Malicious
Malicious

ffef35541e153ae809ac00d7501a13e4

PE Executable
|
MD5: ffef35541e153ae809ac00d7501a13e4
|
Size: 673.43 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
ffef35541e153ae809ac00d7501a13e4
Sha1
17d08948ab0b254ecce70002e8cc138e404eb2fa
Sha256
cbf7bf4810bc0be2a2486bad24835e1d653315c16a98b4cf0b778b91d9eacbf2
Sha384
a57b02382b9f6ff0abcf2cc005c09e806fcf415a8cc0f66f8d57be28cd43e04ff30ecbb5c1fc53d1e0b978a3ef36034f
Sha512
715b7b9a19438bba5fd474c565a80ef1142a9dfd06747abad72199b1f2bab833d459af5c8b70dc9db58ccafff45e8221fa025d4ba583027407e9a30befb4a4c6
SSDeep
12288:Sw7kfOL9qXTcyhVSf/aQdy9jFWWoFgNNT9IwoFK8mv2fEAmD4:nj9qDcy6Y9hWWoGFI7Flmv2fl
TLSH
F3E45C03B7A58EA5D3484737C1D6040453E68D8267ABEA0F319937A63D733EAED03A57

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
ffef35541e153ae809ac00d7501a13e4
Malicious
[Authenticode]_34f59600.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Fv8CwOdXbyg0EfDgKu.fvM9ogVZZmpWX0brAE
YW1rcN8XXtcpJUtke2.4EIf7mbsl2MqZvSGYf
aKTuTrvntmQLlxtXcI.5p1604BA6TuIGffPHN
16B5Dpq985miMQhDRn.2Tj1FhZFwXZ1Jdupmy
M58eNJigoFXDlLbCeD.QksnjKYR5CKpVa2WPG
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0xA2400 size 8856 bytes
Info

PDB Path: BrokerUpdate.pdb
Module Name

BrokerUpdate.exe
Full Name

BrokerUpdate.exe
EntryPoint

System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::m7p19GhJc(System.String[])
Scope Name

BrokerUpdate.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

BrokerUpdate
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

49
Main Method

System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::m7p19GhJc(System.String[])
Main IL Instruction Count

146
Main IL

br IL_0275: call System.Void a5gNTpuuDMZgI4cFE3.cV4raXvID7OcbvLR3KB::kLjw4iIsCLsZtxc4lksN0j() ldc.i4 0 stloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] ldloc V_2 ldc.i4 10 beq IL_0063: br IL_0045 ldloc V_2 ldc.i4 990 beq IL_000E: ldloc V_2 br IL_0261: call System.Boolean a5gNTpuuDMZgI4cFE3.evRlW4q1NoGBjo4i43f::wJ8qkpbOAu() ret <null> call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::vNBGS5b30() brtrue IL_01E5: call System.IntPtr a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::ydUcxW2fc() br IL_01E4: ret call System.Boolean a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::hj8q5ZyxZH() brfalse IL_01F2: ldarg.0 br IL_01F1: ret br IL_0045: call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::vNBGS5b30() ldc.i4 2 br IL_0012: switch(IL_0072,IL_0261,IL_0044) nop <null> nop <null> newobj System.Void a5gNTpuuDMZgI4cFE3.H9hi2e8GuJUSEiqo2qs::.ctor() stsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 br IL_00B1: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 br IL_0091: ldloc V_3 ldc.i4 0 stloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] ldloc V_3 ldc.i4 988 beq IL_0091: ldloc V_3 br IL_00EF: leave IL_0260 ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 call a5gNTpuuDMZgI4cFE3.alujFxbsHhtQwNndpis a5gNTpuuDMZgI4cFE3.y3LF8kbi1p6j9ECGKcD::cRTb0h6uNq() callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::WA2cSMqAJR(a5gNTpuuDMZgI4cFE3.alujFxbsHhtQwNndpis) br IL_00C5: ldc.i4.m1 ldc.i4.m1 <null> ldsfld sxmlNvGL9XS8Lq8sEbN sxmlNvGL9XS8Lq8sEbN::iDsGWJ3f4c call System.Void sxmlNvGL9XS8Lq8sEbN::hXIGshkBd0(System.Int32,sxmlNvGL9XS8Lq8sEbN) ldc.i4 4 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_e8cbf55da96c495e93beb543ebd42df1 brtrue IL_0095: switch(IL_00EF) pop <null> ldc.i4 0 br IL_0095: switch(IL_00EF) leave IL_0260: ret ldc.i4 -1743770235 ldc.i4 -84687113 xor <null> ldc.i4 1954360196 xor <null> ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_2115c6432c52420ebc71edbd6c6db449 xor <null> call System.String a5gNTpuuDMZgI4cFE3.YPmX8gp7TAtIwEAhWDD::q1dlcVxdcx(System.Int32) ldc.i4 130 call System.Void a5gNTpuuDMZgI4cFE3.d2dBFUYDHVoPfNjEOck::kLSYorOiKu(System.Exception,System.String,System.Int32) br IL_0124: leave IL_0260 leave IL_0260: ret ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 dup <null> brtrue IL_01A6: callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::wtCcDQ3Rnq() pop <null> ldc.i4 2 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_8b5ef204e41140f4b8f2f55359a73992 brtrue IL_0166: switch(IL_0186,IL_01A1) pop <null> ldc.i4 1 br IL_0166: switch(IL_0186,IL_01A1) br IL_0162: ldloc V_0 ldc.i4 0 stloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] ldloc V_0 ldc.i4 989 beq IL_0162: ldloc V_0 br IL_0186: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 dup <null> brtrue IL_01CF: ldsfld x5VArKG3Tn07EGQjdoS x5VArKG3Tn07EGQjdoS::bf0GSR3HrR pop <null> br IL_01CA: br IL_0197 call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() br IL_01DE: endfinally br IL_0186: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::wtCcDQ3Rnq() ldc.i4 1 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_81f70e06f519486ca9d4f95fd469b30a brtrue IL_0166: switch(IL_0186,IL_01A1) pop <null> ldc.i4 0 br IL_0166: switch(IL_0186,IL_01A1) br IL_0197: call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() ldsfld x5VArKG3Tn07EGQjdoS x5VArKG3Tn07EGQjdoS::bf0GSR3HrR call System.Void x5VArKG3Tn07EGQjdoS::hXIGshkBd0(System.Object,x5VArKG3Tn07EGQjdoS) br IL_0197: call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() endfinally <null> br IL_0260: ret ret <null> call System.IntPtr a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::ydUcxW2fc() stloc.s V_1 br IL_0217: ldloc.s V_1 ret <null> ldarg.0 <null> call System.Void a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::GQMqj7FKIl(System.String[]) ldc.i4 3 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_778fbad4fe9d4df3be04113164711071 brtrue IL_0012: switch(IL_0072,IL_0261,IL_0044) pop <null> ldc.i4 1 br IL_0012: switch(IL_0072,IL_0261,IL_0044) ldloc.s V_1 ldsfld System.IntPtr System.IntPtr::Zero ldsfld kxIDBWG4YFhvd4gHxmt kxIDBWG4YFhvd4gHxmt::AOCGTUY3OC call System.Boolean kxIDBWG4YFhvd4gHxmt::hXIGshkBd0(System.IntPtr,System.IntPtr,kxIDBWG4YFhvd4gHxmt) brfalse IL_0232: nop br IL_0252: ldloc.s V_1 nop <null> ldc.i4 4 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_2b3d632826cb41afaebe0525cceb3f1e brfalse IL_0012: switch(IL_0072,IL_0261,IL_0044) pop <null> ldc.i4 0 br IL_0012: switch(IL_0072,IL_0261,IL_0044) ldloc.s V_1 ldc.i4.0 <null> call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::TWEmd8Tv5(System.IntPtr,System.Int32) pop <null> br IL_0232: nop ret <null> call System.Boolean a5gNTpuuDMZgI4cFE3.evRlW4q1NoGBjo4i43f::wJ8qkpbOAu() brtrue IL_0044: ret ldc.i4 10 br IL_000A: stloc V_2 call System.Void a5gNTpuuDMZgI4cFE3.cV4raXvID7OcbvLR3KB::kLjw4iIsCLsZtxc4lksN0j() br IL_0054: call System.Boolean a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::hj8q5ZyxZH()
Module Name

BrokerUpdate.exe
Full Name

BrokerUpdate.exe
EntryPoint

System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::m7p19GhJc(System.String[])
Scope Name

BrokerUpdate.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

BrokerUpdate
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

49
Main Method

System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::m7p19GhJc(System.String[])
Main IL Instruction Count

146
Main IL

br IL_0275: call System.Void a5gNTpuuDMZgI4cFE3.cV4raXvID7OcbvLR3KB::kLjw4iIsCLsZtxc4lksN0j() ldc.i4 0 stloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] ldloc V_2 ldc.i4 10 beq IL_0063: br IL_0045 ldloc V_2 ldc.i4 990 beq IL_000E: ldloc V_2 br IL_0261: call System.Boolean a5gNTpuuDMZgI4cFE3.evRlW4q1NoGBjo4i43f::wJ8qkpbOAu() ret <null> call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::vNBGS5b30() brtrue IL_01E5: call System.IntPtr a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::ydUcxW2fc() br IL_01E4: ret call System.Boolean a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::hj8q5ZyxZH() brfalse IL_01F2: ldarg.0 br IL_01F1: ret br IL_0045: call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::vNBGS5b30() ldc.i4 2 br IL_0012: switch(IL_0072,IL_0261,IL_0044) nop <null> nop <null> newobj System.Void a5gNTpuuDMZgI4cFE3.H9hi2e8GuJUSEiqo2qs::.ctor() stsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 br IL_00B1: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 br IL_0091: ldloc V_3 ldc.i4 0 stloc V_3 ldloc V_3 switch dnlib.DotNet.Emit.Instruction[] ldloc V_3 ldc.i4 988 beq IL_0091: ldloc V_3 br IL_00EF: leave IL_0260 ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 call a5gNTpuuDMZgI4cFE3.alujFxbsHhtQwNndpis a5gNTpuuDMZgI4cFE3.y3LF8kbi1p6j9ECGKcD::cRTb0h6uNq() callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::WA2cSMqAJR(a5gNTpuuDMZgI4cFE3.alujFxbsHhtQwNndpis) br IL_00C5: ldc.i4.m1 ldc.i4.m1 <null> ldsfld sxmlNvGL9XS8Lq8sEbN sxmlNvGL9XS8Lq8sEbN::iDsGWJ3f4c call System.Void sxmlNvGL9XS8Lq8sEbN::hXIGshkBd0(System.Int32,sxmlNvGL9XS8Lq8sEbN) ldc.i4 4 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_e8cbf55da96c495e93beb543ebd42df1 brtrue IL_0095: switch(IL_00EF) pop <null> ldc.i4 0 br IL_0095: switch(IL_00EF) leave IL_0260: ret ldc.i4 -1743770235 ldc.i4 -84687113 xor <null> ldc.i4 1954360196 xor <null> ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_2115c6432c52420ebc71edbd6c6db449 xor <null> call System.String a5gNTpuuDMZgI4cFE3.YPmX8gp7TAtIwEAhWDD::q1dlcVxdcx(System.Int32) ldc.i4 130 call System.Void a5gNTpuuDMZgI4cFE3.d2dBFUYDHVoPfNjEOck::kLSYorOiKu(System.Exception,System.String,System.Int32) br IL_0124: leave IL_0260 leave IL_0260: ret ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 dup <null> brtrue IL_01A6: callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::wtCcDQ3Rnq() pop <null> ldc.i4 2 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_8b5ef204e41140f4b8f2f55359a73992 brtrue IL_0166: switch(IL_0186,IL_01A1) pop <null> ldc.i4 1 br IL_0166: switch(IL_0186,IL_01A1) br IL_0162: ldloc V_0 ldc.i4 0 stloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] ldloc V_0 ldc.i4 989 beq IL_0162: ldloc V_0 br IL_0186: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 dup <null> brtrue IL_01CF: ldsfld x5VArKG3Tn07EGQjdoS x5VArKG3Tn07EGQjdoS::bf0GSR3HrR pop <null> br IL_01CA: br IL_0197 call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() br IL_01DE: endfinally br IL_0186: ldsfld a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::VBZkJq6q7 callvirt System.Void a5gNTpuuDMZgI4cFE3.gWN8P381eE0XLXrHqoa::wtCcDQ3Rnq() ldc.i4 1 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_81f70e06f519486ca9d4f95fd469b30a brtrue IL_0166: switch(IL_0186,IL_01A1) pop <null> ldc.i4 0 br IL_0166: switch(IL_0186,IL_01A1) br IL_0197: call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() ldsfld x5VArKG3Tn07EGQjdoS x5VArKG3Tn07EGQjdoS::bf0GSR3HrR call System.Void x5VArKG3Tn07EGQjdoS::hXIGshkBd0(System.Object,x5VArKG3Tn07EGQjdoS) br IL_0197: call System.Void a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::pPTM96AJ6() endfinally <null> br IL_0260: ret ret <null> call System.IntPtr a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::ydUcxW2fc() stloc.s V_1 br IL_0217: ldloc.s V_1 ret <null> ldarg.0 <null> call System.Void a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::GQMqj7FKIl(System.String[]) ldc.i4 3 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_778fbad4fe9d4df3be04113164711071 brtrue IL_0012: switch(IL_0072,IL_0261,IL_0044) pop <null> ldc.i4 1 br IL_0012: switch(IL_0072,IL_0261,IL_0044) ldloc.s V_1 ldsfld System.IntPtr System.IntPtr::Zero ldsfld kxIDBWG4YFhvd4gHxmt kxIDBWG4YFhvd4gHxmt::AOCGTUY3OC call System.Boolean kxIDBWG4YFhvd4gHxmt::hXIGshkBd0(System.IntPtr,System.IntPtr,kxIDBWG4YFhvd4gHxmt) brfalse IL_0232: nop br IL_0252: ldloc.s V_1 nop <null> ldc.i4 4 ldsfld <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d} <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_f2a4c6e97fdc4b5db1517e7daf233594 ldfld System.Int32 <Module>{340c4c07-7a95-4948-afec-c32e9df5d90d}::m_2b3d632826cb41afaebe0525cceb3f1e brfalse IL_0012: switch(IL_0072,IL_0261,IL_0044) pop <null> ldc.i4 0 br IL_0012: switch(IL_0072,IL_0261,IL_0044) ldloc.s V_1 ldc.i4.0 <null> call System.Boolean a5gNTpuuDMZgI4cFE3.vPnxp72cXpi5NqhqKK::TWEmd8Tv5(System.IntPtr,System.Int32) pop <null> br IL_0232: nop ret <null> call System.Boolean a5gNTpuuDMZgI4cFE3.evRlW4q1NoGBjo4i43f::wJ8qkpbOAu() brtrue IL_0044: ret ldc.i4 10 br IL_000A: stloc V_2 call System.Void a5gNTpuuDMZgI4cFE3.cV4raXvID7OcbvLR3KB::kLjw4iIsCLsZtxc4lksN0j() br IL_0054: call System.Boolean a5gNTpuuDMZgI4cFE3.ByHv08qfld7ovRaoIFC::hj8q5ZyxZH()
ffef35541e153ae809ac00d7501a13e4 (673.43 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙