[time4good]

Decompile the .NET code into source code ASAP. (DotPeek useful tool). Then you can point to the exact methods and lines of code.

[flamberge]

But you must insure that the machine is air-gapped from the internet. And get a full image backup of the disks before rebooting the machine.

An auto-update package activated by the current date/time could erase all traces of the gimmick in a few seconds.

We have barely a week left, and forensic analysis takes time. The Courts aren't going to listen anyway. Better have a "Plan B", involving US Marshals and Special Forces.

[Pollard]

Decompile the .NET code into source code ASAP. (DotPeek useful tool). Then you can point to the exact methods and lines of code.

Not necessary because we already know by reading the manuals of these machines that the software is capable of weighted voting where one candidate = 1.2 and the other being worth 0.8. What's needed is proof of that being done via settings. All this talk of them wiping the machines isn't wiping and reinstalling the OS, it's merely resetting things to 1=1 and deleting logs.

[Gene Eric]

You seriously believe it’s .Net code? I’m series...