get the Blackguard stealer analysis from my old site here as a pdf:
Analysis of a .NET infostealer Blackguard Stealer