LEv_TU4.drectve .debug$SC@B.debug$T@B.rdata-wF@0@.rdataF@0@.rdataF@0@.text$mnFF P`.debug$SFG@B.text$mnGH P`.debug$S-HI @B.text$mnSJK P`.debug$SK>N@B.text$mn0LO|O P`.debug$SOzQ@B.bss@.chks64$R .ltcgnfoTU  Bd:\projects\shelcodeframework\runshellcode\release\main.obj:<$ppMicrosoft (R) Optimizing Compiler: BINDSTRING_DOWNLOADPATHPIDMSI_STATUS_DRAFT+BINDSTATUS_BEGINDOWNLOADCOMPONENTSNODE_COMMENTVAR_CONST CHANGEKIND_DELETEMEMBER" BINDSTATUS_PROXYDETECTING"BINDSTRING_PROXY_USERNAMEPARSE_DECODE_IS_ESCAPE"8BINDSTATUS_64BIT_PROGRESSKBINDSTATUS_RESERVED_12FUNC_VIRTUAL! FEATURE_ADDON_MANAGEMENTPARSE_FRIENDLYBINDSTRING_ROOTDOC_URLQUERY_REFRESH!COINITBASE_MULTITHREADEDFUNC_PUREVIRTUALVT_I1" BINDSTATUS_SENDINGREQUEST DESCKIND_IMPLICITAPPOBJBINDSTRING_PASSWORDBINDSTATUS_CONNECTING) BINDSTATUS_ENDDOWNLOADCOMPONENTS NODE_DOCUMENTCIP_NEED_REBOOT NODE_DOCUMENT_FRAGMENT5JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUMEQUERY_RECOMBINECHANGEKIND_SETNAMES$VT_RECORD"BINDSTATUS_COOKIE_SENTBINDSTRING_URLBBINDSTATUS_RESERVED_9CC_PASCALBINDSTRING_USERNAME PARSE_SCHEMA QUERY_IS_CACHED/FEATURE_GET_URL_DOM_FILEPATH_UNENCODED 0BINDSTATUS_CACHECONTROL+FEATURE_DISABLE_LEGACY_COMPRESSIONQUERY_IS_SAFE%$BINDSTATUS_COOKIE_SUPPRESSED1CIP_TRUST_VERIFICATION_COMPONENT_MISSINGNODE_ENTITY"FEATURE_SAFE_BINDTOOBJECTSYS_WIN32CBINDSTATUS_RESERVED_AUri_PROPERTY_HOST_TYPE%TP_CALLBACK_PRIORITY_INVALID&FEATURE_WEBOC_POPUPMANAGEMENTDESCKIND_TYPECOMP$FEATURE_DISABLE_MK_PROTOCOL,BINDSTATUS_P3P_HEADERCHANGEKIND_GENERALNODE_CDATA_SECTIONPIDMSI_STATUS_REVIEW#BINDSTATUS_PROTOCOLCLASSID+BINDSTATUS_POLICY_HREF NODE_DOCUMENT_TYPE:BINDSTATUS_RESERVED_1!CIP_OLDER_VERSION_EXISTS$5BINDSTATUS_SSLUX_NAVBLOCKEDFEATURE_XMLHTTP'BINDSTATUS_CLSIDCANINSTANTIATE*FEATURE_DISABLE_NAVIGATION_SOUNDS(%BINDSTATUS_COOKIE_STATE_UNKNOWN3>DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACEDFEATURE_MIME_HANDLING!QUERY_USES_HISTORYFOLDERCC_STDCALL(4BINDSTATUS_DISPLAYNAMEAVAILABLE#BINDSTATUS_DOWNLOADINGDATABINDSTRING_UA_COLORCIP_DISK_FULLCC_MACPASCALBINDSTRING_EXTRA_URL" BINDSTRING_POST_DATA_MIMEUri_PROPERTY_USER_NAME"FEATURE_PROTOCOL_LOCKDOWNHTYSPEC_MIMETYPEDESCKIND_FUNCDESC'(BINDSTATUS_COOKIE_STATE_PROMPT !BINDSTATUS_ACCEPTRANGES&BINDSTATUS_BEGINSYNCOPERATIONFUNC_STATIC$BINDSTATUS_ENDSYNCOPERATION( FEATURE_RESTRICT_ACTIVEXINSTALLSYS_WIN16"QUERY_TIME_OF_LAST_CHANGERUri_HOST_IPV4&FEATURE_FORCE_ADDR_AND_STATUSPIDMSI_STATUS_NEW*BINDSTATUS_CACHEFILENAMEAVAILABLEBINDSTRING_XDR_ORIGINBINDSTATUS_DIRECTBINDHTYSPEC_PACKAGENAMEPARSE_DOCUMENT[URLZONE_TRUSTED/FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]PowerUserMaximum#BINDSTATUS_ENDDOWNLOADDATA_TKIND_UNIONCC_SYSCALLNODE_ELEMENTHTYSPEC_FILEEXTHTYSPEC_FILENAMECC_MPWCDECLBINDSTATUS_REDIRECTING'CLSCTX_ACTIVATE_X86_SERVER_TKIND_DISPATCHPARSE_SECURITY_DOMAINIBINDSTATUS_RESERVED_10NODE_INVALID PARSE_MIMEPIDMSI_STATUS_PRELIMPARSE_LOCATIONXMLELEMTYPE_DTD&BINDSTATUS_LOADINGMIMEHANDLER+CIP_EXE_SELF_REGISTERATION_TIMEOUTPARSE_SECURITY_URL PARSE_PATH_FROM_URLCC_MSCPASCAL-BINDSTATUS_VERIFIEDMIMETYPEAVAILABLE+-BINDSTATUS_SESSION_COOKIE_RECEIVEDCIP_ACCESS_DENIEDFUNC_NONVIRTUAL,7BINDSTATUS_SNIFFED_CLASSIDAVAILABLE_TKIND_RECORDXMLELEMTYPE_ELEMENTNODE_TEXTGBINDSTATUS_RESERVED_EVAR_STATICFBINDSTATUS_RESERVED_D_TKIND_COCLASS PARSE_URL_FROM_PATHFEATURE_SSLUX VT_VARIANT$TP_CALLBACK_PRIORITY_NORMALPIDMSI_STATUS_NORMAL[URLZONE_INTRANET,BINDSTATUS_CONTENTDISPOSITIONATTACHPIDMSI_STATUS_EDIT=BINDSTATUS_RESERVED_4BINDSTRING_LANGUAGE CHANGEKIND_CHANGEFAILEDXMLELEMTYPE_DOCUMENT BINDSTRING_POST_COOKIE*JOB_OBJECT_IO_RATE_CONTROL_ENABLE_TKIND_INTERFACE+/BINDSTATUS_SESSION_COOKIES_ALLOWED BINDSTRING_OSQUERY_EXPIRATION_DATEPARSE_SITECC_MPWPASCALVT_RESERVED;BINDSTATUS_RESERVED_2HTYSPEC_CLSIDRUri_HOST_IPV6CHANGEKIND_INVALIDATEURLZONEREG_HKLM%BINDSTATUS_IUNKNOWNAVAILABLECIP_UNSAFE_TO_ABORT FEATURE_TABBED_BROWSINGPARSE_ANCHOR!CIP_NEWER_VERSION_EXISTS" QUERY_IS_CACHED_OR_MAPPED$FEATURE_BLOCK_INPUT_PROMPTSUri_PROPERTY_ZONEPSU_DEFAULTQUERY_CAN_NAVIGATESYS_MAC_TKIND_MODULE PARSE_SERVER+#BINDSTATUS_COMPACT_POLICY_RECEIVEDQUERY_CONTENT_ENCODINGCC_FPFASTCALLVT_I2)2BINDSTATUS_MIMETEXTPLAINMISMATCH(BINDSTATUS_FILTERREPORTMIMETYPE0JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS@BINDSTATUS_RESERVED_79JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL#FEATURE_UNC_SAVEDFILECHECK FEATURE_SECURITYBAND& FEATURE_VALIDATE_NAVIGATE_URLBINDSTRING_UA_PIXELSCIP_NAME_CONFLICTPARSE_DOMAIN2JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH[URLZONE_LOCAL_MACHINE VT_ERROR VT_UNKNOWNDBINDSTATUS_RESERVED_B%BINDSTATUS_BEGINDOWNLOADDATA(FEATURE_DISABLE_TELNET_PROTOCOL,6BINDSTATUS_SERVER_MIMETYPEAVAILABLE!BINDSTRING_ENTERPRISE_ID VT_DISPATCHEBINDSTATUS_RESERVED_C..BINDSTATUS_PERSISTENT_COOKIE_RECEIVEDPARSE_CANONICALIZEXMLELEMTYPE_PIDESCKIND_VARDESC(BINDSTATUS_INSTALLINGCOMPONENTSQUERY_USES_NETWORK_TKIND_ALIAS$ BINDSTATUS_CLASSIDAVAILABLE$FEATURE_WINDOW_RESTRICTIONSVAR_PERINSTANCE+JOB_OBJECT_NET_RATE_CONTROL_ENABLEPIDMSI_STATUS_PROOF&)BINDSTATUS_COOKIE_STATE_LEASH'&BINDSTATUS_COOKIE_STATE_ACCEPT!BINDSTATUS_UPLOADINGDATA(BINDSTATUS_CLASSINSTALLLOCATION#VBINDHANDLETYPES_DEPENDENCYXMLELEMTYPE_COMMENTFEATURE_MIME_SNIFFINGAJOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAPNODE_ATTRIBUTE_TKIND_ENUM?BINDSTATUS_RESERVED_6DESCKIND_NONEVT_BSTRBINDSTATUS_DECODINGBINDSTATUS_ENCODINGFEATURE_BEHAVIORSBINDSTRING_IID QUERY_IS_SECURE''BINDSTATUS_COOKIE_STATE_REJECTFEATURE_OBJECT_CACHINGHTYSPEC_PROGID[URLZONE_INTERNETXMLELEMTYPE_TEXTCC_CDECL#BINDSTATUS_BEGINUPLOADDATA<BINDSTATUS_RESERVED_3BINDSTATUS_RAWMIMETYPE$NODE_PROCESSING_INSTRUCTIONCOR_VERSION_MAJOR_V2 BINDSTRING_USER_AGENTJBINDSTATUS_RESERVED_11QUERY_CONTENT_TYPE8BINDSTATUS_LASTCHANGEKIND_ADDMEMBERBINDSTRING_DOC_URL# BINDSTATUS_USINGCACHEDCOPY!BINDSTATUS_ENDUPLOADDATA$ BINDSTRING_ACCEPT_ENCODINGS$BINDSTRING_PTR_BIND_CONTEXT9BINDSTATUS_RESERVED_0!PARSE_ENCODE_IS_UNESCAPE"Uri_PROPERTY_ABSOLUTE_URI QUERY_USES_CACHEABINDSTATUS_RESERVED_8.1BINDSTATUS_CONTENTDISPOSITIONFILENAME'BINDSTRING_FLAG_BIND_TO_OBJECT$CHANGEKIND_SETDOCUMENTATIONFEATURE_FEEDS!PIDMSI_STATUS_INPROGRESSURLZONEREG_DEFAULTRUri_HOST_UNKNOWNNServerApplicationBINDSTRING_HEADERSVT_I8"BINDSTRING_PROXY_PASSWORDPARSE_ROOTDOCUMENT BINDSTRING_ACCEPT_MIMESVT_I4HBINDSTATUS_RESERVED_FIdleShutdown-JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAGPARSE_ESCAPE>BINDSTATUS_RESERVED_5&FEATURE_LOCALMACHINE_LOCKDOWNNODE_ENTITY_REFERENCE& FEATURE_RESTRICT_FILEDOWNLOADFEATURE_ZONE_ELEVATIONRUri_HOST_DNSLBINDSTATUS_RESERVED_13#BINDSTATUS_FINDINGRESOURCE  QUERY_IS_INSTALLEDENTRY,COMGLB_EXCEPTION_DONOT_HANDLE_FATAL$BINDSTRING_INITIAL_FILENAME% BINDSTATUS_MIMETYPEAVAILABLE**BINDSTATUS_COOKIE_STATE_DOWNGRADE&3BINDSTATUS_PUBLISHERAVAILABLELPPARAMDESCEXFUNCKINDtagPARAMDESCEXPARAMDESCtagPARAMDESCtagARRAYDESCCALLCONVDESCKINDELEMDESCBINDPTRtagFUNCDESCINVOKEKINDTLIBATTRtagBINDPTRtagSTATSTGtagTYPEDESCFUNCDESC"HREFTYPESYSKIND=tagVARDESC_TYPEKINDIEnumSTATSTGSTATSTGITypeCompTYPEDESCIDLDESCtagELEMDESCtagIDLDESCzVARIANTARGEXCEPINFOtagEXCEPINFO DISPIDMEMBERID uUINTtagCAULtagTLIBATTR_TP_CALLBACK_PRIORITYM__vcrt_assert_va_start_is_not_reference<__crt_locale_pointers * const>6__vcrt_va_list_is_referencetagShutdownTypeqOLECHAR@tagCABSTRtagCALLCONV_tagTYPEKINDzVARIANTUISequentialStreamBSTRBLOBursize_t"DWORD_PTRTYPEATTRVARIANT_BOOL qPUWSTR(JOB_OBJECT_NET_RATE_CONTROL_FLAGSAR_STATEvtagCADBL'_DEVICE_DATA_SET_RANGEVARKIND_tagPSUACTION |tagDEC~CALPSTRLONG_PTR0__vcrt_va_list_is_referencetagBINDSTRING?tagCACLIPDATA"ULONG_PTR[tagURLZONEPTP_CLEANUP_GROUP__MIDL_ICodeInstall_0001 pPCHARtagBINDSTATUS _GUID_URLZONEREGE __vcrt_assert_va_start_is_not_reference_LARGE_INTEGER'_LARGE_INTEGER::JCLIPDATACAFILETIME~tagCALPSTRCALPWSTR CAL tagCABSTRBLOBLPOVERLAPPEDgtagSAFEARRAYBOUNDutagCAFLT tagCAH|DECIMALLtagCAUI;z__vcrt_va_list_is_reference<__crt_locale_pointers *> !WORD CAUHtagCADATE vCADBLLPCOLESTRPCUWSTRCAPROPVARIANT uCAFLT'JOB_OBJECT_IO_RATE_CONTROL_FLAGS]_USER_ACTIVITY_PRESENCE PLONGiDISPPARAMS _FILETIMEpva_list)PDEVICE_DSM_DEFINITION  BYTE PCWSTRsIStream?CACLIPDATA=VARDESC LONG:ITypeLibtagCACYtagBSTRBLOBtagCAUH|LPSECURITY_ATTRIBUTES_TP_CALLBACK_ENVIRON_V30_TP_CALLBACK_ENVIRON_V3::B_TP_CALLBACK_ENVIRON_V3::::_ULARGE_INTEGER(_ULARGE_INTEGER::tLPVARIANTSAFEARRAY tagCABOOLtagBLOB  CABOOL?2__vcrt_assert_va_start_is_not_reference#ULONG64 SNB_tagINTERNETFEATURELIST CABSTRBLOB "SIZE_TtagTYPEATTR ADATE#ReplacesCorHdrNumericDefines "DWORD&>DISPLAYCONFIG_SCANLINE_ORDERING @LPCSTRPTP_CALLBACK_INSTANCE PSHORT"TP_VERSION qBSTR aCAUBITypeInfortagPROPVARIANT CAUL CACYULARGE_INTEGERTP_CALLBACK_PRIORITY_locale_t_SECURITY_ATTRIBUTESVARENUMWtagCASCODEtagCACLSID :ldiv_ttagCALPWSTR"LPDWORD BLOB#DWORD64!PROPVAR_PAD1PTP_SIMPLE_CALLBACK tINTIStorageztagVARIANT YtagCAI ADOUBLE  UCHAR "LCID BOOLEANPTP_CALLBACK_ENVIRONHtagTYSPECRLPVERSIONEDSTREAMitagDISPPARAMS !USHORTtagVARKIND PVOIDgSAFEARRAYBOUNDIUnknownterrno_t qWCHAR_OVERLAPPED+_DEVICE_DSM_DEFINITION PtagCACatagCAUB=_lldiv_t IID_tagQUERYOPTIONG;__vcrt_assert_va_start_is_not_reference<__crt_locale_pointers *>qLPOLESTRR__MIDL_IUri_0002HRESULT YCAI!PDEVICE_DSM_INPUTWCASCODE!V__MIDL_IGetBindHandle_0001 tagCY LONG64tagCOINITBASE "ULONG!VARTYPE tBOOL PCACk__crt_locale_data_publicNtagApplicationType03_DEVICE_MANAGE_DATA_SET_ATTRIBUTES_OUTPUT @FLOAT!PROPVAR_PAD3tagDOMNodeType LCAUIJtagCLIPDATAtagSAFEARRAYBG__vcrt_assert_va_start_is_not_reference"DEVICE_DSM_ACTION3F__vcrt_va_list_is_referenceBtagVersionedStream @CABSTRtagCHANGEKIND FILEtagSYSKIND<IDispatch CLSID qLPWSTRrPROPVARIANTTLPSAFEARRAYPTP_POOL LPVOID GUID*_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIGTP_CALLBACK_ENVIRON_V3tagFUNCKINDLARGE_INTEGER CAHtagCAFILETIME HANDLEPIDMSI_STATUS_VALUE#ULONGLONGtagCAPROPVARIANT(PTP_CLEANUP_GROUP_CANCEL_CALLBACK CY FILETIME%PDEVICE_DSM_RANGE9 __vcrt_va_list_is_reference__MIDL_IUri_0001A__vcrt_va_list_is_reference<__crt_locale_pointers * const>IRecordInfo usize_t1PDEVICE_DSM_OUTPUTLONGLONG)#_DEVICE_MANAGE_DATA_SET_ATTRIBUTEStagGLOBALOPT_EH_VALUES*PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG=lldiv_t SHORTPLONG64:_ldiv_t SCODEtagCLSCTXtagXMLEMEM_TYPE _iobuf CADATE pCHARCACLSID!PROPVAR_PAD2_tagPARSEACTION pLPSTRtagDESCKIND__crt_locale_pointers tagCAL#DWORDLONGFNcX, p5:+$칄#nDIro᥿ پh).j }~W>uk\c}Ģwϐ{PJ d:$+eVsh"duݎ;S9\~qd hn>}EJ9}gYXWrЌ(UdÁQD:\Windows Kits\10\Include\10.0.19041.0\shared\basetsd.hD:\Windows Kits\10\Include\10.0.19041.0\um\oleauto.hD:\Windows Kits\10\Include\10.0.19041.0\um\processthreadsapi.hD:\Windows Kits\10\Include\10.0.19041.0\um\winnt.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\ctype.hD:\Windows Kits\10\Include\10.0.19041.0\um\memoryapi.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\corecrt_wstdio.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\corecrt_stdio_config.hD:\Windows Kits\10\Include\10.0.19041.0\um\winioctl.hD:\projects\ShelCodeFramework\RunShellcode\main.cppD:\Windows Kits\10\Include\10.0.19041.0\um\winuser.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\stdio.hD:\Windows Kits\10\Include\10.0.19041.0\shared\guiddef.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\stdlib.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\corecrt_wstring.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\string.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\corecrt_memory.hD:\Windows Kits\10\Include\10.0.19041.0\ucrt\corecrt_memcpy_s.hD:\Windows Kits\10\Include\10.0.19041.0\um\winbase.hD:\Windows Kits\10\Include\10.0.19041.0\shared\stralign.hD:\Windows Kits\10\Include\10.0.19041.0\um\propidl.hD:\Windows Kits\10\Include\10.0.19041.0\shared\winerror.h$T0 .raSearch = $eip $T0 ^ = $esp $T0 4 + = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $23 $T0 4 - ^ = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $23 $T0 16 - ^ = $24 $T0 20 - ^ = L>D:\projects\ShelCodeFramework\Release\11.binErrorpause0$BG)__local_stdio_printf_options  #_OptionsStorageO0$Z\] -X- \- 0 0 - - Uu jRQp0] -$11G>_vfprintf_l>_StreamA>C_FormatA>p_ArgListED Z) _StreamC_Format _Locale  p_ArgList9BO0$ ,X, \, , , , , , , Y, ], t, x, U 3ʼnEVWjjjjjhhtZjVj@hWjEt8jMQWPVUh3_^M3]hM3̓_^]1" (8J`int +$ *Gmain >targcED >argvED >lpAddressD>"dwSizeAE9A>"dwReadD>hFileA.vQ ZA  : targc  argv lpAddress "dwRead9&~969H9^9g9rO|.3 <QUdgm{}  *X* \* * * * * * * * * 8* <* * * * * * * * * * * * * 4* 8* UVujM QjVPp0^] -&D0*IG,G0.Aprintf>C_FormatED>t_ResultA*M>  Z)>_StreamA>C_FormatA'N  h> C_Format9 9$BO80,-. +x+ |+ + + + + + + 1+ 5+ + + + + + + }}.՜ M='3hKb iP|h^,/']uN:r@comp.idp @feat.00.drectvec.debug$SCc.debug$T\c.rdata-Pl}c.rdata3Cc<.rdatayJcSk .text$mnc.debug$Sc.text$mn % c.debug$S  c.text$mn  Uvc.debug$S  c.text$mn 0rc.debug$S c_main _printf 0 = .bssc[.chks64c??_C@_0CN@EEBDPLAL@D?3?2projects?2ShelCodeFramework?2R@??_C@_05NAOIJFC@Error@??_C@_05PDJBBECF@pause@__imp__GetFileSize@8__imp___flushall__imp__CreateFileA@28__imp__system__imp____stdio_common_vfprintf__imp____acrt_iob_func__imp__VirtualAlloc@16__imp__ReadFile@20@__security_check_cookie@4__vfprintf_l___local_stdio_printf_options?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA___security_cookie