L|Ĩ_Qf.drectve  .debug$S9=&@B.msvcjmc?@.text$mn?? P`.debug$S`?RA @B.text$mnACB P`.debug$S0aBC@B.text$mn|C?E P`.debug$SlE_H@B.text$mnE1IvJ P`.debug$SHJM@B.text$mnO|NN P`.debug$SNO@B.text$mnP P`.debug$SPP@B.rtc$IMZPP@0@.rtc$TMZPP@0@.debug$TTP@B.chks64DQ /DEFAULTLIB:"uuid.lib" /DEFAULTLIB:"uuid.lib" /DEFAULTLIB:"LIBCMT" /DEFAULTLIB:"OLDNAMES" /EDITANDCONTINUE /alternatename:@__CheckForDebuggerJustMyCode@4=__JustMyCode_Default BD:\projects\ShelCodeFramework\Framework\Debug\Shellcode.obj:<!ppMicrosoft (R) Optimizing Compiler$std0BINDSTRING_HEADERS BINDSTRING_ACCEPT_MIMESBINDSTRING_EXTRA_URLBINDSTRING_LANGUAGEBINDSTRING_USERNAMEBINDSTRING_PASSWORDBINDSTRING_UA_PIXELSBINDSTRING_UA_COLOR BINDSTRING_OS BINDSTRING_USER_AGENT$ BINDSTRING_ACCEPT_ENCODINGS BINDSTRING_POST_COOKIE" BINDSTRING_POST_DATA_MIMEBINDSTRING_URLBINDSTRING_IID'BINDSTRING_FLAG_BIND_TO_OBJECT$BINDSTRING_PTR_BIND_CONTEXTBINDSTRING_XDR_ORIGIN BINDSTRING_DOWNLOADPATHBINDSTRING_ROOTDOC_URL$BINDSTRING_INITIAL_FILENAME"BINDSTRING_PROXY_USERNAME"BINDSTRING_PROXY_PASSWORD!BINDSTRING_ENTERPRISE_IDBINDSTRING_DOC_URLPARSE_CANONICALIZEPARSE_FRIENDLYPARSE_SECURITY_URLPARSE_ROOTDOCUMENTPARSE_DOCUMENTPARSE_ANCHOR!PARSE_ENCODE_IS_UNESCAPEPARSE_DECODE_IS_ESCAPE PARSE_PATH_FROM_URL PARSE_URL_FROM_PATH PARSE_MIME PARSE_SERVER PARSE_SCHEMAPARSE_SITEPARSE_DOMAINPARSE_LOCATIONPARSE_SECURITY_DOMAINPARSE_ESCAPEPSU_DEFAULTQUERY_EXPIRATION_DATE"QUERY_TIME_OF_LAST_CHANGEQUERY_CONTENT_ENCODINGQUERY_CONTENT_TYPEQUERY_REFRESHQUERY_RECOMBINEQUERY_CAN_NAVIGATEQUERY_USES_NETWORK QUERY_IS_CACHED  QUERY_IS_INSTALLEDENTRY" QUERY_IS_CACHED_OR_MAPPED QUERY_USES_CACHE QUERY_IS_SECUREQUERY_IS_SAFE!QUERY_USES_HISTORYFOLDER,ServerApplicationbIdleShutdownFEATURE_OBJECT_CACHINGFEATURE_ZONE_ELEVATIONFEATURE_MIME_HANDLINGFEATURE_MIME_SNIFFING$FEATURE_WINDOW_RESTRICTIONS&FEATURE_WEBOC_POPUPMANAGEMENTFEATURE_BEHAVIORS$FEATURE_DISABLE_MK_PROTOCOL&FEATURE_LOCALMACHINE_LOCKDOWN FEATURE_SECURITYBAND( FEATURE_RESTRICT_ACTIVEXINSTALL& FEATURE_VALIDATE_NAVIGATE_URL& FEATURE_RESTRICT_FILEDOWNLOAD! FEATURE_ADDON_MANAGEMENT"FEATURE_PROTOCOL_LOCKDOWN/FEATURE_HTTP_USERNAME_PASSWORD_DISABLE"FEATURE_SAFE_BINDTOOBJECT#FEATURE_UNC_SAVEDFILECHECK/FEATURE_GET_URL_DOM_FILEPATH_UNENCODED FEATURE_TABBED_BROWSINGFEATURE_SSLUX*FEATURE_DISABLE_NAVIGATION_SOUNDS+FEATURE_DISABLE_LEGACY_COMPRESSION&FEATURE_FORCE_ADDR_AND_STATUSFEATURE_XMLHTTP(FEATURE_DISABLE_TELNET_PROTOCOLFEATURE_FEEDS$FEATURE_BLOCK_INPUT_PROMPTS9URLZONE_LOCAL_MACHINE9URLZONE_INTRANET9URLZONE_TRUSTED9URLZONE_INTERNETURLZONEREG_DEFAULTURLZONEREG_HKLM#4BINDHANDLETYPES_DEPENDENCY=TKIND_ENUM=TKIND_RECORD=TKIND_MODULE=TKIND_INTERFACE=TKIND_DISPATCH=TKIND_COCLASS=TKIND_ALIAS=TKIND_UNIONPIDMSI_STATUS_NORMALPIDMSI_STATUS_NEWPIDMSI_STATUS_PRELIMPIDMSI_STATUS_DRAFT!PIDMSI_STATUS_INPROGRESSPIDMSI_STATUS_EDITPIDMSI_STATUS_REVIEWPIDMSI_STATUS_PROOFCC_CDECLCC_MSCPASCALCC_PASCALCC_MACPASCALCC_STDCALLCC_FPFASTCALLCC_SYSCALLCC_MPWCDECLCC_MPWPASCALFUNC_VIRTUALFUNC_PUREVIRTUALFUNC_NONVIRTUALFUNC_STATICVAR_PERINSTANCEVAR_STATICVAR_CONSTDESCKIND_NONEDESCKIND_FUNCDESCDESCKIND_VARDESCDESCKIND_TYPECOMP DESCKIND_IMPLICITAPPOBJSYS_WIN16SYS_WIN32SYS_MACCOR_VERSION_MAJOR_V2CHANGEKIND_ADDMEMBER CHANGEKIND_DELETEMEMBERCHANGEKIND_SETNAMES$CHANGEKIND_SETDOCUMENTATIONCHANGEKIND_GENERALCHANGEKIND_INVALIDATE CHANGEKIND_CHANGEFAILED$TP_CALLBACK_PRIORITY_NORMAL%TP_CALLBACK_PRIORITY_INVALID!COINITBASE_MULTITHREADED'CLSCTX_ACTIVATE_X86_SERVER,COMGLB_EXCEPTION_DONOT_HANDLE_FATALVT_I2VT_I4VT_BSTR VT_DISPATCH VT_ERROR VT_VARIANT VT_UNKNOWNVT_I1VT_I8$VT_RECORDNODE_INVALIDNODE_ELEMENTNODE_ATTRIBUTENODE_TEXTNODE_CDATA_SECTIONNODE_ENTITY_REFERENCENODE_ENTITY$NODE_PROCESSING_INSTRUCTIONNODE_COMMENT NODE_DOCUMENT NODE_DOCUMENT_TYPE NODE_DOCUMENT_FRAGMENTVT_RESERVEDXMLELEMTYPE_ELEMENTXMLELEMTYPE_TEXTXMLELEMTYPE_COMMENTXMLELEMTYPE_DOCUMENTXMLELEMTYPE_DTDXMLELEMTYPE_PI&TYSPEC_CLSID&TYSPEC_FILEEXT&TYSPEC_MIMETYPE&TYSPEC_FILENAME&TYSPEC_PROGID&TYSPEC_PACKAGENAME3 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED  _804F7422_ctype@h  _2CC76C98_basetsd@h)  _C40B9FB8_corecrt_memcpy_s@h'  _B698C7EE_corecrt_memory@h(  _C9CF11B0_corecrt_wstring@h  _E36C0A2C_string@h  _80454D8C_guiddef@h  _A8C6A2DE_winnt@h*  _185975DA_processthreadsapi@h"  _E184835D_memoryapi@h!  _DFCD8BC5_winerror@h  _8170FE70_winbase@h  _E998B507_winuser@h!  _7698CB77_winioctl@h  _651F9E88_stdlib@h  _DEC60988_propidl@h  _5F3BBA04_oleauto@h!  _AA96396D_stralign@h$  _0FA4DE70_Shellcode@cpp+JOB_OBJECT_NET_RATE_CONTROL_ENABLE2JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH-JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG0JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS*JOB_OBJECT_IO_RATE_CONTROL_ENABLE5JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME9JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALLAJOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP#BINDSTATUS_FINDINGRESOURCEBINDSTATUS_CONNECTINGBINDSTATUS_REDIRECTING%BINDSTATUS_BEGINDOWNLOADDATA#BINDSTATUS_DOWNLOADINGDATA#BINDSTATUS_ENDDOWNLOADDATA+BINDSTATUS_BEGINDOWNLOADCOMPONENTS(BINDSTATUS_INSTALLINGCOMPONENTS) BINDSTATUS_ENDDOWNLOADCOMPONENTS# BINDSTATUS_USINGCACHEDCOPY" BINDSTATUS_SENDINGREQUEST$ BINDSTATUS_CLASSIDAVAILABLE% BINDSTATUS_MIMETYPEAVAILABLE*BINDSTATUS_CACHEFILENAMEAVAILABLE&BINDSTATUS_BEGINSYNCOPERATION$BINDSTATUS_ENDSYNCOPERATION#BINDSTATUS_BEGINUPLOADDATA!BINDSTATUS_UPLOADINGDATA!BINDSTATUS_ENDUPLOADDATA#BINDSTATUS_PROTOCOLCLASSIDBINDSTATUS_ENCODING-BINDSTATUS_VERIFIEDMIMETYPEAVAILABLE(BINDSTATUS_CLASSINSTALLLOCATIONBINDSTATUS_DECODING&BINDSTATUS_LOADINGMIMEHANDLER,BINDSTATUS_CONTENTDISPOSITIONATTACH(BINDSTATUS_FILTERREPORTMIMETYPE'BINDSTATUS_CLSIDCANINSTANTIATE%BINDSTATUS_IUNKNOWNAVAILABLEBINDSTATUS_DIRECTBINDBINDSTATUS_RAWMIMETYPE" BINDSTATUS_PROXYDETECTING !BINDSTATUS_ACCEPTRANGES"BINDSTATUS_COOKIE_SENT+#BINDSTATUS_COMPACT_POLICY_RECEIVED%$BINDSTATUS_COOKIE_SUPPRESSED(%BINDSTATUS_COOKIE_STATE_UNKNOWN'&BINDSTATUS_COOKIE_STATE_ACCEPT''BINDSTATUS_COOKIE_STATE_REJECT'(BINDSTATUS_COOKIE_STATE_PROMPT&)BINDSTATUS_COOKIE_STATE_LEASH**BINDSTATUS_COOKIE_STATE_DOWNGRADE+BINDSTATUS_POLICY_HREF,BINDSTATUS_P3P_HEADER+-BINDSTATUS_SESSION_COOKIE_RECEIVED..BINDSTATUS_PERSISTENT_COOKIE_RECEIVED+/BINDSTATUS_SESSION_COOKIES_ALLOWED 0BINDSTATUS_CACHECONTROL.1BINDSTATUS_CONTENTDISPOSITIONFILENAME)2BINDSTATUS_MIMETEXTPLAINMISMATCH&3BINDSTATUS_PUBLISHERAVAILABLE(4BINDSTATUS_DISPLAYNAMEAVAILABLE$5BINDSTATUS_SSLUX_NAVBLOCKED,6BINDSTATUS_SERVER_MIMETYPEAVAILABLE,7BINDSTATUS_SNIFFED_CLASSIDAVAILABLE"8BINDSTATUS_64BIT_PROGRESS8BINDSTATUS_LAST9BINDSTATUS_RESERVED_0:BINDSTATUS_RESERVED_1;BINDSTATUS_RESERVED_2<BINDSTATUS_RESERVED_3=BINDSTATUS_RESERVED_4>BINDSTATUS_RESERVED_5?BINDSTATUS_RESERVED_6@BINDSTATUS_RESERVED_7ABINDSTATUS_RESERVED_8BBINDSTATUS_RESERVED_9CBINDSTATUS_RESERVED_ADBINDSTATUS_RESERVED_BEBINDSTATUS_RESERVED_CFBINDSTATUS_RESERVED_DGBINDSTATUS_RESERVED_EHBINDSTATUS_RESERVED_FIBINDSTATUS_RESERVED_10JBINDSTATUS_RESERVED_11KBINDSTATUS_RESERVED_12LBINDSTATUS_RESERVED_13;PowerUserMaximumCIP_DISK_FULLCIP_ACCESS_DENIED!CIP_NEWER_VERSION_EXISTS!CIP_OLDER_VERSION_EXISTSCIP_NAME_CONFLICT1CIP_TRUST_VERIFICATION_COMPONENT_MISSING+CIP_EXE_SELF_REGISTERATION_TIMEOUTCIP_UNSAFE_TO_ABORTCIP_NEED_REBOOT"Uri_PROPERTY_ABSOLUTE_URIUri_PROPERTY_USER_NAMEUri_PROPERTY_HOST_TYPEUri_PROPERTY_ZONE0Uri_HOST_UNKNOWN0Uri_HOST_DNS0Uri_HOST_IPV40Uri_HOST_IPV6FUNCKINDCALLCONVDESCKINDiPIMAGE_NT_HEADERS32"HREFTYPESYSKIND=TYPEKIND DISPIDMEMBERID uUINTcPIMAGE_DOS_HEADER_TP_CALLBACK_PRIORITYbtagShutdownTypeqOLECHARtagCALLCONV=tagTYPEKINDyPIMAGE_EXPORT_DIRECTORYIMAGE_FILE_HEADERwIMAGE_DATA_DIRECTORYursize_t"DWORD_PTRVARIANT_BOOL qPUWSTR(JOB_OBJECT_NET_RATE_CONTROL_FLAGSVARKIND_tagPSUACTIONiPIMAGE_NT_HEADERSLONG_PTRtagBINDSTRING"ULONG_PTR9tagURLZONE__MIDL_ICodeInstall_0001 pPCHARtagBINDSTATUS_URLZONEREGCHINSTANCE !WORD'JOB_OBJECT_IO_RATE_CONTROL_FLAGS;_USER_ACTIVITY_PRESENCE PLONG  BYTE LONGw_IMAGE_DATA_DIRECTORYEHINSTANCE__CHMODULE#ULONG64 2SNB_tagINTERNETFEATURELIST "SIZE_TsIMAGE_OPTIONAL_HEADER32 ADATE#ReplacesCorHdrNumericDefines "DWORD& DISPLAYCONFIG_SCANLINE_ORDERING <LPCSTRNFARPROC PSHORT"TP_VERSION qBSTRWFN_MessageBoxAQFN_GetProcAddress !PWORDg_IMAGE_DOS_HEADERm_IMAGE_NT_HEADERSTP_CALLBACK_PRIORITYVARENUM THWNDIFN_LoadLibraryA#DWORD64!PROPVAR_PAD1 tINT ADOUBLE  UCHAR "LCID BOOLEAN&tagTYSPEC{_IMAGE_EXPORT_DIRECTORY !USHORTtagVARKIND PVOIDterrno_t qWCHAR_tagQUERYOPTIONqLPOLESTR0__MIDL_IUri_0002HRESULT!4__MIDL_IGetBindHandle_0001 LONG64tagCOINITBASE "ULONG!VARTYPE tBOOL,tagApplicationType @FLOAT!PROPVAR_PAD3_tagApiInterfacetagDOMNodeType"DEVICE_DSM_ACTIONs_IMAGE_OPTIONAL_HEADERtagCHANGEKINDtagSYSKIND qLPWSTR_IMAGE_FILE_HEADERtagFUNCKIND HANDLEPIDMSI_STATUS_VALUE#ULONGLONG__MIDL_IUri_0001_APIINTERFACE usize_tLONGLONGtagGLOBALOPT_EH_VALUES SHORTPLONG64 SCODEtagCLSCTXtagXMLEMEM_TYPE pCHAR!PROPVAR_PAD2_tagPARSEACTION pLPSTRtagDESCKIND "PDWORD#DWORDLONG YHWND__eVsh"d7Q(yVl}~W>uk\c}3@4B5E6H8K9 CXC \C P P O O N N C C USVW$7EEEE+EEEMME'UU'uɋE_^[;]$H{K$g 1Go[GetProcHash  plpProcName pp "resultO`x T(.5AMl o! EXE \E E E U@SVWP3ʼnEE ETHEUEsEeErE3E2EEÍEEPMQEEPMQEEPU;EEPMQEEHEeElElEoEEtEiEtEjEPMQjU;RPXZ_^[M3@;]f szTitleszHelloszUser32ai_).HdCtBBKBKQGIK,R8SDTPU\V$|@( -G|(|ZMyEntry@  :       "szLoadLibraryA "szMessageBoxA _ai "szGetProcAddr ChKernel32 \szUser32 [szHello ZszTitle ChUser329I9WO|x(29@\ c k ~  FXF \F S S T T U U V V R R Q Q F F F F F F U\SVWWEEEEMH5?AAVEbGnIzLOPSUVY[\^` a ef.h1i BXB \B vB zB B B B B B B AB EB hB lB USVW@0E P9Eu3_^[;]$H-EGK$OK t.GO;MyStrcmp  "str1  pstr2O@Ox4$(&9';) DXD \D D D U]$.]9GA_JustMyCode_DefaultO JXJ \J LMN1H ;"D:\projects\ShelCodeFramework\Framework\Debug\vc142.pdbbNl7^ZTS~>w6>'x|vtEA6OBm%ԱJ.6*#>TaVpVkq(6v,GK45O$lqxp~r?a/?a/ۊj1 @comp.idp@feat.00.drectve.debug$S9&=.msvcjmc ,Jf      5 K_t.text$mnsRݤ-.debug$S` .text$mnQN!.debug$S0..text$mn|K!hx.debug$S l7.text$mn Eyo M7.debug$S H I".text$mn OD'_핥.debug$S  5h.text$mnV+gDjJ.debug$Sjչ     5 E \ |     $LN6|$LN5$LN4$LN9($LN80$LN4y$LN5p$LN6h$LN7`.rtc$IMZz].rtc$TMZ.L.debug$TT.chks64__804F7422_ctype@h__2CC76C98_basetsd@h__C40B9FB8_corecrt_memcpy_s@h__B698C7EE_corecrt_memory@h__C9CF11B0_corecrt_wstring@h__E36C0A2C_string@h__80454D8C_guiddef@h__A8C6A2DE_winnt@h__185975DA_processthreadsapi@h__E184835D_memoryapi@h__DFCD8BC5_winerror@h__8170FE70_winbase@h__E998B507_winuser@h__7698CB77_winioctl@h__651F9E88_stdlib@h__DEC60988_propidl@h__5F3BBA04_oleauto@h__AA96396D_stralign@h__0FA4DE70_Shellcode@cpp?MyGetProcAddress@@YAKPAUHINSTANCE__@@K@Z?GetKernel32Base@@YAPAUHINSTANCE__@@XZ?MyStrcmp@@YAHKPAD@Z?GetProcHash@@YAKPAD@Z?MyEntry@@YAXXZ@_RTC_CheckStackVars@8@__CheckForDebuggerJustMyCode@4@__security_check_cookie@4__JustMyCode_Default__RTC_CheckEsp__RTC_InitBase__RTC_Shutdown__RTC_InitBase.rtc$IMZ__RTC_Shutdown.rtc$TMZ___security_cookie