Sample details: d3bc2b238ed80bbf172ad29f8f621a69 --

Hashes
MD5: d3bc2b238ed80bbf172ad29f8f621a69
SHA1: 1c8055bfcd8f3bb771ba1cbdc09f1d0d7cb1c97f
SHA256: 9085b8859bfa7abff69e6df1263fb2b49efe7040213b7782f2b77bd55115bf8a
SSDEEP: 24576:3+a4MROxnFD3crXYf1rrcI0AilFEvxHPKdooi:3uMiJFrrcI0AilFEvxHPK
Details
File Type: Composite
Yara Hits
CuckooSandbox/embedded_pe | CuckooSandbox/embedded_win_api | YRP/NETexecutableMicrosoft | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/maldoc_OLE_file_magic_number | YRP/System_Tools | YRP/VM_Generic_Detection | YRP/Dropper_Strings | YRP/WMI_strings | YRP/Misc_Suspicious_Strings | YRP/DebuggerCheck__QueryInfo | YRP/network_dns | YRP/screenshot | YRP/keylogger | YRP/win_token | YRP/win_hook | YRP/Big_Numbers1 | YRP/Advapi_Hash_API | YRP/Str_Win32_Internet_API | YRP/suspicious_packer_section | YRP/CAP_HookExKeylogger |
Strings
		OLE Package
Package
new 1.exe
C:\Users\MARKDON\Desktop\new 1.exe
C:\Users\MARKDON\AppData\Local\Temp\new 1.exe
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+,8	(2
#ffffff
#ffffff
#ffffff
#333333
-S+nsT	
jY	n[	nZ*
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <startup>
    <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5" />
    <supportedRuntime version="v4.0" />
    <supportedRuntime version="v2.0.50727" />
    <supportedRuntime version="v4.0.30319" sku=".NETFramework,Version=v4.0,Profile=Client" />
  </startup>
</configuration>@
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
`Lsh15
umbG*6]
Z\{hCL
cGg^JH7
[<Bo m
in<L}_
|))HJ6e6
T>t)M:8
elY=~F
@oK$d8
RtIIZv>Z
Q&a#&j~
iI^sBb,A&)y~Un
 RUg(a
]x3das
2'.fmY4
,H@R:Gw
NhgR;-c
v+^=+z
khjt]-
Xb?5A|
Om%-Un&
s!J:Tqu
"bpIeG
O"#Vd}n
<o.Yl3,sE
=y8{W<
;'Dy)<
[>gxMhi`'
	1ru7	
^EBuP9
#t|%;c
"CS|(W
>b~$HL}|j
lrh>.n5
bZ,m%r
Apw+R"
|%RJkX
d&)Eu[
"Sg;ke
.Bm&E8
p.]<5W[\N&#
rbUC6V
 ~X%mT
pPSxM,
!>"Upd
rQ)lbv
Vs	'<q
>:/X08
+0a%e5
K~aar	
)3Se,`
}aFW(2sfn
7,f30'
oJ7p	qi
Yo	S*/03
IJQBR:
xcH3/e
S"qS"rK
*$OBZ'
kR+cXr
BWCk4&
dJmh;n
3#,%tgX
v,\^7w
wITE]-
N74tzU
#tv|/l
]G~gOG
U+Jf<;
^(PsB/H
_-P[BM
	}'CYG
]Q	kxN
sOn^tc{NO
cD_!z3
}q8lON
z5Ru]G
</KSPz?
^/:{~ zV~K
vk<KWNJ
N9sfvf
-1HsdK
Y.Og::
hFU^@=8U
4W*]f!
ufBS8}
y>@>;Y
_9bmQ+
iyLl@c\
OgY?$l
7sj;a`
mf-o@p;
w3Q^{]y
m4Kgtm
}0Ap}h
<	;I+a
'z3 =x
1j40%'
/\#x6;B#x6[
jDW,34
hE&P=N
%@k8}W
QH8R/s*
ht<LQk
wvXpO5
SZqkBs8
4l~cZ;:
cRDmmk
r`uc9?
@ O,5J
+;Bx{4
y$Y*O~ZV9?-YJ
$|]* G*9zHw
l*si>+
}ZmHk4HI
YDfWta
XsIMFK7]%98u
C$	w Rj`
F\.^2Er
;fwp\I
kWbXSUbX
d?e$8@
UJ4yzG
IoPF,\-
Cf0f0~
A6@6A6
hH'HgH
B* ^\s=
/8Ap"o
0E)d\)
Snb/)7
t'qw)q
9	bN*W
a;ADHS$l
a=1:=q"
9IlvrqRp
d63#?'#
1	F`p<
-#%99))%
33'wNN0
xFqkkV
`WhyMc
]Q]a-/
loyuk?u
[6mVFL
:I#Ay9
,=h"(f
kVn`Rtp
rzC-9'qjIm
yuB+t~
Wa=Cx)5~
aXwa`J
k zCXk
>IR[~Z
Y~D+-^
bQ	Xl;
XQTSCQ
_V\;,3
,g<'SW
~VtkOma
4(6&`<P
>bd`rc
|	JSP[jS
Gms<*)
*"uQ-O
MY)S 2
t+Qe/>
3@(LP0<
	6JD'M1@
cCO`Qan
%=j0j(r
\hH4OS
,kT57U
	wvR$Ms
mW-TR8
hsZagIj
A{#<@Q
| TDX5w
CHVn1s>
z4q>[F
]p?,2<0	G
E2[_4N
`<N@ot
BBmRq 
S7Y}WS
C,Kz"l
l%L0>`C
/9HY?"
DF5Z*x
j624>422
Tzjjl0
Dfl,95
0R2xX~
pzxlbz*
djxmrz|
l9[HSnE
Nvjtz~rrbdp|xdx
58<6921
f`p=:z
bvfa|lzzrplj
mnvapzzb|p~bvadbtavaF
0<=89;=58
81<=+)Gf
8?2>289>7N
8127168
0<186:<68
rvr09=7;:7?J
.}|tr~d698
lrdplfxfpz.
I?H@R,d
cE9'%c"
MvBBa[
1-8T]n
dA@>2@b]
ULWw ,
lY8Ef]]"
|LNiQ&
dJcw0mzo
	h9aqo
2a}pjN
;Vw];80
ZND/>	
t,N1!?	8
*b[(Z%
lGdqd7e
<`C){]z3
EqDN? >Bj
V*YHRy
+Yoak${%
?2)"+C_ge
RNk	AL"
VVgbO\ 
3d; Kv
L)( 9e*
KnEi#q}a
Lk*3pm3
,T[(7O
.(k,"U_Za
Re[Hou!
,CzI)2sM
s\Ek+!%4
\>;P"P$"
=eZ(F 
j!8hnU
r&;~4+
ZSmZcp(B6
{,l?2	&
M~L~BAaL|aKE
ygp^Zpe
|WLHs"
x+h}2Hk]
FW$OMQ
v2};'t
r~Y{Oi
v9}\<?
O?^wmx
.W#+:w9v
sVu_25
``:XbD
Z:LQ--
[}GQ-x
];cn|u)
UQWDDEDD
,p6s]p
8QK$*b.
d=8YW$
k=ZZck
{Ovt4V
/(,{9>
nFFs)#
8b:	=W^l
\viA*|If
qn%"&n
hQ}N;?
Y!}@fF,
@QbeIG
[j85Pv
X{4~J8=
PjuFR(
MBO,Ak
#4PUz(
GbzUxE
's*xU.q
Y"zjF=%
S<"`2,
"B*B"RT
z4RZqq v:=
_D@E@DPEPDHEHD
,Hwd,fn
"CDDEDD
SDLU1U
#\*\"l
m(QE'T
Xs)t+-
{zzzfB2p
hQMM![W
rL7g!UA
N-BZgxo
S(ihB=#Q
^ID=E%
%W\^CI
Y.-G}H
:@Is3j
d()V1U
lrd==f69
g/)/:e/
lu"[=;
*qX`YG
S6r-:4R
l$0CMy
seU&|??W
|LxGX!#
,G:EY-':EY-g9ZV.x
`*6#R}
HX13)o
!R-aju
,"U2S<
kuqu2Y
O!;T'&w
5?`#\#
~63kuR
6Svx^	
[=WlY+m
VTPP@T
s#~+xQ
h	=	,P
,RCnt2v5E
jO7ziC
@7Z2/W,
x7Z;<W8U
7j1s.E
F7:2c!E;
gG-cWj
m<2][^id
RqL\F_
oL_ ~Fka
WGm9e{	
L{q_ep<
[zgk3n
>S]<|,
riu|VV
kQvPN@Q
tP.Q.W
\(W+%r
3?Tg'/b
./9qW.
qRA;?ob
D:0uOK
~/^~9e>
v#)>L~^p_-
]eE\,Z
MIZKr*
8""20"
E@DDDDD
:Qxx@w<>
w@aUV>
;]k7ZaW
PY6|<R
'IgjkaK
^l^n7jaK+
IiiK|5
.G.EC^
w;hj<$
`:h.%T
`$Op8G0
i(M22}
m&6}Mw
|@PjHK-D
kg*s'P
u0+	w{
w7z;E 
s"Ns|G
V(E%9tC
8JgX'|
pF~8-w
"_-E)gJ
2dnpZ`
KwIQhNK~D
pW6CPw
bO24c"	
Y\OiN2
!-c!Yf
}vfvue~en~b
vjsr/eq
~,E2nh%
uNXfO<;
g|bq~V
xNw?]FjX
BD?tn8
]+f=dy2
^VkpEjO
%~wu=4
P]]\w!
Ja0FfD
]^A]hdos
ny8`hS
hvlJ\{
,ZVXU*i
doRAqn\
M(N3tG
1+]uf>	.
mDm(lA
H2eY_	tuE4~
'~j'=QdX6
gG:9Lv
>},Kz(
lQsV:AT
WUvI6<
Y$ruo"
owIIuC`
ZcrlvP
GR?Hulyp>
b?7/.8=
*wHJH&
=E~,HR
]uoGT|@
3eI-1T
G$G/w'KX
/[nir^
KbWDol
z2%_"'
-nSiJEy
7}kFD=#
gkn8uQ
BMa+* ^
]1SKo 
ho%f>8
hGZq	!
W{	s~b
 )t#7*
q#C`6N
Hzb>>P
}PxVLe
vE OEw$
7K$}	Q
xGB(`%B<J
Fuq3;Q
7B{_pC5|
-#v4i5
L#Uzkim
fj`L,Y
yIv}r<
2848bK
0'U\{p
g{@~pv'0Y
t'O\ 1Ji
f#mv_ 
,:t6<r
.ovcs?
;:7B\3
,t%m8&&
gh#_bT"Y7UEG
/e@=,$
2}lAxn
Td#Js!
>f^d4z
"2"S8TN^
hWVe$m
@'^|d5q
:uFW81
O_Gp$_
LS&hf7
=<d9|b
lkdk6i4
3;w \r
{D2{P;
%QV%:F
,U[Eho"
k%:}}S
dPAAQA
%vk7	z5
qbRNnd
xMT{IS.
(h+!N{-h
S<W7:!A
 #@P7	
	dZ82NB
b7DTmE
L;QbS)C
!;3Z:v
5-7R!M
"93SHty
E`ed@de
Kxf^<U
(%b2w#
;B]@ )DU
KtU?,>
?	75!{
ZZZ]\]\
2kAeLN
8vcqiaYY
	uTIiAe
S6*9!gIU
rFiQ5m#
j~iY7Z
EP`uUQM
oUUWTR
MG.HFf
*mQ}{c
d6cMF"ak6
s:2.}m:
}N_@5c0
HmT5B^
Ul^ocC
PHuD%c]
q+nM^:N
.ie=t4 
g^?f>g
PR\SQX
]R^Sb)
FBVe,O
a;h9k}
5A^`9)'
d+FRvZ(
Rfp$ A
1G2oHa
DPV\Hv
DnWxoS`
\gJ.[&
zo(8M4 j
.;(*iq)h
8/(14`
)J+Ddx
1"67&S
]:F\m0g<
T)P%V]j
"Fuiw~5
_DTvC4
/+B>h>
<]MiHn-#
Mcw^[(D;
O8[.M=
YFKIf 
LeMJg8
3Dp6x4
vnr .Wi
!S\MW 
Q7B-n8`
Nonlj<
T3PF5o
=,em)Q
BPpUAJ[
L[`S{|
^R-f-R]
1JIN_(
k/B~I`
kE[S93
xzh\AG2
dB6b$e#
D?ngi&
Ab0=0(PR
~\X95Z
u7e(D%R
'A\1dX
#_~tK\
},f,R_
JtB<0w
Yyo&a 
En7R3PZ
,Ean7V
lF13'Y
%b#Z"z
@N%<zrgA
TaM(~7
|hT	v7
qTDVoxE
z9S RWltpm
zX<b*"mW
=R/%$h
Ml.M,t36
/8Xd}e
^4olyS
V\mb4,
<WpH8xyx9z
t$Vd[{
-?iWeU
O$^'cA
MNPS~U^
	7#<B*T
1>wtn@~
/,K3g#E
-be`.Q
I$6~Hjij
1_0j4F
k~P#x-7
^z.,*Q
[p*l9No
qsUj~!QC
>z\P?p
2=[&II
eigHW`
^7%fn0
`a\u\N
1V1V360:
s1V360:
1V1V360:
fl`t0v3
3V160v3
2V160v3
K9oo#14
~=,tt46;8
N[,F7]
 FN(*i
3F'FYud2c
-iiqa_To
g#6I $
mUM>62a
c="5iD:v`\
7}/!h?iZ
/Bj90X
`|x|-.
,>\rsy
:;|	1uK
lDZ	L	
EVT$951!
92adBFG
UARex[6
I|wU:~N
R<}4T*
;W"Umf1
#&U-f3/8
Fg+fTMS
C	*0(<[
s&\h-S
=mp	G:t
7%m~Y1c_
Va*LD7
M_t;n9$
W4T(Mz
Xb=BS+
7}UVXW
wK?}}E
v\/!-r
f&fzfD
H"aJd\
^Q;	7MN
G3bfd[
|;Q|U^
M8?UkR
R?^gz$[
;9guRdQ
*'iZ5G
;,&wp @W
6N^B(-"
l]'bye
K.Dl\`
Ep	8kM
!&=U\	
wI1i 8 
	-,5#|CjC
]"ouV@
ZOEkxq
hKGo[Sco[g
KAcww4
ib7yGK/
D J`,=
W%"czW$
HJo944J
	lK&H7
Tlp"CC0H
DRs"myP
0V5=#h
zq}''P
SwbK3($
3)+#Yk
%h#/+C
$[yW,=
Orcus.Service.exe
#F{eed
35J0KUR
`kP%\<
<%CKI[
3	%Cn&!
7s 5g>
M"9Yu{$H
f.Is$.
$}Q{N@
wx]10i
H\gwd@
+E"OOV
=le&J#
P-(s>c
;72af\5
Opcv(\}
)H*c	M
s,+o<F
Orcus.Golem.exe
(u01O	o
qDLYs<
B%=KxSv
v4.0.30319
#Strings
&*(6(c(
/30G0Z0
3,3?3P3
5C5G5y5
?"@]@z@
A"A0A4B
E!EBEKEYEDFUF
F2GAGVG
O7PWP\PeP
V9WPWgW
XFXXXoX
[;\X\l\z\
`0`B`H`
`#aZasa
a-bGbib
e)f:fsf
hLiaipi
kGloltl
m.non)o8o^pyp
|,|M|}|
|	}/}W}v}
&:&I&^&t&~&
&5'?'H'N(
/H1Q1k1r1
6s6v6)7?7U7
=R>y>i?q?z?
Q"RPRWRpR
\*]J][]
f	g/g8g$h.h1i8iYi
jFjRj7kLkUk
n0oHq@rXrqr
y$z-zfz
}6~D~M~
Orcus.exe
mscorlib
System.Windows.Forms
System
Orcus.Shared
Orcus.Plugins
Orcus.StaticCommands
System.Drawing
System.ServiceModel
System.ServiceProcess
Microsoft.Win32.TaskScheduler
System.DirectoryServices.AccountManagement
System.Management
System.Xml
DirectoryInfoEx
System.Core
starksoft.aspen
Orcus.Shared.Utilities
AForge.Video.DirectShow
AForge.Video
System.Speech
CSCore
OpusWrapper
TurboJpegWrapper
SharpDX.Direct3D9
SharpDX
SharpDX.DXGI
SharpDX.Direct3D11
Lidgren.Network
ICSharpCode.SharpZipLib
ShellLibrary
System.Web.Extensions
System.Security
advapi32.dll
advapi32
gdi32.dll
iphlpapi.dll
kernel32
kernel32.dll
setupapi.dll
shell32.dll
user32.dll
user32
User32.dll
msvcrt.dll
Srclient.dll
ntdll.dll
Shlwapi.dll
winmm.dll
Wintrust.dll
Kernel32.dll
shlwapi.dll
Orcus.Commands.TextChat.TextChatForm.resources
Orcus.InstallationPromptForm.resources
Orcus.MainForm.resources
Orcus.Properties.Resources.resources
Orcus.StaticCommands.SystemLock.SystemLockForm.resources
costura.microsoft.win32.taskscheduler.dll.zip
costura.orcus.plugins.dll.zip
costura.orcus.shared.dll.zip
costura.orcus.shared.utilities.dll.zip
costura.orcus.staticcommands.dll.zip
costura.starksoft.aspen.dll.zip
Orcus.Service.exe.gz
Orcus.Watchdog.exe.gz
<Module>
.cctor
InstallationPromptForm
components
IContainer
System.ComponentModel
button1
Button
label1
label2
label3
label4
button2
OnShown
EventArgs
Control
IDisposable
Dispose
disposing
ComponentResourceManager
GetTypeFromHandle
RuntimeTypeHandle
SuspendLayout
set_DialogResult
DialogResult
set_Location
set_Name
set_Size
set_TabIndex
set_Text
ButtonBase
set_UseVisualStyleBackColor
set_AutoSize
FontStyle
GraphicsUnit
set_Font
FromArgb
set_ForeColor
set_AcceptButton
IButtonControl
ContainerControl
set_AutoScaleDimensions
set_AutoScaleMode
AutoScaleMode
get_White
set_BackColor
set_CancelButton
set_ClientSize
get_Controls
ControlCollection
set_FormBorderStyle
FormBorderStyle
ResourceManager
System.Resources
GetObject
set_Icon
set_MaximizeBox
set_MinimizeBox
set_StartPosition
FormStartPosition
ResumeLayout
PerformLayout
InitializeComponent
MainForm
_client
KillButton
UninstallButton
ConnectedLabel
CancelEventHandler
add_Closing
EventHandler
InstallBuilderProperty
Orcus.Shared.Settings
get_Install
set_Enabled
client
Form1_Closing
CancelEventArgs
sender
get_IsHandleCreated
MethodInvoker
Invoke
Delegate
_client_Disconnected
IPEndPoint
System.Net
TcpClient
System.Net.Sockets
get_Client
Socket
get_RemoteEndPoint
EndPoint
get_Address
IPAddress
get_Port
String
Format
get_DarkGreen
Connected
get_DarkRed
Disconnected
_client_Connected
KillButton_Click
Object
ToString
MessageBox
Exception
UninstallButton_Click
add_Click
<_client_Connected>b__6_0
CompilerGeneratedAttribute
System.Runtime.CompilerServices
Program
Version
AdministrationApiVersion
ServerApiVersion
System.Threading
<AppContext>k__BackingField
get_AppContext
set_AppContext
RespawnTaskBuilderProperty
List`1
System.Collections.Generic
Enumerator
ClientController
FileInfo
System.IO
FileStream
StreamWriter
ProcessStartInfo
System.Diagnostics
ILoadable
Environment
GetCommandLineArgs
Enumerable
System.Linq
IEnumerable`1
ToArray
Contains
Thread
MutexBuilderProperty
get_Mutex
TimeSpan
WaitHandle
WaitOne
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
SetUnhandledExceptionMode
UnhandledExceptionMode
AppDomain
get_CurrentDomain
UnhandledExceptionEventHandler
add_UnhandledException
ThreadExceptionEventHandler
add_ThreadException
get_CurrentThread
CultureInfo
System.Globalization
set_CurrentCulture
ClientConfig
Orcus.Shared.Client
get_PluginResources
PluginResourceInfo
InstallationLocationBuilderProperty
get_Path
ExpandEnvironmentVariables
Equals
StringComparison
GetEnumerator
get_Current
InfluenceStartup
IClientStartup
GetType
Concat
MoveNext
DisableInstallationPromptBuilderProperty
get_IsDisabled
GetFolderPath
SpecialFolder
Combine
FileSystemInfo
get_Exists
get_FullName
ReadAllLines
ShowDialog
FileMode
FileAccess
Stream
TextWriter
WriteLine
SetAttributes
FileAttributes
RequireAdministratorPrivilegesInstallerBuilderProperty
get_RequireAdministratorPrivileges
Process
GetCurrentProcess
get_MainModule
ProcessModule
get_FileName
set_Verb
set_Arguments
ServiceBuilderProperty
Install
AutostartBuilderProperty
get_AutostartMethod
StartupMethod
ThreadStart
set_IsBackground
get_IsEnabled
get_TaskName
ApplicationContext
STAThreadAttribute
Unload
ExitThread
Console
message
ConditionalAttribute
AppContext
<>9__8_0
<>9__8_1
<>9__8_2
UnhandledExceptionEventArgs
get_ExceptionObject
Restart
<Main>b__8_0
ThreadExceptionEventArgs
get_Exception
<Main>b__8_1
eventArgs
<Main>b__8_2
OrcusApplicationContext
_unloadLock
_unloaded
<KeyLoggerService>k__BackingField
<AsyncOperation>k__BackingField
AsyncOperation
IFactoryClientCommand
add_Idle
get_Factory
PluginFactory
Initialize
IClientOperator
add_ApplicationExit
KeyloggerBuilderProperty
GetTempPath
Exists
WriteAllText
ResolveEventHandler
add_AssemblyResolve
DirectoryInfo
ResolveEventArgs
get_Name
AssemblyName
System.Reflection
Assembly
LoadFrom
CurrentDomainOnAssemblyResolve
get_KeyLoggerService
get_AsyncOperation
set_AsyncOperation
NotifyIcon
set_Visible
add_DoubleClick
ShowWindow
ClientOnConnected
Serializer
Orcus.Shared.NetSerializer
ExceptionInfo
Orcus.Shared.Commands.ExceptionHandling
Serialize
Current_ExceptionsAvailable
Monitor
Shutdown
Application_ApplicationExit
remove_Idle
AsyncOperationManager
CreateOperation
WatchdogBuilderProperty
ApplicationOnIdle
KeyLoggerService
<>c__DisplayClass12_0
window
<>4__this
<>9__1
Activate
<ShowWindow>b__0
<ShowWindow>b__1
ChangeWallpaperCommandEx
ChangeWallpaperCommand
Orcus.StaticCommands.System
CommandParameter
Orcus.Plugins.StaticCommands
InitializeProperties
StaticCommand
get_WallpaperUrl
get_DesktopWallpaperStyle
DesktopWallpaperStyle
Orcus.Shared.Commands.FunActions
IFeedbackFactory
Succeeded
Execute
IClientInfo
commandParameter
feedbackFactory
clientInfo
RequestKeyLogCommandEx
RequestKeyLogCommand
Orcus.StaticCommands.Client
Failed
PasswordRecoveryCommandEx
PasswordRecoveryCommand
PasswordData
Orcus.Shared.Commands.Password
get_ServerConnection
IServerConnection
SendServerPackage
ServerPackageType
Orcus.Shared.Connection
SystemLockCommandEx
SystemLockCommand
_desktop
_closeWindowsTimer
_closeWindowsInterval
_lockForm
get_UseDifferentDesktop
NewGuid
get_CloseOtherWindows
TimerCallback
get_RotateScreen
set_RotateScreen
get_Message
get_PreventClosing
get_Background
LockScreenBackground
get_SetToTopPeriodically
get_DisableUserInput
get_Topmost
set_TopMost
get_DisableTaskManager
StartExecute
ActiveStaticCommand
StopExecute
get_Id
HandleRef
System.Runtime.InteropServices
IntPtr
GetProcessById
get_IsActive
Change
CloseWindowsCallback
FromSeconds
UninstallCommandEx
UninstallCommand
UpdateCommandEx
UpdateCommand
SHA256Managed
System.Security.Cryptography
get_Data
FileExtensions
GetFreeTempFileName
FileShare
set_Position
HashAlgorithm
ComputeHash
SequenceEqual
Delete
set_WindowStyle
ProcessWindowStyle
UpdateFromUrlCommandEx
UpdateFromUrlCommand
WebClient
get_DownloadUrl
DownloadFile
get_Scheme
op_Equality
UriBuilder
UriSchemeHttp
set_Scheme
set_Port
get_Uri
FeedbackFactoryExtensions
ErrorMessage
get_Hash
IsNullOrEmpty
OpenRead
StringExtensions
HexToBytes
get_Arguments
SystemLockForm
Orcus.StaticCommands.SystemLock
_background
_fontBrush
_message
_preventClosing
_isRotated
_foregroundTimer
_textRectangle
Rectangle
Cursor
set_Interval
add_Tick
Brushes
get_Black
preventClosing
background
setToTopFrequently
isRotated
BringToFront
get_Handle
ForegroundTimerOnTick
OnPaint
PaintEventArgs
get_Graphics
Graphics
set_SmoothingMode
SmoothingMode
System.Drawing.Drawing2D
set_CompositingQuality
CompositingQuality
set_TextRenderingHint
TextRenderingHint
System.Drawing.Text
get_Width
get_Height
TranslateTransform
RotateTransform
get_Font
MeasureString
op_Implicit
DrawString
Screen
OnLoad
get_AllScreens
Func`2
get_Bounds
OnClosing
set_Cancel
OnClosed
SafeClose
Padding
set_Margin
set_ShowIcon
set_ShowInTaskbar
<>9__10_0
<>9__10_1
<>9__10_2
<>9__10_3
<>9__10_4
get_Primary
<OnLoad>b__10_0
<OnLoad>b__10_1
<OnLoad>b__10_2
<OnLoad>b__10_3
<OnLoad>b__10_4
ServiceConnection
Orcus.Service
_serviceConnection
<IsConnected>k__BackingField
<Pipe>k__BackingField
IServicePipe
ChannelFactory`1
NetNamedPipeBinding
set_MaxBufferSize
set_MaxBufferPoolSize
set_MaxReceivedMessageSize
EndpointAddress
Binding
System.ServiceModel.Channels
CreateChannel
IsAlive
get_IsConnected
set_IsConnected
get_Pipe
IsConnected
Current
ServiceInstaller
ServiceController
GetServices
AppConfigWriter
WriteAppConfig
WaitForExit
InstallIfNotExist
GetPath
Uninstall
MakeUnique
GetFreeFilename
FromMilliseconds
WaitForStatus
ServiceControllerStatus
StartService
serviceName
timeoutMilliseconds
<>9__0_0
get_ServiceName
<InstallIfNotExist>b__0_0
Autostarter
Orcus.Protection
AddToAutostart
filename
RegistryKey
Microsoft.Win32
TaskService
TaskDefinition
get_RegistryHiddenStart
Registry
CurrentUser
OpenSubKey
SetValue
RegistryValueKind
GetValueNames
GetValue
get_RegistryKeyName
DeleteValue
get_RootFolder
TaskFolder
get_Tasks
TaskCollection
FirstOrDefault
get_Definition
get_Principal
TaskPrincipal
get_RunLevel
TaskRunLevel
NewTask
get_Triggers
TriggerCollection
LogonTrigger
Trigger
get_Actions
ActionCollection
ExecAction
get_TaskHighestPrivileges
set_RunLevel
get_TaskSchedulerTaskName
DeleteTask
RegisterTaskDefinition
get_TryAllAutostartMethodsOnFail
inverse
Action
FindTask
IsAddedToAutostart
IEnumerator`1
get_AllTasks
IEnumerator
System.Collections
SecurityException
RemoveFromAutostart
<>c__DisplayClass1_0
<AddToAutostart>b__0
get_ActionType
TaskActionType
<AddToAutostart>b__1
<>9__2_0
<>9__3_0
<IsAddedToAutostart>b__2_0
<RemoveFromAutostart>b__3_0
Installer
ChangeCreationDateBuilderProperty
get_Directory
Create
SetRunProgramAsAdminFlagBuilderProperty
get_SetFlag
get_NewCreationDate
DateTime
SetCreationTime
HideFileBuilderProperty
get_HideFile
UnauthorizedAccessException
currentFile
RespawnTask
_isRegistered
RegistrationTrigger
get_Instance
get_Repetition
RepetitionPattern
FromMinutes
set_StopAtDurationEnd
RegisterRespawnTask
taskName
RemoveRespawnTask
newName
<RegisterRespawnTask>b__0
Watchdog
_processId
_watchdogProcess
<IsEnabled>k__BackingField
set_IsEnabled
ToList
IndexOf
get_Item
TryParse
SessionEndingEventHandler
SystemEvents
add_SessionEnding
Initizalize
WaitCallback
ManualResetEvent
GetEntryAssembly
get_Location
get_PreventFileDeletion
get_ExitCode
EventWaitHandle
ThreadPool
QueueUserWorkItem
WaitAny
KeepAlive
ProcessThread
Refresh
get_Threads
ProcessThreadCollection
ReadOnlyCollectionBase
get_ThreadState
ThreadState
get_WaitReason
ThreadWaitReason
get_HasExited
WaitForSuspension
process
WatchdogLocation
get_WatchdogLocation
WriteWatchdogFile
IsEnabled
<>9__7_0
<Initizalize>b__7_0
SessionEndingEventArgs
<KeepAlive>b__8_0
<KeepAlive>b__8_1
CommandLoadedEventArgs
<NewCommandType>k__BackingField
newCommandType
get_NewCommandType
NewCommandType
PluginLoader
_current
<AvailablePlugins>k__BackingField
Dictionary`2
<ClientPlugins>k__BackingField
<FactoryCommandPlugins>k__BackingField
<Loadables>k__BackingField
<Commands>k__BackingField
CommandLoaded
EventHandler`1
get_AvailablePlugins
get_ClientPlugins
get_FactoryCommandPlugins
get_Loadables
get_Commands
Interlocked
CompareExchange
add_CommandLoaded
Remove
remove_CommandLoaded
ClientControllerProvideEditablePropertyGrid
Orcus.Plugins.ClientPlugin
ClientControllerBuilderSettings
PluginSetting
MemoryStream
ResourceType
IBuilderProperty
Orcus.Shared.Core
get_Count
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_Guid
get_ResourceName
GetManifestResourceStream
StreamExtensions
CopyToEx
GetTypes
get_ResourceType
Activator
CreateInstance
set_Item
get_PluginName
get_Properties
IProperty
Orcus.Plugins.PropertyGrid
Select
AddRange
get_BuilderSettings
IBuilderPropertyEntry
Orcus.Plugins.Builder
ClientSetting
PropertyNameValue
PropertyGridExtensions
get_SettingsType
BuilderPropertyHelper
ApplyProperties
InitializeSettings
LoadPlugins
plugins
Command
ReadAllBytes
get_Identifier
LoadPlugin
PluginVersion
pluginVersion
GZipStream
System.IO.Compression
CompressionMode
Decompress
AvailablePlugins
ClientPlugins
FactoryCommandPlugins
Loadables
Commands
<>c__DisplayClass22_0
clientPluginIds
<>c__DisplayClass22_1
clientController
CS$<>8__locals1
get_PluginId
<LoadPlugins>b__5
<>c__DisplayClass22_2
CS$<>8__locals2
<LoadPlugins>b__6
<>9__22_0
<>9__22_1
<>9__22_2
<>9__22_3
<>9__22_4
<>9__23_0
<>9__23_1
IsSubclassOf
<LoadPlugins>b__22_0
<LoadPlugins>b__22_1
GetInterface
op_Inequality
<LoadPlugins>b__22_2
get_PropertyType
<LoadPlugins>b__22_3
get_BuilderProperty
<LoadPlugins>b__22_4
<LoadPlugin>b__23_0
<LoadPlugin>b__23_1
<>c__DisplayClass23_0
command
<LoadPlugin>b__2
EnvironmentExtensions
Orcus.Extensions
StringBuilder
System.Text
get_SystemDirectory
Directory
GetParent
get_WindowsFolder
SystemDirectory
WindowsFolder
ImageExtensions
Bitmap
ImageAttributes
System.Drawing.Imaging
get_HorizontalResolution
get_VerticalResolution
SetResolution
FromImage
set_CompositingMode
CompositingMode
set_InterpolationMode
InterpolationMode
set_PixelOffsetMode
PixelOffsetMode
SetWrapMode
WrapMode
DrawImage
ResizeImage
height
ExtensionAttribute
BitmapData
get_Size
LockBits
ImageLockMode
PixelFormat
get_Scan0
get_Stride
UnlockBits
CompareMemCmp
RegistryExtensions
ClassesRoot
LocalMachine
CurrentConfig
RegistryHive
Orcus.Shared.Commands.Registry
ArgumentOutOfRangeException
OpenRegistry
registryHive
IsNullOrWhiteSpace
ActiveCommandInfo
Orcus.StaticCommandManagement
<PotentialCommand>k__BackingField
PotentialCommand
Orcus.Shared.DynamicCommands
<ExecutingCommand>k__BackingField
potentialCommand
executingCommand
get_PotentialCommand
get_ExecutingCommand
ExecutingCommand
ActiveCommandStopScheduler
_dynamicCommandStore
_upTime
Nullable`1
_stopSchedulerSettings
_settingsFilename
_settingsLock
UserPrincipal
PerformanceCounter
get_HasValue
AuthenticablePrincipal
get_LastLogon
NextValue
get_Now
op_Subtraction
GetValueOrDefault
get_StartupTime
ManagementObjectSearcher
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObject
ManagementBaseObject
ManagementDateTimeConverter
ToDateTime
GetLogonDateTime
GetLastLogin
XmlSerializer
System.Xml.Serialization
Deserialize
GetFiles
dynamicCommandStore
CommandManualStop
SaveSchedulerSettings
get_StopEvent
StopEvent
get_Parameter
BitConverter
ToInt64
FromTicks
get_TotalSeconds
op_LessThan
get_CallbackId
FromBinary
get_UtcNow
KeyValuePair`2
ExecuteActiveCommand
activeStaticCommand
get_Key
get_Value
StopAndRemoveCommandCallback
StopCommandCallback
StartupTime
<>c__DisplayClass9_0
sessionInfo
<Initialize>b__0
<>c__DisplayClass9_1
durationStopEventInfo
<Initialize>b__1
<>c__DisplayClass10_0
<CommandManualStop>b__0
<ExecuteActiveCommand>b__0
<ExecuteActiveCommand>b__1
<ExecuteActiveCommand>b__2
DynamicCommandFeedbackFactory
_callbackId
_messages
_serverConnection
_commandSuceeded
_isPushed
serverConnection
callbackId
SendMessage
MessageType
messageType
BinaryWriter
GetUniqueFileName
Encoding
get_UTF8
GetBytes
PushEvent
ActivityType
binaryWriter
callBackId
activityType
LastOrDefault
PushData
MessageInfo
<Message>k__BackingField
<MessageType>k__BackingField
<Timestamp>k__BackingField
get_MessageType
get_Timestamp
Message
Timestamp
<>9__14_0
<PushData>b__14_0
DynamicCommandStore
_files
<ListLock>k__BackingField
<StoredCommands>k__BackingField
get_ListLock
get_StoredCommands
CreateDirectory
WriteAllBytes
AddStoredCommand
TryGetValue
RemoveStoredCommand
TryAddPotentialCommand
fileInfo
ListLock
StoredCommands
LoadedStaticCommandPluginInfo
<Hash>k__BackingField
<Filename>k__BackingField
get_Filename
Filename
StaticCommandSelector
_loadedPlugins
_staticCommandScheduler
_clientInfo
_activeCommandsLock
_activeCommandStopScheduler
<StaticCommands>k__BackingField
<Current>k__BackingField
<ActiveCommands>k__BackingField
KillCommand
MakeAdminCommand
ChangeComputerStateCommand
DownloadAndExecuteCommand
DownloadAndExecuteFromUrlCommand
OpenWebsiteCommand
ExecuteProcessCommand
WakeOnLanCommand
Orcus.StaticCommands.Computer
ShowMessageBoxCommand
Orcus.StaticCommands.Interaction
ShowBalloonTooltipCommand
OpenTextInNotepadCommand
ToDictionary
IDictionary`2
get_StaticCommands
set_Current
get_ActiveCommands
GetActiveCommandIds
StopActiveCommand
commandId
get_CommandId
ContainsKey
get_PluginResourceId
get_PluginHash
get_ExecutionEvent
ExecutionEvent
ExecuteCommand
parameter
add_ExecutionStopped
ExecutePotentialCommand
ActiveStaticCommandOnExecutionStopped
MD5CryptoServiceProvider
CheckPluginAvailable
pluginHash
AutoResetEvent
LoadStaticCommandPlugin
resourceId
LoadFile
InitializePlugin
StaticCommands
ActiveCommands
<>9__6_0
<>9__6_1
<>9__19_0
<>9__27_0
<.ctor>b__6_0
<.ctor>b__6_1
<GetActiveCommandIds>b__19_0
EmptyTypes
GetConstructor
ConstructorInfo
<InitializePlugin>b__27_0
<>c__DisplayClass20_0
<StopActiveCommand>b__0
<>c__DisplayClass21_0
<ExecuteCommand>b__0
<ExecutePotentialCommand>b__0
<>c__DisplayClass23_1
staticCommand
<>c__DisplayClass23_2
<ExecutePotentialCommand>b__1
<>c__DisplayClass24_0
<ActiveStaticCommandOnExecutionStopped>b__0
<>c__DisplayClass25_0
<CheckPluginAvailable>b__0
<>c__DisplayClass25_1
<CheckPluginAvailable>b__1
<>c__DisplayClass26_0
pluginFilename
autoResetEvent
<LoadStaticCommandPlugin>b__0
StaticCommandScheduler
_executionEvents
_executePotentialCommandDelegate
IExecutionEvent
Orcus.Shared.DynamicCommands.ExecutionEvents
executePotentialCommandDelegate
AddPotentialCommand
get_CanExecute
add_TheTimeHasCome
InitializePotentialCommand
isStored
ExecutePotentialCommandDelegate
MulticastDelegate
object
method
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
<>9__4_0
<>9__4_1
<.ctor>b__4_0
<.ctor>b__4_1
<>c__DisplayClass7_0
<InitializePotentialCommand>b__0
StopSchedulerSettings
<Sessions>k__BackingField
<DurationStopEventInfos>k__BackingField
get_Sessions
set_Sessions
get_DurationStopEventInfos
set_DurationStopEventInfos
Sessions
DurationStopEventInfos
SessionCommandInfo
<CommandId>k__BackingField
<StartupTime>k__BackingField
set_CommandId
set_StartupTime
CommandId
DurationStopEventInfo
<StartTime>k__BackingField
get_StartTime
set_StartTime
StartTime
IdleExecutionEvent
Orcus.StaticCommandManagement.ExecutionEvents
_requiredIdleTime
_executeAtDateTime
_dateTime
_waiter
System.Timers
<Id>k__BackingField
TheTimeHasCome
Marshal
SizeOf
get_TickCount
op_GreaterThanOrEqual
remove_TheTimeHasCome
ToInt32
ElapsedEventHandler
add_Elapsed
Component
WaiterOnElapsed
ElapsedEventArgs
elapsedEventArgs
CanExecute
DateTimeExecutionEvent
get_TotalMilliseconds
get_Interval
Resources
Orcus.Properties
resourceMan
resourceCulture
get_Assembly
get_ResourceManager
get_Culture
set_Culture
GetString
get_AppConfig
get_ConnectEnvironment
EditorBrowsableAttribute
EditorBrowsableState
Culture
AppConfig
ConnectEnvironment
DebuggerNonUserCodeAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
Settings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
SettingsBase
Synchronized
Default
DiFunction
Orcus.Native
value__
SelectDevice
InstallDevice
AssignResources
Properties
FirstTimeSetup
FoundDevice
SelectClassDrivers
ValidateClassDrivers
InstallClassDrivers
CalcDiskSpace
DestroyPrivateData
ValidateDriver
Detect
InstallWizard
DestroyWizardData
PropertyChange
EnableClass
DetectVerify
InstallDeviceFiles
UnRemove
SelectBestCompatDrv
AllowInstall
RegisterDevice
NewDeviceWizardPreSelect
NewDeviceWizardSelect
NewDeviceWizardPreAnalyze
NewDeviceWizardPostAnalyze
NewDeviceWizardFinishInstall
Unused1
InstallInterfaces
DetectCancel
RegisterCoInstallers
AddPropertyPageAdvanced
AddPropertyPageBasic
Reserved1
Troubleshooter
PowerMessageWake
AddRemotePropertyPageAdvanced
UpdateDriverUI
Reserved2
DiGetClassFlags
DIGCF_DEFAULT
DIGCF_PRESENT
DIGCF_ALLCLASSES
DIGCF_PROFILE
DIGCF_DEVICEINTERFACE
FlagsAttribute
NativeMethods
CryptAcquireContext
phProv
pszContainer
pszProvider
dwProvType
dwFlags
CryptCreateHash
phHash
CryptHashData
pbData
dwDataLen
CryptDestroyHash
CryptGetHashParam
dwParam
pdwDataLen
CryptReleaseContext
RegOpenKeyEx
subKey
ulOptions
samDesired
hkResult
OpenProcessToken
ProcessHandle
DesiredAccess
TokenHandle
GetTokenInformation
hToken
tokenInfoClass
TokenInformation
tokeInfoLength
reqLength
ConvertSidToStringSid
pStringSid
ConvertStringSidToSid
BitBlt
nXDest
nYDest
nWidth
nHeight
hdcSrc
CreateDC
lpszDriver
lpszDevice
lpszOutput
lpInitData
DeleteDC
SelectObject
hObject
CreateCompatibleDC
DeleteObject
hObjSource
GetExtendedTcpTable
pTcpTable
dwOutBufLen
ipVersion
tblClass
reserved
GetExtendedUdpTable
GetTickCount64
GetTickCount
GlobalMemoryStatusEx
lpBuffer
LoadLibrary
libraryName
GetProcAddress
procedureName
GetSystemInfo
lpSystemInfo
FreeLibrary
hModule
GetSystemDefaultLCID
CreateProcess
lpApplicationName
lpCommandLine
lpProcessAttributes
lpThreadAttributes
bInheritHandles
dwCreationFlags
lpEnvironment
lpCurrentDirectory
lpStartupInfo
lpProcessInformation
OpenThread
dwDesiredAccess
bInheritHandle
dwThreadId
SuspendThread
hThread
ResumeThread
CloseHandle
SuppressUnmanagedCodeSecurityAttribute
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
GetCompressedFileSizeW
lpFileName
lpFileSizeHigh
GetDiskFreeSpaceW
lpRootPathName
lpSectorsPerCluster
lpBytesPerSector
lpNumberOfFreeClusters
lpTotalNumberOfClusters
SetupDiGetClassDevs
ClassGuid
hwndParent
SetupDiEnumDeviceInfo
DeviceInfoSet
MemberIndex
DeviceInfoData
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryProperty
deviceInfoSet
deviceInfoData
property
propertyRegDataType
propertyBuffer
propertyBufferSize
requiredSize
SetupDiSetClassInstallParams
classInstallParams
classInstallParamsSize
SetupDiCallClassInstaller
installFunction
SHGetSpecialFolderPath
hwndOwner
lpszPath
nFolder
fCreate
SHGetFileInfo
ShellAPI
ShellDll
pszPath
dwFileAttributes
cbSizeFileInfo
uFlags
SHGetLocalizedName
pszResModule
pidsRes
SHCreateItemFromParsingName
shellItem
GetLastInputInfo
EnumDisplaySettings
deviceName
modeNum
devMode
ChangeDisplaySettings
FindWindow
className
windowText
FindWindowEx
parentHandle
childAfter
windowTitle
GetDesktopWindow
wParam
lParam
SendMessageW
SystemParametersInfo
uAction
uParam
lpvParam
fuWinIni
GetWindow
LoadKeyboardLayout
pwszKLID
parentHwnd
childAfterHwnd
GetWindowThreadProcessId
lpdwProcessId
GetForegroundWindow
GetKeyboardLayout
idThread
GetWindowText
EnumThreadWindows
threadId
pfnEnum
ProcessId
GetShellWindow
EnumWindows
lpEnumFunc
GetClassName
lpClassName
nMaxCount
GetDlgItem
nIDDlgItem
SetCursorPos
SendInput
nInputs
pInputs
cbSize
keybd_event
dwExtraInfo
SwapMouseButton
BlockInput
fBlockIt
GetKeyState
ToAscii
uVirtKey
uScanCode
lpbKeyState
lpwTransKey
fuState
lpKeyState
lpChar
GetKeyboardState
pbKeyState
SetWindowsHookEx
hookType
CallNextHookEx
UnhookWindowsHookEx
GetModuleHandle
lpModuleName
SetWinEventHook
eventMin
eventMax
hmodWinEventProc
lpfnWinEventProc
idProcess
UnhookWinEvent
hWinEventHook
GetCursorInfo
CopyIcon
GetIconInfo
piconinfo
SetWindowText
CreateDesktop
lpszDesktop
pDevmode
CloseDesktop
hDesktop
OpenDesktop
fInherit
OpenInputDesktop
SwitchDesktop
GetThreadDesktop
GetProcessWindowStation
EnumDesktops
hwinsta
EnumDesktopWindows
lpString
SetThreadDesktop
GetUserObjectInformation
nIndex
pvInfo
nLength
lpnLengthNeeded
GetWindowRect
lpRect
PrintWindow
nFlags
PostMessage
SetWindowPos
hWndInsertAfter
EnumChildWindows
DestroyIcon
IsImmersiveProcess
hProcess
SetForegroundWindow
nCmdShow
IsIconic
IsWindowVisible
GetDisplayConfigBufferSizes
numPathArrayElements
numModeInfoArrayElements
QueryDisplayConfig
PathInfoArray
ModeInfoArray
currentTopologyId
DisplayConfigGetDeviceInfo
GetGUIThreadInfo
GetWindowInfo
MapVirtualKey
uMapType
EnumDisplayDevices
lpDevice
iDevNum
lpDisplayDevice
ChangeDisplaySettingsEx
lpszDeviceName
lpDevMode
dwflags
AddClipboardFormatListener
RemoveClipboardFormatListener
SetParent
hWndChild
hWndNewParent
memcmp
SRRemoveRestorePoint
NtQueryInformationProcess
processHandle
processInformationClass
processInformation
processInformationLength
returnLength
AssocQueryString
pszAssoc
pszExtra
pszOut
pcchOut
mciSendString
buffer
bufferSize
hwndCallback
memcpy
HookProc
EnumThreadProc
EnumWindowsProc
WinEventDelegate
eventType
idObject
idChild
dwEventThread
dwmsEventTime
EnumDesktopProc
EnumDesktopWindowsProc
desktopHandle
WindowEnumProc
lparam
GUITHREADINFO
ValueType
hwndActive
hwndFocus
hwndCapture
hwndMenuOwner
hwndMoveSize
hwndCaret
rcCaret
InputType
KEYBOARD
HARDWARE
InputUnion
HARDWAREINPUT
wParamL
wParamH
MOUSEINPUT
mouseData
KEYBDINPUT
KEYEVENTF
EXTENDEDKEY
SCANCODE
UNICODE
MOUSEEVENTF
ABSOLUTE
HWHEEL
MOVE_NOCOALESCE
LEFTDOWN
LEFTUP
RIGHTDOWN
RIGHTUP
MIDDLEDOWN
MIDDLEUP
VIRTUALDESK
MapVirtualKeyMapTypes
MAPVK_VK_TO_VSC
MAPVK_VSC_TO_VK
MAPVK_VK_TO_CHAR
MAPVK_VSC_TO_VK_EX
MAPVK_VK_TO_VSC_EX
PropertyChangeParameters
StateChange
HwProfile
Scopes
Global
ConfigSpecific
ConfigGeneral
SPDRP_DEVICEDESC
SPDRP_HARDWAREID
SPDRP_COMPATIBLEIDS
SPDRP_UNUSED0
SPDRP_SERVICE
SPDRP_UNUSED1
SPDRP_UNUSED2
SPDRP_CLASS
SPDRP_CLASSGUID
SPDRP_DRIVER
SPDRP_CONFIGFLAGS
SPDRP_MFG
SPDRP_FRIENDLYNAME
SPDRP_LOCATION_INFORMATION
SPDRP_PHYSICAL_DEVICE_OBJECT_NAME
SPDRP_CAPABILITIES
SPDRP_UI_NUMBER
SPDRP_UPPERFILTERS
SPDRP_LOWERFILTERS
SPDRP_BUSTYPEGUID
SPDRP_LEGACYBUSTYPE
SPDRP_BUSNUMBER
SPDRP_ENUMERATOR_NAME
SPDRP_SECURITY
SPDRP_SECURITY_SDS
SPDRP_DEVTYPE
SPDRP_EXCLUSIVE
SPDRP_CHARACTERISTICS
SPDRP_ADDRESS
SPDRP_UI_NUMBER_DESC_FORMAT
SPDRP_DEVICE_POWER_DATA
SPDRP_REMOVAL_POLICY
SPDRP_REMOVAL_POLICY_HW_DEFAULT
SPDRP_REMOVAL_POLICY_OVERRIDE
SPDRP_INSTALL_STATE
SPDRP_LOCATION_PATHS
SP_DEVINFO_DATA
DevInst
Reserved
StateChangeAction
Enable
Disable
PropChange
WINDOWINFO
rcWindow
rcClient
dwStyle
dwExStyle
dwWindowStatus
cxWindowBorders
cyWindowBorders
atomWindowType
wCreatorVersion
filler
ALG_CLASS_HASH
ALG_SID_SHA1
ALG_ID
CALG_MD5
CALG_SHA1
AssocF
Init_NoRemapCLSID
Init_ByExeName
Open_ByExeName
Init_DefaultToStar
Init_DefaultToFolder
NoUserSettings
NoTruncate
Verify
RemapRunDll
NoFixUps
IgnoreBaseClass
Init_IgnoreUnknown
Init_FixedProgId
IsProtocol
InitForFile
AssocStr
Executable
FriendlyDocName
FriendlyAppName
NoOpen
ShellNewValue
DDECommand
DDEIfExec
DDEApplication
DDETopic
InfoTip
QuickTip
TileInfo
ContentType
DefaultIcon
ShellExtension
DropTarget
DelegateExecute
SupportedUriProtocols
GetWindow_Cmd
GW_HWNDFIRST
GW_HWNDLAST
GW_HWNDNEXT
GW_HWNDPREV
GW_OWNER
GW_CHILD
GW_ENABLEDPOPUP
HashParameters
HP_ALGID
HP_HASHVAL
HP_HASHSIZE
HookType
WH_JOURNALRECORD
WH_JOURNALPLAYBACK
WH_KEYBOARD
WH_GETMESSAGE
WH_CALLWNDPROC
WH_CBT
WH_SYSMSGFILTER
WH_MOUSE
WH_HARDWARE
WH_DEBUG
WH_SHELL
WH_FOREGROUNDIDLE
WH_CALLWNDPROCRET
WH_KEYBOARD_LL
WH_MOUSE_LL
ICONINFO
xHotspot
yHotspot
hbmMask
hbmColor
IEAutoComplteSecretHeader
dwSize
dwSecretInfoSize
dwSecretSize
IESecretHeader
IESecretInfoHeader
dwIdHeader
dwTotalSecrets
unknown
unknownZero
KeyboardHookStruct
VirtualKeyCode
ScanCode
ExtraInfo
LASTINPUTINFO
dwTime
MEMORYSTATUSEX
dwLength
dwMemoryLoad
ullTotalPhys
ullAvailPhys
ullTotalPageFile
ullAvailPageFile
ullTotalVirtual
ullAvailVirtual
ullAvailExtendedVirtual
MIB_TCPROW_OWNER_PID
localAddr
localPort1
localPort2
localPort3
localPort4
remoteAddr
remotePort1
remotePort2
remotePort3
remotePort4
owningPid
ToUInt16
get_LocalPort
get_RemotePort
LocalPort
RemotePort
MIB_TCPTABLE_OWNER_PID
dwNumEntries
MIB_UDPROW_OWNER_PID
MIB_UDPTABLE_OWNER_PID
POINTAPI
POINTL
ProcessBasicInformation
PebBaseAddress
Reserved2_0
Reserved2_1
UniqueProcessId
InheritedFromUniqueProcessId
PROCESS_INFORMATION
dwProcessId
Bottom
bottom
get_Left
get_Top
get_Right
get_Bottom
set_Height
set_Width
GetHashCode
get_CurrentCulture
IFormatProvider
Height
Location
SecretEntry
dwOffset
SecretId
SecretId1
SecretId2
SecretId3
SecretId4
SecretId5
SecretId6
SecretId7
SetWindowPosFlags
AsynchronousWindowPosition
DeferErase
DrawFrame
FrameChanged
HideWindow
DoNotActivate
DoNotCopyBits
IgnoreMove
DoNotChangeOwnerZOrder
DoNotRedraw
DoNotReposition
DoNotSendChangingEvent
IgnoreResize
IgnoreZOrder
SHFILEINFO
dwAttributes
szDisplayName
szTypeName
ShowWindowCommands
Normal
ShowMinimized
Maximize
ShowMaximized
ShowNoActivate
Minimize
ShowMinNoActive
ShowNA
Restore
ShowDefault
ForceMinimize
STARTUPINFO
lpReserved
lpDesktop
lpTitle
dwXSize
dwYSize
dwXCountChars
dwYCountChars
dwFillAttribute
wShowWindow
cbReserved2
lpReserved2
hStdInput
hStdOutput
hStdError
SYSTEM_INFO
dwOemId
dwPageSize
lpMinimumApplicationAddress
lpMaximumApplicationAddress
dwActiveProcessorMask
dwNumberOfProcessors
dwProcessorType
dwAllocationGranularity
wProcessorLevel
wProcessorRevision
TCP_TABLE_CLASS
TCP_TABLE_BASIC_LISTENER
TCP_TABLE_BASIC_CONNECTIONS
TCP_TABLE_BASIC_ALL
TCP_TABLE_OWNER_PID_LISTENER
TCP_TABLE_OWNER_PID_CONNECTIONS
TCP_TABLE_OWNER_PID_ALL
TCP_TABLE_OWNER_MODULE_LISTENER
TCP_TABLE_OWNER_MODULE_CONNECTIONS
TCP_TABLE_OWNER_MODULE_ALL
TernaryRasterOperations
SRCCOPY
SRCPAINT
SRCAND
SRCINVERT
SRCERASE
NOTSRCCOPY
NOTSRCERASE
MERGECOPY
MERGEPAINT
PATCOPY
PATPAINT
PATINVERT
DSTINVERT
BLACKNESS
WHITENESS
CAPTUREBLT
CURSORINFO
hCursor
ptScreenPos
ThreadAccess
TERMINATE
SUSPEND_RESUME
GET_CONTEXT
SET_CONTEXT
SET_INFORMATION
QUERY_INFORMATION
SET_THREAD_TOKEN
IMPERSONATE
DIRECT_IMPERSONATION
TOKEN_INFORMATION_CLASS
TokenUser
TokenGroups
TokenPrivileges
TokenOwner
TokenPrimaryGroup
TokenDefaultDacl
TokenSource
TokenType
TokenImpersonationLevel
TokenStatistics
TokenRestrictedSids
TokenSessionId
TOKEN_USER
UDP_TABLE_CLASS
UDP_TABLE_BASIC
UDP_TABLE_OWNER_PID
UDP_TABLE_OWNER_MODULE
CREATE
DESTROY
ACTIVATE
SETFOCUS
KILLFOCUS
ENABLE
SETREDRAW
SETTEXT
GETTEXT
GETTEXTLENGTH
QUERYENDSESSION
QUERYOPEN
ENDSESSION
ERASEBKGND
SYSCOLORCHANGE
SHOWWINDOW
WININICHANGE
SETTINGCHANGE
DEVMODECHANGE
ACTIVATEAPP
FONTCHANGE
TIMECHANGE
CANCELMODE
SETCURSOR
MOUSEACTIVATE
CHILDACTIVATE
QUEUESYNC
GETMINMAXINFO
PAINTICON
ICONERASEBKGND
NEXTDLGCTL
SPOOLERSTATUS
DRAWITEM
MEASUREITEM
DELETEITEM
VKEYTOITEM
CHARTOITEM
SETFONT
GETFONT
SETHOTKEY
GETHOTKEY
QUERYDRAGICON
COMPAREITEM
GETOBJECT
COMPACTING
COMMNOTIFY
ObsoleteAttribute
WINDOWPOSCHANGING
WINDOWPOSCHANGED
COPYDATA
CANCELJOURNAL
NOTIFY
INPUTLANGCHANGEREQUEST
INPUTLANGCHANGE
USERCHANGED
NOTIFYFORMAT
CONTEXTMENU
STYLECHANGING
STYLECHANGED
DISPLAYCHANGE
GETICON
SETICON
NCCREATE
NCDESTROY
NCCALCSIZE
NCHITTEST
NCPAINT
NCACTIVATE
GETDLGCODE
SYNCPAINT
NCMOUSEMOVE
NCLBUTTONDOWN
NCLBUTTONUP
NCLBUTTONDBLCLK
NCRBUTTONDOWN
NCRBUTTONUP
NCRBUTTONDBLCLK
NCMBUTTONDOWN
NCMBUTTONUP
NCMBUTTONDBLCLK
NCXBUTTONDOWN
NCXBUTTONUP
NCXBUTTONDBLCLK
INPUT_DEVICE_CHANGE
KEYFIRST
KEYDOWN
DEADCHAR
SYSKEYDOWN
SYSKEYUP
SYSCHAR
SYSDEADCHAR
UNICHAR
KEYLAST
IME_STARTCOMPOSITION
IME_ENDCOMPOSITION
IME_COMPOSITION
IME_KEYLAST
INITDIALOG
COMMAND
SYSCOMMAND
HSCROLL
VSCROLL
INITMENU
INITMENUPOPUP
MENUSELECT
MENUCHAR
ENTERIDLE
MENURBUTTONUP
MENUDRAG
MENUGETOBJECT
UNINITMENUPOPUP
MENUCOMMAND
CHANGEUISTATE
UPDATEUISTATE
QUERYUISTATE
CTLCOLORMSGBOX
CTLCOLOREDIT
CTLCOLORLISTBOX
CTLCOLORBTN
CTLCOLORDLG
CTLCOLORSCROLLBAR
CTLCOLORSTATIC
MOUSEFIRST
MOUSEMOVE
LBUTTONDOWN
LBUTTONUP
LBUTTONDBLCLK
RBUTTONDOWN
RBUTTONUP
RBUTTONDBLCLK
MBUTTONDOWN
MBUTTONUP
MBUTTONDBLCLK
MOUSEWHEEL
XBUTTONDOWN
XBUTTONUP
XBUTTONDBLCLK
MOUSEHWHEEL
MOUSELAST
PARENTNOTIFY
ENTERMENULOOP
EXITMENULOOP
NEXTMENU
SIZING
CAPTURECHANGED
MOVING
POWERBROADCAST
DEVICECHANGE
MDICREATE
MDIDESTROY
MDIACTIVATE
MDIRESTORE
MDINEXT
MDIMAXIMIZE
MDITILE
MDICASCADE
MDIICONARRANGE
MDIGETACTIVE
MDISETMENU
ENTERSIZEMOVE
EXITSIZEMOVE
DROPFILES
MDIREFRESHMENU
IME_SETCONTEXT
IME_NOTIFY
IME_CONTROL
IME_COMPOSITIONFULL
IME_SELECT
IME_CHAR
IME_REQUEST
IME_KEYDOWN
IME_KEYUP
MOUSEHOVER
MOUSELEAVE
NCMOUSEHOVER
NCMOUSELEAVE
WTSSESSION_CHANGE
TABLET_FIRST
TABLET_LAST
RENDERFORMAT
RENDERALLFORMATS
DESTROYCLIPBOARD
DRAWCLIPBOARD
PAINTCLIPBOARD
VSCROLLCLIPBOARD
SIZECLIPBOARD
ASKCBFORMATNAME
CHANGECBCHAIN
HSCROLLCLIPBOARD
QUERYNEWPALETTE
PALETTEISCHANGING
PALETTECHANGED
HOTKEY
PRINTCLIENT
APPCOMMAND
THEMECHANGED
CLIPBOARDUPDATE
DWMCOMPOSITIONCHANGED
DWMNCRENDERINGCHANGED
DWMCOLORIZATIONCOLORCHANGED
DWMWINDOWMAXIMIZEDCHANGE
GETTITLEBARINFOEX
HANDHELDFIRST
HANDHELDLAST
AFXFIRST
AFXLAST
PENWINFIRST
PENWINLAST
CPL_LAUNCH
CPL_LAUNCHED
SYSTIMER
HSHELL_ACCESSIBILITYSTATE
HSHELL_ACTIVATESHELLWINDOW
HSHELL_APPCOMMAND
HSHELL_GETMINRECT
HSHELL_LANGUAGE
HSHELL_REDRAW
HSHELL_TASKMAN
HSHELL_WINDOWCREATED
HSHELL_WINDOWDESTROYED
HSHELL_WINDOWACTIVATED
HSHELL_WINDOWREPLACED
_SID_AND_ATTRIBUTES
Attributes
HResult
Orcus.Native.Shell
InvalidArguments
OutOfMemory
NoInterface
ElementNotFound
TypeElementNotFound
NoObject
Win32ErrorCanceled
Canceled
ResourceInUse
AccessDenied
IShellItem
BindToHandler
GetDisplayName
sigdnName
ppszName
GetAttributes
sfgaoMask
psfgaoAttribs
Compare
piOrder
GuidAttribute
InterfaceTypeAttribute
ComInterfaceType
IShellItemImageFactory
GetImage
NativeSize
RGBQUAD
rgbBlue
rgbGreen
rgbRed
rgbReserved
NORMALDISPLAY
PARENTRELATIVEPARSING
PARENTRELATIVEFORADDRESSBAR
DESKTOPABSOLUTEPARSING
PARENTRELATIVEEDITING
DESKTOPABSOLUTEEDITING
FILESYSPATH
ThumbnailOptions
BiggerSizeOk
InMemoryOnly
IconOnly
ThumbnailOnly
InCacheOnly
DEVMODE
Orcus.Native.Display
CCHDEVICENAME
CCHFORMNAME
dmDeviceName
dmSpecVersion
dmDriverVersion
dmSize
dmDriverExtra
dmFields
dmOrientation
dmPaperSize
dmPaperLength
dmPaperWidth
dmScale
dmCopies
dmDefaultSource
dmPrintQuality
dmPosition
dmDisplayOrientation
dmDisplayFixedOutput
dmColor
dmDuplex
dmYResolution
dmTTOption
dmCollate
dmFormName
dmLogPixels
dmBitsPerPel
dmPelsWidth
dmPelsHeight
dmDisplayFlags
dmDisplayFrequency
DisplayDeviceStateFlags
AttachedToDesktop
MultiDriver
PrimaryDevice
MirroringDriver
VGACompatible
Removable
ModesPruned
Remote
Disconnect
DisplaySettingsFlags
CDS_NONE
CDS_UPDATEREGISTRY
CDS_TEST
CDS_FULLSCREEN
CDS_GLOBAL
CDS_SET_PRIMARY
CDS_VIDEOPARAMETERS
CDS_ENABLE_UNSAFE_MODES
CDS_DISABLE_UNSAFE_MODES
CDS_RESET
CDS_RESET_EX
CDS_NORESET
DISPLAY_DEVICE
DeviceName
DeviceString
StateFlags
DeviceID
DeviceKey
DISP_CHANGE
Successful
BadMode
NotUpdated
BadFlags
BadParam
BadDualView
Orientation
PaperSize
PaperLength
PaperWidth
Position
DisplayOrientation
Copies
DefaultSource
PrintQuality
Duplex
YResolution
TTOption
Collate
FormName
LogPixels
BitsPerPixel
PelsWidth
PelsHeight
DisplayFlags
DisplayFrequency
ICMMethod
ICMIntent
MediaType
DitherType
PanningWidth
PanningHeight
DisplayFixedOutput
LowPart
HighPart
DISPLAYCONFIG_2DREGION
DISPLAYCONFIG_DEVICE_INFO_HEADER
adapterId
DISPLAYCONFIG_DEVICE_INFO_TYPE
DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAME
DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAME
DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODE
DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME
DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE
DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_BASE_TYPE
DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32
DISPLAYCONFIG_MODE_INFO
infoType
modeInfo
DISPLAYCONFIG_MODE_INFO_TYPE
DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE
DISPLAYCONFIG_MODE_INFO_TYPE_TARGET
DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32
DISPLAYCONFIG_MODE_INFO_UNION
targetMode
sourceMode
DISPLAYCONFIG_PATH_INFO
sourceInfo
targetInfo
DISPLAYCONFIG_PATH_SOURCE_INFO
modeInfoIdx
statusFlags
DISPLAYCONFIG_PATH_TARGET_INFO
outputTechnology
rotation
scaling
refreshRate
scanLineOrdering
targetAvailable
DISPLAYCONFIG_PIXELFORMAT
DISPLAYCONFIG_PIXELFORMAT_8BPP
DISPLAYCONFIG_PIXELFORMAT_16BPP
DISPLAYCONFIG_PIXELFORMAT_24BPP
DISPLAYCONFIG_PIXELFORMAT_32BPP
DISPLAYCONFIG_PIXELFORMAT_NONGDI
DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32
DISPLAYCONFIG_RATIONAL
Numerator
Denominator
DISPLAYCONFIG_ROTATION
DISPLAYCONFIG_ROTATION_IDENTITY
DISPLAYCONFIG_ROTATION_ROTATE90
DISPLAYCONFIG_ROTATION_ROTATE180
DISPLAYCONFIG_ROTATION_ROTATE270
DISPLAYCONFIG_ROTATION_FORCE_UINT32
DISPLAYCONFIG_SCALING
DISPLAYCONFIG_SCALING_IDENTITY
DISPLAYCONFIG_SCALING_CENTERED
DISPLAYCONFIG_SCALING_STRETCHED
DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX
DISPLAYCONFIG_SCALING_CUSTOM
DISPLAYCONFIG_SCALING_PREFERRED
DISPLAYCONFIG_SCALING_FORCE_UINT32
DISPLAYCONFIG_SCANLINE_ORDERING
DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED
DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE
DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED
DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST
DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST
DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32
DISPLAYCONFIG_SOURCE_MODE
pixelFormat
position
DISPLAYCONFIG_TARGET_DEVICE_NAME
header
edidManufactureId
edidProductCodeId
connectorInstance
monitorFriendlyDeviceName
monitorDevicePath
DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS
DISPLAYCONFIG_TARGET_MODE
targetVideoSignalInfo
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD15
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_MIRACAST
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INTERNAL
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_FORCE_UINT32
DISPLAYCONFIG_VIDEO_SIGNAL_INFO
pixelRate
hSyncFreq
vSyncFreq
activeSize
totalSize
videoStandard
QUERY_DEVICE_CONFIG_FLAGS
QDC_ALL_PATHS
QDC_ONLY_ACTIVE_PATHS
QDC_DATABASE_CURRENT
ClientOperator
Orcus.Core
_instance
SyncRoot
_toolBase
IToolBase
_pathInformation
IPathInformation
_databaseConnection
<FrameworkVersion>k__BackingField
FrameworkVersion
get_IsAdministrator
get_ClientPath
get_ToolBase
get_DatabaseConnection
get_PathInformation
get_FrameworkVersion
get_Is64BitProcess
Orcus.Plugins.IClientOperator.get_DatabaseConnection
IDatabaseConnection
get_IsInstalled
GetBuilderProperty
Instance
IsAdministrator
ClientPath
ToolBase
DatabaseConnection
PathInformation
Is64BitProcess
Orcus.Plugins.IClientOperator.DatabaseConnection
IsInstalled
LibraryLoader
<LoadedLibraries>k__BackingField
PortableLibrary
get_LoadedLibraries
set_LoadedLibraries
portableLibrary
sourceStream
length
IGrouping`2
System.Text.RegularExpressions
SearchOption
GroupBy
get_Groups
GroupCollection
Capture
OrderByDescending
IOrderedEnumerable`1
MoveTo
CleanupLibraries
GetFileNameWithoutExtension
RemoveAt
GetLibraryPath
library
EnumHelper
GetUniqueFlags
CheckLibraries
libraries
hashes
GetAttributeOfType
PortableLibraryNameAttribute
GetFilenameByLibrary
LoadedLibraries
PortableLibraryMatch
<Match>k__BackingField
<FileInfo>k__BackingField
get_Match
get_FileInfo
<CleanupLibraries>b__0
superiorFile
<>9__4
<CleanupLibraries>b__4
<>9__9_1
<>9__9_2
<>9__9_3
<>9__11_0
<>9__11_3
<>9__11_4
<CleanupLibraries>b__9_1
<CleanupLibraries>b__9_2
<CleanupLibraries>b__9_3
<GetLibraryPath>b__10_1
<GetLibraryPath>b__10_2
<GetLibraryPath>b__10_3
<CheckLibraries>b__11_0
<CheckLibraries>b__11_3
<CheckLibraries>b__11_4
<GetLibraryPath>b__0
<>c__DisplayClass11_0
<CheckLibraries>b__1
<>c__DisplayClass11_1
<CheckLibraries>b__2
UninstallHelper
UninstallAndClose
RemoveOtherStuff
RemovePrivateFiles
RemoveAllDependencies
PrepareOrcusFileToRemove
GetApplicationDeletingScript
UninstallPlugins
AdministrationConnection
Orcus.Connection
_commandSelector
_connectionInfo
SendFailed
IConnectionInitializer
connection
add_SendFailed
remove_SendFailed
SendingType
Orcus.Shared.Communication
ToUInt32
PackageReceived
SendPackage
ResponseType
package
responseType
ConnectionInfoOnFailed
Client
_random
Random
_isDisposed
<IsSearching>k__BackingField
<Connection>k__BackingField
get_IsSearching
set_IsSearching
get_Connection
set_Connection
Orcus.Plugins.IClientInfo.get_ServerConnection
Orcus.Plugins.IClientInfo.get_ClientOperator
get_ClientOperator
add_Connected
remove_Connected
add_Disconnected
remove_Disconnected
BeginConnect
StopConnect
IpAddressInfo
SslStream
System.Net.Security
BinaryReader
ConnectionBuilderProperty
get_IpAddresses
CanTryConnect
TryConnect
ReconnectDelayProperty
get_Delay
Connect
Connection_Disconnected
PrimitiveProtocol
ReadByte
ReadInt32
ReadBytes
binaryReader
fileName
ProxyBuilderProperty
IProxyClient
Starksoft.Aspen.Proxy
get_ProxyOption
ProxyOption
Socks4ProxyClient
Socks4aProxyClient
Socks5ProxyClient
ArgumentException
set_ProxyHost
set_ProxyPort
get_Ip
CreateConnection
get_ProxyType
get_ProxyAddress
get_ProxyPort
get_AsyncWaitHandle
EndConnect
GetStream
NetworkStream
RemoteCertificateValidationCallback
get_MachineName
AuthenticateAsClient
AuthenticationException
System.Security.Authentication
tcpClient
stream
ipAddressInfo
UserCertificateValidationCallback
X509Certificate
System.Security.Cryptography.X509Certificates
X509Chain
SslPolicyErrors
certificate
sslPolicyErrors
KeyDatabase
GetKey
ClientTagBuilderProperty
get_ClientTag
Authenticate
IsSearching
Connection
Orcus.Plugins.IClientInfo.ServerConnection
Orcus.Plugins.IClientInfo.ClientOperator
TryConnectDelegate
get_OverwriteTryConnect
<Connect>b__27_0
InformationCollector
_basicComputerInformation
BasicComputerInformation
PlatformID
get_UserName
set_UserName
set_IsAdministrator
set_ClientConfig
set_ClientVersion
set_ApiVersion
set_ClientPath
set_FrameworkVersion
get_InstalledUICulture
get_TwoLetterISOLanguageName
set_Language
get_LCID
get_Language
RegionInfo
get_TwoLetterISORegionName
get_OSVersion
OperatingSystem
get_Platform
set_OperatingSystemName
get_OperatingSystemName
set_OperatingSystemType
OSType
get_VersionString
set_MacAddress
set_IsServiceRunning
PluginInfo
set_Plugins
LoadablePlugin
set_LoadablePlugins
set_ActiveCommands
GetAllBuilderPropertyTypes
SendInformation
OfType
IEnumerable
GetOsFriendlyName
GetSubKeyNames
get_InvariantCulture
Double
GetFrameworkVersion
Append
DriveInfo
GetDrives
Replace
RegistryKeyPermissionCheck
RegistryValueOptions
GetHardwareId
NetworkInterface
System.Net.NetworkInformation
GetAllNetworkInterfaces
GetPhysicalAddress
PhysicalAddress
GetAddressBytes
get_Speed
GetMacAddress
<>9__1_0
<>9__1_1
<>9__1_2
<>9__1_3
set_Guid
get_PluginVersion
set_Version
set_IsLoaded
<SendInformation>b__1_0
<SendInformation>b__1_1
get_Success
<SendInformation>b__1_2
<SendInformation>b__1_3
PluginReceiver
_md5Hash
_tempPath
<Guid>k__BackingField
<AdministrationId>k__BackingField
<Version>k__BackingField
<FileStream>k__BackingField
administrationId
md5Hash
version
get_AdministrationId
get_Version
get_FileStream
get_Length
ImportPlugin
AdministrationId
FileTransferEventArgs
ServerConnection
_readByteDelegate
Func`1
_sslStream
_onlineCheckTimer
OnlineCheckInterval
<AdministrationConnections>k__BackingField
<SendLock>k__BackingField
<BinaryReader>k__BackingField
<BinaryWriter>k__BackingField
<TcpClient>k__BackingField
FileTransferAccepted
FileTransferCompleted
StaticCommandPluginReceived
sslStream
reader
writer
databaseConnection
OnlineCheckTimerCallback
get_AdministrationConnections
get_SendLock
get_BinaryReader
get_BinaryWriter
get_TcpClient
add_FileTransferAccepted
remove_FileTransferAccepted
add_FileTransferCompleted
remove_FileTransferCompleted
add_StaticCommandPluginReceived
remove_StaticCommandPluginReceived
ServerPackage
set_Data
set_ServerPackageType
RedirectPackage
set_Administration
set_RedirectPackage
ObjectDisposedException
serverPackageType
redirectPackage
Orcus.Shared.Compression
Compress
PushExceptions
exceptions
ToByteArray
InitializeFileTransfer
SendBytes
FromClientPackage
FromAdministrationPackage
PortableLibraryInfo
ReadUInt16
get_ASCII
get_BaseStream
get_Library
EndRead
asyncResult
JpgCompression
Orcus.Shared.Utilities.Compression
Buffer
BlockCopy
ProcessResponse
SendCachedPackages
<ProcessResponse>b__44_0
AdministrationConnections
SendLock
<>c__DisplayClass43_0
<EndRead>b__0
<EndRead>b__1
<>c__DisplayClass43_1
<>c__DisplayClass44_0
closingSessionId
<ProcessResponse>b__1
StaticCommandPluginReceivedEventArgs
Orcus.Connection.Args
<PluginResourceId>k__BackingField
pluginResourceId
PluginResourceId
SettingsData
Orcus.Config
SETTINGS
PLUGINSETTINGS
SIGNATURE
Consts
<KeyLogFile>k__BackingField
<ExceptionFile>k__BackingField
<PluginsDirectory>k__BackingField
<ApplicationPath>k__BackingField
<FileTransferTempDirectory>k__BackingField
<PotentialCommandsDirectory>k__BackingField
<StaticCommandPluginsDirectory>k__BackingField
<SendToServerPackages>k__BackingField
<LibrariesDirectory>k__BackingField
DataFolderBuilderProperty
get_ExecutablePath
get_KeyLogFile
get_ExceptionFile
get_PluginsDirectory
get_ApplicationPath
get_FileTransferTempDirectory
get_PotentialCommandsDirectory
get_StaticCommandPluginsDirectory
get_SendToServerPackages
get_LibrariesDirectory
Orcus.Plugins.IPathInformation.get_ExceptionFile
Orcus.Plugins.IPathInformation.get_PluginsDirectory
Orcus.Plugins.IPathInformation.get_ApplicationPath
Orcus.Plugins.IPathInformation.get_FileTransferTempDirectory
Orcus.Plugins.IPathInformation.get_PotentialCommandsDirectory
Orcus.Plugins.IPathInformation.get_StaticCommandPluginsDirectory
Orcus.Plugins.IPathInformation.get_SendToServerPackages
Orcus.Plugins.IPathInformation.get_KeyLogFile
Orcus.Plugins.IPathInformation.get_LibrariesDirectory
KeyLogFile
ExceptionFile
PluginsDirectory
ApplicationPath
FileTransferTempDirectory
PotentialCommandsDirectory
StaticCommandPluginsDirectory
SendToServerPackages
LibrariesDirectory
Orcus.Plugins.IPathInformation.ExceptionFile
Orcus.Plugins.IPathInformation.PluginsDirectory
Orcus.Plugins.IPathInformation.ApplicationPath
Orcus.Plugins.IPathInformation.FileTransferTempDirectory
Orcus.Plugins.IPathInformation.PotentialCommandsDirectory
Orcus.Plugins.IPathInformation.StaticCommandPluginsDirectory
Orcus.Plugins.IPathInformation.SendToServerPackages
Orcus.Plugins.IPathInformation.KeyLogFile
Orcus.Plugins.IPathInformation.LibrariesDirectory
_settings
_mutex
<ClientConfig>k__BackingField
StringReader
TextReader
get_ClientConfig
get_Settings
Orcus.Shared.Encryption
Decrypt
GetPluginSettings
requiredTypes
GetDecryptedSettings
CancellationTokenEx
Orcus.Utilities
_cancelAction
_cancelLock
<IsCanceled>k__BackingField
cancelAction
get_IsCanceled
set_IsCanceled
Cancel
IsCanceled
ClipboardNotification
_clipboardChangeEventHandler
EventLock
Formats
SetApartmentState
ApartmentState
add_ClipboardUpdate
remove_ClipboardUpdate
IDataObject
ClipboardFormat
Orcus.Shared.Commands.ClipboardManager
Clipboard
GetDataObject
OnClipboardUpdate
GetDataPresent
GetClipboardFormat
dataObject
GetNames
ClipboardUpdate
OnClipboardChangeEventHandler
format
NotificationForm
HWND_MESSAGE
SetVisibleCore
get_Msg
WndProc
<add_ClipboardUpdate>b__6_0
<remove_ClipboardUpdate>b__7_0
ClipboardChangedEventArgs
WindowHelper
desktopWindow
<>c__DisplayClass0_0
shelldllDefViewParent
shelldllDefView
sysListView32
<GetDesktopWindow>b__0
DesktopWindow
ProgMan
SHELLDLL_DefViewParent
SHELLDLL_DefView
SysListView32
AuthenticodeTools
WinVerifyTrust
pgActionID
pWinTrustData
AllocHGlobal
StructureToPtr
IsTrusted
WINTRUST_FILE_INFO
cbStruct
pcwszFilePath
pgKnownSubject
subject
DestroyStructure
FreeHGlobal
AllocMethod
HGlobal
CoTaskMem
UnionChoice
Catalog
Signer
UiChoice
NoGood
RevocationCheckFlags
WholeChain
StateAction
Ignore
AutoCache
AutoCacheFlush
TrustProviderFlags
UseIE4Trust
NoIE4Chain
NoPolicyUsage
RevocationCheckNone
RevocationCheckEndCert
RevocationCheckChain
RecovationCheckChainExcludeRoot
HashOnly
UseDefaultOSVerCheck
LifetimeSigning
UIContext
WINTRUST_DATA
pPolicyCallbackData
pSIPCallbackData
dwUIChoice
fdwRevocationChecks
dwUnionChoice
pInfoStruct
dwStateAction
hWVTStateData
pwszURLReference
dwProvFlags
dwUIContext
PtrToStructure
UnmanagedPointer
m_meth
Finalize
FreeCoTaskMem
SuppressFinalize
CoreHelper
get_Major
get_RunningOnXP
get_RunningOnXPOrGreater
get_RunningOnVista
get_RunningOnVistaOrGreater
get_RunningOnWin7
CompareTo
get_RunningOnWin7OrGreater
get_RunningOnWin8
get_RunningOnWin8OrGreater
get_RunningOnWin8d1
get_RunningOnWin8d1OrGreater
get_RunningOnWin10
get_RunningOnWin10OrGreater
RunningOnXP
RunningOnXPOrGreater
RunningOnVista
RunningOnVistaOrGreater
RunningOnWin7
RunningOnWin7OrGreater
RunningOnWin8
RunningOnWin8OrGreater
RunningOnWin8d1
RunningOnWin8d1OrGreater
RunningOnWin10
RunningOnWin10OrGreater
CsvWriter
_streamWriter
<ReplaceCarriageReturnsAndLineFeedsFromFieldValues>k__BackingField
<CarriageReturnAndLineFeedReplacement>k__BackingField
get_ReplaceCarriageReturnsAndLineFeedsFromFieldValues
set_ReplaceCarriageReturnsAndLineFeedsFromFieldValues
get_CarriageReturnAndLineFeedReplacement
set_CarriageReturnAndLineFeedReplacement
WriteCsv
CsvFile
Orcus.Shared.Csv
csvFile
filePath
encoding
CsvRecord
Headers
Records
CsvRecords
Fields
WriteToStream
IList`1
ICollection`1
WriteRecord
fields
ReplaceCarriageReturnsAndLineFeedsFromFieldValues
CarriageReturnAndLineFeedReplacement
Display
DMDO_DEFAULT
DMDO_90
DMDO_180
DMDO_270
ENUM_CURRENT_SETTINGS
UInt32
Rotate
displayNumber
orientation
RotateAllScreens
ResetAllRotations
Orientations
DEGREES_CW_0
DEGREES_CW_90
DEGREES_CW_180
DEGREES_CW_270
ErrorReporter
_errorFile
_fileLock
<IsDataAvailable>k__BackingField
ExceptionsAvailable
get_IsDataAvailable
set_IsDataAvailable
add_ExceptionsAvailable
remove_ExceptionsAvailable
ReflectionTypeLoadException
get_StackTrace
AppendLine
get_LoaderExceptions
Func`3
Aggregate
GetExceptionStackTrace
exception
set_Message
set_StackTrace
set_ErrorType
set_Timestamp
GetTotalMemory
set_ProcessMemory
set_ProcessPath
get_Is64BitOperatingSystem
set_Is64BitSystem
set_Is64BitProcess
set_RuntimeVersion
set_State
set_TotalMemory
set_AvailableMemory
set_OsName
get_OsName
GetDirectoryName
Convert
ToBase64String
ReportError
StreamReader
ReadLine
FromBase64String
get_EndOfStream
GetData
ExceptionSent
IsDataAvailable
<>c__DisplayClass13_0
<GetExceptionStackTrace>b__0
builder
exception1
ExceptionUtilities
EatExceptions
EatExceptionsNull
action
FileUtilities
ExtractAssociatedIcon
ToBitmap
ImageFormat
get_Png
GetIconFromProcess
ManagementExtensions
TryGetProperty
managementObject
propertyName
ToDateTimeSafe
dmtfDate
NotepadHelper
WaitForInputIdle
get_MainWindowHandle
ShowMessage
ParentProcessUtilities
GetParentProcess
handle
ProcessExtensions
GetProcesses
GetProcessByFilename
ProxyHelper
StartsWith
GetSystemProxy
ipAddress
ResourceHelper
FileNotFoundException
WriteGZippedResourceToFile
resourceName
ScreenExtensions
ERROR_SUCCESS
Win32Exception
MonitorFriendlyName
targetId
GetAllMonitorsFriendlyNames
GetDefaultScreenNames
GetDeviceFriendlyName
screen
get_DeviceName
GetScreensWithName
<GetDefaultScreenNames>b__3_0
ScreenHelper
get_PrimaryScreen
CopyFromScreen
CopyPixelOperation
TakeScreenshot
TimeoutEx
InfiniteTimeSpan
WindowsIdentity
System.Security.Principal
_isAdministrator
GetCurrent
get_UserIdentity
WindowsPrincipal
IsInRole
WindowsBuiltInRole
IsUserAdministrator
UserIdentity
ActiveWindowChangedEventArgs
Orcus.Utilities.KeyLogger
<Title>k__BackingField
get_Title
ActiveWindowHook
_hookDelegate
_hookHandleTitleChange
_hookHandleWinChange
_lastWindowTitle
ActiveWindowChanged
WINEVENT_OUTOFCONTEXT
EVENT_SYSTEM_FOREGROUND
EVENT_OBJECT_NAMECHANGE
GetLastWin32Error
add_ActiveWindowChanged
remove_ActiveWindowChanged
RaiseOne
WinEventProc
GetActiveWindowTitle
KeyboardHook
WM_KEYDOWN
WM_SYSKEYDOWN
WM_KEYUP
WM_SYSKEYUP
_keyboardDelegate
_keyboardHookHandle
_keyProcessing
StringDown
StringUp
KeyDown
KeyEventHandler
_keyProcessing_StringDown
_keyProcessing_StringUp
add_StringDown
remove_StringDown
add_StringUp
remove_StringUp
add_KeyDown
remove_KeyDown
add_KeyUp
remove_KeyUp
KeyEventArgs
KeyboardHookProc
get_ModuleName
MaxLogSize
_activeWindowHook
_keyboardHook
_keyLog
KeyLog
Orcus.Shared.Commands.Keylogger
_logFile
add_Saved
TryPushKeyLog
_keyLog_Saved
WindowChanged
_activeWindowHook_ActiveWindowChanged
SpecialKeyType
KeyLogEntry
SpecialKey
StandardKey
WriteSpecialKey
_keyboardHook_StringUp
WriteString
_keyboardHook_StringDown
CheckSize
NormalText
get_LogEntries
DataMode
get_KeyLog
PushFile
PushKeyLog
forcePush
KeysToSpecialKey
KeyProcessing
_deadKeys
ArrayList
_deadKeyOver
_lastWasDeadKey
Substring
OnKeyActionFurtherProcessing2
vkcode
nScanCode
isDown
kbstate
Boolean
ProcessKeyAction
MyGetKeyboardState
IsPrintableKey
vkCode
IsDeadKey
get_ModifierKeys
IsCtrlPressed
SendLogEventArgs
<IsHandled>k__BackingField
<LogData>k__BackingField
logData
get_IsHandled
set_IsHandled
get_LogData
IsHandled
LogData
StringDownEventArgs
<IsChar>k__BackingField
<Value>k__BackingField
<VCode>k__BackingField
isChar
get_IsChar
get_VCode
IsChar
DesktopActions
Orcus.Utilities.WindowsDesktop
WM_LBUTTONDOWN
WM_LBUTTONUP
WM_RBUTTONDOWN
WM_RBUTTONUP
VMW_EXECUTE_MENU
VMW_HILITE_MENU
_lastWindow
<VncMessage>k__BackingField
MK_LBUTTON
HWND_TOP
HWND_TOPMOST
_windowPrintTypes
GWL_STYLE
WindowFromPoint
RegisterWindowMessage
desktop
get_VncMessage
set_VncMessage
StyleHaveSizeBorders
op_Explicit
RemoteDesktopMouseAction
Orcus.Shared.Commands.RemoteDesktop
DoMouseAction
mouseAction
windowHandle
DoMouseClick
GetWindowClassFlags
GetAncestor
MouseEvent
windowinfo
hitTest
ncMessage
clientCursorPos
screenCursorPos
MAKELPARAM
SendMessageTimeout
timeout
GetWindowLong
SetWindowLong
dwNewLong
lastestWindowFromPoint
VncMessage
WindowPrintTypes
WCF_PAINTMETHOD_NOP
WCF_PAINTMETHOD_PAINT
WCF_PAINTMETHOD_PRINT
WCF_PAINTMETHOD_PRINTWINDOW
WCF_PAINTMETHOD_SKIP_HOOK
WCF_MOUSE_CLIENT_TO_SCREEN
WCF_MOUSE_AUTOCAPTURE
SysCommands
SC_SIZE
SC_MOVE
SC_MINIMIZE
SC_MAXIMIZE
SC_NEXTWINDOW
SC_PREVWINDOW
SC_CLOSE
SC_VSCROLL
SC_HSCROLL
SC_MOUSEMENU
SC_KEYMENU
SC_ARRANGE
SC_RESTORE
SC_TASKLIST
SC_SCREENSAVE
SC_HOTKEY
SC_DEFAULT
SC_MONITORPOWER
SC_CONTEXTHELP
SC_SEPARATOR
SCF_ISSECURE
SC_ICON
SC_ZOOM
GetAncestorFlags
GetRoot
GetRootOwner
MouseActivate
MA_ACTIVATE
MA_ACTIVATEANDEAT
MA_NOACTIVATE
MA_NOACTIVATEANDEAT
SendMessageTimeoutFlags
SMTO_NORMAL
SMTO_BLOCK
SMTO_ABORTIFHUNG
SMTO_NOTIMEOUTIFNOTHUNG
SMTO_ERRORONEXIT
HitTestValues
HTERROR
HTTRANSPARENT
HTNOWHERE
HTCLIENT
HTCAPTION
HTSYSMENU
HTGROWBOX
HTMENU
HTHSCROLL
HTVSCROLL
HTMINBUTTON
HTMAXBUTTON
HTLEFT
HTRIGHT
HTTOPLEFT
HTTOPRIGHT
HTBOTTOM
HTBOTTOMLEFT
HTBOTTOMRIGHT
HTBORDER
HTOBJECT
HTCLOSE
HTHELP
HTSIZEFIRST
HTSIZELAST
WindowStyles
WS_BORDER
WS_CAPTION
WS_CHILD
WS_CLIPCHILDREN
WS_CLIPSIBLINGS
WS_DISABLED
WS_DLGFRAME
WS_GROUP
WS_HSCROLL
WS_MAXIMIZE
WS_MAXIMIZEBOX
WS_MINIMIZE
WS_MINIMIZEBOX
WS_OVERLAPPED
WS_OVERLAPPEDWINDOW
WS_POPUP
WS_POPUPWINDOW
WS_SIZEFRAME
WS_SYSMENU
WS_TABSTOP
WS_VISIBLE
WS_VSCROLL
Desktop
ICloneable
MaxWindowNameLength
SW_HIDE
SW_NORMAL
STARTF_USESTDHANDLES
STARTF_USESHOWWINDOW
UOI_NAME
STARTF_USEPOSITION
NORMAL_PRIORITY_CLASS
DESKTOP_CREATEWINDOW
DESKTOP_ENUMERATE
DESKTOP_WRITEOBJECTS
DESKTOP_SWITCHDESKTOP
DESKTOP_CREATEMENU
DESKTOP_HOOKCONTROL
DESKTOP_READOBJECTS
DESKTOP_JOURNALRECORD
DESKTOP_JOURNALPLAYBACK
AccessRights
StringCollection
System.Collections.Specialized
m_desktop
m_desktopName
m_disposed
m_windows
<DesktopActions>k__BackingField
get_IsOpen
get_DesktopName
get_DesktopHandle
get_DesktopActions
OpenInput
GetWindows
DesktopWindowsProc
wndHandle
argument
Prepare
SystemInformation
get_VirtualScreen
GetHdc
ReleaseHdc
DrawDesktop
DrawWindow
GetWindowAtPosition
wparam
GetDesktops
DesktopProc
get_ManagedThreadId
SetCurrent
OpenDefaultDesktop
GetDesktopName
PtrToStringAnsi
ToLower
caseInsensitive
CreateProcessOnDesktop
GetInputProcesses
CheckDisposed
EndsWith
BuildCommandLine
executableFileName
arguments
IsOpen
DesktopName
DesktopHandle
<>9__44_0
<GetWindows>b__44_0
<>c__DisplayClass50_0
<DrawWindow>b__0
Window
<Handle>k__BackingField
Handle
RegistryUtilities
Orcus.Commands.WindowsCustomizer
GetIntValueSafe
registryKey
valueName
GetStringValueSafe
CreateSubKey
SetValueSafe
registryValueKind
WindowsPropertyInfo`1
_propertyInfo
PropertyInfo
<Picker>k__BackingField
Expression`1
System.Linq.Expressions
get_Picker
LambdaExpression
get_Body
Expression
MemberExpression
get_Member
MemberInfo
picker
set_Value
get_DataType
Orcus.Commands.WindowsCustomizer.IWindowsPropertyInfo.get_Value
Orcus.Commands.WindowsCustomizer.IWindowsPropertyInfo.set_Value
Picker
DataType
Orcus.Commands.WindowsCustomizer.IWindowsPropertyInfo.Value
IWindowsPropertyInfo
WindowsCustomizerCommand
_windowsPropertyInfos
WindowsCustomizerCommunication
Orcus.Shared.Commands.WindowsCustomizer
CurrentSettings
ResponseBytes
IConnectionInfo
get_InnerException
CommandResponse
PackageCompression
ProcessCommand
connectionInfo
GetProperty
set_IsWindows10Enabled
GetCurrentSettings
IsWindows10
MethodBase
GetMethodFromHandle
RuntimeMethodHandle
MethodInfo
Property
ParameterExpression
Lambda
SetupProperty
currentSettingsPropertyName
DesktopProperties
Orcus.Commands.WindowsCustomizer.Core
get_DisplayWindowsVersion
set_DisplayWindowsVersion
get_DisplayTrayItems
set_DisplayTrayItems
get_WindowAnimation
set_WindowAnimation
get_AeroShake
set_AeroShake
get_WindowSnap
set_WindowSnap
get_NotificationBalloons
set_NotificationBalloons
get_LibrariesOnDesktop
set_LibrariesOnDesktop
get_RecycleBinOnComputer
DeleteSubKey
set_RecycleBinOnComputer
get_DesktopPreview
set_DesktopPreview
get_ExplorerCheckBoxSelection
set_ExplorerCheckBoxSelection
DisplayWindowsVersion
DisplayTrayItems
WindowAnimation
AeroShake
WindowSnap
NotificationBalloons
LibrariesOnDesktop
RecycleBinOnComputer
DesktopPreview
ExplorerCheckBoxSelection
General
GodModePath
get_GodMode
set_GodMode
get_ConfirmFileDelete
set_ConfirmFileDelete
get_AutoRebootWithLoggedOnUsers
set_AutoRebootWithLoggedOnUsers
get_EnableAUAsDefaultShutdownOption
set_EnableAUAsDefaultShutdownOption
get_EnableWinKeys
set_EnableWinKeys
get_EnableInternetOpenWith
set_EnableInternetOpenWith
get_AutoReboot
set_AutoReboot
get_DoErrorReport
set_DoErrorReport
get_FilePrintSharing
set_FilePrintSharing
get_KernelPaging
set_KernelPaging
get_ClearPageFile
set_ClearPageFile
get_BootDefragmentation
set_BootDefragmentation
get_ReserveBandwidthForSystem
set_ReserveBandwidthForSystem
get_VerboseLogging
set_VerboseLogging
get_SeparateExplorerProcess
set_SeparateExplorerProcess
get_CrashOnCtrlScroll
set_CrashOnCtrlScroll
get_MobilityCenter
set_MobilityCenter
GodMode
ConfirmFileDelete
AutoRebootWithLoggedOnUsers
EnableAUAsDefaultShutdownOption
EnableWinKeys
EnableInternetOpenWith
AutoReboot
DoErrorReport
FilePrintSharing
KernelPaging
ClearPageFile
BootDefragmentation
ReserveBandwidthForSystem
VerboseLogging
SeparateExplorerProcess
CrashOnCtrlScroll
MobilityCenter
Windows10
get_LockScreen
set_LockScreen
get_DarkTheme
set_DarkTheme
get_BalloonNotifications
set_BalloonNotifications
get_ActionCenter
set_ActionCenter
get_ClassicVolumeMixer
set_ClassicVolumeMixer
LockScreen
DarkTheme
BalloonNotifications
ActionCenter
ClassicVolumeMixer
WindowManager
Orcus.Commands.WindowManager
WindowInformation
Orcus.Shared.Commands.WindowManager
GetAllWindows
GetChildWindows
parent
IteratorStateMachineAttribute
get_Capacity
set_Handle
set_ClassName
set_IsVisible
set_Caption
set_ProcessId
get_ProcessName
set_ProcessName
GetWindowInformation
<GetChildWindows>d__1
<>1__state
<>2__current
<>l__initialThreadId
<>3__parent
<childHwnd>5__1
<>7__wrap1
get_CurrentManagedThreadId
DebuggerHiddenAttribute
System.IDisposable.Dispose
set_ParentHandle
<>m__Finally1
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.WindowManager.WindowInformation>.get_Current
NotSupportedException
System.Collections.IEnumerator.Reset
System.Collections.IEnumerator.get_Current
System.Collections.Generic.IEnumerable<Orcus.Shared.Commands.WindowManager.WindowInformation>.GetEnumerator
System.Collections.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.WindowManager.WindowInformation>.Current
System.Collections.IEnumerator.Current
WindowManagerCommand
HWND_BOTTOM
WindowManagerCommunication
ResponseByte
ResponseResult
successResult
failedResult
WebcamCommand
Orcus.Commands.Webcam
_framesLock
_unsafeStreamCodecLock
_currentDevice
_currentResolution
_lastFrame
_screenWaitEvent
_unsafeStreamCodec
UnsafeStreamCodec
_videoCaptureDevice
VideoCaptureDevice
_webcamSettings
WebcamSettings
Orcus.Shared.Commands.Webcam
_isRunning
WebcamCommunication
WebcamInfo
get_Source
get_MonikerString
get_VideoCapabilities
VideoCapabilities
get_Resolution
set_VideoResolution
NewFrameEventHandler
add_NewFrame
remove_NewFrame
UnsafeStreamCodecParameters
set_ImageQuality
get_PixelFormat
CodeImage
RemoteDesktopDataInfo
IDataInfo
Orcus.Shared.Data
Action`1
UnsafeResponse
FilterCategory
VideoInputDevice
FilterInfoCollection
FilterInfo
NewFrameEventArgs
get_Frame
_videoCaptureDevice_NewFrame
dataInfo
WriteIntoStream
<ProcessCommand>b__0
<>9__11_2
WebcamResolution
<>9__11_1
set_MonikerString
set_AvailableResolutions
<ProcessCommand>b__11_1
FrameSize
set_Heigth
<ProcessCommand>b__11_2
UserInteractionCommand
Orcus.Commands.UserInteraction
UserInteractionCommunication
Orcus.Shared.Commands.UserInteraction
TextToSpeechPackage
UserInteractionWelcomePackage
SpeechSynthesizer
System.Speech.Synthesis
set_Rate
get_Volume
set_Volume
get_VoiceName
SelectVoice
SetOutputToDefaultAudioDevice
get_Text
GetInstalledVoices
ReadOnlyCollection`1
System.Collections.ObjectModel
InstalledVoice
SpeechVoice
set_Voices
SystemIcons
get_Application
ShowBalloonTip
ToolTipIcon
get_VoiceInfo
VoiceInfo
get_Age
VoiceAge
set_VoiceAge
SpeechAge
get_Gender
VoiceGender
set_VoiceGender
SpeechGender
<ProcessCommand>b__0_0
UninstallProgramsCommand
Orcus.Commands.UninstallPrograms
_uninstallPaths
_counter
GetEntries
UninstallableProgram
Orcus.Shared.Commands.UninstallPrograms
UninstallProgramEntryLocation
location
UninstallProgramsCommunication
get_Extension
GetIconFromPath
<GetEntries>d__2
<>3__registryKey
<>3__location
<subKey>5__1
<>7__wrap2
set_Id
set_EntryLocation
set_IconData
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.UninstallPrograms.UninstallableProgram>.get_Current
System.Collections.Generic.IEnumerable<Orcus.Shared.Commands.UninstallPrograms.UninstallableProgram>.GetEnumerator
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.UninstallPrograms.UninstallableProgram>.Current
<>c__DisplayClass3_0
uninstallableProgram
TextChatForm
Orcus.Commands.TextChat
_chatSettings
ChatSettings
Orcus.Shared.Commands.TextChat
_meColor
_otherColor
_isClosing
<IsClosed>k__BackingField
MainRichTextBox
RichTextBox
MessageTextBox
TextBox
SendButton
chatSettings
get_IsClosed
set_IsClosed
add_SendMessage
remove_SendMessage
ForceClose
MessageReceived
timestamp
get_KeyCode
set_SuppressKeyPress
MessageTextBox_KeyDown
get_PreventClose
SendButton_Click
ToShortTimeString
SendText
MessageTextBox_TextChanged
set_ActiveControl
MainForm_Load
set_Anchor
AnchorStyles
TextBoxBase
set_ReadOnly
set_AcceptsReturn
add_TextChanged
add_Load
IsClosed
<>c__DisplayClass14_0
get_YourName
<MessageReceived>b__0
SendTextMessageEventArgs
TextChatCommand
_currentChatForm
TextChatCommunication
get_HideEveythingElse
add_Closed
<ProcessCommand>b__2_2
<>c__DisplayClass2_0
get_Ticks
<ProcessCommand>b__1
Computer
Orcus.Commands.TextChat.Utilities
WM_COMMAND
MIN_ALL
MinimizeAllScreens
RichTextBoxExtensions
get_TextLength
set_SelectionStart
set_SelectionLength
set_SelectionColor
AppendText
get_ForeColor
ScrollToCaret
ScrollToEnd
ProcessExtension
Orcus.Commands.TaskManager
TOKEN_QUERY
Suspend
Resume
DumpUserInfo
pToken
ProcessTokenToSid
GetProcessOwner
processId
TaskmanagerCommand
WM_CLOSE
<SendProcesses>k__BackingField
get_SendProcesses
set_SendProcesses
TaskManagerCommunication
Orcus.Shared.Commands.TaskManager
ProcessInfo
ProcessListChangelog
set_ClosedProcesses
set_NewProcesses
get_NewProcesses
set_PriorityClass
ProcessPriorityClass
get_Status
ProcessStatus
set_Status
GetAllProcesses
FileVersionInfo
set_CanChangePriorityClass
get_PriorityClass
SecurityIdentifier
NTAccount
IdentityReference
Translate
set_ProcessOwner
get_User
GetVersionInfo
get_FileDescription
set_Description
get_CompanyName
set_CompanyName
get_ProductVersion
set_ProductVersion
get_FileVersion
set_FileVersion
set_IconBytes
GetAssemblyName
ApplyProcessInformation
processInfo
get_PrivateMemorySize64
set_PrivateBytes
set_WorkingSet
set_ParentProcess
MinValue
ToUniversalTime
set_Filename
set_CommandLine
set_MainWindowHandle
ManagementObjectToProcessInfo
queryObj
KillProcessAndChildren
<ProcessCommand>b__5_1
SendProcesses
<>c__DisplayClass5_0
<ProcessCommand>b__2
<>c__DisplayClass5_1
allProcesses
<ProcessCommand>b__3
<>c__DisplayClass5_2
<ProcessCommand>b__4
<>c__DisplayClass5_3
<ProcessCommand>b__5
<>9__5_0
<>9__5_6
<ProcessCommand>b__5_0
<ProcessCommand>b__5_6
<GetAllProcesses>b__6_0
<>c__DisplayClass6_0
<GetAllProcesses>b__1
<>c__DisplayClass8_0
<ManagementObjectToProcessInfo>b__0
SystemRestoreCommand
Orcus.Commands.SystemRestore
SystemRestoreCommunication
Orcus.Shared.Commands.SystemRestore
RestoreType
EventType
SystemRestorePointInfo
get_CreationDate
set_CreationDate
SystemRestoreUtilities
ManagementClass
ObjectGetOptions
GetInstances
set_RestorePointType
set_SequenceNumber
set_EventType
GetSystemRestorePoints
GetMethodParameters
InvokeMethod
InvokeMethodOptions
CreateRestorePoint
description
restoreType
sequenceNumber
RemoveRestorePoint
AutostartManager
Orcus.Commands.StartupManager
AutostartProgramInfo
Orcus.Shared.Commands.StartupManager
GetAllAutostartPrograms
ChangeAutostartEntry
AutostartLocation
autostartLocation
isEnabled
RemoveAutostartEntry
get_CommandLine
StringSplitOptions
set_EntryStatus
EntryStatus
set_Publisher
get_Publisher
get_Description
CompleteAutostartProgramInfo
autostartProgramInfo
FolderAutostart
set_AutostartLocation
GetAutostartProgramsFromFolder
GetFileSystemInfos
CreateDisabledFolder
GetDirectoryFromAutostartLocation
GetExtension
SeekOrigin
ReadUInt32
get_Position
ReadChars
GetShortcutTarget
RegistryAutostart
GetAutostartProgramsFromRegistryKey
get_ValueCount
GetRegistryKeyFromAutostartLocation
writeable
GetDisabledSubKey
CreateDisabledSubKey
StartupManagerCommand
StartupManagerCommunication
RegistryCommand
Orcus.Commands.RegistryExplorer
RegistryCommunication
RegistrySubKey
RegistryValue
RegistryCreateValuePackage
RegistryValueBinary
RegistryValueMultiString
set_IsEmpty
GetRegistrySubKeys
RegistrySubKeysPackage
WriteByte
set_Path
set_RegistrySubKeys
set_RegistryHive
DeleteSubKeyTree
RegistrySubKeyAction
GetValueKind
RegistryValueString
set_Key
RegistryValueExpandString
RegistryValueDWord
RegistryValueQWord
RegistryValueUnknown
GetRegistryValues
get_RegistryValueTypes
RegistryValuesPackage
set_Values
get_RegistryHive
get_RegistryValue
get_ValueObject
get_ValueKind
CreateValue
ConvertFromOrcusValueKind
registryValue
SendPermissionDenied
SendError
MessageBoxCommand
Orcus.Commands.MessageBox
MessageBoxInformation
Orcus.Shared.Commands.MessageBox
get_MessageBoxButtons
MessageBoxButtons
get_Icon
SystemIcon
MessageBoxIcon
CommandSucceed
SystemIconToMessageBoxIcon
LivePerformance
Orcus.Commands.LivePerformance
_cpuPerformanceCounter
_receiveCounters
_sendCounters
PerformanceCounterCategory
GetInstanceNames
LiveData
Orcus.Shared.Commands.LivePerformance
set_Handles
set_Threads
set_Processes
get_Handles
get_HandleCount
set_ClockSpeed
set_InUse
set_UpTimeSeconds
set_UsedMemory
EthernetAdapterData
set_EthernetAdapterData
get_EthernetAdapterData
set_BytesReceive
set_BytesSend
GetCpuSpeedInGHz
LivePerformanceCommand
_livePerformance
LivePerformanceCommunication
StaticPerformanceData
StaticPerformance
GetStaticPerformanceData
OrderBy
set_MemorySpeed
set_UsedMemorySlots
UInt16
set_TotalMemorySlots
SetMemoryInformation
set_MaxClockSpeed
set_ProcessorName
set_Cores
set_LogicalProcessors
set_L1Cache
set_L2Cache
set_L3Cache
SetProcessorInformation
IPInterfaceProperties
EthernetAdapter
NetworkInterfaceType
UnicastIPAddressInformation
set_EthernetAdapters
get_NetworkInterfaceType
GetIPProperties
set_AdapterName
set_ConnectionType
get_DnsSuffix
set_DnsName
get_UnicastAddresses
UnicastIPAddressInformationCollection
IPAddressInformation
get_AddressFamily
AddressFamily
get_Ipv4Address
set_Ipv4Address
get_Ipv6Address
set_Ipv6Address
get_EthernetAdapters
SetEthernetInformation
<>9__2_1
<SetMemoryInformation>b__1_0
<SetMemoryInformation>b__1_1
<SetMemoryInformation>b__1_2
<SetProcessorInformation>b__2_0
<SetProcessorInformation>b__2_1
LiveKeyloggerCommand
Orcus.Commands.LiveKeylogger
LiveKeyloggerCommunication
Orcus.Shared.Commands.LiveKeylogger
SendOrPostCallback
<Dispose>b__3_0
<>9__2
<>9__3
RenderWindow
Orcus.Commands.HVNC
_codecHeight
_codecWidth
<WindowInformation>k__BackingField
Orcus.Shared.Commands.HVNC
windowInformation
get_WindowInformation
set_Title
ApplyWindowInformation
Render
HiddenApplicationCommand
Orcus.Commands.HiddenApplication
_currentDesktop
_currentProcess
HiddenApplicationCommunication
Orcus.Shared.Commands.HiddenApplication
WindowPackage
ApplicationWindow
set_Windows
get_Windows
get_Jpeg
set_WindowData
set_WindowHandle
BlockUserInput
Orcus.Commands.FunActions
seconds
BluescreenTool
Source
CompilerParameters
CSharpCodeProvider
Microsoft.CSharp
set_GenerateExecutable
set_OutputAssembly
get_ReferencedAssemblies
CodeDomProvider
CompileAssemblyFromSource
CompilerResults
get_Errors
CompilerErrorCollection
get_HasErrors
InvalidOperationException
get_PathToAssembly
MIN_ALL_UNDO
SPI_SETDESKWALLPAPER
SPIF_UPDATEINIFILE
SPIF_SENDWININICHANGE
RestoreAllScreens
get_Bmp
SetDesktopWallpaper
newWallpaper
desktopWallpaperRestoreInfo
ToggleDesktopIcons
SwapMouseButtons
RestoreMouseButtons
Centered
Stretched
DesktopWallpaperRestoreInfo
<WallpaperStyle>k__BackingField
<TileWallpaper>k__BackingField
<WallpaperPath>k__BackingField
get_WallpaperStyle
set_WallpaperStyle
get_TileWallpaper
set_TileWallpaper
get_WallpaperPath
set_WallpaperPath
WallpaperStyle
TileWallpaper
WallpaperPath
DesktopWallpaper
FromStream
FunActionsCommand
_desktopWallpaperRestoreInfo
FunActionsCommunication
RotateDegrees
GetProcessesByName
CommandFailed
ImageUtilities
TakeFullScreenshot
RotateFlip
RotateFlipType
get_WorkingArea
RotateScreenshotScreenByScreen
KeyboardLayout
SetKeyboardLayout
layoutToLoad
SwitchTo
layoutId
HWND_BROADCAST
WM_SYSCOMMAND
TurnOff
duration
currentCursorPosition
currentTime
<Hold>b__0
Taskbar
VistaStartMenuCaption
vistaStartMenuWnd
SetVisibility
GetVistaStartMenuWnd
taskBarWnd
MyEnumThreadWindowsProc
IsVisible
WindowsModules
SetDesktopVisibility
visible
SetClockVisibility
SetTaskManager
enable
EventLogCommand
Orcus.Commands.EventLog
EventLog
EventLogEntry
Orcus.Shared.Commands.EventLog
EventLogCommunication
EventLogType
get_Entries
EventLogEntryCollection
get_EntryType
EventLogEntryType
set_EntryType
get_EventID
set_EventId
set_Source
get_TimeGenerated
GetSecurityEventLog
ConsoleCommand
Orcus.Commands.Console
_cmdProcess
_currentConnectionInfo
_standardInput
CancelErrorRead
CancelOutputRead
ConsoleCommunication
Orcus.Shared.Commands.Console
GetCultureInfo
get_TextInfo
TextInfo
get_OEMCodePage
GetEncoding
get_StartInfo
set_CreateNoWindow
set_FileName
set_RedirectStandardOutput
set_RedirectStandardInput
set_RedirectStandardError
set_UseShellExecute
set_StandardErrorEncoding
set_StandardOutputEncoding
set_WorkingDirectory
DataReceivedEventHandler
add_OutputDataReceived
add_ErrorDataReceived
get_StandardInput
set_AutoFlush
BeginOutputReadLine
BeginErrorReadLine
DataReceivedEventArgs
CmdProcess_OutputDataReceived
ComputerInformation
Orcus.Commands.ComputerInformation
Orcus.Shared.Commands.ComputerInformation
Stopwatch
StartNew
set_SystemInformation
OperatingSystemInformation
set_HardwareInformation
HardwareInformation
set_NetworkInformation
NetworkInformation
set_BiosInformation
BiosInformation
set_SoftwareInformation
SoftwareInformation
set_LogicalDrives
LogicalDrive
get_ElapsedMilliseconds
set_ProcessTime
GetInformation
GetLogicalDrives
BootMode
set_NtVersion
set_Platform
set_SystemDirectory
set_ClrVersion
get_UserDomainName
set_UserDomainName
get_SystemPageSize
set_SystemPageSize
get_BootMode
set_BootMode
set_FriendlyName
get_FriendlyName
set_InternalName
get_InternalName
set_Architecture
set_AdminPasswordStatus
set_Workgroup
set_Manufacturer
set_Model
set_Owner
set_TotalPhysicalMemory
set_ProductKey
GetOperatingSystemInformation
set_ProductId
set_ReleaseDate
set_SupportedLanguages
GetBiosInformation
ProcessorInfo
set_Screens
get_ProcessorCount
set_ManufactureId
set_ProcessorInfo
set_L2CacheSize
set_L3CacheSize
set_DeviceId
set_ProcessorId
set_ProcessorType
set_ExternalClockSpeed
set_Revision
VideoCardInfo
set_MaxRefreshRate
set_VideoArchitecture
set_VideoMemoryType
set_VideoModeDescription
set_VideoProcessor
set_VideoCardInfo
GetHardwareInformation
defaultValue
GetHostName
GetHostEntry
IPHostEntry
get_AddressList
IpAddress
set_IpAddresses
set_Proxy
IWebProxy
DownloadString
set_PublicIp
get_OperationalStatus
OperationalStatus
get_AddressPreferredLifetime
WebException
GetNetworkInformation
set_AntiVirusPrograms
set_Firewalls
set_InstalledPrograms
GetSoftwareInformation
ArchitectureToString
AdminPasswordStatusToString
status
ProcessorTypeToString
VideoArchitectureToString
VideoMemoryTypeToString
GetLanIp
GetValue`1
<>9__3_7
<>9__4_2
DriveType
get_IsReady
set_IsReady
get_DriveType
set_DriveType
get_AvailableFreeSpace
set_AvailableFreeSpace
get_DriveFormat
set_DriveFormat
get_RootDirectory
set_RootDirectory
get_TotalSize
set_TotalSize
get_VolumeLabel
set_VolumeLabel
<GetLogicalDrives>b__1_0
<GetBiosInformation>b__3_7
set_IsPrimary
set_Resolution
get_BitsPerPixel
set_BitsPerPixel
set_DeviceName
<GetHardwareInformation>b__4_0
ToDecimal
Decimal
op_Division
<GetHardwareInformation>b__4_1
<GetHardwareInformation>b__4_2
set_AddressFamily
<GetNetworkInformation>b__7_0
<GetSoftwareInformation>b__8_0
mObject
<GetSoftwareInformation>b__8_1
regKey
<GetOperatingSystemInformation>b__0
<>c__DisplayClass2_1
computerSystemManagmentObject
<GetOperatingSystemInformation>b__1
<GetOperatingSystemInformation>b__2
<GetOperatingSystemInformation>b__3
<GetOperatingSystemInformation>b__4
<GetOperatingSystemInformation>b__5
<GetOperatingSystemInformation>b__6
UInt64
<GetOperatingSystemInformation>b__7
biosManagmentObject
<GetBiosInformation>b__0
<GetBiosInformation>b__1
<GetBiosInformation>b__2
<GetBiosInformation>b__3
<GetBiosInformation>b__4
<GetBiosInformation>b__5
TrimEnd
<GetBiosInformation>b__6
<>c__DisplayClass4_0
processorManagementObject
<GetHardwareInformation>b__3
<GetHardwareInformation>b__4
<GetHardwareInformation>b__5
<GetHardwareInformation>b__6
<GetHardwareInformation>b__7
<GetHardwareInformation>b__8
<GetHardwareInformation>b__9
<GetHardwareInformation>b__10
<GetHardwareInformation>b__11
<GetHardwareInformation>b__12
<GetHardwareInformation>b__13
CodeCommand
Orcus.Commands.Code
CodeCommunication
Orcus.Shared.Commands.Code
CompilerError
VBCodeProvider
Microsoft.VisualBasic
set_GenerateInMemory
get_Line
get_ErrorText
get_CompiledAssembly
GetMethod
<>9__0_1
get_IsWarning
<ProcessCommand>b__0_1
AudioCommand
Orcus.Commands.Audio
AudioCommunication
Orcus.Shared.Commands.Audio
SoundOutDevice
MMDeviceEnumerator
CSCore.CoreAudioAPI
MMDevice
PlayAudioInformation
WasapiOut
CSCore.SoundOut
get_IsSupportedOnCurrentPlatform
EnumAudioEndpoints
MMDeviceCollection
DataFlow
DeviceState
set_Device
DirectSoundDeviceEnumerator
CSCore.DirectSound
EnumerateDevices
DirectSoundDevice
get_SoundOutId
DirectSoundOut
get_AudioData
DmoMp3Decoder
CSCore.Codecs.MP3
ISoundOut
IWaveSource
PlaybackStoppedEventArgs
add_Stopped
GetDefaultAudioEndpoint
JavaScriptSerializer
System.Web.Script.Serialization
playInformation
soundOut
waveSource
memoryStream
get_DeviceID
<>c__DisplayClass0_1
<>c__DisplayClass0_2
defaultDevice
set_IsDefault
enumAudioEndpoint
<>9__0_5
<ProcessCommand>b__0_5
AudioVolumeControlCommand
Orcus.Commands.AudioVolumeControl
_deviceList
_listsLock
AudioEndpointVolume
AudioVolumeControlCommunication
Orcus.Shared.Commands.AudioVolumeControl
AudioDevice
AudioEndpointVolumeChannel
ComObject
CSCore.Win32
ToSingle
FromDevice
set_MasterVolumeLevelScalar
get_Channels
set_VolumeScalar
GetAudioDevices
AudioEndpointType
mmDeviceCollection
defaultDeviceId
audioEndpointType
GetAudioDevice
deviceId
channelIndex
get_ChannelIndex
AudioChannel
set_ChannelIndex
get_VolumeScalar
<GetAudioDevices>b__4_0
<GetAudioDevices>d__4
<>3__mmDeviceCollection
<>3__defaultDeviceId
<>3__audioEndpointType
<>7__wrap3
<>7__wrap4
<>7__wrap5
get_MasterVolumeLevelScalar
set_CurrentVolume
set_AudioEndpointType
set_AudioChannels
<>m__Finally2
<>m__Finally3
<>m__Finally4
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.AudioVolumeControl.AudioDevice>.get_Current
System.Collections.Generic.IEnumerable<Orcus.Shared.Commands.AudioVolumeControl.AudioDevice>.GetEnumerator
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.AudioVolumeControl.AudioDevice>.Current
<GetAudioDevice>b__0
ActiveConnectionsCommand
Orcus.Commands.ActiveConnections
ActiveConnection
Orcus.Shared.Commands.ActiveConnections
Connections
MIB_TCP_STATE_ESTAB
MIB_TCP_STATE_TIME_WAIT
MIB_TCP_STATE_LISTEN
MIB_TCP_STATE_CLOSE_WAIT
GetUdpConnections
GetTcpConnections
IntToIp
ConvertToState
ConnectionState
GetProcessTitle
set_ProtocolName
ProtocolName
set_LocalAddress
set_LocalPort
set_RemoteAddress
set_RemotePort
set_ApplicationName
<GetUdpConnections>b__4_0
<GetTcpConnections>b__5_0
WindowsDriversCommand
Orcus.Commands.WindowsDrivers
WindowsDriversCommunication
Orcus.Shared.Commands.WindowsDrivers
WindowsDriversFile
GetValues
GetDriversFilePath
windowsDriversFile
SendDriverFile
ReadToEnd
ReadDriversFile
VoiceChatCommand
Orcus.Commands.VoiceChat
_cscoreDataPlayer
_cscoreRecorder
VoiceChatCommunication
Orcus.Shared.Commands.VoiceChat
FastDeserialize
VoiceChatBeginCaptureInfo
get_Bitrate
DataInfoAvailableEventArgs
CaptureDeviceInfo
captureInfo
get_DeviceId
<>c__DisplayClass3_1
get_DataInfo
WriterCall
<>c__DisplayClass3_2
<>c__DisplayClass3_3
device
CSCoreDataPlayer
Orcus.Commands.VoiceChat.Utilities
_triggerSingleBlockRead
_wasapiOut
_writeableBufferingSource
WriteableBufferingSource
CSCore.Streams
_opusDecoder
OpusDecoder
_componentsLock
SingleBlockRead
SingleBlockReadEventArgs
triggerSingleBlockRead
add_SingleBlockRead
remove_SingleBlockRead
WaveFormat
set_FillWithZeros
FluentExtensions
ToSampleSource
ISampleSource
SingleBlockNotificationStream
ToWaveSource
SingleBlockNotificationStreamOnSingleBlockRead
singleBlockReadEventArgs
Decode
offset
CSCoreRecorder
_captureDevice
_captureSource
_wasapiCapture
WasapiCapture
CSCore.SoundIn
_opusEncoder
OpusEncoder
_bytesPerSegment
SegmentFrames
_notEncodedBuffer
DataAvailable
OpusWrapper.Native
set_Bitrate
FrameByteCount
captureDevice
bitrate
application
add_DataAvailable
remove_DataAvailable
SoundInSource
ISoundIn
ChangeSampleRate
ToMono
DataAvailableEventArgs
NotificationStreamOnSingleBlockRead
get_ByteCount
Encode
VoiceChatDataInfo
IReadableAudioSource`1
SoundInSourceOnDataAvailable
dataAvailableEventArgs
ReverseProxyClient
Orcus.Commands.ReverseProxy
BUFFER_SIZE
_buffer
_disconnectIsSend
<ConnectionId>k__BackingField
<Socket>k__BackingField
<Target>k__BackingField
<Port>k__BackingField
ResponseStatusUpdate
DataReceived
SocketType
ProtocolType
target
connectionId
get_ConnectionId
get_Socket
get_Target
add_ResponseStatusUpdate
remove_ResponseStatusUpdate
add_DataReceived
remove_DataReceived
get_Connected
BeginReceive
SocketFlags
get_LocalEndPoint
HandleOnConnect
EndReceive
AsyncReceive
SendToTargetServer
ConnectionId
Target
ReverseProxyCommand
_proxyClients
_connection
ReverseProxyCommunication
Orcus.Shared.Commands.ReverseProxy
ReverseProxyConnect
FastSerialize
ReverseProxyStatusUpdate
ReverseProxyClientOnResponseStatusUpdate
reverseProxyStatusUpdatedEventArgs
ReverseProxyClientOnDisconnected
reverseProxyEventArgs
ReverseProxyClientOnDataReceived
reverseProxyDataReceivedEventArgs
DisallowMultipleThreadsAttribute
ReverseProxyDataReceivedEventArgs
Orcus.Commands.ReverseProxy.Args
<Data>k__BackingField
ReverseProxyEventArgs
ReverseProxyStatusUpdatedEventArgs
<LocalAddress>k__BackingField
<LocalPort>k__BackingField
<TargetServer>k__BackingField
<HostName>k__BackingField
get_LocalAddress
get_TargetServer
get_HostName
set_HostName
set_ConnectionId
ToStatusUpdate
isConnected
localAddress
localPort
targetServer
LocalAddress
TargetServer
HostName
RemoteActions
Orcus.Commands.RemoteDesktop
XBUTTON1
XBUTTON2
_screens
_virtualScreen
extraData
monitor
UIntPtr
DoKeyboardAction
RemoteDesktopKeyboardAction
keyboardAction
scanCode
SendIput
CalculateAbsoluteCoordinateX
CalculateAbsoluteCoordinateY
MouseActionToMouseEvent
RemoteDesktopCommand
_screenCaptureServices
CaptureType
_streamComponentsLock
IConnection
_isStreaming
_screenCaptureService
_cursorStreamCodec
CursorStreamCodec
_compressionType
ImageCompressionType
_currentImageCompression
IImageCompression
_unsafeCodec
IStreamCodec
_currentMonitor
_remoteActions
_drawCursor
RemoteDesktopCommunication
RemoteDesktopInformation
ScreenInfo
get_Screens
set_Number
get_AvailableCaptureTypes
set_AvailableCaptureTypes
get_ConnectionInitializer
TakeConnection
get_ImageQuality
CodeCursor
get_SupportsStream
SendStream
WriteToBuffer
SendData
Streaming
set_Quality
InitializeStreamingComponents
captureType
quality
drawCursor
compressionType
NoCompression
GetImageCompression
ToInt16
RemoteDesktopAction
DoDesktopAction
remoteDesktopAction
<>9__13_0
<>9__13_1
<>9__13_2
<.ctor>b__13_0
<.ctor>b__13_1
<.ctor>b__13_2
<>c__DisplayClass16_0
ScreenResponseFlags
<Streaming>b__0
<>c__DisplayClass16_1
cursorData
_lastCursorHandle
_screenNumber
_screenInfo
_cursorHotspotX
_cursorHotspotY
CURSOR_SHOWING
CaptureCursor
FromHbitmap
FromHwnd
GetHbitmap
MakeTransparent
FromHandle
GetCursorImage
cursorInfo
iconInfo
ICursorStreamCodec
get_HasCursorImage
UpdateCursorImage
UpdateCursorInfo
UpdateCursor
cursorStreamCodec
screenNumber
TurboJpgImageCompression
Orcus.Commands.RemoteDesktop.Compression
_decompress
_compressor
TJCompressor
_decompressor
TJDecompressor
<Quality>k__BackingField
<CompressionMode>k__BackingField
<DecompressionMode>k__BackingField
DecompressionMode
decompress
get_Quality
get_CompressionMode
get_DecompressionMode
NotImplementedException
stride
imageSize
outStream
bitmap
TJSubsamplingOptions
TJFlags
TJPixelFormats
dataPtr
outputPtr
outputLength
ConvertPixelFormat
Quality
IScreenCaptureService
Orcus.Commands.RemoteDesktop.Capture
get_IsSupported
ChangeMonitor
CaptureScreen
streamCodec
updateCursor
IsSupported
GdiService
Orcus.Commands.RemoteDesktop.Capture.GDI
_currentImage
_scrDeviceContext
_boundsRectangle
_screenHelper
<IsSupported>k__BackingField
FrontBufferService
Orcus.Commands.RemoteDesktop.Capture.FrontBuffer
_device
Device
_displayMode
DisplayMode
_surface
Surface
DisposeBase
Direct3D
GetAdapterDisplayMode
PresentParameters
RawBool
SharpDX.Mathematics.Interop
Windowed
BackBufferCount
BackBufferHeight
BackBufferWidth
SwapEffect
DeviceType
CreateFlags
CreateDevice
direct3D
displayMode
CreateOffscreenPlain
DataRectangle
GetFrontBufferData
LockRectangle
LockFlags
DataPointer
UnlockRectangle
CopyMemory
DesktopDuplicationException
Orcus.Commands.RemoteDesktop.Capture.DesktopDuplication
DesktopDuplicationService
_deskDupl
OutputDuplication
_outputDesc
OutputDescription
_textureDesc
Texture2DDescription
_desktopImageTexture
Texture2D
_frameInfo
OutputDuplicateFrameInformation
Factory1
GetAdapter1
Adapter1
Adapter
SharpDXException
get_Minor
IsWindows8OrNewer
Output
Output1
Result
GetOutput
QueryInterface
CpuAccessFlags
BindFlags
DesktopBounds
RawRectangle
OptionFlags
ResourceOptionFlags
MipLevels
ArraySize
SampleDescription
ResourceUsage
DuplicateOutput
get_ResultCode
get_Code
ResultCode
NotCurrentlyAvailable
ResultDescriptor
get_Result
DataBox
OutputDuplicateMoveRectangle
MovedRegion
get_ImmediateContext
DeviceContext
MapSubresource
Resource
MapMode
MapFlags
TotalMetadataBufferSize
GetFrameMoveRects
SourcePoint
RawPoint
DestinationRect
set_Destination
GetFrameDirtyRects
UnmapSubresource
AcquireNextFrame
WaitTimeout
get_Failure
CopyResource
RetrieveFrame
Utilities
RowPitch
GetFrameBitmap
ReleaseFrame
IntPtrExtensions
pointer
RawRectangleExtensions
GetWidth
rawRectangle
GetHeight
DropAndExecuteCommand
Orcus.Commands.DropAndExecute
_transferedFiles
_targetDirectory
_applicationWarder
DropAndExecuteCommunication
Orcus.Shared.Commands.DropAndExecute
WindowUpdate
ExecutionMode
FileTransferInfo
ExecuteOptions
get_ExecutionMode
get_RunAsAdministrator
GetTargetDirectory
OnWindowAction
fileGuid
options
windowUpdateData
firstRenderInfo
renderInfo
get_FileGuid
HiddenDesktopApplicationManager
_renderWindows
<Desktop>k__BackingField
<Process>k__BackingField
get_Desktop
StopExecution
get_Process
set_Process
OpenApplication
runAsAdministrator
set_AllWindows
get_NewWindows
get_UpdatedWindows
set_RenderedWindowHandle
GetWindowUpdate
windowRenderData
<GetWindowUpdate>b__2
<>c__DisplayClass12_1
<GetWindowUpdate>b__3
<>9__12_0
<>9__12_1
<GetWindowUpdate>b__12_0
<GetWindowUpdate>b__12_1
IApplicationWarder
TransferedFileInfo
_length
_fileStream
<FileName>k__BackingField
<IsFinished>k__BackingField
fileTransferInfo
targetDirectory
get_IsFinished
set_IsFinished
ReceiveData
FileName
IsFinished
HardwareHelper
Orcus.Commands.DeviceManager
EnableDevice
diData
SetupApiError
NoAssociatedClass
NotDisableable
OnlyValidateViaAuthenticode
TemporaryDeviceInfo
_devinfoData
<HDevInfo>k__BackingField
hDevInfo
deviceData
get_DeviceData
get_HDevInfo
DeviceData
HDevInfo
<EnumerateDevices>d__0
<hDevInfo>5__1
<i>5__2
<deviceInfoData>5__3
System.Collections.Generic.IEnumerator<Orcus.Commands.DeviceManager.HardwareHelper.TemporaryDeviceInfo>.get_Current
System.Collections.Generic.IEnumerable<Orcus.Commands.DeviceManager.HardwareHelper.TemporaryDeviceInfo>.GetEnumerator
System.Collections.Generic.IEnumerator<Orcus.Commands.DeviceManager.HardwareHelper.TemporaryDeviceInfo>.Current
DeviceManagerCommand
DeviceManagerCommunication
Orcus.Shared.Commands.DeviceManager
DeviceInfo
DeviceCategory
set_StatusCode
set_HardwareId
set_Category
DeviceCategoryGuidAttribute
get_Category
set_CustomCategory
set_DriverFriendlyName
set_DriverBuildDate
set_DriverDescription
set_DriverInstallDate
set_DriverName
set_DriverProviderName
set_DriverSigner
set_DriverVersion
set_DriverInfName
GetAllDevices
<GetAllDevices>b__0
ConnectionInitializerCommand
Orcus.Commands.ConnectionInitializer
_dtpProcessor
DtpProcessor
Orcus.Shared.DataTransferProtocol
_connections
_ipAddressLock
_localAddress
NetworkUtilities
RemoteConnectionInformation
Orcus.Shared.Commands.ConnectionInitializer
set_LocalIpAddress
UdpConnectionInformation
set_UdpConnectionInformation
SessionTraversalUtilitiesForNAT
IsHolePunchingPossible
get_UdpConnectionInformation
set_IsHolePunchingPossible
GetCoreInformation
ConnectionProtocol
connectionProtocol
DataTransferProtocolMethodAttribute
NetOutgoingMessage
NetPeerConfiguration
NetClient
NetPeer
CreateMessage
NetBuffer
SendUnconnectedMessage
InitializeUdpLanConnection
serverEndPoint
InitializeTcpLanConnection
STUN_Result
Orcus.Shared.Utilities.STUN
EnableMessageType
NetIncomingMessageType
InitializeSocket
get_Blocking
set_Blocking
TestStun
get_NetType
STUN_NetType
InitializeLoop
UdpHolePunchingFeedback
set_ConnectionGuid
get_PublicEndPoint
set_PublicEndPoint
InitializeUdpPunchHolingConnection
NatIntroduction
ConnectUdpPunchHolingConnection
connectionGuid
remoteEndPoint
ConnectionInitializerCommunication
Receive
TcpConnection
_binaryWriter
_networkStream
_tcpClient
<SupportsStream>k__BackingField
writerCall
SupportsStream
UdpHolePunchingConnection
<NetClient>k__BackingField
netClient
get_NetClient
UdpLanConnection
_netClient
_ipEndPoint
ipEndPoint
_command
_prefix
prefix
<SendData>b__0
<SendStream>b__0
ICookieRecovery
Orcus.Commands.Passwords
GetCookies
RecoveredCookie
IPasswordRecovery
GetPasswords
RecoveredPassword
PasswordsCommand
set_Cookies
set_Passwords
get_Passwords
RecoverPasswords
get_Cookies
RecoverCookies
recoverCookies
ChromiumBase
Orcus.Commands.Passwords.Utilities
set_Field1
set_Password
set_Application
set_PasswordType
PasswordType
Passwords
datapath
browser
AddMilliseconds
set_Host
set_ExpiresUtc
set_Secure
set_HttpOnly
Cookies
dataPath
ProtectedData
Unprotect
DataProtectionScope
encryptedData
KeyDecoder
GetWindowsProductKey
DecodeProductKey
digitalProductId
get_Chars
Insert
DecodeProductKeyWin8AndUp
HiveKeys
AccessMasks
SafeHandleZeroOrMinusOneIsInvalid
Microsoft.Win32.SafeHandles
BindingFlags
Binder
ParameterModifier
GetField
FieldInfo
PlatformNotSupportedException
OpenBaseKey
registryType
RegistryAccessMask
QueryValue
EnumerateSubKeys
Notify
CreateLink
WoW6432
Wow6464
AllAccess
RegistryView
Registry86
Registry64
RegistryKeyExtensions
IsNameOrValueNull
keyName
GetValueSafe
OpenReadonlySubKeySafe
OpenWritableSubKeySafe
GetFormattedKeyValues
<>9__0
<GetFormattedKeyValues>b__0
keyVal
<GetFormattedKeyValues>b__4_1
<GetFormattedKeyValues>d__4
<>3__key
<>8__1
System.Collections.Generic.IEnumerator<System.String>.get_Current
System.Collections.Generic.IEnumerable<System.String>.GetEnumerator
System.Collections.Generic.IEnumerator<System.String>.Current
RegistryKeyHelper
AddRegistryKeyValue
addQuotes
OpenReadonlySubKey
DeleteRegistryKeyValue
SQLiteHandler
_dbBytes
_encoding
_pageSize
_sqlDataTypeSize
_fieldNames
_masterTableEntries
_tableEntries
baseName
ConvertToInteger
startIndex
endIndex
GetRowCount
GetTableNames
rowNum
Subtract
ToUInt64
get_Unicode
get_BigEndianUnicode
Multiply
ReadMasterTable
TrimStart
ReadTable
tableName
ReadTableFromOffset
CopyArray
arySrc
aryDes
record_header_field
sqlite_master_entry
row_id
item_type
item_name
astable_name
root_num
sql_statement
table_entry
content
TimeHelper
ToLocalTime
ToUnixTime
DateTimeKind
AddSeconds
FromUnixTime
unixTime
Yandex
Orcus.Commands.Passwords.Applications.Yandex
ApplicationName
WinSCP
Orcus.Commands.Passwords.Applications.WinSCP
dec_next_char
WinSCPDecrypt
<GetPasswords>d__0
<key>5__1
<accountKey>5__2
UnescapeDataString
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.Password.RecoveredPassword>.get_Current
System.Collections.Generic.IEnumerable<Orcus.Shared.Commands.Password.RecoveredPassword>.GetEnumerator
System.Collections.Generic.IEnumerator<Orcus.Shared.Commands.Password.RecoveredPassword>.Current
<WinSCPDecrypt>b__2_0
Windows
Orcus.Commands.Passwords.Applications.Windows
Pidgin
Orcus.Commands.Passwords.Applications.Pidgin
<password>5__1
<reader>5__2
XmlTextReader
XmlDocument
XmlNodeList
XmlReader
get_DocumentElement
XmlElement
XmlNode
get_ChildNodes
get_ItemOf
get_InnerText
Orcus.Commands.Passwords.Applications.Opera
JDownloader
Orcus.Commands.Passwords.Applications.JDownloader
Matches
MatchCollection
RegexOptions
set_Field2
AesCryptoServiceProvider
ICryptoTransform
CryptoStream
SymmetricAlgorithm
set_IV
get_IV
CreateDecryptor
CryptoStreamMode
<Decrypt>b__1_0
CryptoApi
Orcus.Commands.Passwords.Applications.InternetExplorer
KeyStr
PROV_RSA_FULL
CRYPT_VERIFYCONTEXT
ToCharArray
DecryptIePassword
dataList
GCHandle
GCHandleType
AddrOfPinnedObject
ByteArrayToStructure
set_Length
AppendFormat
GetUrlHashString
wstrUrl
DoesUrlMatchWithHash
urlHash
ExplorerUrlHistory
_urlHistoryList
_urlHistory
IndexOutOfRangeException
ReleaseComObject
AddHistoryEntry
pocsUrl
pocsTitle
DeleteHistoryEntry
QueryUrl
ClearHistory
DefaultMemberAttribute
STATURLEnumerator
_enumerator
_index
_staturl
enumerator
SetFilter
poszFilter
GetUrlHistory
InternetExplorer
<GetPasswords>d__1
<dataList>5__1
<entry>5__2
<urlHistory>5__3
ADDURL_FLAG
Orcus.Commands.Passwords.Applications.InternetExplorer.Native
ADDURL_ADDTOHISTORYANDCACHE
ADDURL_ADDTOCACHE
IEnumSTATURL
pceltFetched
ppenum
IUrlHistoryStg
AddUrl
DeleteUrl
lpSTATURL
BindToObject
ppvOut
get_EnumUrls
EnumUrls
IUrlHistoryStg2
AddUrlAndNotify
fWriteHistory
poctNotify
punkISFolder
SortFileTimeAscendingHelper
IComparer
System.Collections.IComparer.Compare
CompareFileTime
FILETIME
System.Runtime.InteropServices.ComTypes
lpFileTime1
lpFileTime2
SortFileTimeAscending
STATURL
pwcsUrl
pwcsTitle
ftLastVisited
ftLastUpdated
ftExpires
get_URL
get_UrlString
get_LastVisited
get_LastUpdated
get_Expires
UrlString
LastVisited
LastUpdated
Expires
STATURLFLAGS
STATURLFLAG_ISCACHED
STATURLFLAG_ISTOPLEVEL
STATURL_QUERYFLAGS
STATURL_QUERYFLAG_ISCACHED
STATURL_QUERYFLAG_NOURL
STATURL_QUERYFLAG_NOTITLE
STATURL_QUERYFLAG_TOPLEVEL
UrlHistoryClass
Win32api
SHGFI_ATTR_SPECIFIED
SHGFI_ATTRIBUTES
SHGFI_PIDL
SHGFI_DISPLAYNAME
SHGFI_USEFILEATTRIBUTES
FILE_ATTRIBUTRE_NORMAL
SHGFI_EXETYPE
SHGFI_SYSICONINDEX
ILC_COLORDDB
ILC_MASK
ILD_TRANSPARENT
SHGFI_ICON
SHGFI_LARGEICON
SHGFI_SHELLICONSIZE
SHGFI_SMALLICON
SHGFI_TYPENAME
SHGFI_ICONLOCATION
UrlCanonicalize
pszUrl
pszCanonicalized
pcchCanonicalized
set_Capacity
CannonializeURL
FileTimeToSystemTime
FileTime
SystemTime
FileTimeToDateTime
filetime
SystemTimeToFileTime
lpSystemTime
lpFileTime
get_Year
get_Month
get_Day
get_Hour
get_Minute
get_Second
get_Millisecond
DateTimeToFileTime
datetime
shlwapi_URL
URL_DONT_SIMPLIFY
URL_ESCAPE_PERCENT
URL_ESCAPE_SPACES_ONLY
URL_ESCAPE_UNSAFE
URL_PLUGGABLE_PROTOCOL
URL_UNESCAPE
SYSTEMTIME
DayOfWeek
Milliseconds
Minute
Second
FileZilla
Orcus.Commands.Passwords.Applications.FileZilla
<GetPasswords>b__1_0
<entry>5__1
ReadAllText
CoreFtp
Orcus.Commands.Passwords.Applications.CoreFTP
RijndaelManaged
ToByte
set_Mode
CipherMode
set_Padding
PaddingMode
TransformFinalBlock
DecryptCoreFtpPassword
hexString
<line>5__1
Chrome
Orcus.Commands.Passwords.Applications.Chrome
MozillaDecryptor
Orcus.Commands.Passwords.Applications.Mozilla
_privateKey
<PasswordList>k__BackingField
passwordList
get_PasswordList
set_PasswordList
profilePath
DecryptString
encryptedString
DecryptData
<Initialize>g__CheckPassword7_4
password
PasswordList
globalSaltBytes
pwdCheckSaltBytes
pwdCheck
<>9__7_1
<>9__7_2
<>9__7_3
<>9__7_5
<>9__7_6
<Initialize>b__7_0
<Initialize>b__7_1
<Initialize>b__7_2
<Initialize>b__7_3
<Initialize>b__7_5
<Initialize>b__7_6
Firefox
GetDirectories
FirefoxLogins
nextId
logins
disabledHosts
LoginData
encryptedPassword
encryptedUsername
encType
formSubmitURL
hostname
httprealm
passwordField
timeCreated
timeLastUsed
timePasswordChanged
timesUsed
usernameField
BerkeleyDb
<Keys>k__BackingField
get_Keys
Reverse
Extract
source
littleEndian
Thunderbird
username
get_Password
<GetPasswords>b__0
<>c__DisplayClass1_1
<GetPasswords>b__1
Asn1Der
Orcus.Commands.Passwords.Applications.Mozilla.Cryptography
dataToParse
Sequence
Integer
BitString
OctetString
ObjectIdentifier
Asn1DerObject
<Type>k__BackingField
<Lenght>k__BackingField
<Objects>k__BackingField
get_Type
set_Type
get_Lenght
set_Lenght
get_Objects
set_Objects
Lenght
Objects
MozillaPBE
<GlobalSalt>k__BackingField
<MasterPassword>k__BackingField
<EntrySalt>k__BackingField
<Key>k__BackingField
<IV>k__BackingField
globalSalt
masterPassword
entrySalt
get_GlobalSalt
get_MasterPassword
get_EntrySalt
HMACSHA1
SHA1CryptoServiceProvider
Compute
GlobalSalt
MasterPassword
EntrySalt
TripleDesHelper
TripleDESCryptoServiceProvider
DescbcDecryptor
DescbcDecryptorByte
PasswordCheck
<Oid>k__BackingField
<Passwordcheck>k__BackingField
NumberStyles
set_EntrySalt
get_Oid
set_Oid
get_Passwordcheck
set_Passwordcheck
Passwordcheck
ProcessingEntriesChangedEventArgs
Orcus.Commands.FileExplorer
<FolderPath>k__BackingField
<ProcessingEntry>k__BackingField
ProcessingEntry
Orcus.Shared.Commands.FileExplorer
<EntryUpdateMode>k__BackingField
folderPath
processingEntry
entryUpdateMode
get_FolderPath
get_ProcessingEntry
get_EntryUpdateMode
FolderPath
EntryUpdateMode
Update
ZipUtilities
CollectFiles
directoryInfo
TarArchive
ICSharpCode.SharpZipLib.Tar
ToUpper
FastZip
ICSharpCode.SharpZipLib.Zip
ExtractZip
Overwrite
ConfirmOverwriteDelegate
GZipInputStream
ICSharpCode.SharpZipLib.GZip
InflaterInputStream
ICSharpCode.SharpZipLib.Zip.Compression.Streams
set_IsStreamOwner
BZip2InputStream
ICSharpCode.SharpZipLib.BZip2
LzwInputStream
ICSharpCode.SharpZipLib.LZW
CreateInputTarArchive
ProgressMessageHandler
add_ProgressMessageEvent
ExtractContents
set_Action
ProcessingEntryAction
set_CreationTime
set_IsDirectory
set_IsInterminate
set_LastAccess
ProgressHandler
ICSharpCode.SharpZipLib.Core
StreamUtils
set_Progress
ExtractArchive
archivePath
destinationDirectory
cancellationToken
reportCompressionStatus
addProcessingEntry
Lazy`1
CompressionMethod
GZipOutputStream
EntryInfo
ZipEntry
TarEntry
ArchiveOptions
get_ArchivePath
get_CompressionMethod
ZipOutputStream
DeflaterOutputStream
get_CompressionLevel
SetLevel
get_IsDirectory
CleanName
get_LastWriteTime
set_DateTime
set_AESKeySize
PutNextEntry
CloseEntry
BZip2OutputStream
get_UseTarPacker
TarOutputStream
CreateEntryFromFile
CreateArchive
archiveOptions
ReportCompressionStatus
AddProcessingEntry
lastEntry
lastProcessingEntry
get_File
<ExtractArchive>b__0
archive
<ExtractArchive>b__1
<ExtractArchive>b__2
<ExtractArchive>b__4
<ExtractArchive>b__5
<ExtractArchive>b__6
destinationFileStream
CS$<>8__locals3
ProgressEventArgs
get_PercentComplete
set_ContinueRunning
<ExtractArchive>b__3
outputStream
<>9__5
<>9__9
<>9__10
<>9__12
get_DirectoryName
get_Parent
<CreateArchive>b__0
<CreateArchive>b__3
<CreateArchive>b__5
<CreateArchive>b__6
<CreateArchive>b__9
<CreateArchive>b__10
<CreateArchive>b__11
<CreateArchive>b__12
<CreateArchive>b__13
<CreateArchive>b__14
<>c__DisplayClass4_1
updateStopwatch
currentLength
totalLength
<CreateArchive>g__UpdateProgress2
progress
get_Processed
<CreateArchive>b__4
<>c__DisplayClass4_2
zipStream
<>c__DisplayClass4_3
CS$<>8__locals4
<>9__8
<CreateArchive>b__8
<>c__DisplayClass4_4
tarOutputStream
<>9__4_7
<CreateArchive>b__4_1
<CreateArchive>b__4_7
WindowsThumbnailProvider
IShellItem2Guid
GetFullPath
GetThumbnail
GetPixelFormatSize
GetBitmapFromHBitmap
nativeHBitmap
CoreMemoryApi
CreateAlphaBitmap
srcBitmap
targetPixelFormat
GetExceptionForHR
GetHBitmap
DirectoryHelper
PackedDirectoryEntry
DirectoryEntry
set_Label
RecycleBinDirectory
GetNamespaceDirectories
IFileExplorerEntry
MyComputerDirectory
KnownFolderIds
InsertRange
GetComputerDirectoryEntries
FileSystemInfoEx
KnownFolder
FromKnownFolderId
get_DirectoryType
DirectoryTypeEnum
DriveDirectoryEntry
set_UsedSpace
DriveDirectoryType
get_TotalFreeSpace
get_HasSubFolder
set_HasSubFolder
get_CreationTimeUtc
get_LastAccessTimeUtc
set_IconId
GetDirectoryEntry
directory
parentFolder
GetDirectoryEntries
EnumerateFileSystemInfos
get_IsFolder
FileInfoEx
GetDirectoriesFast
EnumerateDirectories
FileEntry
get_KnownFolderId
get_Label
GetFileEntry
get_KnownFolderType
KnownFolderDefinition
LocalizedName
set_LabelPath
set_LabelId
SetFolderLabelResource
directoryEntry
GetFolderIcon
<GetNamespaceDirectories>b__0_0
<GetNamespaceDirectories>b__0_1
<GetComputerDirectoryEntries>b__1_0
<GetComputerDirectoryEntries>b__1_1
<GetComputerDirectoryEntries>b__1_2
<GetComputerDirectoryEntries>b__1_3
<GetDirectoryEntry>b__0
<GetDirectoryEntry>b__1
FileExplorerCommand
_canceledDownloads
ProcessingEntries
ProcessEntryCancellationTokens
ProcessingEntriesLock
ProcessingEntriesChanged
_uploadService
_processingEntryUpdateSerializer
_processingEntrySerializer
add_ProcessingEntriesChanged
remove_ProcessingEntriesChanged
DtpFunction
RootEntryCollection
RegisterFunction
DtpProcedure
RegisterProcedure
ShellProperty
ProcessingEntryUpdate
get_Progress
OnProcessingEntriesChanged
ICollection
ObjectToString
FileExplorerCommunication
DtpParameters
<.ctor>b__13_18
parameters
<.ctor>b__13_19
UploadResult
<.ctor>b__13_20
GetBool
DownloadInformation
DownloadResult
CreateZip
CopyTo
<.ctor>b__13_21
<.ctor>b__13_24
<.ctor>b__13_25
GetFileName
NormalizePath
<.ctor>b__13_29
get_Headers
WebHeaderCollection
NameValueCollection
DownloadProgressChangedEventHandler
add_DownloadProgressChanged
AsyncCompletedEventHandler
add_DownloadFileCompleted
DownloadFileAsync
<.ctor>b__13_32
<.ctor>b__13_37
<.ctor>g__RemoveProcessingEntry13_38
driveInfo
<.ctor>b__1
<>c__DisplayClass13_1
fileExplorerEntry
<.ctor>b__4
<>c__DisplayClass13_2
<.ctor>b__12
<>c__DisplayClass13_3
valueString
FileProperty
<.ctor>b__14
<>c__DisplayClass13_4
<.ctor>b__15
<>c__DisplayClass13_5
fileStream
fileToUpload
<.ctor>b__22
<>c__DisplayClass13_6
guidData
<.ctor>b__23
<>c__DisplayClass13_7
get_ClientInfo
<.ctor>b__26
<>c__DisplayClass13_8
get_ZipArchive
<.ctor>b__27
<>c__DisplayClass13_9
normalizedFolderPath
normalizedPath
<>9__31
get_DeleteAfterArchiving
<.ctor>b__30
<.ctor>b__31
<>c__DisplayClass13_10
webClient
stopwatch
CancelAsync
<.ctor>b__33
DownloadProgressChangedEventArgs
get_BytesReceived
ProgressChangedEventArgs
get_ProgressPercentage
<.ctor>b__34
AsyncCompletedEventArgs
get_Cancelled
get_Error
<.ctor>b__35
<>c__DisplayClass13_11
addedEntries
<>9__40
<>9__41
<.ctor>b__39
<.ctor>b__40
<.ctor>b__41
<>9__13_3
<>9__13_5
<>9__13_6
<>9__13_7
<>9__13_8
<>9__13_9
<>9__13_10
<>9__13_11
<>9__13_13
<>9__13_16
<>9__13_17
<>9__13_28
<>9__13_36
<>9__13_42
<>9__13_43
<>9__16_0
set_RootDirectories
set_ComputerDirectory
set_ComputerDirectoryEntries
get_ComputerDirectoryEntries
<.ctor>b__13_3
<.ctor>b__13_5
<.ctor>b__13_6
<.ctor>b__13_7
<.ctor>b__13_8
<.ctor>b__13_9
ShortcutInfo
GetTypeFromCLSID
InvokeMember
get_TargetLocation
get_WorkingDirectory
get_IconPath
get_IconIndex
get_Hotkey
FinalReleaseComObject
<.ctor>b__13_10
DirectoryPropertiesInfo
set_DirectoryType
DirectoryType
KnownFolderCategory
set_SpecialFolderType
SpecialFolderType
PropertiesInfo
set_LastAccessTime
get_LastWriteTimeUtc
set_LastWriteTime
get_Attributes
set_Attributes
<.ctor>b__13_11
FilePropertiesInfo
ShellObject
IShellProperty
ShellLibrary.Native
PropertyKey
set_OpenWithProgramPath
set_OpenWithProgramName
set_SizeOnDisk
set_FileProperties
FromParsingName
ShellProperties
get_DefaultPropertyCollection
ShellPropertyCollection
get_CanonicalName
get_ValueAsObject
get_PropertyKey
get_FormatId
set_FormatId
get_PropertyId
set_PropertyId
set_Group
FilePropertyGroup
get_FileProperties
GetProperties
<.ctor>b__13_13
HashValueType
SHA256CryptoServiceProvider
SHA512CryptoServiceProvider
<.ctor>b__13_16
<.ctor>b__13_17
<.ctor>b__13_28
<.ctor>b__13_36
<.ctor>b__13_42
<.ctor>b__13_43
<ObjectToString>b__16_0
FileHelper
association
extension
GetFileSizeOnDisk
get_Root
UploadProcess
_failed
<Path>k__BackingField
<HashValue>k__BackingField
<Length>k__BackingField
hashValue
get_HashValue
FinishUpload
HashValue
Length
UploadFinishedEventArgs
<UploadProcess>k__BackingField
uploadProcess
get_UploadProcess
UploadService
_uploadProcesses
_lockObject
CreateNewUploadProcess
CancelUpload
ReceivePackage
ClipboardManagerCommand
Orcus.Commands.ClipboardManager
BitmapHeight
_clipboardSerializer
ClipboardManagerCommunication
ClipboardData
StringListClipboardData
StringClipboardData
get_ClipboardFormat
get_StringList
StringListEntry
SetData
SetDataObjectData
clipboardData
ClipboardNotificationOnClipboardUpdate
ClipboardInfo
DataFormats
ImageClipboardData
FileDrop
SendClipboardUpdate
DataObject
get_BitmapData
SetDataObject
<>9__9_0
<SetDataObjectData>b__5_0
<SendClipboardUpdate>b__7_0
<.ctor>b__9_0
ClientCommandsCommand
Orcus.Commands.ClientCommands
ClientCommandsCommunication
Orcus.Shared.Commands.ClientCommands
pluginAvailable
ClientCommandsFeedbackFactory
_isFinalized
succeeded
CommandComparer
Orcus.CommandManagement
IEqualityComparer`1
CommandSelector
_selectorLock
_lockObjects
_commandSettings
<CommandCollection>k__BackingField
<CommandDictionary>k__BackingField
FactoryCommand
get_FactoryCommandType
Distinct
ForEach
get_CommandCollection
get_CommandDictionary
Current_CommandLoaded
GetCustomAttributes
GetCommandSettings
CommandCollection
CommandDictionary
<>9__3_1
<.ctor>b__3_0
<.ctor>b__3_1
<Dispose>b__4_0
<GetCommandSettings>b__13_0
lockObject
autoResetEventHandler
<>c__DisplayClass12_2
<ExecuteCommand>b__1
<>c__DisplayClass12_3
CommandSettings
<AllowMultipleThreads>k__BackingField
get_AllowMultipleThreads
set_AllowMultipleThreads
AllowMultipleThreads
ConnectionInfo
_sendLock
_isFailed
<ServerConnection>k__BackingField
<ClientInfo>k__BackingField
<ConnectionInitializer>k__BackingField
connectionInitializer
add_Failed
remove_Failed
CommandWarning
packageCompression
writeAction
Response
OnFailed
ClientInfo
ConnectionInitializer
_executionLockObject
_filePushRequests
set_ServerConnection
entryName
dataMode
InternalPushFile
isCsvData
CheckRunning
PushRequests
GetFreePushFileName
<CheckRunning>b__13_0
<>c__DisplayClass14_1
<PushRequests>b__0
<PushRequests>b__1
<PushRequests>b__2
FilePushRequest
<EntryName>k__BackingField
<DataMode>k__BackingField
<IsCsvData>k__BackingField
get_EntryName
set_EntryName
get_DataMode
set_DataMode
get_IsCsvData
set_IsCsvData
EntryName
IsCsvData
<ServicePipe>k__BackingField
ExecuteFileAnonymously
get_ServicePipe
ServicePipe
<PrivateImplementationDetails>
4D53392A6A24D5E801ADA14E79B43F9BEBB79150
65976E8BC1E21014EFB963E7F0E54D344F1B81A5
C2B5BE6748EA68C1D5360E1132C93241E5B43E2A
EE6001A9EFFBC3E336D7A05124DA53EF8D648CE1
__StaticArrayInitTypeSize=10
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=48
AssemblyLoader
Costura
nullCache
assemblyNames
symbolNames
CS$<>9__CachedAnonymousMethodDelegate1
CultureToString
culture
GetAssemblies
GetName
get_CultureInfo
ReadExistingAssembly
destination
DeflateStream
GetExecutingAssembly
LoadStream
fullname
resourceNames
ReadStream
ToLowerInvariant
ReadFromEmbeddedResources
requestedAssemblyName
get_Flags
AssemblyNameFlags
ResolveAssembly
assemblyName
<Attach>b__0
Attach
ProcessedByFody
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
AssemblyFileVersionAttribute
AssemblyProductAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
UnverifiableCodeAttribute
LOGCONSOLE
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
14.0.0.0
$43826d1e-e718-42ee-bc55-a1e261c37bfe
$bcc18b79-ba16-442f-80c4-8a59c30c463b
@Orcus.Commands.WindowManager.WindowManager+<GetChildWindows>d__1
JOrcus.Commands.UninstallPrograms.UninstallProgramsCommand+<GetEntries>d__2
QOrcus.Commands.AudioVolumeControl.AudioVolumeControlCommand+<GetAudioDevices>d__4
BOrcus.Commands.DeviceManager.HardwareHelper+<EnumerateDevices>d__0
TOrcus.Commands.Passwords.Utilities.RegistryKeyExtensions+<GetFormattedKeyValues>d__4
FOrcus.Commands.Passwords.Applications.WinSCP.WinSCP+<GetPasswords>d__0
HOrcus.Commands.Passwords.Applications.Windows.Windows+<GetPasswords>d__0
FOrcus.Commands.Passwords.Applications.Pidgin.Pidgin+<GetPasswords>d__0
ZOrcus.Commands.Passwords.Applications.InternetExplorer.InternetExplorer+<GetPasswords>d__1
$3C374A42-BAE4-11CF-BF7D-00AA006946EE
$3C374A41-BAE4-11CF-BF7D-00AA006946EE
$AFA0DC11-C313-11D0-831A-00C04FD5AE38
$3C374A40-BAE4-11CF-BF7D-00AA006946EE
LOrcus.Commands.Passwords.Applications.FileZilla.FileZilla+<GetPasswords>d__1
HOrcus.Commands.Passwords.Applications.CoreFTP.CoreFtp+<GetPasswords>d__1
						
WrapNonExceptionThrows
$3601a898-0fe1-4710-ac30-2e6c417f46bd
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <!-- UAC Manifest Options
             If you want to change the Windows User Account Control level replace the 
             requestedExecutionLevel node with one of the following.
        <requestedExecutionLevel  level="asInvoker" uiAccess="false" />
        <requestedExecutionLevel  level="requireAdministrator" uiAccess="false" />
        <requestedExecutionLevel  level="highestAvailable" uiAccess="false" />
            Specifying requestedExecutionLevel element will disable file and registry virtualization. 
            Remove this element if your application requires this virtualization for backwards
            compatibility.
        -->
        <requestedExecutionLevel level="asInvoker" uiAccess="false" />
      </requestedPrivileges>
    </security>
  </trustInfo>
  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
    <application>
      <!-- A list of the Windows versions that this application has been tested on and is
           is designed to work with. Uncomment the appropriate elements and Windows will 
           automatically selected the most compatible environment. -->
      <!-- Windows Vista -->
      <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />
      <!-- Windows 7 -->
      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />
      <!-- Windows 8 -->
      <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />
      <!-- Windows 8.1 -->
      <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />
      <!-- Windows 10 -->
      <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />
    </application>
  </compatibility>
  <!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
       DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need 
       to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should 
       also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config. -->
  <!--
  <application xmlns="urn:schemas-microsoft-com:asm.v3">
    <windowsSettings>
      <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
    </windowsSettings>
  </application>
  <!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
  <!--
  <dependency>
    <dependentAssembly>
      <assemblyIdentity
          type="win32"
          name="Microsoft.Windows.Common-Controls"
          version="6.0.0.0"
          processorArchitecture="*"
          publicKeyToken="6595b64144ccf1df"
          language="*"
        />
    </dependentAssembly>
  </dependency>
</assembly>
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD