MalScore
100/100
MalFamily
Barys

tony.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 43/66 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 902.50 KB (924160 bytes)
Compile time: 2018-05-08 01:02:11
MD5: 3f84743ff541cf3ed62b11097757632d
SHA1: a1e00383b948a54b798897093059055fb549f21e
SHA256: 9f64f17b9c4219701514aaa4bc0e89c45aba7cbecc009e24e59ab8974fb4cd45
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-05-18 15:39:03
Last submission: 2018-05-18 15:39:03
Filename detected: - tony.exe (1)
URL file hosting
hXXp://qualityoflife-lb.com/crypted/tony.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-15 01:08:09 [43/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xc8b64 822272 459e7047257d69bc2bf6d6e1e146c00e 50523967cc04fbf6b5bcea9f0f476c6bb8b5ba3d
.rsrc 0xcc000 0x18938 100864 4b8436fa417c695191a2d07583419000 31d9e61d55e56953fa7db0bbc4e0d6151365d05c
.reloc 0xe6000 0xc 512 62425d93f30c7cc863aa8dba82d8cffe 3d110542cb01431d4df15294faadf3a45f35e02a
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0xe4248 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0xe46b0 76 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0xe46fc 572 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: tony.exe
FileVersion: 0.0.0.0
FileDescription:
Translation: 0x0000 0x04b0
OriginalFilename: tony.exe
ProductVersion: 0.0.0.0
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found
String too long
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
gYpW7taCbMNlA5kd900MqZVYgME
pd0Zha4vuxNBGLbaT8CNvWwG3xRT6avyE6wY3hu
dQNlqiWGYX8l0fkgL5LP
us6LKnceOGPJATw5ub5BKb5pAoHeSKE0L
shjDHIYf1SeQwdFLasD4JQm58ZxLJF
75hndaXcvh8g3Vkol6WhFSoGfZ
zUXTLSfuzLddlrUa32gg8LjBoPYyQ1dL
eaoGdKAImiYAgfsicsAwvpL
GqWBneQgcrs5Xqi4kDiyUj3Omr0e85hq
InternalName
JxjURR0GxWyKlhC0vtVtKpe
naurs5BSJBpmNbazm3UYy4UzR8bIf5DWbR
3Xy1PwNdP0VbL3CckuGWjmR85JNSGVGyX9
QWzCngvS1QFKOGcaLmisH
e6qJjRDHkR17nUy3DH6gOOGV5
Translation
DtUnC2OkEkgWYE1nnwUA0ERS7vJ0
BJnT6GPA6My2obGH6DJa4LU6k56iYXuDS
sSfF7aOhkV2WueZYOv27D1BFsb7Upr3z
uzfjDzCvCFC8D2flcX6W
6vZFoDx3fvToop93XgBi
HKTGhN1ONJeaOBpGF9erPVDnD
qG5qqLeiTBF2cqSEo7rMSw67mJeZ
6nTsDGxPSld6nMSZWNPDRGbj7vp14HgUTfcHe8k
LegalCopyright
r46wAFa2e1pOwRXcCMWNtUXMy
XLarmS8NILVLg687s9Y7OGuB
gSPIbRFGP4t7ZB6IENmGbL7gRCNFdCUeU
sKec8LZ5olMnzSj9M5VwbGlst5BP3OHGZeY
jkiTTnj2tXanezjxkg0z1GTvs000yqRIlRjd
JWaT6REUvKNk6dzDmXiHs
VarFileInfo
JNoIu9juqZsCd95rXXHKv9ktYAWPoOQ9SLk3c
YHeOmfoIsn2p4b1B7FI5kUaa2
vmigS1cCC3k7Q5CTPvsaAl5VQw
KTxwcRFcRYcLB2S268nETjx53
bANFH8HT5tE2auqjsiXxJaNkSo
yrZ8TQ1GlL1NKgrUH8pf2LwPwzYNpsNIve
aAYmqyvZJCCBUb0b7VIA5iAopCd1cKjLqczX
i34gEoCfTcC9hmqQX0SJnBfifhFIpVP
mbwEADvXwCA2I6V7CHQA2vgWbubY6m
)Oqt
bYrGNXwLEqQbbmPhsyUUjnJqtwiDzLOj2VrWQ
h2hFuan9vAjDci5khllOLFsNC
xCgjLxrznUpR1sLS5YjvAW3JLFx
vO28a6M8p4D7epLKDREQEIjkMRLgmSUp
y5GFXCrp3ZQPKmfGEAAtiouij
ccIBQamiojuPkjK9sNC61HQMmhtc6dRT2R
WaZScoN3FMwDo2oUdWA5pXufptnbL3tzwZ
8StYWsSs8p50LyDXNi3aIacVD7Kf4zt
1dYJjV94hoOfk05Dk1fuTa9NAdSy
WBEeHDN1vqnrYAnDRbnIm0
W3cUtnIEQcuahIXFvRdRyZFct
TzGerJHcBAsKorlyWlgZIqxmVJiST1VJvts7nVF
EPRCf44N5MRpWXsI7psnTGqAfOjn
iAFwkYlD8eTxIgDgGbiYr7dyHBwfTgtKV11GV8
pAtRhFNSOWj4AVpm7Eeca
4HvQr1XYiB9rDuTlwgfhZEH6
pA5QnsLwrOsjzuq0229idF6VNrkTGPm
zSQsoCpnsuA7LRsI1RN3lw20YODA8dT
4yEHBr2X8pT0AUCbdnNOLH
QBsRlhA4GGePZzsu8yGJPKfVK
dIVsEFLSr06zl7DtqhA7qYe3
WXUqD7tYqsKEQYsvngwgXubi2ncdb
yNPWAdwzg3BcHAm7aoZcCWp5FLSvWFV3QWiks7F
JeeNJ9nhkB3pXowij1Uo
VS_VERSION_INFO
uxBTGuZgD7K5AYdWNdSbkM4yZYQKF7aeDM
R5s5XXcHuDv7Txn5gVInBw
lsBFHI7pKUZY827M5k71H4
5jA3l5hyQ58N9ofLnYYKX
Assembly Version
Jrfx3cHaxFq0a4rPsNKAKrlEkXW
va5sWDOzbBjBWVRl66DVXlFImOt
Q1dK2VMuFXFOMgIBUJUrNUOK8WzdpRKw
cFpdqUfxBOVPUICdhxQBtBrgtQbtPSJQ1jMX
YX5SFZEE9uJPRAVAoggRHy3
lPhJTemHYSHJK8eOMKfkETRxm4ouXTl
StringFileInfo
DK8wsIauLQAqXbHW8RrD
FzPMr85t44mw6kNeAe2fqgcUG
FileVersion
X8VOJv7EHfustg0qBfePzx
lfM8K8AyJIqATsfO7LKaBP8qZaPfkg6
000004b0
ProductVersion
PLr4dL6Z1L8wlBVW0QwXuoMvsPnoAZ25Y
FileDescription
oDFvqBcL7OUsfh7ltLN8On1H
0.0.0.0
OriginalFilename
PCsX4d8CXXh8Jyf2GGN1AHG
qO9Lvl2P9Fn3CHM0anyvRLt
tony.exe
nYeaGv1IZpIRGMUNoymvSMx9t
t2x5HH5CFUiKytr2JefnYFKdpU
Y3TdLEStYBMPlFQTXghvPr15BT
nrTJYnGDkef0r3Rka5r9ShgiZp9ZeValu
nYQNtE2rB4GQLMFOClemXzpEdqL
5v0el5RqdAKKKqXydKKfQ9PoGbV32IIzqhaw
7<mp
>PtoQ
<[VY
)AZ|(
SW+_!
U;0h
}(=|f
19a
'@oX
It1
!9'V^
VEqr
.'~F
1^x4
b&St
E-oo
NP`Z
1F#(
,tlQP
_Af.
,<2
}42*Ne
55rS 6
Oj|-A
%H"e)
>)$}iM
c|2.
444R444
?e/$
:9@\
~5Mx
\MRVu>
W~J*
-Ji G\
$)Pl Y
BB]S
i.V?/
D3m BZ,
G*e
pbJ}
W) a'
pw9Q
4f"7N
JQm_K
Q}rO&
/M_.
'8JW
K#c R
j@x=
kc-d
xPtVD
8Fw.sdk
e@SI
zILL2
~k#1k
IO^/
TA7P
-zcx
^m$]
6jH(
fT,
WE^;
-UT|-
3e:.
( #=l
+![N%]
444u4448444
EbXj
BL O
]|+S?
4$ o
dnM^@
13F&//<
o2w]6
u3Nd
g+RS[
444/444 444
f[E
FYthG
JL\x,/C;444
t3sZ/
y*Z@
t4Rj
q:%&
|sb4
'b&
\ "r
``3iE#
X&hA
u8,0
.i(m
Z]2 o
f1wL'g
GQ /
u;T]
V$yJ0
OpbWw}
c F09
g^p_EJ?
5D$o#[
&P-Y71r/
Q4f[
ejd**
D `n
eekL
>Pm."#
U #l
(gi@G
H&b]m
7z~v
{Yo`
:A-A
BWXc
&^o(
'Vu~
zg.4
w3g:6RX0
j/);
74+G^
uUE)
^E)e
O~d3
6m}6
SBw{(7
lD>Es
eq&
>g/T
D DC
pkIO
(,o)
bfS"
Zs#d
<> X.
0=XY.E
ub9`0
bVYM
`> |
JRar
L31"
[a--
ISS~VY
-/do
r'_1;
xsq[
rz]U[
bK{"
ym>=(
:r)x
Kj|C
YOX
;:iH
KUu#
\n7o
P*25d
J#;3mD}p
:7EH
JuPr.-
GL6.
BHhu
6vga
G{T@w
>]ax
gP::
tg9U!
Q*Mp$
Tnf<
P:`t
;>S KCRA.6]
+n?5"
e!Z
nc\!
U0Lp
;" L
eJ=h
?"CE w1!
[Pj`
yy(~
1#fr,t
U_Sq
)L#"U
"QN R
AkOT
"-qFQ
ztzo
=G@;
YS~]
n2B
.ZVu
DW=
.C~g
7R]!
$3x8
%0l<ot
`_cg$
Brfr
8T8z
5{J
:M:#
5kPD
L{Uz
-*qZFf
{I,d
o)9
b(x\
beRVX
jWdxLyE
UnverifiableCodeAttribute
F 7T
8p"B
t;b
*[aQ
e4>H
-Q f
8 Ob
w Pg#
t~V]
rL D
?C]#
Y9N/
S{ N
l.Yi
^? (4
/"P)%
z#tf
q3_%
[^nH#
OZg
%6d`e
,0d[4
kBHc?w
$aAYmqyvZJCCBUb0b7VIA5iAopCd1cKjLqczX
"liR
eCKGN
>EfW<v
C 5U
,&*$
1f*+mj
(w8?
y&:E
$22z
NkB8g39<
'+=e-->
HnNP5
4440444>444B444E444OHCAkIFJ
$#x)
bANFH8HT5tE2auqjsiXxJaNkSo
7)R^N
&~I-l
'pd0Zha4vuxNBGLbaT8CNvWwG3xRT6avyE6wY3hu
~B c
N.gM
GGCG
444-^[Ynxuf
r1nj}@
zcrX
2daE
YfeE
f~aW
dR[N)
8FYQ
ea<n
F-{cc
e'xX
Vb?.
Yk[H
rNc:t
8@sbH
{rO
xT0@
CV6L
444"444)444#444
o3 /
4B'%
s:|a
i_*
U% h-
$ W5
bCQ^
g< L7i
jfoli
v$-T
Fn\L
u"&D
^6;$
){+*>
9{6k
[+Sr
#Hlj
'/.*
Ji <~Pd
~Z2p
27,f
;9 `
=%=f|n
$k: \
nmv-
OS`ee
7D4#
6GrZy
)K(I
uM2+W
ycfb
ctSd
%^E4
y: C
"d:QF
],pM.x
E gI
\&Kd
:H5e
CNK%
yat6c
)0H}
PG}dL
GYv"c@C
T {;]+
Vk*mG
`8&q
clB<
aLi};:
Y@Y *iUl'
G!C?8`
mKQ1
_9)'
!!>]
Re%Z>
deGe
2P=|
WT^C
qu,Ix
g;9:
) )m
[\m>?;9
zN?E
ER^x4
L@
"u5[l
:E,U
~^G]
XkE
2A)\
.text
?x['
&kS #
R,V(
iOf] U
.~4I<
,#Au
GetObject
K2]Z
444#IJXH<<G
(H>i u
''|Cx0
~z b
/rR
aM E
im a
eiK>
he]R
TN|W
c$w9
+n5#
SmI8
L@Vx
99'y
2MQe0
,)u
uU] m_
8P}oU
4442444 444
(`dd
G ]v
>`z>
O?-edh/
Tki)
v<3T
?4dU
<:v-{K
KE W
Go7<
hY *e:
444 pprt
.L"F:
444W444,444
6.bV
9`-K
&D[-
fQIi
`>'0
4448CBJ
444l444g444`444N444=444*444
,F+Y
(dP(
XXkgQw
&dGa
' w1
[xr.k
,%[Z
w*},kC
]shW
ZgcTbO<
:!D?4
I{.l
=oY4
444p444)444
j+z9
}aeR
&1io
=YV^
We5k
B :q
444<444g444
E~ej [G
6Y{Tl&4z
q cc6
"B"")O f
q0^$
Z" 4o
t[A!y
Cjb
l,XT
U'X*9
}"P7
LLjK
Ow;,g
MA"H
XWEM
CreateDecryptor
M] &
n(!}FC:
d0JV
ulR)
eR9tR
1,UQ
VO~\
%okC
fgxX%%3
/X Id
anK9*q
I&N@a
6:N1
.?'D
r*e]
.7V <
sSfF7aOhkV2WueZYOv27D1BFsb7Upr3z
Tl~af~
`o u2
%k/?5
CaD
LgWf
W$oW
iz' s
vtA
9GSA
J{Tr
?Ye^u`
d}|%V
lwD^
}@B>
OFf
'en
c'1J@
mr9
.c{-x&
X uF
;F4]
B[tm
edHY
3 VQ
kA1E
JKSv
Xm$q
,|j6ks=
B2!u>
2P'e
444P444%444
g#/E
~D,N
lmsL444
+ 5
<Um?t
6Bi
@slF
i0bYk
E`-7rI
y'+
e1u 7
^~MrMV
|h k
1 mW
#]@v)
ukxyD
(WI7
mOG
P gC
#2E0
*N>G
IydRCw
CW\-no
3 >cN*
Bb =
n^Ah
,WI4
A}?g
V5k@
k=KV
'`M
70<s
444M444
=G2
V^8~
}
!){.9X%
xVd)^
S%SR
444VNRe?.5T
b<y
?;+cU
QM:K
B_4i
L[yf
CrnA
E`>-C
9qZ'
Hcr}<
p2NM
/7s?
# Od
#QeP~
YPZt
d=lN
O9R
k:44Q
G9rE
|a0 =[
A)tI
i'o-
sw,l
p{:z
l$`%
[F$E
WhCk
GUI9
6TPz
Y m,
W2(JdxA
bCLU
LPku
rJ?x
NWK5jC
IMLYY
hGe&kc
FM\
F8S
eweQ
444 444'ie\
H=&1
GkI'fV
T#H^
$,8D&
c?Fc
sW-!
1+<(L
h9G>
JM~%m
2;n[g
Pk}v
;" T
sGhWv8
9]* z
/M~3
cO]
YAVd
:)?`
hu$N
o<JY1N
G%)0
SmPcL@%
zG2;
VuX;
]I`M
b`Ic;
2^Y{
$%%R
s<T[
eo3
cOy
8S$F?K\
>),`/
LnTH],,
R,vv&
U ,:W
T=G4
?JE=S
$61_[r
L^=k
/>=o
7H!>
;x>vt >%
System
hswk
tAOdS
^&2
7H!.
T>OC
ws]D
J_CnQ
<x[f^n
X8VOJv7EHfustg0qBfePzx
F]6hCY
ol"+
pY@~ ~
444!4446444I444H4448444#444
g_?1
je o
F3=%
;qs!
444 444 LN[DA@G
Bz"3
|_ePOv
QHA
Noe6
t "<
R4@F
lx%&
}^ 4
&*%z(
n+k@
2qRfF
MethodBase
=?P ==HhQLF
cEUV
444,444
~*9[!
kR<n+y
F`, JN
_Vd"
H\b
*B?
JU,q
_{d)Q
C={
/K^[
f`0$
.S3n;
%^U"
1J#
0:6$
Nx'
>1)]
kI >T
]s?8
|gXhWc
*19%XC
>uS
>Q5fq
]0Lxu
{Lr)
' ~y
Wo A
IFbu
Z$4u
6L-I
Q3<
fSz4
uE:$
8gB<
N, ?
D!(m#
`%
mgaK
0GIH
}6}p
R5s5XXcHuDv7Txn5gVInBw
[p1a
-[|)
sCIA
L.\X
bjxnt
8|=n
$h'
cpe&
_)0X=
B*T@;
rp.c
\i]bf
Jfku
:BKgb
*HF(
C@We
itNoyF[
m6r0v
Zn\}
*#y
{; !
^;M
mKSy
aVfX
nlly
$ 6n
{-,E
?dT5&LJs9
.72?
iSX]
p 9qN
i!t+
L:d<
u5eV
+YA:r1
_n'9
{1>v
!!<e
pTskW
a`<J
2X5
f|\r
G!uP)k
~_!Be
+9gtW
d9{g
Pe[
/'TZ
K?)AA|
Os \
WH0+
Ywx
K<K}
%V!- _
W9Q_
kq{=
@s mk
#EH[
JlQm
Bm--J
80
**9
mz]2
444 cahTf[B
g+U9
M'S,
O _^
E b
1M@_
lK~ L
}5+Y
B+b`-i
R^x$
e tOB,
?@Tq
_&Mw
[45=
1"sYs
kbVtd
; c^
s0 *
k(/4]
Y[]B
@Z=^
7%z$YW
;c"U;
dX7B
7~ [
Vc-*
tD5aL
o2.r
,shG )
w_'K
hkCL[9c
/\CB
444 444 444 444 444
(vpV
qux`
_l4A $
RKVA
N $9#i f>k
)L@
%JNoIu9juqZsCd95rXXHKv9ktYAWPoOQ9SLk3c
<[@$"
g;jt
R])K
,: /
!dq5u
kl%3
l` c
&?PY
;C%W
s{SY
,1}l
a?c.
mfyKZ
4)9"
7$V.
"qhkV&
B9QQc
#YJ4?
Op"~|
u zJ
T#>Rh
6nl&eVx
Z`7,
!\c>
`g6Z=
wbxw
K<3N
N\X@
"A U
"o49
1M5:
t\ny
[(tND
1s;i
uW3E
U+qLE
jn q
!WRj
:~Jo
7B +
a=d#|+
t&uzM
:gbe
"WaZScoN3FMwDo2oUdWA5pXufptnbL3tzwZ
! ifU
8$`
NuZ"5
~}qe'
#(F5
8_d[
n0TP
UZ@
Joc3
(?g/
B&Yr=
??O*
<\'o
bkzK 5
wP*orY
.e=*P
|ch|
j[_]#
Nc/Z
SsFUp'Z
}b6X
Ij) 8
Naji
P5_{
/l9%uV
w6RS
& n&V
Bi99%' wO
rtr$
4442LNYh./?
^K*m9F
h+6
/'u#
7F D
ZBhG
ue A
0+_IQ#
PHAN
!`47b 5
]1?W
Ed#U
7 &a
)3ZI
MwtPW
T "e
kg-W
%yA_
Gd2q
)`O
t=LcT
/jvP
|a`G
Z"e\C
zJ("
iQ8!1
Kii#
1<;0h
Q1dK2VMuFXFOMgIBUJUrNUOK8WzdpRKw
VrNa
5'wd
ZQ/P
":4g
v3?$
h01:
|R.-0Q
3t-6
xKmD
g &ky
I#v
I"gDNQ
;<<
@(\U$H
{N|l)L
Hb?^
vLO
;<Wx
Va-e
J(z|
})uz
S(%
Mx;C
LM8
m\vs
iG)~:
Va-
"d'`
lfM8K8AyJIqATsfO7LKaBP8qZaPfkg6
!gST
>$NWJ
* Llz_
f5 /*
E*ZN
arMh
=JWJ
ku|:
!;=V~
*PqlVW^
)!>3
x,^m
5c!B?
.%dB
A|>M
"bn
[["7
O>d }H
d}j~-[
}Ml<Y/
_);"M
444s444&444
Af|l
wMy]
R ee
o)<c
{$b
.X8O
JxjURR0GxWyKlhC0vtVtKpe
.<KY
4)x%(<p
A3">
pK a
SoI
S4Q
DLHl
#'tk'
*GY
Mr9%S
Bo*(`
(Q1!
k-X,
)xot
444t444M4446444*444$444"444
XW?C
%VEB
/E ]K
~nF9
9Y[w
$)gk
m__
-Wg;
95Sc,L\
u6C
s;s&
yj r
]ia>
c]XXU
?VW)
a`9P\z
c %_5
escmBfG
.@zhQ-
in-h"
Qn/AA
WJE}
OBXr^+
X?-
!flf
$PmA
sOYD
(Ak>,
$ow*
fOU7
/4 u
vsP7
w<eU
+' r
VZ{<
0PMx
wt>G
+R)Q
a;'a
J!yb
dCN2X
JVJU
MwI]
c2!c
uJAe/)
J,^!
%45
YFX=
i1;-
oi-
444u444*444 444
0 ^]V
^A^'
! Hx"
Ai,k
4!IuU1
&d;O
XtI
Dbb_
|NH:Z:u.
Fdq[
6:m@
T/l&b
}#t{A
444#@?JQ::D
444d444#444 444
Bm5 C
_{UH
2o"#
1> gi
& v%
XTm/
6K6+T8\&
_}?i2
Y<&/k
(]\'h
444>YY\
b2Mob
AAM{
4yEHBr2X8pT0AUCbdnNOLH
P{Jd
1A-hF
E}V.
iQ8}
+oKZ
QuDv
rS5]
p B]
VyzL
MD^}
%bXL5M;
#GUID
PmI)
JK+dyCU!
Y 3\
W\-<
B@LR
SR6,
-gZe
RnJ:
i"=^
8^F!w
aS8&
n|Ch
9lm
|jesL
_,n[
a)-cN
|ITJ
kt{F
,!@}
)Q0[
OfLRB
kP^z
444 444 444
+hXo
7#6,
Ja&]
%,vs
R5dA
ugoB
d-1G
mN)
T [PU_D
=xg^
* ]\
$`KL
xz.g8
rnw,T7
?kMO
u tD
ug `e
ViR
444K444
m:fD
:K\XoYf
&v'nt
iOXw
jNhl
>d\}
;[x]
#<H
X{GQ
xT<N
m:#b|
!ZE)8
V3[ijc
%|RTl
(gw'A
L(s s
YO?}4
gQ+s
sY=H
444{444-444 444
* wk
( 2`I
M-;3
@@Yx(
RGBPxB
@Q+Z-
abu[
4{k<
l_wuF
L*[Q
HEP FFSH
Mq~{
}_C9
& 0)qH
XwN
i@1\/j
,D/
h r}t
}u|dM
^RB-v
v(X
"c V
(A= 8<
V:4s
h6 ?
-U`!
mZI{_}S8
[$h}%k
qgf~V_
T]-K:XR
X3,|
lFV^>
+q^\
f4fl
s:ts} (K
r|_)-
ntm{
-o&JH
?:W}
!4ed
oN3k
/-cH
22=q
2S=t
J[8-
@MrP<_
% kT
KqfK
Hke8q
Zb\=I
evxI
444*444
Q*1w
]@Fl
{zM#
}e_Vf
:2 i
.U_^j
[G,&
7MI>
$^[I
k!bi
1jWB
%e99r
c&cP
u1Vy
+E,
;.L
8+P7[
n[">
pJd
Z/1=
0U>gE_
5EfM)p
x4\3&sC
T(Ex
K 4y
C~KU
GrX-'
#k/HG|h
Td0tu
.]=Gm
hMp5|yn
L3/@
b }a
0
1MFc
jUu`
OPF' @
|/l'I
p2w
R9!c
py `
TJJv
$yl0U
|I00f
T3":
5h3S
O?"d
$&8;ROY
3q
shTqaK
!e-MIFK
um6J
=-1%|
444 \_oI(/N
E7;.
2.
<q^@
9ok
35M!
VnSbq
IC"x
E6"o\
ww|FE?I
f }=
Diti'
_TWZ}
RuntimeCompatibilityAttribute
/.
qM`y
tM @h
3lp^
m l
1EsH
,*iv
;?pi
Muylb
444`444:444
kClP
Et#M|L
7^@o
?P A
m~,m
sdir7
kg4c
444 LO_5opf
C?I@
`0_!F0
]j!
6Y #9
ot.|
iX F7
)t&6
_uz
#xpU
=]X-
2J{U
rf46
={q[
D>ns1
=n6H8c
FB0h
ntE&BO
X*ON
!D
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
A.Cs
@Y(P
eUPczk
2zCQ
L5Rf
tR6X
4443DEPwC>A
}E:J
{yy
LcY6'
7UY
[n~zy
2P7PcA
x\JL*
oGFl
fX1@
!S8Jx#
?^A
(E64
06%u
2`QW .
#id<B
Gk{X
UoxV
DH t
3zZ]
Io8`
9&l+#8
E@9 _
['.
|= a
|!CXW
qa|{i#
~Gj*}b
AGn~):
444s444I444'444
KG/OH%
O :J
s `l
]>6O
yf:|
y<oH
:Q00
Bhj`;
0D
]}H#
R}\r
r5ax.
/`NQ
uc4uK
35bc
IP.F
[<K}
6nF?h
T<D
wW@o5[Vt
HHX[13F
lG g|
%c`^k%
o~zX
./-;
)5 L;
47Fj
hh4w
u=R?'
ZVV[
_Hj<
au}0
[.5R
gP|r
H6<*
L7nD)BSj
#8)R
L<D;
/6YN-4S
hm(rB
^G 4N
ResourceManager
)O@=
&w]\
zV0=
444 yxz1
3&ck
uG'1
:m7X7
#mE<
444[444
S1{m
0;]eGw$
Y:ee
"T9L
!PLr4dL6Z1L8wlBVW0QwXuoMvsPnoAZ25Y
oho
*Z|>
^\)
T8}X
VeW!
XI*Rd
0nK U
6<y3
-X?C
c$V1
`pp,
6TT
C17+
|fuir!
mLxx
70#j
#fQEm
?,&CP{|
1DdZQ
oV}@
F|2g
V65y
C]xO
c|h;j=
QGI%)
VT6V
W,/q-
snNO M67u
?'Q
BKp)W
8'>e
d /u
cL:&
m##I
+>VG3
;u>w
toU[f:
<J7)@
a<:"
lAQ(
4e~`2p
zDtf
LWI
OBNr
%y`"
A' s
jVi nJ
z"BZ*
g{!h
G3]K:
E|gk
rf2@a
S>G ?D
m-N]
oli/#S
9 6
oGk}
5;m/
9:Kn90.
yGdmO
'amu#?m
MRFy
M:&4a
@oNYt
FttU
g%LH4
\$no<
"5Qv
EJQS
).D$
H//i
7q%Y
Q5[&
69+r
(2f
1vVO
9C&*t
-n= /
9t b
5, ]
iZ2
&d9R
7eqg
CFB%U3
J4isP
4U}X/
^V&>
Kv=h
%<hq
e9I,
$Jb>
txNi
miwZo[7
R Kw
YZU3
M0Oz
4.Ryy
_-Sh
s.v[~h
1% X
=-*C
Ph!M
":)Fb
R[|M
u)E
%Y}#
uW O
i^1`
A=KeX
#ML`
4eH(
Y4Jg
:;;~>9
1.-\z
>G{
l `s
j43@I^K
C /k
(m}V
)4R,
DaIW
;;LFua4
S9})
#G~E
.%:*
A|2-6Vx
>oas
z>i,^
|.F#|Xl
klp""
RWXA
A5Zit[J
rhx:
f7}k
] <|
t@+gu
2_C
TLA2
Z$0h
9npk:C\GH
yV|=_
ShX
&2v5
BDVa
'l]Q
zYk6
*G\As
7B[U
c%v/
PvJ/
6%e1
fe 8
tjyW>
.b|6A
Tixz
A?%F
kA8Y
vD`Xx
bblw
Cp wO
j}[H
%jd;
TiFBw23d
|U^r
2/I
Ql4;
bUA b
p=UZK
) {1HNn
@ 8{
mW;k
&%13
R6Kqc
a@jZ
. RQl
Y`}m
R =b
J&KL
j,)}
ZD3m
x^*D
6% 9X
1?$7
agGQ
<,xl
y]=M
NQGZ
~8#
yi14
1S_\g51
19"R
.3G MPdQ*%2
'~mB`
k9%|1#Q
\PL$f
{i]*
|$fw/B
0rL/
6UrPb
k6 xV
444]444@444'444
GzZ M
.h]du}
#h[*
3y%!
olnM
444 444!mhf
Obl6
#:vczD
RLXC "2
NeP~?8cc
RuntimeTypeHandle
g!|9
x;VI
r,`a
948;
>+<+}
[kI&
;hR?AN
q-z&
4448444 444
L=K uh
Z%L]A
7q H
v:cu
XC%y
s6}P7
cPh@
R~_d
%6olA
(?l*
+io99
:szD@
5uI(|G
\/a(
D \]2
d@v
!xL$EkX
:7z4
lQWY
Q>}b
' r
@]Rd.
o^Lqb
e,%G"
POA a@
Z\]233zWtg
kd[-
444#444G444{444
vwev
Zu"C
T'G= kb
cXQmF
gOPe
pa&\
jMGW
m7FK
-vj.C\w
&}lL
MKVi
c4,T
C .m.
=~$
rrPW
gJep
444v444a444J4442444
_}*+
G"E>
8@%f
o=I9
irw~
K@84A
Fm a
<95p
t\rW
QSx
<('q
?[!7
MhpP[
9>U4444
mc"
/ s$
n",+
<:S;
>arjN
x,(0
s'>g
tjXw
R].L
qch
Vgx%
_*g)#Q
l0z\
-EXQn
[(&' S
{xQi
&wtL},
`(nP
hVnP
m9m{
"!h,
+?W}
*UA
h1q<
cg[0fh6yv
K `#
B$Nq
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
;qItY
r 1i
_@v2
O'0V
&]jybim
#) F
*J`{
B}/|
G2~@
444s4440444
P^W^ R
!This program cannot be run in DOS mode. $
-bwb
=CE,@$
/ }xo
aV.f
e5N6
0Md(
XLz\
}QZS&WV}1
h1aDE
a+DP
lS;;
~3W
'(8@
uDK@
XE*h
p: X
moD{>*
/V*M"
0'Rw*
{pa>
5/UxhH
m/t>
j(+`
hO(Lf
a\Kix
tv}g
HIN
+t}@X
<3Tw
+=E
RR%-
HFVO1
{{L
/Yc-n
4JzS
Aw~
>rpQ}
C)o
SGVG
+}g}]=
|DE\?
1.FC
L$|{-P
p;~e
Eo i}t
rF72
ded]
8VXvP
;*@@%
RD,J@
(*;959P
B9} g(
jIj:q
<RD
M2lf`
gA4{
}4$PU
+cDmH0
eG~|5.
pL:V
,.BmW
&:qin
?I5!
u,,4f
H<qS(I
NAl40
|]qi
_TY6
hD,1X
MpN\
^8%;\b
B.j
Ofo,
3.]/
XTnE6f
*D&T
{@ E
^\T4<
73Cv[c]IS,
'Ojns
j-PR,
t` j
c oaj
XEEz
;GFq
@_.$`
)mO}
GUK,As[
j,8cV@
Q)P;
I4UEf#
81x!J
# O!
8^u'
79Um
6xBG
thc-X
8MF=x
6Wlo
p|-4;
F'V
D:&DIu-
7/$=
Qvuk
AIq7
Si:~
K )B
)5w!c
z?%@
=\V
"zT+a1
tY{'v
1lb
}p<-
i0We
444 ><H
1}Rae
K"`c24
Owx{
7;/@k
dcn-
RLTc
.# t
//*a,
){B*
PxfN
\4mQ
(Cn.
,rsrz
;./}c^
W)bQW=
^ /
J[ "I
w*r\
2 Q-D
444g444 444
_"gG=8
zVGF
:} _
DA0y
/U2-
Rls'
S`0J
"-w ?
v~v;
]pzt
W8j6
nhI)
-E+x
lY@%
3XJ3
n:Id
P97l
(Q5V
D\Am
@pPy0=
nNRa
0(/S
_X1Aw
21~!
J6&H
Zea.
:."~F
L_d[e
7'}x
v0 6
jZ\E
?riK
= 0Kl
444-444
\9l_`<(
8fIB
vD9;
:Lg%
'PKp?
>{`E
8rhz
1U,:G'4^
G!:,F*
A1YJK
&j!?
H]hs
J P9
+@X3
!nhc
}Zf,
oar^
WVa @BSw
B:c-"^
B'=I
#+_,
AP?I
JcOClc
(V0
q(cX
jbwLA
<]~&
buTq
oW?$
DgEp
-Ae0=9
D4R:G
su ]
=Lu
40I'
G)`q
qr)T
%br4
-:ge
5 ]K
>S&F
CBWp
JzV6T
$1F "
xK9(
85<d
X=g[?
U6vn
CompilationRelaxationsAttribute
o-$x
0Pq
VR^$zrR
Z'u>!
u+Kv
;Yfg
1\rVgn
MM<&YV
4z?)R
iYk\
' T
X0.R
VSg=
,1s
Wzm!>
g$b}
nN*=
28<j
I5\K
i-s/
o&D9
Q>3+
l/NNCC$
k} "
kNhn
0W:(
>Ssx
7!kT
;;x=_F&
8ldF'5
]_&@3
Yu_$
K iv
!\\
#5h%jj+{^
Jrfx3cHaxFq0a4rPsNKAKrlEkXW
6,~sm
-{y%
sUM8
+7Hs
vQ_EK
X n
f7x,
NWSt
WOj&w,
Y*%r
*rjIj
Fv0sV
DFV[444*444
y`9e
^ -G_d+
8(V0q_
@hp2
s,F
4a\{
6h(_
0VZ&
]?W2
|cSF
SDn?g4
f;:
ZDXq$
~Np \C
>Z;
]1A[k
Lm:;Y
Ibm<
<slw
*.~t
GrN
y;Vk
9Pz .]
#i H"D7t
si=]n
Y)Kd
P#K8
1 QK!
-.,D)
Pd1?}
QeH7|
y}jH
1=d{
Hg!g
}O'Q
#<.L
q?oP
Q#G
#l3S
Xcd~r
td<n
ded
^^ha
it=Nu'
A@Q(iL
hS!v
WP,Qk*
y "C
8!-x
U?H~
KE?
e1HW
{y0
b{ 6
gq"o[
#cYc
b:R!
7v z9
PQa{
G5mY
f1Y
#%M
iKsnr#~x
0rJ
v ,
^7.3
DwQ
x(y7
!1`59
DialogResult
6;O ht
"IIm
s -5
xVDo
O)`)
3JRO
;lZN
US`r$!&
lFC
{@Kcr
BB2F
@sAX
9Vp+
4t!s
"")O%
A6lp>M
{5OL
cxYs
VsKHN
5YC'
`<4)<k
K?bg,W
<"L9
Bo) Z
CHi$
"pEN
LXM
y[.W
B2z\
U5o9
k$u%
mnx$*(2
tk/Js
!q{~M
QV674
q:HZ
k's %
rTXf
Nyeo'
(xZnq
"lYD
M-I8}+B
Ez+z
wKS
yi/.
m#Y0`
DntX
F~-K=w 5
g1~|
=.(ar
?.b'
~a-c
E_f0
wm|$
ORrP
F1+:
sYq*
?~yj
n"@1#A
F{O@_d
?)\]R/
5A|~
ayB
{a=8dRiThG
/=;9
ro@DD
AH? -
*50dKx
{^#dY
b;]M
y7|x
ROqQ
444N444&444
;^kW
1]zP
x .
yx$9
h3 l!8 y^
!@9]p
^>@]
h.QK
h8]
F\nLe%g
kaqh -
Fp z
=:{Q
<pbL
444R444&444
(*b|
[V24
;j@
5! (
Gf(5x
To{VK!
DrL1
Qn&X
(x:iOQ
u",Z
dL~
`0PE
|s,M
dEDx)
rkMO
kFk|q
/ [W(
-y;,
i6E0
b}kD
:)\6r
U;yj
2f &
6<Pi
t">D
3j\9jg
+?U3
v )6
.`q
d?@xx
P nO
4I'
|Cof
mdKY
bXp
Cd][%S
56FOxfA
>s+
n!i~>b
\]w>O
Lc]m
LTp>nNa1?
_CorExeMain
D"gn
XVqY#
\;We
[x)rwG
b.]$|
>~i_!
e e{
Z=cp?T
jET)
AEVK
0RS>
$%e8
P\^B
:0?!
T?%dgVE
N_$
~6fV
ugijf
t %~
T_:=[S
m-YE"v
FM1m
ZX#U
?APv307*444
14]
e6Pm
HfF
I <Y
=l=|
xk6%3
%Gbu
,kZ
ToArray
4s{d
[I` ]
EPRCf44N5MRpWXsI7psnTGqAfOjn
y*`*
~NVS
s( 9o
&=~yI
UA*h!
yM@]
K0i ]
ktR7
=w 8
*K.:`klJ
aOkC';
s8"\
wFmFG
{k87Z
C9"I
\U}kUQ
5k%F
OeeX
1{i[
ziLR
tLQR
iAPH
bXxG7-
!(>a
RI
`y#|
vkO2m
wx\!
+J0}
9l$F
]L-b
NoLC
zU+\
L]EY
?H Qd
$n,'
444q444*444
^v7Pv:
2}^c3!
|`sx+
c<7v
#}1N
QXHr
$W6)^
E7M&f
69R[1nZp
V!G4
:p7_6
WJ J
O/ck
.X"{
Tgxx
Bg C
<m]EPB
AqYhD
#3bm
oh6Z
R#_ l
-V ?[
)2f7_FH
* 1K
t e*z
D(] >
GYcZN
5sAeK1
8{T-
I/HW
,Mi{q
444~444I444)444
5Ntf
EJaEcQ.kS
(g!
%g`{g
qEl
kmz}
O9J
^]g2444
1=Q~@
k/DXZ
Msa=^46
4E`
tX Bx
.0aUN
g 7[
c-<p
3q}%|
444C444
L6 g
x&AV
b~Q aH
y1CE
X $
66oV
XO}Q
tPd^0V
AHE1c
[@p9
(,i5.
&&f=
[c14ZF_
~+-^
F%O
]*X:<J
:X5)I
]|h4
a]]}
s&2,R
c`kz,
z1|e
(RT`
444)444 444
G1
x<3/3
/7Uj6
}En
aA>
6QuS#F
{_E<A-h
dX]|
9w\
M]\J,
[ G
x XA
)tLx73
qZlh
@2:vY
2#&9
4a@l
CbC
iem7
sR0
4448444
]AG(
dj/H
09 C
X9Nu
444 JBLatpc
ip_]9[R)
/p.N9
bP]
O`Wpe?
444/444
J% @
444 BCTy
{-iD
R4%f
u~ T_
G RL?#r
H<Ph
?b9E
P$
;0kG
Ad/
Gh3$
nu>\e%
11V{
P :K
DeBf
Fm&n
9I,y
cu=!K
xq5|
&CAt
"l2J
(_Y qgU
=3Ead
xCgjLxrznUpR1sLS5YjvAW3JLFx
SUd862<
!z-c
aj\/<
tnb>|
Fm&7
d-F
~<*
R,Ka
! av
8HtYQ
0Jj6\OQ
a+[M
5~=\
}tCHD
FW\
vL]li
J~ s
yUR
8DuG
jk-#
Z@g0T
~7)6
2&i5
HjGJI
`E*.
UMWa
[&d-
#yu`
y5GFXCrp3ZQPKmfGEAAtiouij
\AP=
*(a=@
BL"
yb52
[ G?,
'sv%k
jmK n
~}4-
h*CP
ofF@
eX/T
bWd:I
eeOi
j$.{
r:"V
n y$
F1_7
[M$>
Lrrs
L0O1
\,Syj-
Dz<,
j^ulxg_
y#3=
C)i&
avh P
" !9
lwU8.
soD8
4443444
4ZB6
^U[e
\qhU
ue i
UO $P
!=}?
uMN mv V
7C94
hS#p
bmh/
.2Pp
}xnRt
Uis5
%gxG
::JB
444b444 444
=it5U
)z'n-
J" W
5e4{
qT{
T&^G<
<71%
?n{A
#(;1
N/7j
cMc.
4fBH
n<x=
rs=}
kg8I
;X W
qLu)
M|SU
xN:dh
a>e[#T
s<dE
1Sii)u\
UX.3
dapuD
0Dw
$F?j
ZP;+4{:
G;x=
E*5QnQAw
y,d-
bZ,u
bUb&z
:$S\
()b2
v,Sh
_VKs
fW!C
pXI9`l
}PZ T
444 444
t0]GpaH
. |{
P{/M
LCbe
@leB
ocK4 `b
|M=,
RNlO
H87
2)&g
d )4
& eL
LUg-d
JLW
gi3z(
m GwX|(c19
\6 E
:=I$
z.~w
]]~,k
ep 8
"9 \3s
ln<07
(vHw
ebe\
444g444#444
SHEb
xjMO
\D0
set_IV
J=gYq
Nrz}
E3/b
1'%MO
lrbfc
PZ8*
=pR,
:Ws;+.
?5,M(W
#3VCe
)aoe
6 C9X
eC}'
4gA]
$C~?=
_w *
ZAJa7
@c.@!
TqJf4
KTxwcRFcRYcLB2S268nETjx53
OT~/
HgPnes
bi{k`
+^@q
-R/aU
bk-Zm
3'6ec
C$JK
ENl"
%C@LJ.Ss
41vx
9rq3!
y uy
.-Md^W
rU2+
444 IDF
V!t8[U
Ii(4
=H-8
7Ca0
k?bB
>B'f
rx4m
K%<B
ZTY
d%&j
oV;`
0j-R
8_l~
X zfk
x6,@
Zv1(
7,^a
<jIV
sMLx
([b:y
N Uu
7 rx~
k@hp
I rKe
]Ko
au?H
wQ G
E|3#
7_qr
GqspG
{S8~_
YTj#
~=:G
?g@Q
U, Ss
$-,i}
[ U[
m8]}
iQdlAIo
5<d +f
NAs6
H|7p
3'>U%
Rij@X
,3i(
!X&is
&E-k
{x3v
jM$sI
96*S
DX W
g|
G~l3\
_-<!-
oFdD
K! 5
s:2.IN
uCQ^
y7c
+j\H
9c]j
tf/$
;^0W
(<"}/8gQ
+)cgwP
9#G(1
P=g(
(//W
><V?n
# **0#
-@|J
uc'~
INM(
6]Mk
)u$Kz
% B|
PQ` CCO
k5Pd
pBTKbl
H 0`u`
inrs
]-(5a
CvD=
8{#_
8 <gA\
444e444$444 444
ydZHe8
O"Is
)'[H
Vl 5
BP`$
Rex`
l"tz
5 [E
L/7s
Ykb A
He {
(KIU2
{?%U
4 &
Wi+eB
olMO
xyEm
1'8&]
pR"/
cX;u
r>KO
iR1$x
EpA$
8vpb
L9u&<Ws
"t"le\
(m?%
N+P=o
5IUPV
Tig74-
x<)H
mmSI?)3
hMwE
|P#R
US3\
@*'q
d)"|
z0c}
J}%#
-8[=n
wX_?_)e
` GvK{
Ja;_
x.N^
0}E&5
,u3u
Ub~@Xo
(CR9
RNc#PHB
t5
d(|w
miugn
XJqJc
c}`?
j,>,
cd-zSO
1V4<
`sWv
}l{@
]l!I
iB}s
EO%)
3S[L
3/bM
3FdKwFD%
EDAi
W.)3
_K+L' x
ox#M{
\n<!wG
,sTN
#3y:
,[gv
FxP5
0/TY
2Q i
nRBr
cN[%
)qq'
E}&4
dY5
IJQW
E]WQ
RLNS
GMB#
+z."
>P@[&
@dhd>
,TW|
" Y!H
)8P!1
tc5S
|%,, *N
uq9
n"M9a
#>Ku
XPvb
q:>T
eC$,Og
|3\=
l:a3
tw^ `
VT_Z444 444 444
0&Vt
FGWH]
b :Z0
+~JW
'yNPWAdwzg3BcHAm7aoZcCWp5FLSvWFV3QWiks7F
*zk9[
Nyl&K=
7\Na
K%CL-
g|<=
#` 8
r#=3
;!Ym
sPg$
-aLi
) 4;
*>:7
j^0;"Q
k,9!
i||[
<|2(
v1+c
h\R&y
lZz
u R/r
k>JR
_Bs#
h J
=> 0
XS S%=Vh9
JspiZ
QXX RI
./ )
QIT,
*1`+
xZB:(b
Yo;M
66Bu444#444
P@A&
m^+6
f]<C
444:444
Aj3E
BN4b+
-/.di
7WkYJ
H_;AD
Bm@&A
1LT-
=w+k
$F<-Ph
5CSsG
+a^Z
<Ms>
P|~9
.D,o
XBE/
JQ:z
cc{,0
A*W}
&K:w
3KOMu
:VFM
AxI
WJyF6P33
Ht,
fj)u
5+)S4
A@sQ
]QU Q
\ jQ
rhy=)b
*m<
pm^MW?
#YWrX
"\_+
Nijh
eRKY=X
=cv{
)6c|
VuZ7l
_-Y'
gt<@
&iAFwkYlD8eTxIgDgGbiYr7dyHBwfTgtKV11GV8
klzNZQ@
$ I?73
kCS~
TpD,
EXxz
i\%8
_HG"
\ sY&s@
{AJD
h)#e
444 ^bs,=?V
Q4G}=68
POQSQP[
}eR"5"#
444*444I444Y444C444+444
[39=
H@PYS
;Z{v
eRH=/"
Y8EFY
L>Uz
@Oq`(
kkO!
SB/#jL
!!Z
X42R|
nBH>%
.aC
OO%
Rs,V3
fD$p.
~8/ ;+6
Zg \T
mky
{2"{F&
jSLx
N[;b
kYhA
OyXO
vA%(_J
)1=_-[
ZW $
Tg".
o}#h
8^e'
J&AG
yHjr
^B/N
6ZhCr
ArIu
d8:Bu
Qq>Q
^_"[td
ZrbE
h[=Gr
g R'
i*J*k R
\JRW
.k..R
~PMR
C^>
}a8!#A)#
Fe@ V~
i1kB
<4<p7
?4LY
}*@c
& m{ G
R_%aS
[ lD
\dT#
bHD`
xY9
m/t <
*W *
8:/
'm]oK
`c#hn=
mzg!w
G|*s
vgPGTcH
J!T6
BW
j}QB
(5\z
;x 0MZ
4441444
an4h
(H}g
yB_
y4'ND
q> _
:nBk
0PP_
8Sj:
q#`7BX#`wP
dR@)
{>+.
% j-
<.Jb
hs8| 7
^\Fvi B
=t/L}
< NW
GARn
([R?k .9
ydd
: g
l7d Ns
Z0A)
=daE
H6Ph
zLkz1
70(ii
;Dy\
MEbd
F fe7
GY!%
.rMc
v>]*
c9Rpq
444'444
444q444'444 444
| J(/
=rRR
B7n
)=r`
5/)c
|;V P
IYYV
wP6l
04W5wXi
6RTs?Z
d3hG
cZ`1
E 5
Wl u
f->N
$$f[
:n]L3
Z*4f
wkui
@~%h
![noN[
+l.-|
(& W
rLWp
XXbV444
I<a}
Ox_#
~zQv]
]m:Y2
+ sV
|;;S
sN.T&
l6M8
=98B
PiiS8
efnW444
<G`
{7s@
W^&I
&x"l
7m\b
>qH R:Za2
MWdy
-^i'#B
Tr>
N SE
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
W8EvR
GuLx
444h444
Gz2;
;fZ
kwwEmdU8
iB>b3 c
1v.z&
DLg`3
B! 2;nq^
Lm]% X
>l3i
Xp0[
(ge1
qsQIh
zF&x
)W6C
T~p*a
p%4CG9D
a8T$
R= cW
E{:N
7?6zAga2
\N6W
R~4S<
-$3<l
tfzKe
n 9H $"
ReDt!
~OMHS3
LO~6g
_C,C2
@yVf
Ib=P
,;H"*
|FIC
#PXYg)
444 444
FyOhd
NwB$=
cUXv?
t{hv
pxwEM
u Vht
<&41
Mv VG
;F Y_
v[-P8
s}A:O
OSd+QF9
`ly<
N!fo)
Bnx6
}b,:
P$6qErq
1}U5t
444O444+444
Yh^q
T&^%c
eO6\}
a$:XYw,
%t&D
#hP7=e
_FSZ v
0zKw
WX4C
@(H)|3
RmJ"m
Wg+Q
|Q 3U
lmw\Y
cFdJ
tpdig
Sx =P
FW-Y
%(i0
5Yi g
1{M\G
uB[-
~jd{}
9 ,N
7@7]
}} 9E]H9n,
E4J1S
VPX$
[9m
q8jg
oF@>w
O-(Z
?@Ol444
$K>5U
_bm[444
444i444&444 444
JO[N
-b2
O@X`
x`L_\#
CEE+&
`KSL
^&eW
Kkys
:JG@
u6v
2 )j y
1?o
444y444>444
;Rsq
g9jAJ
Al^m
h)u;o
45D88:H
@SKq
}X;r
\d\.
2gp4
^y@)h
-7eGZ2i
0v"W
} '
DZ1t
J4N"9
J pq
f"3RaGn
M?4cAX
)u+h
@qSv
fX)t
zS=,
9iM]
n%Ww
Qm T
"z[|
1-F n
eqoY
?S9Y
4w9hN
:B(Oh
IZ<v
,bxC
]'C
='GyU\
444-444
Z[~D
YBl-_L
p ,Q
[]g`444 444 444
-|8KP
\^kB444!444 444
#SZ1
Ne/i
>g^-
L`\MC
YZ*}
!{XC
:}M`
*Yh$H
sSB
`@wz
>>zZ
[NVo
XLH6
Vm zz"7
n F}
r8|_
,YcH1
x2#If
?oOe
T`# /
!#=?
xUcY :
Qr-W
wZRS
g-r6
?j}
4qu)\
=% L`HQ
H2OY2
^[_z
O-}^
;}r
]MW{
vNA"
Ot@h'
=Hg0
'=Bu
v3Xx
+k Eq
c r~
F=..
o,|J
* R0]f
10s9'
(^$
UK"r
)U7<
7UgDw
5G?^
IWZcZ
"u kv
`/=J2
5$hU
444X444
,j.4
w,r"
v.Y4i8
EFS CIe
-^ Y
a],e
rJ.DT
>fzr\}
" ib7
bFz$
B{hy/}
O)7dO
"n\q
cer?F@D
444;`^c
.*0w
,Ku3K
%B}(
ZcU5
OV#O"e,(
(/N{{ o^
5jA3l5hyQ58N9ofLnYYKX
3yPC
~& K
j2G1
^ 5$:
1][r
:YNn
/3F4 $;
]!1fb
B2DT,
.dXL
,( h
`8yP
86RDjIV
t@Rz
k7R9
1DMM
$ >*H3
zH%T
MPh5
ro 2
Wy2R
w$V&U
8fP4
x@8`
444 ^`oC
@1t";U
?WQ n
PJR\
iQ.F
3EZ
=Q_O
hD<e
mz3K
-x&jd=
[vY.
iyP@
D{z^
0:Z:O
40Ww
AppDomain
pf(I
Z-Zh+9
h>.<(C
'gE
v2.0.50727
l_(3
&wx<
U5DU
;"5p
dEx>B
xj4t
^j_8
+4 .
get_Assembly
O=ZV
P@CS
]$i&
OM`1
rma-`c'm
HCEG+v
rUX"
*v1c
_X-$t:">
ZROS
(Xn%`
;[n=
N?3*
yA(J
x*c]@
3qMN
hYn. c
-AY=
vMF`_
kFT
v2|?
/T8w
VT[j
DJ"m"tnC
*U
9 mb'
$.:^
{{n %i
#6/
UwLxF*
55e6
& T:
5E88
g~Gi#
,Y:;
5naHc$P
XtaG
| hM
_j H
Ut $
?Hyt_
}yg*
JvxI
7X,Wn(@
tm|+"e6
Ing4
a0I[
E)~|
Y6zw|
)>+ k
#"Oi
qd\|+
\j{^`
<\3v
xL$Ax
C2j*
qIj%D`x
444>444
Dv8K v
444 TXmR!&C
1UbG
deq?
##/_
Z^If
}@&G
m_4'k
)`\o
vJY'*{
*$ig
RHmV
7{=h
@K6Z
Type
(<-"
sP]v
8jN]<~
]^d[
-nKq
StDK
/"-C
p J?
2DP]
:e>^]K
b9Owr
9Z?
JAot
op_LessThan
BNYWB
)vl
#Nl2
(@,7
,19v
Zkg]
60]0
?q.DL
444@444
+@R>
U0!*
l+1~
O!~[
4HvQr1XYiB9rDuTlwgfhZEH6
CbF$j
l#W)r
*y|`
!4oY
zR^S
p>(y4
.P<}
uwSt/ 8
[Zc-444
O^z:B
R8 F@w
P/eQ
9xiR'
H1 T
A #Q\s_
p|*
u06;
tZ3(
+LAf
xaK&
d|!a/N
X9j\Z3{
6!4+
[@ej
444m444(444 444
*}PNpq~
VK^TK
+Z%:
"5g(
+[CG
D"!
4(*oc
-bNP7d
| j3|i
B0%G^
=:/\fH
u*jhS
KCe9
%()y
2=)H
u]AFG
hU`M
X~{1
<mHr
%gs/ A
vI,D
Lpr^
@_c5
zB3M1
Go|}
7ahNs
i1] [
X3}4f
k4ED
-N o
hc}[
O}~r
-d&
40t2
6SO.>0`
o[FG
)>[=6
D[Z
n&&yt2.
CTWx
XEj^
H4ga
qd8->
:}`L
q6Fx
DrF|
clGK1
Y}7Hp
.jr[6V
fJ:f
R3j4A
MH#+b
%]fQ
(`<'k)
;}iRaS
55Q6D
ys*Y
g\-
Y' i
444:444v444
/4iU;
nsA4
tTX_EA
w7+B
;=>)
x'g!c
qJ{t
%Z1 Ej
`_ |
Ewgod
1ZYi
rM{+
.\uL
SkipVerification
Vn]M
)qS?CY
$m^)I
4gE/
qu%y
o_pB
t[n
IH{jDA
q>1~Z
{d-?
?pVW|x'
)ljNY
Ns.<
O#Iu
UWOLp~
444+444
J'VVz
~|2p(
IQu&
i:9N
SdS;N
R=''
.v$m'
mN!u
^/@%
@35?
Gousb
KOf"9>Y
|=A=
<H ~
%?T7V!H
!Ojj
_cwA
HsfsYj1B
+Fh|
`.rsrc
F@}H
U0yW
/3T
!Axh
]>yu
w[U3y3
{nW!
<U0PS^e~P`
lb kH
txcz
MY2I
MpVa
xIG6
's (
u&|(
EY]s
qV__
>U~G/
y0]R
/6cD
r>y-t6T
I8ol
C}qx
M1(p
^hD
<mk$
PUi8444
lR wC*
\B}m
{(h5
$ a
il^
s5W^
S!u-
\K[XLR
! r~z
444G444$444
vA.v
444p444+444 444
k%m6
6-h8
EK5Z
uf Eb
~ n
IWt u
h/XV
,r,g
AsJ@
0N%bb+
o; kb
tony
hQ1C
;0` vKl
f55:
/`a-G
, |"
444U444
?i!5pg
qHhE
MA ^
M Dr_S
.6E8
]"^=
30 ~
T?Q {
#FDbo
rrra444
VX-6
orr ,"&
3Hx/%
^sZNn<Y
jND'
Uw}Q2
Xb/}gdV
bxj5
vPe
]0F5
444Z444
Z[a}
ZjQ_
LncO((
|Z[G
t;yB?O
`'+Hg
Lf)5
444+444=4449444,444
}Cv{
szqt4
%=7A
8SV
@#&#
h<)'
j9 N
DR e
gH=B
*5X:
Dg ~
`[H
oP ?
Bx~ h<(v
bOry
sW@r
^WT1
ef3
s+ -
zV8&~
gyZC
`tK_
4inRs
) 06
n^'5Y v
J|V5c
GG x
%=7
kDk~
bO3e*
k ]Aa
e%5[
!Mq*
[8 w
}Eh\
D pp
K,\N#z
4JJ;
<l+D
zI )x
<|JF"#8JZ
mqye
1t/;
>Q_m
"mc[K,
}oTW{
)y \
N 8/
s$dz0V
rR`<
b.M0D@
2H?;;
o8/W
o8/Q
&j )
w`pNO
x >Y
-}'/
z -j6
]B6zg%-
/"^)-
>5 /
Gn40"
FSCj*3o
3[2>/<
u7rK
(_Uym
n.R[
5h -
/O%
:QpNT
}O fs
m 5
/p"
qS^W
H0+pf
|EN /
)IT>
3\]r
N|?[7^
Qs,YIT
nmb Ad
w8E'
GK}+
RwR*
SZX7
u;
JhAf
Zi@GxkR
^|]l
dV iJg
P=ly
XLarmS8NILVLg687s9Y7OGuB
;+%2
xe(au
!_*1{
m=B>
f 3s
|bpR
pW:
lC0^IN
G<5A@i
N5jl
6p@p`J
F^1e
Q)l!
$ B3
T}*i
12 lr
}<AF
lxs9%
3'G5
-8yn
3DpxOU
I'ku
g\jUDU
4/23
EvgW
h,[H
)/tg
PIiA
k(S
REkk|
CP` 1
B^-%<q
jFzK
<;Jk444#444 444
B)1n
8w +
H`tk
edrZD
p%$j!#$V
cNPC
&C>w
V0r_
2yPb"
._10
$ATRGk
j;K5
"|:^
`4Df
ak5H
E/r?
~Mc;
q8'mI
Yq@\
;.g!s
VPW?
Ey;af7
A R?Y
m{HV8
/S,9
LMN9 ]>IJ
AwSK
wD8}
rP2O
+9vs
444%444);?T1MRhM18X
2[y u
Nf\]
A["L
"RNi
4443PNJtYVQ
\P2D
m~j%I
d> ;
q2BOO
ubP>
|(#r
^F%#
\%d=OA
myL7+)
#i{"
jk\,5r
)0X3
lKtP
& d+
e6Mu
jq17
0]!X2
$Nlq
Fys6
dB{([=g$n
q%/
b${0
+ +H
[|r)
[H3X
uo{0
d$Em]
_OeF
444a444
.t,{
U_k[
v#f
\\YD
QyW]
j-:
34;8
7}PG
oJ R
cf+[
A>BI
_3t*
Jz+
z6j] 7
MmOm
<Py
T 2W
444k444%444
5Qk!
)yo6X
&WZ6
c<ws
0sP_
v&#A
pAfCG&O
5YKx
uOF9
444;79Fl9<K
F)}KT)u;
Tbg4
;N>'H
l 2R
Ix_4
j%Db
()d#
sbws +
wi`Vl
%AC7
1p nD
fXmQ
o9#*
444F444
|PL0
aA_N+
nL%b
T{U %t>
J/,
6FEl
2';yL<
A{T(
.&5M
Qf-)
4447SRU
6$h1
JHL
$,vS
{k3+
:+|Z
-JLi
cO@%
b-v1
"\('
\!Al
: IF
CAIj9
<If
>^t7
`k;v
y3;"
+a(=
Ua=z
<~sN
zq6dT8
J/'J
YXCrF
UdEb
c6@j
=}kD
jJ|rV
zUXTLSfuzLddlrUa32gg8LjBoPYyQ1dL
aTzW,;
*jhkn
-FQ# k
/>7`O
od59I
1U/.6
]T q
k,_<$
=`8PzU
$ 0K,
CebE_
S$@N ~
{UpxB
]>"K
444Y
11<~|k@
04qn!
z 3I
NW>
<SXOU;
vtQf
cZei
Dy6O^
OC0g
h# z
M-G0
fQY!
f4Zd
ccqkC
y+f
c9a7
= \Wk
1kW\(
;O#QG
]=N./
dw*tOtU
GkC m
1;:Y
E?n!
+ c3
b S
Bk'o
1)i
1kGHz
%J [
[_!+Xg
LT$m
{J]8m:"
]mO>li5
HF9eZ
[*^#
-YS@j
"Ua.
/[GH
-EIZ5Lv
imx-
7i
@ k7
"naurs5BSJBpmNbazm3UYy4UzR8bIf5DWbR
GvH?
86BWSw
.T$u
R:FB
Rzbt
|Gq[
ORb.444
T85(
Yz
JYV|
4Q9l
7f|ChzT
ON#]v
_\g+
JVg~
MEZ|U
~<1$
SR)6
e<E;
FsVU
ly!I
qBX]@
(1,2
%Q1r
9:+SO
STaP444
&@or
d0zl
&?_(
55>
*m$?
%F\@
,8/f
d,Ig
%)/L
kBliM'
R.$
4XCh
<1sxe
\]8l
pj]Ui
M.pL
QLJ,
x_
%am^
E#GR
d(-3
9m z
Hz[j
(Vt'O
Ap6W
DQoc{
QmbEf
.CA"
:<Q"B@Sq*,?
UEMRL77
85z2
!(YnYT
|( g
]s*j
.tA6
FBN;
;!fg
"6(_7
3wH
(CR`
sa"
kMr
0"[t
wc U
"u`Q
s KA
'W~goC
4449444
I 9{@
[g U
+<m-
Ifp}
KW&0#
=i`Z
CkbveV
`E_c
Yq -5
~nS#
4444444 444
_k O
@]3`
ofS^
1"={A
4A xC
!aOK
,y `
"5MD
x V3
#{Gw
6-;]
AT9
y2!V
%zY+>
EARg G
=|6v
uAN@
,],j7L
Qgt'
[9\<
#t{@
UPc.
WM8&
fhrs[Y\(&%(
4fyM
MOF1
6.~2
215W
`^fEqm^
H=C[
N/w0
~c9L
L.6J
ker~
yq#!
y-|"
C9Sc
,&s
%'72
w aHJ1}
a3ehj
)]v6
$ hu
B;@"
{*1l)
UUQe
JcA0|
Icx9
}vgv58v5r
j(gS
=I#i;
,ZzQF-
5T )
q'ouk]
|lIj&
t! pJ
g2NO
BG.#
<\}
SVo/XT`YCG]
t 1{
M5af
#RMX
y g}2r
|fWL
])fJs
q*BEQ
g!'P5
"w9o
iKj\
[Rn
nAd
Kb;)
y%p q
[9NX
eHP*
\I]X
fK &
-wR
cu%Rd& U
w!r1d$
g1ST
4Jh
I"qK
l Qf
|94*
u$S8
'~rbB#
UPUl
p `ON
m=@-
Eu%C
)VOEz
{, >Xp
x<Dhel
e]v\
System.Security.Cryptography
c"%v
3`R
h{RQ
\)7L
? zF
c>+C
95MR
2@Gr$
v441
=reux
T+we~4c-
,-;!
*coK
*q%
RHre^
444 EFLTwte
}M#e3MpG
HKTGhN1ONJeaOBpGF9erPVDnD
X()(n
-cLS
>]x<
@mVK
nfKw}"
S~_8v
IQ^c$
@x$i
&Z 0f
cY)#
Q!C8=
G, v
2H@]3
#Strings
-4SaJE8
Z=kg~
tB0*R
.ctor
-0,,
UUO>_9
C Wl!
9hx*
NS=x
ACNC>
{he\
+9Hs
X<RHWN
'x7D
"TN/
)*[`&j
kSO,a
KU_e
3R /DhK
{oV1-/"
}PxQ
#R/E]H)
(*>K^B|
e Xo
X ,V
~c">v
Z#*=
"2Nk
` XU
1'LwV
.~Rg<X
c"PfJ
~OkJ
:].1 11
Os[$g,
444~4440444 444
p0gp L
]5[S
vh{vl
)Ke3
5,6q[
kz2W4
]$/
m~fR
x0-_
9%a0C
1]is
/~M'l
%El
z{A?6
bfVzCR
mVuW
0#$Kr
ow{|
x[ b0
*I\c
[zmqUZ
@.reloc
)Su0
=RY;Z
E{=A
a#c4
444.444=444Q444H444.444
$3 g
v #B
Cl.&
3<C#
gVq)
@&zzD
umsw
_;+; =
Hc\[`
)=,y?
p7A#
8Myy
~u(o
xHD.
C&+qK
BAL2444
4xZB,
<]WJ
Q.7)
RbTm
[sd Q
"v0
444h444!444
@]VQ
1nU5
@b \
mHwQ
Yj;& e
p7AF
YWi,
x%XX
C{+Q
>N#Z
8J5"WkH
i4r[r
dMi3`pn
Z5he
F7]z A
c^$D-B
f.`Yz
y{}l
&q%8
LVif)
3aS08
2=c%s
;46`
[^4N
444@444
Q4 o
{K1U
VNoN D
Tu+@
CJi3
I17#7
cBC
vmGY
"(o`
`p6y
4x-Bw
444<444
^W"|
c9IG=
^sDG
%=.HE
Sf{V
dM O
t<Yk
?(3(d
L l?
GTy&
(+|[
wR>D
$LQ/#
T`&q
a_')
Pve6$
4448444
3iCvwi
ZHsBl
\aso
y1BG
6F:)
7G%}
3"Z`;z
bE 6
I~%"
;Qhe
s*9Q
"*}s
8p v
$`/gHw
U_J;
L%i;N
%5k.
1YxV'I
a3`>
3Ay\
-@dZ
K3g{S
\6[c
+/TyI (
`7 D
}_i+
<ic9
0F7S
$NR}T
qC Y
m?OD
.X71
i!\E
>~%|l
bmUe
AHi2Nc
vb,@
Z:<!
O+9yk
9-&
VWlu
(G7aJ*
2wuLd
p:1'
Og5J
Wl;keR&
Ji,B
444H444
v5].
~3i!F
"> *
S(+0
2rc4I-
vJwl(
,;{y
wtPvb
%|y9
I!kvQ
|aKyh
oS&e3
RtrQ
G[>t
pA5QnsLwrOsjzuq0229idF6VNrkTGPm
\=8;)&
d^k6
2 ;'L. fS
vw|G444
?s#G3T
-Lhw
!-VZ
_UQlm
hXlO
^Y rj
AIe@
?3C
M3^:As#f
d;[TP
`n=xyn
(oSp
fh]B
$6-Z
(U2 b
KyK`'
x@Ql
LH"#
~UM_
q0@!k
fn3&1
pXe^
f <u
O(L=
)6#1
(O6F
2BO
$8:>7a
^Xkt=^LB
9!)R%
&uY'
&TI?^
5]h|*
]W&g
%acL
h- *E
[(`!
]f|R
444+444 444
E5)|IM
;Swh
&/vJm
444'444HNMSm444
gssAT7
eixQ$$2
J%M^
dn?lys
I1zEs |
JtTO
>1\K
mdHx
rPS$
!D!E
>^WN
/ /j
[nGM4\'
,79lJO
f+F_(
\uYK
\WBm
cQ0>.
gA(R
dTs^
UesT
.;ve
r JQ
~e-E
hmn#g
444k444'444
|gr0
ubxL0
444-RPQLB:4
kYC~
ku7E'Z
zt&<V
&w:{
N7ev
,Vpp
Show
>;WR
[[R
C* 1
c}XY
Gbo(
5Vc> i
_u0[5
\x(;
[bA0
mA:B
Sy%o
r1
)#v
,wpw
T5qPC
wD!W
>'9J
#bSO
M7(l
l:qbo
KE]Z:
5/86h
0wE:
"yrZ8TQ1GlL1NKgrUH8pf2LwPwzYNpsNIve
+b,{
S!x\
U"T>
^3#ev
s $
cqt
#^t
j)3M5
UmRV
!@?@c
i; "
GQOYsK
>I V;
w6z
(.fd
@0jf
2d\8
y*jo?C.
[*25#
Er<3
:OOdr
g^;0
)_vV
>O){
pgeS[
VOQKW
j)aC
&=bD
<@8aL
sAKH/z
j'a
21b:
+>bD
r5&|
YZb2444
DjUH9.
GeO2
oIy 9
V/.x
P(i7t
pW7)80Gqj
6rY/
?|LG
lZ'$
dMKd
f aL
*2V)c
!Y:d
HI;|
)Nqo
nua
Ex*O
dfFe
/ ]#i
& ;:
oBoo
;8HR^|
,"oSC
X`biE
&U}e
<@1YdIb
iK7
JlY6
<[[V
Xa`U
G{)
m^#y
-Tcj.
`{w=
gB D0
5p,)
~_fP
ke]]?
bh% ?
B <XZ Ak
sRQ4
444S444
H6O-
|Ps~
[kvc
vWa6P
(1!QK
T{AF
7#&X
tBm
kEI5vH
u6S;
: X,
"m1z
ZV\]7
W=7M
BSJB
v.*4V#
1n+
5S`p
0So
FgL,dI
IdoR
!C&5
H,&
wO'*
21}wn
N}9h6
4A\wn
> hF
#7Q#n
\X +=
_"`=$
17J
j+9"k
l8[Dnf
&rlaa
JJbX
]J#BSp O=y
Y\nnJNa-444
W0 @;
78GS58H
<im`R#+
3d}J
Q9<3
GVe~ a
F2a"_
8n T
DS1O
,PK
0b-2.
RE1 }
Dv1bM
C<V#
74\g
oI b
Db~W
y#3S/T/
W++%/
;R)~
@TP;
?QnF
x 3h0
f. JdP#Tg
}A v
b ;%
\pgvs68
RO7iew
ZvS*\i
7 ?A
r]/d
PMDS
W?%*
Akk-
7onF
B$tkYy
,g^v
\&8R>=
yt|:
KK qd
u<>
444^444!444
P~p:fw+
3CaagF
a -6&
*@;
8|%b
Nn3V
L"ZK4
= 57
ub!p
FYye&]
.Osoec
bpQ[`n
*4@e
JS\K
BnoE
^V|
hJ n3f
|Up55%
2bk0
2|]>
_U6[
D 7as
7h f
*+&n
!NrGo
Y6;E
8xho
/M*k
dw}u
b.rL
astVrE
fz'eFq?~
y}@;L
I$=,?
Kk2
JWaT6REUvKNk6dzDmXiHs
="o|
EQw,M
Zp%V
cY0'
B[QB
pyqY|(
444b444#444
w\u-~
444 444 444
Fb?o
Zk\-u
,dM]&
Vq*l
x (I[
z-Rl
'Z:!
%8jwz{
j,$y
444|444S4441444
C.f{
(jKJu
B3X3
uf[s 08j
Object
q/tP %
\`e7
|@jE M'R
6,P=b
DWAS
mrX0@h
qHu?
z"@/WpR
5Z&,/
H*B e
eR 'd
,W^
u3kLz
Zylb
c1W'
RhN?k`
"[:iQr
vr%QH
LWx/
y#J{
C6Uw
w r
"XI9E9
W4u%
m"="-
4444444
SU`ePR_bHJT
;-,0
bxCQ
12x4
PK h8a
Fnpn
JV&
2=8F
^7rhV
)sh$
"Q)S
.k=O3
<FSr
JCF'""-
ffpe
-;&5
YvTe
A4}@
wW%W
`%oZe
.YSk
cqfyO
6>%
>R5NFR
]$; =
HR(\P I
# [6
/h;H
Am]p
b,ODU"
<$.+
:^;}
;N*=
>KsN
4448444 444
9um_/
>`/f
%,%K
4J3[
bP^roF[
P]ht|
$"`
_:j
'(A_G
Ka4T
=R#8
444G444
444 OKM
^ ].
K=[H
sh!P
16'y
.mK3t
eXy{
#wM3
T*]w
^i&I
H_ b T
-F#wr
G.$NF>7
b7Dx
gUoS
[SO"
u]jA
<WHV=vs
*,Gkj
zVX
0&g|
}mTR
!4=y
:n<)
a kr
q43J
}\gk
(0$U
w`M&
kTa7%
zH) Y;6
mscoree.dll
?HcM;{I
qBqv{/
_}?Tig
nYQNtE2rB4GQLMFOClemXzpEdqL
O,n<
*1/3X
Z,Z`|
G~dj`Cu]
{(bl
,q%>
/<} P
%T n
!S5I
@ M,
444*444>444McbdhWWZ
NLj}
='i'
K]{"t
T#<L
TUbb
B_`pl3
S{^f:
gd*F
?$[Zr~p
!dQr
7l=
AK
WxyN
iC*dg
/[y(
|JF6
1h$w
DK8wsIauLQAqXbHW8RrD
"/;z5e
vtUT
GN AXY
4@MX81J
*oPN,
G^n37d
6$L}
#7-G
E"(c
~jo6
(O0H
444%444;VUZfHGL
/ e<
f@Y&DV|n
Sq g~
[6C,
58O
n79?
IMou=
`iT0
BFW]
hRI?
D,u$
AJ
OrY*
dLxlw7.
xo2uZ D
L<T:
!O1Zs
z}s6
x}7q
O&V9!
0oTN
{(0/*
Z.[f1g)
l#`E
V%,rnH
"A:pQ
N gU
b N]
x\ 1
78Cs
h2hFuan9vAjDci5khllOLFsNC
YOFtm6w H
x>"+
?e7Mt8
YkA^a
g >AV
X B2)
/2I
oCSK
&9Xs
4FbG
L3 (=
&:>W
/D,E
xMm'
W6Vl`
SQ!e
\)P]
V`ZDx
9%.'
xjS
'n(|
sM~z
^sr&
V.z#2
a/3<
9/<*
(-l_5
tNg%B
21+,`
%wk
} T4+u
QXqOO
^U=9
4441444 444
ZeoX
|*yz
=,`L
OhleZ`
E>Wh7
[k+T
444$4444444?4442444
/jGb
tVo3
8StYWsSs8p50LyDXNi3aIacVD7Kf4zt
L}N"
{Q4%%
A9C-
Fa B
+`Sg
E:+l
= aL
@poQQ v=
%2@x
[OJJ4r
ASq{
k+wCs
4U s
,Gm6z^
O!aM
1oYo\m
;!62m
msf|:
U0[dlA|
}K^GY
RijndaelManaged
kI!!
B}#R?
@Hm"
1X6E\
Nm7y
9 z
-S ?
}u+}P
2(.S
c/[2
fk6\
,6)z!
-[D0|
R7VA
no{K &B
0FR`i&
jNn;
@e0Ms
#H+q
444:444
~$|<
E 5x
1Ag"
A-*s
<Xx
fe'n\%&
~ B
'K`T
WTUV
':!A
vWs'
lY!:
Fz/k
xT$F
^f}q
VVaI
2`?c
,qs(:M
tvP<
PYvS^KS
[ DD
n'jv
GI8@
jQ>"v
{fdd
"^+
=rE]
U|;0?
<4kH
I|]Z-
}2-p
YNNd
W/^s
.ivC
u&F?Q6
D/ov
ntc/O
W1hq
9U+i
}(-{
]2z
'Uin
ljs]
80 do;
R"W1
444Z444!nnx]
^-LhF
Pm7K_
XRqp_
444z444?444
RU^$
vFYS
dpA0
me |TQ
3c>J6
OfX<
`am,444
%fJ47
'1*h
.(-
] zc
~GWG
gM>:k
lglV
J^a$O8
d'bz
Y}e-
i kD(W
oJIT
nK5
]QS@
MU?s
)*H?
R!nr
vx|]^86m
&dAo'
aL^/
ztKZ#
usl~*r
%^IT
FyC9
UBj5
}X9n=
_"vDg
&x L
;"`[
N|0
8-*
Poy)
Wb l
@JjN
y:Ji
444)444 444
h@(N
{[F[T`@
NN]O}sK
F9s>*
%in%2
4A&+}"
E=3)
"d
E:vTK
B.pU
c-/^ T
X3kn
a$4{Z8K
C| T
F% Wl
8Wo &
VK2oL
0-po
r \>]
>4EJ
(fa
@pmv
7 @N
DZI"
zt\~
Ra/4
^l:/
IQvtu
_US
\JH%
Lm3d
y }0*h
8zUb
J|j|
s%S.
0\ 6
wgRU
\+G Z
9ZSw
@m-N
sjXq
5j#
u:u
q\"j
SAK&
; ti~
;$p$
8Q`e0}
P~2\
`7?:15`
s}~CH
h`p
>2k
iaCM
DJ)o
GWXc
e N-P
b!nE
uQ8Pg
gsBW
P ?/u
;_Xt
qj)(
44.08
k\P|
@[D
jNV$
Iw5$
CH{V
GGiS
>+ItAzH
WsC'
LVH_
H)4 oGTUK
2`Gb
z]Wb
{ 5MZ
2rE+
pyi9~
s1bs
5>*v
E7vct
<#Yy o
444^444
{"Q#
RVh9444
P%:
!\6 P
O Ch`
]$6|3
fo%(
ZO@p
*R=mi
,[t>
x'B
YXa~444'444 444
36GAHD?
Y&DCil
U<NA
XXW<M
5K7p
U\>V
:RY[
[C-
qAM#"Zv A`o
-A#jr
"dVn
PJEli+z
k9I"
Q^H
B@P^UI8
444xOQ`
1:!
ke@NcVI
[MeK}
tXcv
Pu-
v_]'n
](==
Q_x y
V~WX
tpe'
Ypf%RQ
zE:w
q/*s c
9=9=
V46r!
YVVQhf`
b-FLy
&u<OC
j.Py
;Fy0
B)R;
/.os
{Rye
N9|c
4ICW
tTrV
(LMG
/7x4
gg&B
sZ<0u
Xu;^
0WOu
s>>g
4FQo
C]w3
HuLO
%7: F
M|zV
oaqO
444&444
shjDHIYf1SeQwdFLasD4JQm58ZxLJF
0rd[
'_'TD
;@sz
^iXL7
yG8R
[Fj-
444=444
$*_%H
O&4
_"n;Ua+
?*^(
EpQ
pb#<_
:$h]
fWM\
y;My.
;rK`q
&yA,
N{h_
m+RM
E^ 0
ds-W*u
kV{UX
iE}D
W:)Y
nmuY.*+
EY= rh
,Kt*
%Mg.S[%
!nc*[
hH[7h
bpql
b~W+
nnb]
o>C>
6n\Y
}-X?
{z7&64
q~oc
&"R #
94.=O+
a#fE"
+V5^a&g9
^&Sa
m%Fw
jK_ B
Z"8*
al -
++WBs
rs{:444
z87,8
vQ?*
RoE)
''rg
;$(1
5V_!p
]-mf{
oM-Vr1
Fy>fm
o c~
;BUa
pL}}
= ;j
qtV-M
#8,}0Dl
O 87
aoa
I!'
>U{0
=fdjw1
E65+%?
m4q(kK
@o>@
-fR`:
0fIc
w*XZEA<
~h1"G
kdcI
21@?444
>Ct@@
2-5t;9:
jIa`s
59ER
N"07Ew+#
zGuO
:krI
6I[v
eixG
ERL,;)^
Z"8O
gR7G%u
x;?-z
I60$
iO's
;*Jn?
GJ\|ADW'444
`+`9Yi
%m -
?>hw
-r+S{
Ux/?
? Zu
TdGr
95x_5
FEH]ieM
/2{9 x
/K)U
Q[U"
"bz@
"7 G
:&J[
hp6d
444 c]P
_ O^rF
Gye=h
444s444)444 444
$7e,
Id0?!
z }
F}j
[0@aA3
%l3J
4444[WN
n\=p
Glu)
H{^Ulf
lk59
BQl'
IgC]t
.l)D5
NE>'
Ifc|c
V>L
9 qRr
<al9k
l$!5
V'{f4
>p@5
,)QC
VC3_!
I/nm~
A|wQ
$hu
xD+Q
2 /
~&hT
G 4_
}R0p
GWMO
_]+
}BFz
I7~\
=! g
"'# eOi>d
+W`^
P2z|`
x+6G
2Xwf
#YmF_L4l
[dW]
*5 C
@2|1
gXSZa&V
m |/K
2Vf8
kL^!M
qaw)C
83D7DK
l6 e
Cf33)
]d$=0n
JKZI/4H
$jw
~gVUo
j>f}D
;9Q9M
%rb*
e,SZo
!`,-p
.Kq\
444 @ALZ
Yh`e
lK44
;QqLyt
)3#q
dQNlqiWGYX8l0fkgL5LP
@*|D
4b0]
0q[$
+@-Sr#
j%J14
$[o
"w#b
N%JO<
q>;
.~mnR
ib{u
Zc[5
1G>$H
~M&u,
pZ2:
@ 5]
QWzCngvS1QFKOGcaLmisH
msfq;
Du
e]pw
n3W#
saEpk
Bisz
|8{/
SW~_
5CbRnv
n@,Y
vV ]C
rokI
L st
2Q.
444y444,444 444
_g#4
;,Z$Q
{f=2
p_gz
Em)29
#?q>
HtEa
YH6Q
n$O
444Q444
7jjy}
>:p:
}|GY
403mm
2)(gYF
otuyai
o.;N
Mw=^
g/EkB-
,d0%}
|s9A
Jj*1
CKdd
*x4_!3
NDT\]
)<<s
,DVT
.X\ki
EWp:e
lTxE
@\$
xZ^x
3wTN^
5TKTU
+aj#]
4$5"
J&bC`
}(y8l17
NV[=
NC W
DGT?<;C
; H s$d&
fwEg
bTkM
,#Z6
UY}m
H05%
2R~>1
G"xk<
&AUp
02y:
% r|2
@};[
}<I&
^pqr
-( D
v a`
"KMy
G7s4 f
#$C
9|LfZ
^gh^?c/
T&q.<e
444;444 444
Xe{dm?
Hh~!
JXKVAw
dLgY
p}w{
kJyym
5ir
0^L m
H/D}]
SyqT
1UIR
O| q
'-2a
!!Vx
xEa&);
{d=Tc
VZG8
eIN
7^ $
<0(!y rR
2XwOk}&
S n\/T
0*O{.+
oi8%-
uLt<
+vg
r46wAFa2e1pOwRXcCMWNtUXMy
mv{&zO
N>@(c
=B23
qv]
444k444J444;444+444
k]Pr
r_=
9(4O
*&8)
yV }/
I5 WJ
e{ `
o_:.
@8+_
hSxL
y).s
9=wG
ae[~
4447idY
jzz7A
S~/}KH?y
muq'U
fFUFU(
F_0
&H 7-
Tzb'
% L
O Uo
7}he
cR5hl
hs2&!
fEgH
bHg.m
S 4E 5
RQW?U
`br'CFXxTS_
0=A
#mXo
jF-,
WBIz
. Yf
sFdB
MH:W
Pr\0
y8^
%H]v_IO
2&m
+RU?
2|lR
]`qz
obND2L[J
>z)9
^?InY
iUVY
5z18i
#8"g
`2>r-+
T6K>S
Sr Zm$
CH&|
b+'lY
%ahx
l !s|
X\8
YzAS
c6y
.luU/
OF0g3(
zPZI
fuBfB
u6X2$
NPK8
HL1!#
` `G
V!%X
[CFH
?++B
Zuuz'
P,%W
|>}/
3Cq
9ee"
ZZ D
"T0j
ZI 8=
*7aI
z}?r
}6_u
TjJ:
,?E1
/F_9
Bodu
B9SM~
{d2L[x
A`IV
LQNN
\xD9
o/n#
<R\u\
_Nz
K 2$
R8;VT2
444 urri
} " 5l
AOt}
7@s]
IGQS444
cz_&
<prh
GuX;
U{-?
d } 2
fr(`
+z!)
T&}u
6 C
k_n16)Ax
D6C3^p
/O>< sV
.-w5-
(>6T
ez/jH
Wj C
Trwf\
7k6q$
7t!b
MvZb`
.LOWa2
YLs2
_Y%z
PV~
`2j5
`Yii
dS`XF
qH)=
~^#
gqnjH7
gd}g
7qYS
Dbk]
&M^Cve
OE`Hy
Ahf
.=FG_G
p]j:j
x;p\
sry(
-ft7
Z |W7j~
$" #
TlQ7
444?444
#f0C
,,h} Zs
J{'xA
wKXX
^XVX
2C+
qo~h
;'B7
kXq r)
VJEk
p]z
0d G
H.IG
-<hK
=w:
s/J?^
UWtM
i~J2'Ux
=Pd%
Td@m/6
444s444$444
sqf4
J?v)aK
b G3
%{wB
\dw")
UF<*
5*5L&
'?l2KJ
1hu3
f'PC
GL.^
Exception
sKl
gCpE
k5/QS
ytW:
/Y2[,ja
!6e?@
}.I\y8
oZ-`
rb j
.i25
q]uTx
!G9
47a\[
_3DX
M>!n
+X/W0y
g)Uz
kdaP
Yr3L 9
]99$r
up^5
6%r8
H=L!Y4i
NQ:,p
b)w$
7I p
OXS5-:<
kK: {
@tJ
$J.2
v8ij
Kq@>I
xL4k:x
RAc;
_[9k
FG@Ds
444 7<W
yrRjU
Q FG
L 1a
tmS@
Y"Xh
/Y4uAsPY
>lz0D
pJo_
42$[
pR4E
%23a9
q z+
~7&'
Fl!%{
^!CT'
3XXa2
0s:Sc]t
h78U
VV j
O_Qv~2
p679
*ssL
R[uj
wb[
$h*
$}KR
+G;b1
Eg
t$tV
{\w]
y~D&
( p|
2'bE
%y#0
G|9^
v/5-
`yBlA
:eb)
E (!
UCi!
( pY
`ZRJ
>j2\}h
444 444
f!#Fg
@p^d
#;>#
iC=9
fH~w
#o+j
JFW^
kfj>e
]Z f!
^]U#"
*C| M
%y#w
N|{8
7_-)
YPr7
fN0-
jW,!
DmxiN
?~G|b
])8_>2
? rPUO
1X{m
,w/iJ
$FJj
#|ZU
gisL444
lyQ
V19U%W
1z+4
hS&(G
,Mgs
h3$
7p|l#
92@k
# fa
p d3z
wWQE
%ok\
cx]a
1 N*r
aVLY
Xs6w
Z'ur
bzueq(<Y
;cq<
b/Cb
2xnG
/MA7
%%f^
&K4n
>e_|R
Ev#>M
Hq (
Hs]o
?u<)
@L10
444Y444
\0 &
')c&
r yB
rN;W
$(89!
7FQ^k
|"}i
Pzyt7
vf+i
6`eI
/SHo
#MX8
0G#U
Z:_d
l_<Cy
U!3W
E cWN
cdl6
(3X2z
]\{=
[m~"
ax H
9cV$k
zp!0
NLTp
gD~x|H
hUQ
nou4851
Z>-^ S3n
TbO}
"^t3
zQw?
8SuPw
aYIV
sJ8_x
C`"a
.-Aw
PL@h
RBJvh
L' =
N)
lUkR<3R
tBR-a
%F \5W
sTEm
444 444 444 444
w4ANO@
?}<f
Zcb
CKb4
PaI
Q6f`
RGq z
HuOp
#3C
CpxO
;-5Q
|1<'
ULD'
}xm:
uM[V
) qg
#!NZK
%"N;
UT cf2
k!xF
>ag-
kD+
GQ9'<
Ph},%%
}s w
L.1*
+>5qY
}3exa
<BZw
,k /g
U<%
q=4J>_:
)0<?K
)(R
U 9a0
VYiv444#444 444
/qVv
rti1
GqWBneQgcrs5Xqi4kDiyUj3Omr0e85hq.resources
'r R
r8(B
uP|V
=@cq
AXL{
lx.u"V
=W+O
@#HU
[Oc<
Q/7d
Lv0h
Tr3FT1+/b
Q'mO
6vZFoDx3fvToop93XgBi
T?wL]
}irG
}1GD
Q+a?
qKqA"
33 V
K#Rt
MvxV5&
UGBh
Eu$A
~ehB
~g8Q
mIQo
-~TV
00r*
Jy+n
e4l}
Y&Eg
VITnQf
+9I4)
L"T 71
d=|.>
QwD/
444 444 444 444 444
w(MM
turcA
MSRk
I (
8zn:v%x
]b u
US.k
W2Mo
tFd/
GYN "j
fjD8
4768|^
OjxY
<c Z}=
VZhd7T
+RWj
Cl&z
yw*X
o-zX
fB?@+g3W
#{ u
'y;OF
+cd/H
'(`4
bp b
GJ+L=d.
(8Us
BF@M
Mx{K'h
3I=*)
b35V
R uO
`f OV
!niR'B*
t;7W
K5uiK
ex`r
*/W2
MN`xb
;[GN
O Q@}U]
v3o5
eRit
m\&
4"7!7X
Zn#7K
FTk-"
~{6Hx
efoY444!444 {|
.- r
444 444 >?LV=>L
Y]pi
^NlfJ
<?Dd
|M$Q
9ncXN+
=Bh4
;IoG
:d m*
#sKec8LZ5olMnzSj9M5VwbGlst5BP3OHGZeY
444c444&444 444
j3<G5}
8(N
%Jsv
Q 6
w ,*`
Ev57
0C'5
/|<gi
SiP
$^d; ]
dBxf
xJz
|iVxK
r e5
9|-z
/Rem
ONsF
h\H&
fzg I
6#Eh
a^w 5g
0mh1}x
L`SO
;,Tl
itFh!m
Ni%yC
2&9 U
M+R:#
^C l&
s~4QA
4]D"
M,e<
z/>K
@5;T
cTR/D
7 iu
sM6qZnO
v"%&
8 ~Lw
gUu*
_}'dD
l\FT*
\?y7N)a
l 9&
1X a
]
y<..
pjNI
W:%#
&{c\
1| #
wV )eqb5
wxD~D
Xz<A
L}%r
i]fE
V:WRv
IAX=G(
Xovm'$
?pTZ
( [i
'gJV.
lED_
nW&&,CY
444\444
Eu.((
"[a_
e6e1
_ fj
^*F%
3}"J
cOZY
,a)~
p^F"p
%)~w
Fn}>xm
*WY?
ZG}k
qy JNziF/
ft|2
TeU$r
MxZn
g?m:-
0CRB
m n]c
"uxBTGuZgD7K5AYdWNdSbkM4yZYQKF7aeDM
6kHq
K&smu$9^
Z!S,J\9
EE#
_>|#
/GJ\
~4?`
[9[0
GaMd.Ii%
R39{I
S{zS
^9mQ
f]H-
'8J6q
, O\,<
uwRB
X1))q
:jI6
]2<=
hxu_
UU"Q
:C#M/
m 21
mZ|W
3lRp
4443`[O
F hG
* r*
Ie G1
PLD@)
Nc0_
!S V
zCt}
Q)k'
"PQ?S
444 444 444 444
Yh6#K3
_V6f
R "H
$ 6HkJ
M4pq
O1$l
#`",
!m `
s}.I
m>_T
hkTM
b;3'
_-M*
fqLR
9i!e(
s%F8QI
85~o
aQ-Ez
V ?*
,%b-i
1xwI
I A w
SQL+
%O%_
;uD'
*ehP
dBW2(
zTA
naAf}-
/1W
rB^i; Sg<
AjUy|{#
g<r,Y
R1%Q
)H,@
yO'z
2d&Fu7 ,#
(zDc
!Y%Mg
ugj&
U Ai<@
OcyQ
{$Of
we(.t
A}tr5
}qDz
2$LH
!Dm\q
CJ N#
~'J
CW$7.
ZTl+/
0!cF
[q]'
+]#t
[axe
Y[%%
jS X<
T8 w
:d% V
wXi@Nl
V 21(,
h eY
nx`VMB
XA}N
rfG:
P[#"
wof3\"
'F? Hk
)b,l8X
4g2
@.msyK
System.Security
^#aBl6
IjJX
GA$w
jz)u
9u\5
TJAH
m-&a
UN]@
2w{<h
MP~`
wZoV'YHpn
PcRy
%kL( '
?39}
d0TA
7:L&41>
L|c+v
" [ ^
fi>\
BCA \c
x+hFs
$:]R
n Xj
6i&2
5h4R
?:~u?
:?+d
EY16
h3&|
)|Ci
hDu4
P<"#
_9u8
VTYx444(444 444
!zhV
oZwo
LgIz
8ky8B
r`DxKsD
l x2
$!'"<M
Q` O
'z.F
7\H[_
Xwkk
UYa-
E\L
V[r 79M
h&2
%vb&
yYZ:
7fq0
46GMEH[
3 Ic9
HuM2
lp->+
f8b~6
^F4w-P
)s_G-d
hoHW
"m _)Ogt
,klQ
4Pzi
444T444
List`1
@W7Z
lFamFg
Ye>
Sba2c4{
M>G.
f) t<
^:J9h
^M#Mk
V`ah
uTGV
1/ylMRY
get_CurrentDomain
pGy
Fkw3
2#Nk*
56-8C
!&J 9q
e0S@
~n9$
j=+R
#TE#
lF w5
>`}h
444)444B444_444g444C444'444
- wi
yu~S
54<Y
5@Y7
a*t"
7b0o
BfWh
n Fo?
3k.txS
444 []nR
q{1Nn
N>+>#
|oS[
)~s x-
f4)p
D5M s+`
^X E
444 uw
_>w.q
@:]w
g 0j\
4.l]
bS s
eckk
> $C
:|Uh
3|jV
8*%!
Hlv3 \#X5
)t+A
@=Dv444&444
#Blob
JW <8
WAcl
444 444
7Xo>
g t/G
Ppr$
=@x
c^<4
62BR
Uu?e
UkI^
f 2d
hH&z-c
W G $B
bwud*
=F_1
x"(u
T`\
&4B/
teOu
;HIBI
-[z bu
i9N6
aAAV6@v,
':wd
uCj&!
Wx_O
sTk~
u~#dW
hT3T
EYR1
x+il
`w6M
t4"N[
o%pI
1 )p
+MKQ
nUj{
1"4Nh
j.!*
5Km0,
uig;Y(
fs=]
ukS
72?\v
4YSP1W
d 6
48{k
}(NQ
NQ @
$)q 1
<E[3
31qj
/XMF\
V[S4
Qq5d
}`R;K
;iDMSpF8
j*Hs6
iF)a
[=df
m%tB8/
SQaD
~[CH3
_x^P\
X?u)
p)R1
yeOW\VF
Ec}N
k&o(
B6tGg
?N Q
L]}0u
<A?C
m`L@
c bb,Vv
02$v
1), V
mWRIp
-5gl
lie>*j
MVoO
ApPG5f
Ou&F
$33~ 1
1 p8
a cu=
` lcQT
frW\
^}_.*
yH?c
KZ|E
=l
3`|%V
(&W$'
0m_R
5o<O2K,
r2/=
aCn_
}xr,
dPf
|RBc
md]!f
*p][
_SeT
#5-M7
-gC6X
xh9m
6:jf
XX`r444'444 444
-k]B
ta&8
"0tw
MDuG
E'}"2 -
U|g_m
u\]M6XZ
g@dj
y$v6
444H444)QUj
&kIZfc3
wvN
444 NP_z
X5H
444K444+444
q!H'
~MX[>2=l
<8=E
a$0
acBc
444 @;A
3*x,
4 f?
<gyxG
1[ )
3tML
5SZ%
t|;/
pA
"WP,
x3E D
@+O}e
:P|D
9S>)|dmOC,C
ne)X
k/Oz
EOM08
JQt]x
| i|QG
v?$b
, 9'
bA j
}5 c
9FTq
Wj9Mt
;j (`
JB.
ZyPYJ\
R:%%d
i]{S
`Ats
%{qJX
A%dg1
444q4440444
wcw.
-1E?+*8
4444444
xD~$OS
%K(i
<T:[Q
G'2X
\n48
p+R
sR|d
-/N/og
(:zke
eV{
hEUb
4443444
[wiH>Z
dRQ
4443444
mp$\AU
9|zq
'(RE
qORMI
k i
DC=M
` @^$Q}Y
q2l
+OR0
B36[
9bG7
zG-vR
*/@!
@"b .
FKO$
T4W
NX99
\ ;o
6ehL
z(^t)9
/~Df
QNu:
hx]
2 ?C
;F- P
F dM.Z-
* :)
A>Cd444"444
87xb
3VA
8EH%
_. V
NIgY9?
zzs5
o S;_g
aq^f/
]H5M
8uW1
F1 &
B<>:DA=
:]}7
jcal
0GOax
)Y^-
Ar\l
!7$=S
rZ))
(Yx"
bx3r
$Za:
giHFb
5#KD<
FA J
Qys*Z
FW#d
Klp"!!
,HY$;
hK{r
Ey+d
EB.:
/6
@A+/h
+[v@
Sz#`bBfn
ut=KJ
444f444 444
.Nh[es
444'444,444#444
-{r*
ep ~
^bQl
5gRn
Z^{li+
|o6;
e)r3
eB_@
444w444(444
u#8x
J _jz
vg?_`w
|zjY
kc3
!-=p9
|(~ R
@wh99
" Sht
tt2v
L6M}|O"
lIOo3
%%5A/b=Q
YO[y
M{a!
-|n%
JeeNJ9nhkB3pXowij1Uo
m2y4
Eu1OvpT
oGkLS
3%S_}
mleT}>
l:$ACx
(Xu2
'#5j
/d*:
i<l;X^f
N <RP =
SqZW
xLO{
XHdKT
tD$p-
SS\B
}y?X
YtI|
AU-.
*8XiN
gH76
lKgi
c/=\C
= SUv
ASy'
Bm-9
G^Ta
6]?t,
JDsO*
xWvl
Vl S
}rKG h5\dmGv Dd
K. .
}8S0
el3y
+OjP
0Re)]~Q!
"5*huc
'!WOs
/d]+
DG1j
+c[W
&#v,
$jy6
System.Windows.Forms
5'>>
<9asd
Xjy}/
*3 !t
WiN)e
2?ve
,&G`
m0w~
sDak
${/(
?~7(
;uye2
LJF+t
x/`r)v
ZSQC*S
dfu(05L
Invoke
pOz _
{GCa)
{GCL
WrapNonExceptionThrows
4C^<
_b-jL(
A25H
*nx]
g%0G
nhKav
`0i_
VYo)
xu=b
]H<iB
N/VOi 6 7
7$Wd
]0|@
L:>1w
qu8=
cG012
pIhF
W{ThO
=#jk
5} FzU
D .{
4447444
w8wf
uv5(
t s!AHrx
IM9$
fL;U
~ AD@
p>C6U
i-k'
EK$GRT
3$fC1
_%0i
9DQ6
h$\w
LO`/444
8O3Er
{m
<4r&/
GmtIJoT
+HR_
XX6W
O5b|
P =O
uC(=
e;W
!|c/
?!G$
(~%
rtud
}NMd;S5
ADl2
uST 5
F"0h,|
5.Nt
#hc~
:i4UN
]TB3Y
7Y2^4F
1A(Y}
' dZ
S$3le\
b92~
JxEa]
T,VO
v)f+
*F,m
Gwkc
R Wy
u[88o
/-([
\,_i
e d
om@n
O r~
fZ9 S
_-gC >
x:! AB
|+QpZ$
8d*M
fJ-_
V;;
Oyhw
rn+
?MvVt
-3^h
Po m
444v444=444
e.7mg
Md[}O
M_ }p
i%s
t'a
LVp4
?Rh/
RC/ng9lGQ
444
pAtRhFNSOWj4AVpm7Eeca
@eBXH
A=P+
"@0P
?Rh<
Wt9"
3hOJ
!*7[
0t'<O
0 >U ^
}]K#m
nS#V
* s4
5S#Y
e}#M
NO
c/xOh
&)iL
~{:j
zJ/E
\;%u
Eh/h
m{pn@
4 [ B
)vqt?
Dt[A
HC<r6k
p/J~
AI' >
IcQ
!:k:(
GPNa
FAz$
=?F/
jC+,T6u
<ld#VW
<P"T
91]F
GLuB
g##z0
$cFpdqUfxBOVPUICdhxQBtBrgtQbtPSJQ1jMX
N;f![
O.u
ByD-Q
L^u!rh
B=FeL
,-Eu
Eh#N
lx~U
'g{
|U=/)ph
3/<a-
ar)
s&CQ
Lao~
(1f-
-!A=
6~@) 6
$68
ODaa
DJQ9
={o;
`x\ c
:5d"
c#1jJ
dcr$i
?.H_
~ r~q
Z\sh|
h[ cl
d''i%
uuVuv
z*f"
'yk0
zj1<
OSDc
hlK^+
%W($
FBJ$ytf
txL0:<
&eO<
1nYf
\2+#
DP*-5
q)f+
,Ly[
2qWa
Zn+a
dIH9
unD]X<
8U &~A[
444PBG]
@fTt\SzV
>FOd
;+x^
444 444 444 444
Z5djU
W'T-)
K^AP
! XS
&Op8!
m'[G!
\.F< n
<g.)
Bs%@
!%Lv~;T
PQN
o:rp4
Be@M
rHrEe6<
M|ba
^/pt
J$*
Aa1+F
Gk5c
ELfB
uzfjDzCvCFC8D2flcX6W
V|Q
444"444<SU`
bZ@O
%7 W
M r]
1U;`
>3SDLn
H3Bl
lCR4
&0Dh
!A?`
-(G+
*C~,
_//Y
+[\#
8'A7c
.axWlN
(`Z0
vka!
>j)+nc
.z,
27iI
mZ 0Y
K54
:KEL
[Kf`
Y= `
.rX
qYkD
v>lO
aSvhj#
,[_
'jRA
~w,Oa
S_lM.6
H|%?]
.:|v
Auw7j
R^AW
PSWiG
#RZ/|
zOr4@F
7Z^l
!\XV*
#>"9d
<P%\
J<
eH4
"}'
(})-&9
OP5{b
`Kg)6a
:1B `q
^fbd!
kq&4,W
j ugr
C iV@
"tTC
,i vb
c5e'v^
Zh }
ry!(
;m #
g ^e\~
[!U6
62 A
M1vK
iy q {
pSNGJ
!/ck
1dYJjV94hoOfk05Dk1fuTa9NAdSy
i[|,
&uX[PT
p \%2
y1{Z
FHEf
-c}q
^xtz
h,9D
XSu% U
[p0o
q`2Q
Mx==
Bl ^3
iK{!
4$uu
'K&9
[NaZ
kSG|
ohu~
; H7>`
7Gq9
`Xwmo
rbu k
G9 \
k' 2
c"WY2
%[]D
O"U}
@Ib
fIU'
i1u<
444O444*444
+wxrP
`ZY\
va5sWDOzbBjBWVRl66DVXlFImOt
/u[l
w9J-
>P{dV}
K0+3
T%Q4
mHlSN0
6|:V%
XEAoK1a
FVf
%+uB
@#c
%,w,
~[^%
HBsT
vO# w
d\@t;
bS]Qw"E
5 #l< D
b5Ev{
@LW'
|3Hm
7K x
XO)5
&i.;
V<V
xe;?{el
444w444.444
f3\N
a/2LK
-0js
..p{
WB3Tk
FZWw
Qi>V4
VBC)
EFSm444%444 444
-k'K
6.d8
r'Mr
w`6$F
3O,!
J=8G
G9{K
}XM:
7p_-vC
xK1
F2BX
^4<]
qBgUdlT
P@uj
5ug
P9 %-nT
_Tlg
Rb{=
dA=T
f=oYS
87sV\
wg;tP`
}P&)
"g&\
br6A
&o ;q,
UWaY444,444
>:#
55gV:
lJ%@
n%93
:%jT
iBqS
6{!A
t,\hP.
B G
14s+
wT\N
6_.H
?3hF
cMdR
+Hym*h
>u/ON
Y sv
1vqi n#
KCSCr
|5b>
~bQT
OZAH!?
{`5Z
UI "9
W!F7@N8
K%if=
g4O
FLbG
*z96
;yaA
@q|&
Dx?>
c+S6F8
Z!P}}w
h<@
ax1`
oV_(
Gb;Y
I;\Wd
+?Pp
' pm
oS;7
VMzh0;
LEwk
<{EpDE
~%hC
zSQsoCpnsuA7LRsI1RN3lw20YODA8dT
#?#pc
ZQ $
x'xjx
kjDM
cEk/
5P#F
(uE%
17^~
36}`
ICryptoTransform
[V19
jyB
FCO5444
tDsU
ec@Wq
{ZS9
(%]W
5DS@o
}fR/0
'})E
`On#
UBP)
:_K#~"
9\cL
v ig
A[0Gpm
%T q
d8MH
HXG
6MZ"
yX6 3
d@$.G
j {V
l>qs
@\4O
3K% "
'\.V
7xH)
w_U(1
_YnV
l9E rX
/gF(}
i/?Y
'i(p3
+n6I
46EN*-B
w)2C
:q>e
th44m
dwi#
p[6W
i@*&4b
4p B!#
@+8r
`7d!5=
kzun
mk[0
}T*=
J"aN
U0di
zJJJ
.#]
RMp|
`LT#
Ig?g
I(R&
f bK
dJ}9u
H=mO
F=_
yDq$
^!#}~L
@m/%za
WW m
~!w$m
[u~>z
w |
%BS
9xo2
BRf[S
CEDqb
@zu/
+bSU
h@"&
Dev^
2Vg1
JDX`a
u8er
3>Sq
O OM
vUZs
Zr 5
(vR|
)Po_
0 OZ
@ 5a6
=SE(
g9LFBu
<=#w
*g}A
)-t
k?A$W
q4sQQ
:]}C]@
p0 :
gFaXi
<& f
7EfzW4/
444 miW
`$o%
#{bWO
8XP m
t5"d<"
6~C=:
7~e|
e#c}!
>(#T$
2} h4i
syHX
:B#W
Ed"K
B|pt
ov{7
-+";0
}7_6
~g"/
+)1*
)z@3]
;S=9A
;Eif
br"-R
;L7
zg!h
>aU#
mlv%
L;<b
/N\r
J/WG
Vg0;/t@"
{zZXaqI}}
1"2?
t %a`
A3#G
Dwg i
444 HB>
(cxJbu
wIj>
JBE+
`Kp0
nl'j
sEL?
GK./i
X>,5IA
'8(o:O
!!K^2gr)i#D
RL HO
Load
\mo
:&'>
444]444
<FG=
ZAc"
k x^?Bh
)'\M
APj]
du_n
%1_=
)v 2)
w(WO
]#S5
xf G
JH\;
C167
4i,5+
78~,
y 14
`KHi
tWR_!$
cVa_6=
Z]i1444
MB$3
Kh:!
U</1
*RFz9
0hZ
ECzN
N= d#
Og':
i#|N
3P%
<dv
L8lL
MessageBox
b7?\qh
$CSx
h\@c
`?Vb
B#3_O":
Wvzij
.fY#
V~54
77+f
HELc
<9p9
u he
; z!
T hVt>
w9 M
8;S9
>gFOlJ
z8e7
+<t`>N
Gcvs
J]r:
U/C"$
X6!v!
qW?O
j/6%T#
.O2/
O 8j|
>7}(
>l-
H^YN
444~444(444
EG_90
.e=g
7q$8
dTfE}
j1.{
uU3$
S^f(oaAo!
"+1C
<8>L
dyfC
<`OR
xN95
X@%"
O.3~
3kt5
x4<d
t.]|
R`ha
G>%
2q
NR;hU
Assembly
# bF
50lU
]F%)
{;[00z
@iO,f
ITXK
\ED(Z
-&Wxl\g
[W?x
t!1*
}XGd
nbn'*
{fUp
bBR9
HJVl
u5EIg
-fx4
#u61
> 3%(-
o3'tc
Pn>t
0~+:
7HSg
G/>U
QcCBq
444=444rCBE
(_(jkgv
d#:-
!^4
;ocU 7
?BTD444
|#.1l
]k *x
jB?e
8^\G[A
tJ3aW
6p-R
N[_)
.V )5
73]U
-b7q,
F9^I
;:*}
U EOt
1f:~
$mWGS7
j`\ok
0 .u
ZTh-
n:cA
jE;0
D>K7
Y;JdvdT
L]=24
L,A!
v%+SEt
Fwrd
ffne444#444 444
PKUHtq
6?:\/
FB#\
BM:{3
?/br
n]rV
c@zK
$xos
Ga/U3
ccK(T
+&!-
+r9T$8
oKv?
,(_
Y`z*
KZ_,
4n
=_f8
444 []f
am42
t2x5HH5CFUiKytr2JefnYFKdpU
j7Df@
EXkN1
gzplSY
) d@
Ok[*X.
OS(*n
l;e
x;WL
4442444a444}TTW
+2 2#
S-J
4,g9
444j4448444
$b}]
LNEh
R4 J<
#$;
uo!9CRv`
K7>MOO
~m_Wh
O;8F
ES!k
D)S/%
,4#e
DtUnC2OkEkgWYE1nnwUA0ERS7vJ0
5~:3
{]q`p\
is~
~(~ q
h?siP
HHUi444!444
w2Nm
O65"
Lw?<~x
cUcz)
oEHf
xtk*
]4)#
\HGc
p9~-Steau
qMDC
TroU
&l%[
K39
ovRx{c^
^< _
6Y4,
eE#3
nxR[aD
DPMif6
unTb
zK~C
Ubz6
h. &
eM9Z
wkrH
FVYB4
8U/>_
KXaH
d*Dxz)
L@Sn
<-D7*L
zXGq
1y)fO/
C5\!
P@wn
b]bT!
<B9p
fblH
"`)go
a}QN
444 FFS
s% 6l
ws(H
kOMfH
=)q 9
EQ;g
!:Fe
k6 t
Wvd:
7"A2
Y qc
L:6O
Cb[Z
R4`%
, }#
DV'39
yA>
_:>&"
."$9
889$
DXw
SU"2
=3ox
lG_F
ajg1
wW2+
> 6
okIY:
=mxQ`<
=>2
L{%T&i
CC7e
h2>\*
v@f%
G#i~
I+L6
8Tm"
Ge(9
v`Tjc
5kv
x9n|q
>K%}jU
J%cK
X 'dU
`<B
y/gD
R:+l
bEv^
gxgH
wvU
N[-0
3ij
C_lv
6:3
}q1H7a
[Tlq
iI7z
4E*y+
!Z:LAT
K-LT
)-6?
NvQ'
jT5
:;I]
MjI2
<( K/,
;SZ5
uT^TT@
$(0`
fvZOs
Q\r*
_ul[d
w|U@eR
444J444
]4k
Ba: |yx
444,444 444
HEW_
'QWvQ
?)a2
3{m=!
B=?
p47i {
AQP9co}5
Y\g(toa
JN7{
GRS5
[1&1h
Oo0K
wh<;
444/444
:(vawJ\-
444p444J444+444
Cj P
774|
.P Jr
O/CM
6;9Z
|}9k
u.C u
vO.5S"
4445444
skp$
'g[=8
1D@v 1
MX,/
R.[WU<
kgQH
A@O
D?6Q*
O*:l
^QRA
ue<U
} WB
Saz=
444k444#
444k444%
z*3za"
lXFK
i6."
k*1+
444m444$444
q==g
@~7tZ(
u0w"
V#\2
XK1
8pL,7
1Sih
wXKi
;+ P
7<c0|
%L?&f ]
DvMI
-.7Q
E6^n
D@g"
_wMhf
OX_u
="6k
&= 6
H T#
a6h|
'W%(qs
83g"
.0R;
a^W*
|`F|V^
q"&H
GU +@
`y[n
3V tP
ha Sk!
U-Ey
QREXFE
G8.8a
-EIX
2=D?
\&pG%]
59T@
,]:k
TN{CM
YXZ=
">y9|
5lVa
p,Zb
)MIf;
KKX5`\B
444 @DWR
7 N?3
. OS
C6`E7
:>Ne
i;Nk
u9Ya
System.Reflection
-8#t
#x?
wFq g
/&%G
bB'U,
{St8&T
H#]z
Q|Yb
L>V{-&
M1, % V\
OmE.-
.d;6
`:0r,L
~z&oE
Yurz9
U>?-
,7X#
f{h
3A-:
R'Wf02\{8
),01
4445444 444
4444444 444
sh:F
l ;l
`# R=
z#22 D
xA0o
Hw#^
u : 0
q|*Q>
A9/}
*W^w
N9Lw
.;>"
bs<n
wzr4F(
5IAf
UXkk444#444 444
.&G<
0w:W]
: dl.
uoWh69
b%D2{
z }p
\[~y
xtp"
G<hp
#dryZ
ErLFq
$ZhlA
%3oej
K$B7
dJu(
lh-f
h %4
U@ q
gDxmb
444j444#444
:Bo@#
qLTEF =
{<_D
444`444
444EOJA
wDV6
E)kD[
i K9
Ps2F,N
d7-.
1QvA
@<6C
%bPBWJQ5
lZ*W
]]cu444'444 444
pTA)'
r~+
59"#
&L'mg
}C*k
Qcp}#
:_#
:12f7q
8C0AA5
d7L
nM:3/
Rg^]
,6Xn:;
qzJu
<W|}+
LZ)-A
j61N&
R@% Gw
`,Ny
oBXm
MDu qd
lH{
eSJ*
vJNs
"j~wTg
ZV/R
TJc 9
j&8m
/If(`
9<IL
9kuu
dy9y
iKVv) a
Y3TdLEStYBMPlFQTXghvPr15BT
:@J|
`ot4
#W v
=1'dJ
d|6w*
ALg\
%iNQ
zbsH
@H?Fs4
WJ$ J
oOt0]Q]
75hndaXcvh8g3Vkol6WhFSoGfZ
VF b
rlj\
0M2DJN
K^@Au,
QPJ"
<t]GC
os[ Rq
:u#n
x4O
Q#Vw
==J+444
tmY]
qLq
DV/(
M}4{
gx]y
;4-l
444P444
rmAN
pifjH
@/=t
GSuP
iR's"`
]jb!Z"
)w,3c
k@HJ
v1!>
b(.~
\<)#
444t444l444k444c444A444"444 444
,ktD
<S@_
,8e!
?1 ZJ&y
+ fD
A:F}8
LrZ"
f6:0
qB7\l
'H92
6{bL=
7axwZ
z)K<
qfop
ea P
J|4U
-4spF
6e"M
+8 ,
+Y%6
><jZ
[Xnc
X: 5
Cy~;j
b+{
h4I:[C
H5W2
<my^
EvhC
,<{No
dj1%
4440444
3'^M
lE@VHO7
7mo@
aN7>rY)C
BX-'
qoE0
$bs'
(EPA
7 b6[
?/+ue6
ZJ>,
t]3T
|W2"]
82a"
M)V[
(P
qPj}?
ZOb^~
gzEvo{Je
:t{
T)1<
b!c3
4W@p
<cU)
5G)x
?.XW
0D!p
fCROg
WZ_n
!l/-
(]F3i
z=J%
RSc?
|Loeh
{6Q6
kU!lK
4445444
n<,,
El$`
'Jrm
"m!R>V
RVD_
qL''
Ds`@
i C$
0:k'
r0w
!L`2:
b]2,
3wHq1# 0"
W(+c
83b
cd6_
DBZh
y5d,
w|l,`i
%EC\
|dk
p,9R
5[1.3}
<4y[
c P)c
"t~0
]Jg}O
sEvg``
Ih6w=s
Ja[e
R!xNx
"L2y
vp[MC
'zN?\vY
urv$:71
^JH
y O/
,W_l7
45bW
&TCy
jmKGY
r?c~
0e u
hf>e
'"iz
e.F0
5vR5N X
-20
pOw
4\&~
_9NpK
)>{V
H<mW
+X;]s
jxFE4
1p7
J&|\k
Zj(_
Xlz^
"#N#
T3?h
ihqS
|^tMa
Qd8:<
nMJ-
#rK/
NM7d
rhZC
}T'3&
g3 >
XL{
V/>\
^nLJ
.#.
4Zh |JL
?<Jf
R4;N
B./T
KwFI
N"b5 VL
r'l<
9"^
6!,}2
]bx$!#:
]]9!
T UH
.1 &
J z
~Z]\Q
+CHu
[S v!
ICE8B=9
B<#ge
P\]l
^Y^ 73?
:p[6
R^u0*
^6c+4
Vu)`d
m)9o
28Fa^F
4}VR
0w(f
2+~
F)1[
\,U
2spY
Q$9\~
VJTd
(9cOL@
&pbb
{$%F
("t'
Jnm|
UvTy
W*w3E
o)71
QTgJ-1H
_bq **:
,oBk
1w/\
)7,70
F#!^1
TVbj444!444 444
1? #A
0n/>
^;8d
b`<Qf
\7p;
W}Vmi5
444R444 444
hl"
C @i
k*./Zsn
lllm444'
]=pvzr
SO=
nKfM!
{ ||
U?d
\:tw6<
s6IbRJ8:#)
QN[}H c*YI
y ru
O.(s
R!Q.
&iq<
UuJ$
Fq*P
<6}
@<m;Bmet
y7 J!
KrT|p L
i34gEoCfTcC9hmqQX0SJnBfifhFIpVP
Y100
{Xs3
un3in
Zq=8^
/ h1
P&Hu[
A}6\
#c&Q
l?#
>) |iA
_# g
ubL}
cMEv
]u}!'.
oix Fi
R]t
3F %
$<Na
7< M
444r444$444
Kk}."
R3 ;
aR1Y
#L_om
x ~ !
444b
*HW*
&9MH
zwse
zT)[
c?{Jt
7?w,
qSRMF5
#oAd
5xd,
,zUU
3?jFr
fr_9
AIn6
FZ8H6O
xWS)
mQvJo
NF#,'
MOU^`
TD76
i Jc
444T
C7I(
9DrO
~Hsr*
@6I|
qY-&
@ R
/rL{
W#WNf
Mm{j
> t5
%}3km
tQ*f
e`eT
iucR
}>>:
)k a
4445
4u ]
M ^G.M
FJ@G
s 1gD
4446444
bOs
k|s.
VGVwqo
B}VX
444
444
I\#J
1`
jKZ5E
52TR
h([u
X=ss
fXhIQ
$,c
'0EK>9
_Yag0
@ q@{
kITT$N9
qD[kQ
-|.P
~Pmq
>djZ
1aub
smky
xt 4z
dooJgqH
/%z
M )P
hA=w
K ,5
Sr!5
J:8{"
CfwEw
c<;A
Xv^tPw
&gtL]
HN5Wl
QPZf2o
|[B
s8,eW
}|HzN*
hc4I
SPaQV
{-Y2
siT]
}l<T
$=\0 l
vg'`
System.Resources
NR%6V
R QJ
13{kH
#zz&
{YXN
pE3
Hw=8
aeWh
(E{P
QnWkG
j tGb
$ df$
L=_E
r;0a
)ItX>
gYpW7taCbMNlA5kd900MqZVYgME
;'!A>
4443444
\SRA(}
?9 H
7O{A
y*|r
@t7J
2p9=
gz=J9
X|QfRc
qzHD
*w1We
6[?!bz
H|&?e
&=+Vl
MSW '%
^(ZJ
zk!b
9 hDu
^ 0
bOy3
:cT(
YJ[
tD-"
A(qgn
x:X_
Te/|V
ZM9!
+ 0y
a$q
PWI
areQ
.!2C
Ejq<
(Te\
\.MpV4
U1%[?w
KUUN
^)L<g
,U`R
#+!A
dX\v
C&T1
2CS6
DlQFn
"X}m
O8EW
rRgG
_\{<
.ks#m
&Fe8
qzK0~
:SH$
LM.Fq
1Bc(
N0uZ*2|J
h*Bh
zM@M
qy0!P
8J!d
=~qM
00v{V
=91;
rZ1A
2huv
Z:'
.j }
?%6}
QF}g
esqom9;
zb_>"
:=PFH@7
0j",$
6I!x
aByc
5x[?
)_X
uWXq
.vzV
F,>O7
.N#u
RXq& "5
p[!D
4&a(
V"Xu7#
,tCz
^)?8
:mn~
L)_vN
g"q?x,
444 444#77=S)(,
xTV9
pJr]
aPE
mESP
< @X
*BBd8
8z4J
3 b\%
`:#0
B.kjB'\f
AEoD
de
4J a
IL]D444
& #_yMSK
\)./
EJ&z
Y]YX
qsn
j9E33J$
hcn$@=B
444O444&444 444
T Yc
Js
J]z!
LVG */T
8 'a
j} k
G8%2K
3*(#
e;)B
wSAW
.&z88
3]s A=mS
jpnlq7
Exj
KVI'
gXs5
#=i6
$pSA
cyV"
(~6}
w[TRI
Mwv
|c<>%
*iv=
W2rc
kj ?
^hT#Ai
ibuW
]eOcV
TX^>
uQs
=6,"Hu
gR$ a
1PhsC
a#Zt
! E4
x]`:
E4<U
,+|YrO
9}j;
F$ z
C 8WXf
[*\N
F[.GB
ab{
4;"R
Yyim
dTo
G F{
dft#
444N444'acqE"(D
Xd a
)IN.
[)2c
C"_`QP
A70m
,b gO
=z0.
#0_
7X-y
e[*r
<Xr\
/LWC _
uL!1
,D^x B
<Z=#
d9~<>
{JL;
)P3(5
o"xI
]Wtu-
\1RGf
m)
-$"<
$&"j
c___
XLuq
K{UG%P
An=C
|))PO
) KJ
QS&!
C\Wd+
V6 D*
{W67
NOBC
k52M
~8%>uS
t qMv
4 &'
E4bC
:<\x
* FL!
:,6{V
SITk
CSi'
cKYlN*
Vec6
cu/k
0b',EX_7X
9sp{]
/>Q?
fX,,-
HV68
p `#
_K;A
*TGlcK
444=444
P_ :
},F#D
,ixM
|b &p
GC#G^
}52e
$e"-
;4;
%h 4
<gCoH
X+D@
\9h_
9K~_]
1yH?
,-3"=d
,6ifN
Vn"2&EC
oa.0
!gSPIbRFGP4t7ZB6IENmGbL7gRCNFdCUeU
^'u&
0amEP
Z pC
J|za
#U!
rBS<
uiZ?d7 uR
BsO
1LkC
$ k]d
G&:/
#S<
A:/%;
e,*
bRk-
dVXh
,w;_9
(nS"
+`k
L 8
m&m5
3lRZ2U
Wr|l
RlmH
D[G$
/] M
d_lw
bC Y
o<rU
pGfA
.'[
HH8d
{T]k
=fJWEn
)oN_`
g`/t
Dal@
k|MoG
%/#%
Mm
tsHF
% CG
2mT
JNcY444
-lVv
|w#&
CEb&pG
a+G=
lL 8
^i-0
RN6w
e0by&
.<\w
dJu'(
0y$U(
yl33
[t!b
K+V
\B$A
Hq?Z
3m+5
444 444
`Xd|
HeG3=
a+|T
V uF t
|"QV
f(pR
J;DY
L^xt
c$e|
&nz )dxP
>+{1<
Xj io
88,G
`8.'
Ip"uE&
ho[j.+
Y2Hu
Z $e
1B$Z
IL"+ZZ
9HJ;n
0^A[
O'Pq
hgAx
Ux8n
L3oT
=>Y
TI#xZ}$)
y*tc$
2<IX
Bp@=
w5$_&
?#4|gi~
F]7
JFRg$ 5
CpW7
Dc!
,$G1B
/ou1
NF$)
wG-+
<g{l+
O6f
a04
uRR@(@
IWY@=>.v
:Ts\
cc,N
0KCS
k-g
e
Gp4>
\\Ol
W"_)
aK[|N
'M?b
%@^eV
Xu+(
.ZdA
C]u$
7`)pB
dA7']N3
rfUR_
!` 1
bOU#
Zn3m
)H7 "s
+UBi
Vu8
SG6|
}/r5
M)@HE
EdU|
QQ Y
2u(`E
n8^6
stjY(>
L)q)
av `
.PiB
qoly
OM8 W5
Xz Z
67E HDQm
3t.A
+TWwW
PnO;
4Mw
l8ZH
~=H~q<@
!]|_
?t{S
aFaM}
*Md"
lCZ=
T4$#
F^%nsG
1Rqr
W6}K
N\k{
CoUJ
vR5`A
b:6NW
wR+<
nGiA
Q~g4
444 b[Xn
<vQQI csK
~ -G
YBBu
^PXm
o)n~
J9a8
1 6G
d#0W
3+}dk
w=uO'
@ bg6
7@Yos
,=uM
84${Q
~Y9))w
BW@Vr
mzme
|/\tgziO
pe t
Nn J;'s
#N=ei
T85:^
|=_P|
P MB
PiKr
T`{r
s:x}
,3WV
ja|
Za63
Fq %
p~dBW
yS$+
biVu
jpvc6
jQ*~
([Ce
9z}O
4445ied
3W='
n8[HL
D :
AddMilliseconds
(=zh
W3cUtnIEQcuahIXFvRdRyZFct
>[Z.PC$}T>
/5n#/
O>E`hD
uQ9B
\F+S
444 444 444 444
%tb
8>cQ##4
.& `
u(G
bhSc
_ sX
* 0Z
XQVJX|
ye`lK
NE6(
V -QB
'v;1
(Z #J]
_oD
"ml&,
J/+Q)
)+[+
fw2\
`\ Ik
wviIZ
(ux$
|R%~
?`t
$!8]
bNuB
qJ[}
HM)q
+pHh)
s{Ql
$QRe
Xm_s@aF
S-+,B|
+\Bl
&\ "
}YE_
cAX9
K785
ED[|gR
f+ [7l+,
:>z4
96+\D!
Nx,2
J/t
Mr}Lf
=>M.'(:
SymmetricAlgorithm
444q444.444
fsw(K
^%Uo
5Lh`
`yU
y\e+
*Y<
pJ`H#K
o]BqY
N7s
sdhj
jfs
`yt
zW4 MW
-J9^
N" m;
Wr+&/
GcH;
BpSE
w C
UZxvK
tUP@
E :R
x3Q`F
\zWPx
e@mo:
4@Hc
a%J8
NH\YU
XJ\c
B=
jJ<Z
38RBv
/}6]
_Wx0
m8$G
vl#S
c@pob
.to ,Q
Fv(*o
]gVO
Vwhmq&
j PF
f_fx
dq4EDT|i
rtf
/}0h
@7?'
<6oV
V~}!A
/\JB
o-oF
f_fW
$X\p
) ?8
W~Z|
u|E[
hBOf
Q"i2;
} d6
Z=s6
_Zd5
D{M!(>
1V3%
f{q`
=.
% }DC[d
|<r%
} #T28
oa&C
?Az
VuHe
R_ |
23]2C
1$-w
C-111#
jj=i
Z1 f!
!2$o]uc
y# r2
0 $<
\c_=bR5
!U!T.
FT!\
th":
aThf
Rw=x
5OM4
X SU
MxE[s
G,g1
I|T(\c
g>\0D
dJ o
%N~
RTkC
h;"Ky
+xi'
oIJ>
FspL1
TransformFinalBlock
_$R{D
_Fk^
|IXq
lqRnd
:hHq
!rDrUr~
7@B5_V
;Y 0f
n4?
WV];
M Ul
_}/q
] h#
ltg|
x'Iw
l&[3%]
;D$@u
RLj,
K%==
v,P\
vtkR
444t444!
.FJa82M
*qFG
g+?st
j~Wj
c\&)
!iwC7*%
|A.
3(Xr
F-"9d
? . _m
{[Jsf
=R,U
gHe)
YGB)
?TP'
!! A
k,JD
=ybr
&A(%
KhzT
q15
djNe
a5-t
U\@_xD
0V/q
@o^9
D+0N
ck!Wd
hNol_wh
: Bj
HA5_
XzPY
)M%C
w/,A
lsBFHI7pKUZY827M5k71H4
?~FZDp
810#
nm@n
?!!@F
i= i
agaf
DenS
X U
qR#
%rZ
'4f[
{7rU
GBp`
444;444
qp?z
@,yC/_
U|^C
%!udm
'JM\
vh]Gd
"qKb
444(>ASh.,6
w&Fz
IBCQD?7
jilO444
444u444<444
O:s{f9&
OQsO
JjEn
=)i?
(C o)
NLA
=FKd
*<2j9
J D
?+;T
Vi!\
"ncs
OF0
?&2&
$E6,
MHWXU
}8}g
)e }
nYeaGv1IZpIRGMUNoymvSMx9t
K4(<
B. #
GfVif
zPJ,
z_D8
*(D |M3
nd /
.{tB`
T))F
YM|k%
YJv{?
^_jG
0\%
_tt~
{=]"
^<cy
hLnX`
7j|/
w&->
^FFJ
o'
i]\T
444 ROW
PI\A
qBA;#
==W$r
OshT
gRsp
WKY
4<sQ
AlI)G
b?s,bC
pa F
p.`
,K, _s
?D35
H{K(
~rvp
*S<d
@G44
El<*.
@vqh
mrLk
Trt $
.~\ |
pzoNb
x 7F
'Y|D
+*s x
Sw(/
x4|S
&lO
@}.'
vxN*
]bY|8
ec)K>P
&e7|
yQ VV
pL'f
dE:z
sJ<q*
9A5]m
!nrTJYnGDkef0r3Rka5r9ShgiZp9ZeValu
Gy V
b4,A
};x s`
\<7:
ey_b$5_
Y@fH
@owhM
e8 7
&>QD
V @! j
Z$c?Y
>a0N
?GjF0
444q444:444
NT>Z(
y4kV
] O
h)G
444I444
} i+
M<pZ
*<z9b
YUYH444
^~7i,
e6p0
50ND
:+{S
fT4X
2*@
6i=@l
XU7]
hai8
Ju?ly]a
(oR'
3 7M
;C+W Q
m_Oz
X})H
SMyD
"~ L
b+j]X
P6!j
!ST
GI7-
@Z/d
V{K
RJThW
fpzu
,= )d
K3y'
USp2
u$)F{
Q}uGos
oQ6u
T$WA
HDpUU
~<"(
j o?0=
kr5
Y<Ut3x
"o;z/
<noN
E^IG
R]@w
n9s?s
<drVB
+{MV
)+;y10A(444
uLm9
*(tn
Sg:LD
f n?
$a|]
9js2*
'TzGerJHcBAsKorlyWlgZIqxmVJiST1VJvts7nVF
ij r
d, s
R 6b
:aN;
5\o!
Qys(~@
vS~ blb;y
>qm.B
rN.R
:VG,
4^2>I
dp7RC
O6uV
Opx
_ D~bQ
s.zt
(vki
lYRZ,
zM1U
Uzo>
eD L
; Pz
4u J
xqm1m
Ucdv
u^@*
<k$P
>V11
WRF!
2F*$V
E)yJ
Ym6y
2wS!
G/C9
l9("
444H444!444 444
Dua%
t.>|
_2>RD
`Y]Y4!Z:
t;&v
Ii.qH
&ozD
BFZr``[
$kJS
spAa
eb"&
2;.-
qE<G
bao3
}O<%
BH7wMa
4=!a
W~(<{x
={T&8Y
yi:u-$
k6r]Y\
TMJ
F@xjw
,87g{
9)l@H
^cG@
P5yX*
Th=b$
SLx
bC$#
{2sD
PQ3'
I3/~J|
DateTime
Jqrj
<)!2
vqibf
JV'=-!
]4!FY
0" Nw
j6ZS,
HBVz
lgnQ~
444e444
&Oa%I
^U T
vO28a6M8p4D7epLKDREQEIjkMRLgmSUp
7$@2
I""Z
MUC1
Ryb$
g 5f
444g444;444!444
mw-
))2
k1=y
444E444
7o ]
4KSz
&aN
C[+pn
#Iw-
d"mDX
nGJ,
,^X8
4446444 444
qc'[
)EZ$
ytGwl
9vjPiT
5e} u
,gcNUD
:Ma~
4441444
p.T.{
Hiu?6
] K(d
6KG
> 2;
`oQo
NK-8M
5t ar
8K-. 0
4`o3
:H _
,M,J
$26i
=>G><;D
4|-Tw3
444<4444PPYmnld
mbZSh
#|~x{
#Z+j!
~8|&s]D
I0$3
VOnF
C5/H
9U"l
-MiB
*>\+2
XtyD
@o8s<
$%}E
q'oi
|l=`
444/PPTl'(6
X{6A
-=1J
n}Xg
BrS1
%!!|
\^jCC</
=Je)
{vpt
Yi//
FI[C444
>0) H$
mscorlib
s!fG
3=]Kb?C
GNH"
CSwmy
Y\`c
6(j @
yp[R
#6{-S
T>3Q#
i*Yv 2FnT
HB~
Kn'H
svpg
2'Q"N
vKdLwVS
6 2
8Y0@#
)EK4
ccdvOH1
N,Rm
^4c!`
K6=1c
RM)1
wE{"
qPw1l
"YP?
;${t]mQ
Fu[M
z'#$B[u
kFA:5:!
LIYR
935U
G )>zC
/mxBht
(5cZ
qqxD5&
Zsdc~ix
>~z3
y?7r
zf `
9ddA
\k>R7
$$'TY
rOy{
Mp!w~
ja[=
quY(
/weH
OiYK
@rL_fq
&kq^
4443444 444
x#,d
e7|ry!
2)9h
-y<]
^T(xq
5;. 71M4C
GG|C
jaF
-0S9
sHy>
+ F+
[@3-
:V}/^Y}/
u*aS
[gdQ!O
>O\]
qxkN
@8=@
an{,
$Fr]
Y* B
:|y:@
QO9(i
;c$zuP-
O WlU
pl?'Y
Q|E3
C>e`m0
3$L#
Za3a
m753
~+5
MPd
,3 o
B @c
) \
J"k4
q:{k
RyA2
,MOM
444#ZUY
2U<.jrzv#'
:%RMK
4 ^.
q?W}
E%~F
^ENK
@{[<
444c444!444
j'%C
(J2&
E.
%G$'L
[(LoDJ
l~;-
8+|2gq
|<fTxt
JQP/
W|5A
Y6@F
:"}&
~uaW
Sz_r
uv[F#
k[p%/
9`)k^l
.5W;
}\O|B
WLAM
DQHP
lIhb
}Di!h'
444)444
NHKev
;A ]
\\(N
S}<K
YRkVC
Z- O
444}SUdy
!(S&
$jkiTTnj2tXanezjxkg0z1GTvs000yqRIlRjd
eDsay;y
444;444
a L.
cN
h I3
,X,
U>l
,8YH
I]9H
_,xU
JM]Z444
444 444 444 444 444 444
, RUV
6pH']
k2dGI
v(9]LG
d \X
]ud`
:#y:
8^* j+
'6nTsDGxPSld6nMSZWNPDRGbj7vp14HgUTfcHe8k
`1Z+\
_3qZ.
R1_6
tE^'"
pRH+w
+ Q*
CxMLq
444t444$444
$!|-
HFh,
oS3f%L5
29MVz
'vg1
<b4&
*wBt9
zwz4ys
PtX8kd
L2cg
b 0>
,N}vW
-L_f
w$b_c
KQ00
3"fT
NDd5a
%q _{"
6Cj~NgbRZ
7SQN cN
M*w`{
$/)
~f9!
xA(^
Fi{Lg46
i:Cu
I~~JD
<ji6
bv|
ANGQ"
M0/AM
kfoW6
V!$'~
TN?|
Lq^
AXMg
bs4)
ixp
?j|a
0l;{
QlrCCd2N
6BLXh
hgt 3`
7MKR
+3" [
ZzYI
H^GQ
mjp/v
Kxx
uQ/6
N\oP
TTd?8:Ow::K
?M/Sp
D6,lz
{^)iI
FAw
-T$0h8F
8v/V
6:OqKNa::>P
gmuc
+Syyo/]D
_hZY
get_Now
C_zz
h >q
y=+g
sb:D0
444W444!444
a3 ,
Q7Um
Rbt{
V(plz
++#K?
slcEy
g`UC
E-Se
"Y' BWU
7Ou
u=Ee
#Qy9
;x]g^+*
wQKD-T
]0x X
U`[J
x^X#RI
VWTl
2:UZ
fOZl
O d>
,oIR/v\
.PH"{0
U(G:
DO}2
d"%h
%oTH_
^` *
AraS5`
#4jN4cq`
<%;<%
$!_b
l/d{
"#74
h 4W
+?t%s
4m3ks,
444l444%444
wv`Q
hg`l
MN;f
G,#y
n |
V V(
ZI@3
[ /^
CImp
*c7\
Y$ -
Ygh}
'!4)h
0u)Qj aV
[T_p
*0Cu
Q`5)-
gT)
|.B3
x'an
Grf'
"_/f
/Oq@
QAVa
yJs|]
3jh<
UQda
PLGu
Opy|
xky zt
ukf\
1l}p"
(}g*
_*$-
} ?
%BA{
AZ.I
d4p)
ZvC(v
:Z},
^,]*
444G4441<A]
I9o;
<& m
Lzj6
i|@<)
617G
U@;uj6
%i~
sBR~
+F6Z
ey<\k4
M((0Pz
FnCa
hwB-&
RB~"
K4 y
GetTypeFromHandle
,@??
mfp2
4&{j
qxN~
)wh Y
m Uw^
}pXB
E{3o: !5
x9r|
( \-
nZ%&&
h{V(p
qE)*
[!p*;
`hQq{=
WuHg}
!]]F
N"#M
9[=
_DTixP
XD0G^
)b<!
PvH24
R;
g%po[ &M%
Jj6@3
3.*y
g@9%
wg$7
ASQ#
X;r[
9g!T
gUuQ.
5^sh$E
Qw*4>
Z ,F
;S, uO
444x444^444<444
8=BA
6p8M!
DC-Gg
PNFEJH
sGqC
6k0
l L=
"Aq|
% i00
/|YiMV*
*bz`V
ftTx
lCed
"4dC
t/@=
|dk<v
P+>mP
RK
2 /D)M
Y\iT444%
?w==$5
F+AG
Yd!5V
wzWgPy[
s= n6j
!JnG+
{O%H}
'6L,d
Ll|"
,G4|
7:L;--@
lPhJTemHYSHJK8eOMKfkETRxm4ouXTl
@K.a
LE(y
E;$
HvErz
p9f6
4^Cc
vo\\
ztLp
J*-'
_HDkF/
b=,"dF4
fgbvL
K*p6
#rs^
9Kb<
4yk}
JZ]|
=x/}1
T8F)-!
Z\hV16P
W T<]
q%gF
_* \V
`J/%
MuYsF
&nCLF
wE}
{_ M
V>/|_
f^f[W
jnlDHd&o
caV,#sXp#
r9K2
M-*p
%Tu!
`.Q_
+^Qj !["+
v<"\
3fs}
;p5Rb
s)FuX
a_Q?
)I%g
1QD?
2Q>{B=
_{7rd
q'!t
P9v
5,VzE
\[mH
99 J"
Q93
TzWVM
pTA7
$gwS
3 {M
|3 J<
B/n:0`
Hdv\
:~70
SNiH#
0po
g0e
0OuT
!CS4
^GwntdK
B8,5
444 mo{/$(>
:8IJ444
+Cr6
(FI]
"*oM@9\
a W0 n
\wT8
5#(QF
Bl7fb
Y0 }
2a(1
XgI,]Q
]>|5q
t})O
9"Vu
%Dq(:
8?Vd
Og6f
&@ {/}
9*f
p 5I[
@6^
56"*
[m6
t(/z
KflG
#9{O
J #P
s;c$
?j@
bzX
%rF
oG})
Zc?)
4& W5
UQYw
tGrf
;)+!
gZ"wf
-%
HZ+gRi5
B {
>](D
7j*3$@
\B)^
444/444 444
0 !;*`4
J/ &]
Ird:
EY M
hH>e
`[KF
wN +
cvghq\
`zO3
R|Gz
fn? ^
w3!$b7
YwB"
+aGt
&Vy2
~*.*7
w Jg
+~
\ <?
bA#Z
Z^r`
.' !E
uT5-Is7
k gz
@3NE
'{+v
'@T\
d6F
@){Q
V[60
a1DVC
Op?4
iC8"d
zlv[
v]]<
of0D
<zbfi
_ 8@9
OM[.
X6 N
7ZWn
0KIn
HzT#
L/Q~
2jL_'
wzKsx
fjV,
yxF}Q~2
^A ;
8M_/
xmu
mF8J
:vdv
NtNp)
coV'K
S=MW
Sv@R
w- `
7GnH
a$=+
e]w~r
ECWr
8 Bu
m0 @'S0B]#
C3k+1-
M-F,
AXX5z6u
((V6
(1y
(t/c
[Xyk
+?)7
\ $)Y|o
Lv1E8
^ o-
_A_w
$h~F
&l4[
XVe/
DPn2
N"8=
,%l3
McV'c
UbKq
,42@
sa!<
,'Ibe
_:BF
b)fM
mV8|pX
WSY?YVO
v=Ge
@P&Tt
5 *DB
vm)p
$aPc-
X>$
M]WS
^m,oSB7
b3(?U
-cn=
a!)\w
5v~N
zR`+uUD
rc)4
`cG2
xx)R
S],!G
4440444
; rqA
444 444 444 444
F[*xi
B_h|%g
6A=+
TOMH
VvLC
Om"G<k_
_p'[
4442414{BBH
n uj{n
-1 I
qG'd`W
x(e%
{.N PG
jXyz%H
H + "
s,f;__
l][a
f 9Z
OsMY
e+<M
E8c
8myIY
U '`
`Ak&
5 'S
2%0W
E0(`s
hjx4q
6jf[pP
yt 0
I\ Pn
e)Un
P<_4
9&e
"(}'M
5y| N
\"/sw
@ 2}
6rV'
Hr 1.
~1w|+
t3 <n
=kA,
wVc6
m'tY)
<g<qAR
RZx;H
YM$B
^zNJc
XKV>
v0rp
!!*n
HiG?
%ul :
Wa5<
xzl|
c'JBw
[B2[
[i6dAH
IsV :
B3/
Z1Ux
rV]\
b?U
<hE.
26QM
fPi5
MVGe
,[ZO
F}pS
1evG"
8Fo0?
[6\j0y
j[Q
'Zdk
0{h[d1
KBz` B=
+3P(
;&+
RNu_X
l7Vo
Gpf/1K
[/TKK
,:B>
x6:7
Fw;m
:uvg
} =&
tI%W
kX3
{}EW
(w,w
%^FB
eZo
T=8f~
@]*xj
Nm/l
#&dX
n' =@s
P%-9
ex l
u7(v
Z my
VcK3_S/
jRm+
x8b'
v0&m
~[`*'#G
rZVN
rny*
" Ku$
.W$8
jlp?
+%@2V,<
|Ao9
Td2D
Bm(nK
s+/Y
<#iI
e3Oa
9` 9
dp[v
tvL rU
nBnrbM
*0y88
22e`
9 tB
64Ll
mKr?9
Kp.i9
9B(5
A!($
i-^F
f+ow
4[m}
uQ%8
6Y9q
X B
Cr y^
7z!C
MA6}
?=$^
IO
@1hL
meiyd:-
y.Pd
0vSn+w
Rw9Azf
I[x$
"R:f
,Jz:
Fk>%PH
OsnM
vckj
Dl@hV{
jCOA$
\L`?L
I*qy
*+T
uAjs
E&m
mGk6 e
Zbf0*
2F.A{
# 5`
<c_~
H/ ;
0e#W&
C.eJ
P=Xx
g"6Y
[IZt
q=@GE
iwMJRi5
M*xT
n%O
Q"k V
`;@x\
{9/k1/V}+ic
-Qy
Y95;
[,V0
:8+'
yE
? C>2
S!eWb.
/RPB
V?nt
+<)8
gawOqTltY
vY w-
-?J
YFsI
!/V!
8 d[
<i<|
\#&w
WBEeHDN1vqnrYAnDRbnIm0
VUbdADSN444A4444444*444!444
C4Nd
%L'
C2$c
F/s[
UoNg
0d 1F
VL S
b1sc
d@5tv
*Civ'
oO31
]a]y
qrx:
sh |
8o]23
7or
444->=Fk857
$)> 54Gx
o?FJ
~:0
}r$
JmB[
uIR
xo?%es)
7%).b
qyO-b
q(U
Rez C(
hRi#
} eA
F!x@=
+ {Y}}
5QcyL
lQL-
s.V =
e-Oa
xqiZ
*De\
*De^
!+;j5L
X=i@5y
pF"#
y!%}
4rf $%
GL.4X
?*y=
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
cB7QN
,]oF H
RRZ<
ab#:
e&6Qc
*)Ob@
JJZUko
tpX*
DP f
t"~#bt
@xUr
"O/L^n
4nE8
Eo}WO
!s x
K",:
!CUN
nh=?6
b%yO
jmS ?
444+444W444
gus96H-
I4 q
<;FL444
2$"b
/NJg9$
zD1W
Uu@^
2_3WI
eX H
Xg.*
9JkT
py0l
e4A?
*wnW
0|"8
%oc8ckY
Z bS
VU{,
BiQC
)#v*
KvVk
cq;
yiiS
\P`/_
- *E
x_nHK"]v
z 9&
[t9b
dIVsEFLSr06zl7DtqhA7qYe3
fYB$
sstp
@DWC444
\Zq;
?u NwX
&4pV
$%)'
o0\)
N=y`. =
3o`v/
v!\++>
lVu!B
,fAnZb
i!c]L
E.)8?
#[j<
cu @X
uQ?9;Y,]
hj]%g
([|t
DBR
>P#E
J1S"z
(ney;
u[&e
^CRm
get_EntryPoint
4442444
9Y6|;
_OPz0>x
j $Br
u| M
Do#l
~!b*
\!h.\
w6CP
_ ?@b
g-cnJ2X
`Kv"Q
a.\2
gbPU0
D9ik
5R_"
.|}}
Bi`-
,\#R
mWKm
}~B
RHZ#P
k lF
Uee@
yz1#
JP"^u
bWiq
YR:.R19
NSk6'.N
v$i,y
]}=!
l1RQ
EQ}j6
A%1"
*]q=
e{-D
a1Ohx
lqB1A
C-62
*E;2vjI
6K|j
oZ;0'M
S)3s
e<Dp
2w
kM>?>G
DEPr444'444
1qHO5c
"r}J
U#0P
28\H+&(O
c3F`
z}~
F*p))
0oZz5
;0=%=
t!`$6
qO9Lvl2P9Fn3CHM0anyvRLt
#0rL
zN"eJ
;t>Em
tQ0,
q8qa
$~.0yz?R
oIeH
>n[K
7\q7
ZI-n)
{A3m
3+[:U
Q g{<6`*
sN:IW
\rCs4
Ioe|
03Hy\
`}'
!8H[~
YR{H
gbyo
@IlRj
pt.@&
Bfq_
F=%U
CKuw0/
}<g:
+? \$
&>_Z
b{jR
Udc%
uUU <
VL=cy23)/
C'RI
0Xo(
Xdp/
f8jtbh$
2'y(
jTIt
Zmm^
[Nr^
Tqh3
56Xq
s4XF
444 ABM
,7;J
2K^1
A3* _
4440a^aTWX`
9VauEDx
0b)L
`5U!.
8D6%
<x]]
FKA"p
rqxm]
w-0??9
x?ri
-F_$[m
ID76
TzzQ
\Ex5
"[]k
KhUVXT
Y:e;q
#>P"
f(@4
M qR?
l Id
2K 0
wVkEL
=:@D
JtBB6
Bq6.6
^6V:(
}.
rZ?narA
*J5CV
a|C#
< Quo
kX/k
pjD{F
f+P)<
d,g#
: I@
`,R2
\{iL<eB,
,cuqL
A8^+
6WY0
SsfD
sJ;k
3WS@
rSYT3
"JD1
#sZpW
F%`5Z
*Q =l
)]wp
"&}
:F(5
KlmuG
@"s1
vPVO
lfq|rL
&a<7Q<
j8~R
[Lrh
uvI1$
*]\
tp)S"
6h^
$8Al
HSz>i
dwb=- }
sCLa
wBpm
gs]$v
6!d,>7s
^3f!`
^nBr
( +5
Paas$
Jp7UL
o?#k
]s<d
OC z(5O(p<C
;&^.
Ope.
[z?ly
b{=3]
/xDT
^il:
:(;y
}+;@
BHNg
NRiu:>R4444
oF h]
Z0G}EB
CcGp
=|Q/
r1ns
fWh
rn^!`
df2.
y0}2
yHYa
!##v"#+
~1 2
s8aP1-b
!u3-
R%b[I|
_&QZ
YX5SFZEE9uJPRAVAoggRHy3
g AbL
e$&X
!QXTz
Bp[&
:/)7{l
d)&=
.JT)
,1c_"|+
J"1<'e
vY3X
`&_r
z~ k
[HloT
B~MJ
~v]i
444 _]Y
(N?4
_ $0t~S
w8j
-y~}
<#' ub
$Vjr
\/SD.`
pW
V|y
b'_+p
px.O
qUQ:
=-]O$v
;g/R
[H0&
Bgvm
bwDX
1(DA
s+Pdz
7FWN"c
s:%!uH
`ktY
={n'J
=_Te
#4y(
"ZF1MD
X31cl.
444 egu(b\O
a"5s
;b#|
}zfRUI
dMT'=6
R(|^G
q6'Hr
'z5D)
)e?!
444N444
;.@>
'$`^*
.;G B
49Tu`ao;EJ_!444
*q!O
,g%
3Wl
}ws(k
bBxX
GIRw
V#81
n6 )
3c( 0I
s}[u^
+Ff-u
JKApv
ShM~[m
O} ,=
MJAg
hw\%
Y%[v9<)
<$"e\
>i~(
{;d2!c
444 444!SS_V79F
0Fz
C0eo
|xY|g
2Osi
2JWg
GOs?
E*;v
rP/)O
yiRi
2J{ 6GI-+
76=762,}EC?
2 ,;
GW>1
"yk8
S4#
T_#G.
enQ|:
*4,6
s=A$
#sQ$A
)EdL@[|?
tkJ1
444 \`o46;T
*W~ui
+e]50
tj 8'
~K)a
|epC
Va.?@G!
7'xD w
JTO/
C0 5`
2z%3s86
3bK
QTS\
?F^b
3)'B
Jm+`
!;;c
If,oG
5/ {+
3MGU
444V444
:TIJ~
<[;
{R;H'
4K(}BU
.6 ~U
aSr0d
t>$:e
"g&*\
;1=k
\k [t|
#W&$N
u\[.
W3XK
T`or
0 !f!
{8 Z
cTcH
,2e(
$Ab+
O>Dq
j\9y
Wjv~
C3|b
vxcZkc
[V'@
MxGXCLtL D
]e|8`~
`aly444.
XV|!
-B N
J46a4
5R0_W
.[*u8c^=#
=?SE444
:fV
WZl1&,K
xxe
i.kK
444&38QgAAT
^<$aQ
`/)
)S)Ih
iT<Q
hiu)wp\
Va\?
|maa
G~Y6
444b444
~?@L]
;T'z
62*[r6 {s
)lGi
3lz/.
CF Q
YR^L
5~SA
DEe:
*
&<f(
e(t
444_444
N FG
9XsCFE
s=(|SAM
u!47
_3CG
X4~2t
'/g$
waVV
F0rc
|2Er
:Lba
$5v0el5RqdAKKKqXydKKfQ9PoGbV32IIzqhaw
xv&hy
qDT^
jX~K
cUXl
C;U $
w@.Q]
6R|0
vvC
@|ct
7L_6
\)X6 5
u%mI
RITPH?-
}WJr
qT
X$2j
&Le6
kW 2
'ALE:
&s<|\
<?c
444g444
6 d]
#RH
afuO
:LO#`
AddRange
WvJ
.Sf8
F Ey
u_GT
l*@ 3"
xR><
mA;q
>|LY^
e^b_|[ ".
y;1^
:IyY/
@>]iY>
i974
$Yu^
*x\I
Y%(5V
Rp?<
.6BH
o? {
Mz #
QnM|
[e2E
f6=
5M_ap
(+7o
aY|7
^[`.
do;B>
c6a}
@\cYa
<'u ;\{m"g
3 b
^]i7444
nb@r
na z
9(c.m
Sn7B
4DW
fJF5
R`06
444e444$444
Z)f
,v-Z
2un
C/=KN/
O6(({
4<bU5*T
:5#n
lv%#
"SxN
K<Eq
<Lhe .
h>SE
7Hk
tzr
+ i}
) e91E
VbL^
&Q5s
D.io
s\W+
_oL#
fJw7
PpL +J
"4 nH~
7tfL
iZi9I
444 PJP
`MB5
=GhS
w,~H2
Wqg5L
TI)Xm
" }-
GJIr
8/pf
$hz)
keM7
~n s
=v M
:hr)aJa2
F??
!Lj.
AIVfJv
,*0B
! G
OrIkg
qPh.yt
ehyo
Yf Z00
uHRs
KJ=D
Ay&)
!Q4)yn
S:) dzO
R6mC
!/}N
0T/y
G(-!
O|G]
+ O G
^b*W!
</Pva~
&M+
,M9r
EQq"=
V:M~
a#II
ve ?
444A444
@Z=y:
d1T;3
0U_V
+9n1
8.:T
>[O r'
S(l4
|[V$
444 444
@KOu
-(Q.
U=")
U|.s
LHU@P
KFa
99mA
i>C;
o$[D
GS3s
{*%#
4y$@
C~(
xd z?
?t*z
*)t1"e
;ct2
J l#9
Mw:(
BADEpot
_}E?
~/"[B
X_%$
/U@D<
iV-3
:E$?
=fmH
Xa
Bm3"
A#qP
N?,T
{B6e
?Xyt
d?FK
#XE2
Vj$f
Ww^R7b{
M3zm
!4d
;Th0
F|K4 M3r
? HU
%?%)J
u6R1
P/Hf]
q 5k
jpXD
T\q/
0ke7
kl?p
'O{ :
' g=)G=
]Luw
qO9
k8,v
uSP2wY
-be0
get_Message
j( =Fb
,eXd
f#r5
~m]-6
F/">}
ew$M
XY
:LLZ-
Y.*
DVSpy
IN4o
x5B,
';da
w)/u
lhPl
CzKd
9c-brP
Gjf<[
$.h.
==)
HN{G#
bnS Rw
6Z&D
x=*K
zs3Y
Yrate
4442444 444
;icE!{
z82 8b
wroOFs
jjv!+*@
zT%@
s++0
yjRr
Q"J)
Y)?MuK7
|xLl
'y5R3
E@C~444(444 444
N}X
Tt]I
'Ys
x^!7M_K
Fsp6{(
1p.d[R+
45l<]
c,oQ
q _w
Gy2ZZ
ikz PMX
~GILg
)f* `m
0`V 7'
s7e_v
D>h)w
/JOX
&<,@
Rhe`
&<,L
nP?
cX$d
U m6
M@WF
lz;
>oF403
hHR,
LEK+KDA
*4A(
X|4O
Q &smG
sJ>w|
401ig
z8z
qil
v`%#~`
D"OV|j
X i?p
+9 z2
!S&6("
V| S
>Y*xt
i#(*?
VH`[
?&O(
eTO%w
?O9=
)`uO[
<S6v
E?vH
iL w^
X{.a
uO|n
lNt@Ez
.~mQ
c;L&
0`*g
&1)j
)!4D
bzzV
:(55
~PP!
VT*_
F!m|
&bM?;
&`|CG'Bv
Gl)@.^
c6]Dd
f{A e
V)~~M8
!\!i
,p=/Z
A{4 .
PFZ
GE&CD
M8C]
3o0w
IEbC
WJ;M
(y@$ Gn)1
< Sg
z;g|AB
j)')L
\Y&B 9X-
ev@n
$MD.
Fqy |
5(=*
I0,h
scWvc
Ok"Z?W
hP R4CS
Mo'O
8x:-
]!w8ZS
isc_
64mI
j]F
-^WE4
jx#20
x!y;
$Fj1
},-?
Wz> Z
p-}L
E}4;
8#md
444X4440444
aF)
`R%Sz
N=Yv
aXgEy
z}:&
}ZIJuU
& ij
'^)R
<S
G$}8
70/
$)Q#
h$%_
Skc7
_b-
O<mT V;
i",{
rTlh
zg4]
U [v
mi}E2
0*>q_
Q^[_
:>AK
R/lXx
jy Gk
$\kdR
)A{f%`S
_7 -
vNbv%LZNl3=
h5bRZR
5@G~
l<O
neEk
:#9d
>\{c
J9x7q
eaoGdKAImiYAgfsicsAwvpL
l!A
h^v[ P
h<h;
_]d>
W9!,
\c0d
FL W@D
F>eH4
?t $
^j}`
:woM
HR{P^
x?[w
C~TWd
.z_[)
&B^R
zd+Y#
rc 2
Jnp$=r!7
s{7L
G?uY
(ks$
TBD?
~Ywr6
im}?
=a=f'RdX
J_fN
fd!c
V+Lr
=RMv
n,mvh?^
T{<1
Dl0,
qG5qqLeiTBF2cqSEo7rMSw67mJeZ
7rpG
:>Q8%&6
6 <#E?
*VI?
^5C$!
H/jG
vn`'
/@d;
6JiYn
6Gu.uaSM
>FFl
Ba /
]TV%+
B0~nj
\jQN
WzWw
5~fZ5
EB6
!p<_
_ C.<
(sG&[
Q?xDfjY
S>>/?
0Iy
ikxk$)C
y+pzv?F)
(9WA
*|H^#
Dv]!
wa=*
3~i/
n2 (
hW/$
4>Z|
f^%,
NV27f
|7$S u.>
jjk4YoN
6<'lq)A
Z^ iliQ
_u&A
|{[F
:X`U!/
<GS?
D>DT
i*ST>
kQLX
)mNfj
CA Q
@AI>USS
+r|e6
~5B.
`<qdu
~y0U
Y< u
8TQB|
IM+u:
^s$X
.[<IM7e
-`EW
R%+8
i7/Ap{d
l#WOW@
ISQM
,*_(
2 % r
G(|F
0)d
'YPk
EFS/
6s ]vzu
{+ad
}qGO
xR*7W1 3<
MR 9
rZ{o
?CX1444
Z7~<
Ts T)
#^q2
$x$E.
iHJ2
bRW4
;6'@
8`'c
)E,Z
2+SZB
phem
?Un'
oB^w}r
%U.,
C6FZ.
.>yy
~Q ,
9")
o98MInY@
z)DC
TG$d!
p\|t
uE"y
% {_V
+`==
m~ b}
4@oE
`+ 7Y
odE=
=k)%
;72#
444 UVbb
m-Zg
3*n0
-Y;q
BeT*
x#Z/
%KB!
PaI5
Py R
OQsN1
^06z
b|i[
YxtQY<
QL6>v
GZU+YF
am`eB
_92r$%
vZh|
83_R
K xM
XXl?qw
l Y0fJf
"X:L
444 <;F
H*I{z
GI9
`N+6
{rs>
9Q)eX
&SzU!k
~lh2
V'|%0
P[I~
444R444$444 444
XClF
8ZG
OjXI
gcFc
6WU6
=0}A
ev<.W
;69m
%eMs
4=ak8
u )y
P=OB
dwhI0M8,e
iXj
7J_0
a<%L
w{k
zHdQv
60 >
<=JJ#"1
W. Y<
V+l`?
-\24
fw=hAK2
39=oG
4447HJR
a\\;R
nHO9
IgH7
?iCpwE
Vu(}
e6qJjRDHkR17nUy3DH6gOOGV5
PY^A5
)"mVC5
==e5
|~7}
yF rK
X c_
T`y+
kkuk%"0
<-cs
J~<
EjAlc
J3HQ&
:.~yk
h0A+
cF9@X3
n,J@
7D/ ym
R grI
m;k
acg[
,>f
%Z!%}"
P /%;
OIZ`
1.'<
$n G
/R#:
9LkZe9
AeX+
J<zw\N
Y3x-
XA2$
5UnJ
;rpp
xT/5
X8%{r
CLmb :H
k;&TP=
l$Rz
B C
s@?t
Q\R+
Q'r@
YP9S
BiNB
mbwEADvXwCA2I6V7CHQA2vgWbubY6m
MVI8
]{y pO
Cy7G&
9XjUxjK
om$2
7&0T
Xc5'
NX!BR1
set_Key
!us6LKnceOGPJATw5ub5BKb5pAoHeSKE0L
STo[,~
nFtV
6+`DCCM
=A/h9
4w:'
_ BD
LHWs
AGFL
L.IV
6`>nO
W&.f%i
3?^2;
W0H+-
dhS}
gh* ,
a.q} |
Wr:6
{~fPP~
E[`.
S?-Sx
B! )z
444y4441444
Aeg)\\
z)mi
Z3Hq g}y
'^c+
xPJE:_P$
D`VnB
=&H%
acs.KI`b
sGi
]FC
-nB5
Os`v
oDFvqBcL7OUsfh7ltLN8On1H
xox]
0!$,~
*{UQ nU
&.B#
2DYa
B! Y
+vGN
HI`R
![[i
h<` +
zGi? A
_QNs$v
{;vR
H `y
%[='
8LzG
gjwI
OHT=
m\dh*
vL>U
jFd HG
ilNp
Yxh{I $
*}G
#a'`
By]/N5
&1se
Y@OR
;&bJX
j2x\<
SXw\
K!e
7A
!BJnT6GPA6My2obGH6DJa4LU6k56iYXuDS
%bYrGNXwLEqQbbmPhsyUUjnJqtwiDzLOj2VrWQ
LFvG
Vl~N<@(
D=!j
qHyi
\d%xt
G<vP'
4,>L
DD0s
]rxS
Wzrz
Jm/r
Z4loww
J<N+
E4p_
D!%x
RVMX
C6d@&r
iD8(
6)&CRZ]
J<V`S
>kg`w
/@r{#
Gj'g
_-#Yv
k'7DYY
`UvG
{'~
yK3?
YN}Q
0m9j
444'HGNT54;
~|lR5
] ]sJ
%T}-
Z[/N
"mH/A
7]x"!
"ME)fS
$h&C
6L /+
Q` 1
q3D~R
]C '/
X0?+g
{|Ll
e'X] b
x)U!
<~V
D~}Z?Po[
H=&Y2
Al-
(ni;
444g444$444 444
k&`A
q}Ba
yi+}
^L{:
)9]U
szy=
-yJ~
I/Z[
'<5^
==H~"%8lDJkOFFS&.4M
Ysy.
88 zD"e
:f?m
>B42
9u`
+K1 i
wRP2
rHOdO7k
&&: !
B!z4
LPiA/
\zv\
<)J`
jimH
4n Vp
~k,`
+?d
444@BDQ
"Mg
G# v
444L444
$w
GzK:s
ppZe
Y]XzxaHU
Hd~
g%&S
Q${(
/+ |Dx
vVQy
C~8n
Y[{i:|
PhBi}
>)*(&X
DKT%
5Cw!y
m&$4
}45~}
a){:
tttb444 444
dR\xE<
wIaG
JZU"
#ECDmvm
i12 Ve
-C |
<jzW
c.>]
}giZC
Ig~`
V|A=Y
~-I\
w@Z3<
Q22T*m
rxAZ
OaBxTZ
&<z7
-fz@
;Fgd2(
zTz^
<H5k
9Q}wy
MethodInfo
jD,0
>&mu
.EpN
X@G8
$=F1
zKt1i2
,jlPUts
//H0G#sC
X7]oT
&|:
ADQf444#444 444
o05j
V"u1
hf z
`OLr[
+0?T
@@Q
UDTb
B JS
Ty_j
;$ |)t!
S-R,
o$#B"I
V7f
Z?AT
{%$$
Tb_7
444W444
1C{N
2`o1
$^k]
tf \
FW"p
K|=B
vtP*#
-Q;)*!R
Zny3
Xu#=9
X cd
y8?/0
6a22
{G r+
]DM]e=
!\8xj
[IV~>
rmT%
"ccIBQamiojuPkjK9sNC61HQMmhtc6dRT2R
X&q$
A%;
6OD'.s
l_6*
$.Sg
FVp@
P.{D
=Q V
```|
O_IZ
h79V
F<Mp+
.6N[
7Uc(
I,)V
444t444(444 444
b Md
444 88I
j@R*O
N^T] k
aJ|7yX
lf[7
l&3f
3,$_@
%TX+
q}o~
wsgR
#m{8
P]HpH
[hrS
K 1lPF
xAYwV
Sl$8
Yb #
.l_`
444s444"444
t /#G
?&tGd
qg>Kw
^~SQ9s"
S0?@?
xe)o
G(FXf
5!7&
10N6
$ [*?
444+444 444
e%*T
` M
TF^Z
444 sqwE
I6grpD
>t[F
76 CR
e/ 9
{$JfK|
JG+us=
zD v
e`:)lX
]EJ{a
yh-D
bH|%}
j3 2
R ''
huIw
h8V<
{g]e
444o444(444
kZlu
C~}o8
E!k-
T{1K E
/-%$M2H
FL/V
PTsO
Z #m
R*Bcu<
W Ma
hT"T
SdvD
+4l{E
Q|9g>
R A6
_''Rq
;>\f
96M8
BD$#1
89Lm34D
?wYh
K1*4
!{S*
N4<:?s
o8{c!e
:d.]
s%y)
Mkw"_
wX6K
G {rYd
f3.
W(&4
n|0*
<G82 VFW
b1 7
V=We
o@A8RG
~; >
qsa
-LH<R$
(|cU
$^S!
PVC*
s=xK
b| W0
)=B@
pk 4z
bs@
\y Y
c?Yk
>i W
f^s` K
|}I1\
+a,+
GFKo444$444
\Qn2-GE
~ !z
4j&
sg~l
vnGWe
q'~~
V^w8h
Dv)cx
ev`d
h*hmQ9
gMN^
u?!n
444D444
.2BT
ljp SPE
|BX
a|4M
>in)
kQr*4E
o8fQ
'] a
-rA"
444e444"444
'Nf3t
IO 7
9CpDP@
!GREu
iT$@z
P`+V
(F1q
y}&}
x'x,
Y)Xf
BZSq
\,UC
&w `
,vZ(9
BVw9
444+444?444T444h444p444s444w444x444|FHT
OHMA444
hho6
EI9S
2-8-34VZ_K
k00X
8DC.zL!L
'Zyo
cT%J
W ('/
q I|
GqO/qo
1{E0
-5G0
ok0H
)co:
'x3t
o8&u
30]u0
gR/+
GgzR
wA0
qwpC-
j`*{
;"=;
444O444
.;p~
gX,p
EY2o
\bJ. P
L?.;f-f:
BZ3
X;$zw
J&^"
6 t(
7zYO
6 {#
*bJA;fw"
= {3\
444 QJSg
fEJ*Y5&
~,,
#`H*
B=6+g
G DR
*@40
_ @9
]=Re
:-80
KIrr
+h\v
/Vz--
'>^H
\Yf5
NTq,
_@@y
w4q6
eV8]
S+$
7^Xs
&c Z
M?j2
L6 R
BFwt
GFLM
mkt$K?0
H^5m
rdN
FNY=
e9.<M
UNrT
l)\6
f XL
x:\Jq
=+9R?,
`G5(
(5vd{
8(0g
87
Lj2`tT
*lyr
%E:S
{g%J
Z>"n
9vL+
c8J,
B V1
# X\B
e Q$
w@&cd
fy.f
kG )
;]5B
(A?/\s
'R]l
<>$0|
xF3J
}8ln
V'%|e)J
DtF`
gtx/.
;.{B
R.8/
Riw~
rLh3
GX4\
1`|
GHR@EC?
AqzO
bx4P^
Po (c
ETs8
PCsX4d8CXXh8Jyf2GGN1AHG
^ H $'
VA%h
A(Tz
eZit
4443444 444
7c+cm
444 444 444 444 444
NnH;
8}Q;?
EH0V
,4u>
OILyg@N
HFP:444
Ow'L+
arK!
*/=>
ygz)
b.
<G6[MtK!ed<r5z
h;0;
zEh*
)$tf
iL:D
}:Vi
t P]
O2xN
$R^uh
F\TT
Vx]Ez
_EhI
G2<j
H`\n
y 6H
4S 0P
Y`THLu.
>8#o
0?k>
1?__
` C,^
System.Runtime.CompilerServices
I}J=
7:jp.
/z2to
YD0
2, 4
uH9J
<DN<
c}r
7!4dF
:gj d
@50);
YJFkT
D& q
] ]Y
Tcpx
='&{
7"Uu$
cIn.
u`*,<
yyW(
{EejZ
0lJ4
>6U%+
iv O
])KD
lp&QIM
wpSX
` /\
5t_D
S?+}bR
444Y4440444
6..?
;5J0
E<B2
W'Y55
I|HZ
7 jZ
,+;(H
w)|i;9
54RmET
R7>I
j@p!
pYWp3NQ
ttNr7
\#v5
^R:k
oFu2
fQQSuh
.IDP-YT
ibf'3
^rA
a}9Hm{`a
`o?I;L~_
j~Z/
&\_R
lAY-
M,eu
u7v\
: qd
neeK<G
O=5K
_1<h
z 35z
M<1p{!
(4]Cz
Z zP
gPHK3
S~&
2u8~z
w!H]
AY ;|
p:8 L\
R 1jz
0Z=v
`M14e
<z{)V-
dA3<
C#V6`=
0_ E
LXQcW8
$[:#U
~\(/
*Ha
!a o
']!9
=I7T
vbwas
<ln
- Ngy
G&*]
djh}
Y^^d
%oO.
nV*6
iktk{
YOp3ju
}6O 7
KQR#m
'&MmDL
k9CX
;Lnfb
8$FC
IOy/
22g?x
SJV*uq_
([!q
t?X9
GL;Qx
d2?B5
'_;1
cPYA
I6#hM
1YO0
7?h^H
?kBF
:st#
8_e u
8Z441F
u{DZ;
=%)@
} I%
>`tO8
LUQ#
&CU4
R;Z"9r
b?9'~
&`G(D
/m!t
@@Y{
lx9T
gxVn
372BA
iwK2
\\$M
QVA`]-
F)-e
\>[?
|cX.f
_d[rj
`v99
"Hf
0^Q;
ra&,w
a|5QeN
f}*=
&f+zCoZq
~p &
6p"$
[9ZF
#RYZ
"3Xy1PwNdP0VbL3CckuGWjmR85JNSGVGyX9
)-.$
KWc:
^82 e)
lH]Bd`
_ 01
M}?*
^$rxvz
6iK2&
Csd{b
,W g
e44YU1
gb?|i
J$o|W
v4.E!|
}*$7Q
b y;
^3 7
|r^<
uj]~H
lV,{
7:Xy
3I WV
v\zp
WhZ&
yA8
9f!a
8bDv
bH=DX
&7f}W
u V7SBi
444 444 444 444 444
8OL
4]L
w3e=
r-HM
3G y
444 NSlS!'F
Kofs
W+?O
n7_i
nDoS
g6j3
#zX8
0o$o
{7A7M
@8AZ
-yu
O]w
.g]o3ep
9*4
T$IYf
e=(m
'N_;
G]Rm
ei|q
/'/
ss q
}R "
SHY[
IEnumerable`1
V9NN[
Pd!6n)
OE8K(
YHeOmfoIsn2p4b1B7FI5kUaa2
^y{
58>l{
^s KQ
E2yI"<
a"B$.
>O1Sk
X>3n5
i4 ]
.} c<
t8Y(
1Ip
wi X
v7)fu5
Br<MEJ
nvm
>$n_@^
II@`
q ]
-Pkn"
TWkp}
a{Ql
'lL#
F~EP
:_*V+
*WBr
gh=S&:
#|7(X?
C;.K
|N]
k]kP
-U b[J.
]Y/Z]
444n4448444
hv_4
444v444<444
]Z}4
`}eI%
bJcO
7j#2gDHN
MLNx:
P9[~[b
$/R]
Bb*]
v^(_
T1UC
WlY1
$QaKH
6L5[
_+Oog
444O
^izqP
g{.S
v>b rz
>3{M
Qo4y$
_HdN_
0}]`b
S6j)_
4twp}
d#6!e
@zB
R Z Sb
ru_ x
8^
$"2
NM< v
C4JcU>
I\p.
12L J|),f
kknM2@
F?pS,
|\@k\
0OY0
ljwNzb &
System.Collections.Generic
I pE
u]uKo5&
a6(d
E6:W
.&XWcx S
=u[gs
CMA-J
QAZL
<WK:B
444]
=^=g
:=:z
JFNLg
H.oJ3$h
7= QL
?a#.
f"cyU
%72{
Hr57
444$
#]i Q
jiJK
"m6g
2{/R
J;7.wT
:~Kq4
iwF
y|q\s
b_(@
FzPMr85t44mw6kNeAe2fqgcUG
S<b~
N},~
AXif)
4Y$ e
\)>U
(lr-[
<j]@
5 X=
r&LV =
>ZI[
h/5L
(*k7
k&Q>|
4fS.
lxKg
Qkx8Y
5n#@P
4441
%R8\>
6u5>
444 QLZ/7;O
tqt&!$:
Y6w_Xg
vG+L W
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 15:37:17 2018-05-18 15:40:10 173

6 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 15:37:17 2018-05-18 15:40:10 173

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\tony.exe.config
C:\Users\Seven01\AppData\Local\Temp\tony.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\tony.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\tony.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\System32\tzres.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Users\Seven01\AppData\Local\Temp\it-IT\tony.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\tony.resources\tony.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\tony.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\tony.resources\tony.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\tony.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\tony.resources\tony.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\tony.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\tony.resources\tony.resources.exe
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe
\Device\NamedPipe\
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2364.16843343
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2364.16843343
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2364.16843390
C:\Windows\System32\Branding\Basebrd\Basebrd.dll
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe"
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe.Local\
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.INI
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\tony.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\tony.resources\tony.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\tony.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\tony.resources\tony.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\tony.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\tony.resources\tony.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\tony.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\tony.resources\tony.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\kjnjnjl.txt
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Users\Seven01\AppData\Local\Temp\reg.*
C:\Users\Seven01\AppData\Local\Temp\reg
C:\ProgramData\Oracle\Java\javapath\reg.*
C:\ProgramData\Oracle\Java\javapath\reg
C:\Windows\System32\reg.*
C:\Windows\System32\reg.COM
C:\Windows\System32\reg.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\tony.exe.config
C:\Users\Seven01\AppData\Local\Temp\tony.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\System32\tzres.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
\Device\NamedPipe\
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe.config
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui

Write Files

C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe
C:\Users\Seven01\AppData\Local\Temp\kjnjnjl.txt

Delete Files

C:\Users\Seven01\AppData\Local\Temp\tony.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2364.16843343
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2364.16843343
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2364.16843390

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tony.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4c2d6b06\6731df06
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2cec271e\5791f910
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|tony.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|tony.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|tony.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2cec271e\5f308e8
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kjbnjnj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|kjbnjnj.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|kjbnjnj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|kjbnjnj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\kjnjnjl

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\kjnjnjl

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\kjnjnjl

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.VirtualProtect
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.SwitchToThread
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
kernel32.dll.GetModuleFileNameW
shfolder.dll.SHGetFolderPathW
kernel32.dll.MoveFileW
kernel32.dll.LocalFree
kernel32.dll.CreatePipe
kernel32.dll.DuplicateHandle
kernel32.dll.GetStdHandle
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.CreateProcessW
kernel32.dll.GetFileType
kernel32.dll.GetConsoleCP
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.GetConsoleOutputCP
kernel32.dll.WriteFile
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.SetThreadUILanguage
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW
ntdll.dll.NtQueryInformationProcess
kernel32.dll.GetTempPathW
kernel32.dll.CreateFileW
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.ResumeThread
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.ReadProcessMemory
kernel32.dll.TerminateProcess

Execute Commands

"cmd"
"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kjbnjnj.exe"
reg  add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "kjnjnjl" /d "cmd /c type "C:\Users\Seven01\AppData\Local\Temp\kjnjnjl.txt" | cmd"

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-05-18 15:39:19

Detected family: #Barys

TheSystem Itself @ 2018-05-18 16:12:02