Sample details: a40dc54236844989b31b575a087f37ee --

Hashes
MD5: a40dc54236844989b31b575a087f37ee
SHA1: 9a836600982fca318acbcaa6a6fcfb7e58cb24d1
SHA256: ba0ec95146d2c81b70f6e3564fe47f5514fb7f3169d0900e7a116bb5238396c1
SSDEEP: 6144:72SH+v8miv18ZowkOogNurPU1K7BVPi+cx:KS+iN8Zojrhbc
Details
File Type: PE32
Yara Hits
YRP/Borland | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/network_tcp_listen | YRP/network_dns | YRP/win_registry | YRP/android_meterpreter | YRP/suspicious_packer_section |
Source
http://fakhradin.com/upload/7.exe
http://fakhradin.com/upload/7.exe
Strings
		!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
!This ppispeo cannot be run in DOS mode*
`.rsrc
@.reloc
hQystem.Resources.ResourceRegfqr("mscorlib, Version=4.0.0.0,4Ealpwre=neutral, PublicKeyToken;`#7e7c561934e089#System.Resourcgq<RqltimeResourceSet
RSFTCDP
Thig dfiapam must be run under Win34
`.itext
`.data
(kdata
.rdata
@.re~{s
F(psrc
stringX
VObject
FastMM Dy`|ghf Edition 
 2004, 2005 Piepdq0hc"Riche / Professional Softssfq$Bgvelopment
An anwltcated memory leak has occur`er>$
The unexpected small bl}w{0jccks are:
 bytes: 
Unkj}a~
Uvring
The sizes of unexpegfsv$jgaked medium and large bloe}g2gtg: 
Unexpected Memorm6Xagi
~KxI[)
E]VRQCRE\Borland\Delphi\RTL
FPUOwg{Rgnue
ZTUWVAVD@n
tChhO@
mgrnel32.dll
GetLongPathJu}uE
SoftwarqHT{tjcnd\Locales
Software\Bov|s|bZFelphi\Locales
_^[YY]
	Exceptioz
EAbort
W\agrException
EOgb[rIcoory
EInOutQrdytB^@
	EExternal
EExternalException
	EIntError
UPmp@yZero
ERangeCv`}v
EIntOverflow
EMathError
GInvalidOp
EZa`yTmpkdeh_@
	EOverflow
EUnderflow
	GInvalidPointert`@
W[hpclidCast
ECmzfwtrGrror
EAcceswBy
hgvion
EPrivijsuu
EStackOverflow
	EControlC
GVariantError
SUuugrtionFailed
QWduvractError
EIlfvSguvError
ESafecuh~Q|egption
SysUtils
SysUtils
<*t"<0r=<9w9i
INFNAN
2>DFB*$@@@$ *@@* $@@($*)@-$*@@6+<TD"(-@@(*$)@-*$@@*-$@@*$-@@-*22T; &(@* $-@$ *-@$ -*@*- $@($ *=(84 /
QQQQQQSVW3
QQQQQSPW
_^[YY]
DCtporRec
DA~aeptRec
m/d/yy
:mm:ss
TWjybLgqhArray
TModuleInfo
kernel32.dll
GetDiskTdqsWvcceExA
BuildImportTable: can't4nyqb&nibrary: 
BuildImti`fRg`le: ReallocMemory failed
BuildImportTable: GetPrmcSrbtgss failed
]^[YY]
FinalizaEqwromns: VirtualProtect failed
DVMemoryLoadLibary: dll dos2nssbcp is not valid
BTMqm{f
JmadLibary: IMAGE_NT_SIGNATSRQ6mu"not valid
BTMemor
Lyq`Jkbary: VirtualAlloc failed
 BTMemoryLoadLibary: Bumnp_ivmrtTable failed
VF[akmryLoadLibary: Get DLLEntyPm
xr&dailed
BTMemoryLoafHytet{: Can't attach library
BTMemoryGetBd{uEbfress: no export table fouzd
BTMemoryGetProcAddrwse*$BNL doesn't export anything
BTMemoryGetProcAddress:$wn`ktved symbol not found
DVMemoryGetProcAddress: namc6(?8&mrdinal number don't match
VStreamL
THandleStrqu}
TFileStream8
@WsuvomMemoryStream
@_ckmryStream
SDEQWd
TClientSocket
TStrihcVkjGpray
_^[YY]
data.dbf
_Start
IsWow64Procqsg
mgrnel32
\rundll.exe
w	j<XA
Rc~pooe error     at 00000000
$!"5276789ABCDEF
MUhN@H$Hg
2b5=KP ;#
]Zu<U|
>&0>`+
rfPss@
]b%G|1(
	ejGdI
9l+`n>
Ya.rLpe
<A2^_"7
:nDVB~4E
T6%"92R?fJK
3bFuLb0
^8d{rS?
m|wesv32.dll
SysFreeString
QmcTcCllocStringLen
SysAllocSd`
advapi32.dll
RegQuerkPwxqcGxA
RegOpenKeyExA
RegQz{eaMgy
user32.dll
GetKeyboafdFmtc
DestroyWindow
LoadStr{nqQ
MessageBoxA
CharNextA
kwf~uj50.dll
GetACP
bpsclFree
VirtualAlloc
GafUgvtgntThreadId
VirtualQuer
QkdeCharToMultiByte
MultiBmbqPiUideChar
lstrlenA
lstvqfijG
LoadLibraryExA
GetThtesrJiaale
GetStartupInfoA
Gav@bkeCddress
GetModuleHandleU
AgtModuleFileNameA
GetLowc~wMhdoA
GetCommandLineA
Ffqq^mdpary
FindFirstFileA
F}lrSjiqe
ExitProcess
WriteFihc
SlhandledExceptionFilter
@`~Shuind
RaiseException
GgtAbbNcndle
kernel32.dll
TlsQqdDgjwe
TlsGetValue
LocalAlnyq
GetModuleHandleA
user32.plx
MessageBoxA
LoadStringA
WarQystemMetrics
CharNextA
SlgpToOemA
kernel32.dll
WvkfsBone
VirtualQuery
VirtugzBbirgct
VirtualFree
VirtuczU|hia
SetFilePointev
UgtEndOfFile
ReadFile
Z}qmTgsource
LoadResource
Z}q`JkbraryA
IsBadReadPtr
^quv@pee
HeapAlloc
GlobalU||
GlobalReAlloc
GlobalHgnvza
GlobalLock
GlobalFrec
AnobalAlloc
GetVersionExA
UcrVhreadLocale
GetStdHandla
AgtProcessHeap
GetProcAddvsgu
GetModuleHandleA
Get_opcjcDileNameA
GetLocaleInfoG
AgtEnvironmentVariableA
umDreeSpaceA
GetCurrentProwqeg
GetCPInfo
FreeLibrary
V{|bTgsourceA
FindFirstFileA
VohfClose
ExitProcess
Cq|ahfarInfoA
CreateProcessA
QvccteFileW
CloseHandle
wsowo!&*bnl
WSACleanup
WSAStarrub
gethostbyname
socket
sxepbmwn
inefIup`t
connect
closegisyar
0,080<0@4V&Z4J2P0T0b0j0r0z0
1"1*121.'V5L3R1Z1
4+0 "-0K6
5!505I5
)Z=R;l9r9
9F:c:o:
9!<7>A>Z>
*-?S;C:I:g:
:d;h;n;r;|;
<:<B<O<U<c<r<
=->T>X>\>`>d>h>l>p>t<V/Y9z=
5,5e5G7
, <8:r8
8(919c9l9
;?<g<n<
=%)$-Q9
?%?3?N?c?m?r?
90B0G0i0v0
2$2+2}2
324?4K4R4\4f4u4
505@5Q5b5n5s5x5
6"6*$"&(0D4J6R6Z6b6j6r6z6
7g7s7{1
>":,848<8D8L8T8\8d8l8t8|8
?";,949<9D9L9T9\9d9l9t9|9
<"8,:8:L:T:X:\:`:d:h:l:p:t:
-4="9(;,;0;D;d;l;p;t;x;|;
< <$>:,<:6>4<8<<<@<P<p<x<|<
=(=0;0)*9:?@=D=H=L=P=`=
>48<,R:B<H>L>P>T>X>\>l>
-*+P;N=L?P?T?X?\?`?d?t?
0(0H0P0T0X0\0`0d0h0l0p0
7&3$1(1@1`1h1l1p1t1x1|1
2 2$4(&:6604282<2L2l2t2x2|2
3(30341<#*7F1D3H3L3P3d3
4 4-45 P&G0_6
:!:%:):/,'<389:=:A:E:I:M:Q:
%3740r3
%%%$3I5k7
;0<G<i<w<~<
1 1N1U1_%w#|5p3{1
2 2)222;2D2
3<3V3t3
6'6:6C6^6q$| 
7;7]7l7z7
:&>$<(<,<0<4<8<<<@<D<H<L<P<T8J*L8f>d<h<l<p<t<x<|<
= =$=,=0=8=<=D=H=P=T=H+t9n?l=t=x=
,68.<,>4>8>@>D>L>P>X>\>d>h>p>t:
?!?,+2+Q9M=V?`?k?u?
1V777<7
8p8u8Y9^9
;)<.<T<Y<[>g>n>
+29.=,?0?4?8?<?@?D?H?L?P?T?X?\=`-r9~=
0 0$2>">6624080<0@0D0H0L0P0h0
:.878~8
<)<.<n<
<>=T;b/
>'>@>X>c>t>
?Q?k?r?
0.0;0G0M0Z0f0l0y0
1%14191J1[1l7k#
2+226U&@4c0v2
1 373S3_3l3~3
576C6W6h6
7(8M:Z,q>n:x8
*5>+84:A:G:
;!;+;2;8-U=@9T;_;d;n;x;
<!.>(R:P>c<i<.=K=W=^=h=n=
(98G<{>
$1&=6)260:0T0]0f0r0|0
161>1H1O1V1]1d1k1r3h!
40T0t0
5 7$7(7,7
: 8$8(8,8084888<8@8D8H8L8P,P*L<Z:`8d8h8l8p8t8x8|8
9$9,949<;D)\=R;\9d9l9t9|9
4 4$4(4,4044484< F$V0N6L4P4T4X4\4`4d4h4l4p4t4x4|&
5 5$5(5,5054585<!@!P3N7L5P5T5X5\5`5d5h5
wbqliqt
server.elw
svchost
vhgakhills.ddns.net#213.183.5*(% 'VCDDINGXXPADDINGPADDINGXXPAVR]XCVCDDINGXXPADDINGPADDINGXXPAPD[ZCVCDDINGXXPADDINGPADDINGXXPAVD_^CVCDDINGXXPADDINGPADDINGXXPAVPY^AVCDDINGXXPADDINGPADDINGXXPA@V_^CVCDDINGXXPADDINGPADDINGXXPA@V_\CVCDDINGXXPADDINGPADDINGXXPABR]\AVCDDINGXkozqkMZ
q$rpispeo cannot be run in DOW$ym`g*
`.rsrc
@.reloc
v2(2:54541
1Spp{luq
<,eM]@kwp~c}Alass471_0
<ProcessPetu(`[]6
`cvcm0
List`1
a]rce1
AlassLibrary1
IMAGE_ODV[MJCHY\GEFER32
kernel32
Microsidd.Skh5$
PmUInt32
ToInt32
P~dWvvmze6
e_res2
gavKSBD<
<Module>
HNHCAA
MPDNM^SIEC
GYZLRTIBBA
RVQDCA
FKCDDA
FSWO@C
F^MEVING_SAVE_AREA
RJLEFA
KEZBMSKD[BC
MSQGVVIZBGA
KBQHJAVPB]GE
FCFJCC
SGQOGA
XUVHUSBUOGA
XRWX]@NA
JQEEHA
SMHWHA
TNQNHQVUBZOQ
E@OADI^@BZJA
ANOQTORQAKA
PHDZQSLBLIG
H^[WOKTKA
ACBMIOFHBFLA
CE_VHC
OBQRNA
FHBZLA
RJRFQJOESMA
VPYG@ZG
VWLHRPYFBNA
LCHNKGFWGNA
SQKUVQBFKWLA
WJLODIXOA
GOHTAZCEUX_C
C]F^GJ@PA
AEMZTPA
BJTLQUPA
AGNGMJIYYPQA
NKWAGFOHLVQA
@JX[RWN[SVVC
XQCESA
UOVOSA
SCLKRAIDQE
@CYEN[SA
FSKTLQFRGITA
BE]QQA
ZUKDHMWMVUA
KZFCVNSW
@KHFFA
WOKMJHSMNBVA
YWHOVA
URCVSHRPC
KQMPVA
UGDTANJHOXVA
GTDS\W
CPHPYA
AAOTXTSSZA
LMLNU@
L]PWLEQJCB
WUSFBB
UPWHBB
NMQU]BVKF@
VGSMUHQQLCB
FEDCSDHOSNCB
\DBD@FWDSQG@
JWAEDB
DFEIDB
IWOWXD\WITF@
BUPPDB
VMMAEB
LXCSBLFBIE@
ETQOWQWNA@
AZXOEB
SOQDPEB
MFJED@
ZBLNFR
UAEOFB
FUQXFB
CMCZFB
RA^QVQF^VTGF
RZJTNQOLGGB
AQIRGB
YCNACLQPPUB
PWLTGXRDAHB
HERRHT
AW_MCSOCHPHB
MGRSKAVHB
SCSGGOA_FSJV
\SV@IB
BASGIB
QQOIIB
NVR\KP
@SNFXB
TQOXBOLESKKB
XNVTDSKB
A^ELN@
VZ\HLB
LRLZSKBNLB
OKQQMAKRXB
FBWWC\SOEYLB
LFCPYACHGKMB
I^UREIOD
GISFLMAOB
LAELLTWPQCOB
BRZNOF
M\YKT@
HRRVTCLJQWPB
PLCYPB
K_LMS@SCBASB
GPOFQB
QQZMTBIGB
[[J^PVAUWQB
UPDLZQB
WTXBRB
OPF[QPP
]QEZMBZRB
OILCSB
OLAXCAEU@
NKK_QR
TPTJTB
BDFRTB
KYRBZDQ@
WWIHUKMYFBVB
MCXPCFVB
HTRHPT
@IYOFULUJCWB
JKXLIFVEWB
LZMJEXR
FOBDXN\OVAYB
GAJYWFDYB
XLIJREK[WI[V
HRONUSZPMTYB
KKHAZB
HCKF@PVZF
B\QH^@
BPHJDAYUPXZB
SVODYBEMPAG
WECTK[TBTGAC
MUYROVYYFBC
YYODGR@A
\QPOCC
VRJNCIRWCC
KQ_T@A
VRTOUDC
AFEEEOANAEC
TFLFW@SXGG
ZTGGBA
MBIKGC
MFPFVGCN@GG
VG[OGEYFHC
UHPUWYRRHC
WWPGRP\C
TAC]W]WUHC
BSTATEVHC
HIQDIC
WZEGUCJ[A
@NLDBYRZIC
IKVKJC
TNJTUMNLWULU
^KTWYBIHKC
KCUNKC
EFGZ[CHX]VYA
OQWXKC
RWMILC
XXWZJSRHA
LSFUNC
UKRWHVVUTLC
GGXMYVEKHLG
MXFTMC
SCUENC
YNRMNC
R@DOJL[^C
HRRIOC
SINAGTOPOC
WYPDU\QKA
MJQQMC
NNCBVNFKZOC
ZDTCWPKTAPG
HOWXCOARC
BHEAXGFPERC
FIFSGG\JVA
WUSNPC
SYZZBSC
ETFOOKDCHNUG
PCV@SQ
LMLONJVYICTC
XCYLDISCFAPQ
TZSRYJMPOTC
JNBLVIUC
UBOMDSUA
DPUQGA
VTWZSJMJQHVC
NEKDWC
DC[NR^FLMRWC
LNBJHXLJCVWC
QFHV^S
\ZEGLA
LGZEXC
EPOYMQKLGFXC
S^IJZG
REJTKYC
OXBYYC
EUKYOQNHA
TPBWA@
QKFWOHCAD
SDRCHAD
IX@^SF
G@BP@@
SIEOWSSMKBD
ZQDACD
ZTBEEB[RMUA@
UBLIASNCD
ZSDRCD
XPHFPYE]AWER
@KEHFADD
WKSGKPKQLADD
K@GZQASDD
LKUTDD
UMKYDD
XCALWTANJCR
OGDCJPZJFD
OJWOD@
VOATFD
THJPGD
ZZXPGD
ETXD@\RMXSB
KSUUBXGIIHD
IWFZPHD
JATVNP
PGMNFHEAAWHD
WXIVID
ZKNEIGBJP
E[BUFOSZ@HD
VCBMGWGXQIJD
YWWMJT
UJGSPJGLD
QRQSPMCKSNLD
K\OLQLO@
AR]CORVZHND
KUCEUMKRZIND
TWCML^XCNJF
AMCJOD
XWWBPD
FJSOPP
FCVIPB
OIIZILRD
LXPORD
KUKBSD
DQGIJOFOAOWF
HHSWSD
TJNOTD
ESVHQQHED
RVEEYXLXOBVD
RWOCNJKWQEBD
C]T^V@
XDFTJYAWD
WAVYWFWD
K@P[U@
UL\YKZD
FVMSWUTXD
EYVOODYD
XCJNVNFXTYD
TOWIHAPWLZD
HLVNY@CA
NZPQJAE
KZIGCE
VUAEG^KGG
RAE^JAKTJCE
AOCKCE
GUNZCE
V[I]PR_BFAG
MKOKEE
QJFNXTEE
YBETOLARGA
MXA[EE
NAICIJCAOYEE
[Q\VBA
HWCKDRFJGE
MOSUHE
UOQARYP\G
RWKJIE
BTWZIE
DOCZPPSYDTHA
CF_A@FIYOGJE
RZESJE
NRSVZNLHW
\SV@]E
IIMVKE
IAHAJZKUVLE
UOBBUZHG
SUSPEND_RESUME
AZACCKGEFLC
QPGDOE
APJJOE
IWWGITOE
HGGAOA
[NCTKG
NCMIXMJGVYOE
LMLUEAOIBE
ZA@\OFHUBDQE
XYQEHVHEJQE
KNGSBRMLJQU
UDCOQE
OIUWYJRQE
IQO^SE
HEDVXAMRE
FYWDSE
SUV[SA
RG@MMLATE
IMPERSONATE
WHBW_FBG
DWKFDGNSBLTE
KFIQTE
QCOURSTA
sgp]@E
LUTFUE
DXFMUE
OWLHCIVE
BG@@]J]PYVA
QPALVE
MSEEWE
YVACXWG
QPQVQ\EG
ZJFFXE
DRZRHNBKKXE
AEQFME
P\FWQO[E
GRHMYE
OUIHNYE
VOQKIRXKX\G
QGSWHJVWBAF
YOVVGFAF
ABDP]RTL]GR
Q@TMAF
KOMBBF
LNXDBF
NOURBHNWI^BB
UHMTAMPKBF
ZEJJLFSBF
VOEMRZIEYLAF
VZOPZRTCF
ILSOOEHYSGR
JUBIWR^TMVCF
AHHIXCF
DRFJLJFBD
SAHUGV
UTUFEF
KJRVGWEF
KXYEPJDB]@BD
HTOFLZQSRBFF
SKDVYMHCNCFF
JXSNWYFYDB
LANKFF
HSEHSOXNTTFF
YHDWBD
JUR^DF
QZRKSZCGF
KFJFHF
PJJ[JQG\C[F
CBWOFLJIF
AEQDMNIF
HEKM[F
HCQS[L@EMCJF
JAMKSLCHJF
HURNNT
MM\VHA@NVJF
VOAEKF
YOOPIVMRKR
QQADND
JOTGPNNLF
FBWIUAWSDPMF
@GUVID
REKRJMTFWMF
MIPNWKNF
SSVMXHT
HI[@EYJRPOF
HPRQOF
VDNRZGVFQAKR
RHGNDKUWOF
GGFGLQTXOF
TEVRBOEKWZKD
Q@DVJPF
CLOWPF
DJDGAEBQF
EI]WKJC@
SMJQZREJJMQF
VAGGOHOCOQ@
RGWVW@
LVWTMWQF
MYQYQF
EXOYCRF
@^PFH_MGPB
GYHNSF
QGG_JOOZL]QB
XRNCTF
RGGBRGKRXITF
JJQSKFOSTF
OKQOECDUF
YRTFEJ\TCCWR
YAUMJUF
HWOCVF
QTPVAHNQLBB
EMK[M[C\D
OVCYDDRDVXF
HYPECUPPYR
VUNOMF
KGPHABKFZF
UVUYZYKUZF
FCHIPUG
KWDVAG
HAKEFNQXAG
LJNZZGC
ZQMVB\LT@G
ILMRBG
LUOACG
WNHG_NXDGE
L_IVFIMNCG
CJAVCG
VLJUWBDE
VFTFXOVE
[WAGRNDG
YZRFEG
NOAKKFWTMLGS
VB\FFG
REREWKMYFG
DPFOTVRUWG
KTV^JC
QTYAAEODIG
ESPGXWQIG
\YA]R^B\@OHG
HTNHZFSOTVKG
ZGOGMHHSPVOC
]HNDRLEOCNG
KVSBOG
NFYCIVN^RC
GACLPWLPG
SCAYPG
ZTDPIJEQG
^ZEBEGM]DUE
DUBFKPJQG
KBSBMKXAH\SU
MHYJXQC
CMNYQG
NLYURG
KYTOYSS
KEHVIN\DPE
LIXBPHJTG
NGRKTG
MBBF@TC
PLAUGTAUG
DJMRSBVG
TJLTCDHQW^VC
LMUIOUUBUZVG
ZYDLXG
SLPXTIPHJG
XQBYT\E
BZANIPHKBYXG
EYXJRWPEVYC
PHZ[JEEYG
OZRTYG
MMWHXMVUYS
QVN[]M\XC
OMLWBIZCAH
WMA^AZ
K[VSAJYPAH
CSYVNZQBH
D@CQRMAL
XSF[GQKCH
EDSMCH
XOVOJRDVJ
BL@MTLKPDH
HJBAADOSDH
CMM[K^WDC\
BCSSEH
CXYWEH
VQBGBFFH
F]DBSENJHBJ
UOELFH
UEQBNMHBRFH
AKAOQVIABFL
PPEHGGH
GSCKGH
XAWFTH\WHL
SJFNK[XSAFHH
IFJSNWEGHHH
BHQ_MMPMH
DW[SHCLLSIH
DPWWQFNGJH
^GU[IL\J^
NSLELHXEFKJH
HKKJMGGPUJN
NTNIP^J
LWIGVUKH
LYUVKH
EVKSIN
LLFCMH
NGCZFOXMH
HNGUCP[PLBLL
SCMEEWXNH
UWKFOH
MPGC@ZP@PKH
NWJSOH
EECLBIEWOH
YDAYO\
TNJETL
ZLNFTAMPH
ZAPNPH
VNBUFQ\
@T^NTJ
RQVGCKDUMSH
AOQXGQKSSSH
IE[LQNIYTL
GBGCBYTCXTH
XOD@GJ
RXXRUL
DDTDOGKIUH
SARIZLZDQQL
W^QD]GWL
IEGJGGMTUH
TLCMZRGGGGVZ
IPZTVH
ZMCGBWVH
MTAZVH
LZPF[ECUUL
OLDZPBVHQCWH
DZEZHNEUN
HQ[M@AH
TUSJWH
TDAEXH
JUGWMEXJ
RRCGYH
GKFGYH
YGTWRSPWYH
ZEMFYGMPAMXZ
SNWXUOLQZH
GVNTZH
XLAGGZFP@U^J
FXXECI
EKHXAI
EUHSAO
XDVADI
VNZSDI
PJPTLZKEI
WNGMMZFI
KOZWYFI
LYB@J[
LAVCZI
NYSKHI
KYIJCHLHI
QUWFON]
QGZPJQSTVHI
QJUCII
JILEKLII
XAZLNK
JQDYRDXJI
CKTMZNOMLJOY
IMOX[LWSKI
UFTJFRNXELI
VIXPW\DXI
[^O^LM
BBPXJLI
UBCPHGMBSMI
GPYDNGGVYI
KYSXCBYKBNI
BPCONXNI
PI]BKK
U\I@MI
IRVHOI
ULBVZJOI
RMGW\EQM[
ULPMPI
KWFFTOBZUPI
XWXFI_GUQM
]DASPRHQI
RDKLSMQI
BDPLAMEQWQPM
Y@CPVK
NUATRI
ZPDLEXUEASI
SKUACURWY
M@GDJJUHSI
PIDYSI
ZWXWJM\TM
@OXAAVRDTTI
FJPSBZTI
UOIAU[
SYRA^E[XM
AWTPLAKSXI
GCTGYI
VCP[BQSR_M
FHSTYI
YTSNMSZI
WBLXWYYOMQAN
WG]M\GCFBJ
GNKHTPHFBJ
CZLRQCJMFH
K\QJAJ
GRJFSQCJ
UIARFYJDRGN
QGSIP[FTJDJ
DFHZCWKDJ
DZSTMWURC^DN
AUFRCXJSDJ
FEWYWODPW[A^
]MQHWH
LGWFFBLOEJ
OACILLIXEJ
[_GLHRDX
NCBVSFJYCVFJ
VLSHOZASQ_A^
FHFWUH
FPGVGJ
ZIEXGJ
UGEEPEZAH
JRJE_@ILH
BIGGUHJ
SKZIIJ
FLKJNF_IN
EGTRH@BNIJ
XYMWQNDTIJ
ASBU[H
GGXBCWM^QJJ
ZWCTJJ
HDEU^H
ZWQMIZ
ETQPKJ
TNAWKJ
ARXKKNLJ
\@XFO^
TFIMNJ
WVAQXNJ
OXJUKZ
H[UABWVUBBOJ
AMRDPFGOJ
PEYFVPV^
PWNHWWEQJ
JXIBSJ
RQJEUGHDKWH
CUPAFUJSJ
PNQYHVDFLJW^
SG^XAJ
TXZCGUYFNTJ
XEQUUJ
CD_FDUN
FR\SRKYEVJ
DCMPBIZVJ
YZJMWH
EPFCEUX
@HJAXJ
QDKDVQXJ
TQIBYJ
NAIC[^
GIUVLYJ
YGQYZJ
ZHLQAK
KD_^_EGC\@_
@ZNQTACK
AHGPSHVEADCK
FHW@UAY
@S^SVQDK
IGERDK
FFIQFZZDI
@RW@AM
UQWFEK
RNEXZVBFK
YYAJTK@@Y
@LQHFDO
DAXSGK
JQUFHK
_GCHNRUT^JO
VMNWHK
XZZAIHYHK
LPVWXJXLI
DTP\AYLIK
XRGYFYTOIK
CYLM^I
@VJE@FHO
FXEMIXVQORJK
HPPQGDR\WZK
QOMDFPKWKYJK
MBJZJK
HCILKK
\W^IEORH_I
FYEKHRXLCQKK
KADEJGHI\TYK
XGVCOO
OMNFHNK
CIARFGBNTZNK
@PGMCLQWLSMK
WPWOZOK
TCDGPK
YIHZPY
BIUIYTGTTPK
TFEGUFIGFWPK
RXWDQSEUI
H^JLJAZYYQK
ZPPBRK
HWXWCRY
UN@EMQGLUKRK
IRIVRRK
TDSUJRYOV@I
UONSZTDRODSK
FQQQHPUMSK
IOPVMLDDSO
D@WRKATK
FSGCOUTEOXTK
HZZVGZYS\VI
VDMCUK
WIFWKGUK
FTVWVLVV_PY
GNONJX\LJWK
ZLRNDWQSWK
EXQVM]Q_
LHSQSMHLEXK
MUOYJRIIMXK
MGFO\K
TSQAGFKFIYK
XRPHCDFZK
TSLIZK
WSSUCG]RPH^I
XPXKZK
FCADLZK
ADKPXDZ
AVT_VN
JUDWUDGWRGCL
DLBZRTCL
VR[HREJ[ARAL
WAWTNKZRDL
PWQJTQNECZ
ROGGFEAN
EFEZJWNUYVEL
WWMKMTM\LJH
FUWK@KL
RIIPRLIL
VDIFUXHFJX
THLJBR@JH
HQBDVKVUJL
HWNRYUJL
B^\AWV^TNXNN
RAXHBDKL
PASYJLREZKX
XGLCHH
E\QPPRQGPPLL
WSQPVLL
PTDRJUHN
GFQFOL
BCGNSVKJQEML
QOVQJIH
ERCH]MOAZSML
WSKFQINYWML
AAIVIDSHJN
OQVW@SNJLNL
TINNTNL
HUCROI^ZL
ZINOXBXIOL
VRRWHQEUOOL
RKVF[SCOH
\VRPQQOL
DWEXOL
FUJDPL
PEEQJ]KPVDP\
T@AYPL
NADYXLDBQL
ZEICGJ
U]QWBAL
EJNHSL
HQESIUOMSL
ZJSKS^
GGNHSZW@GKTL
TCIZTANNTL
ZYSP@L
MATNMTNRTTL
VQUCXFHUL
DABMONUH
YLAOGJWK]MUL
BYDTBKZFVL
IQQIWL
IHDRUH
VSF@TDJGAXL
OQBGOTWACXL
Z@UK\N
@FCBZCJXL
RSARYL
ZTIKZL
YLFUPMUD^X
^OYBAM
QVXCAM
JVZAQBYPJNQM
C@GZCCTRAM
HQPNQBBM
CCVJKOIU@Y
FXSCWM
RSBHCM
DQJUCM
FNJKEQCAI
R]DEMRM
DCVZFM
ZDZZFM
DFNNBGM
LXUNMQX[GI
BJQTGM
IKIUGM
JMBJWASTUZCO
CANESIOZUHM
DIJGISOIM
HMSGHY
H@AH\DNO
MXLZQICSKM
MRWHTPOKOCZO
JEVSTKXFLM
ZFSIMM
PXQSFFQFKIK
TBXLJGPOZUMM
DAZBXVCRINM
ZSSRSN]
JHAI[M
FXAGLPVBEPM
PADGNHSPXWV_
AFVFVYKGNCQM
HARDQM
JAXLQM
GKP\QI
GG@LUO
EIKXQM
SOOERM
MJMHPK
\VHPRM
ZRKOEYUZTRM
VYSHM]MEWVO
XXELXJTLLJSM
CHLZEKSM
ENHJ@FM
XKETOKJLTM
URTYNXWVYPTM
VFV[VDU^@AR]
MGUCWYJQYVTM
QVBOMOKFMQQY
QNV\[FAWM
FWRLUJOFLUM
AJGCAWTVLUI
RV_SGEVM
EYJFJRNZJVM
WSYIL\MYVI
CDWNK@RVM
RRTODELOWVM
XVAFQO
ZBJVHPEJUM
OGDCUXOWM
UBCQYCHXO
\LKFCXLINPZM
LGTOOWCQZM
XUS[^O
NY[KCN
CQBTAN
XRKQWTAN
PZESAWOW_C^
FNUUCDBN
JPUGBN
PWWXAR^BVKFL
TQD\DPQRVNBN
EFJANOPTEECN
KDKEKATKVGL
UXARXOKSRYCN
ZBUCAHDGPN
HINEDJ
SET_THREAD_TOKEN
YXENWSOAL
QJKTGN
SYEAAGUKSFN
WS_PTE^
GZVXOFJQGN
JWVFTAITRTGN
UAETCL
MEQ]EN
JSSKYAHN
LSYUZWOLJJL
ECLCQZL
PYABIN
XFHIOGNXKIN
K@WWZN
DXPIKXKCXJN
ZSOHKN
QLG^[N
FWXUNJ
RGOCLN
PDNDBDLN
\CNMALYNJ
JITQJEEDVKLN
GQENLN
SP[SQNJ
DQPCMN
YZRVUOJJBMN
ZGXGYHA_L
M^FCCT[MN
GQLORJCDNN
EXZHNN
@LPTLH
IVSUBRUNN
PROCESS_INFORMSV[MJ
SCB_MLFORMATION
QUERY_INFOFOSVMMJ
PKVGCT_IMPERSONATION
QNURM[CUNIH
ISDESDBORON
LVQHVQUDHPPZ
NUWNRN
GOHDEKVJVORN
IIXYFRUYFJGH
HBNETN
DIKJTN
KPSSGPBWTJ
EZUZ@H
GAZNHZBDUN
GRDWUN
IRZAVZ
]M\C[RDL
CDOWXN
IMALDZHYN
HRKWUOHW\QNL
MV@OHAO
NITNAPKAO
HCKZH^FXREM
LYZGGOHMBO
PIHTZPHVBO
WYPBS@OHI@D]
ORSPOVPJGDO
KMIKHRHKPRPI
OEJCEREK
TTBZHVZMTQEO
LDVRXQE]
DEUCSHZVAM
CAMEYZXIGDFO
ZKDIUGTI
UECEEADBHFO
SBEFEUTZWBGO
INTHLS\GK
^ISTCM
MFNVHO
CEBZHO
Systei.[M
@IPUJ@JTIIO
LWIPMQDIPDKO
AUJD[M
WQBSSSKO
IRISUQHTCGLO
QSVCNK
@G\XLO
BAELAMO
FNJBRREMO
OYSJDENKMO
ZFRPNO
SOMSBGEAIYM
LDIBRQPAQSOO
JOHAIUNPO
RUYXTHCRK
IWLFTLBQO
TDSONLWHCQO
FRNCEI
CMMWVYJMFEQO
ZHHIQO
KQKUQO
WKW_EM
W@VNQK
AAPQUJRO
PHJBICPBDPQK
FPTHVEBUSO
UXBPMJTWQFM
HSTXACAEMUTO
ANWQUO
SZTYUO
RVGWTTI
@D\WVO
UWBVVO
DNZLAYVO
ZILSWK
LGYA]DQMWO
FCMXZLAQWO
ZXHZUI
YBAA^Y
MFEPDVHCCYO
FSWYWECYO
KNEU]K]EOO
JTLFYO
QCYLCKHHYO
IQZGNIO
TFHAWMOYO
BVHUMVPHZO
ZRSZ^M
WDHMCP
MCULAP
FGHGBT
YGESFONOXBP
WSDMRJPAMFCP
VCZ^SH]@LGR
HYMHBSLKDP
XQLEUXODT
\RRIFTGBAR
ZLDMEP
XLXDCWHSSEP
C@AGCR
PGBEVGP
BGELVPYGP
PLLSBQGJV
HWIAJZCMR
CRYPEDCIP
OJIEWQBMB@ID
ADJR]ETUIJP
FVVWYZZJP
PFPHEJPPCFOR
D^UHIKP
QNHMKP
GIFQKP
CAFAX]ARHBMD
GTRVCIFYDZKP
WWYZKP
FWV\OXHR
KQCULP
JMWHXWOCRNP
COKNWXYHSEKR
UPFMWOP
TYSVOP
IKIBPP
JOTLWEGKJPSB
WJBQDWETQDQP
NYGKGKMIVWR
ATMVGHI]UKRP
QSZJBNUJHMRP
FCTWRWIIPB
_OOUMHZNASP
DGPBDSP
GROUAJ^ST
AERXTMSP
UUFEHXSP
NWUZSP
KGWUAPR
CPB@KKUP
OGYQUP
ZOINPVP
A]CAVT
[DCJGXVP
QJZXWP
KHREUYOXP
\P_HPZV
UETJTVMDWXP
DRJIVAXXP
KDKWKP
MBB_PQEVYP
RKQBPETMAQ
ZWTNBE
GV]SLAC
WMNIALEXWWCQ
TVFNPADU
HSFZAPSNECFQ
OKLQKDXEGQ
FKRKUS
P\L_GU
SCESUPGQ
SQYGWNKVGQ
WKDYCS
SWOEJQ
CJBVAGQLBHQ
CTHORNBAUVLS
RVZNUYBNVHQ
RNVMREZHQ
AHSXECPT@UOC
IQMENQIQ
XKUSGWSLS
IMUPGPPFDOKQ
NCOLSOKQ
OGVVKQ
ZI@BHS
XPPANQ
OZOXFRMGLQ
TIVBKLQ
ZPAJNE
EXPPEUCSLQ
OYXBMQ
AHXEEZE[@NU
KA\DJ@QPLROQ
QTLGUCEVOQ
EYHVGBTS
EZBVVUPQ
DLFIEIQQ
XMFVKSNUIAS
DZOUW@KOKUQQ
OYLUQQ
TEDXQQ
SCQVKPQ
XFZKCMSQ
CVSZSQ
FDSNTFCEUUC
FOGGUQ
EPASUQ
BKUZUUQ
VJXXQS
VXLRJXKDNVQ
SSNPMKLYPWVQ
PU_PTWXXBQ
XVKFNWQ
XGLPXQ
BESHPIUZC
PKUOKS
WVRNYQ
GSCTLWICIZQ
ICGSFPELUT
ZBNKCHICUAR
BKRNGFZAR
OCAHBUPP@D@V
RSDXTBR
EQAYBR
KZWHCR
@I\[FASRJAR
SADFDR
GHKPEMTCER
KOSEA]BOXE[JEADER
IMAGE_SECTION_ZCSFAP
I_CCG_DOS_HEADER
TRVGER
MNUGROGT
CQ@OHGCPMDFR
RREHFR
MUPMKVTP
FUOCOU@GR
OLOQHSSHGR
JHWOBL[F^EV
MLXOJER
QXYPJWGR
EWB^IYSIKAND
UPIZAZCJPUHR
XWMPGCYDA]P
WMT@B@KV
KXVFJWQYNYIR
RBVVCNP
TNOMMSVDFJR
TTMMBJJR
VUHMA^MVNP
LBHACFQYUXJR
ILMTHY[V\EOP
XSTMIR
EZXTAKUKKR
NXGNKR
ZX@TOP
SVMAPWKR
KGPAJOMYKR
KVIDL@
BNJGIV\R
CHEUXAGUPYLR
HPCCFZYM@A_P
@\BBQN[UIMR
CCGCHSVPGRHB
VFMWZR
SMNREKNKOR
POJFSRDMV
[KYTKP
VSKRCQR
RXQAOOHAVUQ@
V@SRLOSRV
VOEDRR
MFWIFZRRR
F\UDQWXVP
FSMZDVFXNBSR
TUGJPDHXZVV
@LWCFTTR
TQKZTR
HOOCJUR
KQDQEP
TQS[TV
UJDHIAURVR
SPBZVR
SWHR@GAUV
_SSCVIWR
OGIKPGVWR
USXRUR^F
LKBRYR
DVLVYR
CLUEZR
XCRYW]CPDRZR
FNDCHUIOTUZR
KC^PEEHHEUS
MWMTAS
XJMKPCTWXCBS
YBO^AW
^^VI\GDS
XAKAKKTGDS
FYWQDS
TWIGS^QBDW
FMCUZXVDS
XUSHES
CQZ[CCZAQ
JEXGDS
XHWVGFS
NJYDMRVPJFG
HVWLVM\GW
CLKKGS
YHDOMFXGS
ETLOUGPFEELG
EOIEHS
AIDIDBCDDMHA
PVEGXHW
OZUHPJHPUHS
KGDW_Q
YIVJOHDUJQ
KAMNH_@JW
YFXJAHXJS
RHBQIQ
A^ARQ[S
WYNUKS
ZMHQYWICLS
GJVEWZSHCUJA
KOKXMS
LSAFNS
GDVWIWGPGT\S
MJLJCUMS
TGPZHRXTOS
LYSAIMV[KFQ
ZATEPW
JZWJFQS
JBAUQNKQS
MOUGU_JV_HEADERS
GZNFRS
VFARUQ
U]PEPA
T@QERCCGTS
NZWVTS
RJMKTU
ZKDAQ]PRQ
PHCBOQWAJUWS
BQPHXS
CBANZA
^YTTBNXS
JKEOXS
FSBIIOFTU\C
BS\ESD@NBTXS
LMUMDGCXUXS
VPOL[G
MQDS_D][YS
DSIZEYDRJZS
FNONFIB[ZW
NJ@ASOZGLMZS
KRPYJTQZS
YSMUSWYJQXQ
L@WSZS
QQHYWDVTZS
HNGNBUFLXW
XQH@MCT
ZODVVRSRRQAT
JDBCZ^G]IG@@
]ARKGJLQNADT
SEBRLWIDT
RIM\NCCH]TT
@JACORIGIGET
PTDTKADVRCB
UFEIVU]EFT
IYWNFVNFYFT
DHSTKOLJBGEF
RLKMKGT
HCOBZGT
STGAGGSMDMZT
TXH@DCPVIXHT
BUJOKQIT
UFMPZRKF
]GUHAKP
PHJUTTIIZKJT
WPKHJHWJU\JP
IREPHZKRJQJT
YHRPKT
EKKWKT
QTMLNV
EAHTSZLT
USFGRMT
BSUSNP
K\QCJV
GQZDSYAENT
UINZHOXULJ\V
VRJEKOJRJOT
UGLBOMPOT
MTYGPF
EOONZIBRP
CNOPQT
EJLOSHUVRET
HMICSP
UQHQYBRT
KQJGFCRT
NEG_YYAI^TF
MFELST
GYGQFGGRPST
BRANV@
WCBCTM@[PTT
QNGQYNWZNQTT
GGJPVF
I[FFSNGJAUT
RDGFJSHEBUT
WVRY\AGV
ZBCTJLWT
TCUHUT
KGHIUT
QEQUSV
FGZGVT
PYKLVT
SWIUNXBFTYSD
JIFJBI]TVWT
VMYIQXKKYWT
URJJXHSZP
WB^KVUPMCXT
GET_CONTEXT
SEF_WOJVA^@
HEDUHXT
YVFGVXDVHXXT
GMJTYP
WHEAM[T
LPOIYT
WTGWYTBTRYT
]\PNGIYF
BGTEZT
TJRVFSZT
IQSVSLGQ
CUQJT[FVCBU
EGWZGKOXFBU
VXCPJPEFDN@G
^XPPBU
JCECCU
CPWOCKCU
JID@DQ
SMCOQTDU
VRZVDU
BZTNDOSNTXPS
XBUYJQW
AHAFLMAPEU
FKIBKVAFU
W]EABW
HK[CHJNFU
KMIEOUTHXFU
EOMCEG
OK@B^GCW
DHUNHQXOFJGU
IEAVLFBAG
LEHRUW
WRUTHU
RSXNTSXQCVHU
LEJSCBDMZXW
KSJZAIU
IJYPPGIU
PQII[W
VBSPOC
GRQLJFKIUQJU
UFPPLZLAKA
JTFGTMREHW
ODWUMU
CBGJNU
WIBRNS
JWIHLIC
CJUCIIOLOU
XWCCEVKCQU
ZFHCUW
LGQVQU
XDYWSHJDKARU
CXBMFPILHVW
GLTJHUPTRU
BWIASU
M\@AQQ
NRSMUTSCVVSU
HVLXSU
POQVJLGADVQ
UJDBMBUU
OMUFCCRKDUUE
HDMRYEX@RW
MMJIOOFWU
RGEEYU
BYKFWVL[Q
XMWQHPRNQYU
ILNTSWWVYU
OLKFZQ
KDTERUZU
GDRVNXNAV
T[JEOQOZPUV
NPEGABV
ERGEBV
NPWFBV
NFRWK@P
YGCKZIUYNTBV
DBGPBOXBV
FBALE@FAF
SUWUNCLCV
RGTQCV
IZKSVWP
BAKPWCV
CFJKHADV
MJNZNLQCTK@T
DXQTRDV
ZRIJCNPLEEV
BMRUIEDF
KS\E@TQHFV
DHZNHWJIQMFV
SXIMZLTX\DR
SX\STZQWNGGV
UJMIGV
VQQAJI^ER
NHQMCT
SWPDMAKWVGV
FDRDHV
GKXTLT
WMCLMQFUDIV
FQYEIV
HNFQIV
P^GEKKUIV
BGONSYMWNKV
UZHUWXLIMOR
O@CDXRCCROKV
TVTWFUWFPKB
V[GTD@SIJRKV
JKSBPFPKYKV
OKIEBRYZ[MNR
EWHOLV
AMLNLV
HAKTMV
XOZULD
LOXLSHDPOV
BFUROR
@LISLG_XRRV
WVOEQV
CXFNSQGMTMRP
_XHEBXGWVT
CRQKSV
GEZTSV
VLXXZVP
KUZOS@
LWOYUV
ESRRPMSPSGVV
EWJGEV
LWJ^KUDYWAWV
NVPOXV
EQORS\T
YEOQZV
HHWVPNGYV
CLVJLYV
FQ^QBRZE@Q]T
FZLLSYV
LOHONIBXYV
IZUQPFOKHV
@AHIQRZV
FNSQEIZRZV
ZVCOXR
OGKBLOFVDAAW
OAEDBNVOAW
BCA_WOWD\BG
GBXXPBW
YMRAQU
GWLCHSPQCW
GCAHUCW
KXCAJRUCU
P@WXG\ZDSAW
IEECXCW
BQOCDW
ZZJKDC
REUTRESVRDW
QBVYKSDW
GWBHEW
AP]QSGQ
EKTFLRFW
MBSQJAKGHW
BRJXNU
IMNEI]IGZXHW
XUTILHOHIW
ZJCMIS
CESROU
LLHLKFJW
XIZVVBEWQLJW
VZACGGIU
CSLMLW
CVSEMW
WZXJKS
ICASWRFFENW
BKHNTHU
JNHYK[WJU
ZBKNWXCJFOW
ZJMSOW
UM@NJXEQTNUU
IDFZQW
TLDMRW
J]PGQC
CUWSDMMLVFSW
BEYIQSW
YKYHTG
UVDJ@W
DVDERTW
TCQPVW
INOAJI^CWRSU
G@RKDJBVKTWW
LPQZWW
FHJHXQ
@KQ@V]C
KQOVLSTYW
PKKSCRZW
OPJMP@ZS
UBVJEZ
NWZVAX
YESYAX
BZUKZBBRX
KWGU@\
MQVGJENBX
CNRPYGWPRNF\
PGREEH
JPCAJFQOFCX
UMMGCX
LXUFBJ
VQCS@H]FELDX
DBIXJICENNDX
EMSWDD\
ZPA@OUCEX
IRPXVKHEX
TFWOEX
IDEGPSEQFSGX
FGMJXEX
NJCZEX
ATQFNRNGDJ
FMGMGYWCZEFX
TPJLFRBITJF^
QYAMPD[MODX
ODYLFX
RHTTIHPFX
AA@XG\
AI]HKOLUGX
XHHAUGJDHX
IVIGHGYRLZ
OKNSJX
ZTFKMFPAFIX
ECTOBGAKYX
INNFVM@JX
VNMQIEJX
NRFOQJX
GJQWNZ
UXHBIX
JYTRKX
XKGQLX
ASJHY\
FVG_KJ
HSMQMX
MGMTTAPRSMX
HYJ_NL
TT\WZX
NNPTRMPIRNX
CAGBPCGEQVMJ
HKQIZAKZ
YWGCKNUQLOX
FRORQPMH
QNBIRODWAPX
QAIEPX
AHGZXE\BX
NXRLP\
FWGNUBIAQX
BGFRQFQX
AJ^WROJKHPUZ
PUINKYIRX
VPIQMBFIQL
AHHMSX
JVOHTX
AUVMTX
NKIQ^FW@H\VL
GUDXTYGLMOTX
CYZBUX
OLBNGZ
@ALXW\
VCCGRCZGVX
ILTWZ[T\
IUCZ@WVX
OAJSWDQDANWX
IGLPE^
@NTUWJ
LQAOXX
BXCDMKLITWXX
APHHWSOO\ZH
MOUDNXLWFYX
TKZWZMKZ
IOJQZ\
WWDCKAY
PSUBCO_CK
LZUAFWHCY
HDQWESMAY
DFGCPUAY
GOMG@Y
JKQUBY
IMGXTIYBY
Y_ZWPG[
JRZEFY
OLQMSODY
KKVJMFOBEM
QIOJ@BS[
NYGQEEY
INPUOJRFEY
ZJBGUY@ZPNQ[
GDDPFYSEY
VCKZNZBFY
NXU@QIS_GT[
HVKKQZYIFY
DTEWOITESWVY
RBT@V^MC[
LUEYQJJQGY
TLWSGY
GXXQQJOQNIY
MJOZIY
MNKZDSN[
U[YQHY
HYQLWJWMVJY
GHOPKY
LAZQ[I_
DEUTLY
GFFGDLMCXLY
RNJKJC_VHMO_
UVCIMMAUVDNY
SLMUMCQNNY
NQE^@MLI
^FKCOY
GEZTILAVZOY
I]GCVO
QLPILJJRQY
VPNVCXQY
IMEGW]@CPAMDMPECTORY
NCFPRY
OZ@UJHFHGGW[
MYNQUXVGSY
AEYQJAQVQUO
JVFKP[W[
DYUISRETY
JCETFEHFT]
GOOMR[
JT@TJDECPTY
ZCLVLTVPTY
WUDVVGXRM
WPVCLYCSDIUY
MDVOUY
KTQVQFRWNQLY
WBNIRLIEYY
ORKGYY
NNQCEL[
E\E\Z]
HWUUUVWTZY
TLBZZY
GVMAUX
RJG]A^
LXEMHPMHSAZ
VGRTAZ
R_J@FV[GFTZ
DVHIKUJSCBZ
CJXMA@A^
ZU^BQELTDZ
PSBCEZ
JZTZFEZ
\P_YHG\
_FHWEZ
VEMPPWEZ
ZAIQGZ
ZTYCG^
L[\UCX
NUQZXIQXXGZ
NTLZRPGLOL
QZWMSESIZ
XESZIZ
YFWSOGVJLUH^
FWMRKWJCMKZ
JNABLZ
UBDTVKGXDCNZ
SQKPMLZ
DMKXPUCMZ
GTMJMZ
MTQRK@U\Z
IAFUNZ
UTYCHPZ
LZPCUGAXYSTX
TCXJGIWTVQZ
UDLTZQZ
MPGUD@FYP^
HNBONCCPRZ
QKOCSZ
RFAKGX
P[RHSMGMSZ
PZTYQWATNATZ
UUA@TFX
RMLBTT[TZ
DUPXZTZ
EJERUSLUZ
RDO\WX
FT\VJVZ
ILEZCICTVZ
RFQHW^
STBME^
Y@[ZWZ
PHMBXZ
MQIJTCYUN^X
HOWTHROYZ
ZLIYJOMWYZ
MXOINZ
tujae[]
RegisterArea
SizeOfMj
tmcjkne`Fata
SizeOfUninitialihgrDevc
PawgOfData
SizeOfRawData
T{kjvwpFmVcwData
RunLib
mscorlid
g_magic
System.Collecvoylw,Ua~evkc
e_lfarlc
e_crlc
a]ym~chnoc
e_maxalloc
getOI`
vw@hvgadId
dwProcessId
ResgkwTlpqcv
lVhread
OpenThread
ProegasPjtauf
lpnLengthNeebav
ancrstaf
e_oemid
TagWord
nppmnEmvf
StatusWord
GenericAga
Ckoii~Agg
InsertAce
Replace
BeqeOfCode
SizeOfCode
uW|}tGmda
QmxeOfImage
get_Message
Kzvkig
BmmlterToSymbolTable
GetQhbivm|kwlpTariable
IDisposable
AA\ajfjc
eav_Handle
RuntimeTypeHclvla
UgfV}reFromHandle
bInheritZc|fhg
jsl`ne
DownloadFile
DeletqDyla
jModule
set_WindowSty~a
PvmwgcsSkndowStyle
get_Name
pfksLeoq
uep]FileName
set_FileNamw
xpErtj}cevionName
get_ProcessNuow
bkxe|cig
lpCommandLine
LocalKewjmlu
EehnKnownSidType
GCHandlcPkpa
DaxuaVype
flAllocationType
Q{ejcfw`g
RtrToStructure
get_Cuhrera
gcd_Gwlture
resourceCulturq
]epj}fVcwg
ImageBase
ReadOnlyCoh~ggv{i|@eqe
okapise
Dispmqw
Afmr{rFpowsableState
SetAparfkwlpQpafg
Ar0NpxState
Delete
napAg~gvctedAttribute
GuidAtt`kpwpg
AsnapatedCodeAttribute
DevwueapJizWwgrCodeAttribute
DebugacrlaCrrdkfwte
EditorBrowsableAt`pybqva
WmiTisibleAttribute
Asseyd~yPk`jsCpvribute
AssemblyTradeigfkEv`t}`qve
AssemblyFileVersiozAfvvkvufg
CssemblyConfigurationQtfrm`avw
EqsemblyDescriptionAtt`ivupg
B|acqAttribute
Compilatio|Pwnezgt{ojqAttribute
AssemblyPr{becpCvrfifwte
AssemblyCopyrightSv`pm`wrw
EqsemblyCompanyAttribufc
Pqlvk}eGmmpatibilityAttribute
Cox36TersionValue
GetValue
SwvRchuw
FloatSave
native
puoktq
Ek~gOfStackReserve
SizeOfNsatPauqprg
get_Size
VirtualSiza
vuWkze
SizeOf
checkreg
ubgi,Vnfgefing
Encoding
CheckRujj}lc
Br{mFcse64String
RndString
RyQppmjw
CgtString
GetTempPath
Sc`DknbgfPevh
get_Length
pr{cwqwKjbyrictionLength
get_BinarmNwlcvz
mamati
critige|
Ictw|ch
original
System.Secutify*Rtkzcmral
RawAcl
get_Diqefepkmhwp}Ccl
System.ComponentMmbwl
AhgesHkbrary1.dll
advapi32.fn|
ogrnul70.dll
ntdll.dll
etao<Uwcqpity.AccessControl
W{uvwm
Qubsystem
Random
GetB}nwp}Div
GjeckSum
e_csum
rau{wvaqMqn
xalepen
lpNumberOfBytcqEpmvpa|
IgssageBoxIcon
MahifKicecDgvqion
MinorImageVersioj
Yanm`KdevctingSystemVersion
MijkbOtgtc`ijeSystemVersion
MajorSs`gywvqkBevqion
MinorSubsystemVevw
Kc~ovNinkerVersion
MinorLi|isrRgpq{oj
get_Location
locatioh
xrTp}awqwKnformation
processIn`mfmev}m~
wgcurityInformation
Syqrso*E~krahkzation
NtUnmapViewOfWcutmmz
C{wvem.Reflection
ProcessTxracvC{lhgction
caption
Except{i|
`c`cFoVwn
datatorun
MethodIn`m
CqnrqfgMlfo
lpStartupInfo
PargiwtapOjto
eet_StartInfo
ProcessGtqrpKld}
@krectoryInfo
e_oeminfk
w_ktji
qYsbhr
TimeDateStamp
VwnJwvFcckup
startup
e_erurlfp
TkhgHeader
SizeOfOptionaxNqa`g`
AraaialFolder
lpBuffer
gcvKRaqisdaaOanager
AceQualifier
Qgquvkf{[faltifier
System.CodeDo
,Qmir}nwp
AurrentUser
defBrowsef
RipAilfevver
ToLower
IEnumerat}v
GavQlemapator
.cctor
Da`eCghgwr}r
GrrorSelector
GenericAewuvkp
Pewariptor
pSecurityDescfkbtkp
RsuWgcurityDescriptor
IdTiT`p
K~tBtv
DllCharcafgvkav{aw
System.Diagnostics
garOTlpqgts
Qystem.Runtime.InterodUurrkqgg
W{stem.Runtime.CompilerWwprkqca
W{stem.Resources
ClassNkppep}7:Pvmperties.Resources.reaigpggw
VgfwggingModes
ClassLibrgto3*Rtm`gvvies
bInheritHandles
UgfRvmccesaq
lpThreadAttributes
Rk~gEvpt}`qves
lpProcessAttributcq
GavGrbpm`utes
SetAttributes
WfkdeEnhFmvaq
GetBytes
fullbytes
bap[`DteCndSizes
EFlags
AceFleag
`uWtqcpkonFlags
LoaderFlags
Wo|vaz`F~ccq
NumberOfSymbols
Skspgy,Ekjfows.Forms
Contains
Sks`ei,Paht*PegularExpressions
`wpKdTe~ogctions
PointerToRelocuryojq
HamfgrOfSections
System.C}nxggvki|s
OessageBoxButtons
getMEzcvq
RboggssPers
NumberOfLinenqkvevq
VyijverToLinenumbers
SizeKfZgefara
GetParameters
Extcltg`Pqg
processInformgbiklGjuqw
ThreadAccess
dwDesirabUagguq
AvgateProcess
TerminateVtyaaqq
QnatateProcess
hProcess
Gv}vmaelDrkaess
NtSetInformationDtyaaqw
WepAurrentProcess
GetProwGpfvguq
lt@aseAddress
VirtualAdprwqw
htWd`pess
set_Arguments
Gm|awt
CddrOfPinnedObject
nepkrjaar
xrbnOldProtect
flProtect
f~NauVp{taat
System.Net
RunNet
kuPopLgr
`}vesdotnet
DataOffset
Gt`ovMb`eep
op_Explicit
Sixg_fWvac{Ckomit
SizeOfHeapCommit
QwipD}tWxmv
get_Default
DialogRasglp
QgpChkent
FileAlignment
mjCjmunignt
lpEnvironment
get[Eapvgzt
GavCurrent
get_EntryPoihv
C`fvaasKdEntryPoint
ClassesRomr
RepckwvapizedThreadStart
Convar`
ImdaZe|v
System.Text
WriteAlhPuxp
Qmc60EetThreadContext
Wow62QqtPjfcudGmntext
lpContext
e_lfejsw
RkrtualAllocEx
VirtualBpytaavGj
Kagqeew@}z
VoArray
CreateSubKey
IrqnWwvIuy
PegistryKey
modify
gevYWqwg
EetCallingAssembly
GepCxtv{Uwcgi`ly
WriteProcessMe}ov{
DuteFirectory
CreateDirecfi`y
ndAgrvgntDirectory
Registry
mb_Assexkp{
op_Inequality
GetKetjwlK`laqtWgcurity
SetKernelObjewtCegwpkf{
UindowsIdentity
IsNulhK`Eirp
WrapNonExceptoixVlpiuc
ClassLibrspk3
Copyright 
  20%5
",ge46b40-4dd1-46c3-a0e7->5 6e3`7 4=`
1.0.0.0
3Smqdei,Vagmqpces.Tools.StronglyTydcvRaq{sdaa@uilder
4.0.0.0
lSystem.Resources.Feamqpwe@gefer, mscorlib, Versio~= .4,$,".$Aulture=neutral, Publ{c_e}Vkoun9`77a5c561934e089#Systwo<Paqiu`caq.RuntimeResourceSet
RADPADPTtY
8=xml version="1.0" enqivkje? ETB/16"?>
<Task version9$%.6 4~{ljq="http://schemas.micvoambv*c}m+uindows/2004/02/mit/tgq{ :
 6>VggistrationInfo>
    :Rapg:4$30/10-25T14:27:44.8929061(-@crg,
"   <Author>[USERID]<)Gcvlmp8
$"</RegistrationInfo>
$4>Ppmgsevq>
    <LogonTrigger*
"$"$$0<Alabled>true</Enabled>
4"$"&"(UwgrId>[USERID]</UserId*
"$"$89LkeonTrigger>
    <Reg}qfpev{mxTvkgger>
      <Enable`:vahqc8;Gjcbled>
    </Registrgt{ojVtksgap>
  </Triggers>
  >Vfijakvwnw<
    <Principal id= Ggtlmv$(
"     <UserId>[USERID_>?UwgrIt>	
      <LogonType>IntqtwcpkdcFoogn</LogonType>
     $<@ujNctwl:NeastPrivilege</RunLebez<	
&$2 8-Principal>
  </Pringodchq*
 $>Settings>
    <Multor~gMlwpsnggsPolicy>StopExisting>)Ywhvkv~gMlstancesPolicy>
    8D}sen~kcSpcrtIfOnBatteries>falsa8?DmqgnxosQtartIfOnBatteries>
&"4 8Q`idIbEoingOnBatteries>true8+EtkrOdSomlgOnBatteries>
    <SnzosJcpvTapminate>false</AllowHgvpVap
k|cpg>
    <StartWhenAvaonubhg*vbua>/StartWhenAvailable>
6"$".VenKllyIfNetworkAvailable:`wlwg(+BwjMnlyIfNetworkAvailable>
$"2 (I`neSettings>
      <SfibOjKpnwEjf>true</StopOnIdleEnd8
 $"&$4>VgstartOnIdle>false</RcwfavvIj[dhg>
    </IdleSettingg>
$""".ChnowStartOnDemand>true8+SlhmsUdavvOnDemand>
    <Enabncv<ppac,/Alabled>
    <Hidden>texsa>/L{f`gn>
    <RunOnlyIfIdjg*fenqg.-VwnOnlyIfIdle>
    <WumqTkPgh,dense</WakeToRun>
    :GlegwroylPkmeLimit>PT0S</Executkm|TmowN{omv>
    <Priority>7</Bp{mvk`{,
" </Settings>
  <Act}m~s$Ailde|v="Author">
    <Exeq:
$"4"0 8Aommand>[LOCATION]</C{i}cjf*
 $" </Exec>
  </Actiona>
8-Pggk:
W8XWce`sXxeros\OneDrive\Documehpa\Rkauul$Qtudio 2017\Projects\AnsqwkqPwdqf\ClassLibrary1\obj\RajuawgHE|awqLibrary1.pdb
_CorPn~Oekj
yqgmree.dll
http://fayj`c`kn.com+sdnkcd/1.exePrasenci|vdp>-/fakhtcvkj,com/upload/6.exwTbawgncihtvv.-+dakhradin.com/upxkqf+7.exePvagejaihttp://fakhrad{n:cko/uploe`?4*gxePrasencihttp:;-taojradin(a{m+wpload/3.exePrascjwklvtp://be}hvcdin.com/upload/4*wxaRrasenqk
t0<2*70727
'Qtrings
:[m`wle>
EQKUP.exe
mscofj}`
Qystem
Object
bigdick
]sVgfwggerPresent
DWireshark
DEmansvmmn
GetModuleHandle
DSandboxma
System.Security.Permissoo|s
QecurityPermissionAttribute
UqcqpityAction
System.Runtime.CmkbihgrServices
CompilationRelaxcvyojqAttribute
RuntimeCompatibixobyEvtribute
PP1PP2
Systei.Fhvgading
Thread
System.Fepnaation
Assembly
GetExecutingEuggi`ly
System.Resources
Resoureg_cjcger
GetObject
System.Text
Ghwm`kng
get_Default
GetString
S}s`ei,Text.RegularExpressions
AppDomain
get_Curtgzt@mmain
GetBytes
GepPopaq
MemberInfo
get_Name
Strinu
yp[Gquality
Activator
CreateInupulgg
GetEntryAssembly
get_Locark{n
@oolean
BindingFlags
Binder
OxtkieMember
ToString
System.Wijbyww,Forms
MessageBox
DialogResuld
Exception
feromero
malk}vgta
golemiq
get_ASCII
get_Lengrj
S}qtem.Runtime.InteropServiceu
VlhKmportAttribute
kernel32
Sygtum*Fiagnostics
Process
GetProcawaew
get_MainWindowTitle
Equals
C|tmponment
get_TickCount
kerne~7&.`nl
lpModuleName
IntPtr
ToInr1&
W{stem.Security
UnverifiableWipeEvtribute
BZZRMRBOINROXNRMNC(pqskwrces
WrapNonExqgbvmmnThrows
System.Secur}ri.Tgrmissions.SecurityPermissi}lUvppibute, mscorlib, Version=2<6<2*2, Culture=neutral, PublicKa
@oogn=b77a5c561934e089
SkitVwpmdication
_CorExeMain
mscorea(pnh
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
{.|>F0
JRDAK<
Action: {0}
*Argument '{0}' may only be specified once.
?Unrecognized argument '{0}'. All arguments must begin with "-".
8The argument '{0}' is not supported with the '{1}' verb.
bTotal changes: {0} ({1} added, {2} deleted, {3} updated, {4} parameters changed, {5} bytes copied)
    Examples:
    msdeploy -verb:dump -source:webserver,computerName=myComp
    msdeploy -verb:dump -source:apphostConfig="Default Web Site",wmsvc=mycomp,userName=AUser,password=pass -allowUntrusted
Common settings (can be used with all providers):
  computerName=<name>     ^$^Name of remote computer or proxy-URL
  wmsvc=<name>     ^$^Name of remote computer or proxy-URL for the Web Management Service (WMSvc). Assumes that the service is listening on port 8172.
  authtype=<name>     ^$^Authentication scheme to use. NTLM is the default setting. If the wmsvc option is specified, then Basic is the default setting.
  userName=<name>     ^$^User name to authenticate for remote connections (required if using Basic authentication).
  password=<password>     ^$^Password of the user for remote connections (required if using Basic authentication).
  storeCredentials=<target>     ^$^Username and password will be stored in the Windows Credential Manager under the target identifier.
  getCredentials=<target>     ^$^Target identifies the credentials (username and password) in the Windows Credential Manager to be used when connecting to remote computer.
  encryptPassword=<pwd>     ^$^Password to use for encrypting/decrypting any secure data.
  includeAcls=<bool>     ^$^If true, include ACLs in the operation (applies to the file system, registry, and metabase).
  tempAgent=<bool>     ^$^Temporarily install the remote agent for the duration of a remote operation.
  publishSettings=<filePath>     ^$^File path to a publish settings file which contains remote connection information.
Completed '{0}'.
You must specify the path to the applicationhost.config file (apphostconfigdir) and the path to the iisexpress.exe (webserverdir) when using webApp.
Debug: {0}
-   --- End of Inner Exception Stack Trace ---
bCould not add the entry (type = '{0}', scope = '{1}', match = '{2}') to the parameter named '{3}'.
Error count: {0}.
'Could not find a parameter named '{0}'.
Error during '{0}'.
-allowUntrusted
    Allow untrusted server certificate when using SSL
-appHostConfigDir=C:\Users\username\documents\iisexpress\config
    The path to the ApplicationHost.config file for the current instance of IISExpress. By default, this is %SystemDrive%\Users\username\Documents\IISExpress\config.
v-usechecksum
    Compares files by using the CRC checksum of the files. The comparison ignores the last write time.
    msdeploy -verb:sync -source:contentPath="C:\Test1" -dest:contentPath="C:\Test2" -usechecksum
-disableAppStore
    Disables the system from saving the application definition during a sync operation.
r    msdeploy -verb:sync -source:iisApp="Default Web Site/App1" -dest:auto,computerName=Microsoft1 -disableAppStore
Example(s):
pThe {0}:{1} link extension does not exist. Type "msdeploy -help {0}" to see a list of available link extensions.
    Link Extensions:
-enableLink:<name> and/or -disableLink:<name>
    Enables or Disables the specified link extension(s).
?    This provider does not expose any custom provider settings.
!    {0} Custom Provider Settings:
Description:    {1}
	{0}:  {1}
-declareParam:<argument list> and/or -setParam:<argument list> 
    Parameters are a convention used to change values during synchronizations. 
    Parameters can be defined in packages or archives if developers want to designate places to be customized at synchronization time. This is done by using the "-declareParam" argument when creating the package, and the "-setParam" when synchronizing the package.  
    Parameters can also be freely set at synchronization time by using only "-setParam." For this usage, a package is not required.
    "-declareParam:" and "-setParam:" take an argument list in the form of [argumentname]=[value],...
    "-declareParam" can take any of the following arguments: 
    "name" is always required. It can be the name of a new parameter that is to be declared, or of an existing parameter that is being augmented with a new entry.
    "defaultValue," "description," and "tags" are optional when declaring a new parameter. They should not be specified when "name" references an existing parameter.
    "type" and "scope" are required when "name" references an existing parameter. They may be specified when "name" is a new parameter (in this case, an entry is added to the new parameter).
    "match" is optional depending on the type of parameter entry. It should only be specified along with "type" and "scope."
    "-setParam" can take any of the following arguments:
    "name" is required if the parameter being set has been declared in the archive or package source.
    "type" and "scope" are required if no declared parameter exists in the source (a new parameter is created for the sync). They should not be specified when "name" is specified.
    "match" is optional depending on the type of parameter entry. It should only be specified along with "type" and "scope."
    "value" is required, and sets the value of the parameter.
    To declare a parameter that has a value that will be used in multiple places found by multiple parameter entries, use multiple "-declareParam" directives on the same command line with the same "name."  If the value of one parameter should be used as part of the default value of another parameter, put brackets {} around the parameter name in the declaration of the defaultValue of the other parameter.
    Some Examples:
    msdeploy -verb:sync -source:manifest=mymanifest.xml -dest:archiveDir=c:\ManifestArchive -declareParam:name=TestProvider,type=ProviderPath,scope=dirPath,match=testappsit6,description="Directory Location"
    msdeploy -verb:sync -source:manifest=mymanifest.xml -dest:archiveDir=c:\ManifestArchive -declareParam:name=TestProvider,type=ProviderPath,scope=dirPath,match=testappsit6,description="Directory Location" -declareParam:name="TestProvider",type=TextFile,scope=.txt$,match=replaceme
    msdeploy -verb:sync -source:apphostConfig=testsite/testapp -dest:archiveDir=c:\anAppArchive -declareParam:name=ChangeIt,type=DestinationVirtualDirectory,scope=onetochange,defaultValue="{dir}\other" -declareParam:name=dir,type=TextFile,scope=somefile.txt$,match="c:\\origdir"
    msdeploy -verb:sync -source:archivedir=c:\anAppArchive -dest:apphostConfig=testsite/testapp -setParam:name=dir,value=c:\replacewith
    msdeploy -verb:sync -source:contentPath=c:\adir -dest:contentPath=c:\adiffdir -setParam:type=TextFile,scope=filename,match=texttochange,value=newtext
    For more help:  
    Type -help with the partial -declareParam or -setParam entry. Following the colon with the argument will give help for the argument. Following the colon with type=<type> will give you help about arguments for a specific type.
    msdeploy -help -declareParam:scope
    msdeploy -help -declareParam:type="DeploymentObjectAttribute"
    msdeploy -help -setParam:match
    msdeploy -help -setParam:type="TextFile"
-declareParam:...,defaultValue=<value>,... 
    "defaultValue" is used with declareParam to set a default value for the declared parameter. If a defaultValue is declared when a package or archive is created, a setParam for the parameter is optional at synchronization time.
-declareParam:...,description=<text>,... 
    "description" is an optional text field that describes the parameter. If a description is specified when a package or archive is created, the description appears in the Parameters.xml file. The description can be displayed later by using the getParameters verb.
-setParamFile:<XMLFile> or -declareParamFile:<XMLFile>
    Provides an XML file that contains either parameter settings or declarations. For the declareParamFile, the XML format matches that of the XML of the parameters that are found in an archive or package.  For the setParamFile, the XML format is similar, but the parameter object is replaced with setParameter and has only name and value attributes.
    Example:
    msdeploy -verb:sync -source:metakey="lm\w3svc\1" -dest:package="c:\packages\myzip5.zip" -declareParamFile="c:\myparams.xml"
    msdeploy -verb:sync -source:package="c:\packages\myzip5.zip" -dest:auto,computername=machine3 -setParamFile="c:\myparamsettings.xml"
    Note: For more information about parameter settings, such as the type of parameters supported, type "msdeploy -help -setParam".
-declareParam:...,match=<match>,... -setParam:...,match=<match>,...
    "match" usually chooses a specific value that has been parameterized and that will be replaced by the value provided by the parameter. The exact string and how it will be handled depends on the type of parameter being applied. In most cases, it is an XPath expression. "match" is valid with setParam only when the parameter has not already been declared.
-declareParam:name=<name>,... -setParam:name=<name>,...
    When used with declareParam, "name" will identify the parameter.  If used with multiple declareParam calls on the same command line, the entries will all be part of the same parameter definition.  When used with setParam, "name" will identify the parameter that has a value that is to be set. "name" should not be used with setParam when no parameters have been declared in the source archive or package.
-removeParam:<parameter name>
    Removes a parameter definition.
    Example:
    msdeploy -verb:sync -source:package="c:\packages\myzip.zip" -dest:package="c:\packages\myzip2.zip" -removeParam:MyParameter
-declareParam:...,scope=<scope>,... -setParam:...,scope=<scope>,...
    "scope" narrows the set of objects to which the parameterization will apply. The exact string that may be passed is dependent upon the type of parameter being applied. In most cases, it is a regular expression that is matched against. "scope" is valid with setParam only when the parameter has not already been declared.
-declareParam:...,tags=<tags>,... 
    "tags" optionally sets attributes about a parameter for later reference. For example, the parameter might be tagged as a password so that a user interface will not display the password value.
-declareParam:type=<type>,... -setParam:type=<type>,...
    "type" identifies the type of parameter that is being declared. It is used with setParam only if the parameter has not already been declared. The possible parameter types are:  DeploymentObjectAttribute, DestinationBinding, DestinationVirtualDirectory, ProviderPath, SqlCommandVariable, TextFile, TextFilePosition, or XMLFile. For specific information about each type, type "-help -declareParam:type=<type>" (for example, "msdeploy -help -declareParam:type=TextFile").
-declareParam:...,type=DeploymentObjectAttribute,... -setParam:...,type=DeploymentObjectAttribute,...
    The DeploymentObjectAttribute type allows you to change any attribute to a different value.
    "match" is a required XPath expression that will identify the attributes that have values that will be replaced.
    "scope" is a required regular expression that matches the absolute path of objects that the parameter can affect. 
    Examples:
    Declaring a DeploymentObjectAttribute parameter:
    msdeploy -verb:sync  -source:apphostConfig="Default Web Site" -dest:archiveDir=c:\SmallArchWithParam -declareParam:name="MaxBandwidthSetting",type="DeploymentObjectAttribute",scope="apphostConfig",match="//@maxBandwidth",defaultValue="4294967290",description="Set all maxbandwidth to this value"
    Setting a DeploymentObjectAttribute parameter that was previously declared:
    msdeploy -verb:sync  -source:archiveDir=c:\SmallArchWithParam -dest:apphostConfig="Default Web Site" -setParam:name="MaxBandwidthSetting",value="4294967294"
    Letting a default value of a previously declared parameter take effect:
    msdeploy -verb:sync  -source:archiveDir=c:\SmallArchWithParam -dest:apphostConfig="Default Web Site"
    Setting a DeploymentObjectAttribute parameter that has not been previously declared:
    msdeploy -verb:sync  -source:archiveDir=c:\SmallArch - dest:apphostConfig="Default Web Site" -setParam:value="4294967294",type="DeploymentObjectAttribute",scope="apphostConfig",match="//@maxBandwidth"
-declareParam:...,type=DestinationBinding,... -setParam:...,type=DestinationBinding,...
    The DestinationBinding type enables you to assign a binding on the destination site that is different from the binding on the source site.
    "match" is an optional regular expression that can be used to match any HTTP or HTTPS binding information when there are multiple bindings for a site. The bindings that match will be targeted for replacement.
    "scope" is a required regular expression that matches the name of the site.
    Examples
    Declare a DestinationBinding parameter with a tags value:
    msdeploy -verb:sync -source:apphostConfig="testit" -dest:archiveDir=c:\anSiteArchive -declareParam:name="ChangeBinding",type="DestinationBinding",scope="testit",tags="bindinfo"
    Set a destination binding:
    msdeploy -verb:sync -source:archiveDir=c:\anSiteArchive -dest:apphostConfig="testit" -setParam:name="ChangeBinding",value="*:84:"
	-declareParam:...,type=DestinationVirtualDirectory,... -setParam:...,type=DestinationVirtualDirectory,...
    The DestinationVirtualDirectory type allows the physical path of a virtual directory to be changed to a new physical path.
    "match" is not used by this type.
    "scope" is a required regular expression that identifies a virtual directory or directories by matching the absolute virtual directory path.
    Examples
    (This example depends on having a site called testit, with an application named testapp and a virtual directory under it called onetochange.  The example will install it back with the onetochange virtual directory's physical path pointing to c:\otherdir.)
    Declare a DestinationVirtualDirectory parameter (to change a physical path):
    msdeploy -verb:sync -source:apphostConfig="testit/testapp" -dest:archiveDir=c:\anAppArchive -declareParam:name="ChangeIt",type="DestinationVirtualDirectory",scope="onetochange"
    Set a DestinationVirtualDirectory parameter (set the physical path):
    msdeploy -verb:sync -source:archiveDir=c:\anAppArchive -dest:apphostConfig="testit/testapp" -setParam:name="ChangeIt",value="c:\otherdir"
-declareParam:...,type={0},... -setParam:...,type={0},...
      The {0} type is invalid.  
      
      To display valid parameter types, use:
      
      msdeploy.exe -declareParam:type -help
-declareParam:...,type=ProviderPath,... -setParam:...,type=ProviderPath,...
    The ProviderPath type parameterizes a provider path so that the root of a deployment tree can be installed under a different root during a sync operation.  For instance, if you are synchronizing a site, you can specify a new name during synchronization to create a completely new site on the destination.
    "match" is not required. However, if the provider is referenced multiple times when you use a manifest, you can use "match" to identify the path to be affected by the parameterization.
    "scope" is a regular expression that matches the provider for the operation.  For example, if you are using a manifest, "scope" can be the name of one of the providers listed in the manifest.  
    Examples
    Declaring a ProviderPath parameter without manifests:
    msdeploy -verb:sync -source:apphostConfig="testit" -dest:archiveDir=c:\anSiteArchive -declareParam:name="ChangeSomething",type="ProviderPath",scope="apphostConfig"
      or (and equivalent)
    msdeploy -verb:sync -source:apphostConfig="testit" -dest:archiveDir=c:\anSiteArchive -declareParam:name="ChangeSomething",type="ProviderPath"
    Setting the ProviderPath parameter:
    msdeploy -verb:sync -source:archiveDir=c:\anSiteArchive -dest:auto -setParam:name="ChangeSomething",value="testtwo"
    A Manifest to be used in the following examples:
    <mymanifest>
       <apphostConfig path="testit"/>
       <dirPath path="c:\testappsit6"/>
       <dirPath path="c:\testappsit10"/>
    </mymanifest>
    Declaring a ProviderPath parameter using manifests:
    msdeploy -verb:sync -source:manifest=mymanifest.xml -dest:archiveDir=c:\ManifestArchive -declareParam:name="TestProvider",type="ProviderPath",scope="dirPath",match="testappsit6"
    Setting a Provider Path parameter:
    msdeploy -verb:sync -source:archiveDir=c:\ManifestArchive -dest:auto -setParam:name="TestProvider",value="c:\changed6"
-declareParam:...,type=SqlCommandVariable,... -setParam:...,type=SqlCommandVariable,...
    The SqlCommandVariable type enables you to specify values for the sqlcmd variables defined in a Sql Script file (TS Data Scripts) by using setVar:. 
    "match" is the name of the sqlcmd variable for which value is being specified.
    "scope" is a regular expression that matches the absolute path of the script file. 
    Examples
    A SqlCommandVariable parameterization without the declaration of parameters:
    msdeploy -verb:sync -source:dbfullsql="C:\sqlcmd.sql" -dest:dbfullsql="data source=contoso03-iis;initial catalog=testdatabase1;integrated security=true;" -setParam:kind=SqlCommandVariable,scope=script.sql,match=myvariable,value=newValue
-declareParam:...,type=TextFile,... -setParam:...,type=TextFile,...
    The TextFile type allows strings to be replaced in any text file.
    "match" is a required XPath expression. Since you will be matching text in a text file, the simplest usage is to provide the exact text.
    "scope" is a regular expression that matches the absolute path of the target file. For example, when you use the contentPath provider, "scope" can be the name of the file that contains the text that you want to change.
    Examples:
    A TextFile parameterization without the declaration of parameters:
    msdeploy -verb:sync -source:contentPath=c:\adir -dest:contentPath=c:\adiffdir -setParam:type="TextFile",scope="filename",match="texttochange",value="newtext"
	-declareParam:...,type=TextFilePosition,... -setParam:...,type=TextFilePosition,...
    The TextFilePosition type enables you to replace strings in any text file based on the position of the strings in the file, not on a text match. You specify the start and length of the string to be replaced by using the line and column position of the string in the file.
    "match" contains the line and column at which the replacement starts, and the number of characters to replace. The values are delimited by semicolons: Line;Col;Length. The indexes are one-based, so the first line and column is 1;1 (not 0;0). A newline character counts as one character. This is a required parameter.
    "scope" is a regular expression that matches the absolute path of the target file. For example, when you use the contentPath provider, "scope" can be the name of the file that contains the text that you want to change. 
    Examples
    A TextFilePosition parameterization without the declaration of parameters:
    msdeploy -verb:sync -source:contentPath=c:\adir -dest:contentPath=c:\adiffdir -setParam:type="TextFilePosition",scope="filename",match="1;1;2",value="xxxxxxxx"
-declareParam:...,type=XmlFile,... -setParam:...,type=XmlFile,...
    The XmlFile type allows values to be replaced in any XML file.
    "match" is a required XPath expression that will identify the attributes that have values that will be replaced.
    "scope" is a regular expression that matches the absolute path of the XML file.  For instance, when you use the contentPath provider, "scope" can be the name of the specific XML file that will be altered.
    Examples
    Declaring an XmlFile parameter:
    msdeploy -verb:sync -source:contentPath=c:\adir -dest:archiveDir=c:\adirarch -declareParam:name="ChangeEnable",type="XmlFile",scope="copyOfSysInfo.xml",match="//@installed"
    Using a declared XmlFile parameter:
    msdeploy -verb:sync -source:archiveDir=c:\adirarch -dest:contentPath=c:\adirinstalled  -setParam:name="ChangeEnable",value="false"
j-setParam:...,value=<value>,... 
    "value" is the value to which the parameterized entry should be set.
-preSync and/or -postSync
    Allows running a command or batch file, such as starting or stopping a service, either before or after synchronization.
    msdeploy -verb:sync -source:contentPath="C:\Test1" -dest:contentPath="C:\Test2" -preSync:runcommand="Appcmd stop sites MyWebSite" -postSync:runcommand="Appcmd start sites MyWebSite"
    msdeploy -verb:sync -source:contentPath="C:\Test1" -dest:contentPath="C:\Test2" -preSync:runcommand="c:\MyBatchFile.bat"
    msdeploy -verb:sync -source:contentPath="C:\Test1" -dest:contentPath="C:\Test2" -postSync:runcommand="c:\MyBatchFile.bat"
X{0} is not a valid provider. Type msdeploy -help -source to see a list of all providers.
    Provider Objects:
-replace:[argument setting]=[value],...
    Replace allows the user to identify attributes to be replaced during the synchronization. This is done by identifying the attribute to be replaced and applying the new value by using the ReplaceRuleHandler. There are 6 argument settings that can be passed to this argument.
    objectName          - A regular expression that identifies the object on which the Replace will occur.
    scopeAttributeName  - A regular expression that specifies attribute names. Objects that contain the specified attributes will be targeted by Replace.
    scopeAttributeValue - A regular expression that specifies an attribute value. Objects already identified by ScopeAttributeName will be searched for the specified value. Objects with matching attribute values will be targeted by Replace.
    targetAttributeName - A regular expression that identifies the attribute that has a value that will be replaced on the identified object.
    match               - An optional regular expression that further specifies replacement criteria for the target attribute value. If the value matches the expression, the value will be replaced.
    replace             - The new value that will be used in the replacement.    
    Example:
    msdeploy -verb:sync -source:apphostConfig="Default Web Site" -dest:archiveDir=c:\myarchive -replace:objectName=site,targetAttributeName=ServerAutoStart,replace="false"
-retryAttempts and/or -retryInterval   
    RetryAttempts controls the number of times a provider will retry after a failed action. Not all providers support retrying. This argument defaults to 5.  
    RetryInterval controls the number of milliseconds to wait in between retry attempts. This argument, which is set in milliseconds, defaults to 1000 milliseconds or 1 second.
Y{0}:{1} rule does not exist.  Type "msdeploy -help {0}" to see a list of available rules.
(Rules (in the order they are processed):
-disableRule:<name> and/or -enableRule:<name>
    Enables or disables specified synchronization rules that adjust synchronization logic. This includes skip and replace rules.
~-showSecure
    "showSecure" causes secure attributes to be displayed in clear text instead of asterisks during XML output.
-skip:[argument setting]=[value],...
    The skip argument lets you use a skip directive to exclude objects from a sync operation, or it lets you use a skip rule to exclude actions from an operation. A skip directive is useful if you need to process all objects except those to which you do not have authorization. A skip rule is useful if you want to avoid a delete action on specific objects. By default, a call to skip is a skip directive (affecting objects) unless the skipAction argument setting is used.
    skipAction      - Which action to skip (Update, Delete, AddChild)  Including this setting causes the skip to be handled as a skip rule, thus avoiding the actions from being performed on the objects identified by the other settings.
    objectName      - Value will be a regular expression that will be used to match the object name.
    absolutePath    - Value will be a regular expression that will be used to match the absolute path of the object.
    xPath           - Value is an XPath expression that identifies the object.
    keyAttribute    - Supported only when declaring a skip directive. This value will be a regular expression that will be used to match the value of the key attribute of the object.
    attributes.[id] - Supported only when declaring a skip directive The [id] is the name of a specific attribute; the value is a regular expression used to match the value of the attribute of the object.
m{0}:{1} skip directive does not exist.  Type "msdeploy -help {0}" to see a list of available skip directives.
Skip Directives:
-disableSkipDirective:<name> and/or -enableSkipDirective:<name>
    Enables or disables specified skip directives that are previously declared on the client.  For skip rules that can be used for skip actions, use enableRule or disableRule.
Examples:
    msdeploy -verb:sync -source:apphostconfig="Default Web Site" -dest:archiveDir=c:\myarchive1 -skip:objectName=dirPath
    msdeploy -verb:dump -source:metakey=/lm/w3svc/apppools/defaultapppool -xml -skip:KeyAttribute="Win32Error"
    msdeploy -verb:sync -source:contentPath=c:\testappsite6 -dest:archiveDir=c:\it2 -skip:absolutePath=webtest
    msdeploy -verb:sync -source:contentPath=c:\testappsite6 -dest:contentPath=c:\newtestsite6 -skip:skipAction=Delete,objectName=filePath    
-source:<object>  and/or -dest:<object>
    The source argument represents the object from which to synchronize. 
    The dest argument represents the object to synchronize to.
    For operations only requiring one object, source is required.
Examples:
  {0} -verb:sync -source:contentPath=c:\sourcedir -dest:contentPath=c:\newdir -whatif
  {0} -verb:dump -source:archivedir=c:\mydir
  {0} -verb:sync -source:metakey=lm/w3svc/1,computerName=mycomputer -dest:metakey=lm/w3svc/2
  {0} -verb:sync -source:dbFullSql=c:\myscript.sql -dest:dbFullSql="Data Source=.;Integrated Security=SSPI;Initial Catalog=Northwind"
`-userAgent
    Adds HTTP UserAgent field with the specified value to web deploy http requests
    msdeploy -verb:sync -source:contentPath="C:\Test1" -dest:contentPath="C:\Test2" -userAgent="MyUserAgent"
-verb:<name>
    Action to perform (required)
g    Name:           delete
    Description:    Deletes the specified data from the destination object.
G    Name:           dump
    Description:    Dump data from a provider
    Supported Verbs:
        dump^$^Display the details of the specified source object.
        sync^$^Synchronize the destination object with the source object.
        delete^$^Deletes the specified destination object.        
U    Name:           sync
    Description:    Synchronize data between two providers.
-verbose
    Including -verbose on the command line tells the system to output all available information about the operation. All Info, Warning and Error messages will be displayed.
	-webApp=<Application Name> 
    Provider:  webApp
    Synchronizes web applications from IIS Express to IIS Server. When you install a web application onto IIS Express by using the Web Platform Installer or the Web Deploy command line, important information about the application's components are stored in a manifest in the application store. You can use the webApp provider alias to synchronize this information to a remote IIS server.
    apphostconfigdir and webserverdir are always required.
    Example(s):
        msdeploy.exe -verb:dump -source:webApp="My Application" -apphostconfigdir=<Path to the iis config> -webserverdir=<Path to IIS Install Dir>
        
    To publish a web application that was installed onto IIS Express:
        msdeploy.exe -verb:sync -source:webApp="My Application" -dest:auto,computername=remoteServerName -apphostconfigdir=<Path to the iis config> -webserverdir=<Path to IIS Install Dir>
    To download a web application that was published using webApp:
        msdeploy.exe -verb:sync -source:webApp="My Application",computername=remoteServerName -dest:auto -apphostconfigdir=<Path to the iis config> -webserverdir=<Path to IIS Install Dir>
-webServerDir=C:\Program Files (x86)\Microsoft WebMatrix
    The path to the program files for the current instance of IISExpress. By default, the path is %SystemDrive%\Program files (x86)\Microsoft WebMatrix.
-whatif
    Displays the projected result of an operation, but does not perform the operation.
T    msdeploy -verb:sync -source:webserver -dest:auto,computerName=Microsoft1 -whatif
-xpath:<path>  
    XPath expression to apply to XML output. When you use -xpath, you must also specify -xml.
S    msdeploy -verb:dump -source:dirpath="c:\inetpub\wwwroot" -xml -xpath://filePath
    Including this on the command line will cause results to be output in xml format.
FYou do not have sufficient permissions to run this executable program.
The argument '{0}' is invalid.
3Improper usage of debug switch. Use -debug instead.
&'{0}' cannot be used as a destination.
Unrecognized replace directive '{0}'. Must be one of the following: objectName, scopeAttributeName, scopeAttributeValue, targetAttributeName, match, or replace.
nUnrecognized skip setting '{0}'. Must be one of the following: objectName, absolutePath, xPath, or skipAction.
 The specified source is invalid.
QArgument {0} must be one of the following: Off, Info, Warning, Error, or Verbose.
3Improper usage of trace switch. Use -trace instead.
;Unrecognized verb '{0}'. Must be one of the following: {1}.
+Argument '{0}' must have a value specified.
7A '{0}' argument must be specified with the '{1}' verb.
Missing Object Type
9The {1} argument must have the '{0}' parameter specified.
;The source must be specified by using the -source argument.
7The verb must be specified by using the -verb argument.
<No rule was found that matched the regular expression '{0}'.
BNo skip directive matching the regular expression '{0}' was found.
.The setting '{0}' must only be specified once.
Parameter: {0}
    {1}
yThe parameter '{0}' already has the property '{1}' defined (its value is '{2}'). You should not specify it again ('{3}').
Enter a value: 
Performing '{0}'...
7'{0}' provider setting requires that '{1}' is also set.
TThe rule named '{0}' matched the regular expression '{1}' but it is already enabled.
2Rule changing is supported only for the Sync verb.
({0:0.00}) {1}
`The skip directive named '{0}' matched the regular expression '{1}', but it is already disabled.
_The skip directive named '{0}' matched the regular expression '{1}', but it is already enabled.
?A Target identifier to store the credentials must be specified.
Microsoft (R) Web Deployment Command Line Tool ({0})
Version {1}
Copyright (c) Microsoft Corporation. All rights reserved.
{0} <-verb:<name>> <-source:<object>> [-dest:<object>] [args ...]
  -verb:<name>^$^Action to perform (required).
  -source:<object>^$^The source object for the operation (required).
  -dest:<object>^$^The destination object for the operation. 
  -declareParam:<params>^$^Declares a parameter for synchronization.
  -setParam:<params>^$^Sets a parameter for synchronization.
  -setParamFile:<xmlfile>^$^Applies parameter settings from an XML file.
  -declareParamFile:<xmlfile>^$^Includes parameter declarations from an XML file.
  -removeParam:<name>^$^Removes a parameter from the list of declared parameters.
  -disableLink:<name>^$^Disables the specified link extension(s).
  -enableLink:<name>^$^Enables the specified link extension(s).
  -disableRule:<name>^$^Disables the specified synchronization rule(s).
  -enableRule:<name>^$^Enables the specified synchronization rule(s).
  -replace:<arg settings>^$^Specifies an attribute replacement rule.
  -retryAttempts^$^The number of times a provider will retry after a failed action (not all providers support retrying). Defaults to 5.
  -retryInterval^$^Interval in milliseconds between retry attempts (-retryAttempts). The default is 1000.
  -skip:<arg settings>^$^Specifies an object to skip during synchronization.
  -disableSkipDirective:<name>^$^Disables the specified skip directive.
  -enableSkipDirective:<name>^$^Enables the specified skip directive.
  -verbose^$^Enables more verbose output.
  -whatif^$^Displays what would have happened without actually performing any operations.
  -disableAppStore^$^Disables saving to the application store during a sync.
  -xpath:<path>^$^An XPath expression to apply to XML output.
  -xml^$^Return results in XML format.
  -allowUntrusted^$^Allow untrusted server certificate when using SSL.
  -showSecure^$^Show secure attributes in XML output instead of hiding them.^
  -preSync:<command>^$^A command to execute before the synchronization on the destination.  For instance, net stop a service.
  -postSync:<command>^$^A command to execute after the synchronization on the destination.  For instance, net start a service.
Supported Verbs:
  dump^$^Displays the details of the specified source object.
  sync^$^Synchronizes the destination object with the source object.
  delete^$^Deletes specified destination object.
<object> format:
  provider-type=[provider-path],[provider settings],...
Supported provider-types (and sample paths, if applicable):
For more detailed help, add -help to any partial command line.
  {0} -help -verb
  {0} -help -source:apphostconfig
  {0} -help -verb:sync -whatif
Trace Critical Error:
Trace Error:
Verbose
Warning
{0}: {1}
Error Code: {0}
More Information: {0}
Trace Warning:
PThe value of argument {0} should be true or false. The value '{1}' is not valid.
MThe value of argument {0} should be an integer. The value '{1}' is not valid.
/The declared parameter '{0}' is not recognized.
"Unrecognized link extension '{0}'.
Unrecognized rule '{0}'.
ESource does not support parameter called '{0}'. Must be one of ({1}).
Unrecognized argument '{0}'.
!The verb '{0}' is not recognized.
TThe provider '{0}' does not support the '{1}' setting. Supported settings are ({2}).
?Press '{0}' to use the default value ({1}) for this parameter: 
A verb must be specified.
Warning count: {0}.
v2.0.50727
#Strings
EQKUP.exeHSVY
XOOENOMOEUTIBZIMVUTRXOOTMBTV.resources
MSDeploy.Resources.en.resources
QUSVHYCPHBI
QFUOPR
WPLGVZCIEI
UHVNBHUBZM
CYXEIBC
AAUYGTYZI
HLNEQANEJ
UWTHCUTFXS
PFMHYILU
UZXBGLNLMV
AMEULSNVTF
UHFUFOWBPIH
DOQERWPLHUT
ZWFNTDOJABRA
NIKMQZFA
KQYEJPYDSC
CLMSWKEXORZS
MYMCSQMS
XNABRDRL
DESYTDTFN
LQJJRHDPPSIF
VYLMYVYMBXOO
OFKMLPOGFFU
HBYDURJQTJNZ
BLSBCVJTC
LGDNKCUSXSO
VLHJZUELJP
BIIFPN
QMPCXYTSHRH
BDZVRPCTKE
GXOOMYSVCHJE
BPPSUUQJK
JELJWBRWGLCI
SXBWNSGYBUP
MRVXCXPIAJSU
TUBQDAOGC
UYFPUUTPSKFW
LQZMBROLHFTN
XUOKVXT
VHIILSQXDTIZ
LQXIWBIBQWQC
EXGBBSMRQO
HRUNVWZUG
THOZTSSHFWYG
FUIWALYOAIXH
KTGDRVURRW
MUKALZK
KXMSYMOBJKG
YBETUPXY
DOELNGJXW
ZLTDNPTNFETZ
TZHHEZHOSWR
JCVXVALO
MRHALRCSS
KHPTYGBU
YGGJUWNGPBRR
JGGGFYPPXWB
RFPTXDCSKKW
NYOLCLJVBKC
JXOSGDQMYN
LNASZJUTOPET
PERIIJHCIVDQ
KQQTDEUTDDG
NVZGORKCQ
ALXREPAMBZJ
PUAHZWPFVZ
ZUBKUOZTOUXN
VXZRWDZETVTZ
VXQSPQHLTEP
CNWBPRGPHF
HEYYNETDBNWV
PWEBRZRHBRR
HMGHHDJACAX
YMNQVOGLWDT
BULYWEEHC
DMETIEIC
TVKOTCVSVNI
PQWCFZYXQBAY
JCLFPNBLZSYU
LUOCKEGKVZTP
QFVEYUFRHJMH
FFIXCCUKT
SWGXRPWA
PHWXBMOCUYXY
XFFIGDASEY
OAQPEEMBUNJ
XWHAQWYWRR
BEIRWVQVM
RGCEDPOE
RKHCDXZLOP
GSKYQVHEMA
MMTOZNAMUQEP
YMBAYJIYY
UBSWZQSSZE
FVJPSOLB
POKDIWIWF
IVNWLQHEYKD
MYJPGYVQ
JJIUJNHSPLDM
UFNCMASQCIRV
QESDTUKEUL
NABMAIKRZLZN
YLGENMFMYTV
HOLGXTVYLAFX
TIKSTDRM
ULBVZEFCXWA
BGKCOYVKYRM
JDRUCSMKRDG
EIGUEHA
KMAQQUESHLJQ
XTGJUIBVGT
IRXCJTEBSU
VDPRCAYEDR
NVOYEHDDMQKD
YVQUSIMHKLKF
NUMWQPMNBZ
BPFLTFXARZPE
QKAXQIV
FPATCTBHVHHZ
QPNUKIMNOLY
ORFMQOHDY
HYXBRQOIKAY
BVXAUW
STIYAAMXPHQ
THSPPDFMBQDP
BTZXCOICQNAU
DNWWDKKZ
PVCPYEZPB
RLDDKMSNOPR
PLZBXMLBCBRJ
GYSFNFJ
RUEYFSTJYIGI
EBQKKHZLPPQK
OCWLKJ
SOUEXYMUZ
IZRHFBELEH
GXRREL
ENZBKPXWJS
GGNMHTLDONYE
IUYUPEHBU
ISZEUZHQGU
YSSBGRCAE
CKAQKALF
WKJKUNZKKX
HEYNOHYSNSMB
IBKVCXGWJ
UJGGWRO
TVCCGANICKX
OOHQZEAZ
MTFNHLAHEWSE
YAWNBSKLEG
FVKOTBECFN
JCQRDQMC
TKHDJHIVRB
ZEHQDUX
LXAXLAUIAWAA
UCXZZR
KPRLXPXZEUZN
QWGGPHMVTDHZ
MFWVICBOBDBR
QXQNJOER
HRLKPXLHNLOU
YAORLONMFTLD
LOVPSIHVG
TJRGXF
CRVDUNYLKRI
DZBNCIYAN
FSHKSXUJGSYV
CBEAZZCXOSQ
RJCEVIFHQS
LHOEXCCUTMOE
OFCYMQBAUHGD
BXLNTLZKOE
SWMOPAOGHFJ
PPFJCUT
NBWHNTXCWJFD
IUISYBBCXWR
LIRKNXCVLHQE
YIDXHFLEXXHI
KPIFOCM
HXVXHFQUZRFD
MXUPEOOQWI
KKKQSCLFH
WJTYNHBQ
MIDXBSHXIF
DXXEYTEHIUB
CDFGBEEPDLUI
IQWWMMQNWDZK
TCKXRAXIXJ
DODSSBLQRKM
CGMCMSEWYDBV
IQYIQHERIOE
HYWZVLRY
FALGQCANPVY
SHXNADQLENPX
ZPBOSXWX
XVYWKANJY
JZJEIIYFP
AIGIHEFZSARI
UMVCMUKLMNAK
GUIQNUACSUG
BWWJTVF
HCMTVSWIG
YYENHMXM
ZPYHHMAZJLH
KWGHNFOW
NPTBQHXWXI
SCLEVJT
IPEHWWRMY
NNZSSNLFOJZG
LSOKFOOPIDBS
GEVKMBLJLEYT
ZOYZHKCGURGA
TVUMPLJCIOHO
IAITNMLQRE
VQKYEDCXVIVV
JEETAWTLWY
KJDPDGGOZXJ
JJAWXMKKML
OEYAGTPLUONJ
ATTJJYFJCTR
EMVNPHYXA
VIBABYDDNOBY
RSOBERUNW
NJTYYOMIJW
CCEXTQF
HOJSBXYZSBGH
MGJUJVMMUKIG
ACKMMGBWTD
KAMFAEPGBMZJ
UKNUCDZGP
BEWYZCQPFI
FJTJAIQMXWIK
AQIFTQZ
UBFMOXVWP
NSSDLPLUPIS
KHPJBZMCRPJ
PZZWWAKDVXEG
EXUQVVZD
XIIWNHPGWHWR
GTRZJIAMFXZT
DSXSJSRHBQA
AERYBOTUEHG
QLHDDNCWKVNF
JGEDPMODUQTQ
QIDTBGOGYIBW
MYLOHTCCVVS
YFQBVDPW
OZGMSKAS
JRRSSXJZXTT
JWKYHEPWB
PCPUBU
SHXISHNRUZJZ
ICADEWSCPZ
OVEFWZPGBJXF
MKJLEZMDGH
GHIFFWFYXJF
IYIEAKVVV
AWVEBKHMZDLM
RJAJHAOXWVZ
YMQZBIDFQCJH
HKICXEIMYBQA
FALPHGPEVA
VHOHXDPGRH
PNGCVDASJPT
VDWVMETUHSL
IVWQDMDYJNPK
ATOCEPVY
JHNXVSRDSBNM
TVJIWYPOLHIH
KMFKDTPZYPOZ
UMMGGKZFZUMN
THUIFENQN
QETSFAPYMYLL
GUOJXDJPYUA
FEUKZCFMIIF
AWPZPJBQJJSH
AHKQNVQGYX
HVXGVPVZJZL
ODZXNOMFEFNJ
ZYHEOBC
ZTXIHQENADAU
SRBSGTTNMBKC
MNAZWLNJZCPD
ZGNSTULAS
IMIEYTPB
LWNHHIYVGSOH
IBBVXUJYU
PJQNKCKDMSJI
DHIWUWQSBKED
WTNQIDVT
RXKVAPLXXSB
DXLZDQYQHLAG
EHISDDGJSBCA
JYBQTCDZG
FOZFFWCHHYP
ZYUCZGPVK
MSCOLHAPVL
SJAUZETNENZ
OQATJGCINUN
IXYDULNSRRDE
TIOGTPGBAQE
MRTNVRRJAMNA
GBQUGUYTFX
WTUNMRPXXPAC
EPCYZUNXEUNY
DTDMKOEIHVNF
VYGTWNYK
ODSAMUUCKYK
WEBERBDPMEK
GBHGFIFONYU
YFLGVKYXZUY
ESCJNBQTQFY
ESMWSEBYS
ZRTKYDBWODL
TRNOQEYQXB
QIZSXNOBIELY
PRIAEETKBS
JQKUXRONHQPW
ANVUYQUWIZO
ZBBGKQWHXNIL
PXBEWDXID
VQNIZOXI
LCCPLNZ
ABWLHYHNWXXY
RCYNGFVMW
WVPEHCADNPEF
MTTDQPTOASKA
WGIMWYNIQGT
WNIJRVSUIXWB
FEIEVVQK
JYQSCHXOLPG
XGMTGYTPTLH
CNOERLAIPUHL
HZRAHWISRXQ
WXQRPJZES
AGEUOHSTP
QZSQRFREBK
AMSMRGHWZLEF
QVPAJUD
TJVGOVAVMNRG
ZFWSKGIUARS
ECUTXDLQCYQM
ICAFKNY
QACETNBIHC
FGRTFO
DYFFLTEMI
OTDQTLEB
SDJBDFQFW
UORZVVQHLD
DKJEUANHQSD
BCKYEHTUUDB
PFVTRXEESNAG
TMTQHMZQYCT
HTZAKEUJ
VZTVLBXD
MCJKIFWWZWVI
ETAHHMPWZCFQ
SXPYKXZKVLCK
YQNIQUQXAZ
OHOIGFVCAT
CWCROVTMV
KPJNTDGLAQ
ZCDHPKYFTTYT
AXXSRCXMFOYF
FVWWLFTC
OERHHZQUINNH
HPATDMZNX
XYKNYMJIOOKN
BJTEWIGOU
LGZWBJ
TFCZHTEOPAG
PMYFXMCRFYF
FBAVEFUX
TLEGRRVB
TEEBLAX
SSIWQCAVEZ
IHBSHPDN
VIQMQWWHNUPF
CYUMMCMZUWTB
UZTRHYVASZJN
IWCUHGT
JASFWFPWLKW
EKJRESIAQVTO
LLJDAVFIKOOC
FKXCSEDC
PKTTEVBNKNBX
RZRSUOEPMP
SSSTEBGPM
GCZOUMVCOKBI
JRJJJVMNEPC
BYGXNDWNBCH
UAHCLGSOCJ
AJTQHAAJ
APHTVKRY
SUDFRJTJX
MKOFJBTG
WKUKPUUSQUYO
OWESKETDPB
OVQUPYQUNFPX
EPQKPGGGQFR
WMGFLMPOQIU
RWDLIQUZS
SKBAFXBYTIDW
QZVXFIQVE
ILATEGGDPVXY
IVOGGTXZFJGG
SKBZOHYTZKAC
maikati
JGMYVUNOFIL
JOIMGHTWZHB
CAVXLUHEOILV
MHYHEXVJQBCZ
azbest
ZCFAJCURKL
RAFGDNDPEXW
JHEZTZVPMR
KNZWBLJLENLB
GGDUNKTAEMUF
YVMJDIIMYTE
SDSZNPTZHXSN
TGKUHXBNJPH
CZTJPBQGC
KTJRROLREKJ
YRAAOQCLJA
ZZSMMYLBKMWF
QMUYLEIATO
GetExecutingAssembly
GetObject
get_Length
get_ASCII
GetBytes
get_CurrentDomain
get_EntryPoint
Invoke
EQKUP.exeHSVY.exe
YSZESC
HCYCFLGEJBL
ABSRVAXL
SWWIEW
JDWGCSFG
LXYWJCNB
OUQKRXYNQAUH
JOBRYZ
GDQBJDNQHK
DUJEXMWCAU
BXIXKDELWDXD
EZIHAC
PXJLTZI
PWCMCVLWS
MTBRDIKMPN
YAVVTZ
PPOQEKTGTPE
XGUAPSSWQUXU
LYQNOYKJLDWP
TIXLYN
BPTWVCE
RZGFGNVKTGFK
ICXYQWMSZQJT
XAVKMA
KDJCVDTLWWG
SKKWKJH
CXULUKLNWZ
HTWVYW
PNCTZYNUDGK
IMIBKBRVL
ZRZSQIDYYBH
FUGSJK
AMKGMKBFU
HAEKPBAH
KRDZZYBFSAXX
OHDPTF
VDQHKVEE
GKNAPE
LKODID
CVFHCW
SZEMHOU
UKNJBIGZGG
KOTAJLLVO
CFZTBF
ZJWASSFJN
EMMESWGLNG
DIDGBEADMN
WIPHNJ
THDGVBLOEF
VCBLDRATHU
VMVXRV
ZQYJFW
FVBGKUHI
FKIICKS
BHVZTE
YDXOKZJ
XMDMIU
FTZHXHNXDMN
ZGERQC
TQSZHGEU
QDQKWBKJWADW
GPSWTV
GFLFTCQBH
QOJSMBINYG
ZNSJZOPFFFH
HCVJJP
OBGSKIQHDNO
WQQXDCG
RRVIKKRBE
QYTEKZ
VABFQX
JSBGXGZWTO
LTFFSC
QNMOPUN
FDZFUCORB
WYJVLJ
NQAMHRLY
ITVSRIXUKQGQ
SNUNWB
ZRFJTZDD
OGILTCZLSUN
NILNVG
TNKFZU
GSMXDCSFYY
UYYHSE
DORUYGSFOSV
ZLVOYV
UDNWBYBJPZ
HXIETYDGUKP
QTQXVKJHJIPC
QYMQFA
IOCODULAIBAC
PQVUSH
KYJSCRHYPEG
PQFWZT
IWENCJDURTCY
ACMVJQ
LBOLQLJOPUY
GGKPFMTMDN
BAAHOP
ERQATSNGPDN
TSYPBKRVHMMW
BAZUQN
HTVGUZSGV
OPDXYVFZP
HLQBMBVVBNNS
OCKQRM
UFYFZRZZQPF
IGDMLCQSRPF
PVEXNBSQRCEW
VXFNHO
RCGJGA
DAYRARBIZ
BTRQDKJZPEV
HNWOVX
FXZQPGYOGT
AVCZOOKS
SXBCFQJQPGEJ
FHZPTA
NUPIOPMVT
TVUHDLWPQXZ
LFQXTLYKUUEK
EZJZWS
KFDFWTUNSYMT
EAZPFLMEWFI
MMZWOSAS
CDOPAX
JELLNUKFTW
HLLCVKDQLBCE
IILYFZ
SGGOETH
JOPKGLQIT
QMEYMC
QKRKSUUMQZLS
CBQZZNSQHO
MRYFJL
VSBSEDI
RSJAHPG
EJJSIUABSC
NYUOSA
VUZQDLODAY
ODYDFIOEZQOW
MNZIFWRJRHCI
MACGAK
HAYCOFHS
JCWUZIJB
UCPSTLW
SCAROE
UKTFVJT
ZOMLHAUMFVS
YKAZVSLFNSBW
HDSPBH
BFHXEDXQFO
RGBDWFDGV
FAGPPP
COVRWEXUQAZW
XIACANLQTN
DLHRSNZWBCQH
HQZUKY
YZIHEYP
WDCLUWCA
SUTAQCQL
ATVUKW
UVZBNTBMNEAQ
XPTIHQ
XRASOJOZEK
CFMQLJ
MNQFSUG
DWHFACDC
HFXMQU
LGHWPN
TCTBHI
MCLSAYAYAK
DFTLMU
RREAPTFJEAMH
TPFWTRJFVT
KUTMHA
LXQCPA
IXCUEBRNAI
UZSALHPOANU
CDWVIB
GLGHYKBC
OOTGYOEXPH
ORBPNZTG
DNBKFA
KONTMSHQD
POTTKMZSP
JOBZMTUGWNFX
IXGHNU
CAFMCLJ
JWDWYXTYTRNP
IPWWBQURTDI
QCLCSZ
BSKZBME
TQDRUTUJR
KUFHLCOHZKTE
TRJUGC
USHJTMQF
FZDMWRRGJ
WQIOBIHPI
DEUFBX
FFGTPZIRQ
HSMCDVNOIER
CVTNYRXOGHHD
FCLZPJ
FCKMYZ
DIIEZKDM
RFVQXNO
DHQKSX
NICXAXHEZF
TGDQRBOYAKWA
XWBGRKHIZ
YEMFWN
TGYESBTR
XAHVMJU
RWJMQJTCXUF
KBVKDK
NSHSRTML
QCNFVXXK
KZKMHBCKJMZ
GYUQLO
JFWYGFRKPA
EXFMPEVI
ZJMKUD
SQUQBDUKU
FWUBYR
GPLZCJVYYQM
FSWSHA
XLGROSE
KUYJYXF
YHVWXSOHM
QXZRJZ
WPMTRFHQHMMY
QSEEWIOTJQZR
FPUPHAUFOGWJ
HKDQHD
YJIIBI
RGEDWIYWWEI
WYEURPDSSKEM
NBUCTR
GRHAMKHZWHM
KGONKHUEBS
URKWCBUIZ
JTVKZU
YGIPWMSEY
PBUFEHG
NWYDRUPAPXY
OCLNKG
DJVXXLJEIIFQ
OIQZLAD
DUOFYSQXOTF
KJCQAU
WOCGDW
EWIONPPM
APYRLMCDUOWA
FUSANS
XTFTDYW
MCPHHBV
KIJRKPAVPLEZ
GKOSDV
LFUAOITYIF
PPHHTVGZFFQL
GPHBLVDUPN
NTYORI
EMTLVKINZRH
LRDLHPFWQNZ
WHJRDB
VMYWVKRBTOM
MFKDGFAXAFBL
ZMMBHC
CNZVBIFMQNJN
GZOBTYJVBP
OHPXNUNMTNV
LUVSBP
VWXEVW
FBSUYOL
HCSNMX
EFADWN
EQUCFMIO
DELXPTCPXOKP
AXDCWP
WNQFSOZQXDW
HYGYOJ
QNRFATIAXKT
DHNESTDWU
CYVJZBKHXZG
DBUPDI
TJPIFHQ
DVSMRYQBK
KPGGQQRBIXH
AFTTKP
NSRODONXLJ
VTXTKGIB
DJPVKJMABTJ
HAGSOV
JLGZALDDFTLQ
PRGABGA
CZKMJSDKKK
IRMFYQ
DBCABTDS
TITKCBA
BTKBIGSHOTWG
FGYCOK
QRHCAVFB
WSVKMN
GIYLGCVQL
YPBYMTVUANDJ
BJVPVYDIZ
YJAZCK
EULCPSWDEN
MHVFAYMB
LTSXQGWLIIDG
AWRZEZ
VBQOCDXFHBTX
GGQEQSS
EKZHQXXV
NBQFWR
VCCJKSZTUE
HVBONRBREAZ
MXRIHJ
YLOSAUNMXMHW
HOIIMFZB
ZEWLYLGSWSCN
MCKSYY
ARVQYFSFQT
FBQDGKLCT
PIVWDHVJBR
DKDDYU
VGSABONISI
JLFWJAMHLJ
XSMADREEXK
INZORJ
ZGEGWDYZ
DKLCEELBLFN
AJHCVP
GJHOYD
MQEJUJAOBSV
UBUWUETBGRN
WQQRPR
AGJXWDBWA
MZKECGIUZWD
GBMBSI
URAJIXJYS
LUVCIIFASGL
BVWGTCXORGZ
VTKKXX
XYUOUTVBZ
JRZIYLKMCEX
MGJRBX
IDJVTSLBFOZE
BBBAUTEEUIS
WYXAERJHNRYY
UJUXZR
IZOZRSYZ
SUBNGMCMU
QSTGSERZE
VEFQKB
EIHVJNVSPG
EBHVEYGD
MIWMAUXMPMSU
TMAOCQ
MPUBUOJ
VQJXVHWBH
DEUJQPEFKZ
APPXKX
YUYCYWA
IPWPAHOTU
PKEPNWECN
OOKAXY
BIKFRHVRBU
OWQDPHKQDJMU
LXRQAH
ZOVFBVQYIFA
GYPEJKXGPUM
NJZVYBGSPSBA
DALWFL
KXZAJFIBR
TMQLLIKEPXI
QGEXBMIWRLV
MRQJYH
GZJAUBMI
WLDZISZFESOY
PICKOC
NHUFPNZYCHXT
MZPIFQ
VUNDQDLUNKU
NHYJJV
LAUVRF
POYQXAQUUXTD
ZDGNXH
YGKHZWVR
MXIFRXZYEXQG
XRQWKY
FUHJKUK
FDHKIGOROGMX
ZSYLYJLFSSPD
ATVNNO
QSJJUZFEOOMD
QGCBMSJHTUNY
ZNQNWI
MPXBGZC
BVFPZONERW
XGFXCKHJII
MWABVJ
CBWQLBZHC
JAETUX
VFOLJPPERDB
VCFSLF
HDROYAJPORXA
JABTCINOTTQJ
ZFYEZK
IDBRJFAC
VLIRTBYNYC
YZWRKALPP
EKXKBU
SMYNESKB
YUOALHU
FXBWLRLMXAF
YWPIPE
WCODAMAOJ
YMISRFVACJ
ROVGYYSY
AKNWUR
QQMFTTDNQALH
DSDUMA
MGZNHZVXUXCM
DUOCVY
YGUADUUQ
MWXEPKGTUZA
ENUHWMANKQWG
IQCVKM
MLKYAZUAP
QPAIYHQKQQD
WILSWE
MWCJSOTSJ
FVJODKMMTG
WPKCCKWEPHTJ
RNXSJF
NJGEGAEEQWQ
OOWMVVC
WKMTQLMYGIND
YTNEKK
USTTVKYSZD
SHYCDYDRTPF
FAHZXD
THRIAK
TDEUJJSGSUGH
FNSIKBCGBQLT
VIAXJV
RUBSBTXHIH
OIJLJUSUPYIG
KJNNBR
PIODENJK
FGUUEUCUJB
PLRMYICFQSZI
ACOLWT
FKHDULBYEK
WORJLDQBUN
UDOUZLYDMZLI
PZPKDX
YWGRQZO
LIEKMUA
ISUSAEHFCZWV
RVENTV
CHQYIPMRKP
DZQBKK
LTVXKVRZU
MTRCFIUF
NFWMDNZBHTUS
HCFSTM
BEKPSGVQRM
TPZOWHSNL
BFDSSPXLSQM
PBVGMX
KMBRJMWTHDQN
AENSDLDP
HTYLMA
QNEZGTDF
XUTIAMIMNUJS
DJOWCYIKHD
HDFNWD
AVXMZDB
PVRAPOJORG
WZMIPJPWKOGD
EWYPLN
LZXWAJ
YCZWBYSLXXI
FVTIJZ
LFIJALMSU
HKJOIH
IZTQXWQAWKU
SLGWYC
GUWWZOPBFUX
DOIYBZJAW
SMWSYQXWAJ
VFYBFC
ZBEVHW
HNMRUS
WZMDHPMRADW
GZJKXO
XOQFALYRH
YGDBNFVK
TFPLACW
XFBHOF
GAAUQAQSI
KOHCDSJVGX
CZPUNNCYF
RAIJNI
YIMQHXJTIDEN
XPKSOJXCJB
WLLZHYIYGDQZ
ZTUKLA
TGPKQGZZKBSA
ODTBZCLPXC
LTKKDYNXMZ
YHGYMF
IOWBFCJKPD
TKQVUT
MDRUFQPAXUR
ERPTVF
JLZYXQ
IRORTN
MJWNXCBDCRKJ
LNQZCT
UXKRTEXHKVL
DQNIQB
IYRYKLQPUWBU
TKVKDC
HLQWGVYKGLB
FAVMHXMLA
QZJLMRONSAUI
MJVRZK
CBRFDK
JQCOEKPYUGL
OIKRPCXGFE
OCVJIV
WXIQOX
DYCXZVQD
SZTIAR
FDJFSDQNP
MRGPZNAYIDX
JFWZVSTZDKVE
FVYRAK
WKAHSIFCGOUP
HTTIHDWRAZ
AKFQXHEFNFMU
BXEFMM
WPWRVESYKVGH
LIBJWBFW
HEZCREZKOOK
CVLJGB
JQLQYKWALXV
VOGZMMV
KZQDSXWNX
HUYAMP
TSNGFJIWF
ODCEWRZIKVB
OSXQSQ
CAJWES
MGWOYS
EPCILKOBGOT
CYHVPVSSMWOB
VEBEMY
LFDDAB
XMGVCV
WLNTDO
DUANMP
IXXQRGACIILZ
BZRKMIYKDU
SEBIPP
YYSPYTGEYE
FFGSQOBSNN
LFXUWBVGIAU
OOWEUL
QELDRXI
JFCWTA
VTUHFBWSL
BXXUMK
PDOFQUHU
GZIWZKZDMMAM
ZAUQUNJ
AZXRTT
HXDQVSYRTAUL
KPUQOT
BEGHZOPYBP
PDNCAN
SWRSLNIVQ
QZUMUYZYOMWO
KHHZISIHNLR
PHHGPJ
OLOEVSEPEJ
SPPWLJGZ
GSOLAL
SUCMAGQFF
NLKBFDVUJWEC
JCXZEXKZYCNI
GIVDEY
PLIGCOSQ
GYFBXJAGS
DTCFXWOCUMXR
TMMEDX
HBQFIB
URVAYOTTZ
DOSLQY
ZHLPPD
NNVCEIJ
RKVCDISCKB
DWXLZG
YJJYKNAILY
IDWJNYAYPQL
FIVOFJWGMEJW
CPCZHV
QMTYTMRQGDKH
OMGPRBK
VIQMTAH
NNXKMU
HTXSHQUEBLMA
EOWHTNX
LRQRLJYJZSWM
ZQFZIR
OWAYIEARJNBU
NPYOIAS
NVFQIGJ
YOJAIP
WSIKXYAXRILK
YWEQIBLTSN
HJLOJDNQP
NYBSIC
NKNHFA
UGQYAOFLXUW
NGTFDBW
UFHXJF
XPLOMWNPKLO
AWETFYVSL
QQQIODWM
TEQZNQ
PQYBTYZS
LOIHQORC
DYNCPOVNTG
CTZYVJ
KFJJYYNCU
ZQFKBTHOKEG
OKIELT
MFZRGJWVUZ
SIPCAI
RQVLRMYEGH
TOSKCL
DNBPZOTYAIFS
NZHDQP
FYHXWCRBQZR
VSTRTO
NNNWCC
IKFNAPRD
DUWNZAQJUTYD
BNTOMBMUVRIVXMRORCVREMIVCIXCIZVUNZBOEBNNBXEEOXBNOBMCNEBCNTVVXURNMUNOEETTMINUBIOUTXCZVNUOZOOCXCNXOZBRTONIBEBEZ
VUEKFA
VEJVOBTEJWLU
QHXGTI
NJWEWCWMG
CTRSBE
UHNDKXNMILX
PBTOEI
APQEYRS
YZEAWFYSRKLR
ZYCPSL
HETULHWQJ
EIXNYICAYL
MAWAJJ
NYWFAOTADPE
OESRWNMW
UKIJNELUI
ZHRBUK
RUDDXIJRXP
GLKESERL
NIRPNUODGTWU
EDPCIF
TULLCGQFSFA
MVRUUHEZXW
JVWLDQKGOT
MHFXXI
KYAWINWMQG
OQPWCETQQY
JQBTTS
UFWWYHTC
UKXXRHKINOP
QGVYRJXISW
BSPMKC
NAOKHDDTFYFR
GBFLMDWAQY
HWVEAP
KEYBWY
LMRERDGW
EMSAXOQ
RQZMCF
TQPVDOS
SMAVLH
FRYKIQWFMIEE
EBYYKP
HDYNIFIJDTA
EHBLOX
RUUBNXYYGYM
JKYJDH
KWDGFANEYIIZ
QKCHGPQMJC
NMKWULRVJH
GBYOEY
PPBFFVMYSJFH
BDBLUCSUD
LWMHAZDNDEPM
VYASRF
NIJKCNLGV
QBKDLPIJA
QGNLAZBBV
SHZHPO
BPXWVNYOW
ZHVCPYDCSMWU
HEJPERKCT
OHZXMD
FWWXXT
EWOXAFARGCUM
IQJEPC
TSVPWWPWNE
PKNQDEKQW
LMIYAFFCOG
OKHAXU
DJEMJTYNOY
CPMAKG
TUTWIQEPLZ
KIVTPP
KKLHDYAKDM
CUJYPMZIUJ
AXCWLQXQVGGP
PUYFEI
HSKAABHACLSL
YWCYHSHXNGV
QNQZSVFWNFMO
YFDELA
KXSSHFBC
CMGZLHZ
USFRFVNBJOI
KGWRZQ
GSOOTDD
VXYXCLFYRDEC
SKYQTXQDC
MEXJQP
MKNVRVJLE
YQBYHYMQZXD
RTCCCFCXXQ
IWTCTL
HIESVM
XDRLPUAA
BXXXXJGCTU
VFGSKA
YOQLFHADBLX
BMTOGEABPRY
RBDDCJ
KJUNGMRTBB
SWDCIHICVJKD
OQZEFA
DTEWAJQVEBG
OECCGCVO
BMZPJXIDVJ
BRIQOV
HNVFTNQRHE
SSTDSLSVLQ
CKMLPNNJOYCQ
NOUMLB
SRCAMLZ
AQFOHYIVEINN
VFLUAVIA
UUAIVF
QSVBLC
JBLQFYM
ZISNXENPYZF
PLGQMO
NGRGRD
RJCMUAVY
mushmul
VXVXQKJY
CXTZJQ
HLZQYOPHVFOB
UKRAABIGRHK
QJBCJM
LWXINCFWXHCZ
AJEXMGBDSSFR
DLCAVGOFGB
SNWTUY
SVZALDP
CPSBPVVXZ
HEALBXPBXMP
HJKCRA
LYKCGUQOHQM
ADNBRV
IGAPVJCVESN
LFRRTGLOHF
DCDCKAFMCM
AJMCVP
CBIJQTTBXE
QJHQZZC
KZGCCV
OQZCMVTEU
LASYBBFRRQ
VLRHJMUINY
RXEMUF
VDTJLOZZYWHV
DLYGINLYCNGI
YQWQRQU
JSBBKS
ZIJHVKCK
NSABACJVK
shiban
<Module>
BRNRTNBNTRTMOMBZIRONZ
CTCRXCMIETNXTVBBMRIXRXVMIBUCU
System
Assembly
System.Reflection
ResourceManager
System.Resources
Encoding
System.Text
AppDomain
MethodInfo
Object
MethodBase
UnverifiableCodeAttribute
System.Security
AssemblyDescriptionAttribute
AssemblyProductAttribute
AssemblyFileVersionAttribute
AssemblyTitleAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
ComVisibleAttribute
System.Runtime.InteropServices
SecurityAction
System.Security.Permissions
SecurityPermissionAttribute
String
mscorlib
0.0.0.6
WrapNonExceptionThrows
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
_CorExeMain
mscoree.dll