Suspicious
Suspect

9cec19a198bb632e1bc00d94d7b9fa24

PE Executable
MD5: 9cec19a198bb632e1bc00d94d7b9fa24
Size: 313.34 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 9cec19a198bb632e1bc00d94d7b9fa24
Sha1 1cc9f4eebdbc1834c43b1125b3a4d507c795f49d
Sha256 1f404bdc7c480220f35207ba91e99fdbb1452bd1c9943fdcc1be8e66dec7975d
Sha384 3cc8289c39e764693edf802d6bd5484266b6e7d9e79cddf694b63135ecf4afcb42a75b58b25b0feac791817f633260f8
Sha512 a5571ebb4416b67d1b71bd6af6579aadda54a8df0cd2aee49ce287788e4943774486c9beee1055f0fc6b731ddbdc2a85f8aaff9c231a8c645babd7dbead0d316
SSDeep 6144:Vf1S1KGgBQKuk9F3RXydosLnyuIIkKBsHzTtJbMdetT:VfvBQKuk9ltyVIIkKBazTtpMdET
TLSH 9964D06A3775D4A0C25C4F305DA6CBEC4256DE429D228B27322C77AE3B3D3443E6AD91
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
9cec19a198bb632e1bc00d94d7b9fa24
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:1033-preview.png
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
ID:0012
ID:1033
ID:0013
ID:1033
ID:0014
ID:1033
ID:0015
ID:1033
ID:0016
ID:1033
ID:1033-preview.png
ID:0017
ID:1033
ID:0018
ID:1033
ID:0019
ID:1033
ID:001A
ID:1033
ID:001B
ID:1033
ID:001C
ID:1033
ID:001D
ID:1033
ID:001E
ID:1033
ID:001F
ID:1033
ID:0020
ID:1033
ID:0021
ID:1033
ID:0022
ID:1033
ID:0023
ID:1033
ID:0024
ID:1033
ID:0025
ID:1033
ID:0026
ID:1033
ID:0027
ID:1033
ID:0028
ID:1033
ID:0029
ID:1033
ID:002A
ID:1033
ID:002B
ID:1033
ID:002C
ID:1033
ID:002D
ID:1033
ID:002E
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
RT_VERSION
ID:0001
ID:1033
.Net Resources
GeneratedExe$
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
GeneratedExe.exe
Full Name
GeneratedExe.exe
EntryPoint
System.Void Program::Main()
Scope Name
GeneratedExe.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
GeneratedExe
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Info
PE Detect: PeReader OK (file layout)
Total Strings
3
Main Method
System.Void Program::Main()
Main IL Instruction Count
411
Main IL 
nop <null>
ldc.i4 21781
call System.Byte[] A.ce9f1840116410cb52d693f44e109c7ab::c13a7c949f1584013606de55f6abdd254(System.Int32)
dup <null>
pop <null>
dup <null>
ldtoken A.c1bbb125dd12c927834aaa80a18fff8bb/cbbdd9e342202eba170ba517a40049993 A.c1bbb125dd12c927834aaa80a18fff8bb::c3c1d63050a8e80edf02e00a9f4bd591c
call System.Void System.Runtime.CompilerServices.RuntimeHelpers::InitializeArray(System.Array,System.RuntimeFieldHandle)
stloc.0 <null>
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
stloc.s V_4
ldloc.s V_4
ldc.i4.5 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 12
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.7 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 20
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 15
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.8 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 11
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 14
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
stloc.1 <null>
ldloc.1 <null>
ldsfld System.Func`2<System.Int32,System.Boolean> Program/<>c::c70940be74d6f48a807744717e30f3959
dup <null>
brtrue.s IL_00AC: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
ldc.i4.7 <null>
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.1 <null>
brtrue.s IL_0095: pop
ldtoken System.Void Program::Main()
pop <null>
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Boolean Program/<>c::c31d6c18081f862cc4a58207fe5cb781a(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Boolean> Program/<>c::c70940be74d6f48a807744717e30f3959
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::cb5bbf9aa4a7efe45de9024ebd24ad629
dup <null>
brtrue.s IL_00DC: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cc50d3b4b638c025e9c9ea4f78b2732a2(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::cb5bbf9aa4a7efe45de9024ebd24ad629
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c26c5d65a13b57c1b340c32c9bdbd5ed8
dup <null>
brtrue.s IL_010C: call System.Linq.IOrderedEnumerable`1<System.Int32> System.Linq.Enumerable::OrderBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.7 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::c8286890c62e9fa1c35ac054780847471(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c26c5d65a13b57c1b340c32c9bdbd5ed8
call System.Linq.IOrderedEnumerable`1<System.Int32> System.Linq.Enumerable::OrderBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
call System.Collections.Generic.List`1<System.Int32> System.Linq.Enumerable::ToList<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.2 <null>
call System.String System.IO.Path::GetTempPath()
dup <null>
pop <null>
call System.Guid System.Guid::NewGuid()
dup <null>
pop <null>
stloc.s V_5
ldloca.s V_5
constrained. System.Guid
callvirt System.String System.Object::ToString()
dup <null>
pop <null>
ldc.i4.1 <null>
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.String A.cbe7e9cd3811111e44772ddec51677434::ca946754aec250c229b5ba13b98897a68(System.String,System.String)
dup <null>
pop <null>
call System.String System.IO.Path::Combine(System.String,System.String)
dup <null>
pop <null>
stloc.3 <null>
nop <null>
ldloc.3 <null>
ldloc.0 <null>
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
nop <null>
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
stloc.s V_11
ldloc.s V_11
ldc.i4.s 10
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
nop <null>
ldloc.s V_11
ldc.i4.s 25
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.3 <null>
ldc.i4.s 34
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.String A.c2fa7550e0bb116c6744ae0786d8feb14::ca946754aec250c229b5ba13b98897a68(System.String,System.String,System.String)
dup <null>
pop <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.0 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardOutput(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardError(System.Boolean)
nop <null>
ldloc.s V_11
stloc.s V_6
ldloc.2 <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c9d44df6218b9f54cb148a4842516d753
dup <null>
brtrue.s IL_01EF: call System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>> System.Linq.Enumerable::GroupBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cea11489aef913bf95b066334e828c6af(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c9d44df6218b9f54cb148a4842516d753
call System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>> System.Linq.Enumerable::GroupBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32> Program/<>c::cecc348d6a5315562042be466eea27370
dup <null>
brtrue.s IL_021F: ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cbcf9fcf876217373c5198f426f22fb34(System.Linq.IGrouping`2<System.Int32,System.Int32>)
newobj System.Void System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32> Program/<>c::cecc348d6a5315562042be466eea27370
ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
dup <null>
brtrue.s IL_0248: call System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Linq.Enumerable::ToDictionary<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32,System.Collections.Generic.List`1<System.Int32>>(System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>)
ldc.i4.6 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Collections.Generic.List`1<System.Int32> Program/<>c::c3dd9f5624808e93bcc27949df7b1384d(System.Linq.IGrouping`2<System.Int32,System.Int32>)
newobj System.Void System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
call System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Linq.Enumerable::ToDictionary<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32,System.Collections.Generic.List`1<System.Int32>>(System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>)
dup <null>
pop <null>
stloc.s V_7
ldc.i4.s 37
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
ldloc.s V_7
callvirt System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::GetEnumerator()
dup <null>
pop <null>
stloc.s V_12
br.s IL_02B8: ldloca.s V_12
ldloca.s V_12
call System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Current()
dup <null>
pop <null>
stloc.s V_13
nop <null>
ldc.i4.s 68
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloca.s V_13
call System.Int32 System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Key()
dup <null>
pop <null>
box System.Int32
ldc.i4.s 93
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloca.s V_13
call System.Collections.Generic.List`1<System.Int32> System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Value()
dup <null>
pop <null>
call System.String System.String::Join<System.Int32>(System.String,System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
call System.String System.String::Format(System.String,System.Object,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
ldloca.s V_12
call System.Boolean System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>::MoveNext()
dup <null>
pop <null>
brtrue.s IL_026E: ldloca.s V_12
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
leave.s IL_02DE: ldloc.s V_7
ldloca.s V_12
constrained. System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_7
ldsfld System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>> Program/<>c::c152af846611b6ef8e7a99b2002d1e9a2
dup <null>
brtrue.s IL_0309: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::SelectMany<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>>,System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>)
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Collections.Generic.IEnumerable`1<System.Int32> Program/<>c::c11c5515293f9bc0e681a4a8bd3994c00(System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>)
newobj System.Void System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>> Program/<>c::c152af846611b6ef8e7a99b2002d1e9a2
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::SelectMany<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>>,System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>)
dup <null>
pop <null>
ldsfld System.Func`3<System.Int32,System.Int32,System.Int32> Program/<>c::c84583acf61367c6e648145bbf40bf861
dup <null>
brtrue.s IL_0339: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`3<System.Int32,System.Int32,System.Int32>)
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cf47214118b05b0ff4b769bcd491f393b(System.Int32,System.Int32)
newobj System.Void System.Func`3<System.Int32,System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`3<System.Int32,System.Int32,System.Int32> Program/<>c::c84583acf61367c6e648145bbf40bf861
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`3<System.Int32,System.Int32,System.Int32>)
dup <null>
pop <null>
call System.Collections.Generic.List`1<System.Int32> System.Linq.Enumerable::ToList<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_8
ldc.i4.s 98
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
ldloc.s V_8
ldsfld System.Action`1<System.Int32> Program/<>c::c1a4103b845f2c4dcbcd25bad47e6fbc2
dup <null>
brtrue.s IL_0383: callvirt System.Void System.Collections.Generic.List`1<System.Int32>::ForEach(System.Action`1<System.Int32>)
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Void Program/<>c::c7227c4f5ed4963b5c0389098096c3c28(System.Int32)
newobj System.Void System.Action`1<System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Action`1<System.Int32> Program/<>c::c1a4103b845f2c4dcbcd25bad47e6fbc2
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::ForEach(System.Action`1<System.Int32>)
nop <null>
nop <null>
nop <null>
ldloc.s V_6
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
dup <null>
pop <null>
stloc.s V_14
nop <null>
ldloc.s V_14
callvirt System.IO.StreamReader System.Diagnostics.Process::get_StandardOutput()
dup <null>
pop <null>
callvirt System.String System.IO.TextReader::ReadToEnd()
dup <null>
pop <null>
stloc.s V_15
ldloc.s V_14
callvirt System.IO.StreamReader System.Diagnostics.Process::get_StandardError()
dup <null>
pop <null>
callvirt System.String System.IO.TextReader::ReadToEnd()
dup <null>
pop <null>
stloc.s V_16
ldloc.s V_14
callvirt System.Void System.Diagnostics.Process::WaitForExit()
nop <null>
nop <null>
leave.s IL_03DD: ldloc.s V_8
ldloc.s V_14
brfalse.s IL_03DC: endfinally
ldc.i4.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
ldloc.s V_14
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_8
call System.Int32 Program::c8380744d91e584b7037380796de4bd99(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_9
ldloc.s V_8
call System.Int32 Program::ce9212d711c2dc907dd48a53cf9c2f176(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_10
ldc.i4 159
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.s V_9
box System.Int32
call System.String System.String::Format(System.String,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
ldc.i4 196
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.s V_10
box System.Int32
call System.String System.String::Format(System.String,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
leave.s IL_0449: ret
nop <null>
nop <null>
ldloc.3 <null>
call System.Void System.IO.File::Delete(System.String)
nop <null>
nop <null>
leave.s IL_0447: nop
pop <null>
nop <null>
nop <null>
leave.s IL_0447: nop
nop <null>
endfinally <null>
ret <null>
Module Name
GeneratedExe.exe
Full Name
GeneratedExe.exe
EntryPoint
System.Void Program::Main()
Scope Name
GeneratedExe.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
GeneratedExe
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
3
Main Method
System.Void Program::Main()
Main IL Instruction Count
411
Main IL 
nop <null>
ldc.i4 21781
call System.Byte[] A.ce9f1840116410cb52d693f44e109c7ab::c13a7c949f1584013606de55f6abdd254(System.Int32)
dup <null>
pop <null>
dup <null>
ldtoken A.c1bbb125dd12c927834aaa80a18fff8bb/cbbdd9e342202eba170ba517a40049993 A.c1bbb125dd12c927834aaa80a18fff8bb::c3c1d63050a8e80edf02e00a9f4bd591c
call System.Void System.Runtime.CompilerServices.RuntimeHelpers::InitializeArray(System.Array,System.RuntimeFieldHandle)
stloc.0 <null>
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
stloc.s V_4
ldloc.s V_4
ldc.i4.5 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 12
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.7 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 20
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 15
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.8 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 11
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
ldc.i4.s 14
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.s V_4
stloc.1 <null>
ldloc.1 <null>
ldsfld System.Func`2<System.Int32,System.Boolean> Program/<>c::c70940be74d6f48a807744717e30f3959
dup <null>
brtrue.s IL_00AC: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
ldc.i4.7 <null>
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.1 <null>
brtrue.s IL_0095: pop
ldtoken System.Void Program::Main()
pop <null>
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Boolean Program/<>c::c31d6c18081f862cc4a58207fe5cb781a(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Boolean> Program/<>c::c70940be74d6f48a807744717e30f3959
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Where<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::cb5bbf9aa4a7efe45de9024ebd24ad629
dup <null>
brtrue.s IL_00DC: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cc50d3b4b638c025e9c9ea4f78b2732a2(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::cb5bbf9aa4a7efe45de9024ebd24ad629
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c26c5d65a13b57c1b340c32c9bdbd5ed8
dup <null>
brtrue.s IL_010C: call System.Linq.IOrderedEnumerable`1<System.Int32> System.Linq.Enumerable::OrderBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.7 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::c8286890c62e9fa1c35ac054780847471(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c26c5d65a13b57c1b340c32c9bdbd5ed8
call System.Linq.IOrderedEnumerable`1<System.Int32> System.Linq.Enumerable::OrderBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
call System.Collections.Generic.List`1<System.Int32> System.Linq.Enumerable::ToList<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.2 <null>
call System.String System.IO.Path::GetTempPath()
dup <null>
pop <null>
call System.Guid System.Guid::NewGuid()
dup <null>
pop <null>
stloc.s V_5
ldloca.s V_5
constrained. System.Guid
callvirt System.String System.Object::ToString()
dup <null>
pop <null>
ldc.i4.1 <null>
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.String A.cbe7e9cd3811111e44772ddec51677434::ca946754aec250c229b5ba13b98897a68(System.String,System.String)
dup <null>
pop <null>
call System.String System.IO.Path::Combine(System.String,System.String)
dup <null>
pop <null>
stloc.3 <null>
nop <null>
ldloc.3 <null>
ldloc.0 <null>
call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[])
nop <null>
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
stloc.s V_11
ldloc.s V_11
ldc.i4.s 10
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
nop <null>
ldloc.s V_11
ldc.i4.s 25
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.3 <null>
ldc.i4.s 34
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.String A.c2fa7550e0bb116c6744ae0786d8feb14::ca946754aec250c229b5ba13b98897a68(System.String,System.String,System.String)
dup <null>
pop <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.0 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardOutput(System.Boolean)
nop <null>
ldloc.s V_11
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardError(System.Boolean)
nop <null>
ldloc.s V_11
stloc.s V_6
ldloc.2 <null>
ldsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c9d44df6218b9f54cb148a4842516d753
dup <null>
brtrue.s IL_01EF: call System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>> System.Linq.Enumerable::GroupBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cea11489aef913bf95b066334e828c6af(System.Int32)
newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Int32,System.Int32> Program/<>c::c9d44df6218b9f54cb148a4842516d753
call System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>> System.Linq.Enumerable::GroupBy<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>)
dup <null>
pop <null>
ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32> Program/<>c::cecc348d6a5315562042be466eea27370
dup <null>
brtrue.s IL_021F: ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cbcf9fcf876217373c5198f426f22fb34(System.Linq.IGrouping`2<System.Int32,System.Int32>)
newobj System.Void System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32> Program/<>c::cecc348d6a5315562042be466eea27370
ldsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
dup <null>
brtrue.s IL_0248: call System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Linq.Enumerable::ToDictionary<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32,System.Collections.Generic.List`1<System.Int32>>(System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>)
ldc.i4.6 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Collections.Generic.List`1<System.Int32> Program/<>c::c3dd9f5624808e93bcc27949df7b1384d(System.Linq.IGrouping`2<System.Int32,System.Int32>)
newobj System.Void System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>> Program/<>c::ca77c19bc84ff7877e719d592d878680b
call System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Linq.Enumerable::ToDictionary<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32,System.Collections.Generic.List`1<System.Int32>>(System.Collections.Generic.IEnumerable`1<System.Linq.IGrouping`2<System.Int32,System.Int32>>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Int32>,System.Func`2<System.Linq.IGrouping`2<System.Int32,System.Int32>,System.Collections.Generic.List`1<System.Int32>>)
dup <null>
pop <null>
stloc.s V_7
ldc.i4.s 37
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
ldloc.s V_7
callvirt System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Collections.Generic.Dictionary`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::GetEnumerator()
dup <null>
pop <null>
stloc.s V_12
br.s IL_02B8: ldloca.s V_12
ldloca.s V_12
call System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>> System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Current()
dup <null>
pop <null>
stloc.s V_13
nop <null>
ldc.i4.s 68
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloca.s V_13
call System.Int32 System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Key()
dup <null>
pop <null>
box System.Int32
ldc.i4.s 93
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloca.s V_13
call System.Collections.Generic.List`1<System.Int32> System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>::get_Value()
dup <null>
pop <null>
call System.String System.String::Join<System.Int32>(System.String,System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
call System.String System.String::Format(System.String,System.Object,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
ldloca.s V_12
call System.Boolean System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>::MoveNext()
dup <null>
pop <null>
brtrue.s IL_026E: ldloca.s V_12
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
leave.s IL_02DE: ldloc.s V_7
ldloca.s V_12
constrained. System.Collections.Generic.Dictionary`2/Enumerator<System.Int32,System.Collections.Generic.List`1<System.Int32>>
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_7
ldsfld System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>> Program/<>c::c152af846611b6ef8e7a99b2002d1e9a2
dup <null>
brtrue.s IL_0309: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::SelectMany<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>>,System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>)
ldc.i4.2 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Collections.Generic.IEnumerable`1<System.Int32> Program/<>c::c11c5515293f9bc0e681a4a8bd3994c00(System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>)
newobj System.Void System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>> Program/<>c::c152af846611b6ef8e7a99b2002d1e9a2
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::SelectMany<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>>,System.Func`2<System.Collections.Generic.KeyValuePair`2<System.Int32,System.Collections.Generic.List`1<System.Int32>>,System.Collections.Generic.IEnumerable`1<System.Int32>>)
dup <null>
pop <null>
ldsfld System.Func`3<System.Int32,System.Int32,System.Int32> Program/<>c::c84583acf61367c6e648145bbf40bf861
dup <null>
brtrue.s IL_0339: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`3<System.Int32,System.Int32,System.Int32>)
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Int32 Program/<>c::cf47214118b05b0ff4b769bcd491f393b(System.Int32,System.Int32)
newobj System.Void System.Func`3<System.Int32,System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`3<System.Int32,System.Int32,System.Int32> Program/<>c::c84583acf61367c6e648145bbf40bf861
call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`3<System.Int32,System.Int32,System.Int32>)
dup <null>
pop <null>
call System.Collections.Generic.List`1<System.Int32> System.Linq.Enumerable::ToList<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_8
ldc.i4.s 98
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
ldloc.s V_8
ldsfld System.Action`1<System.Int32> Program/<>c::c1a4103b845f2c4dcbcd25bad47e6fbc2
dup <null>
brtrue.s IL_0383: callvirt System.Void System.Collections.Generic.List`1<System.Int32>::ForEach(System.Action`1<System.Int32>)
ldc.i4.4 <null>
switch dnlib.DotNet.Emit.Instruction[]
pop <null>
ldsfld Program/<>c Program/<>c::c98f7b7cfb5b3c34b5dbf7114296c1a42
ldftn System.Void Program/<>c::c7227c4f5ed4963b5c0389098096c3c28(System.Int32)
newobj System.Void System.Action`1<System.Int32>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Action`1<System.Int32> Program/<>c::c1a4103b845f2c4dcbcd25bad47e6fbc2
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::ForEach(System.Action`1<System.Int32>)
nop <null>
nop <null>
nop <null>
ldloc.s V_6
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
dup <null>
pop <null>
stloc.s V_14
nop <null>
ldloc.s V_14
callvirt System.IO.StreamReader System.Diagnostics.Process::get_StandardOutput()
dup <null>
pop <null>
callvirt System.String System.IO.TextReader::ReadToEnd()
dup <null>
pop <null>
stloc.s V_15
ldloc.s V_14
callvirt System.IO.StreamReader System.Diagnostics.Process::get_StandardError()
dup <null>
pop <null>
callvirt System.String System.IO.TextReader::ReadToEnd()
dup <null>
pop <null>
stloc.s V_16
ldloc.s V_14
callvirt System.Void System.Diagnostics.Process::WaitForExit()
nop <null>
nop <null>
leave.s IL_03DD: ldloc.s V_8
ldloc.s V_14
brfalse.s IL_03DC: endfinally
ldc.i4.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
ldloc.s V_14
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_8
call System.Int32 Program::c8380744d91e584b7037380796de4bd99(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_9
ldloc.s V_8
call System.Int32 Program::ce9212d711c2dc907dd48a53cf9c2f176(System.Collections.Generic.IEnumerable`1<System.Int32>)
dup <null>
pop <null>
stloc.s V_10
ldc.i4 159
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.s V_9
box System.Int32
call System.String System.String::Format(System.String,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
ldc.i4 196
call System.String A.c3bc79e53e0ad59dacc6aa3a50cc137c8::c06ce3a683ae56075e86e9b51ba8cdc80(System.Int32)
dup <null>
pop <null>
ldloc.s V_10
box System.Int32
call System.String System.String::Format(System.String,System.Object)
dup <null>
pop <null>
call System.Void System.Console::WriteLine(System.String)
nop <null>
nop <null>
leave.s IL_0449: ret
nop <null>
nop <null>
ldloc.3 <null>
call System.Void System.IO.File::Delete(System.String)
nop <null>
nop <null>
leave.s IL_0447: nop
pop <null>
nop <null>
nop <null>
leave.s IL_0447: nop
nop <null>
endfinally <null>
ret <null>
9cec19a198bb632e1bc00d94d7b9fa24
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:1033-preview.png
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
ID:0012
ID:1033
ID:0013
ID:1033
ID:0014
ID:1033
ID:0015
ID:1033
ID:0016
ID:1033
ID:1033-preview.png
ID:0017
ID:1033
ID:0018
ID:1033
ID:0019
ID:1033
ID:001A
ID:1033
ID:001B
ID:1033
ID:001C
ID:1033
ID:001D
ID:1033
ID:001E
ID:1033
ID:001F
ID:1033
ID:0020
ID:1033
ID:0021
ID:1033
ID:0022
ID:1033
ID:0023
ID:1033
ID:0024
ID:1033
ID:0025
ID:1033
ID:0026
ID:1033
ID:0027
ID:1033
ID:0028
ID:1033
ID:0029
ID:1033
ID:002A
ID:1033
ID:002B
ID:1033
ID:002C
ID:1033
ID:002D
ID:1033
ID:002E
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
RT_VERSION
ID:0001
ID:1033
.Net Resources
GeneratedExe$
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙