Static | ZeroBOX

PE Compile Time

2055-12-30 20:41:47

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005c334 0x0005c400 5.87992697768
.rsrc 0x00060000 0x00000598 0x00000600 4.03907559641
.reloc 0x00062000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000600a0 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000603ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
=G/ B>G/a(
f 6[T]a(4
#Usa(4
qaza(4
,ba =x
% YQi? yVi?a(
`S`a(\
21Uf k
ko]a(t
ao] 'ho]a(t
KDBM(
f pST]a(
" ok
f 2QT]a(
-}[
f pOT]a(
[*$ #K*$a(
) W#8UX
-}[ 4=}[a(
-}[ 4=}[a(
=G/ V/G/a(
ao] ouo]a(
YQi? MAi?a(
YQi?
8 2f ^
) W#8UX
-}[ r=}[a(
f CT]a(
[*$ K*$a(
f |F-aa(
YQi? cNi?a(
_sz#
_sz#
i=Y(6
;F *7;Fa(
% _sz#
21Uf Y
_sz# s{z#a(
()dC
;F >8;Fa(
f ZtT]a(
[*$ ]q*$a(
@[io?
Z?_d
_b`*
UUUU_
X_b`
_bs\
_cs\
_ds]
_bjs
_bjs
_cjs
_cjs
_dns
_dns
_dns
_cjs
_bjs
v4.0.30319
#Strings
36D493DE8326364E1439730
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
ACF9624210345
<Module>
PIBPECIAJGGMFJFOKKOMGPGPBMNEGJAGMNPG
Object
PODHLOHKLJNIGJBPAOBEDJKCDHNFKKJCNPAE
HNPJGEOGFEPDFHJKKKNAJKDHPEDAEKNBPLLG
IEJAEJKFGOACAMHDNODBLDHPKADLKKOHCDHE
MIMBOEPMMJPBFJCEOOAFPPNDNAIFLBGKDAJO
NMHOOGMEMCKNODPJJKKCEDGNDODLBMAHOLLJ
JavaScriptConverter
System.Web.Script.Serialization
System.Web.Extensions
<>o__29
DJFHHBMCBJFPHLBKBIFKLCCLCAOEGGANIGKJ
DBEAFLDKHDCHADDDPDFGIGJIIGJIFBDBGNBA
OMEEPIPPOIPLIHMHOBCHPHFLFPAGGGBFPGAM
BEFFLLOPHDHODONGFCAGAIPCBDLOKODHLKCI
LOBOCCGCFAGMBKNEJMKIFPLPCFEPHFDJFEDJ
ValueType
INCNJNFCDEHPOOOEFOGHLBCHJANFFMPABINM
CLGMOACILHHDGKFAIPGBIFBIMDDDEIOBNILA
MMAJJHAKFCHECMKEPEEPHCNMEBDMLJFCOFLE
ANIDGNKCJAMCDFGDMIBPEGDCFNDGLFIJOKJC
LLDIEHEEFBPEHGGOIOBOAJCDDGJOHJCJMGNG
KKFDOKKBGEDENCJFKMEHFBMENLEOOIFFIONC
OAKHDJLFCKEDPCGDGNDICOLANAOEFHKLGAGA
<>c__DisplayClass46_0
FCAGCIIPDBKJKDJDCOGDNKPELKHGDLJLJEKI
KAEJJNMBKFGAHHEHAMHOCOADHDBNGJKPCDNN
LNAFDAJMAMLLFLIEIJMLMJKDNDDDKKFGELPD
NDPDKJDGEMMONHDNPHGGCFBLMAKCLPDOMJLE
OEFIHFFNDHKAPJDMOKHJHBNABMGECFGMKOJC
PIBJJDPLGKIIDLJMIACODAMOFLILEMEOFLIO
DIAEOLJEBDMKGEGIMACIJBDOGDIPLIOOIAIK
<>c__DisplayClass2_0
ONLPPAAMPJHBPKHLNKIILOBLLHAPCFGPBPAO
KGGHHIFFMDLPEHBOIJFBBNKNAFEGOFLJGODN
OMCBKOPAODCLNPKPNGHBDIHPNKIGFOLBADCE
MAINLPLODLNINLBDDCKLGODDLGJMFFDHKCEN
AJDPJPMPDCNKFNMHMCPBLKKIJPGACJKBGLCP
NJENCFAJLMBNIOJHOIKDJAPFPIKPDJIIEBIG
OGONJMBFHKDEPKEBLKFJNKFEEKHPLFHMFNLI
KKPHFEJGELODKOPIPGBCKAOHFGJAGKOGIKKG
PGHCOKIPHEFOCBAHFGIJBGGFIADDFGHOGJAN
EBDNEOBFDADCNELMANFEANLGADHGGNGNOBOE
MHBGFNGPJKEFJGMNKCPNICMNLLMMCDDJBBEF
BFLMKMNBJGPJFLEPBABOEJDADDNOBHNIMFFD
MOKOGDIDKIGGILPAOMAPNEJAKNNLNOAHEAED
BNFDDBJMNKKHBMKDLFEEBIAJODGGFBADFBLI
ADCJOIANPNLDGGCEBHFPEMENOKKMKHAGKODD
DCDGJNNCIMHGAFPMBGPAFFDLGLIKIKDJKIBE
KOGOIKJHJBLKPEADEPCCLPEMFLOHMGHONIJK
AADGKHDGIKAKKEMLAAILJKJCBKNIINKIBNEK
CNNLAHOELDKMMBKAILPKKDPEDFAENFILJMFJ
IBKBBDDEJHOLPLHLCMBHLAGIPEHOMANDKJPD
EBFBBCCMCECBHCIPHAJJPFDFKJEMPADHHNCP
OGJGOFDOCGNIBNEOEFKFAPNAEENNABDMDHEP
<>c__DisplayClass14_0
KMFGGNJMFMNFLEFHNDACBMDFJONNFIHCJOGD
MMJHICCCKFPMDKKPBHJJGIGHMPACGHAEGALI
NFEBOALIGHBPBKOANMLMFKLKGCIKDDCJKNJF
MHAFBOGAOCLCHMKMBBKCEDNFHPFPLFEOICCB
BILBHJDNLEHEMGOMDFPEBPOPJDNJIDDEHLOK
BAHBHCCEDDPGBHKBNGIIDLPAEKJKDLLIAAMM
NPCACFHMIHAHEIDBHIJAHJFKNLOHOGABDFNF
NOBLNNELCIHHEAONHHCLHLMHNPAOMKMELCAN
ECOOOKPOJHNIIADIEHPPGPMMEDAODGDDHPOG
DFFJIFEOEPNMKPBFJALFKCEFMCOIKGAAFGIP
JNPMFMHCABMJODIKFCJLEJMKEGPPIEMLHPFG
LLDDLGHBLLGJMFGKBMJEOJHKEBHNHMPNFODK
LOBMDNPEIHNELMNAJEKLLILPNNECEJPNLECG
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=16
<Module>{D5FC0365-DBF1-43DA-873B-664EC846863F}
HPOFADAMEINNIAIMKLDJFGHAJNHHAAEHHNNI
GKCIANHJLKEDBEDIHKJCEBBNIAELGDHFCBMN
LOAENECHPAANCJFLIJILBMHMBDFLHEGIKADM
MulticastDelegate
FMIJCCJDKMPOHDNPCEAGFDMNEAPEGCIPGDDK
MKPDDKNOMOGHAIMAEKPOFJGKHGDFBPEDBNDN
CHFHGCMMLLKNKNPPLKEJHNGBLLPPJFEIBKNL
EDJGLCJOMDLOKANFJCCMENDKAENELDCCAJDC
Attribute
OMPPEAFHBNNCJMJEBAOIKCAMOMGDINFBALLM`1
ONIHLIOMGKEPHKCDCOLDHJAKNHBDICLJFIHO
KLKCFJAKNICDCNKLCHGCEKCPNOBOBOJLGMLH
KOLLIJMLNEELOKLKLOMNIIINLFGHHAJJNJJP
DJJJCJBAJNEMDCJCNIHDAABGGCEIIAGINNEE
DAOBCIEMLJJMGANBAGNCJJALLLHIFCAIKPDF
KPGOJPMKNGFAMNGLOPMPDOOLDMHAOAKGAIFD
EANMMGAJBIGKHAFDEGNHOEHDHELEHEGBHHAE
OLHMODLEGFALAAMKKAPKPLLOAOKEDFLMBDDJ
IIIDMJKMCKABHHBLKLNFFILEOPICBFPAJFFA
IBJGBDEKGHFOLGAGHIINBKCNPIIPCDBIPMAE
AJKOLMKCPLDKGDGGLDEDBAOEFBCHDONNDHHN
KLCLJOEIFDMJOLCINDNJMKMHKMLPFOGEOENB
CKPMDKPLPGCCBAPMNEDELFONKILGBKEGMHIH
LPKHAABOLJNCDPKKHIHOGBKMHDPPNIHJAEJI
BAJEDBNFJJBPFHOJPMCIBMAHHLJABPOFMBKC
EIBHDMJEMMDBHBAAHIDNPAIBEMLOCKMNDGOM
KEKOPAOLABFEPPLHDLHKIPKKGMDGFAJIBOAD
LEOOILADDBJHMCCGLLNONEIGDBPFIAFNIEOJ
DHHNKMHNNKMEMLPMNGCLAKJFDNMHKGOOFLEM
HGFCCLGKOIPOLOIBHOHFHPGEBKAGOPKKEADG
CCHDHIBMCIFEDIJFFCAMLHBEPELLMKBEDEBB
CALJNKEKDKOMAECKMHONNIGFPGLJMIKLPAPL
FLMHEIJBCCKHFDNGGKHBCMJDDADKJJIFALCG
OBKLGOMDKNIOEGIJEPFFMNKNDGILGNFJMBJC
EJFIHAFOOENDGHNMELCNNEOOBKNDLGMLCJEJ
JLABNNMDEPENKKLHIPNMJAKPLNIELIPIGCHA
Exception
NHFAGGICFMLCMFKPPMAGHLMJHKPJKGJKBNHC
FKOCHMMJMBMIIHPOFFGFNKHJJJEGKDMEANGN
LKMDLKGBDGJCFCABCBAKDLGIHLEPJIOODOBB
DCDCLJMJNGHIGKGJFMKFDCJGPGKKCKKLALEH
NIBDHMKGGFAGNJBPMMIOIDPJJFGGMPDBJDHC
MOEIFJGHMFKLCCMENPDJMHBFMMELLFHNFMMI
JMKCIHJGCBDNIBLIPGBOPELPOLDAOPFOECNI
NDPAGHCFOIIEBPDAIPLLPGGNCIFABLDGPPMC
NBJBCABOECPKEILCDMPPKNDBGCCFMGAFIBON
ECLGMIBBFJONIIKMDFKDOHAMLKPEADFAFIHH
LANOMDCMGDMBDJHANDEJBLAFJCEOACIHCNNP
JJKBCOEDAECEEPPCJGNPGIJOKLPPDFOLJNEL
ACPPEHMKMDNPICKBMPCLEEIEILNEOGPJFPON
LAFMMCMJJJBJMNBHMHJKAPNOEEKONJMKEMBB
JFBHCLBLOEICPLONCKGEHBHPEODLBLAJNNGL
DLIDBCKHHHMJPAELOBBFHKLNCHENIJCCKOEN
NCCCMMDNMONELCHJJHHKHLPJLPHDFNPKIKJN
GPNFHAOLNJGDBLFAILPIAAOLIIKKNLJPJCLN
AEAFEGGJDKEBHFGJLDBKJCAPNEFGJLLLGFAH
CMEFMFPKMBJMFAFBDGIPILCOGFHEONDGJFAO
seq2cR1pvdJT3LewuIN
KPEPBAOKAMJFMLPIBJIEEKAFBHLHEIINFLJJ
JLHJOBIPIHHJIONNEIFBEGGNFDMFNEKHBOJL
CFGOAHNOGPAGJJGNAOEKIDAFGBELECICMPCO
ONHHJKKKIGFHOPBFDFEOPEJOEHKCIKNFALOE
MBOJJAJPOCEBOMBJPPDOGFBPDGPGPGEJPIOL
FLNLALIJKBOJIMMLJHLHKIJDPMPAAJDMKAMI
GEDLDMOPNEBMCMMOMICHHLDCIFOAEKJGNGGA
GUFtio1WcfP82d7tycE`1
<PrivateImplementationDetails>{41A49CAE-1AB1-4D63-8583-07A8D29682E4}
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=256
<Module>{a55e0054-6232-4e9f-98c1-7bb292141767}
CMOCOAKAPMHPEHECCOBNJEALEFIDPJDHJKEF
DMOABCHMJOAOOLFIDIAOCODMOBIIMGBJCDPP
StringBuilder
System.Text
GetUserName
advapi32.dll
KMPNHAMJPMJLPLGBFHJMCBIBDHICINJFOPHA
GetComputerName
kernel32.dll
AENHFKOMDOELCJJKFJCDPBLMPIFDPLMEIOHL
DHDDMPMBFOFEOFJJDLELKJNIFNHJPJLKDAFM
HMDPOEFDIBJKGAIIKODAJBEOOKPIKBLDDPLL
FONABKMEKHDOAFJFLBELDIALPKJLMGLOJOLE
ToString
GANABODLGPINDJANDGBFOIONKIOOEIOGCMDD
IAKOAIMFGCBCDOKCKADIMNAPCEFLMCPGJGDL
JEFNHBJFHNLBACEKKCKLCMFGCIBDGCEHNFIM
IntPtr
UInt32
CryptographicException
System.Security.Cryptography
IDisposable
Dispose
OPDHFJNKAEONIDFMODLHEPKAMEBKPNPFHFLN
HAOEEFIBBGOOJGKJEODBGOPNGFAOPLGHIOHE
JNOLPOBGAIBACMMLDGPOAMMHEHKFLEAGCPNM
BHJGBOOLOGLILBBKEGMJLDNPKFJOJEGOBBLI
Format
MOIKJMPJPBEBFJCCGCGGGALENEKIALBACKCI
arrays
Buffer
BlockCopy
Marshal
FreeHGlobal
BitConverter
ToInt32
Encoding
get_Unicode
GetBytes
AllocHGlobal
CLPKBHDGELOFHADNNGONJIKLBOLMMEJBDHEA
MOGHDNBBLKDDNPJHPDLJINPMCCILJAOCAODF
KIEBDABGDIGFCPFLHEHKPGBBNFOPBBIKEEHL
FLCENOGBHNIKJIMEKJMPILEDOEIOILPMNDPA
JMNDIKJCEFBNBIABJBFJGAPMMDJAPEJNNOHD
HJPHDPBMKKIGAPJBGHOCJDFKKAEEHFFAKEFN
OAGCKEHGHFBPONFPLBMNALJPBNOMKDKEPLMM
DAMPMJJLFDNIHPHHADKKDGNDDNIBKOADFIDF
HCMNACFCPMHNANCJIHFGKGCEKDHJBFLLFPCP
GODPLHNBGEOPAMEEMOMOPDPGLBFFCNAPHCMP
GCGMEEBLACLMGICFDKBHHJFJDHBMEDAHPOHK
MEPLCCPGCFAOINHMCPJHDEHCOLEIHEJGFONC
OMCCNKGPIAKFAGPMNJMEBGMMHOEGECPBIGHB
BABGJCGBBEBODADEOEIPPMEONHEEFGPCJHCP
COMIAGJDDAJDKPNJABKLJMGFICJNDJOCBDBF
BMGHCEGCGOIDLGOAJJHHFOLACCJCLBDKKDJJ
NEKPCANDAANGAGGLICGGGKOKKDJLGPMHDMCE
LHKNFGOPIAKBGLCOMADFCNJFMPIMNPBEJAMC
EINIALJOJOPHKPHOOFEGBKLGOFODGDHMMPFO
PNMAEKCCELHPGCMAMNNDHDIFHJKFOGJJCFOG
EGIGOGCHBEANIMIOHKBJKJCFCKEGPGMBHHNN
HHLBLOEPEEOKMOLINAEOBICECBPHMAADBNIB
op_Equality
InputLanguage
System.Windows.Forms
get_CurrentInputLanguage
get_Culture
CultureInfo
System.Globalization
LNMPPALDGEGGMDCEDDHEOMCPPIMCNMPKECNF
JavaScriptSerializer
HttpWebResponse
System.Net
StreamReader
System.IO
HttpWebRequest
WebRequest
set_Method
RegisterConverters
IEnumerable`1
System.Collections.Generic
Stream
Deserialize
Binder
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
Convert
CallSiteBinder
System.Core
CSharpBinderFlags
CallSite`1
Func`3
CallSite
Create
Target
GetTypeFromHandle
RuntimeTypeHandle
CSharpArgumentInfo
GetIndex
Func`4
Invoke
get_TwoLetterISOLanguageName
set_ContentType
GetResponse
WebResponse
GetResponseStream
TextReader
ReadToEnd
CSharpArgumentInfoFlags
Country
Region
IDictionary`2
NotImplementedException
Serialize
get_SupportedTypes
List`1
Dictionary`2
SupportedTypes
CCALEHIOOMJAGAOHFKAPBFIFGAJBANLEMBPO
FPDELAPJLKDLCJOAEOKPAMMGPEOBPHJNPAMN
GCJDHIGKJAJFMBJEKLJBPBJNPDPIFOGDKDJI
PPEDFMFAGEHIKBHPHPOEOAGIFIEMJILAJCKL
CJJLOALHAEPNOEFCBJIGIFHLGCFJHHFDAFDC
KAEDDIIDEBKBACLFIJEINMFMOKLOICCBDEAB
FKLBPEEFPFLFAJCLLNOFKBCEPBFMLJEFGHFE
LMKJGMIFCJMHOLEOGGGFPCHCIEKOFMMDFGGH
JEAOHLHAANKOOPJLMHLJDINGOKJEJBFBGIHH
BLMGPLMLIAKFIPJNKAAABOABFMNFOBGGFJEE
PPDPLFKCNDHNBGFOGOOOBLAHMOKGIDKFICIK
KJHAIKCFNBBKHLPKDNIAHJPFMIOCFGDPLDLJ
PCDCLGALPHIICNCPHBFNGADNFHCODEPLOAOM
HNHFMMOMDKODHLGCHOPBMBJDLKFHGCJGNBNP
JMOELFIHJPDPMLFKJIECFEHLOLOBJBOBFMMJ
GDCHFEFBNDBPCPEOCKGEMLENHPBINIPKDHLD
DNMMBOMNJECINIFLDEADCKJCAPLFBCFGFANF
GetModuleHandle
GAAOJDJBCBEGJHIGOPPNAIMMHLGJGPFICLDM
PKKOBAMDJLKILAHHOECHGGAMNJLHJHPGPGIA
op_Inequality
LDCBDACKDJJNJEFNHLAPAMLEFKPPGACPGAOP
CheckRemoteDebuggerPresent
KOKAHGFFJAGGHBDKIHLAOMAEPLLKPCOPKAHH
Process
GetCurrentProcess
NEFOIGAMNPKPAEHEKDJILGOFOGIKLBFAGBBH
Enumerator
GetEnumerator
MoveNext
get_Current
Contains
CNNHFAHLBFDMALEJOJJAEJIBMPCENDHJEHNH
ManagementObject
System.Management
ManagementObjectSearcher
ManagementObjectCollection
Enumerable
System.Linq
OfType
IEnumerable
System.Collections
Func`2
FirstOrDefault
ManagementBaseObject
get_Item
ToLower
BMOPEFHGOHBGDGCNNGGMEGCODJPPMMNOIKEA
KJAPGPLACGBACPDJHFLEAFGENIENJGNCPHGH
ELJCHJALBOEJGCIEOEFFFKLNJEPHGGCCDMPI
.cctor
SystemInformation
get_TerminalServerSession
GetProcessesByName
get_Handle
GetProcesses
get_ProcessName
NGBFGGIFFPHHBJFGHEHPMGKNFDHIKJOHMBBL
ECPPPMBOILBOEPEKAANNPGDEDJNAMBDAEPEA
FENLEFPHJJFLLCDKMDENIKGMBJPLODBBCIOJ
BOKOJIGJKGLHJDIIGFOENIPEOKHJPJEMOPIM
AppDomain
get_CurrentDomain
Environment
get_CurrentDirectory
GetTempPath
get_FriendlyName
GetFileNameWithoutExtension
get_Length
BMMNLPAPAFNFDEJCCEGAHFOLAPMKFFDINOML
Memory
Double
AHPJLFMNHIOGKAEHDPAKCHPBOKNEFBPAABLJ
System.Drawing
Rectangle
get_Size
FMAEIMLBBBDBAECFFHPNLJMKPHGLMBPJMILL
ManagementObjectEnumerator
Concat
ToDouble
Screen
get_PrimaryScreen
get_Bounds
GOFHIGEGGNHJDOOMHGAIEBMDFKLJLNCKNFOB
OKIFDGNEGMENCGIPACOMJMNIDLDNNDJOGKEP
DDIPEAIHGLKIGDLGCJNCMBNOCELKBIAKDACO
HHBMKAHKCMAPGAOHOHPECJDMHDMKDEJICKCP
CDGKAOHLDFEIDNFPMCLCEMDCPCHKLOGBDKEI
PBEHBHNNPPJHNIBOEPGKKBDGNOBDKMHCNOFN
JFOAELLNHEMOOPNJBOPNILBMDHAEDEJLOFMJ
OEEBOLCBHKIGOKMFEFAFPOEHCFGEIJDLDAAH
HPKJFLDMDMBNLBMFLDLCHFJNBGMCKKCIHLJO
EFGGGNFPIHKPEPOCFHBNGIKNCAGMGFKOPPGD
MHDJHIPOJBIPJMOIAOFEKNAPMOLEJDKKPCOI
FICPFEEINDCAGIIEKOLJKIJCNONLDIHADAIJ
BCryptOpenAlgorithmProvider
bcrypt.dll
LMGLDJIODNPIFHLBPBKBMDGIBBBFJNKNJFAF
BCryptCloseAlgorithmProvider
NHCLPIKOGDKJIILHHKJBPMAIOHNNOBMNIKNC
BCryptGetProperty
LCPEOOMGABECJECLEEIFAKOIOGMOKICPAGGA
BCryptSetProperty
HFPKIIJMAMIJMBHKDDOPCGBDDPICMAJHOLOJ
BCryptImportKey
GOJEKHFMEJFPNBFFBHCKMJLDIFOGBCAFCDPE
BCryptDestroyKey
BDIMKHLJNMKNPLMCMIOLEIALCONKPPLDKNDJ
BCryptEncrypt
POILANEODFODLAHNPOCPPCNJKFGFONOAPLFM
BCryptDecrypt
EHPMLKCIGDNCOJLICDEMOABJPHLEBFNIOGKL
JFDADPPIPDCBPKBDKOFKDIJMHDLIBFEKMPGM
HGPBDKGJNDIDALEBFLDCBEDBJHBKIKHJPBGN
PNOFGBDNBONMKCEKOHEEGMCAADHOKFAKGABG
MBAHLIOGIILAPNFHMIHCOEEJIGEJCFINBJJK
IAJOLJAFEPLLKNDJKIJBFFAAPCMNIOKLENNB
KEIECKBFHEJCOJDIKLBGHLCNBJLEIMNNMOAB
KNFBIMOHAEJNDMODAPCHJCCCBHGHKHOHEIDE
NAPGOBJBGOAFFMNDBJJJENGBCOIDKGBGEIPH
NOOIICFNMDLAIHOELCLGHOLFPJBLHPDLBBNC
EMBBOHKCAHJOLCGNAFDNKCFCJPGBNKKPFBLB
DIIFLHBOGIGLJEECIFGPILDJPNEECLHKAHKI
JCIPHBFJFAFBNPCKFHOGCBFNICGEGFJNGPOP
OCAELBPHKALGFIJDFBMGPDKHEDPPMCNKIBPE
MMFHGGHKNHIDDEPICONBGJPCIAFOBNOPKDLM
SizeOf
GCICGGKFLINKIFAKOOPENLEGELBOOBEOKIOM
BDMKCKFPJEJNDHMIJFIMBJNDOFCPGBKLLNDA
IOBGKGNHAOKCBHMEJOHHOIOAOBBLBDCKHOCG
FMKJNOIJFBIPHGNADDPPJJKGDMKDIFIEGAEM
LCOCAPHINDIAEJDAMDAJNLKHIEAOOGLLDEAH
FOHKKMEKKLJOKNJLBEGBMJIJLEPEMPHPGAKP
FOMDCJJEOBLPJBEALLICKHLIGNHHKGEDPAME
AKBCGCDHAFOJAMIMMEHDJJAMGHCCMPJAEGJB
GFHKKNJGNNBDBCBIGANKNCJIDLIMCPILLIDK
APDNCLIIMNKOKICONNCICIODHPOIHHCHJBOL
HBNHLDGEALCPGHDPDDKMENBHKELHBNIKLCAA
AIEBEOADHKKMCPLKGCEJLKIKBDDMPECOLLBC
LLDLKNAEAIANIKDHCEPJCBOPIHBNLFAKKKEF
HGFGIBFNLCJFEOIFPMHBAMNEDHMIBMIGCCJB
JDMOJCOEONIBCMOMDMBDPJPJGPEKMEFMONKA
JBCHJPMFBAAEEOIFGPFPDMGMOOLKOAMLJPCO
JHPBECLOPHBGLDGIKBLNHHOLMKCCPAKBFFCK
GMGFILLMLIGHIMCGGAGHJCGKEDHPLAALHCBB
INDIOKCJLBJBENNBPFEIEILJLDIHDNCGMBAL
HICHEDPBFCJNFDIELFMDMIKPOEIOMLMEABNM
DCEPIOOHNHPDLFIDBIKLEMINIKCJPBNBEAOM
ICLIKNAPKOPIEEBKCBHEGGBKNIOKMKMOIGJK
KLIFLPLNDFEILFFNAAJNCMJDAEONMNDBEKEI
BGKFIOHLIKLEBAPPHOBPEHLCOLLHBGHEEAIK
PBNPJJPANOMPDOGLHCIDLIGLHIOLNBDCOHKK
ENLNFADOFNIAPGDEOEJDMHCEGNBPIPGHNBHC
GDHHHAFNIMBEHDDJOPJANNIGMEGGILJNJDBJ
ParallelOptions
System.Threading.Tasks
Action
Action`1
Parallel
ForEach
ParallelLoopResult
GetFolderPath
SpecialFolder
ReadAllBytes
System.Text.RegularExpressions
ZipArchiveEntry
System.IO.Compression
FileStream
MemoryStream
ZipArchive
Replace
ZipArchiveMode
Directory
GetFiles
SearchOption
DirectorySeparatorChar
FileMode
FileAccess
CreateEntry
CompressionLevel
FileInfo
ToArray
Remove
RegistryKey
Microsoft.Win32
Registry
CurrentUser
MGDKNPGLBEEFMMEKHMEMLKFCLOMCEFPEOLLP
OpenProcess
BOFODKCOANMLHHIOKGJBLDDJPFACOICNLPMP
ReadProcessMemory
ECOPMGBMBAJEOGDKHLEDFDMLGICAGOJBJIII
CloseHandle
get_UTF8
ToInt64
get_ASCII
ToBoolean
get_Count
set_MaxDegreeOfParallelism
Exists
ReadAllText
get_Success
get_Groups
GroupCollection
Capture
get_Value
FromBase64String
OpenSubKey
GetValue
LastIndexOf
Substring
FileSystemInfo
get_Name
EndsWith
CopyTo
StartsWith
get_Id
GetString
JENPMGIGFNMAIHKIOANDKPOLIDMFNBKAKGGB
IGFDHHJEJMDCDHLGNOHMEGDGEPKIKBLIOIEO
HLLDOPOICODOPCCKLGMCKBMDMDMOGJAEHHPD
Handle
ICECNEBDNCDOKLKPNKCGFJHDKMGPFDLOKMEL
LFPEIILLMBKDHGHAEIEOOJFBJIDPGGJGMFMP
method
ANJMJCBFALDIDKEIGMICGAAPGIFLICMDPJAE
BHALJOPMPBDBDPCKDHHCKNCGABHANJCJAKNC
CHOIHOIJNDGLBNPLDIOHDEOHBFHFPBLAKDHF
ECLCGHEKADMLJBJNNEOKDJFBFIPMNBPJLJGE
IHKLEKANIOPIFIJPCBJPLIOAPJIKCGJOLDEK
FFJMIKIECFGAPKDPIFAJGBHGJEBOOKBJLBDK
NOMKOMKJGDFKBMDGBHJGJIFFBJHPDIPCCACC
NKEDMBLFGDJBDJJCJCKLNGPFOGCDDLDAFFJN
FBKANGCEDEDJIAOENJJEFPAPFAINHHNGGFGC
LBFFKMEBFDIBDLBOAHFNOANLMKIBDIFHBODK
JEBCODKBGLBCMMAAKLGJDCAJGBFDHLJPMNMB
LOENEDAOINBLJDHGLFAMNJJHENHHKFCBOLAL
NMKJAHLGEOEFNNHODKDCCAJFAOBCKMECGHKG
JODEGFJCGOGPHKIAGDIPGPGNNOMJMJAKBELI
JJFEFPNGNOBCLMNONHNFNFELBKNKMLKIJENI
OONIAIBFELLHILPNGNINBCNJDBJENHHCBCCA
HIJEFEINDNCPBMAFLEDJCOHCBHAPHDFKFPJM
KNLLPBKELOFDACPABFGNPEMBFJMDLAOOFJHP
IPFNPFDGHLDOOLMDDBECHNGNNDKKPJOJMAMM
PKNNNJGPLBKCKDCCDENBNBCGJEPDFPCFKAKN
CGDOECGNFOJDIFCMKLMNCAABKEHKNLHLLLGL
ANPLDOPALIGDJPBNLGAPAFOJPGIJLJEKIOBB
LJNAGKPJKAOIKHFKGGOINPNELFCALOKMCNOE
BBOLBFHCJENAJNEHCBNLOCDGAKCLGEDJEAGM
GetDirectories
HALBAJDCACDJFPGAJCPCBABEKBMAEINBHIBO
Combine
KDEIBKHFEBOKPEBAKDIHDHNNOICHHMCGEKDD
MGNMOKCCNOKALLNCKLCMCGHMGGENBMCPCFMI
EEKGOJNIKBIHPJOCGHEOJNLBCBCJGJGJIIPJ
CNGHHKLHGJHDOAPLLAHJHNAFNCPAFPDNJHCM
GEDAILMCFODCCLEEPLBAIGGKLIKKMCBHHAII
BAHHIOPPEHAAMHNNJGCJGPMJJOCDIIJKPJFE
MBNLJCHKIPGIMFPNNIAPEECCKDFNBBPBMJCK
AAABNKCHOAEJGLLBMHNFKELNIFNGLNNNBADO
KMEOLFJHEDCKEOGJMHCEHICJELKJCJHGPFOI
LMOHGDJDBJEOLKIFJDDEBCIGAOMJPONEBJOH
CBMGLGOBJNDOFPPIOBCLIOHPBPHKCAGNIBPO
NGKGPMDBCFOKJIKEBOICAOFAENFGGEHFHCLI
KBOJONJNKGFCGHBGJHFDPPNAKDKBKJNDHPGF
IMJMCKLGMJPMNOBFPMKGBFKAJPDKDDHMMICB
JGODKGGPEGLFAKAPIEDOAGNOKMFNIFHFIFCD
BIBEDMKCAAFADFANALIMDIPINAEMMPJIEHPE
KMOCFCHMDGINHCPGFMIPFLDPEIGBKFAPLFHK
PPEMAAEGCIBPKJNIKLJFPHCKNOHMCONEEDFJ
CGAPFDBDAKJLJKANOHMKCNDLBKJLPMJABBHM
EPMBAAHOGPGHDGMLFDGPKDFCGKJIJFGOMDIM
IEnumerator
RegexOptions
Matches
MatchCollection
DNMGOFCOLHMJGGMGPIBAGIECGNNPNFNPLKMD
ContainsKey
GCOOEMDNBMBKGEMMIIHLHDAOKFLEJLPHAHPG
IEnumerator`1
Select
FHANGJKDOLCFOKDODPFOJPMMFDLKLFAAFCJD
FBAKOBBMAPKBFDCJMOAOJDIAHDCKPNDMOHMD
HasFlag
FBIEMOBBEFIHOLDBPNAJENBKNKPOCJPILGME
GetLastWin32Error
get_ProcessorCount
DataProtectionScope
System.Security
ProtectedData
Unprotect
IndexOf
CHNEKBKJJPBPDGDHAKPFPCJGCJFHCDFAFIIP
MPEJFCGOADNKKDMLCGIPEACOEPAAFFIPALNK
IHOGBHKCIDBCGDEPHBCAHGKPHIOCHNCIDKOJ
GCLJKIMIHJLJOKNNGMKEBHLEMHGFDHOKKNHA
NCPCFODNKMLFBDIBOMFMJDIAHFADIPIIJMED
BMAAKBCIEPHEEOKGPHCGCLHPJILNLLJCMPBG
ALLNKGABMDGOMOLCKNGIFPJAFOKIOOIBPOCF
DDABNGFGFJOHPNIJJFODFKCDPNDELACOMADF
MFGLIONNLAKLFAGCPBNKGDBBDCAOFNBKPBAG
OBGKOKKOLDDDGHLPPDIFMNBHKHMGBHNFMONF
MNNADHCKPIDNLDCCMPHGGFKJKPHHNLOHPPOG
CHPOCDFFEKIAHAKGEAPNDIAKCEOHKPIEKMLD
LPNJDCPGEIHBAPHJOCBFBHHHIOBMAGLGJNIA
IBOKLKCCOAFFNMIIMMBKDGGALGCCGIPDAKBJ
MIFMEBIDJLKOIIKFDPKKPANKIIDNLNBHDLCK
IFCCMFOHDEMJDGHEEHABBHDAOIHDBILEGIHP
BBANJBNAFDPDODCAAPLOEPNOOLNHHGGIFJEM
IGAMJAAKHHHAJKCBHGAKDCBBMPEHFMJEGHFM
OCCMJLEIGONHFGCAIPOPAPLMPNPMLIKIFGGP
NHDIHEBBGBAKAGCJKFHNBFIJEDEDOPHHBCEO
BFHFPAFLJECEBHKAINFBCJLLGDBEENOLCDHN
EOLNHIKFGODNGGMKIDCBPMNFJFDJIHDLGJLM
NNDIOKJLIGAGHLIIFMNMNALNDAHNGOGFDCAJ
DJPCGCIALNCPIGBNFIJPAHMLCKJEOKJOBNAL
PLNCPCBNEPDHBKIGMGINJPLHPIDMDOHLEOFO
BOHLBMNNCOIIMEFAPJOMADMGIPMBIJEOHPGN
MJAIFCLLNEMLLIIBIPGEGGODMIPAKJHKOIPE
JCAOFFGHEHCENIGNPLEHMCLJPHGPGPFBNJMH
INGMOMNEOABFHMIBBLNGJPDEGBGLDAILIKJC
BGEGJLNGIKBKDMANDAHPENDBOHILJFKKLLKB
KOPMIJDPCGNPMIGLKNOJBIAGDNBLNAEPIFLB
IFICELKIPEEOJHFLNJPADBAFFJGNBJMILEIC
DDMLFEOOMOKANMDLNIHBKAJEFMJCOGHNPDBK
GKNGGJKAHJPLANIHAGHAAGDIHGNHMIHPMCCJ
COKBJHKONPODFDDHIAOAGGLADFPPBMFGJBHM
GDONJFAKDKPNLCLKHPCJPLHADMDBHFKBKAEP
MNGBMFJBIAPCDCIJIDNNIEOHECKCCLPDDHNG
KIMBABIAINDBHIDHAJKAKPNHBNOMGJJNAGOF
IBBLIBBKJFFBJJJALPJLBNENGMNEJJMIFFLA
JNOFGGKCCDOHFKBLBCIIHPDDJFHBILIGGEID
PPDMMCOIMOKPHNKPKCNOKPKDOHNDGKIBFKJD
MGJEBLIIFCKNHLFHONNKJNNNBBLADGCNGLKA
KEDBNKFAFALACHDDJNDFEOAMHIHAFEFNCPIB
NPJNEFLHEPHHIIJAFMMPJPEIDHEGGNDOBOLC
NMGCPGPMHGODAONIGGJNBPNLODCFDEFKCMDI
IMJHFFMMIICFMLPKINIEJFHNHKMHMLMAOODL
foundHandle
LJEAEPPHBBOJCBDCBAKOANKFJFEGINCAINJB
PCGEIBCPMFGMLKEBLKNMOACCGAJEMFAEBIFB
DDBKMOCDHFGMFFGOLKLGPKHDPMMECHGHHAGF
process
LHLFCOCGCLGCFJALFBMHBIAJIBFGFMLNFHMP
DJPEJEBMOOMCHHEGPCOLJECDLLEHCPKFIEMM
BLHODABHIPHKAMGAHBONGPBINHMDILCDIGDJ
WindowsIdentity
System.Security.Principal
OKLFLNPNDIEGIPDEKNEEODDNIPPNNELKGECM
InvalidOperationException
NDIDPCLKOODKMKCDADPGKBIFOMLFMKEANKKO
DONBOHHPFODJIHKMGBJMPODPMKHOEOJJMNIP
ANKDCFJPAMOMGILGMOPIAFHIJLHCNOLNENKK
RtlAdjustPrivilege
ntdll.dll
IOIOCBOLIMPBNBPDHPIKCGNFNLDOCECCPJBC
OpenProcessToken
NEMLFOIAHJJNAJBMBEDHHLFGMPAMNJLDCIPF
DuplicateToken
PNBGJJMHICJPMOHEEAIOPMGABFAAOCCGMAOK
CryptUnprotectData
Crypt32.dll
get_AccessToken
SafeAccessTokenHandle
Microsoft.Win32.SafeHandles
RunImpersonated
EEBIEILMAMDCNNGPFNDIFOJJHIGOJMOKEOMG
value__
APEKJNEHNDLLEJJKBOMBDICJPAPKAAOKLHGC
NKHHGJIMHLBEKNBJMEDGFEKIGDBDGCCECAON
PONNPCPENCPIEBPIPCLGKPJIBFOEAEEOINCO
IIDNBIAIBIGFMCAPKFDCBLCCAFNLHOGMNMGL
DCGHKGPBCLCNOOLBOMGABLHKFAILACCHFGAM
NDHKPLOOMLEOGMPMFEHABAMMGJHIIKHCPJCA
LEIGHDOCPGHBILPOFLCCKOICDOENBOBGPNNM
DKLAPNAJAHOBFKFBOAPHKFJDAIOLGMJPGFKA
KINFHOHKMHAIEKPMMOOFPMCGBIHPIHHONHKG
GetExtension
Predicate`1
GetFileName
CJNBFOPCGCGKCBLBDLFHEAKODDGJGIPNLNMA
JNGBPGPGGFIBLEOGGGOCNBNFMDEJMPLHHBGD
Equals
StringComparison
OperatingSystem
get_VersionString
DHDILPMKEPLFACGCIIGEGBGKIKCHAODJLOJE
get_CurrentManagedThreadId
get_UserName
get_MachineName
get_OSVersion
get_SystemPageSize
HashAlgorithm
ComputeHash
ToUpper
NGKLIODPNLMCFGHALJKEKKMGELPKAGFFPDGD
BPPFMMJLCDPDBFJMJPFKPDACJNPAMBGJJPAN
DateTime
BBHFLGOIKCABLCOCFJJNEIMFKLJNBLOFJIBJ
WindowsVersion
TrimStart
TrimEnd
HMCJGCBCODCJDKNLBMJKHNHPOHDIECMGLGNG
LocalMachine
Graphics
Bitmap
get_Width
get_Height
FromImage
KBFOMPBCJKKDHILFOKIFBBOAHEHPHPOHAOPL
Single
HGPGPECOFMAINPIEFIGHPKIKJEAADFNAAJOB
get_UserDomainName
get_Now
CopyFromScreen
ImageFormat
System.Drawing.Imaging
get_Jpeg
DFGAMMECFHAOFJHCPJNNMJHKFHAAMIDCPKII
CCCJGCOJNIMHPPLJMLIBIMKICDEHJGLIHHFI
PLPPJLMHGLAPMNMGGOJAIJPNJFAEGBCHOKMK
FFCKKFPEDELGKKDEEHKCFPBJCLDEMHLGBEAH
EDIMFAICMKDPLNAEBDMBMKIGOJHDJABOFFEI
UInt16
JFCGCAFKHFDPPHFOGOOFHIAADAAPAECEBMID
AEMKMGLLNNMIHKMEBGKIIKMMNHBKOBJECEHI
StringToHGlobalUni
PtrToStringUni
FJDNJPPBPMHBANIODNKOLMNKHIIMEOLPJBFO
INBAOIOFFINLLFNDLMENFMIAJMIELLJALJJI
AAAOBIDNOPBDILIFOANNJADCBPNKJLIINODD
GDFFAGENCLIMGENJJGFBHJPFMCKBFNNGKDOD
FNFKIPIJPCPHCDKFLOABFCIPDHDDOHPIALON
PEHJMCAHJEOJNFMANDDKHCMCCKNJEBFHLHJC
CNPPMPADGDHJMGOMPMLNEJFFDIAEFICBMMNH
LLBFNAADDDMFMCOMMAPNDPPDGFGOAEOHEMKG
NtQueryObject
LIHPMIKHLGNHEGGLLKHKDKODFGFANHDEMGNK
NtQuerySystemInformation
NtClose
AIBEKIAJPMEEBEGNHJJIAPFHFEGEMCJLNLHA
CELOCNPJPAJKLKFGHGDGIMKLNHBFOMHECPEF
DuplicateHandle
NCBHJPDFCHKMKJGGDNHLLONMLNCLDECNFCGK
QueryDosDevice
HAPLFJLJDKPBMEADKJAACCIKEJOPNAIJHFDI
CreateFileMapping
KGNFEEJCLKACNKIAKIBPMFIPKKMADFNIGAOE
MapViewOfFile
NBOIPGLEIMOJFFDBIECMFJNHHKCBMGLGBKGC
UnmapViewOfFile
FGCANFGKIIJOBJJKODEOGNKEIEMKLNLIPKLF
CreateFile
ECHMBGFMADDHPGGJLEPKIBLBEMIHHLMAOGLA
WriteFile
AJFICCDDBODBKCHOFEHBGMGJKNNMFBOKKHJM
GetFileSizeEx
MBEGGHCEMHHHADCPFPGDFEFGOMCEPGOPKEOG
GetFileType
JFDCPPCAKBCJCPCHPENDLKAKCDEJLKNLMAJG
GetLastError
ABJHCFNEJAOGAFLFHOCNJEFLKJAOKLMCGJFL
WebClient
Thread
System.Threading
IIGGHIEJPGKACCJGFCBEGIAPCEBOLBAIMLFK
GetRandomFileName
DownloadFile
AJHOGFLOLMJFFNBNDHKKFIENJIIOLFHBOMNC
RmRegisterResources
rstrtmgr.dll
HADOOKJFKLOBNCANEMPIBJLILJGJCBBCLOJK
RmStartSession
HPMMNBOPHJCCDMAAAPPHLLCMPKAOIDNNDGGJ
RmEndSession
GECMGDOAMOCBANHDEOHJIBKNCIPCDJAMCCDG
RmGetList
IJGPPPMPKCBKHDIPLBHKEMECAPDDLKKCIJCE
NewGuid
GetProcessById
ArgumentException
AGLBCOADEPKDCJNKDKHONENCCOMKBMEAOALI
GetLogicalDrives
PDNCKBIIJHNIIKJJKLFCECDEJKMKKBFCGFIB
PJJDKAOJPOGDCNHBJKHKAJNMFGGGADABACML
KeyValuePair`2
TryGetValue
get_Key
HJAFPPDPDGAMOEHADELPBECOKFPNMHOFIMMB
ReadInt64
ReadInt32
op_Explicit
PtrToStructure
IsNullOrEmpty
MCEONLOKPPBHIGICNLEDLNGNEMCNBLHLCCKC
AddRange
PAHMGKCLLOABNMFGIPENFECNCBAIEJNECOAL
Compare
EJJMKLLPBFACCKMGMOHJJFICAJNMMEJILJBE
JFAACECKDIBFLNMJPEKJAOBPMBOJCDACGNEB
FILETIME
System.Runtime.InteropServices.ComTypes
AFFPHBANMAGOEOEHNPMGIBBMEMKOKEHEKJAG
NHHLEKBJFDHPIBCHGCMOCLNOBIMOJKAMKPOA
GMKJLFLEOBAFIFBNFAOCBNNDEPGLDBAHJLKK
IMOLBOPDCLFAFMDEKIHCOOHPMEAPKNEJOOCP
EKDIGHHNOCAGNDECKMHNICMOFNKAJBHGODGA
CGEKLCJFPFMAODEKGKGBAIADDFNLOINKAMPA
PNBNIEAFCJGFDIICAECEBOCJOGAHFIPEIFHP
NCEOIOKACPDDOHBDEEFIHBMEBCDEIGECPNPJ
ILKBHEFNHJGCDNBLOGJCIKCOOAGKPLLGJNJK
get_HandleCount
DMMEPLOPCNJHNCKBIMAGOHCLEHFLBAOBJPPN
EGGINKMOJLNNDFPEPKCIDDBDKFDFODLACJGC
DKGODEHMMLDCEJMCJMMHGNKFNBCMPNHJJPIO
handle
GMPHONFKGJFBBBEELAHODLEIHKDMNGAPCLGA
NtQueryInformationProcess
LKNJGPBHCJEBJDFLFEFPGKFFPEMOBGKINHNE
RtlEnterCriticalSection
AAOFPJKMLBBACKHDFCGLFKOMCDLBHFODBBND
RtlLeaveCriticalSection
KGFBJABIIIMLBCBKPEJFDIAMNKDOMGOHMPOK
GetWindowsDirectory
OMJHNIGNNHNEMCMCKEKOIDCIFGNIHCEIEGFI
SetWindowText
user32.dll
AMLIJHIEINFKGCHCBFKKIMFLEHAFIGMBBGHD
FindWindow
OGIBKPAOLKMBNHHPKDLLKILGNGCPHLGFJGHP
GetModuleFileName
PKJJKKGOKPNJNHINKAFGEAFFAFBEHDOEHHAH
VirtualProtectEx
DKAOCPKLIPFPDCBCPPOBBALHMANEMEDGBDNN
WriteProcessMemory
CGJHALIELBNAOEIGGKIGKBKCKANJIIPFDJJO
EMMOKJIALCDEJMEOGHNAEBCAAAKCAIBHHENP
DFAAGIKKOKJELCJDLANEEMGKBIGMMEGHGIGC
JJKPFANPODEEKFFJNLALHIACGPGJIIJDPFJE
NDBHHPHEEHPMHLJEJCLFMEAKICMNLIOLBOOD
GIBDDMPEINHIIMEOBPMAIBBBGKPKJDIMMDFG
UIntPtr
Console
WriteLine
StructureToPtr
get_Capacity
GDOMPNNBGKGAACLLAMHILPJJACGONMLADBEH
BGCEBDFHGHODKGGBHNFJPHDNPPPDPJIJAEOK
JNFKFEHICMGPILBEIHCAFEAGPDFOPKOBJCOM
MJNDFBDLOFPAOAGEHJAFMHFOABEHFCDOGOBB
DBFMGOGANFNGFNELHEPEAJDHENECHOKIHLCJ
HGELPBFGDELCEFNCEMMHDKDGPGOLCNPNLMJP
DPPGEDAIPELCEAIJKPLHHJKDKLBLIIFHIMBJ
NLMGLHLLNIJPHKOLMLIBKEBMPNKNHINKDJCC
MDFPFPPLBPCHINJMPJECOOGKJEPDBIMNKOAL
PGKJBDLHKBKENPPJLIHIANIAFIAEDHOHJFIG
JHPADGANFMIJKGCIIDAKCAHECNBMGNCDCGAI
PLFLDKEBPFOMEGAGHDGPHBDKINIKFMMFLELM
DDPJDAIFIGCIIOJLHGEGGHOMLCFLHGKFJPJD
CIBHHLEPNJFLDFMDHDOLHDMOHMMPKILALLFA
IOCDAEICONLAOFAJBKPKBKJKJJANFEBLJJOD
MCOENBDAPEGFGHFAFNDPHFFGLJJAFDHAPAMD
CPFOCOEAEDMLEDECGBMHHMCAMJEADMOCMGKC
JCBNLJDDLHEEHLCMBMLKIHHPPJNDHHPBFOKN
DMKEGPLKNEMBMAGBEDNFFOHJKJADIPBBOEMD
AFJHJHPKMLPFPADEGFOAKLDMDDMBJNAHJENJ
KOEBIFIMCOPIJAIBPOPEGCGHPEFMKLGCPJOH
FLJKBBGBJDMEDGLHLNPHMAJHDNPDALMKIOCG
FJMDFOLKIPFEHLLJILKFCCCAKAHEOGEHNEPN
EJLEEOAKMNOOIPHFOLHDGCFCEGPLKDFEAMEH
AEOLAJPIPLGOFAFIGFDCPAICKJLMJCIEINML
NBAOPCFLDPANOFIPIJGCCJLIOIGGJCBNFOLP
ELHILAFFJJDGBBIBOCLOBFOIJMPKLAHBPLJC
DBJFCAFKMBBBHCCEKJFLCMAOMJDNGGJABIDD
NEGBFFPIADLCBPLJNGOPABAGBDLHNGAFKLLE
DJMOCELIHDIIFAODCNDOMBMEHLCFAAMBCELN
DMMJIJEAPMCCBEFJPJJFPCLAKBENLBANHIFA
PEAOPIPLMPHDCMACIJMHOEKHJKMMBFFKGHHL
DMGMIBBKEKDJKNGCEMNMHPODELOGHGEKNEJK
KPALAAIOLHICACMPMDFOBANLKJBOLDJBBDKD
HPNLHKNDOAFEOCAJMBJHNFKEMCDHHICMAGEH
FNNDHHLOAIPDHOFLGKKNECJHNAAEIJNIKAJF
NHBAOKAEOCCBAJEKCINGMFICOMMNNKGNHAGB
FDNCIMPMOIOBGOPFBFONPELFKILMFFDGPMBK
NMKBBPMGMGHMJAHMIMHDCLMLFKDMMNIBJLCK
MHHIBPHGJMJICOMNOKHGJAONNLEFEDGBHCEN
GKKJIDBKGGGHMNAPNMDHHAAGJKAKDBEGDNDI
LPLIONJFJIIKIJKLOOMBHFGIIIFDENIILELO
JPADCJEMLEFCBFGEOBFAHINFLBNMABDFAENP
AHJKFKFGEGFCGJLCKIECKJBIFFCGPNJGAGLI
JPNCJFCOJAMMLKMEOIOBECADGLCOAGAODMOI
GIAFFDBGNNEELIOLALLBKAPHJDJOCGBFMKAF
LMHEDEKCLHJEJIKJJCLGPNCFPBBDJBHNAFEA
DBPACHKINLMEKFJHBKHIGPAIPPLCLEMDBMFJ
WindowsPrincipal
IKMCJEAINEDILIMFIKAKPNHHCFJBKONMDPJL
CoGetObject
ole32.dll
IGBACAJPIMDJADNIHKGKOJKHELMFICBPPPAN
ANACOAAMEFOPEOBBFIBAPHCBOFBKFPNGOHLL
ReleaseComObject
MKPIKMNOGDMGPJAKEADPIPJHEMGOCMDBBMOO
JMCCOOPHNCFNEHPADILOIKGCFNHNAEBKLCAJ
NetworkStream
System.Net.Sockets
TcpClient
ToBase64String
GetStream
CreateSubKey
SetValue
GetCurrent
WindowsBuiltInRole
IsInRole
Assembly
GetExecutingAssembly
get_Location
BFADHDMALKJCONBIGMEJLDLMMMFEJDLDFGKK
JJNIHAOMPNEBLMBOIAJJKKLHLDIDDPODNFCE
MJGDMEJAIBBDFFFAIGGGFLBECDCMNCDJLNII
OIAJDMOKKBKJDIBCGDBNICOFCLJGPBHAFOHN
GGLGFMOHAKLEOOFDOJHNAECPJKKOHBIFCAJL
FFGFNKDKDMGFDGNADKJCDIMKBPEGCPKHBNHA
FGJHOFBGNDHNOLJJHPJKGBJGCKLBEBGHIJIB
IGAGEHJIGDFCMKJNCCKGIBILMCKOFHBOPAGA
CEKHCIANOHGHAIPBHKCOCJKJKFIGABACOHBD
Method1
Method2
Method3
Method4
Method5
Method6
ShellExec
paramaters
directory
UInt64
PGEAOIOAJJOKNPGLNCLHGBCHNJAIBNJNEHOO
set_MaxJsonLength
HOONLHEOMMJCCJGFCALLAFLBJEGNLJPCAKPN
GZipStream
CompressionMode
KLKBHKDDIOBGKNGFONLPKJPPFFGAILLPEOPF
ProcessStartInfo
set_Arguments
set_FileName
NJLLJAMCLKMAHHIEBEMNJCPNCMJABGFHPIPM
SHA512
GIKJDBPKKNMPBEPHAAFLOMOBCEBGLIMKOHOG
RijndaelManaged
CryptoStream
Rfc2898DeriveBytes
ICryptoTransform
CryptoStreamMode
SymmetricAlgorithm
get_BlockSize
DeriveBytes
set_IV
IPOJAOPMELIALAJLBOCGLCOHFDBCAPDNMPKK
ConcurrentDictionary`2
System.Collections.Concurrent
PJMAKEJLEOOCCPPLAONABENKEIOIAFJDLNJE
CGGHPDNAANABJKAJGIAJDLEPMPFNHJILFAIG
HPHEJKACDMLICGEHFDGMJLDOEBBFKBLDKOMB
ProcessWindowStyle
set_WindowStyle
set_CreateNoWindow
RuntimeFieldHandle
RuntimeHelpers
InitializeArray
set_KeySize
set_BlockSize
get_KeySize
set_Key
CipherMode
set_Mode
CreateEncryptor
701DF24F5A2C0EB1328E6B09D6E0D51A640C2CB8DF72F55C350D19F3CE881961
HOPBJHCAONDJFGOJPINGBCLGKIMNAPGJGKFN
LAAIPLEADNHIAOIDJFJKBKIBLLGOMLBAEAHE
typemdt
FieldInfo
MethodInfo
GetFields
Module
ResolveType
MemberInfo
get_MetadataToken
get_Assembly
get_ManifestModule
ResolveMethod
MethodBase
Delegate
CreateDelegate
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
MADHKGEDGBDILEELNLELIPHHCPMPOCHNPKOD
CDALPMFILKMCKOCEHKCEGCDGJGPEAFEAGHHA
IGCLJNBBIHDALMIMCCJJLJJLKFEGBBOADCPH
JLCKAGMCJPBDFMJDJGFFDMBEGEPGIFBGLFJK
ONKHIGOEAJPOOKDMPLHDMGEGIJPIHLBBNOGP
KDCIOKPAGACILOGMCAFCHNHABLMNAJIJMLCC
IAMFOGNFKAFJABADHJNIPAPIFKBOLHLEDKLG
LAPPCPHIPKAILJOOPDNPKPKBEDKEGDCJINLD
JGBHFCGCJPGLDHLLCPECGGIHPANGNHDHINOL
FAPDHCHNAKHIKGNJBMEBFHEMGNPJAJFIJBHL
JENBBJOPFDLBFOOIKCLFANLLACFDHNKJAEGP
EBCAHFEPKNBFJBCOLOCNICDFOBHBGINKDLNJ
NHGJACKAABFDBLIIMCGBGAPIIPCFPOCCKDBG
BAHIEHJLKEEEOBIMFHBACDANLBELFDGKMEAA
FIIJDHAHJJBONMOPCHGHCJFNLOAMOIEEIGHL
BGEMIEALCEAEANHGKMAOEAAEDKBKIDDABABE
MDDBDJAHHEKBAIFPDPNHADHBCLCNNLDHGIFF
MPKMHOKNNFMECBIOHKGEFEDMAOIDOFDFFANB
GEAOMNNEFCOFCEOJHEGHEGGMLCBFNOLLOFII
JFGMLMKHCOIPNBLGJHMLNLFKDCKJFAPLAHBB
GEILGDMEFFAKEJCOLEGOHNDAMBILNDFHNKDP
PPEOEFBLFMDGMCGDAPFMHALDEEFGPAHFEPDG
DIMMCJCKAINHNMOGDBEGHCONFAOPGGHOPDHA
JLDCOPJMCNIDBODDDEFMBIIOJEGBNHKNJCIE
PDHABPELAFFEEKEEPJMNKOFAFMLKNKFOHCHO
MGFBDKNCECFKJGAJLHOFKJANADHFBINDLALC
HPBBMPALLPPNHEFELOEEAMBBHEJFPDPIPMOD
PLGNOGFMADKNNGJFNJKKECDEIDKOKBHMPIJN
CJALHGCCOPGCLOKCLODPMMNMNCGNJLMJGBOH
MPKALNIGKDHBJGOOIHNFBEBLBHINOHOJHFOI
JJMDIILAJNLACMOGEEPJJICDNFGNKOACJAFL
GDAPFIONILECJEDPNHEOCLFKBCOMPJNEOEFP
LIIAGKHOIDKGIBFNOHOCKCDPGDIIOGOMHDNB
FEICILLELLLINDFCCCEBMFIDBDBFIIMIHLPM
CDDNILBOPCFNOIGJMLEJGGOFCNINAILAEMOL
AGHDLKAIICBKEHPAGAIOLKEIKEFPGHOGDHJP
CDOONMAOBCJNNCEMLKEKLIPEGDKJAOKEMJCM
LOJFANILEMFEPDGCLCOCKMFBFCAOBAGFDBNN
FBFMGGDMMINPCAONFLDGIOHHJJMCCONLDNNF
FPFLOPKGAOKMPEFCHJBBBCAEIOLODLNDDONH
GGJAPPJAOBNMMNPJOBJMADHLAKPKECOJDAJF
SortedList
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
JHMIMJNHPCINMCKCOBDJNGFLIGFIFIKBAJPL
NCNBNALNJBLCKIHKFOMEFLCHHLJNJNMBDGAH
KKONOMONCPEPPCJKDLMDJFACHJJCIJELLMHJ
ACPNPFFKJDNBIOKNEILOCGGCMMPHJILPDDBI
LCPEBJMNADKHPLHLHAOMJGHMBIKDICOACIFN
LGLCOCFLLAGNBDHDHKHLIHHGJOIBONFOPCIA
LBDJJKLOCKKHBHPHAKHIDADIMKPEOAIBNGDK
LEHFDBJFODEGONLEBKKDPHEBBBFKANPMJDPB
PDBMIILFKBAANOCPPEEBIPMDBDJKEFOGEEOE
ELNKCPNIENLIJKGOAPFOIOGIKALBLGMALPLH
AesCryptoServiceProvider
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
KPBKJAPHCLCALIEBNFPEKMCINEODBCKPNICL
CryptoConfig
get_AllowOnlyFipsAlgorithms
CLBKBLHECKDPFFKPIPFGNIHNONPCBFIFIBKI
MD5CryptoServiceProvider
IEDFICJDEJPONDNFOPEOKJNNGIHHAFBEKHJO
JKADCPPPNEPHDBCMDHJCJIAOJCLMFOOJFIGK
TransformBlock
BEBFIJCJIDFMGABHMLEBNANKCMOHCPMPEKKE
BinaryReader
get_BaseStream
set_Position
ReadUInt32
NLCKAACNPNDCICHOPCAFKGMNOIKFPHMDJKEF
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
GetManifestResourceStream
ReadBytes
BindingFlags
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
OKFEELECOBFDLBMHLDMBHPGNGLLOANLJFCNE
ENALHEDGJCGDAAMIEEAEDFEIPEIIGADPEMKE
MMCMGIMHEFBJIKNFKNNONCKJJHLMNIKIBDIF
Debugger
get_IsAttached
CPKFACICDEBOACKAKGKMOGFEAGBEDGKOAEFE
CHFONGHAPEPDJHEMDFBDFCFFBLOKCLDJKKKJ
StackFrame
GetMethod
FMAPHAMMNOMCEBHJKINJOEDPMNHKKONKPJMI
OOJGCOAECCEKMHHOCMFEJNDFMCBGGOKCJJAC
GHKCJIJINNPCODGNMDHCIHPIIBMLBANEKIKJ
OHCBMOEKMGFBBECLEFBBCHHFKKDHHFFIIHII
HCLHHIPBHNAGFOCCOAPEACIPPCAMACMKNBOM
GetName
AssemblyName
get_CodeBase
GetType
GetProperty
PropertyInfo
KHOBFKFOGGOOFKHECHONDBAIFOMICONOGEIA
LoadLibrary
kernel32
MINJOEIGLGFILIGCHLMNBOFAPPNENMPOCFAF
GetProcAddress
ILGKONBEDJIDJPHJIMOFMBMMPPDABMHFKKMH
GetDelegateForFunctionPointer
IJIICACGDIAPKAHEEGMLEPJMGNBJNGDPPLAA
ANINNGADCDEFOLLPDHMNJMEBLACAEJEPOMAF
CJFMOFEAGHBOBNHAHKFBBNAAINBMJGIJAHIC
ENAIOCBIELGHAANHNNKCAMMBDIFKEMICEOGC
PBODJGOBBMNOAFBMMDNNOPBFCLNBHKPELEIC
pZbnhv6YB
ALALPFJBKECGNCBLKEIJIFPEJJKOAGIIBMKJ
FileShare
GNHJBEFHMEBNNBJKLFAICNJOONEMIPBEIKLD
APOFACLEBCGJNLDNNIBGDFNFIHCKDNEIEIAC
NGFHHNEEIMMBKDMEHONCAEMFFCGKFDOICMMF
CreateDecryptor
EKPGPBFLFHPPHBAJDPMEJFGLGJCCJFJLABEP
get_OffsetToStringData
OIAGBLGOOAINKDMCNCPLKAEINNBCNEONEJMJ
get_Chars
LPFMJFAOLPNMIGJMLIBDJCFENHKFJCKNOBFH
IMIKEIDJKPEGJJGACBPJJCPMHAPPGNNFNDAJ
HJJCAIJMNGEOLPIBJNIOFCIAHIPICLEFINHM
NJLKPMGOIHBACAGMNOPJEOMLNMGMJLKONGLA
ODFHHMGDCKMHDPEBPDEFMMGJKFHFJMIFOGKL
DIJBOMAENNAIPPNJPOBFLDKDAIMPJJIABCPJ
KEAGEMLDPBLACKBKOEGEHGIHEJGAEAJMJCFG
PPNBFILLHECJNCPBMGKNMLHHAFJDNPCNLBCM
PNEJOGILAHPNIDDNAEMLLGIJJNOGNJFFFKPB
BJMDCAHNLEOCOIFCMKFDFGGBFDODDEAALNMA
Reverse
GetPublicKeyToken
FlushFinalBlock
get_EntryPoint
NBHAKLMJGCOHBGEECDAKJGJDKFCGPKMPCHKE
classthis
nativeEntry
nativeSizeOfCode
AJOLODMGFLEGGDDPACBCLODHGEDMPCONCLPG
JELHLDHGCEFIMAIJGCNMCKLHLLJNPHNFJBHO
CNMPKHNGLEBNAAKJBGCMOJCBCMDEPAGDJNPK
m9OIO8Q0EK
HJACMFPLNEHABDFBKGPLKAANDNHCIDINLKEP
DIFPNJEFNIMLCNAGFJGELOKICFMHLKIDGNKE
PNLIAHGHPDFAFKPLBGAEJKFECPLFJIENGECN
DNHAPCFOFKGJPEBMFHOGNNOMLNGHJLOLDDDB
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
LIFDJBAGPGHIOOIBBMJOCMFCFGLFFJAOCBOE
GBOHDKEPLPGFDBOLJJEDCGENJFOIGEKGKDBN
EAICDCJCBOPOGJJLNOIMCGEFOHDKCNMOBHHI
HMNOKHGCKAPLHHJIFEBCHHIOLGGAOIJIEDHN
EADEFJCDLFOCCMDNGANJJAOKDNLAABLEMHCO
OBEMBEFKMCGDLMAPMGAEAJAEAHHEEKNKONBE
CKJOFNPNHGOHJBLHDIMJEIHIAFBKLDENBDEA
JGNDCDMKKIHIPJLNFLFGBECIFHFNMNGKIHJA
JFJFAJEJHKFAOPCAIOBHHGOMMNBMFNFOODEB
MNPEBBGBMOPEMGIFGBJBDNMHEJKDJOKBPFHC
ILIPKKBKMBLAALEMIIMIPGLBPNBMFLJEPDDH
BEGFAMPPOMHHAMGDLFMIGGPMHMKHDCLJPMFD
get_IsByRef
GetElementType
Comparison`1
<>9__45_0
uaRU74NwKL
ReadByte
ReadSingle
ReadDouble
AFJJKDEFJJLHLJGHAOKFADAFCLEPCOLBMGEE
FMFOHMKAAIAMMKFAMFDBFBKAEMBNNJDNGGMA
GHBGEKFECNMBCBHLBKKKMOHAPKEHPIODHNED
IFMDFHEOBHJGFIIEIJKCMEBLDACLKPHDKBLN
KJFNBAFFHGOHGEACDGBMACOBKAOELJGGNNHM
get_Position
FFDAJLCALAJMPCMAAGPNOFJIFGFLOOJOABMM
AENHDIPJHGHBLIGCJHHHGHOHGGJGKFKBKJGK
HCGOKFIMADOAJNMBAABIEJAKHLDDMJCKKMOB
PKCECPHPDAALKDCBNJOLIHMNJBLPFCFFIAMO
PCPHLLIIMLAKJAGGPKBMAOCIDNCNNPPBKIIO
OKLJIFINGOBKPFGLOKEBGGCKGLLEPDEPMDEM
GHMBPKGBGAMHCMGCKBLAHJEHGACGDEFDMIFL
ECMOPECEJKMJIMCMFPBFOMIFAKFIPFFFLCGM
HMIBGEAGGJBBLDNDAFPEHLGNFCAJLPMGFKHG
ONOPNBPOFJJPHIBOMADNAMLCAFLLEJKAAGBG
LGDDCIHLGIMPLIPCEFPLBLOMLPNCPKCIOOHJ
DHKEOMCFHBIDJDFMALGIGNMINJEKLJIJJDEJ
APOBCJEBPNMMIDJCICGCNEFIKFNKIOAFNBHI
HEOCPGNKHOJCAMIHJALMLHDCOCJINGJDMGHF
EKJDDHKFIFPPLGPPBIBHLILDHGBBCIINBFGD
get_IsEnum
HACABJFFNLKBCCCGCCGMFIAJCGHNMILPCEPF
ToObject
OGLCHIMHGGLGAOKKFIICDKOBBJGAAKOLNJNN
JMECKIKDHDLJJBFFJKPFEPKKBFPNJDDILLDE
OIKMCDCLKGPAKMFJGIKFIJKNMKHCCLFIKDIP
IBGFELFCPFDLMMJIKHAFLBOEKBLOHACDBPMB
DBJMODFDEIJOCDCHFIBKEFPHJDLKDHFBPAFK
MNBHDPHFFCFOCHBHEEGHPEMLFODDAKAOGPNN
NCNJNFKCHAICDPHIDLNFMFMKIFECGPCCEJPJ
PFOHGNBFIFONGLDPCENHABIHECCHCKAHGPOH
FPEDDDNDHDJOOGNHGBBBJADLDAPKGLNENAMO
AKDNOEKJAINDOPKBIPHJIIJPFOAFOEDNGOCJ
GHACAMDPOCNLEGNLGNPJKGCPANANAJDCACLB
MMFAFFLMGPCNMOOKKEFPEFNBKJLFMKHAIGBE
IEBMIJBGDICGHADGINNDMPKGGBKPAFEPEMGC
AONEDFOIFEOAGBPCBMEOOBJPMGFEIMNLGCHM
BBAPAHBOLOFOKJJCONOPLAHPNPEKKJGKLMML
PHBPDELCEOBAILOPMNNLHJFMDMDBCDKJOOPC
GDAIBMIEEIBBEPMNFHBFJCHLFMOFMDEIBPJI
PGHPEGJDCDKKGJPAKJLNPELFPJFODKEMDKME
LCIECJKGDCNKINCLIKGCIEMNOELBPHHHHJMP
AHADOBOHGFGLKMAABDCAKKHEBKIPOLCIOHIJ
GJABFJKHNHIKJOJKFNIBJALKGKABIAOCCDDJ
LBFGLKDLGMNPKAJENPEKLOGFJKFAJLNICKDC
JHBFMPNMPPIGHPHKEMMKACFKPMJOGBAAEGEA
IMMGFJCEDJNGJAGEKCCGFJPJBJMBOEMJEJGA
ALKLDAAKCPNMPNLFHCMOILCOKJNPOAAJKPBO
CBLFPFJJHONOPHDHEEBGNGFEJHKDKBDLLPFP
BFMOHILGIPMGBKMNJADAOEDJGDMIHMBLEFPK
FDCIFOFIMFJMLJAINBPCDLCEEDFFCHMFDOPM
JLCKFJPPKINJFEJLDAIGLAJGDLPEJHJMOIJF
PGPAKHHBMEGLBLBDAGBINNFECFNGIDLBEPLL
MPFCCIOHOOHKMDKBADLAJOFCHNHGHFDPPOGI
CBCEFJPIGPJMMEOJJBGINPLDFMDABDPCEEPM
EHCLALEHNEHCCHCFBBMOFOKFDLHNOEMJGNEG
HKGMFGGNANJGJAAFJPODAMNJCGFBMOLBHJBA
KBDAPKDGEIILOLICMDAHBGPLKLFKNHBMCIPD
JEKHOBNJGOFNHHFNPJDJHBAJCNNAICJDIDLD
NHOOMJNICNAMPOMIHGCCPJCOBNJGAGLCCJEE
KBDCLMGGMPFLLDFKMLLLPFPFKLCFFNMBGDHB
MDOIONJCNINKDGEIEJMCAGBMOBNNIGJCGGLD
DLOPKACGEAGIFALFADDEDLAOCGFNHKEIAHFI
ICHBGFJAHBMBGJAPKMHBOCKPLELIPCDEGDLK
BKKIBNIAKFNGFHCMPDKKDCEDCCMHNLFJLIHD
IFFHBLDCCMGGEDBLIJBLANIPIDIONHAEMEFP
LMLFLFHILNHKAACPDBOBEHKOAODDHAJNGFDG
NIJLOLHBKGPONCCONCEOADIENNBFFNADEELA
IONDIDBIAEPBJCOJHDOHBBFCMGIGJHMHGNHF
GBDCGOFFAACOPEEAPCJEJECILMCKONHGDECN
PCMBDDBJDKOADDONMGNFMJGPJGHABAPEFNPD
HENDBMNFIBBIKLBIDNHPMOCIOECBECCCFBJL
PLLDNINMIAFEIGNENNIDBGFMNOMLCGPAFGBC
IGOKAFNAKHJFLPDPJJOLHNHNOHILOCHMAKDK
INONHBNDCGDOGHDOBEKNDPCNNCAHPJAGBLJC
KJNNLNEPAEKKHCHIPEPJJPCKNLPNDDOBLOIF
NOKEFCICCBGJMCJFENDHIFJBADONKHJJHFBE
MDJLEAPIMBMGIJCHIBDEJHIIMFMCNAPBFCHJ
MDPCKDKEKHIPEPEHAPDFEPEEBIONEOAFEGAI
EJAAFDPNJAAGEANDCBFKHMHCCKLEGFLILMBJ
ABNDEFFKCNABFOMJBICJCHONKICHMIFBIDNL
IJNJLLGAGLLPNCPJGJNHLMFMHMCDBOBKHFAB
HCAFPPGFDGLFKKENEJGLGDMPLDJNLGGLDONM
JMFCJAAFNIJOKJGNFPGOBLADDOLINFFCGCGP
OEOODICJODONJNBKANOHMPHJNOKKMOFBJFMJ
EKPKCNJEKBOMLOIDDLNHHEIJENAJHIBHFGMK
MOCHFCHDNLMNAPOPFHOFGJJPCKCAGOCDJDLI
POJMGBAKIFEOFEEFMIPCGDOJNPKLHIHGONOC
KMAOAGOEJDCEAOOCINOMGBCEFKDKKPNMMCLC
APLIMJGFPMFAEFBCGCGNAPKBIDJCKDGAMFNN
CKCAJICCHGJCBJKIMDACOBDDJJLOBICLBDLE
JEDGIAAJFOJFFCFIGEBAMIGBBMMJJEFJIHAK
CJAJABENEDPIDDMNCIMMJDJPGEAOLGFFOALA
OBAOHLFLLFGPFLIGMJBEJIOLPCKGKJGIHOFE
MGHNHGIJCJCAJGAGCAMKOEEEBMDEGLPAKAOL
KAGAJAKPFKIEIHNCBKIIGIMONBCLMHFFFDNE
GHAEFJJFGBEMEBMPJLEOGODAHHDLPBFFCONB
GEODNDNBNKACFMNIEPHNNOKJBDOJDJCAHCPC
GIFPLCAPOGCEOKKGPOPPADDHFBJIBMGHEMIC
BGHCHMJCMGGJDMKIHPKBEOABPDHKIBMDFCCO
POGCOHFHFAPODEKOJFKIEKGLPNNFABJKLLKN
GetUnderlyingType
BAMJMONNKCDHLFLNHELJNAAIACKJHMGKKBNO
JCEAPAKCIEJFOEPJADBNDHBJNOHBNBHOFOLM
IIGKJDKPMJHOGMILHCKKCDDPEHKNFGPMGHID
EPFDCLNPNEEKLGDFOOKHAJJNHFGIDOFBLCHP
DNBIJMIALGOMPNEOGCNGFDDJMCONMNLEANEK
MOECBFPMJHHMBCIJODOILDGCFLFMGHJPCJMM
CFJBFJDKKLFPGHKJPBAIOMNEJAIKIHJEOPMN
GBOCFDGLGKFGEBDJBJBPBPOMFLBDEOEHCPKO
KEDGJHHAKIJCGGLLBLHMLIHLGMMGOCNFDBOC
FLMCILHJEEJGJPIMECOLAKNHOCPBIOLOAIGP
MDABBCFIKEOLIIFDBOKCBCJNHPMNDEMGAMBD
LELJPCKCIGMCEAENDDBBKFDGOIPBCBCCAABA
MPNDIMHHAHCGKHILNEMJOBAPDIIBCBGJEEEL
DMJHEFNAJNEKPJGGJECKNMKIGKKDFCBILLIK
JPAGLBECJDCCDGFPKHKKHFHKLCMKIDCDDNEM
CIAAFLFCDOIOIHNDDHIHHPKBCGBNJIPFNMGP
ToUInt32
ToUInt64
PHBPHFKPAPGJHIMGDOBDPPDJPHGOCHPHMGIM
IFKDDEACIONKJIPPOLKFNHEMMMEODDFMPBHJ
OICKKFNPCCAMMHLNGLECCGPNDNFPEODMBELM
FCIOEEEPEFDENPDHAEBDDNEPFMDLNBODMOAJ
DCPIGLDBDMGNLOFPLGMNKIMLOMADBIFLFNGD
PIOPJKJDCEIGBAKKFEJEPOJLBNBNMGMHJBNN
NBHBBIJNIJFBBLIBCKPPPLCPGBELNNALBOGK
BHIGEMGFHIGIPAMHCBEPALPOGIPJBNHHLOJG
PGDOKAMNOMFIHADOAADCJLOKJLOPLLGHPJKC
GKICDNGAFDPPGALHKJBHKGJHDENIGCMKEAJL
MKFFHJHLOABCDGPBGBPLILKMGJIMOBNLAINM
PDPOHJLANNLLGMBDPOJPHNGFDFGDJOCPLOGK
MHMAGIOGDMMFCCBABAENFKNCPOCJIEDOEMBH
EKJCMEBCOIACCJAHHGFNMEANDDCBHOICMJKA
CJICADMDAKKPLAMOAHIHFPABFANFDEGDFECL
OIALLNCAJNJPHLEEJAAAAKNLJMNOIJDHHLBP
NHABGFNALLFCDMNEKGFNKPOELDEFJEIBPFFF
IIKODKLELHFFJJNHDAEEKLLHKEKJOFODOKBK
IAKAKFBGCCPIPLGFCHOGJBMOPPNACPHJKGKI
PAABHCJOOGMBJHAHNDOHPNMDBPKMAEOIJGKI
FDHDBOGAFOHAGLNEBPFNEFGFLLCAHHPKMJJK
ODGAMOHCELNCEFMLEIJBFCGMLEMNOJCIJFKG
NOHIJHBABIDHCPENIAOKFIIHOOALLILIHPPD
NGOEFPENKFAFDLGDGJIAKHAHEAPLKODMMLHL
LJBGPJKKCBHKEMNMAKJHOJFJGPFIAHJIMNGB
FLMCBIEFPBJGIAFIFPDIKKGNLOKEAHGCCKCA
PBOCDOJDBHGKBEEMMKKJJCBIAOMDHPLOPDDJ
IGHBOOMBBMLBDAGIICECPIIOHMEEAHHMMENG
PNNOFOIIGLKJKMLDDFHLIICMHBACJGLGKFCH
OCAAGNGIEEBAHPNMHAOLHHMAMAAICMFCJCMO
GDNHEBIFAAFPCOHGPHKEENMLBCHJBIAKAPAO
NFPKLMLFBDIAFLCNBJOFLIGPFAGGPHNHODPF
IKNLIMBJEOFGKMKBMPIOIPADAGNEJEGAHLHJ
MFPFNMHDHKGEGOLBPFMNMPKEMABPEJHNDDLD
FGKDHPIAAFLPOJFFAHDOAAOPHNGAHGDPJFHL
ABFLLLDNIPGKGIGHGAGIPOBPDLNCKCFHMAGK
BDHBONIHNFPDINMPPPJKKNFMGCPAGFHHDPKO
ODGHKHNOCNLKGNNICIAHIDFMABIDEBFMOMMB
JCODCAONFDMIABGKGNCPDODALOJOOFLJELLC
ICLPEDPOMJGMCMOJECJNBEHBJMLOPECMGNPJ
HCCGEJLPKMDPKBENDLDLJHOJJBCMMHKMPCEO
JCIBLKIENEJEJHBCIMODEEAJMABMELHJMBDN
IBDCOFLLINIHJGBGNGACPMEPLIEKDFNBPMGF
PJPHCPNIAMDAGBLCGJOIAJMCFPHFOBFFKDDM
KOKLBDEBFHLJCPBGLMKNBPHDPHEGIELDMPOJ
JFLLIDPCGLDCHKHBEDJCEIOEPEJAOJMIMMOA
JJNLNLEFHIOOPJEKHGPJIAHAKODEPKIALJDE
BILPIIGBNFFFCMBAPLCLIHJPAKNMCIEACPPE
CGIKFGAINKGKMAIIMOFIAMNFMGLMAJMCFENK
ANNJEBNKNIIFBKLOBDBGGAPFGCEMLKNAPHDD
ACBLEGILNDMMEMHJCDMKHGEBHCKGPGOLFHHC
GNKAJGIDELFKHNKKBAKLKNAHJIPCLPBGLLGE
LNONPCIHKEDJEFLBPPPMAEEMNKMDIOPHNIME
LPLNDALOPLOCOIFEHEKFIKIPKHPMPOGKCCOJ
DHMFACOJHFJHLDGEMKILGJFFGBDMODLOPELI
GetHashCode
FOALAAELCAIMNGABKJEJFLPBPOCBKDEOBBOG
NEEAHEFIJHGINFIBGKMHPMAIJNGLCBEGBOBC
target
paramters
KAOEHDEHBKAELMMEBFLKKPJDGAPBNLAPMELP
ADNKPKEFNFECFLJINEIFOOPOEEFKNKILOIIJ
PGNMMNKPKHFHLDJJBPPLEMJKLOIFBHFCABNH
FPEFJFJIODNGAFPKEOILGPKFKBJNHFIIHGNH
MGCPLANNPIMIABFFDMBDNEJOJELDIPMFMHIM
JDKHMJJGFNMCOOELENJENGFDHFJGDPDJDLNI
EOKPKCCAJFDAADBMMPPNAEODFNPJIEHLEPHC
PDPMENCGJBCJBHHBICAGDKGGGFNCLBNCNJAF
BKIGDKMHDNEDMJCHMMNIJNGJBMJCPPIGJKOE
JGNLHJEDIINMBMABHLDHMNALIAKPIJKILBMC
ADKNDKLPKPCGMCGGCGOPAPLGCKPEIBDJKLNF
EPEGCIGIKNGNNFNBEKMKLCGLFFDNHCNPECCD
PCFFIGMPCJOJELGENPMDHAKFJEPCNGLFENEN
CMOJLHHKBJDLDNDMJJIBEPNKEHMGIGLOKMCN
PECEJFLLDNOAPHMLBNELCFEFCIKJOMKCFFHE
GKPBMLMOGIJJOLMFECMEABNIADJLAAMALCIG
JKDOEEAIBLDMGMPBBIJOOGDGLPACFBABHAPD
APHNAPOFEKJNLPKHNDEIELKKKGBJKDDJFPCA
LLFHDNNJFHBJCMLKBNFCDGICDHEKOCEJCEOE
DPMBNGNABEAJIEPHJOFBDHIPNDMIEIDCGDEJ
DDGDHGLBKMOLMFNCAEGIJMNKDFMINAPHOJKK
DOMKKGEFHIOEAADLLKHAGLAMFHMCHFOLGGMN
GCNLBOGKHBEAPGIPODCKKKKKNHJMDOJIIAHJ
OAPDEDMKGCOBLHOFBNFBOIGGILNJHCPGMALJ
HHIIDJIJLOIDEEFOIAIEBEAJKPLEOHHKHIGF
PMDALLCFIOELGHKKDHBBFGANKHLGPGAPPLCM
JMJGEJDCJAMOKIMDLCEIAPPDFPGEGCJLIEMK
AAHHFKANFOBECCGGBJHIMKMMFEFHHLKANGEJ
TargetInvocationException
DEBIPKMJDNAHHMJFEJEGAMPHCGCCPBCODNIJ
NCCCKHKAMHABOPHDPMBBMGPPDKPPFAMNALDP
EOGMBCFAOIPEELDMEHLKOGJGBAAFPBMNNLGF
get_FullName
AKICDEKFGDNLIBNHKJIAEHIKIFANODBMEFII
KMODMOGLMDHHLEFABHFJEGEFGNOPNBHEMLFM
RuntimeMethodHandle
ConstructorInfo
GetFunctionPointer
IsAssignableFrom
NullReferenceException
OverflowException
set_Item
ArithmeticException
CBOOOGPAGIMNNBNGHBCGCKMCEMBLLOAPLJFA
NIIEJDALDJKABAPCMMIGCJBECIICMCPLBFBD
MGEAIDDHGBJNMKMALMPKPHGPGLMFCHGJHCCK
MEFEAKINDHBHPFKMCADGHFJGGBCKFOCFIELI
EmptyTypes
Sizeof
AOLPHKGJBDCJIJMDBPILCEHFGGMMKBJBHKNK
AEJHKGEHGPGCPNIOLEJLDCGBAFOHFEDJGNJC
HEPFBJMEGMEMLOHLEKJMDHDIDLCPGBMDGODO
OCNADPLCLGNCHHNJLCFLPOHABHMFAMNCACCF
LocalBuilder
LocalVariableInfo
get_LocalType
Ldelem_Ref
Stelem_Ref
Ldind_Ref
Ldloca_S
Castclass
Unbox_Any
Ldloc_S
Ldnull
ABCKFJPOLICFLICLLIHCMGGJIFPGHGKNKOEE
DeclareLocal
Ldsflda
Ldflda
EmitCall
Ldsfld
LOIDCFPDIJHACLGGKLIMGIOEAACMCHLPINCO
Newobj
BFEKMDHNPBGFKEDBEJKGCEADMOIGDPACFOIJ
Ldc_I4_3
Ldc_I4_1
Ldc_I4_S
Ldc_I4_5
Ldc_I4_6
Ldc_I4_2
Ldc_I4_8
Ldc_I4
Ldc_I4_7
Ldc_I4_M1
Ldc_I4_4
Ldc_I4_0
KGMLHGBNCNFCJMLDOLHCAHJKEGJANFMIEJFO
DNFIFGFMGPINDPOGCCDFHGMIANHJICBPBFCD
IKMCPELCJGNDALBIELIHNNPFFBLMDBFGDLKE
ECNJLOCALMBNIKHJMCGOFLJEICCOPKEGOPLA
JFGHJCMFPBNONCNBMNBIPCNGLBEHNBBKILGH
Initblk
OFMDPDHLOBGFBHMFMEFJEOEPAEDEDBMINLAB
get_InnerException
ResolveField
ResolveMember
ResolveString
IsInfinity
get_MethodHandle
ChangeType
<>9__12_0
OyYUOIbE1C
CompareTo
LLPEADMGEPLEIFPKHMNKOPBFKOIBNNCMNHMB
JKOGDKKHCFJMJPMFJDJKALGBFACKFMADHKOP
JNNHOLCNNMCOENLANBNJCCGGMALGPMMGKBDD
PAMLEBJOHIPOBFLFHJPJDJOEOOAIHKKMEJHJ
FNCNANFFOEPOLBNMNAFBOGJAKDAEPLMMKNAD
PDPEPCFEBGGODMHDCMLDNMACJCNAKGNCJMEN
CDOPMHLNMHCDGCNAGMHKKGIFGKICFIFPJIAL
NKHKGBIHODKLDHJOMILMMIIHDJHILKFAGCHH
GIGNCLBKEOABNHFJIFFONEMNJIJFBJCBGJOJ
InvalidCastException
LEOFONAENMCPFMJKIMDHDFFCPIGKPFLCAIGF
IJDMNKHHMPDIJDOCMOKPBAICMIPAJCKMEIOM
FFFMBNLOILMEHCDFGINHCLMGGEGDNAPJFFFM
FNJOOCFKDCIGCJALFMFMHJKGCIOMELNHHBIO
get_TypeHandle
get_FieldHandle
FELGLADMBFPFLIKJGINJLKFODMPPDKMBDJAK
ICLBNFMJGBLCOHCDCFEFMKDDEMLBKLJAOGJA
o7JUtBOnjt
CLKNFACKFEGLCKOOJEIIINFFFBBFCGEBKOCE
GIKDDIFOBNPFCGJOLKMBBOJIDDMAHAOEBDKE
HAOKELLBHLNLMIALFCPLLDNKLLCHDFJMJBLE
DCONKMAKHMKAPOJCNJJDMGPPEDNKNFBOAEFC
RemoveAt
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
685D1A9F5CD4E8B1A7B4ACE2ED3C7826E8F0ECC7F7F452B3D34D697520997BC3
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
m_8a97050737c44f7d95a5adfafc7296b9
m_0beb9a7aac184e3493910d90208284c6
m_00b00205c50944cb81d65532dd257e60
m_e645b89c3e8f4c1baf3c5e3b0ff49324
m_b9beb7b1a4a2437baa8cb64eb8e37488
m_8cd768ff3988463b835d30a1ebe8a7f8
m_5a109fc386e74503952b1d2439065e8c
m_e9ea1511737a4af5ba76431f7a04bc9e
m_f6522c2eda85454cba1d4fe9983238ba
m_34eb02e3fba34369ba5596451db8dc79
m_338d805650254c42af5bbb4ffb1ba08c
m_67054f566d374356bd59563edc68e22e
m_f9f899e060cd4b09984eec6d60e3d6f0
m_d498103026dc4fa4b306129495df7a55
m_ee3cb518ec28486bbf088a3c8de0111e
m_a7d28f523ee94f39abd8cccc9f926de1
m_2c6611be18224c2fa129e6515b4caffc
m_cb40c96045634511a0a963d3c5a63f3c
m_8cf2490def3442cab00273743d03b8a5
m_6d264bf8e67f44a28cd5bfb74cbaec63
m_179e898bb2ce489bb05c5e128120fe7b
m_4ce90303a25041b6902969c645ef4bb8
m_d9f422dc41374c2e99d4907cef06d174
m_40c438dddd1f4b40910f537b1afc19dd
m_b191164dad65446d9a017c7d12cab607
m_67e908903cb24efb93bd6bdcd3c22e8a
m_13e5eec9b92c4487884c56fad0dbcee4
m_04b7b9baae624fca93dc644d11dfec0d
m_b27444c156884a7c85c8c942652c6f2b
m_d5d4b69ba6304a52ac79ff8c78d3a1e2
m_f659224637ef4cde8ba63b05e194fea3
m_5fd526d2a4874841b9c6b82394360ee7
m_c1e4164b3cfa413a94e91b18eda82502
m_f337ffbce12d4e41a743fafca6c90d31
m_5890d80a5d31495bab51d0368354c060
m_d059135625ea4aaabfce959c5ae89050
m_6671cbbfe6d244ab8fd04816e0b4a258
m_f476e8150266422490fdf495f2b241be
m_e5d1548d29254c44871be9477a34f555
m_e21771da44864dfa8012e7134d23d24f
m_ba0417b3ecfc421a9705a6b1237c991f
m_ee500c1251004e03b0670987061531b1
m_a8ee99a2438a4410974fc25243e795b8
m_e1cd750491024808994ee20d281d0fb4
m_28c92a6e42d1421d9a674cbf551935d1
m_f03103bbb12346d2ac37d28570e5d37c
m_f7f9d2f2fadd43feb8a2a82535a38878
m_3fea7bb03d234bb59b47dc3ac7b2b711
m_75ec3399ba9d42b78968c40379caac21
m_073d9128773c40a2ae9f6a13ac3b7ce8
m_37687e3c966048a2b1c77bca5bb5fd6d
m_42f33d15048f43ca8792e3f17e2d07a3
m_b3ce41ad25244212aa1c96fe84a08d33
m_fda8f4afc2304ffda9cef2cee231e347
m_848fbadceba9419baba8db5afbf04117
m_2ee7bfa326f7452b91f9c00582fe8a4d
m_53527aced88a4ff2ade25f1de0b6ebdb
m_20a7ae3c4c3643e1b8941986d854f45b
m_d49615aafed74054a05849ab44655f21
m_cea1bc7d08794021ad6b48ca9117a305
m_e3791f836d544f55987a8a001d355c03
m_af0a93d8a5f7453f8acd4bc84e7eb5a0
m_657bed80884445f89b53815b02154b7c
m_df39d3d360624ccd95c76132557e87ad
m_84cf3e3ca7224acc8bb6f6f001a50a10
m_a9d5e7427e9f43f881c6a8018c047a54
m_2e8d24726ca2407ab42eb54ab3f8cb88
m_385d703cf8af42ab86a03bc7e300c165
m_b81a46dc105c4e77a7fb4d57b0e21a13
m_e94c91c42a134735ac06b5d4585f5d7b
m_7d5875a2cb204bf4b0407e9e084bf220
m_a984216ecb724e449aad54b401d226ff
m_bdf1d857693d425ca0747b30aa64ec4c
m_6a79c2aaff3f493aaba9f24d29ebc331
m_2621b15e09a64248b99d8f26370b02d7
m_8b49a7fb9fc24b57b36761931cd7ccd0
m_737d40a4c73547deb4062e9a3913bb1a
m_b5916bfe469e444b96162e57f1b08122
m_0e6bb1d8586047dea75478abe730ee54
m_9c022e7b2e094eada9a53e06f8670ab7
m_d2e32f5c693d44e2bcefffd66c11794f
m_339164f4711a495d840965ae878d2250
m_588e350baf4943268872fa63af585762
m_23e193db41f645749dac34154ff2d224
m_8cbf371130714d798b816b9e21cb1172
m_19d20848794040218b1c834a5740a90c
m_f9cfc431c0ba4dd99178addd19173a43
m_68f85ccfa95f489d870be9176973f01b
m_eea586ec44df424c9ca20a94619c6eb8
m_f0dd0a8818544f68817e71b0fb2cb423
m_85c16b96e7534c71840b36c419d627bc
m_c4f4174511a84fcc86a72a9a44db3277
m_c3738856cc7842e5a7ad061b67b47346
m_175c0030913648588783ecd956ca1460
m_acbf9f78850742e5b82465315e63c1ab
m_fb770e247ec64861946ec1e274fbec6f
m_2ebc040a2b274a6ba354e55919d774dd
m_c366bd1087cb40daa234e48a08449135
m_3c36fa83e1c546c4a03d3b4694a52ac8
m_2665ba2a06fd4339a1f9037ea07b98b7
m_cb6e4faa70014a1da08a47ea16953d9a
m_4cbe68151ad84b63ac35db1936e711a2
m_72af2cea368341dfb369b689b7bfb0b3
m_184aa0893feb4df48feca3e6a173fab5
m_c1ebfdf86d364227b4f0de7a5acb9c9e
m_e8fd157d167f48e29d0dbe8060852786
m_6aebbba0b16e47c7aa16baec734d4673
m_6310ecbe31994c3485d1307320b54a14
m_213968a8e59e4d0fa7252b2984e5afeb
m_b465a40b43bb4ba69b62afb801ca56bf
m_5516bea257e94c99a63039a68f385eee
m_71fc2028d2274339aa403db8e8d3aac1
m_88718b780dae4213954a414c5d5ece5d
m_90acbccfb1f648b0a597dbebde89c5b8
m_6e6e4b470de94f4abb4ef4a0caaee9e5
m_16c23a56f0454029ba85fda7c0d3249a
dc85af18ac7674633b0c40bf684fbfb1d
ParamArrayAttribute
CompilerGeneratedAttribute
FlagsAttribute
InterfaceTypeAttribute
ComInterfaceType
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
E8rVqVBSOqXXYXnvNQ.eiTY04CZLIWEkATqtu
m6DhbQJnltUrn3iuOT.HV4Yy0KCHLmO3FnLWs
36D493DE8326364E1439730.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
Copyright
1907
$069e7dba-3b68-45b4-a873-42487370cb2e
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
$6EDD6D74-C007-4E75-B76A-E5740995E24C
MKPDDKNOMOGHAIMAEKPOFJGKHGDFBPEDBNDN.FMIJCCJDKMPOHDNPCEAGFDMNEAPEGCIPGDDK+EDJGLCJOMDLOKANFJCCMENDKAENELDCCAJDC+OMPPEAFHBNNCJMJEBAOIKCAMOMGDINFBALLM`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
R(C5yl_
l?F\kz
rH:>]u
( &)&3
Gq:7G3P
Ro,1*d
E%q]?<
SyY/nI
O 7w#X#h
3|2& [?BL!
]A 6.<
F=V(Dk/
xN'nfS
#. S8^
G[A,_c
h.tG";
ZXG2/g
ID"lQY
8C8Hm>0
R~ |IU
O`_!nQ
?3$J+`
C..e;B
bioqC9i
v8'd>o
dO-^&mAeV|T
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo&System.Globalization.GregorianCalendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
'System.Globalization.DateTimeFormatInfo+
m_name
amDesignator
pmDesignator
dateSeparator
generalShortTimePattern
generalLongTimePattern
timeSeparator
monthDayPattern
dateTimeOffsetPattern
calendar
firstDayOfWeek
calendarWeekRule
fullDateTimePattern
abbreviatedDayNames
m_superShortDayNames
dayNames
abbreviatedMonthNames
monthNames
genitiveMonthNamesm_genitiveAbbreviatedMonthNames
leapYearMonthNames
longDatePattern
shortDatePattern
yearMonthPattern
longTimePattern
shortTimePattern
allYearMonthPatterns
allShortDatePatterns
allLongDatePatterns
allShortTimePatterns
allLongTimePatterns
m_eraNames
m_abbrevEraNames
m_abbrevEnglishEraNames
optionalCalendars
m_isReadOnly
formatFlags
CultureID
m_useUserOverride
bUseCalendarInfo
nDataItem
m_isDefaultCalendar
m_dateWords
&System.Globalization.GregorianCalendar
(System.Globalization.DateTimeFormatFlags
dddd, dd MMMM yyyy
MM/dd/yyyy
yyyy MMMM
HH:mm:ss
(System.Globalization.DateTimeFormatFlags
value__
&System.Globalization.GregorianCalendar
m_type
m_currentEraValue
twoDigitYearMax
Calendar+m_currentEraValue
Calendar+m_isReadOnly
Calendar+twoDigitYearMax
+System.Globalization.GregorianCalendarTypes
+System.Globalization.GregorianCalendarTypes
value__
yyyy-MM-dd
hh:mm tt
h:mm tt
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
Rfhn M
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
)b71bDAbUQbUYbUabUibUqbUybU
b74b74
\b7db7lb
.SZ.K`.CJ.[Z.s
.#J.;Z.3Z.+Z
! %$&$'$($)$*$+$,$-$.$/$0$1$2$5464748494;:<:=:>:?:@:A:B:DCECFCGCJIMLONPNQPRNSNTNUNVNWNXNYNZN[N\N]N`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_o_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~}
sabcst
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
5NbwD5LFliFZ4ooXfj.ZgR8ZZM2ncOLi6UdCS
{11111-22222-10009-11112}
Debugger Detected
E8rVqVBSOqXXYXnvNQ.eiTY04CZLIWEkATqtu
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
m6DhbQJnltUrn3iuOT.HV4Yy0KCHLmO3FnLWs
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Steal1WC.exe
LegalCopyright
Copyright
1907
LegalTrademarks
OriginalFilename
Steal1WC.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Coins.i!c
Elastic malicious (high confidence)
ClamAV Win.Packed.Zusy-10040038-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Gen:Variant.Jalapeno.19079
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba TrojanPSW:MSIL/Coins.e6a3d97d
K7GW Clean
K7AntiVirus Clean
huorong Trojan/MSIL.Agent.lo
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.B
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Spy.Agent.FAJ
APEX Malicious
Avast Win32:PWSX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Coins.gen
BitDefender Gen:Variant.Jalapeno.19079
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Jalapeno.380416.A
MicroWorld-eScan Gen:Variant.Jalapeno.19079
Tencent Msil.Trojan-QQPass.QQRob.Uimw
Sophos Troj/Krypt-AJT
F-Secure Trojan.TR/Spy.Gen8
DrWeb Trojan.PWS.Stealer.41153
VIPRE Gen:Variant.Jalapeno.19079
TrendMicro Clean
McAfeeD Real Protect-LS!21945C46E3B1
Trapmine suspicious.low.ml.score
CTX exe.trojan.msil
Emsisoft Gen:Variant.Jalapeno.19079 (B)
Ikarus Trojan.Inject
FireEye Generic.mg.21945c46e3b1ee89
Jiangmin Clean
Webroot Trojanspy:Win32/Mafod!rts
Varist W32/MSIL_Kryptik.JNP.gen!Eldorado
Avira TR/Spy.Gen8
Fortinet MSIL/Agent.FAJ!tr.spy
Antiy-AVL Clean
Kingsoft malware.kb.c.985
Gridinsoft Ransom.Win32.Wacatac.sa
Xcitium Clean
Arcabit Trojan.Jalapeno.D4A87
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Sabsik.FL.A!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5691671
Acronis Clean
McAfee Artemis!21945C46E3B1
TACHYON Clean
VBA32 Trojan.MSIL.zgRAT.Heur
Malwarebytes Trojan.ClipBanker
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Spyware.Agent!8.C6 (CLOUD)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
GData Gen:Variant.Jalapeno.19079
AVG Win32:PWSX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[stealer]:MSIL/Wacatac.B9nj
No IRMA results available.