3bO
J,Lbg!
{=j #
QDu`e
8muCp4cX3782Boe6p
[>DM
PwD"
uH\Y
_FinLK
pjV1
X7`np
#\w\
lFWxA
ec Vm
<\wA
=OJK
t \Jw
HM$&
;z8:
!D"7
stF1d
DA z
XuJI
'-O-
%_<=
.}ZF
KE4/p
}v?1
#q`]n
eoBT
6\{ i
@df[
L-Ix
DcdQ6
t=J6m
System.Runtime.InteropServices
Ihm'h
$4.c
7a ]
19?^
L"mb
L-Io
71z5
ZSzs?
s>IX
hEO^
Hi9
M$},
i9}@
_ yr
6bhZ*X
vhk'
ubf
bm<f
AR\)
2(^x;
wbY#
FwQc.'=
\E|n
Um 8
%[iP
;6xaP
eX_g
eO'(
$lbZ
f 3
zxIv6mdbDjnDBkbJ
B~x:
cn';T
?~k>
$t=y
4"Yw"xS
.u $
RHyk
>h:t
`mZ^
bQVr
=3;P
``x*.H
\V9
<So
IWE
"+cFe
@JXV
&Z'Y
9ajd.
vcN'A
e0TY
6u#7
bE}1
GetElementType
0 ae_
>no%
`wVi*'R
sM\r
~\?z
52a*U
/Aw'
Md31
[Cbd
:-Tj
%1e4
%Wts
Np-I
%ei7Z
, nA
GX@_H
Ix/c
~V3Y
k -I
q\e`
&K rN
72olR
W@ U
hk R
6*p{
cy;%
=2E&6
lHtw3
g=s3Bn
DWR[
z.nY
;([Ir
wu>1
d*'H
02rj<
_e]~
%t4 @
Encoding
(yI}$Y|t
U[l/
a}Zq
(j]8
B}F`7
u/|)s%
MAJ#%
B$m"I
aeZZ
.9h\
'LMSh
H=!~
(NTt
*d$)
Ft @z|
3e;?k
,$u7X85
ZS+w#
} BA
;, Dg
= 2i
^ySbE
String
-q)C
(PkW
&{Cb
^_ d
^{+W
2h"%m#c
c\7
tw_f
ZM (4
X1Du
'4Wx
LDD)
< Ni
(^Ur
$ N4
Bnb
@tpa
& U%j
!{)k
C <9
s3kp
bBsN^k
Mg^1]
O!G7
K%/W/
rPmB
h.G,
f9f9
m3kK
|/ks9
d9R/
.ay(r}
/+Mu(
A\JV
X1l$B
LDn#]n
U*vw~
Y*}/f
U3 1e
>c n
#.)u
3:,
}g'I
C7||-:
Vn$BCg
mdnA
#7s{W
rLj{
fMCh
+MN-
Hw7]D
YT J
P$:p
*c~>#
l&x5
w>$u
;x[
,aIB
M=/R
sL0P
%wt1
&|=C
-K<
oa]D
tN-z><
!>-'
5,OIt
t|2}S
?# l
Load
= mk
1I<ZC
uq)JH
h!fj
nf]%
5uS-
{& ]
s !j
2H;-
Ij&*l
sn?=
#^Tn
)8J1
r|7b
Te\
g(ju
%#Zy
Zai
R9YQ
rSO
<L1^
g&Pk
c >\
%<Fn
sFe4
RHk]U
Wcme t
5|iMB
sy&
eP!c}tP
1G:3
;ni|C
[^dx
Bb3s
%dL@;
`fpR
x;-`
4eWCs@q{ C
aY >
y}=D
!DC1
9rB[
+J"K
7d'e
Zu_7|
Q>L
=,
jC3F
D) =
?~Kxhn
RuntimeHelpers
d[Ms
Q5P,Mv
ZTZa6H
|XUY
7.8$'
AbP-
$cC}
!f nM@
sZKDt
V=7
1n
"lHz
MG,|'
}Vu9
j I7T
^tY"qc
?]st
QarY-<
MCq,
>\y4
e;WW
_"dW
w+HK
\sYNE
Y;e^
Tz%E
+!tsa
Qxd"
s6o N#
YBQ5
s U`$C?
{1qQWD
u?D]
?c&G
5*5hoz
Piw}0mI
$V>
jSt]
wGwu
~BA<
cU?i
t"5g
AP\Yv
AeVK
=nD~
hd00
t>Lc
L=;BAy
>-lJ
-]WQ
69G`F
w\E Ur
W3S|)
n%a|O
|p+W
</`q
O[-N
" N&&
_ b@
t2PY
$6blC
=Huj
y${<
SYL;
x*@nkGt
6w l]
:cA4
Zv[D
|PkT
^_x'
q2.d
#^7
i:KN
WM{mwu
VM*C
^62[fb
CPSK3wMbONskJWESr0y
VBt
R<ci
`*&cd
n }6
&9&!I
_qA.
?XHX
s="E
)m r
Gb>ZW#
5x\I
1Z7ehc7w8EkwtJ
//ya
jbao
<6;I
ZkA2
@TXTiz
4"h2
d,P6
q~ga
g_E%
uz;+
g(DZy
[0Q0-
RIJ}%]
.)<
aH4e
4H=k
HJH03
by|J
E]UxY
$Xu
lHp
NKE$3
]9@b
:AlL
o;8,Yv!
l99>
?/}p
( O
$.H*
:Y5e
&:1d
m?Yz`
&:1^
T]<;
xcCF
$EUi
sgz|X
/D!A
5~ 9;\
N-:P<
mY?1rX
8 BKEE5)
}B2p
ezxE
}m\8
BdUty
3C4
p`cACs"~
9{ U[]
=<f.
TN2
- J
StP|
!U6N
hv_9
wtiE
$)'-
&T{
adppo2t-5
.\,j
]J :
0pmed>
_pME
# z_
&T{9
<S>{z
bUQ(
0t_S2
Q=Eq
Mjo"
t_}g
/&'hK
e%*Y
V4 {
w X{
!1oE
qJZ9
-u/H"
Iny9
gdt@
W|uYX
Mm8@F
mU[T
W3$I
SNaQ
@; 0
r,%
n:/&
- zqV
z7/
a&=8*
%itQ
1766G
s8sp8i
1C#Q
"}- \
,\T7@{7
J6Ks
=M~B
wz[(
+ aF
rfq35
A Q6W
mc?9
>iU
Zw>|;
System.Threading
ofR[q
K]+9
'QpH
B\.T}
+(L=
vrC g
\?Xm
,.Xw1
0 ]:
"*
7R@N'
!XV&#r.!o
seyeQ
*-SJ
NYL
9 5
v+ i
t0Bo
hp7r
6oZN
2QnJ
}|33
.]'
SesXF
<FiX ?D
!aV=
!pm
R#j+
~b/c
=357
=bM
G/ u
wSXEVhMdMBwnTjZn
Ru0)
Fj|Q
!G7>
725x
8=UT
_& C
d'!@0
0D.D
8RJR
|F$,
>%hp
[ t*9lY
:WIj
b8MMJIjuCcgJXNN
rXcS
}b&L
C=E fU
PiE>
ntux
[qsMK
h"Hu
M7-G
3e~`j
gW:o
*VDu_
07Xx]
s%yB
L[+a
x7!zs'
cd!=
[RF5
KnP29
8DR
{mY|!
K97P
3 @ d`
*T6rn
U;'O_Y
,x[
E#e<Q
,poW
r^U(
KYrZ
zm3%J
6Nye
E Hez-
5 rO
/MB9%
V|RME
mj8Z
Babg
8]Z!~
-dW7
RwYc
b4xMB
SN[30
3%Y@
<:"Oq
**V
j3Tg
@v^L
Z"d F
S1<>qm
s1 '
su@H
4xP
@4KC
!- h
} K
1w2G
gnKF
|b6XF
DU.Xp
)Qf9
^><W
tQB~
bl1P
$QD=
lrl";
tsmyi
QX%&3
<]!v
tnUg
z&5n
bH,X
36d
zni,
s`k>
+;JYS4>&
>8` }
LO7`
Z'OP+
K<|R
RbFh
0;$Ml
( TU
e;l&
JME$
=/=-F
&OA1
_OE(6w
JiVB
u u>
dQMv
7R($h
[VS1
% *H
3Jey
xV3u
XtTO
-OZl
O]A.}
QDG3I
K\.;
}}Mt
:} [=
SYq
8v)+'*
cp;P
A&F:
RB'Xv
?j g:oU
Id?H
X^e<
w~/
v\<E
gl;5
qE7
<AJl
+^Rp
V?2~E^
QN2nzm
-*;n
{`Nl
k\Bk
(H5TV
5J|+
N:=Lc
BAm@
<X1F#
cZ?a9v
/jd
Bgx'
7VxZ7%a
#wmV
zo-2
$%iS
-rdw
7v[a
` }4
~DD6d
yw6%
?L/A
-SkN
h m]'z
qcsC_q
y2M8
-^ ^
-Po!
}hj
;Ero
N=P\
*RvrO
I3xAw
F,37
TH[
%3oK
Zq
>'(o
qN3O\
pz70TM
A=_^
.7jGB
.]8o=`
7C(1
FC1Xc
TI$k6
C^,@K
(i)K
,AdG
v=ZD1
Bn7Z>1.
dz^Z
,y5u
Z_XK
\z)TAM[
nJ'c
3ASB
jojK]
u=hI5
]h/.
40"+
nquW
H n-
'(m
z>mt
V4gc
Pi"9s
W%"h
FE=@
V ZL4 )
k[r.v
8l+Ga
1|0G
q Z8
jRaf
<@Jro
B;q-
[? {
VBYr
;$m
^DjIXV31
ERY)
JkPa
~kn[M
.>>n
8a#!
TO34
W_Tfr
<!`7
(b ~6
$9R^n>
AL p
f$wQ4
L{4
/!)#
@gC#p;
JQA(
F?zo
\1gsvz1
s7mu
op#e
6 -w
&&z;
:='*
P?^'
D$BQ
"LkF
lu1o
N1aT
1!L]>
.$0&
9%vwxy
System.Runtime.CompilerServices
&/JA
\Tb1
88hKT
*{ KW
U&^a
umnPe 19
$ 2 v
8l:8k
HjaMR^
/BZp
>rP
q+*i
=r0V
aj4Sn
uxP_
,8hf
{hf;
rk9h4
Y[Qia
9'+`m2
b@t)
`Mr2C
T_l
!L]p
WKwV
1T8PF
E23O
1]Km
H=h,O!
}s@,
, [pi
g 76h
9Og!
23z!
q;e?f
-;#c
#3
l>l L
[=6w
<j[sb
Srkp
K]{F
<K{b
ys%t
System.Windows.Forms
RT!Qkn)Ar
s) Q
(QDt]
R-gb
\Qy%
f9G?
c5(z
.g2y
~"7J\',
IPU~
]s^C
OzA\
W__^,1A
&r9]-1
2gvz&
B!B>
"g u
&SM%
0lJR
5i;a
}jKy
h/N\
1in?
VK^v
AK#>=
Xa~K
&CFZ
}d}d~
I"6`lY
!d4*Y
>2&4
pT~oY46
h X8
7pL
..|6
'KFA5
g @-'
T|=m
CWU6
a+wh
=Ne
>sZ/
GqU!2
~H `
(z`uQa
|aI
IIo?
'rQis#
m,s%
8N.|E
s9/ Y
z5S?P
MVNHX
jyb' %
IrR|
o?R[
c.o{0
'sEb=
].d[Q62%
O6k"4
JK:]
Q}rwr3
v}c~4
~+T*
kZ\b
;k2J
?`:S
WAtfOCa
TxM
IntPtr
C# s
8>W5*
wiQ>fwGw
X5P"
9Wa;j@
2PIL%
1Z[
SSMx`
J[:
! Wt>}w
"Y|P
yF;kA
W qa
k&AC
AQ %
dC.?Z
WIR{v}F
H.N#
R[$+
^q]6
n^o]^w
+&I
w@6b
h] c$
{.NA z
"52O>
ye&S
d~Njv
e .1
OEU;
Qr8L
B}!.Rd
f_Jk#Y
M,[eQ
k]%))
pUJj'Z
,43a
B6-Hr
9.H]
ar&t
|3@ng
FVy4*T
ZV{I
^x(R8
rwK)%S
y^/3
GE*a
b"!nb
WGis
X6[7
Kkjz
Cn$R
H0zxV
.bc9
Zb_g
3?cFn
--x|z
m!F+
b'WC
h\VPB
r`p
F.6B
o&2kR
Isq3
b~"v
VGLmJY7xRTUTY3mGwfv
k [|
f]/+ R
!?6iwpk
b>13
T,"(
&qaSN~a
PhB_#
7bO f#
=xm
y1)B=
/B3Ej
;V-6L
` Lh
XeaYesyhry
ELr
jarqdA0NASrQy8v
*EDg
+ Z!
System.Text
M`[+
dW -e
UHrU{
}O-]
K=%yl
~:[M
Rd%$
9mlmZ
tW66G
D>=X
1X"W3_
\)b 0
0 qKl
Y~Wt
WL \
);2z*
o^=d
1+%L
BXw3
AJEzW
Mnntw
0"@r
yTBO
G2NN
1Mh^#
oMx^{
dmq[
cFE
R/31(b
get_Module
"@Pq
QR.4
1Ip
5<Fk
JUVO*Y
BkG!
)QW
n4Wj
pquIk
KECr
cvz9
J|/(
[kG`
".->. .
P,+G
7y]@V
TH(xj
`>`o
X)y'y
Sem>0
)H5S7
W"'?
1iT'
VWHq
O1
9JPK!
x|l,
EW:vx
NGvcw
QvgY
=K V
f'qR
@F`8
!t~p+
wrITY
b IO
515N
9ysr
C3[a
Z dV
6V{1
764`
CDA1I
<{Y_
CpasK
JItSI
_^k?C
obC4
dB!\
61bJqFQwVPSeN
U`U@-
%A<+?
bNsd0X
5TGG
rRo4:1"
-X$("
T|Z%
/TSe i
HYZgu
<na<
JhRb
~r0#
e6a(
(&6?
&%A38
M@1(
p>A#
~3G1b
GP$}
pV #
m-
wv\=
Qn59O
iu u
~y W
=B ^Y
"N wI
B+\7
BzIW
EO1})
*rId
_Odt_%
N4gZ
f]M.
T?o 0s
Rdm'=7
_wh+
sQ<G
-n;1&
5E :
laX6
(623
rj_x
ONxb
EV'XP
+Yp
S+R-L
t Q/
*)'Z~
g2fDJ
"C 9
)waR
7[2`u
(OW<'W
;I4k=]
uCNC4vqBnKXdHpD1N92
$i>[4 /4
k IM=
g6"g
_"}b
|k(*
-k?Y
>Guo
CP~u
y`@}]i
/DYM
V& $
Q").tN'
< U%p{
=~n9{
ho$,
H-S-
cq"(
Ac br
I'^c
;=*!
nL7w
_!Y"
`MM
Sj.d
<X
}{Jx
)dYwU
1'IZU
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2017-12-12 20:16:57 2017-12-12 20:19:54 177

11 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2017-12-12 20:16:57 2017-12-12 20:19:54 177

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\1.exe.config
C:\Users\Seven01\AppData\Local\Temp\1.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\file\*
C:\Users\Seven01\AppData\Local\Temp\1.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Users\Seven01\AppData\Local\Temp\it-IT\file.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\file.resources\file.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\file.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\file.resources\file.resources.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Users\Seven01\AppData\Local\Temp\it\file.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\file.resources\file.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\file.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\file.resources\file.resources.exe
C:\Users\Seven01\AppData\Local\Temp\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.dll
C:\Users\Seven01\AppData\Local\Temp\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.dll
C:\Users\Seven01\AppData\Local\Temp\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.exe
C:\Users\Seven01\AppData\Local\Temp\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\msvcrt.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe
\Device\NamedPipe\
C:\Windows\System32\Branding\Basebrd\Basebrd.dll
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe"
C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe.config
C:\Users\Seven01\AppData\Roaming\mozilla firefox\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.INI
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\file.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\file.resources\file.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\file.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\file.resources\file.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\file.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\file.resources\file.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\file.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\file.resources\file.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc\AKBgPMaNyOEBvFBXHqNPWKBcVkgOc.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\mozilla firefox\msvcrt.dll
C:\Users\Seven01\AppData\Local\Temp\Update.txt
C:\Windows\Microsoft.net\Framework\v2.0.50727
\Device\NamedPipe
C:\Users\Seven01\AppData\Local\Temp\reg.*
C:\Users\Seven01\AppData\Local\Temp\reg
C:\ProgramData\Oracle\Java\javapath\reg.*
C:\ProgramData\Oracle\Java\javapath\reg
C:\Windows\System32\reg.*
C:\Windows\System32\reg.COM
C:\Windows\System32\reg.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
C:\Windows\Microsoft.net\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.net
C:\Windows\Microsoft.net\Framework
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\jarnet.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\jarnet.resources\jarnet.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\jarnet.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\jarnet.resources\jarnet.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\jarnet.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\jarnet.resources\jarnet.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\jarnet.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\jarnet.resources\jarnet.resources.exe
C:\Users\Seven01\AppData\Local\Temp\Host.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
\??\MountPointManager
C:\Users\Seven01\AppData\Local\Temp\blessings.jar
C:\Program Files\Java\jre1.8.0_74\bin\javaw.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2140.26482640
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2140.26482640
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2140.26482640
C:\Users\Seven01\AppData\Local\Temp\.Identifier
C:\Program Files\Java\jre1.8.0_74\bin\java.dll
C:\Windows\sysnative\tzres.dll
C:\Program Files\Java\jre1.8.0_74\lib\amd64\jvm.cfg
C:\Program Files\Java\jre1.8.0_74\bin\server\jvm.dll
C:\Program Files\Java\jre1.8.0_74\bin\msvcr100.dll
C:\Program Files\Java\jre1.8.0_74\bin\WSOCK32.dll
C:\Windows\sysnative\wsock32.dll
C:\Program Files\Java\jre1.8.0_74\bin\WINMM.dll
C:\Windows\sysnative\winmm.dll
C:\Program Files\Java\jre1.8.0_74\bin\VERSION.dll
C:\Windows\sysnative\version.dll
C:\Program Files\Java\jre1.8.0_74\bin\verify.dll
C:\Users\Seven01\AppData\Local\Temp\.hotspotrc
C:\Program Files\Java\jre1.8.0_74\lib\endorsed
C:\
C:\Users\Seven01\AppData\Local\Temp\hsperfdata_Seven01
C:\Users\Seven01\AppData\Local\Temp\hsperfdata_Seven01\*.*
C:\Users\Seven01\AppData\Local\Temp\hsperfdata_Seven01\2564
C:\Program Files\Java\jre1.8.0_74\bin\zip.dll
C:\Program Files\Java\jre1.8.0_74\lib\resources.jar
C:\Program Files\Java\jre1.8.0_74\lib\rt.jar
C:\Program Files\Java\jre1.8.0_74\lib\sunrsasign.jar
C:\Program Files\Java\jre1.8.0_74\lib\jsse.jar
C:\Program Files\Java\jre1.8.0_74\lib\jce.jar
C:\Program Files\Java\jre1.8.0_74\lib\charsets.jar
C:\Program Files\Java\jre1.8.0_74\lib\jfr.jar
C:\Program Files\Java\jre1.8.0_74\classes
C:\Program Files\Java\jre1.8.0_74\lib\meta-index
C:\Program Files
C:\Program Files\Java
C:\Program Files\Java\jre1.8.0_74
C:\Program Files\Java\jre1.8.0_74\lib
C:\Users\Seven01\AppData\Local\Temp\.hotspot_compiler
C:\Program Files\Java\jre1.8.0_74\bin
C:\Program Files\Java\jre1.8.0_74\lib\ext\meta-index
C:\Program Files\Java\jre1.8.0_74\lib\ext
C:\Windows\Sun\Java\lib\ext\meta-index
C:\Program Files\Java\jre1.8.0_74\lib\ext\*
C:\Program Files\Java\jre1.8.0_74\lib\ext\access-bridge-64.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\cldrdata.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\dnsns.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\jaccess.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\jfxrt.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\localedata.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\nashorn.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\sunec.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\sunjce_provider.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\sunmscapi.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\sunpkcs11.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\zipfs.jar
C:\Windows\Sun\Java\lib\ext

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\1.exe.config
C:\Users\Seven01\AppData\Local\Temp\1.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
\Device\NamedPipe\
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe.config
C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Users\Seven01\AppData\Local\Temp\Host.exe
C:\Users\Seven01\AppData\Local\Temp\blessings.jar
C:\Program Files\Java\jre1.8.0_74\bin\javaw.exe
C:\Windows\sysnative\tzres.dll
C:\Program Files\Java\jre1.8.0_74\lib\amd64\jvm.cfg
C:\Program Files\Java\jre1.8.0_74\bin\msvcr100.dll
C:\Program Files\Java\jre1.8.0_74\bin\server\jvm.dll
C:\Windows\sysnative\wsock32.dll
C:\Windows\sysnative\winmm.dll
C:\Windows\sysnative\version.dll
C:\Program Files\Java\jre1.8.0_74\bin\verify.dll
C:\Program Files\Java\jre1.8.0_74\bin\java.dll
C:\Users\Seven01\AppData\Local\Temp\hsperfdata_Seven01\2564
C:\Program Files\Java\jre1.8.0_74\bin\zip.dll
C:\Program Files\Java\jre1.8.0_74\lib\meta-index
C:\Program Files\Java\jre1.8.0_74\lib\rt.jar
C:\Program Files\Java\jre1.8.0_74\lib\ext\meta-index

Write Files

C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe
C:\Users\Seven01\AppData\Local\Temp\Update.txt
\Device\NamedPipe
C:\Users\Seven01\AppData\Local\Temp\Host.exe
C:\Users\Seven01\AppData\Local\Temp\blessings.jar
C:\Users\Seven01\AppData\Local\Temp\.Identifier
C:\Users\Seven01\AppData\Local\Temp\hsperfdata_Seven01\2564

Delete Files

C:\Users\Seven01\AppData\Local\Temp\1.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2140.26482640
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2140.26482640
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2140.26482640

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\1.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\102652EB
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|1.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe
HKEY_CURRENT_USER\Software\Classes\AppID\firefox.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\70F6B3D
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|mozilla firefox|firefox.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|mozilla firefox|firefox.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|mozilla firefox|firefox.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegAsm.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5988fb43\7375f742
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\462fe15a\27b301d5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\462fe15a\78d5ed24
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CLASSES_ROOT\.jar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\(Default)
HKEY_CLASSES_ROOT\.jar\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jar\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jar
HKEY_CLASSES_ROOT\jarfile
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.jar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\PerceivedType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\NeverShowExt
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\SuppressionPolicy
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\UsersFiles\NameSpace
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\UsersFiles\NameSpace\DelegateFolders
HKEY_CLASSES_ROOT\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\KindMap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.jar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\NoStaticDefaultVerb
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\NeverDefault
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\DelegateExecute
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\DropTarget
HKEY_CLASSES_ROOT\.ade
HKEY_CLASSES_ROOT\.adp
HKEY_CLASSES_ROOT\.app
HKEY_CLASSES_ROOT\.asp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asp\(Default)
HKEY_CLASSES_ROOT\.bas
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bas\(Default)
HKEY_CLASSES_ROOT\.bat
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bat\(Default)
HKEY_CLASSES_ROOT\.cer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cer\(Default)
HKEY_CLASSES_ROOT\.chm
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.chm\(Default)
HKEY_CLASSES_ROOT\.cmd
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cmd\(Default)
HKEY_CLASSES_ROOT\.com
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.com\(Default)
HKEY_CLASSES_ROOT\.cpl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cpl\(Default)
HKEY_CLASSES_ROOT\.crt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.crt\(Default)
HKEY_CLASSES_ROOT\.csh
HKEY_CLASSES_ROOT\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)
HKEY_CLASSES_ROOT\.fxp
HKEY_CLASSES_ROOT\.gadget
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.gadget\(Default)
HKEY_CLASSES_ROOT\.grp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.grp\(Default)
HKEY_CLASSES_ROOT\.hlp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hlp\(Default)
HKEY_CLASSES_ROOT\.hta
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hta\(Default)
HKEY_CLASSES_ROOT\.inf
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.inf\(Default)
HKEY_CLASSES_ROOT\.ins
HKEY_CLASSES_ROOT\.isp
HKEY_CLASSES_ROOT\.its
HKEY_CLASSES_ROOT\.js
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.js\(Default)
HKEY_CLASSES_ROOT\.jse
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.JSE\(Default)
HKEY_CLASSES_ROOT\.ksh
HKEY_CLASSES_ROOT\.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
HKEY_CLASSES_ROOT\.mad
HKEY_CLASSES_ROOT\.maf
HKEY_CLASSES_ROOT\.mag
HKEY_CLASSES_ROOT\.mam
HKEY_CLASSES_ROOT\.maq
HKEY_CLASSES_ROOT\.mar
HKEY_CLASSES_ROOT\.mas
HKEY_CLASSES_ROOT\.mat
HKEY_CLASSES_ROOT\.mau
HKEY_CLASSES_ROOT\.mav
HKEY_CLASSES_ROOT\.maw
HKEY_CLASSES_ROOT\.mcf
HKEY_CLASSES_ROOT\.mda
HKEY_CLASSES_ROOT\.mdb
HKEY_CLASSES_ROOT\.mde
HKEY_CLASSES_ROOT\.mdt
HKEY_CLASSES_ROOT\.mdw
HKEY_CLASSES_ROOT\.mdz
HKEY_CLASSES_ROOT\.msc
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msc\(Default)
HKEY_CLASSES_ROOT\.msh
HKEY_CLASSES_ROOT\.mshxml
HKEY_CLASSES_ROOT\.msi
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msi\(Default)
HKEY_CLASSES_ROOT\.msp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msp\(Default)
HKEY_CLASSES_ROOT\.mst
HKEY_CLASSES_ROOT\.ops
HKEY_CLASSES_ROOT\.pcd
HKEY_CLASSES_ROOT\.pif
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pif\(Default)
HKEY_CLASSES_ROOT\.pl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pl\(Default)
HKEY_CLASSES_ROOT\.prf
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.prf\(Default)
HKEY_CLASSES_ROOT\.prg
HKEY_CLASSES_ROOT\.pst
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pst\(Default)
HKEY_CLASSES_ROOT\.reg
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.reg\(Default)
HKEY_CLASSES_ROOT\.scf
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.scf\(Default)
HKEY_CLASSES_ROOT\.scr
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.scr\(Default)
HKEY_CLASSES_ROOT\.sct
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.sct\(Default)
HKEY_CLASSES_ROOT\.shb
HKEY_CLASSES_ROOT\.shs
HKEY_CLASSES_ROOT\.tmp
HKEY_CLASSES_ROOT\.url
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\(Default)
HKEY_CLASSES_ROOT\.vb
HKEY_CLASSES_ROOT\.vbe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.VBE\(Default)
HKEY_CLASSES_ROOT\.vbs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.vbs\(Default)
HKEY_CLASSES_ROOT\.vsmacros
HKEY_CLASSES_ROOT\.ws
HKEY_CLASSES_ROOT\.wsc
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wsc\(Default)
HKEY_CLASSES_ROOT\.wsf
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WSF\(Default)
HKEY_CLASSES_ROOT\.wsh
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WSH\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\EditFlags
HKEY_CLASSES_ROOT\*
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\EditFlags
HKEY_CLASSES_ROOT\AllFilesystemObjects
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\EditFlags
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\ExecutableTypes
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\TransparentEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\command
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\javaw.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\javaw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\Progid
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellCompatibility\ProgIDs\jarfile
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\ddeexec
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\SetWorkingDirectoryFromTarget
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\NoWorkingDirectory
HKEY_CURRENT_USER\Software\Classes\AppID\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\102652EB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\70F6B3D
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\PerceivedType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\UsersFiles\NameSpace\DelegateFolders\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.jar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\NoStaticDefaultVerb
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\NeverDefault
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\DelegateExecute
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asp\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bas\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bat\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cer\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.chm\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cmd\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.com\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cpl\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.crt\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.gadget\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.grp\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hlp\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hta\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.inf\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.js\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.JSE\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msc\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msi\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.msp\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pif\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pl\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.prf\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pst\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.reg\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.scf\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.scr\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.sct\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.VBE\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.vbs\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wsc\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WSF\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WSH\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\ExecutableTypes
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\TransparentEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\command
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\SetWorkingDirectoryFromTarget
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\NoWorkingDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX
-

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.GetFullPathNameW
kernel32.dll.VirtualProtect
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetUserPreferredUILanguages
kernel32.dll.CompareStringOrdinal
kernel32.dll.SetThreadErrorMode
kernel32.dll.GetFileAttributesExW
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
kernel32.dll.ResolveLocaleName
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.CloseHandle
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.WideCharToMultiByte
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
kernel32.dll.IsWow64Process
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
kernel32.dll.GetSystemInfo
kernel32.dll.VirtualQueryEx
kernel32.dll.ReadProcessMemory
msvcrt.dll.memcmp
kernel32.dll.WriteProcessMemory
ntdll.dll.NtQuerySystemInformation
kernel32.dll.GetModuleFileNameW
shell32.dll.SHGetFolderPathW
kernel32.dll.CreateDirectoryW
kernel32.dll.MoveFileW
kernel32.dll.LocalFree
kernel32.dll.CreatePipe
kernel32.dll.DuplicateHandle
kernel32.dll.GetStdHandle
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.CreateProcessW
kernel32.dll.GetFileType
kernel32.dll.GetConsoleCP
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.GetConsoleOutputCP
kernel32.dll.WriteFile
advapi32.dll.EventUnregister
ole32.dll.CoUninitialize
oleaut32.dll.#500
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
cryptsp.dll.CryptReleaseContext
kernel32.dll.SetThreadUILanguage
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW
ntdll.dll.NtQueryInformationProcess
kernel32.dll.GetTempPathW
kernel32.dll.CreateFileW
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.ResumeThread
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.TerminateProcess
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
ntdll.dll.RtlUnwind
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptVerifySignatureA
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.LocalAlloc
kernel32.dll.RtlMoveMemory
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#386
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.SwitchToThread
ole32.dll.OleInitialize
advapi32.dll.SaferiIsExecutableFileType
ole32.dll.OleUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
ole32.dll.CoWaitForMultipleHandles
comctl32.dll.#321
user32.dll.RegisterRawInputDevices
user32.dll.GetRawInputData
jvm.dll.JNI_CreateJavaVM
jvm.dll.JNI_GetDefaultJavaVMInitArgs
java.dll.JDK_GetVersionInfo0
advapi32.dll.SetSecurityDescriptorControl
zip.dll.ZIP_Open
zip.dll.ZIP_Close
zip.dll.ZIP_FindEntry
zip.dll.ZIP_ReadEntry
zip.dll.ZIP_GetNextEntry
zip.dll.ZIP_CRC32
java.dll.Canonicalize
java.dll.Java_java_lang_Object_registerNatives
java.dll.Java_java_lang_System_registerNatives
java.dll.Java_java_lang_Thread_registerNatives
java.dll.Java_java_security_AccessController_getStackAccessControlContext
java.dll.Java_java_security_AccessController_getInheritedAccessControlContext
java.dll.Java_java_lang_Class_registerNatives
java.dll.Java_java_lang_ClassLoader_registerNatives
java.dll.Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2
java.dll.Java_java_lang_Class_forName0
java.dll.Java_java_lang_Throwable_fillInStackTrace
java.dll.Java_sun_reflect_Reflection_getCallerClass__
java.dll.Java_java_lang_Class_getPrimitiveClass
java.dll.Java_java_lang_Float_floatToRawIntBits
java.dll.Java_java_lang_Double_doubleToRawLongBits
java.dll.Java_java_lang_Double_longBitsToDouble
java.dll.Java_sun_misc_VM_initialize
jvm.dll.JVM_GetVersionInfo
java.dll.Java_java_lang_System_initProperties
shell32.dll.SHGetKnownFolderPath
java.dll.NewStringPlatform
java.dll.Java_java_lang_Runtime_maxMemory
java.dll.Java_java_io_FileInputStream_initIDs
java.dll.Java_java_io_FileDescriptor_initIDs
java.dll.Java_java_io_FileDescriptor_set
java.dll.Java_java_io_FileOutputStream_initIDs
java.dll.Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2
java.dll.Java_java_lang_String_intern
java.dll.Java_java_lang_System_setIn0
java.dll.Java_java_lang_Object_getClass
java.dll.Java_sun_reflect_Reflection_getClassAccessFlags
java.dll.Java_sun_reflect_NativeConstructorAccessorImpl_newInstance0
java.dll.Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8
java.dll.Java_java_lang_System_setOut0
java.dll.Java_java_lang_System_setErr0
java.dll.Java_java_io_WinNTFileSystem_initIDs
kernel32.dll.GetFinalPathNameByHandleW
java.dll.Java_java_lang_System_mapLibraryName
java.dll.Java_java_lang_ClassLoader_findBuiltinLib
java.dll.Java_java_io_WinNTFileSystem_getBooleanAttributes
java.dll.Java_java_io_WinNTFileSystem_canonicalize0
java.dll.Java_java_lang_ClassLoader_00024NativeLibrary_load
java.dll.Java_sun_misc_Signal_findSignal
java.dll.Java_sun_misc_Signal_handle0
java.dll.Java_sun_io_Win32ErrorMode_setErrorMode
java.dll.Java_java_lang_Compiler_registerNatives
java.dll.Java_java_lang_Class_isAssignableFrom
java.dll.Java_java_io_FileInputStream_open0
java.dll.Java_java_io_FileInputStream_readBytes
java.dll.Java_java_io_FileInputStream_available
java.dll.Java_java_lang_reflect_Array_newArray
java.dll.Java_java_lang_Runtime_availableProcessors
java.dll.Java_java_io_FileInputStream_close0
java.dll.Java_java_io_WinNTFileSystem_list
java.dll.Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0
java.dll.Java_sun_misc_URLClassPath_getLookupCacheURLs

Execute Commands

"cmd"
"C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe"
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe "C:\Users\Seven01\AppData\Roaming\mozilla firefox\firefox.exe"
reg  add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Update" /d "cmd /c type "C:\Users\Seven01\AppData\Local\Temp\Update.txt" | cmd"
C:\Users\Seven01\AppData\Local\Temp\Host.exe 
"C:\Program Files\Java\jre1.8.0_74\bin\javaw.exe" -jar "C:\Users\Seven01\AppData\Local\Temp\blessings.jar"
C:\Users\Seven01\AppData\Local\Temp\blessings.jar 

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2017-12-12 20:16:57 2017-12-12 20:19:54 177

1 Host(s) detected

IP Address Hostname Reverse DNS
185.140.53.212 Germany 185-140-53-212.anmaxx.de.

Host(s) by Country

Hosts Country 1
1 Germany Germany

#infosec #automation

TheSystem Itself @ 2017-12-12 20:24:04

Detected family: #Malicious

TheSystem Itself @ 2017-12-12 20:36:03