MalScore
100/100
MalFamily
Ispy

4.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 15/68 Related 2234
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 754.00 KB (772096 bytes)
Compile time: 2017-07-13 21:21:28
MD5: c6516cfc541d1ca2aaeb3bb9354be19e
SHA1: 87d1775191a1032e40a366a28e825e798ddebf63
SHA256: 163da43525eab12bd057547d94753beb87e60732baf73a62e3a08b275875e13e
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 F2EV);h .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-04-23 12:48:02
Last submission: 2018-04-23 12:48:02
Filename detected: - 4.exe (1)
URL file hosting
hXXp://stevemike-fireforce.info/work/exe/4.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-23 06:23:25 [15/68] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
F2EV);h 0x2000 0x33640 210944 b099824b2397b29ed59d6b3cc9bf2f19 3d3fec67e10934394464c1b0ebc478303b03038f
.text 0x36000 0x881f0 557568 8d03aeb60f9166e39b8cab0349b2f9e2 419d4d090b682036b1a9e6327e29eef6b14ce89e
.rsrc 0xc0000 0x578 1536 6769ec389991ddbf463ed5edc279d94e fc1b5c845dc7af121e6df73705c1435ff824d2c8
.reloc 0xc2000 0xc 512 9d8d3f8d26bfc5bdfcd49dccace91f95 5e2c0cea26f770ef4344538c09f68b4e6d14ea50
0xc4000 0x10 512 233dcb85b60a86c8bede39f49db438f7 b616ebf769ebab1358da2f9eae644e1fcef46147
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0xc00a0 748 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0xc038c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018
Assembly Version: 1.0.0.0
InternalName: xy.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: xy
ProductVersion: 1.0.0.0
FileDescription: xy
Translation: 0x0000 0x04b0
OriginalFilename: xy.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
No IP detected
URL(s)
No URL found
bc4519c8-fdeb-0617
A!
bc4519c8-fdeb-0615
bc4519c8-fdeb-0614
bc4519c8-fdeb-0613
bc4519c8-fdeb-0612
bc4519c8-fdeb-0611
bc4519c8-fdeb-0616
LegalTrademarks
VarFileInfo
ec120e9d-aaa3-d0
bc4519c8-fdeb-0619
bc4519c8-fdeb-0618
bc4519c8-fdeb-069
e2c4a01f-40b1-9d
bc4519c8-fdeb-068
ProductVersion
InternalName
Assembly Version
xy.exe
bc4519c8-fdeb-0610
1.0.0.0
StringFileInfo
A2h
Translation
ProductName
LegalCopyright
FileVersion
Copyright
VS_VERSION_INFO
2018
000004b0
CompanyName
Comments
FileDescription
A/_
OriginalFilename
bc4519c8-fdeb-067
bc4519c8-fdeb-066
bc4519c8-fdeb-065
bc4519c8-fdeb-064
bc4519c8-fdeb-063
bc4519c8-fdeb-062
bc4519c8-fdeb-061
bc4519c8-fdeb-060
%9&
110e77b8-e295-3a1
110e77b8-e295-3a0
110e77b8-e295-3a3
110e77b8-e295-3a2
bc4519c8-fdeb-0628
bc4519c8-fdeb-0629
bc4519c8-fdeb-0626
bc4519c8-fdeb-0627
bc4519c8-fdeb-0624
bc4519c8-fdeb-0625
bc4519c8-fdeb-0622
bc4519c8-fdeb-0623
bc4519c8-fdeb-0620
bc4519c8-fdeb-0621
CJ}&j
j#g?.
&P~K
$?qT
S9MgG^
SP.5
mH#!
GIZ~
6k,r
g|e*
L/kDE
gtj .4
={)f]
x?BO
PNG
h~G_
bLf)
Aa/x
bQj/8
(sjK
+i+
7Of],
[J>~
qZ`<^
8-X >H
U!&_{
q}Ly~y
QR |
?H,T
ResolveEventHandler
&#9U
h>+;
m?{h
rlU@@
)HH8
lY^{
qK+M
w8RF{
S-i]
wAUF
=UHd(
CFF(R
%7RWNd
2WJq
oa6=
/i@q
Lru&
<V9m
!u]0
7&%JnP#gu
ZBS4M
ZkhQ7
!>z(6
X_\PU
'<FL
mu(,
kSg{
iQ[:
FIvb
4. % v
)\Z^
nb[5
_Y)2
0_j
CryptoStream
#TZwp
{s<,
HuaF
~D.
${V
gv z
"SM
SHQ'\
(%u^
03A|
R}l%
E$-jH
pd`M?0
wgE|h/
1{`|T
~1q%
lg^
R!b:L
>vhp09
n@54y
27\Q
}oIHN
o<WnVkioQ
Aw4ux&
G{`lC
"&S9#<
C0h;&
CQ0Z
5mUt
C7PD
6zk>A
@Y1
(* }
Crl]
q_lr+
{I):Kw
FQQ:K
dLg*\wF
X['B
oR@aG
8VzArQ
Q o!
@)&b
ue1j
7INn
Lmnn
NeY'
fn1a
.<2d
C~kl >
/R5r
<61NMt
9 |&%
~lO8
'7ZL
"L[yz&0
,Fd<
?%e\
EnableVisualStyles
'Da;d
Wga6
kDi^
c\w
[i+8
F1 mb@:
*JE4
=Hq\
n bb
Od9e
\_n
Q8jh
jn?x4
XJ}!g
-w:*9$
\Ot5-c:
5$z
X,@*
uD~g
*kW v
y+q#
PMu7
"4MB
[ip4
G4Y I
\ M(
&^*tC
![b
Z=(e
ILx9#
x7<(
\4:Z
1'~;
%r%
e@v*
"clO
L`V#!
_{
a;#"
#~[6
FaeY
*Mkx
w 3<}
+AC ?Epy
NwB@L
<4XF
ti7G
NQqqi
[OUi
8!2(?
Q@$r*m
7x(p
`T Pc
OrVt
i5S}
$ rn
:A2:
8s9!
QVe9
MS<uP8
k'F
W3h7
E"l3M%4
Vsx5
n1=c&
set_Text
'II)7!
l'?`aXb
m(Ac
h'O6
~+G
CdY)
:;kj
rL S
2 I_
}UxC
.aq
wc\N
t165
LtE~
-S}f
(Z^E
2u0
FEQX;M2
3~WR
H>:u
_4AcZ
#lmX
]_bG9
h)7@
Y2C
G]-Ggf
d#X5
sv&`
U s=*
[y^V
,1 Z%
F9[-
2R[,
B/ {
M~V
K%R.
H3 .
f}+%
EyK
Nx&r~
rp(5
[}df
foPT
Sf6Pp
Ey{It^
8cb\
(n,m
3sm*
&2pL
_G
WDa-o3
mv# ~;
I7\)
5Wub
J/Or
fQ|]
Char
Ol\9[
[rmw'
L_(!E
&Ojd
X:A9
~\=S
9JTt
vXJ#6
BZ#Dc
=! &
l:_
"]9Q
C|6.
Ub*
db}S'<
$aL^
V{00
jqLO
Gyj
/Mbk
Padding
B%6m
(==)
(HsP
}'Ti
get_FullyQualifiedName
96:@
qy'J
-}K$(
B+O!
=S|#
j/4H
5eK1
(t[
Dt}f
LocI.*
F 4 >
2W-e
,>y-
dF8x4x
X,%k
aWjlW
XsAk
Z'%{Y
HOr
>p$h
pJH f66
D\sV
-7y4
pfL@
aonU
C} P
NzpV
O?&
g,yaKT
b|{t
.text
(uVw
U`cU
s h6
>a!$075
/y"*&h
V* 3
GetObject
HUF<M$T
c 'W
)rkH+ft6
pH"r
n~omaH
F<x2R
qu;b
NMeK
K6[X
${,s
})?$
<E ]X*
!Wll
} B
]'GV
7Re^
fxz
Jd`gR:
nz "
dL(
, 6G
@91;
I1w.h
$9Q8
9\f:
>mI^
b^ fpP
JddY
;q%*
oZ$Y"
xOgx
D#Ak
0O0ys
C [}v
|Lg8
z_v9U
rZZk
Bg &V
t Fi
Omp<
!PhA
Jo Q
I'#5
uO<!?
XKM(
g %l)
O*?q
1VpB4
5MhP
2I}3l
l:SgB
@X;GK
No S
&w^V%
bI;<:
bIH[[U
1jArF
d Na2
[|
Emoo
55 XMZ
-EO2M
@[Rf|
c^`>
n0qo
#Schema
G4c|V^
CreateDecryptor
fd *
*%S D4<
z>:Qe
=X;s
z@ i2
c8N)
"X"*
Yy(
vsw*
)kJTWH
x^ o>/
B*o4
BM1rIj:
wi b
X#|1|
|V?c
eX8~
"s\l;
`['u
-6Uye\
' %b
w^l/T
^-7H
E~@w
.U/9Jm`
jM9,
] RwZ
NmZcc
;l(\c3t
SO\n
NY!n
DyUI
.w8oW
:~PW6
t$Ti
Q qz
o5*"
mohHeVsWOWQQIyxdZQLpMyRKthaC
vu'ejp
cl2b
W1_
4k$(
*K\>
' ~Qd
6Bj4L
^QI[
z_zC
$(;\
74sD
fh5t
WB#b
2Yah
a[n_
.ha|r
P_NC
DG O
y[n(
WQaM
%=:o;
0Zsg=r
_Q@
:NLis=
AW.[
=c=j
C :Oz
A }D
WjK}J*
b ht
${Ch
qbe&
hN9
Dh #T@
-l*B
D!/5
/fXD
OT80
lXArK(R
jcl{
Z;w"
xEQ+
O dX
RlqW
;o}E
:fj{
`7HK;
pro%bV[
rCE~}6u
d~ ~t
'iI_
-rQl
t T
UMgN
NZl)
B+1<
c}"
X<4^
?HbW
0Vh
VS_0p
i 1
hu%;
`%5P
K -
SZ(wf
@+)>w
rHX@
rFI
$ (c
c8ZB)
p};9
c=RE
/h2^
JRc_
iYA>+
kEHS
<7$
Uxlw
O[7b
Nj8r
]M,A
. *R
mYV
K\]kk
S
\uih
uc?[
yj"P
9W+a
y7t&
Qk:m
SY~
saZL
XP|P
dswp
3Ra
:{*TK
^|>0
qXz@
1@d!<
eMgX
77D"
&$*^
s*}G!Q0
hB>R
$u xD
T57-
K /"{
EAmf
_s=Y
t.1`F
U>n(U0
T@qK
xOZK
H %6
nmHw
R5(I
IQXK^>
-XT?
q(}k
.4,]GD
,>}E!
IHDR
)"zE
/dq
System.Security
qx%wO
RhU6
x1$t*
lP&q
.Z,k\
~~_V
;\'!*
0qA
De% 1
4?J]~T
O,h]$
7 G*
`VVc
X@GvmB
$kA9
>`6h #
*}Kzz
System
EventArgs
hJ>,
Application
\AXe
Rw@X
* {wO
% >3]
ihqz<
-x?M,
K$sTb
u{}e+
{%2m=
L)2U
VF+C
Z3Zv
># q
[ja7.
oIX"ZO
sot
CU)0"'0
-4o(
C/xc`
E#""
6V?;
NDyl7
MethodBase
m9{Y[
R"kg
;m 1
W~+`
x; QD
J~g9-
p1h
rgQw
ox
429%
AhUx
wZ"O
+9 B3 e
R?]B
vd y}
p68
FusJ
=X3{
7UNlG
g V)
UF}nz {
|]=W8
yXp92
*qh}
KX5.n
Y8?N
63Q4u,V
DKqW
swdO
-3g7
xT2U
;[zM
}G1-
kou7
N:8PM
dpUV
8Q;m
'<gk
pKV
&Q-9:
[eGQ`
v%{cX
W (dBm~
@\mYc
D@%v,
8zpa
/hN/bh
W'Y#*+
h#UN
L%RPL
FH"=8v
6shX
66%$[
eBk$
ef,9
rCo.
o.m
'hh]
rZ)
dmD
(}zG
yJ3^
bqB}
& 9"?
X6#>
6a,>}lg
t&%{8
_IUD
LALQ
@g0v
IV7u
Cx9C0
bt~_
/*{*A
!\k-
Py^
+t~o
.fZnU
%Vitd
GtiT
zuRo`
gI\Mx*
deEz
uNI
gcNL
N FV
Ug]M
+fIY
kMP`
ir$,
JX%6
Axbi
2+<$
T?D!
UJ&k5\
2B'S
Ws8uHe
EW*k
(~`^
3+ZHR
ContainsKey
`Sai
ka{q
c-
PZ/&W
~b%,
NIubT
b,va\I
1 T(
-l'x
~!F
)4ns
7H*5
j81e
"1AB
'fRN
iC?c
W~"+>
wW73
~Bi^\
nN1$
uuH?
2,#=
C/h*
?^>:
M&p49Z
w}wrO
%SKSe
I tK
=x5q@
B@k@
k0GL
m Un
`8Ou$2
^\Xc
$9$h
\5Z
"B0|<
?;4}
eI9-
Xr33"
Ua*
/2<W
< FP
Q3YZ
jl6]
iR4q
d'm:
|NC=
Gl"}
W^<g
ME t
7bFQ
!JhM
7%!
vX(uB
[ V*
24M|
w|PI6
7{d&rH
& w@
:e@L
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
Ow[s
BQ*}\
5KDN
e>{ZN
lsl,F>
Wfm3v
8?C
`c-5
uC)-
0-<Q5
"r^(
$#Y<
\?Ax
wL^!@
=8k>1
0pb6
LI`
5P#33
-Z{>
]~T
ook&
JDcK
U Ex
z;!<Fu0
K$ R
QH %
Y}phF
f4Z2'
K$KevE
/y5G
7H Ic@
$ddeefe1c-5f32-448b-b418-6dfa8f2d5cb1
+O#h
+'.i
Dt7#
Y1j6
set_Name
54 '
>pS ${5
qsDf
9AIk5T
-#**y
AUOt
>ldn
ubA:
ruP
e%@JV
P[l'
We5$q
z=_G|
e]0{0
Sv&
X<~P
:LSl
CGvO
O wD"
\Z"m&
`V{r
V7s|x
qaeLk2
[E~Mo
1~$)K
!XR<5
A"|L
"?Fu
a\Gtx}
DFp5'
]tQN
sNFe
-'`(zDI
jpv<
=(r{
B p)
>[7N
SOspl"]
;`1}
J\3=
.8*|
j5#?[PW
}81I
t~q[
pk0B %
m=V`
W})/
B$bFg
stL
2sAB
immqg',
HZt!
J m
1bCm%
/|g$/*
_Y%B
7F^^
poG)
:Cy'W
/shY4+
I ([eL
0g?G
w'3nU
qi%.@T
n/u\
.J 9
@nh;
x#2a
*QBl
8:R
C)&yb
&.\cX
W#^]p@ug
ri@K
zLF]
:C@N
Tv9n,
ms$/
|u|?
v:S4
tQ X|
s& *
97'?
7 43]
8"(E
61_!
-t}v
(#Lg/8Cs
=8'{
O'Ys
n`QYWo
O4"X
k;u\|y
!|Z)
<'B
j0m$h J
<M{|
Z5*m=
S/Ol
[ akE
DH,q
0+7}P
- 8<<
:zSR
n 0q
i4"J
xy.exe
>xI?X&
My]:
I Go
Kmkt
?[7
.F6J
#F 1
%'n\
90x
l C
oZ_
8=j?
C[S%}*
r gT
g>zx
d'OMNp"
i9n(
GetData
dL$Z[
- YZwc
B|T
`@(4`H
^?];M{W9mpP
vs
wFQ
8$LW
wg|F
{]w,
9twH
*.L-Le
xDt#
_!ct3B
Bi29
q C
":)v
pU p
5:ln"|%
gs* p
>"OR
nr;T|c
'K'K
3]g?
h>H/
rl\x)
thAIr
XJmv
SsA`
VS/GJ
Q x1
M%mY4
dnfX
pvK$"
tYg=
pma
\'E} 6z
"7H|
-751
BEp"@
YDF$
iwQ}
2..z
@9*7
eH!|4
tRlE
+w*$E
I8~7
q#yuR
]\ew
B#tU
& @~
pT)(
kYP
9W 7
G-m!
m=nP9
&nnhX
yM /B
6]KzW
D.j{
R}d;
%h@$
Invoke
q`5)
KJIv
s@*I
$OSX
~.bj
B*Y&
yA__
>Ya&
8~qQ$
Tw#x 8{1
xp.
5'1lZTv?
uBNC%w
^QbJ
]B\&P4(b
RGB=
OlUq
'~p_Y3
M:Qtb`
n7.W
oD-|
r}I@
"VNC
?;_F
--*X
VY(I
[3! 0
t[AR
vM>q
=~~[
jk3S
eprq
U(8Tx
Array
?B@
3;K}
gl*#
@rAD
xg5V
2rg}>s
A,CJ*
TyzI
}KW9
DX^5
sNAMIC
bq0
3ar
fYoQ
7PGm
wV`
uN40sf^,S
"R*
agxj
QMIf
o, }
4ym4
{3ulKC
@]$g
*dc!
bE;x
BEZC
E|]
@o1V
)bip
6_]p(
HO#<
rNmf
VWB|
/ v/
=ll2b
YQ@:z
[RxU>
mr8pD|
GPs,
y'
P(e\
I ;Y&
veBb
-> j0
4W(1
%Ptl
%i|z
FtSQ
g2T,.!^
I{/rK
`] =
Q il+
iq%I%
zOcH
Cu @
'Lrs|c
y=9.
y=9)
F\>&
J0_[
H=/4
I_On
t0p=@J
C cK
M AF~
oKP;Y
88m}
\R /
Y05mT
BZ[Z
!xE
9K,V
.oyz
79cd
*p \
uGo6
hC/;
Z]L
T(*!o!O
hPfK
d:Ft`H
xQU6{
J;I3^3
| *$
B\mE
+75! Z
%h}<c
9JPp
L%w7
mfpe"
|I)//
)e9 %
{3*}
-Hfa
!{#@
P;od
x9aYX
RuntimeCompatibilityAttribute
Rw49
QtJ]
$xEq R
agj(
cYXy
C^ /
BPQQ
""4^
zh2W
V^=tFeZ8e
\u%`
4947}S
j *kN
`M ~$
$<S'
,a{Nl
k kyA3/++
{C?>
|;#m
C1*G
"F 1
pID^)W^
b#@9
H3(j
poVX
4<$)
5 Nt
"#<xp.
-8hV
RJ^YPX
P^w>,
:UIi0
3f~5
_j=p
Size
[qTs
oN^D
y?kJ
E@G7
n$All
x)z
Y+jB
P2ym
I+5m-
)>=.{
F)"j
&r1wkJ
48pJ
Q q:/;
i.z,
P AES
y RCu
"geI
&Mp$
FYVMD
{y1|-U
S|6/
E3
>G9@y
VIPT
SHl_5:
/jpM
IContainer
.:#
_k$G
o;9A
xmz>0
tgVR)
69 7
#=$*
yN)}aj
vCt+
-UEs
}a0}
VY)'[
Kik)
~&YU
qhoaO
RPi?
R<!:
V7$1
|(YA1I
Q;-Y
q .y
J _'
W]1,G
qkGk:C
HJn?e
CfCL
KbW:
GSaZ
`PO4
T]BH
mAWy
e%vu3F
do`J
O- %
:J={_
mb=6
K?'(^
uD<D
n;_I
8yNa
^Q *
set_MaximizeBox
jevT>
p{p %"
[]]A
#d)eo
@UPk
g+t,
J^-56
ResourceManager
GetExecutingAssembly
{b$S7Z
&!hA
uIXc
9)2!
/g5#
[',i
ContainerControl
lh,v
^v%j
l8]1
q(3l^p%
DjqY
V7<)
L Q
,h_
F*A.Y
9m _
25X0
bDbyF
J1db%
#zuP
-3 H
!*sb
?84O
\~ E -
oho9
MROlo
4nW2
H$2;<
zxY@(RE
I\]@
`eQ
B"DNE}
VJ~&
kI9
E ~Cy!
|}ri
nJ=W
Wu J
W EX
MLZ^^
U8{5
S|6tq
f0*j
mn$Mg
)58~3
chu
hu!g
W4`n
/zWn
g-z,
+NFq
j~7
v5D&h
=O<l
?b.%mTI[u
:a*J
^239
[|LhI^:NE>
o'mO
8v3bI
EH.G
IF&&
X cPhW&
lb%u
}@%C
eu%hK
DRAV
ayMhl
Jl8B
HP@n
TzSR
Ad;i$Y
3ZU
KUg
,=R
RNK'
[z6G
Kmtx:
blq #~
set_ForeColor
%i:L
osSb oE
Close
seb<
yJ5m$F
i6Qyj
) "rD
:H@_
9[;X
O.FU
[u8\
o(iY<2M
Read
t qn
{(D
H{{;
{6yVsx
'tB4
$ic6
E&90OWN
wE5[
fBG!")
D m>
6Q'r
{z:' 4mF
Kvff
mC%]
kE Ja
C=xy
)1cD
6bX`+
f=kA
G 9W"
|Q"esC
P|$ni^138
@>W$
@7I(
N6Sm
.~.u
=GdG
fM.1TS
]BP:
p N
UQ =
]$qE
ksTC
D6hj
^/\H8
'yKN
8}M]
$5dY
C>$;0j4m
;^JF
zzC4k
v2)S
"Uj5
e[4 w
D3.)<O
,*Bl
mscorlib
"Z.y
k:Lx\,
(;EY
l J
9;ML
`k=G<
|yb@
K8,_Z
p@)G.
Hy!y[W
Re0I
~Ieg
p{\re@
ka_}W<'0
R 3
3"/u(
x8w=
LJ+U
r\!;5R%
IpFd
GU?=
}Ldsi
#y&
&Pe^
Bl4x
ML@_5
Mbkn
k1d'3=
S 4^
8@&3QQ
Cj 3
B:]i^
R5G@
qX
VTR
RuntimeTypeHandle
#W [
;r6 &KE
`oh:-o
U;l;S
j| 71
>k_+A6
BHO=
'IO-
j7Kn
D7#Ki
dmsB i
&%tpH
i *
]zE.,
^~mj
Pz.{
S.VL
5|/i
Bk_!
"}7#7
RrbR:`!
`7 d~
N+'o
iXXB>
ReLR
DgG;
iYNl
~D ;2
!FPk
{!]]7~
RsJ0-
Iv"!8
Z{Y_z
8]FV
#ZIi
|kDP
Uhw3
x CDnAs
@hiFy
1u)q
8C18
.!q$/
Rw^'/
$Z^M
j$jW
A. mv>
7Xx W+
8R8W
{ _M
?HK
sS+8b
6Fv,]J
BKYh
@ !Y
'K]S
3+ t
Od@3
hc(I
-pqV
)<w_
PzN
^p;>
2g7 SD
-F h_
I6 '
: GR
}ptd
{5 8$
SjM^
o t1
!hg\
qib-
!,uC
.Y`C
`TmD
5P<#
I-Mg
F \Jo
=V(m
(%5?
` >U
+,|
F;-+
NoB1!
Sgu$
8ALO
Jw^v
1ki4
"JI^`n
p )0r
Nh X
H]@ww
c+@+
km['
[V]4^I
eZ}
>3i g
[`'\@
%J7uu
v?_L
xa7qmh
iE 5
j:31.
A&>GD
g(&2
0>?
-c]2
0;EmC
f8-v
!This program cannot be run in DOS mode. $
3XtLm
042+K:
p,?>m
6b%j_hy
C {*5zw/
d`2]$
/;Q\g 2
BF,~
gF7lt
b|/of
EAI&a
Dispose
Q=#R
}H=
dF0<
l[f"
84ogB
bfXl
nasB
e6R!
DNvf
Oi/Y
yn8W
LS%~
1w[Z
g&WD
JqM;
a_hX
V5K7<
O4r>5
set_ClientSize
/}92W{
<32
zMg147
Kt#4
x%@ H
v{r|'
oq*G
#WDL
G(j0\n
N@ojy
GG;m#
V|mnX7
W,u/
5OpF
P>k@
hTp|,
w?TG
Zj u
|hZ:
)VDc
<.sMOr
P\1#2oC
-$ J
MhjbfbnxYQGGIJTFLgBlyRUvaEKV
] 4dg
rci+Rg
+bN<.v
Y5Oh
rGbzL6
,0bH
CQH|
oNw{z
4:xZ
1{w+
;)gL
!:`C
13og- =(
S WY
q#4"
)ie6
N#&Ta
5zKp
(hW+
x9=q
cXs9/
]-'d
0dR(e
]V,;>:
9r^T
LDEkr%i
(U4i
}`V9~K
0_bQ
<qj9jA
w&Cf
9}*:
wB*;);YqA
RIi|
OnN
2piy
G-CR
=:%|z
lcv-M7
~A/
U>>*
S!WSu
S*7.U
js,{
pHs
n|^pZ$
.>0#
!Hrvv3#
3tV\
Qt,Zx
^T<> qV4
NAVWA
oD5 y
|S:3)
tDMn L
fn9y
W#HQ
ZK 2
((3L
XrhR
,N97
G$oz
~%]S
"~+6
7gyy,
J?NbJ
rT~
+A)]
!e6N
M3Mz
m T+
G^~,
I@9TE3
9z<C
FI~w
/ <+
BlockCopy
l&e$F
31X21\
!2ViG
jgll[
*;/s
t$4$
UF |
IX3o
{qCl
?##K
^J/X;
[2qe
FormClosingEventArgs
L? 1rf/
=3$
YOM6
Cy:
$%_}
.EDI
7 $
.$:.
9Z=h_
k#L;
E X?
X/rX
set_Key
H_F/
/c:[q
B5+gx_
WCm`
4-:N;
\Tez
XoVE
lUF7
*$b9C4
nx
_]r"
~b u
Z<Sv
?mxS~d
U S
V:p
b/EBN
c5Fs
}:EO
Dun[
g+"=
a[_
:*>
MethodInfo
$^ e
lL!
x~k
T/5
wO3G
ZpMm7
Gsu:
CompilationRelaxationsAttribute
/5<O
'h*
'r'kku' (
}YlJ
<3&#
m|s|K
`m.SIw
MemoryStream
CC|tz
=PiZ
tfAX
HK ,
<K :
||6Q
Ufep
uB/
d/M
m+eB~:
,if
rb,MoX
r.Nvq
kbC
9\}
L"O
JZ*8]
B}gV
C4;B|
J*r<0"
s@[!
?(@.
Hz6l
T Y<*u.
c5ws
g4 l
d]2xp
I^05l?
0m"iE"
)< g
tho1
(+J0
^[p3
l$C^
F.|`6(
9w$
ZtHM
@EU):
P`vg[*
n8t/
OI>}
? =
lBtG+
*uf
wRlJ
b?)'^
YtF,
]I|9
pL|
+mmY
vcD`2
0^/a
6([`
K:/)i
.ZI09
x&fR
\U9X4
6XKU
x&wj
i nP
P@Z
<\0c
>LB%
sJ-;
qAI}
eOb?Rf
C3Q7

f' t
9i,c
oYTa
lVc>
DR`
;cd[
Wq{Z
L+x 4
]cu
%f^>
/E G>
Concat
HWJcjxFlMjyARODoWGKDaCksXArcA
]!yP
vYqe
86Y$K
f*|T
`.s,
?-AKp@e
U|><
7y!D
p ;[
8ed .
9eWfJx]
K]BC
exY2j)
QD2((
Ntvk
Sf3?
Z1 rX
4iJO
{E`F
SL 6b
N xo
j{O?
tigR
}_7x~
?,kCe
dpx&v/B
s-m
6u %
-RtG
l|t7
O}x4
Z~]
R *
\7xV,=
^r#&
H3B',B
xqs
Y'o~D
~Ci=
cc y
9yeGrZ
yM2C
System.Text
B4le
k{kEH
sp)&
<WO#
|P;,(
kPNBG
.0L|
9u>H
R(e`<
Sh GO
TMps~
lsP-
({YC
m#dH
xvtt
NpR-
7)$*
MJ7)b^
QMSIW
Qf`\
,B`Z0/e(qQK7
w*4F
R.%Lk
M4VY
$="c
|&.LY3u
&J0T
Bh9Y
;i^]
aK>UO
tz,$
EtN^O
;-8$
lC& K
gpT?
d I}@
#w<D
A OE
}!r;
MFEbgjgMEBiqLogfMXRqkKifzqVJ
*&5F
gga{
*~%.*A
fKX
j%Z=L+[
, (J
&y'^y+,E
j{tWz
E) 8
>]K
5kmv
|(Z
\La
1mgB
MZm&
wvV{
7B V
a?N,xi.F
mC41K
c|Qmw
P*ta
0P>n
}$hxKm
',9?$
uj f
Wg/>
iozs
!MRj
+zT7
`9<K
_CorExeMain
^)e+j
FQd}ZG
RC:6~
M |g
,_ZW
N<\Aa
qiP/L
gBvF
i0Q'U
IbL0
Wn Ve
sBHH
9Lze
B' F
&Q`R
|{<Wg
r{93
U;Ki
DR`
Oi\b
Nu{
CXd"
j2f+
q_DMe
6O4P1
Y,R<v
!5G9
GBA{
Zd '
r\R<
ToArray
TUv!
c1xW
"lz,
/#/n
PRBn
./tR
;"r
x"'
6a4ohr
Kx^*#
-r({
=}+D
3b=A
N% .{#
! |'
j]xs
:5 b\#
Z.
da#3
X )) O
?r`!
-Om.W@
RbG~
e^Gt
i%:<
h&>L
P+n#
0Urh
pt4Q
` sy
Nwbt#<!&
4pJJ
/}sBj_:
`PsB
_ y.#
Eo ?
aHSO
.2{]Cu
*bb3
X ]3x;?
P%\K
|0YWk
*.8U
r!nP;p
C1Pc
eR:Yk
IsHA
SetData
vX>9I
Z>KO
sg[r-
S ZK
OT05
'4|X
~-_o
TK+I
_4~mYR
%,aV
hmx
UMoY
7S D
RR"ST
$q(
r}}8+VI
e}GW
8,SGn$
? kq}
4+1UH
O*ol
'{Y<#
Xdv|p
Wh&)
,KM4
MQ8X
:Lrv;=f
2c(<
10\
`v?
/r9
}Y~OU
9Ijn%
VvU$
sb1z
08}.G p/+
q10
f=e%&!:$
4a@*
e [j0[I
_ ~LO
gTHEXrEvtZgTulOjUbZaZqjbxgSV
X~1'DX
K.S<
Ri$F[(m
x^h{
rOX=^([)
Z76p
><F.
G-VW
ReadByte
|MRA
THyY
\qPJ
vEZ8jo!
TF4}d
= s(
dQwN
30LBe2
`ED
\gTd
Gc{E
L|/:
MCg8
S:7aY
0yib
K|t{
Ua0C
2(g
;/fMIw*
rwy+J
M'+
mGv
|4&.Op
+r,u
lVFrKcSZGWGUMKZLGRrgVKryRAUr
\K"7k
beC+
}oq| E&!
P/17
h[YD
~ Hi
Nnh=
p>^ wl
D61_
d:1O
Wd77
4KBD
;@]F~2
FI 3
.jK
q+ y
pv5|+5,
g[GIU
zb!l
-7*7f
Wbn
8 d.
'"W]
1.0.0.0
`"Mf"
0_Cx
i`_Y
4|K<
&[i
wXp*
pANL
q7<=c
otW8+
IB.
Ehjjvo
T"Qa
bs^C8
.SK4ol=
fy'uM\8
Stream
\3zN
c6 "dX
S/*W
&$2e
/Y=h0
u_&,(
33e(
K<F{h
fzw.Ss
rH&t
+5/cc
_n(
9q8K)<
Q=54
52Q5
8u
E{eT0;
}syG
hF6Kw7
T MaK
*J7`
Ersin-
v;[\C+d.|
f~6Y
$b Gyj
._r3
9{e f
ncp|
KmHE
{]aS!
66'A
,(>c0V
vJv=Y
O;8i RR
Q'4rd
c aB
W$&m
3xS<
wQ(cin)?
1DF=u
aS>~
y`;8
v(Uh)
9F6n
*=Z?
3n#=
AP6W/
@|x|K
Xgfk4
%=.\
`"l9C
(i81
RdBM
yn}eJ
W| c%
!^RF
\M 3
%@'^
b1Dl!^/
Y1_&
%QQgq
4? \"|xe
[dH,
>/\2e$J (
#P{O
_qth
P:N
k4sA
Q6~B)
xm{[
;h 7
v_R
\-C(
_t*AE
13l7
1H`N
/b&_
RI=z ur
rIItN
&| o
WUI0b
Gciw<
9lT9
B-z4
8]B[
c:o
@`-w-
`~Vr
$M$D
lo66
Odv:w\
a o<
ShG
g|N)
a$F~1
ph'J
RQ/$;m
Fv1y*
yM0%
{/M-
w%y/Nq
W$nT
#Z )6
M?;Qc
S*n[_
mvH]`
;Bao
\IH\
pcI{
dEXy
86 XG
g\ 1/
n! B
aBVnw
3IIL
vW+{V
set_IV
`j&dL
Y\EP[
/ jG
(s.Y
4DC_
./o;
PV[:+>
<Sr:
)qL6
U1a
##G[ |
KB0?tp
bB"#3
\" BH<
0G# f
3U0+
.tX
.tbV
\Ld
1Y]xS
=B#Q
nY:.
h1=q
~9^n
E+9s
aOFD)y
)tp@7
P!cRU
FfNE
%+K(1
?'Fe
D|+
myM^
s2%h
GxVu
<p|Q
JHJ[
Q^DE
# gq|s
>>[
0F#i
0:/FW
,?Rb\
U>'|
:$ -
fd]}<
U.A }
Y?G
> )<
&
E#OA
:Q }
#'bH5:0
[zJ
hpJ3/
_O#
+l>#h7A`
SFj:
$x-"|@
gk4N
lqL~
G&=,
u cW
%[@Y
ITcM:
OK@_
cix$@;P
%o#F\
g,kq
E5bv
qsLY
F0;3
%Z\/
O5{y
3Wa"
d$3i
~_ 5Oj
;!y#2:+
w\DBw;
D_pk
Kz8O#N
K=Qs
IZv!
#s.%
lX8
oU$L
8 '`
Rg
r$:x
$be^
Z=(
VBgl
r"b8
3ai4kf
V_m49J
set_Margin
add_FormClosing
ec~g
m]>Qh
k `5
XWWDT{
.GCR
~E`h
n I,4y&
B>=E
;(|
D Z,
9@+2
z@@S
\_ H
(Y~ .
B1&B
5Yu'`V
Ivt:%Q
-9.c\
II>>-
xaoZH
:[7]
zF\M
,P&{
p=h"
%asE#1
wjz\
*#r%
yf?nB
*y;oc
r. mZ
#:5#
a\l2
?+:j
g #
?OWN
q#81
s(k3Z
hLM:
\cz
Rf g
xX4Oz
v\f.s
8OJ>*v
SA\B
b*qf
"GU8
xx%
u^y
Rtj%
<HG->
n4,o
,=Lc
A I.
[IVv
Cc>v
Cb1G
2ZHe+(
4C6gz
POOl
/%.G
tud[
6k%\\O
u\o2
k Kr~^
Q)Saa
Tw0uV
UdzL
)apr
- &C
_ Ma -4
A_zU
j,5h;
P-zb
?E-o
TqfI3
@9C8,
[u zu
JbI#
F@9[
;.wI
y4=P
Lu G
pj8v#
$t]8
:ob"
8Id0
$mV:C
_djAql
P :'G+ :
T8{7
V /F
X:P
hSeM
0}Bf C
Qr/n
FE0<
zvnr|
ea1a6e5e-7c19-85.Resources.resources
di|`
*u3g
/,xj6
ac$`
Pa\D
9?izZ
}C@"u
rd^6[
ij!g
IZsod
[a)0K
-rNU
9 AT8=F
fAX/
S/WQ
]!`.
Cj[?
WqR@
$HFH
kzY
uaW~S1
q`g4
f!4tz
!z2@N
xL8-53bIXr
dMxO'j@
xmE^
S-B)
'Fn{
@`<K
A[nL
IDisposable
B;R )$
^fd[a
J^~
Htg>
^NLa
wP p
kyh|
bki:
h%O%
<+=O4
K v'k
+X"@
-xn+
5*DR
tTgp/
0hT>
x{cZ
O XAi
\s/
$s#^
#An q
C5%D@
D$.w
PHwpi
TUWn
_} W!
<{HZ
ZwN^
cO f
ts5Q
iuC>
<:'!
n:qnf
n}A)&{
_#M*o
>,(Nb
5KydT
v,L.C
yPQw
w oX[H
gk{
5Z^+
`.q
X,G;4n
bJ)d
R+i
UlHp
lZ/u
J,m&/
Ts;Y%
[$O9
~+Fc
+Ty4
wd +Q
cN0ir
X:uk
((Z;
$ .[
yx`C
8;8
%+b^
FOka
YySzzbCarIYImcymLotqRDXuLIYc
mk0
qW7U3
&8N*
O7YR8.
0WhC
Ox>1d3
2<#O
.* <X
nP]M
&O J
we^h
bAE
#GUID
-WBl
psS/
6h{l
xBQ>U
&Mh7
ULfv
QTwR
@N9/
F]T6.~
AvPRm
p+ z
:\dM
M&F+
1kOgP
O3N]
YI^]
lBzV
kT@]
Oq@
9m,K
:CZ%
`_WC
<!\V
7f4O
FJXz
h0% 7
GJ 5
]F m
Q
CB {
A;> eNZlO
])uG
gaC.
gN>$%g
@CQR
g^{
dS&b>
oOhGILxItgQsvWXFaVdeWeuqgZWW
c Y +
U8XQ
k@!zb
K5!T
=97l
rR<U
S$P
!(R9
5lsX)
5TK%
g,N+
%`i;H
wJG@yF
j|w<
Pgw>
:o $W
efUF
9,cb+3
rcD|
;xJ =q'
2U/
1Hbf
=/udA
W0q0
_$Fj
j>j0
;yUoI0Gk
!K;F
'6.y
7hx
WVR&%g
."\<g
\?.
Sh s
=zRe
GV17
%^ d
DBzeW
Wc/a
wv'm
hC_e|
W&!mo
@Htv
8-ZL
lM5v
_o`,V
zlVO
[~?l
29{S
* x&
e!6U
fjT
1 ^ujb
.Lt&
Y"nF&iN
iI>(
t2olT
z4m4
u_cb
h vjx
Es:
X)4i
k5-%
AssemblyTrademarkAttribute
yMk9
]}__
6Uq!)
<qV1
jlw&Xv~
LJ{<
hg G
H\G"
0k#'}
.;;
.vX
(dD:
M 3f%"Pl
)#?z[
>v u;
y<|v
|8Hl&
3#l$}
7uH M
otignpyeCStEzfLQRvBwjAGIdrogA
.]qKBv
>@SU
Q|<n#=
|TDB
gp;v
Wz5(
zvYew
!%c%
;-d
_{Q3}
]fT*
10dyd
"( P
0FzS
m<\!p
GY@nI
:3Xf
N+|h
[}0J
p'8I&
^~" <
?1Ly ]<*y
#1xt
@)Wa
lAF=
#z^R!
Orip
El HA3
yLk2
,YWXv>v@a%
GQU2
S\YW
Rpl
r`&[|(f;
$z6m
O g0
BMCU%
D&g2
3MoB
A1v$
bk"N
oiMz
uPM.
s~3<C
~O[DP
6~i"
aXJf
M2 @
7 8{
{a> 'p
80-qoC
j+7)6
NMh%8I
8%POCHhU
I`-K
rP+^
?`EB 1
hKRL8
SNT/
ACSKR
,~C8u
$L8<}
=1o#
&bjB5
$a -T
S6A+TZ
A$%n
XO:uS
Z0QZ`}P7<
pU@6
R~r\
/Rx
2;+HH+
1Cp4
-P _
Z<oqo
INK.
bv3u
T5@U
&* N
TlTkF
NE,`
8k,etq
L'x9<L
cv~\b7I
/sM
t:pL
Kd]j
sS kR+
~w#k
mz6v
oJ+f?
V\q Pu
-}#!c
\ ng
XQcJ
6t.<
SN%>g8')w#
`LcQ
qY&/
|ka5
|#gn
+L/Q
a& ">~
Gm)P
@PAO
0L(n
B"VA
j][u
W,oP
EX91`
^"eW>
F",b
lW&6
't/r
ucp{
3w Bu
E(#?
y%$S
z4%:
qk+
>.Gf
p nl
bIh #
3/r\F
>nj+
LsT&
VF/$No
95}a#=6!!/y
>d:y
c(r3z
*n+1
6g:~
ZW`c
8bSK
f31
kq9d3
Z1=(m`L6*
.SY0e
Kc=V_
b<M|
Fe?8
lvT.lB
{bPefF
6K,~
k"@M/#
( 4{
X3a3
V0SC
/1a1
C03]w
:{4+
2u<t
94,m,
\=Lt
o4{"k
nicv'
Dc"U
Marshal
6LK'
-/S49
gG}0]
k|dl
D VS
P6Mp
3F:qSG>uA
jhwu
IU;X
UQsn3
C`Ko
bs`X
0!$'
Q]6w
PzT .l!
0B-Z
.6/
nOf'
+Am/d
8t_9="l
M 4<
B%9V
Xr0P
f>'V@t
Kq -u
^*uB
NI+tn`r
(6}dH
+<g)
([1|
>b,Y
(E!
>iqo
]^)HV
[?$t
COzA
*_-~F
AqRH
`ucU
o3T(B
E;FEn
t%F\|
$u0!%
]& `/
"/56b
_g{
Xdl'
si|:
+5 zL
O}@)
VZuF
o-nk{
ok~a
AssemblyCompanyAttribute
0 %Tw]
yL V<
qqvs_
ImAb3
bz^@
c@Ob?1S(
J dI
u,Q
H+u0
6LDE4,
4sbIZ`
_>MA
O {
X7_R
".=|M
FkqCJr
E:N
rD ~
X**%3/
gkpT@
WD-K{
K0 4
AppDomain
ZV1[m
{|b\
kG.-
9br_
ltz.Gs
%;v}2
<8\
4e=/
& =o
a[2&
"40(
J2R0
E Vl
Pn7x
3z"e
Sj0r>
0 aJ
oFiu"e
pS\aP
3@BGl}
jk)\
&(o{
w^'b
z}f;
k fJ
^=c!
szVT
2f ~
tSm
&* KOl#
&f6Z
3GVb
rcd1
?b`t
og+-8`
qOoy
<,% Y%Ae*
sJIc
%N;^
S9"[
vS:%
B6v<mqd
;b,g
bOWmtQ
Control
1{OlN
9ff%
CFY c
|/x-
w2Q
i"8Y2
ye6j
d'1
/_8.
[3{M&U
BMdC
PA>
,v_Pp
V +
y :"p
v]hg
xg E
iH%S
[r |qp]
o(<l<
J-|e=
$Usd
b.KR\ 1c
;%)&
/s?
`odU8C
@\KX>
u|+x
#|weL
98a3
bZ(P
M:Qj(D
,6>4
t'q
:WXBeJ
Pd0r
lyK?0
CQ,'q
[;%vq/t!2
I&zwrxG
*jY5
w6Ny[
MOz
#GXYl
[} d^E
WXJ>
W^`e
]>A_
k>)pH"C
qyB
:[I]"
3"Bf
si+I
/nG~g
rYMd
G`"q
mY3;
@iiw
md::
C-V"
^p3w
5JvO(,
-Aex
~qX@</
aUi:
;U |GN
OD
9jJp
^f~6mL
VLe_
D!<01
/|'l
W2y*
3Q0}@
q&f$
6?\i
CSm~Pt
s/A#
\3QY
H,mo
)7lNtp
[\;0>
Bz t
+o H
(vLW
>nl1
0`? r=
.R7iP
2(Q
wnoG+]5_
:+SE*#
K_U? z_
00()
oTf:
GNL6PQ8T C
~>,Sg
|HTN
_o.,
DxO>
s2pbP
aapx<E~5!
Qua
4Nj=
hrkK
4=::G 8^
q]_I
}3v~
pYz1
'DaK
X*UG
!qyK
dXUzV
GetString
5 QWg
q\q;
+s A7
:(S4
/fFsht6K_
[-=j+
;pOa
jO-u
h 9/Egi
:C{5
-*I'
%s_o
0J)H~
=xUNf
zd=d
d_c9
'm}&8
i(8
_'+1E
N^ st:
5yfX
ktfqY
IK1.,
KL<0{
? }|
+ID]
~AXl
KnMP
WtKoP.s
'#&
r dj
5T{VM
) V^
Monitor
w`38
(| D
S_/!2
y<qA
k!I%
r{\
rl,"
^s|
nm[k
NP't
=o<t
3^=:vd
?B*u
%=EZp=r
VT&N8
:!Bv0m=]'
q-*s
g^E@
tY N
mBwmccJOtZMbUiteSpqRRVPlTMOu
/9;>
h4aX
9ka3
OfF0f$
R?5K
1oB:
:L _
akb*V)
5=0'R[a
e;q$BD
&kyu
0.ye
`.rsrc
*`[6
^Q|@
j\Ml
coM
$^5K#
T'.R
IL'.
p Fj
/~=;
D,b 4
-)""
Rz}Gx"v}f>
:h[
%W?SI@
rohM!
{53S
TkGm
pffx
t!~-
Ou5G
(OHT
e<CV
%;2d
I1 -
@HLFv(xb
&EQaf
hi O
=6ia
OO7)
"sC{..-
URvT VF
[8Mu"
Rob.
#?yLbhh
w;-:7*
yoT=
OkPq
8pm"Z
hH=x
mVl'
2&r#
Q/3t
~-eb
5]P+
5H6M
$`$$~
Ar{AO/
=uF
Mdb'
M6 OyHp
WL+y
3gM.
0$+W
u D[
'lHu
C( 6| p
w*Jq
Qgjs6-
bV|E
Z+>?
#nyw
]%x@
u*k
(
z-sa:
6-7Y
dHC\
1c9g
*Bbb
b(oU
C|"V+
N2Q-
n:q@
.u]L
6ZnB5`
@W[p
^u$P
s)10p'
mi|Sk
Fx d
R,yhKAI
emP4$
StoX
fll`
v'/c
%I fSC@
b~|R
lmE0uFB
set_AutoScaleDimensions
t-B.
C}s^`
U#LQ
)g )
Q?fj
7{u
b4+!
$vD|P
uAHM
7]2
Y%'B
?7!Q
a(u>
[ph?~
J.-{
Mo~vE
b#yh
vp?b!
ElP?
'Fbf
aP(c&2[u@
"R9}
71($
X^CZ
?Axx3
0SV:
7inNo
N6%?
#L3Tlh
'%(>
?vb;
<Mz T
%JBi
A>N^N}
"oPd
<{9;
SJ2B
a`^"sV
enmC51[
VN9B
G""rc
F=Kq
&wvt
gxGKY
%I:-D
6Z}~
k"Pn*
S '$
m~cb51
};4
{k <
h &ql
MLDyR
q>RN
, pm.
|[&B
I&vJ
8.j"
v#|#e(
Rz(x
;2y
9qw 9
(f[@-
sQ\m
C/y
l4K/U
8>gyl
7Nl]97]
o
Gs}_
Z[QEB!^1
2d|/N
}$%x8\2@tz?{
Wk :
U`lJp
:e G
Rcq,
<?l^
5y<h
;KOu
o!La
[e+ W
9 hL7
Z6N,
[T)-
o(d;
%IkP
W6(w
hT>H
C(g9
[68
c=x#
uxTxy
zwL!
4SW[
.~qp
WS]-
mkK^
B?v
.l,+
d-SN?
xM+I
KmT)-
''[>
W\1#2
0+#z-mt
%KAQ
/FD~
m>.\
B7;$
W4VU
#Strings
@D6 M
DI 2
+-$Sy
W;T%/
s@S&
, wb
t0^8
- C `
W|$+T,
cJy
AZ7
L M,
X5/gw
?S@cp
yrIawVqL
&B`\
68'#T
qq& zEg
5tCK'
%nfK
Ky>v
A~r l
#04/B
B*c
~Ze$
.#m4
GXWl
Agk U"
S"]?
ZE0I
%g~6
R5
`9jAD
g/>\
]K-d
/X6K9
~_"-
?M.m
>EE9
8F2:
613>
H_'jk
Uy/o
Dq_a(?
prd`
Ojv
CXq$
I=!__
2wqU
set_StartPosition
B_aN
`5m&
x[\6
@ >
_"ONL
=?=m
"Jy
mVwB
I5#3=&
"S?S
]%Ed
*^G/
nMl%p
Fx{o
E^v.
0-!.
_ g?
t1ee
(X\T
^ UE
.65w
wCh;
PF6K
#%;,
8RyEs
aK;D
0=vl
OU 7D
?4!l
:L9;
8[nq
X> g.
oYLB
6Ve5
F$:m
H\&Kr{Q
&L&3
BTNG2_
^V.\f
g l tf
u *;
kODa
W[WsJ
BDK5-=}
?L Fl
.~=c
fZHvm
+!F+
wJ(=rb
oI~8%
Vjs"
xa}S
^R\<
+gV]
y !(
F!v3
8OS&mN
2@(G
hlw[
$/dA
DDn%
f{w"p
c&a*
Y'"x
,0wW
RuW=
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
+gV5
x,owf-
o\tx
} ~829!
;- f
m,h?
V?mK
Z*Hk
Gy_E}
iu_
e%1
;(ls;q
P y
cXT2g
ZSV
R}g4m
{x
UF$v
AIWC;]*G'Dn
Form
a5VkyU
He 7f
?B$e
krpS
(| |
,NH[
) <[i
YbQk
$@6[
y id
fopMab
oo U
7 &Qp
edX)
FN"!
|(BO
u[%4
y)T=
p?|+R?
5AtV
\\W n?H
Nl.i
v'<T|p
Pzi]
/'Z6
3:29
( Yjiw
v=.`
01w
|0Sl
?Jy(
y i!
\!,`
<3B
@RWd
uD((
%o5o]
h(_uf
bdH#
N3p;v
zO7)
;K04As
hk77
X[XDr=c
J7 {Z
0?HN
>[h7PQ
/;KUm
cns\
T+eH
\aHs
-~'/{
g_J)
B13v+
}ow
)[oip
p,Ah5M
aW`Z{Ld
nBm%k
Qb1C
o%aM
1O`
Vsd-Y
""[DC
|zvtD
z;,v
rYR(
8&o_
qwf
"[{|
Pi&
dd79{
<q*M
jkF!)r
ISu$
(S# y
q'hWee
IL!X
KW=(
3knno
nfa//
A':x
_'o
e=v
3 E@
ResumeLayout
, S)
h)4
E`PL
9fZR
yJ&F
wf|_}1r
gC<v
ValueType
W .* _I
(q<.~x48
`@&$
SetCompatibleTextRenderingDefault
s7O=
T
zQ&W)
XuO.
m1d$#
f]bL
#SVb
x U]5E
Hm*N
>6Fu
|" `
)eO x
<XnJx
MHf u$R
W a6ca
ow^|
z)Y
=_R0~I
cb_
/=Tq
1.<L<I
rtY|
8,8U
5rYY
FDF=[
(5C<
+-K:W(
m#zq %Ai
Eg[h
$Ixd
gE*mrT!S=]C
puVm`#}}(
[ uT
gDqVN)
m``O
2}j;
G}Wi
=H(Y
hZ'q
JdYg
Z 'S{
ToString
ByuG
CWy1
.[=J
QJPT
SV l
X(y7qe
h@wv
{EuL
Dls
S3E"
J>z/]
:mZB
B(|f
@=9J1
Ja$Y
t!_4
pD?F
7u%m
!"Dno
_ )'
j2%
#}a3
:5]A
o:l}
[kx"
z!* K
&CIa
W/b=
m=@a

/*a3
7R|f1
R3@\
?v;2
(~wR
&Usi
wsn|m
RI~
U &|
_32%
M5a
?I&
[sA
E32D
$Tb:z
spD,
MK#@
*-1e
Zufk`f
;3g (
vCT_D
f,2
xN w9
8$j/{
iQ*
U5@k
%dRk
yQsW2
B[k
System.Security.Cryptography
ESTtf
1@k2
/z>V
EUF?w
PejQcq5
b+Z}
'u;:
5Wg,
*;?*3
:sC!
sj D
HH @
+w!m
eYuw
QYNs
U{K$:
S^~K
IDATx^
`T|U
~4J
QOX4
}e m+
RxeHXU
[uZz5
d+QANoN`
COJ_D
nztc
pOTb
&vx1:
gobR
*4ns3_
.`900
K*P
G/3J7
:Zx
n8Z%$
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADN
NE x>
lY>T
.ctor
nRe>
{meh
H0 D
lokx
ot>j{
sxPDXV<
' s+
_f`5
6d|
ma'h
dN3n
6t*Xr
2-kR
Otj;
e<g{D
P\=S
{O`l
{ze:
3,9F
]UHwK#P
5D;N
)DT6
c@nH?
S'zX
L `Y
]DF
@ 5*{
DKaZ
Bl5no
&{3t
l*>b;
7D o
$o .
5[12_
l>;Le
?HI,Pjy,
wle
ZXa
oJ[l3t
TJ~l
64&B
Lgp3f
Module
yXK&
fY}
0-Bq
gfp
'/.%
0i;iK
xnt7
&32]
@.reloc
Ctd"7Xi
()j^
gvp{
Oj6{]
E l1I
*2dlUl
z",d+
P]&|
{'u~
C3JA
.D~
K!(-d
y/OfqjSk
[Jj
W9 If
N(AbU
Kk;#
: L0
9/Lp
& K3
QP9 -
9g[,.Z9
Y`VLO
B \4
;W+/
.q .
5-@"
/$m6>
#0V?
4='YJ
m,qX.
eJnr
Ir*1
+oHoW
J<(V
bh>lI
c6`f
khcO
kx9;
k)mq
{s1
7Qbk
Z1;@
`hQH
UTdu
yvt]
asL
~POS*
me#y
6o|m
{g?N
qh)`*12|
W_^}g
w11(
5n;q
,PV5
dh{3
.s"/
abLHs
)<1m+
<f,Vl
q y1
11w}r&
SV&P
p'9xj
{WPS
l_53*
0?Rj
5 ~;&v
49}j!l
z7 4
Givx
d- '
o28Ny
/FI
Tq/X
F=lb
y$ ?
.3x56
} F\
!t"e
ZjiK_
V,O
#NO2
EtfX
0>(y
2s}k7
-P'O.PT
t/{
1q1e
<Crd
U|(kz
a6@
P5t7;
nBbX
#m[-I
xRuh[
?=jW
}_i
W\+>
6Q'z
[> 1
9cUo
bh:%j
% [#D{
Ou G/
i(yG
pS`b
nXx0
~>h7
V<[
\#+-Q,
<Tgv
81&8[]
Ey:f
Ec'XT=
YO<g
{i&
{d _<p?O/^
Q vdx
\i9P
S>x<
]"a{D
,1{oH
%pP*'
Xrh-
QAky
";))nl2
c}yL
4g 1
0brI7
yH}'
(m7|
ObDD\
9R*Ae
c BW
T207D
qIv@
}[:L
!}@{sv
-)]4
)?N|
fU*e
x .=
|h >
U++C
4HM
*:q4
+=a3
}?NJ
O+?|zL9/{
;v+0
*D:w
'(yFX
QG6-!
>Ql&
sKbZ
# m^V
*D:Q
}?Nl
|t56
"aSx
]oO
k eX
Lv59
ZFEk
A`Ni
iWCn
8DOET
n4$`
y6+1
VzMSw
E NUN
&u4m
Y ,i
>@eh
$>Yrv
!$q:b
Tj6J
%= *
#>@_c
]h_){6{'
)4]6
e%Di
coN
8DZx
QkLo
#z<b
RUn#
3e}ok
(J==E
;( x
o`'%
@)4j
#.1.5
(jJ9I
+?bh"
p-8!
V+Jnx
pB)7
{nk
o^k!
U q%
";{m'
$!:6|
X-H*
W34[
d\c?
+!]
:(pE
m3\#un
RSn"f=~
q+Ev
b-W^
u
Qh$6D
BZnW
K.<{#
eE.v
bsZm
#7x#
sU
-*L2
R0
2k;1[g
h!"'
EJcS
w`+s
|HfCU
q4+}+
n80+
yZ,f
-( 6
Op.:]
G9w3
y`}?
eLxyo
)x,Q!#
R D/
MTb
IfK
:5
!Dt} ?U
*Ij*[
{cV
vQgu
2w ts
5pig)
T'Xrr
": W
Q ?!
|T'O
IxF_l
X/7
U[Ar ?
zu~m
AfLH
\ tX
SNqs*}
yeYk<
7]6/
0`MMy
xZ(Oi
nnKE
[l6p
!2;Y
oKfg
pP]Q
jaqcv
J2XY
x%C%
V& *
s R\@W
, /J
WG n
krT9y6
5mbD
DYUw{y
c24ua
Wq8f5
9<+|
|92C
'Brx
S}'
x=s*j
)jDh
jUf<
sA M
X3GcV
:kNU
I3Dd
:jDKk
gXF)c
HtL8
>TY#
~_f~
C&>y
jMVL
+'{u
*mKi5P8
X>fZ
Color
ej'
< ZE
COL0L
u>`y/
+M})]
A]0z
.m?X
kO*Tx
ZLx4
Q^e
!b`|
get_Evidence
vFi%
4
'$E:
p? 2
YeWr
sNu6
q: hh
OI2x
=i^/
PT[K
q1YW
O<JzC
w*%g
-*0]
70;xg
>@FC
;6Y!
TY +
Z{q2E
3Oh3
%q:/
5
B |0
%.Mx
v`fQO
gO gy
MGn8-
,}9
gK@
"EEf
D D
AA6>
gAMA
8)8
|s#[W2
u% 3
4`Vk
=MF7
69tg
?!bk
DdbD
^K
F-(
F$9QZ#s~:
gBdRn
9,;!
\4V;
1{ b1
&pfXI
h<Js
}G#:
LHMI[
IReflect
D"8&Y5N7
H?xcZUK
.51o#alz
!4g A
zW6h
#Pfv
>~9&
s#Wi
,`rW
wp=0
Vm X
N)I
mLvMM
P J6
+ |8J
aiF7.
;\~M,
EjTL/
aHGnJb
N%;'
|
|lo^
I-0@
=|@S
LCT[X
XI=F
f4JQ5
](w6u
M?:-
Wsh4{
!"p`m
.PQO
Su&H
b]!?
i'7"
2TAE
y7 V
3-]_
'*|{
[quG0
U[Pn
a&+L
66P1
= f|
|,%n
tYR[
CdR
DYH\
)Av5+iI
$ ]u
1-SBg
$@e-
Dm;;
P,U~ A~
:rS
8kj{RrO
qqc\
9QQm ?
N\#[+5
1 %1
#I;BK2
b:q!L
nOwqQ,
nNj@6
POTn
#}@]
Pc94
Vw ME
hMJH
*m=3
n;"+
mcN@E!
,tOO
:Y$O
pQ|r
z po
s@x?#
{cbK&ag
Hh"
]kP2
0c@@x
o[HG
ujkq]
c&}U
<9lA
|>A?
6oW]J
<()&\
2XRY=
^\#8
"Q
Z$ZT
m3
e!!x
= P
NK04
YY]I
zLs/
t},<
$U#+K
~B9.
~7*aJ
Y`&.
d?Vh*F<
k (Mi
^6'I
Cf Cd+
LC)qG
]n:X
c<4v
_8\)
b`o=.
lzeq|
Qr4StyH
~@|s
UbS
O6Aw
~O~
[6@Pn
0X*[
= b/
*T )
Y8L)
/ z?
0PALv
:eV?
j,$C
9^>>~
!Z_w
kEjG
HD|<
E d`
77't
;a n
Sa$F
Dj9m
pAy1hZQ
jR R
jhT]>!
-0X|
BtP(
5Csu cZ
G&@V
plZLI
s^hl
UW/ @
`G-i
G !+
%P ! *
mscoree.dll
Q|7'
K\*:3
Ie2.
W?s@
*vkd
k&"&W
!'Y8
!S@8
v._h>dt
3<$+
l< t
m\hQ
bd!d
)D1(4'tyn
;W u
WyL<f
rI R
~los;
\"cA`
3TzV#
*Tbw
=3:a
*0`b\
W r"
I0u(
PXT9
xt??
~\-*
gS*W
Htsa
{q/i
3br
?|>y(
+/PR2}
TY)c[
>0UF
LK+c
101*fQ
;$U`
g$BkB
`2Hw?
L9f4
+H*p
#TM-b
\mt;`M
^w$>r
_ @D
4\{
b!5]
Msg
%_d]0!l
1@7h
e=/G
>!(~
UN$[$!
5s
!KE,
ABhZ%kz
NZLWjji
{Qp"b 7
x{%9
20M y!e
Wp_+
M# z
m\I 4
c~ <
vKAbb
:}"g
;%?J
W, _
t#b}7
Uq$8
D) 0Y
h{b-z'
wn'I
}E a-
A{`y
A t:
KgN8@6
[-.{
CYE;W
Q I5Kk
[ {`
^wDq
CG[AOP
_[x|C
z}kD
b]gv]
)gi=HSe
c!>G.R
QXzqV
Y +*
:_9n/
$+s-
f))0
hrD-L
wt \u
=&[>~h3E
{r-\
hY
}_#.
) $Yf
$w2|s
@d^+<
'&%_
pZdvawiRWrLzesaJhGqUiHCvRupj
&H#:ox
=C7!
#voRF
B HV
`J|Fc
C;%;
x&g VUj
LA5iJ\
l\]~7
;V'E
#o'b
j Xl
T?MN
TRy(
Mz S
v{L
8P!tKI
hf.:i
4'u(
r$8m
JrFh
v^ =}
# >{Qo
E;>P
YN&K
4?
> 8h
f[nF
03 flw
c(P+etU
_\)|tR
<%sA
l`^+=
AGd^3b6
_$\r
Qe 6
^qu
2 eVL
o0)G
EUh{D
^|GE
m8:s
+XO~h
#7Ck
n[50
LM\5% I
)V47
<z$IA
-^Y
!b~a
88b
m;=$
nZy4J',
+r>/u
730!`
L Gb
|(+}
\xr)
+qhAh&
0UX
8V4J
{TME
T(R&
4_b,
Zujx
-{oz
DR/Hq
/YV7i
FUEoMjaDnLfQyGJLqdjsVPMxiKkh
c/K
Pj+.
X"hK
D*D&7e
gPhr
rTH;
E'uiv
vE}=
C4VD
Xp-m
? fj
< xYv
>40:
yaB\n
&L`~
zNw?
~=+J#
f$C<
0dj%
a i~u
qWu/A
5.F2
Wb c
UJ6}
@[HZ
JXnh
D Dm
CG_{
(qAi
A$g[
#vdC
0r\G
56x.h,Y
5;g#&Q
vCoW
8j g
XWLH
;SVU
A1[`
@x8rI!
Zeo9
US*)!
I*9h
L!1#
v}^t
kqo
-./%
8V6^.X
H@z(`
QRnYX
v-3Oc:
Af-)
y6`Ja/
Z3[\}
x C Z[3
kN6dc
y7`b
mjmyn
A}D6
a5lY
2#>~%
5roQT*
uAo=
T7h7
E1)Q
7k`t
a'ex#
nk+.
C8-M
3qYcC{
&i-'
2~ov7t
5f?A
r'MyB}
FxuZ
@EAm
DQbiyZ
=SsW
8]v0
S7~+
Yh1(
g{vf
ik:d>Na
1' Z
Z/ICP
,8IE4
ZC$%
WkK_{
:Vhu
EEy"
/MZ~
%;Xv
Ni6He
NQEP(b
[W;p%
NN?:
o@dB.
[7~"
iJXk
[% P
5i4S
*-uv
\D=ud
I#N
RYwya
p)Ia|Y
2O%f
%c>2
^ G :
n`t.
'P>
~%r
c3O,B
uqG]
B I|
pF'*
nC w
,(h11E
hO &J
S0x2j(+ o
%X~;`N
"?O_
82 U
R8&;
MDz"
A+oa
N6L[T
fJ.*
kb%=%
n:\O
Qxe;
+I0m.
VZv[
@2=D
W`Pta
q?H1:
K)q~
i Yv
~ W[
y&,LU
8${U
r5rD4
|" j
0J [
\V&5
~J;Q
O\j7
N{h
=1vqX
"yp)-
@nR=
6Q[i
`JS.
!nem
rtNK
RyXc
p@YF
ogw
71d,
` yq
C]bU
iQ}{
lS~fg&
$tLO
(^1D
'm|M e
*@Gc
i5C\
3x @
:|Lq
Z a`
8h;R
uSfh
r0 R
#)--
hk'C?{
&a$
(Ro
h"c,}
jyB@
\t S?
p_/K
(<r3
sM'4d
2:?pW
#Oyl1
u ,f
#My%
y-4-n|
;{'+<g[
ICollection
=r37<
{rW/
"4xbo
}`Lj
8 Kb=
hpH%@
:_O,
uT$t
~xf9SO
%3>~
?_5z
haQ8
b,kT
fpq9
I0ww
I2D A
`OeR`
" S^
r7jKU
Ir[bx
_pN:
"J =c
PKnf^
7H=8
[ k<
enYr0{
/ZFL#/5
C-3.
cXLb
Anvk
wxKHh :
tgV3
=}y
!15D
u*Pe
-`sB
TQtR
%4"U1
X ?^
3aHMxM
g$">:
sgQrE
1AbF>(
jk<m
Ym@3
o"G9
"HtAP
xD o
G s
#`.j
d- 3}
)nR]
*pMx
]Qiw
L'3n
B2 r
}sj>
w($@
PV>r
.4_9
$EVU
^\;pL
cDH0
#Y:`
fq_6#
Pe4D
K#kk
,c[`
R|JO
Fd#
ds@y&
syxOh
rb(|1
b?T!w
@6Z}2
3B]wRM
(gAVMl
F~@+}
!S0%
Tat|
W 9+
gcGQ
vgKg
#D+MY\
hY '
<A<hv$V
n*$)
>m
GYd\4
h]FZ<c1A
3{@]
*Tc^[K
Hz%:
lP@:
hhQ^J1 zF
A~Xof
qs`
8NZl'
yeG;U
jR,`
I3-k/`
k\2M3
H*8*
GcET
+8R*!
Y'm:
j2<'
t7
\PNu0b=
AgTTjg
@N}>
rb7E
2wXt
i9z)qN6L
0?;@
UhC
dRB&
) w o
.A H(
WO #
rLF
IComparable`1
4O|'a
6!cD6
)L,@
n y<(
$~LM
K& q
0.I
(qp p
}*OoZM6
OXq|
9<7k
~> 1
m=1$
d+x|
s>Hr
ComVisibleAttribute
~qEg
ef7fc0~
Fdr'-s
w'|=s
>%um
j*\I
27)O
&oo:
S0ap
Q Dg
/?V
ACMoo
<,(h%
eI`+h
$J+Q0
[[%ll
1AeB
q,z)q
O3zl
]sx1
&DVT
;!> g
a@|
LDADo
:QGJ
g m-
]7bh
Rt3`
`#^/
6ew?
h2Xg
'QTY
mR8f
r(JS
{C],
8AzKW
A%
>X^L$
x7Z:
>>D
?aKK
System.Security.Policy
~h\m
B x*
yby
Kx=8
WIw\
sx>0
SW5Q$
rIAv
E]<=
d jU(er1m
`b8;i
s.p
+>tn
Y$iP
r<~<
6ay*
Ocvf
SO[g
- WR
xg{I
1iY5
!f0`
L(=R
dh9;
_1Ab
E^(`<
Z#43
[ftX
j6#
Rj~uP
-wiX%
G)'ar
<}nS
} 2]
;/EO
FuS!,
h[w
)V^A
l)]R
|&pqFJ{
|-eT
I|jB
9#Jo
_nf'
g*xU[9
#^W6
9P.IZ
A r`
GQ~Q}
z /1W%
6, % 0xC
gGf{5
j(K-
&{Bq
G y
y>l|
^D4B_
Tf'r.(a
NHr=
p&ok
uD5!
?x<>*xb
nsV:/
vh7'
{([m
ZgDb
[&BJd
RC1;;Z
$'H]
l:q}V(
p\O
Z48 y
I01a
b@]<`
CW^\CV
%tnT
]rBfA_V
AW(g
af"Gz
ipwUA
(a`A
^=z?E
Hb4@i
[~dw
3p_d
}UG|iacXUr
Wx><
e1<I#
o8 m<
TD;
*4)~
-] 3K
lRNH
)SkT
7%{t
A'-i
X![T
v ,G
<p)q-
gO7{
(7^k
8XG}
usT#Qs;y
=p?;
"clQ\
L_<=H
2*;n
'Ei2B
iS?=l
1+G[
N+52
9v5u
XTk#
bCi ,3
[sejt;]
I8"`
GetHINSTANCE
"miY
9qAN
Buffer
Z[%M
;Eg$T
)fPH }
Mb^I[
l>6
EV:77b
^irE
VRu
l{~hn
y^nU
fS *g6
y0a{sC
Bpd
5a:`
"O Wz
"$jg
/LbH
dY<
Uq_"
Jv_K
E Sdk
Pu/
M;hV
F=jx
r%e~
pKw9
I
dO_X
?V%?
GU
[i}%
?)L4
HCY,
[T0"
X6vE
b< 8
0Hx~
c7f\
1v_{
>rT%p
8dYH
7 k
A09U)!a0
=y*F
!#RWe
O}a.tk
wcSe_R=
Copyright
;Z\HT
_pFWv
cdM.
ONa3
&asB
sHfg
E lF
q"`>
U6b6t
jjj,
z\~R
5z :1
+33
oy(,
0t]S2
;EH
\o>
jK;j
ou$k
HLxE
set_Item
]8 ^
X(Al<
3~jL
rKB,
&!\s
lP7?
jUQT
{Xb-
AuBA
;~z1
fFVFT!
KU'
W1Y<)
h#u)
&PBPMj
EANDEOxHLsXECdhxmInqHtXmvmeJ
`c/IF
L]r)nJ
z<2\D
5TzS7.
xA&l3
`0?@`T
=N O
CV.{S
2hVx
l i5
),yZq
]Mk+
U*Hd
mtBXY
\A]/
{AYaV f
^u>I
N^p\
qc7n
nQ:e
6N2G
wQwm
AFck
ndRdn
` ve2;n0
WD~I
VGbDRxJSVKMQafZnUjbEZIGiRjvDA
<o:Q
UK:(
8' 4
..Qdt q
y- X
A@AI9
n*V&mY8
Enter
4#;`r
3 6wI
2N@
^V 9z
i3I&
0I4Q(
3 I
F4j}
]?(+{d|
3]|}
# o>
cX *n
P a\
8{0]Rc
m.Y0
?H /
CUk#
MZYa
Math
<C_u
ukPOdSMv~
W0@x
lN/u
2i&6
4JPV
%y'FY
X (<d.
)rn/
V4\D
]C$+
>&G_;"
X[HR
:4qfN:
Ffaz
Cel9#(
mG]\
@a[[
6nfV
#a!%z
;X/Kw
SuppressIldasmAttribute
F2|L
llxu"\^w
:t[yL;
#,nJ
t ?
_~L!c5
me4!
.t9s
<hre
@Z K
27/(
n|J7
)5h.0
?A6
Kz5</
@MNfH
DaE#
cf^x
GPz<
lFO4
<"ew
(<D2
' (w
\(,>y
7{D?\
o0&)p
2 hY
Qj/d
bl@tAs
jA(-
MIx2xC
2b"Stw
t&3
]\Vx
:8Bc
9_2*
# i5
D\:X@C
7ZP=
no/
vLS;,
,\ o.7
@4D7
Alq
yw5Y
FontStyle
nqpD
Nu 2
U]f xB
R+q
U%\T?
j$>J
AssemblyProductAttribute
x/ (
%tBT
[3 h
df-3
Yp+~e
?Dzl)
JA1
@IyT
<Module>
YKC1
"zpb
/{u
W _B
l>wN
#Z^T
fx(!
Db)s)x
LPrF
~ka
VXnJ
#T,C
+=L{
?A[
%q</
%844
!bj!
: ^
{Yko
D^lbf
~%_Y>
@hb-
>vjG
?z> L
x$'c
q.{rh
|jsN
Znpkfln
`&0c9
ba'g
%j':5
Y-J!i
YUN@
Y[^q
o~i
c|3b
_4b$Z4PD
j3w<'
t03hY0Q
SOY|
Sl=
?HFb
.9m
DeflateStream
G9 h
?d3
.MgK'
>7+N
&P@k
r\3[b
A_T 2e
cDi5
>9jm
1vzx
K[i:1U'C
/T%X?
l "E&
PA*b
{tS3
iAg)n7
Nkg@\
`}:]
@H 4\
zMnA
OBh_p
72=ET
L{,vM
~mno
2jQ@
c^2.
cYQw
9 yS
t*/Z
fnHj
0ntR
L"^_I
^. r
rj'L\
z!c\
o ez
im>}
TUE!D
NLN)X?
]s|7E
$] (@
kHxz
"p*P$
>h Q
MD7/
v-]|
;%i'
0_k|
S#skY
pPV5
K_N,
&6,z
;B< V
^?^5(
EventHandler
7 yx
91y{Z
wjT`c
R~siks8s
,~#m
brpp
rB7$^
$Y`@
Y}1
fyD5
<6%M
u hPrC
mx|0;
Y Wn
7vZ]
3}]#
[,]O
$'+b
S4`n
(SzOt?E
?3sq
:a\aR
9W(V
rHs~-_k
mjj#,W
926
du(w
Rp%}
HzLd
4}>q
PkI(
Sj t
#Z?
HK{1
' KX
>BrLd
fI\yE
^7f{6
R VGT
5LS(F
H.Pt`
cC.U
*\{Y
vVL$
jc+#
Gi~N
<*qX@
8_3F2 ;D
C(~
Axh-
)N&oYB
UI
qJ,
set_Icon
0*0v
System.ComponentModel
!_z]
%[7WbQ
>f1U
9$f.=
keg'
=]B9
9MT|
c]`j{
hScEz
?~,H)
';1=
G-ki$!
1K?nz
M48?
JE}z
Oan'
;54S4
I=I4
VX
\u?S
P77+hn
Gd;j?'y)
w/_@
W.2j
#(7k
/ja2J>
|pAz
M.6Y
$0_E
7?g"
T*g
=+Ud
FM-r
[ |L
7I<RN
3@kT
bEH5NQ
be6
System.Windows.Forms
j<y X2
Y1r)
nv}e
kw>o
G{17
vuBo{z
7"$S
F5DL
3.dOdnD
}=C
Nnn-
@=JR{
JeX+
+Jo8
u:T/
8 pD
b?!|
qAo-
De?p{M
KC*
doKi
#=;
>ohn
4X` R
FE^K
]|2*
}=Tb
nA44]
disposing
36W^6
>)9Lh&
PnH<.P
L % .
%H0Y
h"
T!|m
,F'QO
?_d\
mKsc
QK)d
J7bBz
N`J
A\O@
83{i
."r5
\kj=
N2mj
3yU\B7.
vDX3
,x2f<`
C''o
X' :1
b>2s
'&OP F
Ff6X
8JtQ
lk1V
$p=#
xOf?b|
|NI ad*
+=i<
PZn=
4B8ai
%1wzW}EB
'Qsd
.vpH
W&O7
]M26
*%-S<
yxu*
n?h
8ytpg
daz]
i:C8;
&YJ2
Mbl6
QV1A
A<5<
YgXt
w[{"
V'C(
Y88)'
:sV+
v3JB
!B!Bg
2@D4 O~
K{=Z>
#<7(
LYH+9
a "K
u;=q>
v`#k
]Q
nmwG
Bm+3
+`Um
QjZx
Jgn]
w|Fx
IzN,|-
CrH2
$j{`
XoBA
\e`>
i'E9vI0
B LA
rN4aS
D##"
f>O5
LJ$vB
~8Tf
[K^
5>'r
sc.x
BqOD
r(<
'OXL
h~jCA
jcJ9.
/i,D <E
a <:
n5hj
EO5O
|By&{ae/
fG"/
G B.
JtLq
Qv^f
Ql?K
T:a3
v/2+
!G2*
Gr-y
\z*]
#1?#He}
=.Ab
@A7&
K;owY(
3DB?
H.(_
op_Explicit
ir!c
XYHIf
e?Ky
{m2x
< [y
U(J8
-mXd
U0l8!
R*SH
*;;;
_JD"
5fVU
#MZO
jx:;
cWF\
) pH
-*2_3
\&J-
.):h-"
*7x|;
" >(
fid86
s_+h
F{~D\%{
<-@
4 8"
t4v6
zHbm
$-s6
hh o}
}z&!
T}R
W<e[x.
@<Eggow
-]e0{
{VAp
MRpz
,l!}
s=uy
<]bx
4L}i,
5&pfCq
t<z:z9
T>e?
AQkP
sE#t
KiT9
8%\H*
B2g>6
w%Rm
T0(@
T;7C
?wyU
EO}U
_yH`>'T
AZxw
-5?T
Z~A[
l\|5
_->`
* D|w
)dsH^y
mtN'Rh#
zYAW
@!T
*.R$
HMW;
={#ks
9`Bc
Ag*zp
D.)9
JRZ&
Xm|#
get_CurrentDomain
w-uO=
j=+A
yW!SYxd
})>[
&3pi
V$[L
PrIaLXRsrTzUssDgFxmsQIZWNNFj
@='{X
d+1P_8
add_Load
SwS;e{
,jp)
%H_|
+ /"
Rl 9+
1iU"
$mXG|e
}icP(
B r
?JnD
o3[kd/
a[r@&F
caM*'
:qj)Q
PzXg
C.e]t
eGL
&{F/
}[_6
=yijfT
J`w{Q
(H:>
*qr^
t$S=
8H<_(
0H M
NJ?a
dX R5
)COm
#Blob
pggM/aF
2UC{K
7+`uu?
RjQ#
`mm3
Hx2xE
<vHI
L+]:
/8`K
)t+e
oLeC
(Y!y
| QDhe
]"8
e&YM
a(\
OP@6
v]1l'7#&
k$AR
@A!Y;4
_``#
#4.je
% z'
_(I@
8'D2s
"1[n
/l 3+
["Z7
9&M{
GO Ry
f/PU
&|[Q
i!a9S
R9Zr7
G9px%
Fenifaha.Resources.resources
B4:<=
7oKtu
~yGx
$K|
9^:}R
dPn )
?e Y
>AdyL:
`3qt
x"(
D1{
L)\&rM
XWJq
{anNH
T1 nsE \'
1:"h'Tx
7X>use
c ;
'aiV
jv][
7"?
SZR)
Xr7L:r-
[ pr
ALQU
0YWF
wf/TP
_POP
e:ho
aSA6x
\?@q
=r6^Ub
3YU?Z
<G-'
w7L
Z2 PI
'CbJ
g3`C
q._"Y
HaJ$
,{H!iu?
h@zb'
7F\s!
GT,*
P>%N
_^6 s
x^Q#
9,{#
qk^V
oI[p
VOn
+}iHl
c6`cB
; fw 3p
#`5n/
PaWh
4>7`=
0|XR
oZ?<w
Hw%9
5 >E
y4w3
L#E~
NvG
{V$P|
WfDZJ
m~4
bgV&
4[s(
x@ )?V
M&q6
Dbo\
/P#!
'FJw*x
l#u;
tz3E
SZ`.C
V+E4
:?N?
B*L7o:^
0Ay2NU
1,#
xk>y
jzE]3
>+>hu
`fs-
rE:T
,ViG\ks
'd{m9Dui
e}Ay8$
G9dC
uU/}
?z$o
uHyjOEv
N.
E4q{
hn=Wx
d9P
9SKe
_v9e
8z<w
*"jo
g?I>O)
Dp%o
G7{.uF
gU [
hEU>
aY[v
Nr)B
39^T
R}KbFbV
pL{g
8fGl
b*CA
Ejyu
. 7u
j~oM2
L NaH
4n%
8pQVs0l
Mku
IyMF
CU GgF
+1ZQ
"Q)V\
`^RD
5*O'
KTyZh
w\5g
j+:LT
." V
+O v
Q=O)
s1hk4
T1$$
g24J
4FRDx
$1mX
\DbF
<4Vs
kO=9
Pwk
GIx=
-eE/
;!u
Tm 0
s>wK-T
7 TN
I`6KN
Rc+j
);<%
* L"lL!$QlOUf
0PoFx
T<_i
h vE<zI
F Ewu
bMe~4
+\'dIV
0 |+C
dvY2
5xM<L
#Q5O{
C8 aZ
^q0DH
1S}\v
yo7v
F48l
XT_c
BA.X9
gew[
cGwu-I
w5lA
FK <l
Qe`~
MaSy
.^g=}O
]Bi3~
lW"60f
S$cjW
HpFb{
D9"F
Cj-A
iZ*U
`7"%
aug<i
PL(+Sh
O 3_~
A]vk
8Y+p(H`
\$ <
mc4~
}dYz
?:*C
R% 4
j4,,
NOE4kZ
qBc?
0}gm
kzK!
YKMZEGTHpXqyUISuDDrgfLuJQckn
@7kc
| T;
VJC,
3jZ:e
Pdh#
rXd2
B<,vki
?'yA
8R)`r
+j
w;Rw
cvxf,
@Xy$
,E(,v
,Z3d!
Dw7l]
- E+
hUOiU
$Oc9t
V=RN
1S
c@>B
t:V;
] E
$N/ }8
wX16
>}E
bIE|n#
g /*0
=Lke
tX !
;Du"gf
1`dM
@~S=
lX*vb
~o{N
rr[)
JI#?
Y7S}
' ,^
/5}(
%Np&
gf4C
x!hM
_$T[
37>.7
7h43P
System.IO
;sUc]S
WrapNonExceptionThrows
aYK
/MEz
?ZTxz2
wD-
X5|+:/g
RfQ9 +Q
\b/
&j7G
Ujc>y
7#,{
Rw7_
n 35y
2,Ok
~G_q
=:'
fD;\
Bqb,;
;-1=
pRU%
df):
hvgOa
(U7d
zq.VK
Cqa(\/
(_5,
RuntimeFieldHandle
F\X[
JYy;
-n*B
pNbl
:o8%
Z,CS
L/q DG
N3vX/]5]
dO)7{
?`4(`M
&}@:V
1!^\,
mAhM
ZK^p}
-!ds
44w$c
9y&4
kLP#
ofW<=W
1|`F
1R!$
NZ8t
ybd9 %
"9xX*
?AW/
Ew[S
+S[
~8Ig
ugCW
uz=e\
Lu+.
ICtU
Ib C
I%ch
@;m9
< g-
RIvS?
tjW*
{[PVc
F]Fr
q W
O-=XV-
&969
];6'
Q p#
_R#/
cwu[4
0-h7
D ~c
kk |D
|]nZ&
-Z|J
f1o%
B7%s
&VW+/
>!OE
,e6Z
B~X3
v[erg
f)wn6
,1~J
Evidence
nZaG
'4Xf
g8%v
FeA2i
V+5U
E~a,
m#S
R Uxny
Yr>>
X #
MS;z
:=w
=IpM
VirtualProtect
_QAr
=5K{K
e(i
VVg1
_+V?
{%km
UUk
t@yaX
7;@8\I
G_5=
C (G
{BrR%Ux
@%!fJ#B
\ _ZrCK"
@yY_
4!b5
rBJQ-
HQ7{
jN3;
3<Ww
ai"
_<sj
g}'<f
\RqO
sZ -
_IqD
P*}t
eJbQ
&U/<
=VuuW
1$U,
nt~w
[L
90IN
'd o
La/#
fS19
=\S>
IU,[
#\Kv
. 1p<
{R2D
J*q,
GT2w
)bmjhmB
r^w*
mgZ@
bwO]
~pNF
.aW3
I<$K
|vcV
Uj_Q
N^Iy
y*2_
+\'^
{v4l
cnBL
%;QM
Sb%
MjQ(
; |GM
*Lf
l)36'
nRz7
;3Gk0XD$R
Fhwz>
8_x:
TUJ
qhzH
M.2#c
g )*R
Wdf{
{C\
.o_f
dHNU
k~Rp
Ea6s
E!|DapT
^[P?
?7<,
get_UTF8
90XnN
8/,Ui
!|>(_
qyja
9cAU
hHx`
|k}~
3rcg
Ls
n|k.
\W4;j
P^pb
VL 3
\g_h
~9bF
Ug1(
Fdp#
,F<9
jjrOD
hUm'4
odQ%
s|l.
w"g{
c ZQ'
M;Ek
Z.:{
lV4v
D<M9y
+c[h*.^
Kzam
dr|K
;8D'
@ev+
AQVf|
wVW b
QI7`Rz
:C%
x Q)
gbmIiiVHCQtUBJnCoSMnmbPxvlYC
+cDx
r1 *o
_7F^9
W,]V
Q}8S
~aGYw
Uk(S
,xqf
s&Wxp "I
{kxI
}kL 3
CO `
68+]
m8I
c 96
oR ;
&CX[
{ P
$*~F
2q4kD/
g.au
]}.$
aiY;z
O`M"_G.
R!f}
aX<E
83+A
{,9DB7E
Br4
4vh8Q
:j4Vj
^!9]
1=0j
B& C%y
6d^: H
: y
,gUUq2lD5
%z RB
V J?
thZR
8U}@"G+ULsb
s}*4
-8_u`,)
z VQ
vnqL_1C
.p /p
X8 <
u_ U
:<4Q
^Eb>
F\AQ%
nwro1
YY&,
Asz!
(eqk
n1h
QxoU
Jcep3
:;hf
f9uKO
*B8T
Ln9F
8fX 3
L3q_u
zu7
JY\5
-3@c
[="W!m
8D;<
-@PM
~icA
5sr+E$R!
w 3K
mc6_
Ps>$wqe8
p@ w
1.3; ,
A2uL%
cC.
,V E0
[{Ex
1<$%'Gu
z B$l
s;W}
jR_>
GuidAttribute
*WEM
?BM=z
'=`4.
|3QF^
1"oA=f
<Q*C
o){M
,S#y
9 i9a
/R"*
\gz9
LhLj
][?5`j:
i\iJ
Q:d%
I3Gs
k;Bii;6
#` 4b
rPRLH
BJF/4
&kXP
+M%5
,1Ye
7:Wn
.+/W
uGx6O
D2-k
-in)
M)G
EV);h@6
kF} A
COh:
9!`$
ui89{
)17G~;F9Q
KjYYq
_hIn
:ze=M"
~o$a
jFX#
nkib
UInt32
md!c
gZxP)
"0k\y
Za]>
9\i%
za&"n~
S5qu
~Q"Euv
!Sg5
/YM%q
u5 V
Fys9Ta`
q[>m
JLH"
Y9VZ
X*e]
tv$pD
Nny-\
qO&ODW
i\!Qi
mB 3I
%M_b!
aB3l')
kL[|Nt`v
lZnc
n1(G 4
Mx 1
j"ie
9p0!
=70\
%WM'
$y|j9
M ?-
'kt L
;L?6dE'4#6u
) AM
@l^+
XMU)
+x$
ar nxl
A ?Cq
_ 3$
mx?/
Wpt_
@aI>*
#Aj@
ICryptoTransform
m6Kp
/Op,
A@sR$[&br
add_ResourceResolve
7fup
+L|R
iT,-
*-80
AssemblyTitleAttribute
qMirI
5Z5%
fen=
t%:.
:`%v
(Ns%LHA
.g W
qw\ >
R0~wq
%`t!
~8[ ;
txPB
v^(PuT/eE
N N8
F:4F2C
j=/K
~"6Aav
I<~&
E W2
v)ca{d
e6]L
mXe!
qh#l/LE3&
V 2:+j
OK~K
ks^~<dH
1jhk
9_nz
^xI
3~=
M!T'G
q2S_Y
huAbF
$A r ,
dh1
)R#O
|^7~1Y
|nK5+D
@+86
S"}? (
h1|Q
j\1i#
M+(9q
nS^253a
h,KK
~ s;:
"YH
i_ D
zs83
}f(]Lz
BR7[-
.EJ_q
oWh=
cui~
v6Y #$
n$eNX
;mj'
;qYR
%~4JE,
78z1C
#}4z
L Hs
9&>&
^DEt
'%u;
@\yD~
g,R9
< ,b
wP"K
IzH|
/{N}
m+.XI
UQY`Vx(
!Q;3U
=6 T
9C$(
X@8v
k o,(0
rWWD;
( D%+
Gx6u-
:.NF\
='pB8
,,# G
]okk
t9h;
G8KN
K6,P
Cs*^B
\ijmd,
s,Bw[
9@OY
Q8)%
?GY[
{&i>
T&(
tSXY
Q2/D.
;[,$
AH{
'L<
60T1
PP#*
z g;
JRn{
X:)_
Kn0;
"+Af4
+>$"
kJ!*
W u\w
cGrY
+Z`(M
?@_F
get_Chars
"mEV
AK 8qMm
CryptoStreamMode
*M<v
{(SF
gZ6y
>r;`
nHiY
z5^J~s
iciHd
"uuB
BT4a
+=/1
(6cN
Yz<z
!I=9
8ukG
,5;D
S(ndsB
f D'.
zB?
:1>P-
.2)N
%d0z
{2+3
%b0>q z
$-)EU
i8YP
2sXB
6g#*
'^2s
iq6 '
3s.F
J8{+
cbBE
@|;,
c ]3
FZ,P
WD>x
eto@!'
{J #)
Q7:)r-
rwNU
f`w&^NG
w%sE
r_my
LY!g
hg6g
e3W@e
hg6c
I31l
>GSA
ES
)\|B\-
` O)
z'07
OC:-
4i*!
nZ@/
8Av%>
~}wvD3t
h5_y
_VGZ|
$T8Gv
B.{MO
j#m(V
b|/E=
cR#}
S/!}
$@1J
vHsM
)30k
U`@q-
h3bn,
Assembly
pd4z
;mR1
&U F
& qK
[hd'w
>pSL
4"a`
{PZY
GraphicsUnit
D4qM
R5@e<
eqva
8Lk*2
7_*|B{
M7nS
##~u
`)[W
e6-Ey
SuspendLayout
,C9@
/ @vY
hU9I
0iw~
4,v_s
ucl0
%YX@
_KA3
o/KB
`*s%a
tGy90R#
opd5
[f+=I
BwD
-6i(
P_n#
Ys m
set_AutoScaleMode
fD"R
] KG
a #ol
Szuk
FI%=
C4w24
LLg~fC
0gPu
VqywcE
?!v$0
?6r
\mJR
U:9[~w&
`sf>.
$[:!
c=2(
|{,@
x1!w
C<w3
xpZb
h )
kD:vj
11M]
t;^!0V
R\YP
0q+SOo
D,,D
7;'
"+Lo
t11J
9Hj`
2^-
,WZ8G
}S2)*&|s
\$fa
Ul`G
yu"D!e
b_>h
hx3S9j
|c({+
f4w3
?M eD
1r >`3
!si
l;e+
[B MY
aI&!
>a'I
7 &
d$LK
}E_v{
:9j?(
!XfcK
5ZvZ
D/V
HdwY4
@D4j
w+A=(aR&
\QJY
h`nm
|G3cGEB
ST~s
S'7.Ndk
;\(i
lzoY
[/3Z
[laW
d: 5Dg
w"?CF
z"S~c
:{)0(
7rM"
;<as
hU96#
&j(GQE?
c@2Z
GI,*
fo[-
gRB9
Q8Z&S
7P1X
M+n{I
@6=
=>7(
<aH
arWX
K1p@6
{$(_
iVllt
@>VI3
C&w,:
-C.H5
nq40
,]5F
#{7:
\aipw
D\Q]T3i
4B<Hl
{U8q
Vl0&
W4k f
J10$
vxlmiVusEFJPdXiymhjqDfpwaSukA
z{2l
oP &o
M5$S
, WQ
8.'8
9Vsm
BaCv_
tL!a[
.zB]
cd(Y
AssemblyCopyrightAttribute
O,lAgz
?D^,
aG0m
9}*8vMJ
logv
6K+${
:Zoq
VKeU- ;Y%5
:P bJ
D e3[g
Td6k
E87&b
Op g
o :|
3^0t
mY]=X
T^.)AV
7jJ\LH
e3qZw
xkBT
!9)C
`\lt
ufgY
DS;L
o`~p
20o
& )
nYG|
BZ}dn
&mp)H
8&1*DY]
&'yZ
q6$)
R}-.
vN<
vV'$
Uw .2W
j!?6
| #x KE
8 n<
+,<qb
Jzt
*$HXd
d7eb\
vPYO
=-N,
=Gm;H
b3J1
%#uA4
mY'0A
2lH
MK"@
}{Q,
B #x
`}#g
e6SM
l4D$
` Gy6
YN_~a
!]
/9 BA
V< 4
%RM)
:8`
-.pC
Type
5! 7
!<#/
A!l7
!+N6
a/mfC
V?xZ
cq@3 T
3Y !sm+
O/C2
;zM;
@ &\
FQ&6
l K
R+Yk
pX&uc
Oc;z
j-3[?Ba
SH75m
8$j;
>@Xx
5/9t7
56a)==
$b^<
1U"R_j
0+V^
tD$&S
IMlpZ
.2qb(
*L~
}Mnz
(T\s
L"5s
;3W*
!xSce
[Z?Hf
t7k\g\
Yl}F
FykU
5Wu`m
QhqD
.cctor
vl C
s?ZU
0L!q
set_FormBorderStyle
@YDB
J6W8
qPRg
|)2W
+cob
/% hK
"9</
8 "? 1&m|
K.tC
jU<=
brhj
O T
3~y5
Sgcl
,9rV}+D
'!.p:e
h%G+
m:!%U
y)Aw
RE)>
1&>/J
wI
tlm@
k{(.
gQKmq
q5>CM
H{b:j
=?@{/
>AKn
nrQ)
I6!;
-8#P
H%4_
Rmrx
fSb^
2 ,6
rZf)*
System.Reflection
@a]R
XY A
VKUA
m o0z
`d`
2['? ea
.Bp@
@ ;-b
i2U/
va3/
;i\ &
O+/k
qG9X
R.r$
S_AK
o?UBs
qiF#
^arW$l
9j^q
xB|
r\A>
c{U62
By\u
0A X
})p!-
i?yo
j670
&N$HK[\9
?LN'@
YB=+q
4oYo
/V$Q=7lKp
2EG<\
-k[H
lzH4Q1
E.K)
A U:-
e{K?
~H"A4j
i8[P
4lh
] 1pG
XTX*2
[d/
qn6N
1ce#
l\g<+
78 4
IKFg
AssemblyDescriptionAttribute
:|SMh
n(U+^
x=*q9[l
j?wkr
!,A
=Gzc
A2b&A
t&5o
Z+r
j!Z|XO
uqSn
>K/aW
(Nb3( 6B,
&>K"
; HT
hg0m
xQ[l
<,pum
26L[[`.
8.!I $
<*wD
CHOj
\tGz
,@kQ#g
j1^mc81l(Hd
X Ta
YT5j
p(c
Fjj^
2.!@
%f}w
27mH
T.Et
qPq@
bk<
B7Tc\
#eND
GT|r
A|^I]5
<s5}d
6i2suI
6 XLz
Uep-
!7Fc5
TgesVMJVwJphdtbMOpSCvNyrcfdAA
<wU_
KLhT
tJ5@
m[ l
q_][s E
W/oQ
* pV
nf(m
L;K;
System.IO.Compression
xoUs
kO7)
TH~MG)
^v6)4k![
vMl7
e8Tf
A+8X
& y q
A'[3nc
p{I>
bfx`y
Ti69 0
%LTC
r7>!
!GfOD
hD53
QbNuv
lZu 9
/7QD
Ls$;r
@aG[l]
ba X
f^9/
wZP'5
Mu z
; 7
z1O=)
!HHO
|[\CF\
;^j'o
{T|#
o\%$
njj{
iUoP
>;g
@x==&
f`=N
Br0l
;:v
<8Uf
tN$A
!Rw?
8T|v6
HF-_
nE~|
OV4`^
(&z
vL.b
wT_m
|DMx\
;Jpd9;
sfV:n
f$7%5
|K9S8
.nx\
"8kY~
;Mpd
LXX2
/itb
Rqn=
%f_|
DX {A
pO@Pf
Uf-D~k
/lj|L
K!F#)
Xk>0Z
A)o| +Y
s4wQ
j@JR
WVK+CW
d_64G
Lw[s
Y6c)
/oI^qF
zMG5#?
v#_y
iEJ>
~dC`
+KSRG
/zq}u
Bgjk
? +[
Sr:m
7FgD[
7y &
!p1!g
5GD+
kporBz
Ap-
(N-1
] bu
z.{c
h OX
2+u-
|ONe
;]pE
LP'T
d##h
7%+#
oQ-C
TM(ZF{~
F %G=L
1SNY
V^$
__|W
N o)
|(1A9\
6ay0zL
dwx
*$nc
Y'[c5
Wxm}
vk]Z
,Xwlt:
zCIQ
#MR,
0;}c
GLle
~a!O
Egt?
7DP{
eVX6
<_t,1
3<NH
^-
?m&:
Q; Z
_>S*
]`Jf5[
zv1>
n1|$
67I[=qr+?
~1S>
"L}@
oYXs
>k et9^
Q2I'u
S,y
fI8B
}54
1,jg
vSyZ
2XeA
'5I-
9) |)*
I$!=
zx n
VOZ>i8J{
4K+:ii5
Hhj_
zw /
PjPb
[ep}
S=}(
W=r
$fW^
=L ;
;F%Yv}
A$.7
(*e3
KoC
p)Ox
uT9Lq
@Zuh\
{#!C5
-_y8P
t{fe
DLiY+wS
jTn+
y&}*
7+}d
w<&9.
F/ B
# R[
42 p
Ln82|D
'- -
p{dU
Z$x^`
Q zw
64c!
"/plo
1.E]
'6Dq
%+l%
: 2
Y]Sj!
4 <|P%
TgZ;
HU/~
H@ (
#)/
\oT{gf
q(R8^
[<v m
/jW
jclgu
bHNU'v
<K /
2\.,I
Mc-\
A'dAku
R~}U
AvUe
C&kCB{_
,D7`
\i4
p$0!
u? 4
kLZ|
ResolveEventArgs
r a_
!Z9h
DIcTO
M|M0
i~=7
5 L/kqV
Qa=M
mpVm
DjLM
r& ^Do
cgj<
eG{
-y:y
lapgU
/Mh?
IT3X
Create
)Ng a
etn4
+*!u
x];Z
k f/
=qN
4bdC
wD )
9r f
-yR{.
i7]L
"[tj
%`|p
Kr+/
V"vgee
F6*Q
k{Om
Z5Z
S&J1
*3f^
YE&QBq
;GG
}1(6
% ]+
w/9@~
(.8BzV
YQG9q
B sw
bkv;i
1/|S
't$G
Z.x}$H
fu#iX
;Iy4
S[B6@
sZi(
5 /xq>
mj`c
=f9L
]Q~[
l G
|' :qn
@ xq
Z^c~{
IkR6
/ wh-5^
Ej9>
3 ;
WVD0
=Y!
Dz%Qe2
})nL
HSE?
6}tg
=n
#$I|
+4VC
<e>t!
t4K}
a7Nu
Y<S>x
>3Ft
[#/A
<]mA!
* ?W:r
nP 0*<
0vRR
p1)"
P+@?
Z]I(a"
c_ %,
mg"H
+bVp&
\ F+
*R!"
@3[H
<d/U
#W}_
15<Py
buW[
_~gW@
gUut|
^,~
Oj*c
J_wI+U
sVFyCBS
?:'Zaj
?q\H
1s!A
S%7G
Gw}GZ
Q,{uP:
s(%X
,y0r
iJ=u
1=q
5 N*
iw<9
w\2O
AssemblyFileVersionAttribute
>4oN
.B'k
0mRmz
vY i$g
S&<z
System.Resources
{h`-0:
&%ia
ZP}B
#w.>
PKn~
4;O'.0
)2rU
-y'x
-HF*
%Ja]
6+Yv
/{^>#
#OD;hiF
Bz"N
KaVL
ZZkj_
7O{G
VsH3,
Gn]R
[n 2
X0/D
7v3L
O M }
0\^p
X~&%{
R}4
gvZ_
Ew>"
\0]gH
b2kf
;D=
Iuyg
Icon
2MW_`
_72G?Zxql
{6ky
^V!A
G"d
g]$^
R_]y
^mCx
N ~k
;U+H
qrH
B]#Nwd<pU
#YD\
$- t
}?Ld8uE
,M (
vqmI
y, v7
a1xV
Font
[JDD
DV@/
W>#1
icGj#2r
>p80
H"an
%V>@q
]b0*eJ#
N BNO
WGvY
_w'@
(M<zl
|#vK
hTUn
)>!W
\':q
Y=tX
m:"Y k
0A7+
;L4(
_@63?B
OG+<
,:!:
Y,6=
Z\.>
wyVl{E*
n:gU
7mnz/
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
qp^V
&{`{li
W5i%
pv%\dI
V+I ZN/
7DnD)
&illq
b@+@
1}Yo
hE0|uc
x48X
MC<m
N?8
u6f
5\>@
{(TR
}~4}|
#]1!PV|
_=<aV1
F\YO
&4=
p P}C
>8||#{y
@)Ujv
-}&,o
d8Vfv
z4Mq
cc^o
/E-]
%B:t
Qk^
udEI
Zca5
X1J2
!n?U
ntH07(h
jR2Y}
_=LT(
0PM}
fiuI
7:d
2&: 6&
=S/
BfDF
N{5y
p_@Fp
n'IT
NmHR
IMil
Iz(-e
}@>/x
woD[3
]8 Z
2bG$
b;9^
;{zNPVLSr
j m5
]'y&b
:#2\tK
S*9yi[
-GJ>
N9!
System.Drawing
Gymr
D,\7p
<2e^
Ft 4
*20z
,B1cp
FP_K
Lg~t
'IJ8
Hp@yI`
HO.O
:7.|{ns
+w s/
ysR+,^
d0^
htV1$
vclH]
xa!;"
t%-
C{I:
(Bna
(}Vp
nOqNs
0B{v[
'0|r
F7_" c
#|Lm*
gsu J
U7?j
Gd5
*ao;>
dy,@Ni
K3^~
^j
SPWsg
.<!:
%Vy%
JbCx
y52f
ucM3
j)F[dP
SysU
mBrP
wyk]
=E'O4
Diu$65
G m~
*4-{jRUB
7PBg
Q@ eI
Vui>w
c?jA
U;^fK
BO;
wJT2x
Z4=p
'PB'5
nlWFXz/
{h$
#h!H"k
_rd
x 6E
%me0
x3s|
2rWaE
.>{S
oQ`[
?b]c
;=xW
J^s1
W[(`
Kp]g+cU
s0h/gY
L 9+^
hxGn
<K"k&
-VO_2
|Iq5y
SuES1xC4
wd69
DYSO
y>{[
fK4@
?Ut
ZgKH
}6N=
yMdY
&V+r
&(fmDS
3\gku\C Tmk
Q^E$
%"@V
/+S
jsLNY
RAJ:
_Assembly
Y=~D
11ZB_J
v:>'
[/d
1 R!
K_m?#
tjWmT5 9
MvyU
AssemblyConfigurationAttribute
Cxd3
:,VN [
wo O
g P
;iuuF
kXtZ
{CO*
$\>)
9* 1
L47ypGz
`Xj4>
>FRY
i6*_
h-+kJ
)cB-
KZw)kG
Jd}m
|_Dh
l.>S
rrW:
!9%Y
,Aw2
8yo \MrX
G$$@
^{Uw[I
y5z<H{
hQ[=u
J%gi
_#l8
P 5)
ho)9
GU[
AG"2
@%DV}
=tdo~
){q7%
4sd}
5 }Tw
Zh%GS
t(:<>
pt5\
{_CH
r46h%U)
% $1a
T&bH<
u^'w
TO{@
9cHlW
_F`pK
! ~B9V
Rijndael
-= }d^
qVcr
k3Iv
.;SW5b
o+(T
$4"*9
||q>
bmJF
|f1S
T?E"6
u0sw
C8xc.
%_z.pT
w~q=
Z! Y
=w ?
Y.SQ
9iWbNR
_Q<+
oy&5$s
yB'{
RM-}
pdOR
ua&c
b5]By
Gu~'}
EZ$2,
`#*-
*qH% |
% aZ
oV`P
+Go:
rw=R
%` (
( $
\"$6
N2\Y
.115
fc&>
'vSn
Y{x
cte]Z
4C s
<U;O
MS3L
=8<1
-bW$
]6 +
y*:a
|qBTiC
pq8C
%kgr
K*Maiw
fmDi
^O>.
4|5 Z6gP
o*
0 !$m
!sK
Rr[=
Xmd{r
T8z&
!y7m
hz9So-
7 eV
W;N
Zn3h
46iWn
k}&d-
._W#
cjFO
2*):
&E ?}
4G"&
;!Bb
xO0h
;?8.bE
w3OX
P6#+
:yl^W
(: a$
+gHa
8a3
?O|UK
Z@j~/
f3IK
flAh<
wowk
kzV)
>OGZ5V
4oqn\
}1l
}y(#
?V30
O1Z<M*S},
~ g
#vuZlt
3(lL
>X]JUw.
mc)5
Zatba
mG c=6P
w66#
+/7?
uIgf
)Uly
m?S$
DtktRAATaqbtsLOObNHagBKxEnJE
" qS
U-*>4\t
H(S
C\#
Z2E:
g{OZ
2>kH
8v>3U!
fW9
YS D
`XAx
p kx
hx/C%
z$f w
?"`
~)29
p"'aBg
B>B*
f@Ok
JUi
ffv
m7.N
5r\Mc
/.pkR
8a /i
v2.0.50727
|qQ%
l+|j
Nzxyg4
@RiY
N70i
#f<<1?#m
ibRh%
*/
uTK7
1bh-G0
X v-C
#Yu>
;&$h$
fnWL9 T
4~~,
( 3!
Fp6S
_S\M
2Z;w
E[9b
_TF5S
M}0sIB
sx3@
+fKH
'm^1
81?!>\
tPYPHSSmfgYVnBbyniLCCvAbrOlC
B{A*
ux:e
gQ|
4i<<(
y;$k
Ny+_f
|0ck.
OCj0*
y&f'
wH3_
kernel32.dll
aabZ
^nJ5
ZfF
k Xb=
sxb^n
DLlA
kSjAx
>PB%2
1yV%W
SymmetricAlgorithm
& >0T7
U/#
Daa3
LwHG
'4K
6xK$W
!Y|m@
hAnBc0;K
Gtpk
r Vb
fEcE'
|k}9$
/7-&
fP8,
yz|j
3y*k
Lw|-
D5H.
G96U
\X7+P]G
sNbC5
>xU^
p|{#7T
Y~QJr
[gfl<
i{T \*m
UW/>/
WF~=
.4OE
OL6`;
`+o,s
bg$Y
lu'4
0E 0
^)Af+!o
ZA\f
W6%/g
c!?i&(
6ntM
si,Z
rf6*s
KCSFBKDBwGiAYxCHSmTpwmJSlVpgA
`e?,2
%lEd
LA8
v]o"
,I=I
"G&^
}+O25
JT]W
q2YM
fs.`
wiV6
@d<]
=@m|W]Ef
2W]Fq;I
5e^b
`CKZ
UIMp
"78:
xyg$p
,6lT
@Q}`= oA
[aSL
9*iCS
^wS3c
k$'P
=Eal
Ve0E
7gyl
n(&]
;N@AC
4 ny
elf"
5. JnowI
JYH
[!Oj
o{iq)1^
qm[_
2@`7
pJ$h
{6fc<
PG(S5>
Gdb 1/
)))
}`o>A]
1Gs3
m2-km
^y#sc
xrWk>
;bcl
LE$v
&Cc<
GetManifestResourceNames
BE&'
r)$[Z
?T-t
02Wd
(tY-b}Lu<
8up
qA gl
set_Font
d=?Y
(lgj2
)]0K0I(
QC)
1[BG
-A,ZKk@'
ofWN7
(j "
kNQ2
yQ;f
LMK.!
}7 )0
$@\i
98hx
E3J&}
3EzUY"
b 5&
wHG2
lc&
dd ak
I7Zg
gbPipP
r, Ii
6u87
q6I<
B]=R5+gb
.J>m
|38T
7^I4
V,<_>RA
Hd
UKYN
N|p17!
MMxZ?
e3%s
aFa3|D
eT\44
<78pF
)5%D
yY;3
r1*^x
ta7x
`\.j
@xtv$F
S9e#
OyDa
i82;
!WKP
I,F
Lm~r
[96:
DN&9
1]y^
^kY?
*,b)
vpks
%aP[
` >J
9"Rj
2018
?N)-J
Xr-v
WN]M
zK0f
Bf#
3&-7
G5MO
(bDPWc
g(T2 ;
gmVH
<q/}
2Nn+
K0&5
Z:rQ
#_d6
k{K
qQlZJ
'=E6C
}orL
p2=et
eM gk
@FU&
hv`&
RHK(
%dpt
NFEp
zHK7
rC 7b
ak]V
/;2+
J V l+
P'/X
>2(p
Q3\6
%zE
:k}5
yBI|S
?_.2
Mr@Ry
F*7'
#s"vC-tx
(*<E~9lq
!t%
1UeOt
q eM
^9.1,
'L__
Rov;
I,%N
8:.B
ZD
MW1+N
!ua{
hAAu.r+.
"S[ C
~ w^
aUng
-;eX
<u*MT
/^;v
?K8w
k&S
D;~H
!bSmY
4FZ01
!,8b
FTB
/0r\(fA
z.cqU
ND0R(
0e(:
3uUT
$\4 )q
F&&
@!m
MZbr
|]tP
P~UB
&0'g
\MfA
9me"
-f6|
QR\q
s_Gv
A,$q
}1b(~
OF_sj
D"S S
a5Nz
EkqO
bAon
F3)$N
W l%m'
"{p_
z H>|r1
?_rfbw
B Vi
03.N
4nsTO*3
DC~t
>jmd
xNF9x
-Ut"
zF][6h
@4 ,t
(ykzl
3U1
|bUw
Iqa.
jE(iZ
%iH6
SX!G
Nn|S
t:a3
Ht2)
J9cV
c!&j'
j4 &E
, lJ
xYZnF
:aNp
1$gc
d hn
` '"
H R#
3<e=
z ,d
dC"{
F#pY
G tP
FD_?F
Z=VT
R51h
n UK
! Nt
gy_j
8tSs
UI
\'R
.[66
cj/H
xe1I[
:-,k
w\ $
3 6
e.Oh^o
:,<
16#w
HF'=
bd=%
Pt:
# [f
D^p09
1_hA
xW2
FJ6Y
BFX1G
gAVq
X]BP
r9 3K
/Z7
EP{N
X\92
}V'w
V]c'~]
|w4M)
8wiybC@
9y 0j
))2A
3;P6
;Fy2!.
0:-e
#Y,,
xqJe
Z{[,F
*D Q
svag
Seyo
}^Ws
;f7)R<
@kk
X"bSR
UecSz
C1J`U
v\u'
:P2N
cJd7
>gBm
eDy6
v+W(e
Puw0
[YxY
$d$
q6kO
[yKs
;wA>7
{pOX
S<P#
%X0:
tjFl
mhBKbhlHttaEPLhEncsvdlzgZqxR
y;[H
tA ]1
M$rU8
Y6)7W
b/0}3w
O8]qb(
P 7P
LL8
|Q-
h"9z*I
lm{;
axsL
HBV>
]HA.
.aViv
,W)Py1
tjFW
c:`M
" KU
m8M;
'ny|f>
-.0-
8I) h
@Zg1
q,K
MF'+g_
AR5#N
IPPn0J
xlTc
r=m`
L|z3
3$i;
yOBh
EddL
(S-Bz
zmh`
n#cv
vC`3
0Zdj
.ddL
9kCJ
Yk57mS?
(VJ;!}
xzEQ
49'.1*
Pd\r
!:^c
U?Mz
8C6;
F$bZ
fM =
Y_P;X
ed*c5~
|:00X
$kt@/>
?-}D
FG5oo/
M' 1
4tKl
J5lq
m8og#E
G !A`
`E;-
sCWO
C[/L
g _M
A MO
q&g!
1#;
%bP1
=Dg,
h1# r
HFh<
NN&G
@dEoq
)r~[
4=<=
#(`+
#`fv
m3)|
>4'3P
LJT[)
"WB?L
Y8uH
%:Cj,
XyP:
,zbu
b`)j
]RB3D
frH"
"*yPQ
5Z`
7YWf
,Qs'
,X/lZ
;'FpD~F
kn4#
WDWOR
3\cS
VFv~
@l`p
&r)f
wk ;)
<t0bM
{tvO
Q:tY
@_`[
E]u)N
-lccz
pFE%
wE{
A!\:N
-7f_
9 QJH
%1ji
9axE"U
6moJ
/b{*
nsV 9L
'bC[N(
EMqs
64e"
Rjw.D
7LEk
b^%:
b`I
W[JD
YP*R
G4"NH
~?Wr _
c2Xo
ut'z,
<DQ4
7S_YTTQ
7V G
wDCR
{LZ;
-S/A
]5zteC
;ycJ
`D?B
8,@,1o{
*5'S
*M}.
P^SP\
9v{
`k6Q
YXPm
bK"x
0sWOO
#3SJ
j!bf
*kMav0)?
QJ-q
'2#|7i
z;%3 D
5^?cR
b<]nq
@^oeO{;
3rw`9
3P?W
H-D+
i@*5hy
e<!?!
-cS^%
5~lO)`
vHsn
W*6e
|i+!
V]*7
9@ (
cd[w-
^aD9
P_[J;
3<+o
FD`QH
v]-_f
_1d.hNe[=
(?]n
3CVy
ebEU
b[D77
TsBr
k=)zI/sv
Db\9
i/[s
H.>q.
} !-
>Qu ~K
;$1a
^%:A
q.?jF
Ng A
o\699
@P-L
IAz<
79\;
CZq7
J[[H
W/%BB
Q5o1
O[3D$
" yLi
5=/S
G?G!C
*,'L`j
"K~x
;=0`
V'pC
m4?n
SemfoNd
CD'9(
!6G
`-02#hC
9eL9O
/Ocv
s=&Gk
ok` ~~
>sM
i'hb%@
S)$ !
yXZD
|m/HP
0_{=
!!Qy
n$ Kc
[(>;
W!N1E
XL.T=/K
}{:!
IEV0
1mJZM
B4B75!
\Aa
XE8<
|DqnL
}RN#j
d2Mp
1s{u.r
kJ~*
I%wrL
H/3$Ag
b!hj+O
tk
;l b
@HJ}o
I R.
get_Name
(^%N
$ eQ
$6XUhS
e_ E
Nm"\We
t-Cm
1FL@
v|OX
kEq/
5KHv
u,!UBm
x`7~
8&H8f
T{Xx"
^_:f
&p4R
jlJt
23Is
w,q2
PN,z5X
8Kri_
)a*f
qvc~
oj?:
)~R8
3x{`
P/A!
K m
(R^XX
]5.j
0K:|
3}x:l
r0`
_, [
NP #
+s>v
d4j'n
#$8taQK
K,7p$x
RhTjHqe
@d[z
/Qw~_
P/,
>(NH
jo|w.
=<$`
Zkg
}oLg
$nwEq*
rl]*
.2=1h
neOP
>_xCXX
`fTW|
4!qSA
UNMi
HDjm
W&)
Ius
j-\@
_L}\
&gwh
yP?[
R iuD
PEvH
NJb}
/+x]
mT^x
IB!6
6FlOf
GA[
N74
0-?%!3cA
]BG6
~1]m
<s>[
g&0g8=
3%Nuw
[NRil
`^_y6
7h$!V&
27u(
>#h\
TjuS
"ubr6X{
"uJi
|.BV
Q0{/
aS#c
sNnz
mQ'k
++/Ii
]GS)
gi39&
(4bU''
A# X
rG)5@9n
D33w
]2as
xg}-r
Pu>e1[
MC:,
l30o^
jQ"S
yJ7E
m%Rh
xR @
6O]}
Op,|Z
op?e
p@q_j
zxq
y[8B
"0D1n
P%/0
IE~,
$j6n
s\:-X
*ZZ*
>X-X`
Z[ CJ
WS1
taA
/|TK
!|rW
.9'T
*YD
^ xB
2f 7
g7kb +,
8hB=
q< ?$D-/;*
~T/\
jX+
Rh :lz
q6x8
kES
]{v
dOV<f
+y4B%
PxUG
b"5I
t( o
qz%O z
_u0%A7
kK^q
|T?.
Q~+X
Yht.
$43v
a5![gQ
HR:@W
t]g"h
AP5%N
zBB_
wg$3
?x!@wC2
yXo1"
b-:hq
I`GT
II1>
8[oV
s/-X
ARIEv
MH'ZP
jK(T
C<&
FormClosingEventHandler
~g*GS
rP Y>
[J<N
noMiz
?wVR
A\b#
?4"4
%y\[Z
wsuh|
Vy'&
J3pihef
\6{w
A2'1
r= _'`
n("p
2+t3
Rj%H:n
A{Sw
W)&$
I'Nb&
K`#+,
*G4 <
%`H`
9Dgu
Write
& p
_b61
l4J}K
6-S&
o}n'
(]X:
!jxs
i("Y~
92V6
${=
~~x'c~.6
DB64&?
qG|.#
hGTq
hU '
0"9r
) 8t
&V!c
%osq5
*T*,9
'aA8
b=t&
n92=
/e4U
>~7Ft
PUY3
B`$
"?[M
;19v
2bqX/4.
;$Zt
eK{_
.W/?aS%
Uc.K
$Er}
4b$v
V\E2
w=`3fg
2>Lo
x")z%
qW.#
M1Xa
*Raf
G"o xH<
^GuA"
`HV3-
+|Ol
@V-wG
2sH-
],TL*R
6P]KJu]
X pVh
s'`;
E.v
3:l~
2SFIV^
A (vIc
D]Q&
^HZF
LIg-
]"qBaa
qf_
yLTh
-y2O
Z~qq
I<7Z
{QC4
kw@X
]q'Pm
D|z~'
K? {
V+e"
V F
d(T`
<rsT
w71C2
TxOz
Ka(Bj3?4
c!MD
B M9,
L7Uk6
KI0c
1w,A
f"@R
!CNQ )I5
T7~R
~'6Xz
Q tc'd
u5}U
`Unf
lOFF
O^Ra
}SJ
J(LK
dsAt
?C%3(
]1(f
@'~J
'9L5*
2.fVki
])D1W
!M>l
{ /f
N=&z@
[XA/,
[7%>
vAg/
!d*:
F%$#h
CreateInstance
n906KL
GvI7
< Ac,
J1/nJ
I=BL
@|zXQM
P`YME
"63h
zP%~
System.Collections
n6n6
,&*
X_z
j{$>R
p&&Np
*M"C
!7Il
+ ?,
c TS
P#xx
}[b
QP{L
P%P\
Rw [
Wn=r
N!?[
*'W"
$Zo*
2.c/
BC. D
Z%"a
Environment
@'m%
0'D1
=c,/
u,Eq
2&sN
, e/
OKLA\
}OS_
eS_.
`gK(
x<
get_EntryPoint
;B\@
jhz(
CZmSGw%6
i7%M
4CsC
R=;r
\nXHh
P[M~R
BC3*
o.jl
2Xt<T
u,E4
Ghte
ZDr^
^}m"
`8?o4
6E:3td
xlU=
TE\_
I:_}"
oSP$
x xn
%omKKO+9JP
c&KPJL
_y$H
JP`
xx
`$-F}
O-vhl7|
Gd#U
Q]]
o*.5
z(vK
/%Hs
U%co
Ueu^wG
MTa]
$+tU
_H /
S#dhY
<TAP
O]4,@~
aYF<2
*-Gsc
;l ]m
BpTF
5v~I
v*J
(x^F]
] 7b
Si ~
r%j9
h"r
:CBk
y_%DD~
aY>v1
?ov[\8}
.;$O
Ec o
Intern
No>a
a>16
adjx
Od"z]
qA! F
,(Z;,
Vf,r_
R@w4
$*h9
S*]z^@/
-6W]
T`E$V
irTuTK
w]'2
M_"8+
7U#|
194>
/!ot
Y.U
FAr
N ?<
Er?3
b>Y3p
SystemColors
k#U`
o1_Y3
p.\>
pVv~8
\J*@
^E"p2
?P<8=
mr 1p,
&SS
sl`{1
[IG[lKC
&<7n
\ZQr
|YT;1
f o|
~*ZS:
<s8E
ic H
BN?&
@,c>
;D<}
^zTJ
?$HF+
;m-A
h i
N59
FTM:j
wl!N9
qwvX>,
t1Eb
n9KT
_HB[
d3G@
CAO-
~G"~/0
x#_`
5Y8hq
j$)J
lktS
"<~!
_}Xj
+1?C
M SZ
mj0/
i+vSV
&3kn
8((/
9DB>
+}gd
#%|W
')zi
<Gx
@{8q
9@$va
LEbvk
jLs^
YT/o
Oe8q
uBb%j
fai9?k]
^P n
Q?/t
|Z"\~
\@uq@ @}T^Z
+(7G
6Z"s
&aB_
CGR"5
C. NS
SSJe&
Ga e
J61
cb'~X
|P5L^<
zc u
X{s_
get_Length
`(|K
Iv9X
R|E
qxP^
o9h2
Ze0;
uG&-
1'J.
]ub
-e;(Hm
F6"G
rHtv
'CFxB
t5P;de
Q_\Y
X$hB
d ]D
VAp+
>eXB
j^_ ,
f7JD
y`o,G
&^T!z
<fm
62Wk
7<Wt
nu34*
/rOxv+@y
dEQ]
Ks 7;
}H~#
&/BJ
iNn$
W7X.&L
kEJ!
VJFSf
Xo<%
k.z_
x%Y<
.08
` uS
MLYB
]j)N
F,;U
fZLk3
pO("
,Qa@Q
4.yR
@NG_
OoxW_
P]L:
Jer+
/}n"j
1+Wz;
skY<Z
GF.|
U= =}
i+ #L
w$vl$F
'j. J
~Y^Z
$B@Z
shy0.
<]x
mG=_8
Vnmj6N
C}46
B+k
]5-:[
tF8v
(Zp7:2
AjR
A-}rE&
i'a:
lL6Wp
Ec
kx:_
XsA~
[|r\
l8G ^5
.A^KR
;%/k`M
X&R5
~'UC
<G0}
oC,Y
&-M/P
_v#]%XA[S
pFI4
C bR3oI
'7T%
]m[B
z}|[
Rxn %
$p0M
zlS]
e)+E
7@/o
e4&Y18#*
LS*SXHz
K& c
X?`0
<".>
5 Kf
mU)S
Xi5
)af,
ZshO
<T6_0$
]PKF
-P5~H Kgz
b{lG8
I<1)
%6.0
jX~=[5o
+\zD
fgD
R@^gO
4PPRT
t"r bD
K[uT
o,"l*0
,Ky>
&\Gk
7xzI
O<<d
gN%
}W3/
{N?#|
/ S!
bh z2
6ue`>g
If H2
8cPw
)UZU
^U&6k{v
XUT;
N_R
XCj
.#$j
DDoT
!2A/
zTga
3xk
m\_d
J9irD1
?7,
cteO
h3@9
<w3
</{3U
NUePn
"65.
3J??
1S O
u0 x
NO{E"{z
00sM
YFVa
u0 n
Data
x[zl
Asbx
|{'HFN
J n\YPp
ijhMp
u F_S
xh.E
JK4m-
2Ee@4
pt`p
kC(v
OXS3
Ue_S?`
l>G.aJpt
C1,m
m$k"
V?lp
Tm~`!<
8qp5 b
I[@i
$*Mw
pHYs
`wug
;D0rO
I:~-
<NiT
wu&i
-\FM
&[-K
A_4j
cICKlJ
4HIC
H{9.
Mb W
;Z5F
@O.[
wmz~i
M vxjb
6 @
f^L2
B*KX
qB O
Z.s7
:(s!
-$rR
&";o
n2dk
#~]B N
v 49g
G7yK
Lz b
@ t1
$f.2
<j84
XRM i
mZLvT
r%g)]w
?uMe
[aZZi
9'db
q}>1
s*By
o"H&
AWH_
L zC
U3 }
ar>T
;T /
7g6C\o
*q#g
v=AZ
aen}
t-Gv
--x{
@1s6
" VT
]#.K
Ko3S
mfn-F
@Tes2
EgE&W
~sN
I'q-
:qdG
Ds[*
Byte
oL E7
Oz\O
o1uF
7?&>
[Qwe
NX l)
[HB7F
*,K?
Cs`L
f2 P
q! L
N)1s
Z2j
w[7@
Cz*9
f ] "
10H@
GV$)
$Y@f
IN&JBgX
CK6bg
, A?
Y:=x
"Wbx3(
Yf_7
aWF
5s^w
Aec|(
*s7FM3Y
jQl&
:%O_1
`,Rk
E}Yg
|* !e
xiLTFpw
C&?D
S7lI :
>y W
BlD4
I5kB
z%[M
h!?Rs
xy4a
d+ l
1N^1
Hg7A\3
Q KS
bW g
PH Ay
+Vt7
:C4.d@
m-Y}
3b%j
~)*3
to#'
~$?
]\@l
;?n:t
M'=d*
J!a_E
# o;jX
! u?
,cO
XqH$}e
TC~y*F
^-ur89a
80%}
quno
Atx-
8&IU3
9:/S
z+&:
KcJ'
S0WT_
,\@S
Y=Bt
kJ Q
$g/ w
9a2tI
8 Ce
;3)R
",} K
m -u
F +e
h?kox&k
V!=*TdW-6
}c8 5.c
{p|Fb}
m~71
Z g/
xff,
c(2`
.T]^
DpL<
SSYi)?
-Q9%]
_6:.
T\N%Cs
m !3|
@J\#
aV>
jn^m.'
O-J+
XMBX
Jt~7
r}lMQT
;Cjq
`wPy
:.-@
ji'Gb
[OJ1
9=r^
I-3|
ybB
:L2"
j/vh
?_S_J}
o^ )
[yAH
^^UwY
3wj
d7 a
N`nI
+m{}_}5G
?Tm0
lrb
AGJ+
y}q#
7OwHGNd
wz@W
tV(`
?e 0g_7Z'}
"GORL91
.%l1"(65
u~eB
^6^]
#sP;
{~Ri
/qs+]
;=(!n
x2$cz
~%fZ
L!Iq]
nxGD
DQA_
%1zGM
9nQ
$iNK
gTN
T7*bvn
bDN*
Q?9J
VOh2
kPwW
HWN
o%,[
=0h/_*
K<z)
Yu.YX
3T}x
^- Ch
zV5 (
9g-c
6yZ? B
POc`
bry
R }V
eQU[@uocL
s;'L
# $b@
*h#BnRH
u 6sl
_ad!c
fdz`A
&oh# b
3k !p
gmA?
k1pL
kZG;E
0U4
#ao)\
/^|$v
x=WO
[!wD
qU)?4*
R>TJ6
Lp4eH
?k1c
( v{
nC#i
-spoB
F7`n
W!;,0
p&?\
9`5b
1xS$
:4($|+
ws:5
JG/t
_x.y
jKH`
txGk<bN
|k?BN
9ozO
7}S>
eL!UH'
dQ:&(i
9!#:U=t
i22!
;u(^
{O<NGF
Ixc'
32L3x
ok\
Cg^,y
@tI
T 1r
yFNc<
RTs)
PmkS
||NS
1nxgV
QGQ=
x*(5g
yQ[`@
B3-
z/:0Qh
g+zT
!Yum
V2Sw
O?yC3
v"GvQ
ve=u"?lB
mR w
?$7Z+$
0$h[
m ]?q
Yts"
-4F[
"aXN
NclMW_
{ DA
Ku73j
c03w
cV('
i-y*
2">@
jc"8
-v\X
ycuk
us73
?53*
3C/KO
+\p"s
' `%
s[-I1E
5F m
bxB2
;5L;
) .&2
<g5f
0]IM7k
=.7>
Rlc
y< O
6}|2"
tr@
T4hp
B N!
m)5%
-~ C
Q !;
fD b
;``$?
-kn"l
pjw?
"}wD
h\$o
['"1
HCG&g!>
~2G&
VeeH
YR^F
E}&O_?
}~`CQ
4|yI
v_<"
@~ 1
CO5`
+ m>6
1h%m
pIW
cQ<v@
bO=J
P~;C`K
.:qx
[Daw
0xB-
aL8e]s
'/g
}Iaf
2Y6&
5$r:
=0~9
tX[~
iM~P
ComponentResourceManager
`]jr
!-XE1
yRKk
]!!Y
__H7
o,%M
)XTTGi
jC01
J|tr~r
rjS]xe
De(&/N;7
hHMu
y)SS
LI&4)
Nxi|L
QJW8
qAK19
|Ma37
ft.
O_m
! ALW
FbZb2
My6;
Diz
c_RX
AutoScaleMode
3G
nHy+
2+t=x~
'v}M
T ZMT
N[o2p8
f`J*
-wm/
#lL6Rm
P ,e
+$4y
ev
=wlu
j;e@
/)k,
ypqQ
~& ``
t \@
V}2#
5'o^(
(Dgp
*!C
l# &I
y"0`
mtvn
X%55
*DDU
V =YtS
mw f
b= -
#8eQ
`+6v!
O/vT
s]}Q
gg$%
1j%YU
K;qr
jK^j
s %c
xG)%KCf$F
vVi^
-( p
=y2k
\W~pqD&
SizeF
Onz3
;B,
`MlAq
B7qQ|
og]_
+,j7
xxBg
>{kB\
+!]IG
:h 2ju
ng QY
lV"}
6`ow
r3u2
u*>5
\$ 4jA
!ACb}HM
u?](
zY0f
1Fz>H
VQ v
HK7N
eokb
EU2[
\ pOOA
X *;
NfeiU
>)d>L
A15vh0y
F_5l~
A H1&
1Z}v\\
Append
VWl[5
%(^o
Xt+)?
I ^W
z!^@X
dKP2
2Au
GnIM
F<Ii
%Dl\s
z~E3
[W/_
SO{?
HnE@
X|K;
71%r
sJ=I
:9D
>lA
cN)#i
(@kF
U`+
D%|
Zl/
<UI)
fRG(
i@D[W
q?%x
pVHk
-a5r
i3!
^Rrh
fmL6z
|k<O
CM^
&A^@\\
l=j%]"q
+1N(
.FHY*
o:nqI
gUK8
x7|X
kJ G
R'z@jr
th:YX
eTa?
CeV>
5b*2z
5W5R
V/-(
&f-d
Z"u
r^Q
diK_
srj*zn
vpOEMH
9bk
MjFy
QP,
EN^q
5 `j
sz=qD
*d]U
\bkt
p Sc
QQ[@
;xhi
lhU
m@M;
B7
n+x(
2Rr
$4qh
%n|gC
$Jim!
";J.H L"
vAFR
B9[h
RBhQ$X.}
iln`*y
C[2
tQm=
6itW
g&Vs
`d[s
Y5pn
CdcV
o_V`| P
{if%EHL
Wc;c
nrd"}
UzgB
3.qiz
zC3g
MqB^%8
#VjO
uK s
15i@n
tx:pI
.ZTG
7(,y
KgiT
:9:\
PY I
;%{
;uR/
/5(QXu
\t~-
qYvJ&
MA:%
F} ;
XAqi, D+
fDz(g
qX\8
3bZluV
>qj4"
^*79A0
_:v/
qv@*
M] "3tJK
Kf<z(V
Q3OD
}Xo8"q
*6k,
-LC3I
RuKv
O`tSM
~ XR
0lih
ENkL
yma]Pm
jqE+
!zrc
=G(&#S
`}!
BSJB
~X2e
k&9Ey
/Ha-
~4pL'
A2)O
P
"/p2
6s*5
=$\P
yw-P
U Pc
L~h4
|u.D
rOA -@|-
Bvou
9l47
p2+1
acJ
PMCM
MyoM
i0:hN
IntPtr
} b!h
~5wf
43 B.
qhQ{!
EQ++
c#@
Q+1/
N^[/
RO^p
T-cq
}\PZ{
c<r$
AZ !a
tC9{
b?t!
Xi2-
-dR.
P}pHUM
WB;n
!VWy
_'me
3'Qh
/,z!
{}&p
c)>J
tN F
|<l#
"4Lp#
N1}=
\H$pq-M2
n@.~
*=F
RA^<
a^d*p
@'<P
! .-
=p2,
=<\l
IaOHw_
dBg$
3_8 s
~}F=$
RVb
#4w$}
K:(Vi
2 Hkme&
Ew`%C1}\
Md&"
BE0R
cEdd6
{H+ Q
bkm
{liU
(Rr_1
l)s^
yCT a
I }7
Z!qT<F
MLa(IGz
).3W~
's r
u[ k,=h
HHjaJ<
]HD~
g*!B
2 ~D
^HDQ
VKZB
K) ;
Y]a
Q$"z
/2p.$v
\r3
rzrF0
F:Aq
[=]k
ID%o5
zC!Q
G#1V#
@c!s
"'vH
F`gn
D/V{
tDWDh
wCNt
C7rCl(r?j{
;k*#
*zYJ#;
,Q"4#
} [w
B dK`
?jGn ;
!Gd<fw
gYi
gk#0
~+}il
B6s
E aY
F$G
*2LW
i`}.kuw
{$h)s%7B
H~ C
(522}
B|^i
}"Z k
` XQ)c
kuCI>
'RL8u
_A~~2
;{!6
! dWd
UGw1S
U @-Hj
=SW/
T GS
{(`"J
";x!}
pMXE
:.n#i_
/d 9
uQ ,.
p%Bm
&#m
)QNk
3^(V0*
(>;pFlI
w8+6
`'d%o
gA<5
=%-^
Zb(R
dNTK
=`,&
9Elp
uTfUi
g(T|
kJFE
zp\
IEND
g-Gv
TX +
FIo;
6`rnr
e6O B)
a"NFv
DQp:
?`%3{
K? d
d;*GM
Hmzs
sCp"
iZem [2
|3X7T
;1A J
M%z
D<^0!
02e!
9 /j_
p\S;1
v Me
9jVR
Wl]iAL
%^-B
\*C/
)L&puIx
nQ["z$
u274a@
_B9f
}p-=
-9ZBu
)0io5\bm
G9%?
/U>Q@
]a|_q$*~\
atx"Z
hxp5
oRH_
=u\"
H0|c
-WP
;z<<3"
k_Ij
p7%g7
PNz|
> M/ml
-]z&
StringBuilder
_@/~
n.[\x
ykO
cQvy
B!vL%
$mSO
1FD
8U7D
get_ButtonHighlight
`x/p
;,nJ.
:U}j
%^uj-FA*
hE,y-
-M>fYA4
/f<
{U"e1
o uk
uV_4O
"< &^
SVW!
1NZ
X]II
`N+S
zsI&
6-z: l
5?|\c
C8^#
zug-
R#6X:X
w]=p
i}y:Y'
*CjF
{;NP
)bF
uM43D
XW7j
79 +
s 'i
r#2*
J'-7A
?RL)
NsS
G=DA
&Wp-
Vy|
.kWd
tO &
L~.%
]k6)
^wfc
xK]]
v`7~E
GetElementType
YWI
c~GO
Pem"
= :iXx
`EU6^
L;P,
:Rej
,VPS
nM&4
Cd*+o
vdwD
U~@`N
oPi]I
6<%'v
R.8T'A
&m~$
m#D7
+<k]
G',}
q8=FM
C$ p
ERUrH
_fc+u
~K=s
O_ z
C[0$
Qmu@Q
_VewexaL\
V=&A
*|cc[
vPR3
\ _q
K :<
kR:9U
BhJF
B ut
z_PI=8.
xUTA1
pgqU
SCm[!
oQdk7
;|ju
60,S
9vNW
VjK>
String
S07\
O:6lq
g1\{
VQ`'`AP:
8V+
Q/bf
?{47L
tUH7
^4oX,
kz x8g/
Qklz
2VOR
|xNb
InitializeArray
OTy=
FnKe
*G @
~7W3
a]ET
6 j5
nPP&
hfR\
4;Oh
,Xm'
CR#[
S!jZ9s
>a>
g 5N
ijV
9!~)<
Sh[})
F&/9
%S=:
_X<;
~|c#V~
q|H9
+B+qZ5
CXz0
mawTd
nMnC
T0k
{in
J4nO
UW1tE~
xz4&
`z"J
s^^&
HdR3
yN- q
rH*R
5<!
| 2/w
v [;*
Jb)V\
Load
{FoD)
x<'n
get_Module
9d >H
zzN
-aA
E{^9S}
c:7]
z;%?
nUo$
9hO4p0R
\|+c3
MF:gz
?`Zg"]
/Lcd
\ Oz
pc+P
I
2OQC
XkVw
W[qJ
="l,
Dictionary`2
Bu9y
&Mrr;c
tH)0t'Y
Y([xn
@l}:T
{WUU
}jU]
=kl
awL3f~9a
U; hAa
Ggeq
8NB@`X
gL? h:YKK1
G/Gm2g
pRoJ
}|7cR
"b p
;x O
r?afG"]J
'+I* M
8 K/x
]_](x
"<"I
;GzG
5Zv#
~M_K$
pVe.]b
*W{?i
]j><S
L7zU
2 rX=
u;XB
SVK\s
.m1
RuntimeHelpers
CBlA
5*1j
ax[RF
~'_t
H#=I
}fK>
xPHP
<=m^
7e.8o
ayCc
HBqq
^Y?,
!4>~
Y0qK
>kO`
RHW \ '
MVd9
OUSU
L ag
A"X<G
M<A]
Object
igi^
h7f
q*DBY
y8 76Z
8rDm
^Us*=^4
t -?N-
a59I
(oCi
)**
Ql)9
2MW_
Y4daJ
)aV H
Q&]rv
?}VW
i9tbE_
:>CD
c6 cx
|bBPe
$Z(g\
5t]6
=GO0
,wg<<
}5L O
%\}\
Kr'7
(Q9z
xV1%5
4qyZd
FjZ
kzi
)K&oh
Q"e
6X7B
h?\e.
$?P)e
WE}
l A<o
3&!N
v]Fj
{ ywp
Q8fu
~jk$
F;;m
Ft>_/6
N J7p
a}Z_i
mnNS,#E
{i&:
?;r=d
R)<P
s{;)cw
/kon1
4H ,
2 EN
)t^]
Q:uGa
/\~+
i ].u
Umzj
O Ige
MB:u
P'dv
ueM{
U|j5
=Pe.
}"A pr
:A|w
/'m)e
E5*k
' F
% 1i
&5ZZ
g2N}t
0,$ZM
tEt@
'fq&
PM$@
{N+M
ph05}]
gRgt
TW T
u}0M
$GDG
~yk(>w
|R:R
Q^HC]
Exit
<<8 NB!&zLT
M'b^Aj
#0t"
2>|(
oCil
Cet +
+Q}NY
gX57N
z7DC
+)Jy
?ms
#ZgQ
H|oR$
J]3@=
%fmqjv
LH/~
J\6t8-5
U@wL
C 1U
{~Y
[JN'>
|cO
P@QP
w@m[
X% ,
Qhcp
GP$&==
&/oI
jRR@dF
_A jL
!QAs
`~PU
2fN6qg
<{-s
y%D3
3wi
!H\"FO
/mW
{qH17
;?%Cp"
!A Y
IEvidenceFactory
Ay M~
-HVm
>Y"aY
/ JQ
oeC*
>cg"
@BLt_
Sk|m. U$
@Q2
IeiT
XlnC{
QAun!
NKSED- sp
vsyK|8
,"^8
FormStartPosition
d#,R)
kA.p
t[4$
m4@Otj
System.Threading
_(Rs
o^;S
V%5W
)qbi
\,(_
(Ny6
=/V
tacW
nb>:M
dv0*
.Kz\
~bW Nd3
L0YS
.BbP
f!R@!
yv%.
Wovb
s5N
:VSq
`'(;
[f/@
H\+#\
zcqbg|
%> 2`
4%p7
"a}X
IAHs
$^&?y
#7 ]M &
F=##
h6(-
*gYC
tl0DZ
LF,n
q|UR
1m>2%"
k>:,
11 E
m0h!
zA<T
C-D6
xCgwI
$4 ,
3v.5
2 X}
}G tC'
c9E:
c' tHC
Dlz/
j7]q
a(|;
rXck
!(DB
_2| ^ur
,5yJr
5# x
pj'w
gJQ
y 5T
#(),"
(A53
N ]h
[@r1E
M 6z
WtctyNicbZfxtVEAhICkzJzYvlrA
am1A/%
('}!
uR(H
]'~
a&n@
| eD
"A]O
M%?@
8l=%
%.PN
9_{L9
0 K6HaL
PqTA
'~;K
`n.
>oNQ
cQPDG
NOOu
5c"{=
TL|>>
UGdw
!_t%
5v.%
!8!K
*u%-
to{PM
@_q,
``1Gh,!
$!]E+
&*#5
[2Wm
&3s,
1:;;
9-u1
:Cm9
m |VS
jF)>x
vt3[V
8h!k
Yg"
^ _nc
*@,syW
qB,roi
j5VL
Ek,oIi
D:kz
QMe?
|Fga{
/[!!t
l!Jv
4#I-
%kN;
C(S
fa~(3
K7Q0\
J{ +
D0.G
s~XN
#=vY
t`kQmK
nPn>
Lni)*=Er
) ^
9&@gQ
0Y7c
f!?>
3Je:
`rj;
38ey
kmB/a
GetTypeFromHandle
cWvt
`B0;
`-&y
2lVS
`lDf
Y4z5YA>O
=X?Z
oGVp
\SL/$
1(f,
uP!Pkq
>5=~8
c7z8
3Y:^w
DhJ>E
<kW?
ABl'
B=NWhr [
dAkp
f<[#
oCq+v8
MLcu
YHHP@
DtNC
\Gt'D
_Q/'
Xl?>
,AdA
AhjM
?6P[RR
kXyY
.MI'~
k]QY
eCt
uZ7yb
kE/8
sGoA
,Xoi
QWWS
rs06
b'r
d! }
[B 9
;jaxBZ
/ 1i
^ ^L
9H]\
; Jk
H!_e?v
System.Runtime.InteropServices
[%Y[
L@Yzd3
3 ma.
+_ sUC
>H6o1
F7za
Zo`Q
N^Lj
5e+N
-I gruq
P!9<
QBw3/
EuD*S
(9r}c
m;JO
})$J
JDOnmq)g
,"{U
>D K
rqA
System.Runtime.CompilerServices
h Vb7
E(n
N++b
j:Ua'

<O_.
PQ m
Pc"/n_
*zGM
6"J7
Q 1
O( 7
)^8`R
rc<v=
F'{+
q{6*
ou >1
_p33I
u>n.
,uh-
d3ZGa
oFul
qR,'
q|OO
fBpy
g3p3
OBv 0
4E?|
h&;A
T*,u%
*
1@O
8"hS
gK}+
7Z9Rd
\#v@
]C1"
=Gq$
P|7 P
#g/@
_nv h8e
Vh@0
3 @a
k`T3
J?@nC
{`m/?r
@aVN
-8V|
js6frUI
4 '&
A"|]X
w{Z01:
pC,Z
^Xi
9 2X
y: s&
RSmFX|
c{f
h ic
<r.u=
;(ar?=
R
LPQgUC3
Z|5h8#izGw
FormBorderStyle
^g/G
$~Y5
\lt
."x
.9U`jf
CompressionMode
hvrY
&6`Y
e>wS
Yw I
OPx,`
q:1%Y
[TY7*
ii]4
o z+-
2u]s=
.EM-
i4$g
gYOsH
!G,9
u/e[
e{@>
?Mtn
1{o:?
o*E
P `L>w
hM=4
=*DEi
[bu%}
Shq|6!>Z
4,(>
HDy-
;6J[x
dSx{
J %&f
daj~6
~ZTa
*Yw)
H4`*:
11;q%
x+BN3b1v
EzD
RiA_8
*QmD
eI5
3{F"
QOlk
Vao9
P-$pU<
NHT#
O$>59
XxE T
P3` g
^a8rik! s
^&D.>
^j"M
- e1
jKe-
^De>2~
H1=t
>z"WC
+x^J,
pmgU
mPn- I
?+E{
fZy
tg[
s$Jr?
cEIX
TbTS
N?0| E
B r`d
1F@p
ipq',<^
UR'k
vm#~
;+P$v?;5
o^`[
VZ=N
w FJR
3[jY
-w()]
5lz2
x'Bv;B5
([Kqg
6F +j@L
e~u<
;S~g
jn,>
<nQ|
(M2 :>QMM-
~ r
w1 i
WU!6
1+%a
R>"a
r~n9)
`q$`
&8g7[
zMwU
c^^9
y(<U
'98i
UUA J_2f
/ T\
41O@
xZ8P
Y%ir
9wR[x
vX*Vm
Encoding
z^Uf
8I71Fci
~G*<
02:c
2Y6lF
iP_B:
f1Rya
* hZ
!RS23?
IEnumerable`1
RB'FF(
)#+c
[]<jr
Szv+
Gb<L
sRswtVrIChSgXptvrDSRLJJDGAbx
)s#3S,U
(Mi
Me#at,
~ ,B
p"M&
Le+
nPM"3
`jN@
P,+G
u[@(g
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
a%2m
$:<u
1U,P@0
0.QT
G|8T
:{RY
{l z
?1+i
L Nc
f^P3N
d/Ox\
42
_2^L
bQRS
4'x,
r%\}
_C[>
"wdQ3Q
r/p
I@\a
1\U'u
=(S
NH)9
CZz(
Nr3*
|}XON:vq@
p??>
\-$e
)GB
p<[(
$ tn&~qK
vxM
M++_
.%E+
>=a!
HZW
aF[36
q|fD
W,a}{$
u(8e
im"c
1qW
jCHr
W }6
System.Collections.Generic
#ZQ
%& *
g}<1
E4ym}
qbD*
;df{xom
]K|E4g
KOe_rFk
eR&J9C
h\d5
?^$f
?<&W/
s<(C
System.Drawing.Bitmap
^S m yo{
gdUU
ws,`lV
UxO#
k2{_D
\QTy
#[ W
zbB:M0Y
SSBG
rA {~
6aKY}S
\ ,q
vDt D3
m) >
%){:
_6BD
8|w(
y!6-
?@qD
nI[f
C7 Z
;R[aPAIP}
>~ko
oYH#'
`0fg
`0fn
]G_`
yOHJ:n
hF;v
=aaX
s&7\(`O
:|n_J\
ys ;}R
rQ(H
6YV
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-04-23 12:46:37 2018-04-23 12:49:32 175

9 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-04-23 12:46:37 2018-04-23 12:49:32 175

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\4.exe.config
C:\Users\Seven01\AppData\Local\Temp\4.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\4.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\4.config
C:\Users\Seven01\AppData\Local\Temp\4.INI
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\ahronbd.ttf
C:\Windows\Fonts\webdings.ttf
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.INI
C:\Users\Seven01\AppData\Local\Temp\4.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\xy.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\xy.resources\xy.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\xy.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\xy.resources\xy.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\xy.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\xy.resources\xy.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\xy.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\xy.resources\xy.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.default
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.default
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.default
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
\??\MountPointManager
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2312.6043187
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Microsoft
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2312.6043187
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2312.6043234
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe.config
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe.Local\
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.config
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.INI
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2624.6073781
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2624.6073796
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2624.6073781

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\4.exe.config
C:\Users\Seven01\AppData\Local\Temp\4.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Windows\Fonts\webdings.ttf
C:\Windows\Fonts\tahoma.ttf
C:\Windows\Fonts\msjh.ttf
C:\Windows\Fonts\msyh.ttf
C:\Windows\Fonts\malgun.ttf
C:\Windows\Fonts\micross.ttf
C:\Windows\Fonts\segoeui.ttf
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fbc05b5b05dc6366b02b8e2f77d080f1\System.Core.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe.config
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe

Write Files

C:\Users\Seven01\AppData\Local\GDIPFONTCACHEV1.DAT
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2312.6043187
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2312.6043187
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2624.6073781
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2624.6073796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2624.6073781

Delete Files

C:\Users\Seven01\AppData\Local\Temp\4.exe:Zone.Identifier
C:\Users\Seven01\AppData\Local\Temp\4.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2312.6043187
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2312.6043187
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2312.6043234
C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2624.6073781
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2624.6073796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2624.6073781

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\4.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\781e01\ae78dc1
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_CURRENT_USER\EUDC\1252
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.3.5.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1eeb5699\18e49656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|4.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|4.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|4.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1eeb5699\34ee3722
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Name of the melted file.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Name of the melted file.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Name of the melted file.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Name of the melted file.exe
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\(Default)

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus\FontCachePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7ac727df\7b5311d7\61\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7b5311d7\1b0ed4d\61\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Core,3.5.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet\WebBrowserPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\MediaPermission\Xml
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet\WebBrowserPermission\Xml
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_CURRENT_USER\(Default)

Write Keys

HKEY_CURRENT_USER\(Default)

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
kernel32.dll.GetFullPathNameW
kernel32.dll.GetVersionExW
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
uxtheme.dll.IsAppThemed
kernel32.dll.CreateActCtxA
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
user32.dll.RegisterWindowMessageW
user32.dll.GetSystemMetrics
user32.dll.AdjustWindowRectEx
kernel32.dll.GetCurrentProcess
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
kernel32.dll.GetCurrentActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
kernel32.dll.GetModuleHandleW
kernel32.dll.GetProcAddress
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
kernel32.dll.GetUserDefaultUILanguage
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
user32.dll.CallWindowProcW
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentProcessId
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
mscoreei.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateFontFamilyFromName
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegQueryInfoKeyA
kernel32.dll.RegCloseKey
kernel32.dll.RegCreateKeyExW
kernel32.dll.RegQueryValueExW
gdiplus.dll.GdipCreateFont
gdiplus.dll.GdipGetFontSize
kernel32.dll.GetSystemDefaultLCID
gdi32.dll.GetObjectW
user32.dll.GetDC
gdiplus.dll.GdipCreateFontFromLogfontW
kernel32.dll.RegEnumValueW
kernel32.dll.RegQueryInfoKeyW
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
mscoree.dll.ND_RU1
mscoreei.dll.ND_RU1
gdiplus.dll.GdipGetFontUnit
gdiplus.dll.GdipGetFontStyle
gdiplus.dll.GdipGetFamily
user32.dll.ReleaseDC
gdiplus.dll.GdipCreateFromHDC
gdiplus.dll.GdipGetDpiY
gdiplus.dll.GdipGetFontHeight
gdiplus.dll.GdipGetEmHeight
gdiplus.dll.GdipGetLineSpacing
gdiplus.dll.GdipDeleteGraphics
gdiplus.dll.GdipDeleteFont
gdi32.dll.CreateCompatibleDC
gdiplus.dll.GdipGetLogFontW
gdi32.dll.CreateFontIndirectW
gdi32.dll.SelectObject
gdi32.dll.GetTextMetricsW
gdi32.dll.GetTextExtentPoint32W
gdi32.dll.DeleteDC
gdi32.dll.DeleteObject
dwmapi.dll.DwmIsCompositionEnabled
user32.dll.GetWindowTextLengthW
user32.dll.GetWindowTextW
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.CreateEventW
kernel32.dll.CloseHandle
kernel32.dll.SwitchToThread
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
kernel32.dll.SetEvent
kernel32.dll.GetStartupInfoW
gdi32.dll.GetDeviceCaps
user32.dll.CreateIconFromResourceEx
user32.dll.SendMessageW
user32.dll.MsgWaitForMultipleObjectsEx
user32.dll.GetSystemMenu
user32.dll.GetWindowPlacement
user32.dll.EnableMenuItem
user32.dll.SetWindowPos
user32.dll.RedrawWindow
user32.dll.ShowWindow
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
kernel32.dll.DeleteFileW
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
culture.dll.ConvertLangIdToCultureName
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
kernel32.dll.LocalAlloc
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
kernel32.dll.LocalFree
gdiplus.dll.GdipSaveImageToStream
oleaut32.dll.#8
oleaut32.dll.#9
oleaut32.dll.#10
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptDecrypt
cryptsp.dll.CryptEncrypt
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptDestroyKey
cryptsp.dll.CryptReleaseContext
user32.dll.PeekMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
user32.dll.PostMessageW
kernel32.dll.GetTempPathW
kernel32.dll.MoveFileW
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#386
ole32.dll.CoUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
oleaut32.dll.#500
user32.dll.SetClassLongW
user32.dll.UnregisterClassW
kernel32.dll.DeleteAtom
user32.dll.IsWindow
user32.dll.DestroyWindow
user32.dll.DestroyIcon
comctl32.dll.#321
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
advapi32.dll.EventUnregister
advapi32.dll.RegSetValueExW
kernel32.dll.CreateProcessW
ntdll.dll.NtAlertResumeThread
ntdll.dll.NtGetContextThread
ntdll.dll.NtReadVirtualMemory
ntdll.dll.NtSetContextThread
ntdll.dll.NtWriteVirtualMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.VirtualFreeEx
kernel32.dll.VirtualProtectEx
kernel32.dll.Wow64GetThreadContext
kernel32.dll.Wow64SetThreadContext
ntdll.dll.ZwUnmapViewOfSection

Execute Commands

C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe 
"C:\Users\Seven01\AppData\Local\Temp\Name of the melted file.exe"

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-04-23 12:48:19

Detected family: #Ispy

TheSystem Itself @ 2018-04-23 13:00:03