L`R#.drectvel .debug$S@o@B.debug$T@B.text$mn+?C P`.debug$S$jCD@B.text$mnJD P`.debug$S( E2F@B.text$mndF!G P`.debug$SIGII @B.text$mnIJ P`.debug$S@JM@B.text$mnNN P`.debug$SNO@B.chks64xO .ltcgnfoR  Dd:\projects\shelcodeframework\framework\release\shellcode.obj:<ppMicrosoft (R) Optimizing Compiler9 nBINDSTRING_DOWNLOADPATHrPIDMSI_STATUS_DRAFT+tBINDSTATUS_BEGINDOWNLOADCOMPONENTSvNODE_COMMENTVAR_CONST CHANGEKIND_DELETEMEMBER"t BINDSTATUS_PROXYDETECTING"nBINDSTRING_PROXY_USERNAMEzPARSE_DECODE_IS_ESCAPE"t8BINDSTATUS_64BIT_PROGRESStKBINDSTATUS_RESERVED_12FUNC_VIRTUAL! FEATURE_ADDON_MANAGEMENTzPARSE_FRIENDLYnBINDSTRING_ROOTDOC_URLQUERY_REFRESH!COINITBASE_MULTITHREADEDFUNC_PUREVIRTUALVT_I1"t BINDSTATUS_SENDINGREQUEST xDESCKIND_IMPLICITAPPOBJnBINDSTRING_PASSWORDtBINDSTATUS_CONNECTING)t BINDSTATUS_ENDDOWNLOADCOMPONENTSv NODE_DOCUMENTCIP_NEED_REBOOTv NODE_DOCUMENT_FRAGMENT5JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUMEQUERY_RECOMBINECHANGEKIND_SETNAMES$VT_RECORDt"BINDSTATUS_COOKIE_SENTnBINDSTRING_URLtBBINDSTATUS_RESERVED_9CC_PASCALnBINDSTRING_USERNAMEz PARSE_SCHEMA QUERY_IS_CACHED/FEATURE_GET_URL_DOM_FILEPATH_UNENCODED t0BINDSTATUS_CACHECONTROL+FEATURE_DISABLE_LEGACY_COMPRESSIONQUERY_IS_SAFE%t$BINDSTATUS_COOKIE_SUPPRESSED1CIP_TRUST_VERIFICATION_COMPONENT_MISSINGvNODE_ENTITY"FEATURE_SAFE_BINDTOOBJECTSYS_WIN32tCBINDSTATUS_RESERVED_AUri_PROPERTY_HOST_TYPE%TP_CALLBACK_PRIORITY_INVALID&FEATURE_WEBOC_POPUPMANAGEMENTxDESCKIND_TYPECOMP$FEATURE_DISABLE_MK_PROTOCOLt,BINDSTATUS_P3P_HEADERCHANGEKIND_GENERALvNODE_CDATA_SECTIONrPIDMSI_STATUS_REVIEW#tBINDSTATUS_PROTOCOLCLASSIDt+BINDSTATUS_POLICY_HREFv NODE_DOCUMENT_TYPEt:BINDSTATUS_RESERVED_1!CIP_OLDER_VERSION_EXISTS$t5BINDSTATUS_SSLUX_NAVBLOCKEDFEATURE_XMLHTTP'tBINDSTATUS_CLSIDCANINSTANTIATE*FEATURE_DISABLE_NAVIGATION_SOUNDS(t%BINDSTATUS_COOKIE_STATE_UNKNOWN3DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACEDFEATURE_MIME_HANDLING!QUERY_USES_HISTORYFOLDERCC_STDCALL(t4BINDSTATUS_DISPLAYNAMEAVAILABLE#tBINDSTATUS_DOWNLOADINGDATAnBINDSTRING_UA_COLORCIP_DISK_FULLCC_MACPASCALnBINDSTRING_EXTRA_URL"n BINDSTRING_POST_DATA_MIMEUri_PROPERTY_USER_NAME"FEATURE_PROTOCOL_LOCKDOWNTYSPEC_MIMETYPExDESCKIND_FUNCDESC't(BINDSTATUS_COOKIE_STATE_PROMPT t!BINDSTATUS_ACCEPTRANGES&tBINDSTATUS_BEGINSYNCOPERATIONFUNC_STATIC$tBINDSTATUS_ENDSYNCOPERATION( FEATURE_RESTRICT_ACTIVEXINSTALLSYS_WIN16"QUERY_TIME_OF_LAST_CHANGEUri_HOST_IPV4&FEATURE_FORCE_ADDR_AND_STATUSrPIDMSI_STATUS_NEW*tBINDSTATUS_CACHEFILENAMEAVAILABLEnBINDSTRING_XDR_ORIGINtBINDSTATUS_DIRECTBINDTYSPEC_PACKAGENAMEzPARSE_DOCUMENT(URLZONE_TRUSTED/FEATURE_HTTP_USERNAME_PASSWORD_DISABLE*PowerUserMaximum#tBINDSTATUS_ENDDOWNLOADDATA,TKIND_UNIONCC_SYSCALLvNODE_ELEMENTTYSPEC_FILEEXTTYSPEC_FILENAMECC_MPWCDECLtBINDSTATUS_REDIRECTING'CLSCTX_ACTIVATE_X86_SERVER,TKIND_DISPATCHzPARSE_SECURITY_DOMAINtIBINDSTATUS_RESERVED_10vNODE_INVALIDz PARSE_MIMErPIDMSI_STATUS_PRELIMzPARSE_LOCATIONXMLELEMTYPE_DTD&tBINDSTATUS_LOADINGMIMEHANDLER+CIP_EXE_SELF_REGISTERATION_TIMEOUTzPARSE_SECURITY_URLz PARSE_PATH_FROM_URLCC_MSCPASCAL-tBINDSTATUS_VERIFIEDMIMETYPEAVAILABLE+t-BINDSTATUS_SESSION_COOKIE_RECEIVEDCIP_ACCESS_DENIEDFUNC_NONVIRTUAL,t7BINDSTATUS_SNIFFED_CLASSIDAVAILABLE,TKIND_RECORDXMLELEMTYPE_ELEMENTvNODE_TEXTtGBINDSTATUS_RESERVED_EVAR_STATICtFBINDSTATUS_RESERVED_D,TKIND_COCLASSz PARSE_URL_FROM_PATHFEATURE_SSLUX VT_VARIANT$TP_CALLBACK_PRIORITY_NORMALrPIDMSI_STATUS_NORMAL(URLZONE_INTRANET,tBINDSTATUS_CONTENTDISPOSITIONATTACHrPIDMSI_STATUS_EDITt=BINDSTATUS_RESERVED_4nBINDSTRING_LANGUAGE CHANGEKIND_CHANGEFAILEDXMLELEMTYPE_DOCUMENTn BINDSTRING_POST_COOKIE*JOB_OBJECT_IO_RATE_CONTROL_ENABLE,TKIND_INTERFACE+t/BINDSTATUS_SESSION_COOKIES_ALLOWEDn BINDSTRING_OSQUERY_EXPIRATION_DATEzPARSE_SITECC_MPWPASCALVT_RESERVEDt;BINDSTATUS_RESERVED_2TYSPEC_CLSIDUri_HOST_IPV6CHANGEKIND_INVALIDATEURLZONEREG_HKLM%tBINDSTATUS_IUNKNOWNAVAILABLECIP_UNSAFE_TO_ABORT FEATURE_TABBED_BROWSINGzPARSE_ANCHOR!CIP_NEWER_VERSION_EXISTS" QUERY_IS_CACHED_OR_MAPPED$FEATURE_BLOCK_INPUT_PROMPTSUri_PROPERTY_ZONEPSU_DEFAULTQUERY_CAN_NAVIGATESYS_MAC,TKIND_MODULEz PARSE_SERVER+t#BINDSTATUS_COMPACT_POLICY_RECEIVEDQUERY_CONTENT_ENCODINGCC_FPFASTCALLVT_I2)t2BINDSTATUS_MIMETEXTPLAINMISMATCH(tBINDSTATUS_FILTERREPORTMIMETYPE0JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGSt@BINDSTATUS_RESERVED_79JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL#FEATURE_UNC_SAVEDFILECHECK FEATURE_SECURITYBAND& FEATURE_VALIDATE_NAVIGATE_URLnBINDSTRING_UA_PIXELSCIP_NAME_CONFLICTzPARSE_DOMAIN2JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH(URLZONE_LOCAL_MACHINE VT_ERROR VT_UNKNOWNtDBINDSTATUS_RESERVED_B%tBINDSTATUS_BEGINDOWNLOADDATA(FEATURE_DISABLE_TELNET_PROTOCOL,t6BINDSTATUS_SERVER_MIMETYPEAVAILABLE!nBINDSTRING_ENTERPRISE_ID VT_DISPATCHtEBINDSTATUS_RESERVED_C.t.BINDSTATUS_PERSISTENT_COOKIE_RECEIVEDzPARSE_CANONICALIZEXMLELEMTYPE_PIxDESCKIND_VARDESC(tBINDSTATUS_INSTALLINGCOMPONENTSQUERY_USES_NETWORK,TKIND_ALIAS$t BINDSTATUS_CLASSIDAVAILABLE$FEATURE_WINDOW_RESTRICTIONSVAR_PERINSTANCE+JOB_OBJECT_NET_RATE_CONTROL_ENABLErPIDMSI_STATUS_PROOF&t)BINDSTATUS_COOKIE_STATE_LEASH't&BINDSTATUS_COOKIE_STATE_ACCEPT!tBINDSTATUS_UPLOADINGDATA(tBINDSTATUS_CLASSINSTALLLOCATION##BINDHANDLETYPES_DEPENDENCYXMLELEMTYPE_COMMENTFEATURE_MIME_SNIFFINGAJOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAPvNODE_ATTRIBUTE,TKIND_ENUMt?BINDSTATUS_RESERVED_6xDESCKIND_NONEVT_BSTRtBINDSTATUS_DECODINGtBINDSTATUS_ENCODINGFEATURE_BEHAVIORSnBINDSTRING_IID QUERY_IS_SECURE't'BINDSTATUS_COOKIE_STATE_REJECTFEATURE_OBJECT_CACHINGTYSPEC_PROGID(URLZONE_INTERNETXMLELEMTYPE_TEXTCC_CDECL#tBINDSTATUS_BEGINUPLOADDATAt<BINDSTATUS_RESERVED_3tBINDSTATUS_RAWMIMETYPE$vNODE_PROCESSING_INSTRUCTIONCOR_VERSION_MAJOR_V2n BINDSTRING_USER_AGENTtJBINDSTATUS_RESERVED_11QUERY_CONTENT_TYPEt8BINDSTATUS_LASTCHANGEKIND_ADDMEMBERnBINDSTRING_DOC_URL#t BINDSTATUS_USINGCACHEDCOPY!tBINDSTATUS_ENDUPLOADDATA$n BINDSTRING_ACCEPT_ENCODINGS$nBINDSTRING_PTR_BIND_CONTEXTt9BINDSTATUS_RESERVED_0!zPARSE_ENCODE_IS_UNESCAPE"Uri_PROPERTY_ABSOLUTE_URI QUERY_USES_CACHEtABINDSTATUS_RESERVED_8.t1BINDSTATUS_CONTENTDISPOSITIONFILENAME'nBINDSTRING_FLAG_BIND_TO_OBJECT$CHANGEKIND_SETDOCUMENTATIONFEATURE_FEEDS!rPIDMSI_STATUS_INPROGRESSURLZONEREG_DEFAULTUri_HOST_UNKNOWNServerApplicationnBINDSTRING_HEADERSVT_I8"nBINDSTRING_PROXY_PASSWORDzPARSE_ROOTDOCUMENT nBINDSTRING_ACCEPT_MIMESVT_I4tHBINDSTATUS_RESERVED_FQIdleShutdown-JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAGzPARSE_ESCAPEt>BINDSTATUS_RESERVED_5&FEATURE_LOCALMACHINE_LOCKDOWNvNODE_ENTITY_REFERENCE& FEATURE_RESTRICT_FILEDOWNLOADFEATURE_ZONE_ELEVATIONUri_HOST_DNStLBINDSTATUS_RESERVED_13#tBINDSTATUS_FINDINGRESOURCE  QUERY_IS_INSTALLEDENTRY,COMGLB_EXCEPTION_DONOT_HANDLE_FATAL$nBINDSTRING_INITIAL_FILENAME%t BINDSTATUS_MIMETYPEAVAILABLE*t*BINDSTATUS_COOKIE_STATE_DOWNGRADE&t3BINDSTATUS_PUBLISHERAVAILABLELPPARAMDESCEXFUNCKINDtagPARAMDESCEXPARAMDESCtagPARAMDESCtagARRAYDESCCALLCONVxDESCKIND]ELEMDESCBINDPTRtagFUNCDESCINVOKEKINDSTLIBATTRXPIMAGE_NT_HEADERS32tagBINDPTR}tagSTATSTGdtagTYPEDESCFUNCDESC"HREFTYPESYSKINDtagVARDESC,TYPEKINDIEnumSTATSTG}STATSTG{ITypeCompdTYPEDESCZIDLDESC]tagELEMDESCZtagIDLDESC0VARIANTARGXEXCEPINFOXtagEXCEPINFO DISPIDMEMBERID uUINTytagCAULRPIMAGE_DOS_HEADERStagTLIBATTR_TP_CALLBACK_PRIORITYQtagShutdownTypeqOLECHARtagCABSTRtagCALLCONV,tagTYPEKIND0VARIANThPIMAGE_EXPORT_DIRECTORYIMAGE_FILE_HEADERISequentialStreamBSTRBLOBfIMAGE_DATA_DIRECTORYursize_t"DWORD_PTRTYPEATTRVARIANT_BOOL qPUWSTR(JOB_OBJECT_NET_RATE_CONTROL_FLAGSAR_STATE?tagCADBL_DEVICE_DATA_SET_RANGEVARKIND_tagPSUACTIONXPIMAGE_NT_HEADERS AtagDECDCALPSTRLONG_PTRntagBINDSTRINGtagCACLIPDATA"ULONG_PTR(tagURLZONEPTP_CLEANUP_GROUP__MIDL_ICodeInstall_0001 pPCHARttagBINDSTATUS E_GUID_URLZONEREG_LARGE_INTEGER'G_LARGE_INTEGER::CLIPDATACAFILETIMEDtagCALPSTRrCALPWSTR pCALtagCABSTRBLOB0tagSAFEARRAYBOUND>tagCAFLT2HINSTANCE tagCAHADECIMALtagCAUI !WORD CAUH~tagCADATE ?CADBL*LPCOLESTR*PCUWSTRCAPROPVARIANT >CAFLT'JOB_OBJECT_IO_RATE_CONTROL_FLAGS*_USER_ACTIVITY_PRESENCE PLONG2DISPPARAMS_FILETIMEPDEVICE_DSM_DEFINITION  BYTE *PCWSTR<IStreamCACLIPDATAVARDESC LONGITypeLibwtagCACYtagBSTRBLOBtagCAUH_TP_CALLBACK_ENVIRON_V30_TP_CALLBACK_ENVIRON_V3::B_TP_CALLBACK_ENVIRON_V3::::f_IMAGE_DATA_DIRECTORYu_ULARGE_INTEGER(_ULARGE_INTEGER::*LPVARIANTSAFEARRAY4HINSTANCE__tagCABOOL2HMODULEqtagBLOB CABOOL#ULONG64 -SNB_tagINTERNETFEATURELISTCABSTRBLOB "SIZE_TbIMAGE_OPTIONAL_HEADER32tagTYPEATTR ADATE#ReplacesCorHdrNumericDefines "DWORD&DISPLAYCONFIG_SCANLINE_ORDERING 7LPCSTR=FARPROCPTP_CALLBACK_INSTANCE PSHORT"TP_VERSION qBSTRFFN_MessageBoxA .CAUBITypeInfo@FN_GetProcAddress(tagPROPVARIANT yCAUL !PWORDV_IMAGE_DOS_HEADER wCACY\_IMAGE_NT_HEADERSuULARGE_INTEGERTP_CALLBACK_PRIORITY_locale_tVARENUM CHWND$tagCASCODE|tagCACLSID ldiv_t8FN_LoadLibraryArtagCALPWSTR qBLOB#DWORD64!PROPVAR_PAD1PTP_SIMPLE_CALLBACK tINToIStorage0tagVARIANT &tagCAI ADOUBLE  UCHAR "LCID BOOLEANPTP_CALLBACK_ENVIRONtagTYSPECj_IMAGE_EXPORT_DIRECTORYLPVERSIONEDSTREAM2tagDISPPARAMS !USHORTtagVARKIND PVOID0SAFEARRAYBOUNDIUnknownterrno_t qWCHAR_DEVICE_DSM_DEFINITION tagCAC.tagCAUB_lldiv_t EIID_tagQUERYOPTIONqLPOLESTR__MIDL_IUri_0002HRESULT &CAIPDEVICE_DSM_INPUT$CASCODE!#__MIDL_IGetBindHandle_0001 tagCY LONG64tagCOINITBASE "ULONG!VARTYPE tBOOL CAC__crt_locale_data_publictagApplicationType0_DEVICE_MANAGE_DATA_SET_ATTRIBUTES_OUTPUT @FLOAT!PROPVAR_PAD3NtagApiInterfacevtagDOMNodeType CAUItagCLIPDATAtagSAFEARRAY"DEVICE_DSM_ACTIONb_IMAGE_OPTIONAL_HEADERtagVersionedStream CABSTRtagCHANGEKINDtagSYSKIND IDispatch ECLSID qLPWSTR(PROPVARIANT LPSAFEARRAYPTP_POOL EGUID*_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG_IMAGE_FILE_HEADERTP_CALLBACK_ENVIRON_V3tagFUNCKINDLARGE_INTEGER CAHtagCAFILETIME HANDLErPIDMSI_STATUS_VALUE#ULONGLONGtagCAPROPVARIANT(PTP_CLEANUP_GROUP_CANCEL_CALLBACK CYFILETIMEPDEVICE_DSM_RANGE__MIDL_IUri_0001NAPIINTERFACEIRecordInfo usize_tPDEVICE_DSM_OUTPUTLONGLONG)_DEVICE_MANAGE_DATA_SET_ATTRIBUTEStagGLOBALOPT_EH_VALUES*PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIGlldiv_t SHORTPLONG64_ldiv_t SCODEtagCLSCTXtagXMLEMEM_TYPE ~CADATE pCHAR|CACLSID!PROPVAR_PAD2z_tagPARSEACTION pLPSTRxtagDESCKIND__crt_locale_pointers "PDWORD ptagCAL#DWORDLONG HHWND__WrЌ(U7dÁQuk\c}?A4E@GLIXLcOlPSUVY[\^`aefhi X \ v z       A E h l UE P9Eu3]$.t.G]MyStrcmp "str1  pstr2O8,$&') X \   }}.՜J "b;/N߀N1(>NGcCUy rN*5#D)NͿ@comp.idp @feat.00.drectvec.debug$S@c.debug$TXc.text$mn+'Tc.debug$S$c.text$mnJ]T:c.debug$S(c.text$mnةc.debug$S  c.text$mn :&=c.debug$S @ c.text$mn c.debug$S  c . U j  .chks64xc?MyGetProcAddress@@YAKPAUHINSTANCE__@@K@Z?GetKernel32Base@@YAPAUHINSTANCE__@@XZ?MyStrcmp@@YAHKPAD@Z?GetProcHash@@YAKPAD@Z?MyEntry@@YAXXZ