Windows Analysis Report
Bank Details.exe

Overview

General Information

Sample name: Bank Details.exe
Analysis ID: 1501091
MD5: 99484dd2aebff67b20e11b5af574a8be
SHA1: dbddda933fbb6bb76004c6a27254575eaede9761
SHA256: a130b1de44bb0e882375378f9c3ddcf94508674164458d76ae06bb9fd36393eb
Tags: exe
Infos:

Detection

AgentTesla, DarkTortilla
Score: 100
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected AgentTesla
Yara detected AntiVM3
Yara detected DarkTortilla Crypter
.NET source code contains method to dynamically call methods (often used by packers)
AI detected suspicious sample
Allocates memory in foreign processes
Contains functionality to log keystrokes (.Net Source)
Hides that the sample has been downloaded from the Internet (zone.identifier)
Injects a PE file into a foreign processes
Machine Learning detection for dropped file
Machine Learning detection for sample
Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal ftp login credentials
Tries to steal Mail credentials (via file / registry access)
Uses ping.exe to check the status of other devices and networks
Uses ping.exe to sleep
Writes to foreign memory regions
Abnormal high CPU Usage
Allocates memory with a write watch (potentially for evading sandboxes)
Contains functionality to launch a process as a different user
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Creates a start menu entry (Start Menu\Programs\Startup)
Detected TCP or UDP traffic on non-standard ports
Detected potential crypto function
Drops PE files
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found inlined nop instructions (likely shell or obfuscated code)
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Sigma detected: CurrentVersion Autorun Keys Modification
Sigma detected: Startup Folder File Write
Sigma detected: Suspicious Outbound SMTP Connections
Stores files to the Windows start menu directory
Uses SMTP (mail sending)
Uses code obfuscation techniques (call, push, ret)
Yara detected Credential Stealer
Yara signature match

Classification

Name Description Attribution Blogpost URLs Link
Agent Tesla, AgentTesla A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.
  • SWEED
 https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla
Name Description Attribution Blogpost URLs Link
DarkTortilla DarkTortilla is a complex and highly configurable .NET-based crypter that has possibly been active since at least August 2015. It typically delivers popular information stealers and remote access trojans (RATs) such as AgentTesla, AsyncRat, NanoCore, and RedLine. While it appears to primarily deliver commodity malware, Secureworks Counter Threat Unit (CTU) researchers identified DarkTortilla samples delivering targeted payloads such as Cobalt Strike and Metasploit. It can also deliver "addon packages" such as additional malicious payloads, benign decoy documents, and executables. It features robust anti-analysis and anti-tamper controls that can make detection, analysis, and eradication challenging.From January 2021 through May 2022, an average of 93 unique DarkTortilla samples per week were uploaded to the VirusTotal analysis service. Code similarities suggest possible links between DarkTortilla and other malware: a crypter operated by the RATs Crew threat group, which was active between 2008 and 2012, and the Gameloader malware that emerged in 2021. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/win.darktortilla

AV Detection
barindex
Found malware configuration
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.azmaplast.com", "Username": "info@azmaplast.com", "Password": "QAZqaz123@@"}
Multi AV Scanner detection for dropped file
Source: C:\Users\user\Desktop\udo.exe ReversingLabs: Detection: 55%
Source: C:\Users\user\Desktop\udo.exe Virustotal: Detection: 43% Perma Link
Multi AV Scanner detection for submitted file
Source: Bank Details.exe ReversingLabs: Detection: 55%
Source: Bank Details.exe Virustotal: Detection: 43% Perma Link
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 100.0% probability
Machine Learning detection for dropped file
Source: C:\Users\user\Desktop\udo.exe Joe Sandbox ML: detected
Machine Learning detection for sample
Source: Bank Details.exe Joe Sandbox ML: detected
Source: Bank Details.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 00000012.00000002.3830643488.0000000005E80000.00000004.00000020.00020000.00000000.sdmp, boqXv.exe, 00000014.00000000.3311816237.0000000000422000.00000002.00000001.01000000.0000000E.sdmp, boqXv.exe.18.dr
Source: Binary string: InstallUtil.pdb source: InstallUtil.exe, 00000012.00000002.3830643488.0000000005E80000.00000004.00000020.00020000.00000000.sdmp, boqXv.exe, 00000014.00000000.3311816237.0000000000422000.00000002.00000001.01000000.0000000E.sdmp, boqXv.exe.18.dr
Found inlined nop instructions (likely shell or obfuscated code)
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 4x nop then cmp dword ptr [ebp-18h], 00000000h 0_2_017D4A21
Source: C:\Users\user\Desktop\udo.exe Code function: 4x nop then cmp dword ptr [ebp-18h], 00000000h 16_2_01724A21

Networking
barindex
Suricata IDS alerts for network traffic
Source: Network traffic Suricata IDS: 2855245 - Severity 1 - ETPRO MALWARE Agent Tesla Exfil via SMTP : 192.168.2.9:49722 -> 193.141.65.39:587
Source: Network traffic Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.9:49722 -> 193.141.65.39:587
Source: Network traffic Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.9:49722 -> 193.141.65.39:587
Source: Network traffic Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.9:49722 -> 193.141.65.39:587
Source: Network traffic Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.9:49722 -> 193.141.65.39:587
Uses ping.exe to check the status of other devices and networks
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.9:49722 -> 193.141.65.39:587
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 193.141.65.39 193.141.65.39
Internet Provider seen in connection with other malware
Source: Joe Sandbox View ASN Name: KPNNL KPNNL
Uses SMTP (mail sending)
Source: global traffic TCP traffic: 192.168.2.9:49722 -> 193.141.65.39:587
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic DNS traffic detected: DNS query: mail.azmaplast.com
Source: InstallUtil.exe, 00000012.00000002.3823957553.0000000002B3A000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://mail.azmaplast.com
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp, Bank Details.exe, 00000000.00000002.1713067974.0000000004702000.00000004.00000800.00020000.00000000.sdmp, Bank Details.exe, 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, udo.exe, 00000010.00000002.3840250798.00000000042D0000.00000004.00000800.00020000.00000000.sdmp, udo.exe, 00000010.00000002.3840250798.00000000045BB000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000011.00000002.2877661003.0000000000732000.00000040.00000400.00020000.00000000.sdmp String found in binary or memory: https://account.dyn.com/

Key, Mouse, Clipboard, Microphone and Screen Capturing
barindex
Contains functionality to log keystrokes (.Net Source)
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, FaJzHLniypp.cs .Net Code: _5cQa10w
Source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, FaJzHLniypp.cs .Net Code: _5cQa10w
Source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, FaJzHLniypp.cs .Net Code: _5cQa10w
Source: 0.2.Bank Details.exe.4442802.3.raw.unpack, FaJzHLniypp.cs .Net Code: _5cQa10w
Source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, FaJzHLniypp.cs .Net Code: _5cQa10w

System Summary
barindex
Malicious sample detected (through community Yara rule)
Source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 17.2.InstallUtil.exe.730000.0.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.45f6f20.3.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.45f6f20.3.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.47020c0.0.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Abnormal high CPU Usage
Source: C:\Users\user\Desktop\udo.exe Process Stats: CPU usage > 49%
Contains functionality to launch a process as a different user
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A85A880 CreateProcessAsUserW, 16_2_0A85A880
Detected potential crypto function
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_017D4A21 0_2_017D4A21
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_017D6CD0 0_2_017D6CD0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_017D7AA8 0_2_017D7AA8
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_017D9FC8 0_2_017D9FC8
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CD1848 0_2_07CD1848
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CD8C80 0_2_07CD8C80
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC8D3 0_2_07CDC8D3
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC8E0 0_2_07CDC8E0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D4D730 0_2_07D4D730
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D411C0 0_2_07D411C0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D4B198 0_2_07D4B198
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D4B18F 0_2_07D4B18F
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_08175AA0 0_2_08175AA0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_0817497F 0_2_0817497F
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_081749A0 0_2_081749A0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_0817BA10 0_2_0817BA10
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_0817C370 0_2_0817C370
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086A2388 0_2_086A2388
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086AC2B0 0_2_086AC2B0
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086A2378 0_2_086A2378
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D411B3 0_2_07D411B3
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0172A140 16_2_0172A140
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_01724A21 16_2_01724A21
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_01726D58 16_2_01726D58
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_01727A98 16_2_01727A98
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_067DD3E0 16_2_067DD3E0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_067DD3D0 16_2_067DD3D0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_067DAA7C 16_2_067DAA7C
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D11848 16_2_07D11848
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D18BFC 16_2_07D18BFC
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D1C8D3 16_2_07D1C8D3
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D1C8E0 16_2_07D1C8E0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D18C80 16_2_07D18C80
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D1C8AB 16_2_07D1C8AB
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D1FC78 16_2_07D1FC78
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D1FC68 16_2_07D1FC68
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D811C0 16_2_07D811C0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DA9BF8 16_2_07DA9BF8
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DA5BB8 16_2_07DA5BB8
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DACAFE 16_2_07DACAFE
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAD9A0 16_2_07DAD9A0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DA10DE 16_2_07DA10DE
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAAC90 16_2_07DAAC90
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAB8B0 16_2_07DAB8B0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAC0A9 16_2_07DAC0A9
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAF359 16_2_07DAF359
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAF368 16_2_07DAF368
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAF658 16_2_07DAF658
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAFA10 16_2_07DAFA10
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAFA00 16_2_07DAFA00
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAD97B 16_2_07DAD97B
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAC129 16_2_07DAC129
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAE888 16_2_07DAE888
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAB883 16_2_07DAB883
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAFC48 16_2_07DAFC48
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DA0040 16_2_07DA0040
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAE878 16_2_07DAE878
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DA003B 16_2_07DA003B
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07DAFC39 16_2_07DAFC39
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_08202388 16_2_08202388
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0820C2B0 16_2_0820C2B0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_08202378 16_2_08202378
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A855AE0 16_2_0A855AE0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A85AE00 16_2_0A85AE00
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A854E40 16_2_0A854E40
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A850BF0 16_2_0A850BF0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A853370 16_2_0A853370
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A850040 16_2_0A850040
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A854E2F 16_2_0A854E2F
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A850B87 16_2_0A850B87
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A854388 16_2_0A854388
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A858BB7 16_2_0A858BB7
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8577D0 16_2_0A8577D0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8577E0 16_2_0A8577E0
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A853318 16_2_0A853318
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A853360 16_2_0A853360
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8550D9 16_2_0A8550D9
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8590E1 16_2_0A8590E1
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A850007 16_2_0A850007
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8589C8 16_2_0A8589C8
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A8589D8 16_2_0A8589D8
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_0A859140 16_2_0A859140
Source: C:\Users\user\Desktop\udo.exe Code function: 16_2_07D811B3 16_2_07D811B3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_0288A3E8 18_2_0288A3E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_0288D738 18_2_0288D738
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_02884AD0 18_2_02884AD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_02889818 18_2_02889818
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_02883EB8 18_2_02883EB8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Code function: 18_2_02884200 18_2_02884200
Sample file is different than original file name gathered from version info
Source: Bank Details.exe, 00000000.00000002.1710796829.000000000147E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameclr.dllT vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: OriginalFilename303ccb5a-e74e-425a-949b-a0bf6563c022.exe4 vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004702000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: OriginalFilename303ccb5a-e74e-425a-949b-a0bf6563c022.exe4 vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: OriginalFilenameTokenTableApp.dll> vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: OriginalFilename303ccb5a-e74e-425a-949b-a0bf6563c022.exe4 vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000002.1715433973.0000000006550000.00000004.08000000.00040000.00000000.sdmp Binary or memory string: OriginalFilenameTokenTableApp.dll> vs Bank Details.exe
Source: Bank Details.exe, 00000000.00000000.1360954228.0000000000D78000.00000002.00000001.01000000.00000003.sdmp Binary or memory string: OriginalFilenameblessed P.exeH vs Bank Details.exe
Source: Bank Details.exe Binary or memory string: OriginalFilenameblessed P.exeH vs Bank Details.exe
Yara signature match
Source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 17.2.InstallUtil.exe.730000.0.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.45f6f20.3.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.45f6f20.3.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.47020c0.0.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, Tk7F6W0v.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, Tk7F6W0v.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, Tk7F6W0v.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, Tk7F6W0v.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, ivMw3WGb8.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, ivMw3WGb8.cs Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, cdw.cs Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, cdw.cs Cryptographic APIs: 'TransformFinalBlock'
Source: Bank Details.exe, y8.cs Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Bank Details.exe, y8.cs Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: udo.exe.8.dr, y8.cs Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: udo.exe.8.dr, y8.cs Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: classification engine Classification label: mal100.troj.spyw.evad.winEXE@18/10@1/2
Source: C:\Users\user\Desktop\Bank Details.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\udo.lnk Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Mutant created: NULL
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2124:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6428:120:WilError_03
Source: Bank Details.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: Bank Details.exe Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\Bank Details.exe File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: Bank Details.exe ReversingLabs: Detection: 55%
Source: Bank Details.exe Virustotal: Detection: 43%
Source: C:\Users\user\Desktop\Bank Details.exe File read: C:\Users\user\Desktop\Bank Details.exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\Bank Details.exe "C:\Users\user\Desktop\Bank Details.exe"
Source: C:\Users\user\Desktop\Bank Details.exe Process created: C:\Windows\SysWOW64\cmd.exe "cmd" /c ping 127.0.0.1 -n 41 > nul && copy "C:\Users\user\Desktop\Bank Details.exe" "C:\Users\user\Desktop\udo.exe" && ping 127.0.0.1 -n 41 > nul && "C:\Users\user\Desktop\udo.exe"
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Users\user\Desktop\udo.exe "C:\Users\user\Desktop\udo.exe"
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
Source: unknown Process created: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe "C:\Users\user\AppData\Roaming\boqXv\boqXv.exe"
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown Process created: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe "C:\Users\user\AppData\Roaming\boqXv\boqXv.exe"
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\Bank Details.exe Process created: C:\Windows\SysWOW64\cmd.exe "cmd" /c ping 127.0.0.1 -n 41 > nul && copy "C:\Users\user\Desktop\Bank Details.exe" "C:\Users\user\Desktop\udo.exe" && ping 127.0.0.1 -n 41 > nul && "C:\Users\user\Desktop\udo.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Users\user\Desktop\udo.exe "C:\Users\user\Desktop\udo.exe" Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: sxs.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: mpr.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: scrrun.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: winnsi.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: mswsock.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: winnsi.dll Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: version.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: wbemcomn.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: vaultcli.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32 Jump to behavior
Source: udo.lnk.0.dr LNK file: ..\..\..\..\..\..\..\Desktop\udo.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Users\user\Desktop\Bank Details.exe File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles Jump to behavior
Source: Bank Details.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
Source: Bank Details.exe Static PE information: Virtual size of .text is bigger than: 0x100000
Source: Bank Details.exe Static file information: File size 1201152 > 1048576
Source: Bank Details.exe Static PE information: Raw size of .text is bigger than: 0x100000 < 0x124c00
Source: Bank Details.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 00000012.00000002.3830643488.0000000005E80000.00000004.00000020.00020000.00000000.sdmp, boqXv.exe, 00000014.00000000.3311816237.0000000000422000.00000002.00000001.01000000.0000000E.sdmp, boqXv.exe.18.dr
Source: Binary string: InstallUtil.pdb source: InstallUtil.exe, 00000012.00000002.3830643488.0000000005E80000.00000004.00000020.00020000.00000000.sdmp, boqXv.exe, 00000014.00000000.3311816237.0000000000422000.00000002.00000001.01000000.0000000E.sdmp, boqXv.exe.18.dr

Data Obfuscation
barindex
Yara detected DarkTortilla Crypter
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.45da998.4.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.6550000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.6550000.6.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.1711519526.000000000368B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1711519526.0000000003434000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000045BB000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1715433973.0000000006550000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000042D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1711519526.0000000003341000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3825194798.0000000003271000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: Bank Details.exe PID: 7720, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: udo.exe PID: 3004, type: MEMORYSTR
.NET source code contains method to dynamically call methods (often used by packers)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_CurDrive, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" loaded (unthread)"));}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox1, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_CurDrive, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" unthreaded"));}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.ConfTapeDrive + " Barcode = " + CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_barcode;}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1]{new n8(qb.s6T)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{//IL_002e: Unknown result type (might be due to invalid IL or missing references)//IL_0034: Expected O, but got Unknown//IL_008c: Unknown result type (might be due to invalid IL or missing references)//IL_0093: Expected O, but got Unknown//IL_00f0: Unknown result type (might be due to invalid IL or missing references)//IL_00f7: Expected O, but got Unknown//IL_0157: Unknown result type (might be due to invalid IL or missing references)//IL_015e: Expected O, but got Unknownforeach (Control item in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.Panel1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val = item;val.Enabled = true;}foreach (Control item2 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.Panel2, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val2 = item2;val2.Enabled = true;}foreach (Control item3 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.TabControl1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val3 = item3;val3.Enabled = true;}foreach (Control item4 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.TabPage1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val4 = item4;val4.Enabled = true;}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { "Start format ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Initializing tape.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(CS_0024_003C_003E8__locals0._0024VB_0024Local_ModeData), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Vendor=OPEN.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Application name = LTFSCopyGUI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Application Version={((ApplicationBase)p4.Application).Info.Version.ToString(3)}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: TextLabel= .." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Localization Identifier = 0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Barcode={_0024VB_0024Local_barcode}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Format Version=2.4.0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Block size.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Locate to data partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Locate to index partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Written time={CS_0024_003C_003E8__locals0._0024VB_0024Local_CurrentTime}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: VCI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Format finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024NonLocal__0024VB_0024Closure_3._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { CS_0024_003C_003E8__locals1._0024VB_0024Local_ex.ToString() + "\r\n" }, (string[])null, (Type[])null, (bool[])null, true);NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024NonLocal__0024VB_0024Closure_3._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Format failed." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { "Filemark written." }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Writing: {_0024VB_0024Local_fname}" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Write finished: {_0024VB_0024Local_fname}" }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "DataBuffer\r\n" }, (string[])null, (Type[])null);object textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)k2(array2, d0: true)) }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\n\r\nSenseBuffer\r\n") }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)(k2(array3) + "\r\n")) }, (string[])null, (Type[])null);textBox4 = TextBox8;object obj4 = textBox4;object[] array6 = new object[1];object obj5 = NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null);object obj6 = TapeUtils;object[] obj7 = new object[1] { array3 };object[] array7 = obj7;bool[] obj8 = new bool[1] { true };bool[] array8 = obj8;object obj9 = NewLateBinding.LateGet(obj6, (Type)null, "ParseSenseData", obj7, (string[])null, (Type[])null, obj8);if (array8[0]){array3 = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array7[0]), typeof(byte[]));}array6[0] = Operators.ConcatenateObject(obj5, Operators.ConcatenateObject(obj9, (object)"\r\n"));NewLateBinding.LateSet(obj4, (Type)null, "Text", array6, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox3 = TextBox8;NewLateBinding.LateSet(textBox3, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox3, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nOK") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox2 = TextBox8;NewLateBinding.LateSet(textBox2, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox2, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nFAIL") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(Panel2, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text, "", false) == 0){text = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(objectValue, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" loaded (unthread)"));}text += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox1, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text, "", false) == 0){text = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(objectValue, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" unthreaded"));}text += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "Start erase ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(CS_0024_003C_003E8__locals0._0024VB_0024Local_ModeData), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Reinitializing.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unloading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { Operators.ConcatenateObject(Operators.ConcatenateObject((object)("Erasing " + Conversions.ToString(CS_0024_003C_003E8__locals2._0024VB_0024Local_i) + "/"), NewLateBinding.LateGet(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.NumericUpDown6, (Type)null, "Value", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)"..") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { CS_0024_003C_003E8__locals1._0024VB_0024Local_ex.ToString() }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Erase finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text2, "", false) == 0){text2 = ConfTapeDrive + " Barcode = " + text;}text2 += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text2 }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text2 = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(c5S3Pa.p6G0Wk)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(i6Y3Mb.r9LWg6)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(ButtonDebugDumpMAM, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1]{new n8(qb.s6T)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{//IL_002e: Unknown result type (might be due to invalid IL or missing references)//IL_0034: Expected O, but got Unknown//IL_008c: Unknown result type (might be due to invalid IL or missing references)//IL_0093: Expected O, but got Unknown//IL_00f0: Unknown result type (might be due to invalid IL or missing references)//IL_00f7: Expected O, but got Unknown//IL_0157: Unknown result type (might be due to invalid IL or missing references)//IL_015e: Expected O, but got Unknownforeach (Control item5 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val5 = item5;val5.Enabled = true;}foreach (Control item6 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel2, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val6 = item6;val6.Enabled = true;}foreach (Control item7 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TabControl1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val7 = item7;val7.Enabled = true;}foreach (Control item8 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TabPage1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val8 = item8;val8.Enabled = true;}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(NewLateBinding.LateGet(ComboBox3, (Type)null, "TextBox1", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Text", new object[1] { text }, (string[])null, (Type[])null, false, true);NewLateBinding.LateCall(ComboBox3, (Type)null, "LoadSchemaFile", new object[0], (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "Start format ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Initializing tape.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(array3), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Vendor=OPEN.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Application name = LTFSCopyGUI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Application Version={((ApplicationBase)p4.Application).Info.Version.ToString(3)}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: TextLabel= .." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Localization Identifier = 0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Barcode={text}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Format Version=2.4.0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Block size.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Locate to data partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Locate to index partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Written time={text2}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: VCI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Format finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { ex3.ToString() + "\r\n" }, (string[])null, (Type[])null, (bool[])null, true);NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Format failed." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "RELEASE UNIT\r\n" }, (string[])null, (Type[])null);object textBox = TextBox8;object[] array3 = new object[1];object obj4;object obj5 = (obj4 = TapeUtils);object[] array4 = new object[1];byte[] array5 = (byte[])(array4[0] = Rx98Sr);object[] array6 = array4;bool[] obj6 = new bool[1] { true };bool[] array7 = obj6;object obj7 = NewLateBinding.LateGet(obj5, (Type)null, "ParseSenseData", array4, (string[])null, (Type[])null, obj6);if (array7[0]){Rx98Sr = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array6[0]), typeof(byte[]));}array3[0] = obj7;object[] array8 = array3;bool[] array9;NewLateBinding.LateCall(textBox, (Type)null, "AppendText", array3, (string[])null, (Type[])null, array9 = new bool[1] { true }, true);if (array9[0]){NewLateBinding.LateSetComplex(obj4, (Type)null, "ParseSenseData", new object[2]{array5,array8[0]}, (string[])null, (Type[])null, true, true);}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "ALLOW MEDIA REMOVAL\r\n" }, (string[])null, (Type[])null);object textBox = TextBox8;object[] array3 = new object[1];object obj4;object obj5 = (obj4 = TapeUtils);object[] array4 = new object[1];byte[] array5 = (byte[])(array4[0] = Ac36Xy);object[] array6 = array4;bool[] obj6 = new bool[1] { true };bool[] array7 = obj6;object obj7 = NewLateBinding.LateGet(obj5, (Type)null, "ParseSenseData", array4, (string[])null, (Type[])null, obj6);if (array7[0]){Ac36Xy = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array6[0]), typeof(byte[]));}array3[0] = obj7;object[] array8 = array3;bool[] array9;NewLateBinding.LateCall(textBox, (Type)null, "AppendText", array3, (string[])null, (Type[])null, array9 = new bool[1] { true }, true);if (array9[0]){NewLateBinding.LateSetComplex(obj4, (Type)null, "ParseSenseData", new object[2]{array5,array8[0]}, (string[])null, (Type[])null, true, true);}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { "Filemark written." }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Writing: {CS_0024_003C_003E8__locals0._0024VB_0024Local_fname}" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Write finished: {CS_0024_003C_003E8__locals0._0024VB_0024Local_fname}" }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "DataBuffer\r\n" }, (string[])null, (Type[])null);object textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)k2(array2, d0: true)) }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\n\r\nSenseBuffer\r\n") }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)(k2(array3) + "\r\n")) }, (string[])null, (Type[])null);textBox4 = TextBox8;object obj4 = textBox4;object[] array6 = new object[1];object obj5 = NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null);object obj6 = TapeUtils;object[] obj7 = new object[1] { array3 };object[] array7 = obj7;bool[] obj8 = new bool[1] { true };bool[] array8 = obj8;object obj9 = NewLateBinding.LateGet(obj6, (Type)null, "ParseSenseData", obj7, (string[])null, (Type[])null, obj8);if (array8[0]){array3 = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array7[0]), typeof(byte[]));}array6[0] = Operators.ConcatenateObject(obj5, Operators.ConcatenateObject(obj9, (object)"\r\n"));NewLateBinding.LateSet(obj4, (Type)null, "Text", array6, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox3 = TextBox8;NewLateBinding.LateSet(textBox3, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox3, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nOK") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox2 = TextBox8;NewLateBinding.LateSet(textBox2, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox2, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nFAIL") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(Panel2, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "Start erase ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(CS_0024_003C_003E8__locals0._0024VB_0024Local_ModeData), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { Operators.ConcatenateObject(Operators.ConcatenateObject((object)("Erasing " + Conversions.ToString(CS_0024_003C_003E8__locals2._0024VB_0024Local_i) + "/"), NewLateBinding.LateGet(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.NumericUpDown6, (Type)null, "Value", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)"..") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Reinitializing.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unloading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { CS_0024_003C_003E8__locals1._0024VB_0024Local_ex.ToString() }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Erase finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(c5S3Pa.p6G0Wk)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(i6Y3Mb.r9LWg6)}, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(ButtonDebugDumpMAM, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "RELEASE UNIT\r\n" }, (string[])null, (Type[])null);object textBox = TextBox8;object[] array = new object[1];object obj;object obj2 = (obj = TapeUtils);object[] array2 = new object[1];byte[] array3 = (byte[])(array2[0] = Rx98Sr);object[] array4 = array2;bool[] obj3 = new bool[1] { true };bool[] array5 = obj3;object obj4 = NewLateBinding.LateGet(obj2, (Type)null, "ParseSenseData", array2, (string[])null, (Type[])null, obj3);if (array5[0]){Rx98Sr = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array4[0]), typeof(byte[]));}array[0] = obj4;object[] array6 = array;bool[] array7;NewLateBinding.LateCall(textBox, (Type)null, "AppendText", array, (string[])null, (Type[])null, array7 = new bool[1] { true }, true);if (array7[0]){NewLateBinding.LateSetComplex(obj, (Type)null, "ParseSenseData", new object[2]{array3,array6[0]}, (string[])null, (Type[])null, true, true);}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: Bank Details.exe, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "ALLOW MEDIA REMOVAL\r\n" }, (string[])null, (Type[])null);object textBox = TextBox8;object[] array = new object[1];object obj;object obj2 = (obj = TapeUtils);object[] array2 = new object[1];byte[] array3 = (byte[])(array2[0] = Ac36Xy);object[] array4 = array2;bool[] obj3 = new bool[1] { true };bool[] array5 = obj3;object obj4 = NewLateBinding.LateGet(obj2, (Type)null, "ParseSenseData", array2, (string[])null, (Type[])null, obj3);if (array5[0]){Ac36Xy = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array4[0]), typeof(byte[]));}array[0] = obj4;object[] array6 = array;bool[] array7;NewLateBinding.LateCall(textBox, (Type)null, "AppendText", array, (string[])null, (Type[])null, array7 = new bool[1] { true }, true);if (array7[0]){NewLateBinding.LateSetComplex(obj, (Type)null, "ParseSenseData", new object[2]{array3,array6[0]}, (string[])null, (Type[])null, true, true);}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_CurDrive, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" loaded (unthread)"));}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox1, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_CurDrive, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" unthreaded"));}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(_0024VB_0024Me.ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(CS_0024_003C_003E8__locals0._0024VB_0024Local_result, "", false) == 0){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.ConfTapeDrive + " Barcode = " + CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Local_barcode;}CS_0024_003C_003E8__locals0._0024VB_0024Local_result += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox2, (Type)null, "AppendText", array3 = new object[1] { CS_0024_003C_003E8__locals0._0024VB_0024Local_result }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){CS_0024_003C_003E8__locals0._0024VB_0024Local_result = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);_0024VB_0024Me.Nj(Conversions.ToBoolean(NewLateBinding.LateGet(_0024VB_0024Me.CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1]{new n8(qb.s6T)}, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{//IL_002e: Unknown result type (might be due to invalid IL or missing references)//IL_0034: Expected O, but got Unknown//IL_008c: Unknown result type (might be due to invalid IL or missing references)//IL_0093: Expected O, but got Unknown//IL_00f0: Unknown result type (might be due to invalid IL or missing references)//IL_00f7: Expected O, but got Unknown//IL_0157: Unknown result type (might be due to invalid IL or missing references)//IL_015e: Expected O, but got Unknownforeach (Control item in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.Panel1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val = item;val.Enabled = true;}foreach (Control item2 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.Panel2, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val2 = item2;val2.Enabled = true;}foreach (Control item3 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.TabControl1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val3 = item3;val3.Enabled = true;}foreach (Control item4 in (IEnumerable)NewLateBinding.LateGet(_0024VB_0024Me.TabPage1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val4 = item4;val4.Enabled = true;}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { "Start format ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Initializing tape.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(CS_0024_003C_003E8__locals0._0024VB_0024Local_ModeData), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Vendor=OPEN.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Application name = LTFSCopyGUI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Application Version={((ApplicationBase)p4.Application).Info.Version.ToString(3)}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: TextLabel= .." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Localization Identifier = 0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Barcode={_0024VB_0024Local_barcode}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Format Version=2.4.0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Block size.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Locate to data partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Locate to index partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Written time={CS_0024_003C_003E8__locals0._0024VB_0024Local_CurrentTime}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: VCI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Format finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(_0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024NonLocal__0024VB_0024Closure_3._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { CS_0024_003C_003E8__locals1._0024VB_0024Local_ex.ToString() + "\r\n" }, (string[])null, (Type[])null, (bool[])null, true);NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024NonLocal__0024VB_0024Closure_3._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { "Format failed." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { "Filemark written." }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Writing: {_0024VB_0024Local_fname}" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(_0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(_0024VB_0024Me.TextBox8, (Type)null, "Text", new object[1] { $"Write finished: {_0024VB_0024Local_fname}" }, (string[])null, (Type[])null);NewLateBinding.LateSetComplex(_0024VB_0024Me.Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "DataBuffer\r\n" }, (string[])null, (Type[])null);object textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)k2(array2, d0: true)) }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\n\r\nSenseBuffer\r\n") }, (string[])null, (Type[])null);textBox4 = TextBox8;NewLateBinding.LateSet(textBox4, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)(k2(array3) + "\r\n")) }, (string[])null, (Type[])null);textBox4 = TextBox8;object obj4 = textBox4;object[] array6 = new object[1];object obj5 = NewLateBinding.LateGet(textBox4, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null);object obj6 = TapeUtils;object[] obj7 = new object[1] { array3 };object[] array7 = obj7;bool[] obj8 = new bool[1] { true };bool[] array8 = obj8;object obj9 = NewLateBinding.LateGet(obj6, (Type)null, "ParseSenseData", obj7, (string[])null, (Type[])null, obj8);if (array8[0]){array3 = (byte[])Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array7[0]), typeof(byte[]));}array6[0] = Operators.ConcatenateObject(obj5, Operators.ConcatenateObject(obj9, (object)"\r\n"));NewLateBinding.LateSet(obj4, (Type)null, "Text", array6, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox3 = TextBox8;NewLateBinding.LateSet(textBox3, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox3, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nOK") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{object textBox2 = TextBox8;NewLateBinding.LateSet(textBox2, (Type)null, "Text", new object[1] { Operators.ConcatenateObject(NewLateBinding.LateGet(textBox2, (Type)null, "Text", new object[0], (string[])null, (Type[])null, (bool[])null), (object)"\r\nFAIL") }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(Panel2, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text, "", false) == 0){text = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(objectValue, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" loaded (unthread)"));}text += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox1, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text, "", false) == 0){text = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object)"TAPE", NewLateBinding.LateGet(objectValue, (Type)null, "DevIndex", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)" unthreaded"));}text += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox2, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "Start erase ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(CS_0024_003C_003E8__locals0._0024VB_0024Local_ModeData), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Reinitializing.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unloading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Unthreading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Threading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { Operators.ConcatenateObject(Operators.ConcatenateObject((object)("Erasing " + Conversions.ToString(CS_0024_003C_003E8__locals2._0024VB_0024Local_i) + "/"), NewLateBinding.LateGet(CS_0024_003C_003E8__locals2._0024VB_0024NonLocal__0024VB_0024Closure_2._0024VB_0024Me.NumericUpDown6, (Type)null, "Value", new object[0], (string[])null, (Type[])null, (bool[])null)), (object)"..") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " Fail\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(CS_0024_003C_003E8__locals1._0024VB_0024Me.TextBox8, (Type)null, "AppendText", new object[1] { CS_0024_003C_003E8__locals1._0024VB_0024Local_ex.ToString() }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Erase finished." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{if (Operators.CompareString(text2, "", false) == 0){text2 = ConfTapeDrive + " Barcode = " + text;}text2 += "\r\n";object[] array3;bool[] array4;NewLateBinding.LateCall(TextBox2, (Type)null, "AppendText", array3 = new object[1] { text2 }, (string[])null, (Type[])null, array4 = new bool[1] { true }, true);if (array4[0]){text2 = (string)Conversions.ChangeType(RuntimeHelpers.GetObjectValue(array3[0]), typeof(string));}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(Panel1, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null, false, true);Nj(Conversions.ToBoolean(NewLateBinding.LateGet(CheckBox3, (Type)null, "Checked", new object[0], (string[])null, (Type[])null, (bool[])null)));}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(c5S3Pa.p6G0Wk)}, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1]{new n8(i6Y3Mb.r9LWg6)}, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(ButtonDebugDumpMAM, (Type)null, "Enabled", new object[1] { true }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1]{new n8(qb.s6T)}, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(CS_0024_003C_003E8__locals0._0024VB_0024Me.ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{//IL_002e: Unknown result type (might be due to invalid IL or missing references)//IL_0034: Expected O, but got Unknown//IL_008c: Unknown result type (might be due to invalid IL or missing references)//IL_0093: Expected O, but got Unknown//IL_00f0: Unknown result type (might be due to invalid IL or missing references)//IL_00f7: Expected O, but got Unknown//IL_0157: Unknown result type (might be due to invalid IL or missing references)//IL_015e: Expected O, but got Unknownforeach (Control item5 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val5 = item5;val5.Enabled = true;}foreach (Control item6 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.Panel2, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val6 = item6;val6.Enabled = true;}foreach (Control item7 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TabControl1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val7 = item7;val7.Enabled = true;}foreach (Control item8 in (IEnumerable)NewLateBinding.LateGet(CS_0024_003C_003E8__locals0._0024VB_0024Me.TabPage1, (Type)null, "Controls", new object[0], (string[])null, (Type[])null, (bool[])null)){Control val8 = item8;val8.Enabled = true;}}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(NewLateBinding.LateGet(ComboBox3, (Type)null, "ComboBox2", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSetComplex(NewLateBinding.LateGet(ComboBox3, (Type)null, "TextBox1", new object[0], (string[])null, (Type[])null, (bool[])null), (Type)null, "Text", new object[1] { text }, (string[])null, (Type[])null, false, true);NewLateBinding.LateCall(ComboBox3, (Type)null, "LoadSchemaFile", new object[0], (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateSet(TextBox8, (Type)null, "Text", new object[1] { "Start format ...\r\n" }, (string[])null, (Type[])null);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Loading.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Initializing tape.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SENSE" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { string.Format(" Mode Data: {0}{1}", k2(array3), "\r\n") }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Partition mode page.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Partitioning.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Vendor=OPEN.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Application name = LTFSCopyGUI.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Application Version={((ApplicationBase)p4.Application).Info.Version.ToString(3)}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: TextLabel= .." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Localization Identifier = 0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { $"WRITE ATTRIBUTE: Barcode={text}.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "WRITE ATTRIBUTE: Format Version=2.4.0.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "MODE SELECT - Block size.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Locate to data partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Locate to index partition.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write VOL1Label.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfslabel.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write ltfsindex.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { " OK\r\n" }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Source: udo.exe.8.dr, y8.cs .Net Code: NewLateBinding.LateCall(ComboBox2, (Type)null, "Invoke", new object[1] { (n8)([SpecialName] () =>{NewLateBinding.LateCall(TextBox8, (Type)null, "AppendText", new object[1] { "Write FileMark.." }, (string[])null, (Type[])null, (bool[])null, true);}) }, (string[])null, (Type[])null, (bool[])null, true)
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDA7CB push edx; retf 0_2_07CDA7D2
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDACB1 push esp; retf 0_2_07CDACB2
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC3B0 pushad ; retf 0_2_07CDC3B2
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC3B3 pushad ; retf 0_2_07CDC3BA
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC359 pushad ; retf 0_2_07CDC35A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDB358 push esi; retf 0_2_07CDB35A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC35B pushad ; retf 0_2_07CDC362
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDA363 push eax; retf 0_2_07CDA366
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDB30D push esi; retf 0_2_07CDB332
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC2BC pushad ; retf 0_2_07CDC2BE
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDC2BF pushad ; retf 0_2_07CDC2C2
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDA1D6 push ecx; retf EFCDh 0_2_07CDA32A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07CDB193 push ebp; retf 0_2_07CDB19A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D40393 push FFFFFFE9h; retn 0001h 0_2_07D4039D
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D48B21 pushfd ; retf 0_2_07D48B22
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D46E09 push ecx; retf 0046h 0_2_07D46E2A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D490D4 pushad ; retf 0_2_07D4912D
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_07D40492 push FFFFFFE9h; ret 0_2_07D4049C
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_08175AA0 push ss; ret 0_2_08179526
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_08179829 pushfd ; retf 0046h 0_2_0817982A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_08179464 push ss; ret 0_2_08179526
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_0817A4A8 push eax; retf 0_2_0817A4A9
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_0817A543 pushad ; retf 0_2_0817A545
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_08170BB0 push eax; iretd 0_2_08170C06
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_081797A7 pushad ; retf 0_2_081797AD
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_081797FC pushfd ; retf 0046h 0_2_08179822
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086AD570 push cs; retf 0_2_086ADE7A
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086AFDF1 push ds; retf 0_2_086AFDF2
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086ADE7B push cs; retf 0_2_086ADE82
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086AF17B push ss; retf 0_2_086AF182
Source: C:\Users\user\Desktop\Bank Details.exe Code function: 0_2_086AE408 push FFFFFF8Bh; iretd 0_2_086AE40A
Source: Bank Details.exe, y8.cs High entropy of concatenated method names: 'Ad80Bt', 'Mo13Sk', 'Hg0e9G', 'Zf9g4X', 'g2DWi0', 'a0C8Bs', 'Eg7w6S', 'Ld5n8D', 'd1TDq9', 'Yp7m6A'
Source: udo.exe.8.dr, y8.cs High entropy of concatenated method names: 'Ad80Bt', 'Mo13Sk', 'Hg0e9G', 'Zf9g4X', 'g2DWi0', 'a0C8Bs', 'Eg7w6S', 'Ld5n8D', 'd1TDq9', 'Yp7m6A'
Drops PE files
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File created: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe File created: C:\Users\user\Desktop\udo.exe Jump to dropped file
Creates a start menu entry (Start Menu\Programs\Startup)
Source: C:\Users\user\Desktop\Bank Details.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\udo.lnk Jump to behavior
Stores files to the Windows start menu directory
Source: C:\Users\user\Desktop\Bank Details.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\udo.lnk Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run boqXv Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run boqXv Jump to behavior

Hooking and other Techniques for Hiding and Protection
barindex
Hides that the sample has been downloaded from the Internet (zone.identifier)
Source: C:\Users\user\Desktop\Bank Details.exe File opened: C:\Users\user\Desktop\Bank Details.exe\:Zone.Identifier read attributes | delete Jump to behavior
Source: C:\Users\user\Desktop\udo.exe File opened: C:\Users\user\Desktop\udo.exe\:Zone.Identifier read attributes | delete Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe:Zone.Identifier read attributes | delete Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Yara detected AntiVM3
Source: Yara match File source: Process Memory Space: Bank Details.exe PID: 7720, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: udo.exe PID: 3004, type: MEMORYSTR
Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
Uses ping.exe to sleep
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Users\user\Desktop\Bank Details.exe Memory allocated: 1790000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Memory allocated: 3340000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Memory allocated: 17F0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 16E0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 3270000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 1840000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 8310000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 9310000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: 94D0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: A4D0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: A860000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: B860000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: C860000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Memory allocated: 2880000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Memory allocated: 2AE0000 memory reserve | memory write watch Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Memory allocated: 2900000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: C70000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: 2830000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: 2570000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: 1610000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: 3340000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Memory allocated: 3150000 memory reserve | memory write watch Jump to behavior
Contains long sleeps (>= 3 min)
Source: C:\Users\user\Desktop\Bank Details.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Users\user\Desktop\Bank Details.exe Window / User API: threadDelayed 2995 Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Window / User API: threadDelayed 6845 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Window / User API: threadDelayed 2319 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Window / User API: threadDelayed 7513 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Window / User API: threadDelayed 7027 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Window / User API: threadDelayed 2816 Jump to behavior
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\Desktop\Bank Details.exe TID: 8000 Thread sleep time: -29514790517935264s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe TID: 8000 Thread sleep time: -30000s >= -30000s Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE TID: 7156 Thread sleep count: 39 > 30 Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE TID: 7156 Thread sleep time: -39000s >= -30000s Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE TID: 1212 Thread sleep count: 39 > 30 Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE TID: 1212 Thread sleep time: -39000s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\udo.exe TID: 4192 Thread sleep time: -29514790517935264s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\udo.exe TID: 4192 Thread sleep time: -30000s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep count: 38 > 30 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -35048813740048126s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -100000s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4704 Thread sleep count: 7027 > 30 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99891s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4704 Thread sleep count: 2816 > 30 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99766s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99656s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99547s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99438s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99313s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99188s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -99063s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98953s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98844s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98719s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98605s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98493s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98375s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98185s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -98035s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97906s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97794s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97687s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97578s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97469s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97359s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97250s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97141s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -97031s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96922s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96812s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96703s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96594s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96484s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96375s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96266s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96141s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -96016s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95906s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95797s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95687s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95576s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95452s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95337s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95179s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -95063s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94937s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94828s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94719s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94594s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94484s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94375s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94264s >= -30000s Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 4952 Thread sleep time: -94156s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe TID: 7240 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe TID: 7640 Thread sleep time: -922337203685477s >= -30000s Jump to behavior
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\SysWOW64\PING.EXE Last function: Thread delayed
Source: C:\Windows\SysWOW64\PING.EXE Last function: Thread delayed
Source: C:\Users\user\Desktop\Bank Details.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Thread delayed: delay time: 30000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Thread delayed: delay time: 30000 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 100000 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99891 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99766 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99656 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99547 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99438 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99313 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99188 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 99063 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98953 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98844 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98719 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98605 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98493 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98375 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98185 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 98035 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97906 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97794 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97687 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97578 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97469 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97359 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97250 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97141 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 97031 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96922 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96812 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96703 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96594 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96484 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96375 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96266 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96141 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 96016 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95906 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95797 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95687 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95576 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95452 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95337 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95179 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 95063 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94937 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94828 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94719 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94594 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94484 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94375 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94264 Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Thread delayed: delay time: 94156 Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: Bank Details.exe, 00000000.00000002.1710996442.0000000001528000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\W
Source: Bank Details.exe, 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, Bank Details.exe, 00000000.00000002.1715433973.0000000006550000.00000004.08000000.00040000.00000000.sdmp Binary or memory string: VBoxTray
Source: Bank Details.exe, 00000000.00000002.1715954481.000000000671F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}p
Source: InstallUtil.exe, 00000012.00000002.3830643488.0000000005E80000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Bank Details.exe, 00000000.00000002.1715433973.0000000006550000.00000004.08000000.00040000.00000000.sdmp Binary or memory string: 2051979379GSOFTWARE\VMware, Inc.\VMware VGAuth
Source: C:\Users\user\Desktop\Bank Details.exe Process information queried: ProcessInformation Jump to behavior
Enables debug privileges
Source: C:\Users\user\Desktop\Bank Details.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process token adjusted: Debug Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Memory allocated: page read and write | page guard Jump to behavior

HIPS / PFW / Operating System Protection Evasion
barindex
Allocates memory in foreign processes
Source: C:\Users\user\Desktop\udo.exe Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 730000 protect: page execute and read and write Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 protect: page execute and read and write Jump to behavior
Injects a PE file into a foreign processes
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 730000 value starts with: 4D5A Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 value starts with: 4D5A Jump to behavior
Writes to foreign memory regions
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 730000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 732000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 76E000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 770000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 50A008 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 402000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 43E000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 440000 Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 804008 Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\Desktop\Bank Details.exe Process created: C:\Windows\SysWOW64\cmd.exe "cmd" /c ping 127.0.0.1 -n 41 > nul && copy "C:\Users\user\Desktop\Bank Details.exe" "C:\Users\user\Desktop\udo.exe" && ping 127.0.0.1 -n 41 > nul && "C:\Users\user\Desktop\udo.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\PING.EXE ping 127.0.0.1 -n 41 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Users\user\Desktop\udo.exe "C:\Users\user\Desktop\udo.exe" Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Users\user\Desktop\Bank Details.exe VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Queries volume information: C:\Users\user\Desktop\udo.exe VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\udo.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Queries volume information: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe Queries volume information: C:\Users\user\AppData\Roaming\boqXv\boqXv.exe VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\Bank Details.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior

Stealing of Sensitive Information
barindex
Yara detected AgentTesla
Source: Yara match File source: dump.pcap, type: PCAP
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 17.2.InstallUtil.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.1713067974.0000000004702000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000011.00000002.2877661003.0000000000732000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002B32000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000045BB000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002B3A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000042D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: Bank Details.exe PID: 7720, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: udo.exe PID: 3004, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 6896, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 4120, type: MEMORYSTR
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions Jump to behavior
Tries to harvest and steal browser information (history, passwords, etc)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data Jump to behavior
Tries to harvest and steal ftp login credentials
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\FTP Navigator\Ftplist.txt Jump to behavior
Tries to steal Mail credentials (via file / registry access)
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities Jump to behavior
Yara detected Credential Stealer
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 17.2.InstallUtil.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.1713067974.0000000004702000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000011.00000002.2877661003.0000000000732000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000045BB000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000042D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: Bank Details.exe PID: 7720, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: udo.exe PID: 3004, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 6896, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 4120, type: MEMORYSTR

Remote Access Functionality
barindex
Yara detected AgentTesla
Source: Yara match File source: dump.pcap, type: PCAP
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 17.2.InstallUtil.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.44b8b92.5.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.45f6f20.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43dcee2.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.468bd72.1.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.47020c0.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.43a1d22.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 16.2.udo.exe.4366b52.0.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.447d9d2.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.45da998.4.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.Bank Details.exe.4442802.3.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.1713067974.0000000004702000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000011.00000002.2877661003.0000000000732000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002B32000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000045BB000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002B3A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004407000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000010.00000002.3840250798.00000000042D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000012.00000002.3823957553.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.1713067974.0000000004529000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: Bank Details.exe PID: 7720, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: udo.exe PID: 3004, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 6896, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: InstallUtil.exe PID: 4120, type: MEMORYSTR
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1501091 Sample: Bank Details.exe Startdate: 29/08/2024 Architecture: WINDOWS Score: 100 50 mail.azmaplast.com 2->50 60 Suricata IDS alerts for network traffic 2->60 62 Found malware configuration 2->62 64 Malicious sample detected (through community Yara rule) 2->64 66 8 other signatures 2->66 9 Bank Details.exe 5 2->9         started        13 boqXv.exe 4 2->13         started        15 boqXv.exe 3 2->15         started        signatures3 process4 file5 48 C:\Users\user\...\Bank Details.exe.log, ASCII 9->48 dropped 86 Hides that the sample has been downloaded from the Internet (zone.identifier) 9->86 17 cmd.exe 3 9->17         started        21 conhost.exe 13->21         started        23 conhost.exe 15->23         started        signatures6 process7 file8 42 C:\Users\user\Desktop\udo.exe, PE32 17->42 dropped 44 C:\Users\user\...\udo.exe:Zone.Identifier, ASCII 17->44 dropped 56 Uses ping.exe to sleep 17->56 58 Uses ping.exe to check the status of other devices and networks 17->58 25 udo.exe 2 17->25         started        28 PING.EXE 1 17->28         started        31 conhost.exe 17->31         started        33 PING.EXE 1 17->33         started        signatures9 process10 dnsIp11 78 Multi AV Scanner detection for dropped file 25->78 80 Machine Learning detection for dropped file 25->80 82 Writes to foreign memory regions 25->82 84 3 other signatures 25->84 35 InstallUtil.exe 1 4 25->35         started        40 InstallUtil.exe 25->40         started        54 127.0.0.1 unknown unknown 28->54 signatures12 process13 dnsIp14 52 mail.azmaplast.com 193.141.65.39, 49722, 587 KPNNL Iran (ISLAMIC Republic Of) 35->52 46 C:\Users\user\AppData\Roaming\...\boqXv.exe, PE32 35->46 dropped 68 Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc) 35->68 70 Tries to steal Mail credentials (via file / registry access) 35->70 72 Tries to harvest and steal ftp login credentials 35->72 76 2 other signatures 35->76 74 Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines) 40->74 file15 signatures16
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
193.141.65.39
 mail.azmaplast.com Iran (ISLAMIC Republic Of)
286 KPNNL true

Private

IP
127.0.0.1

Contacted Domains

Name IP Active
mail.azmaplast.com 193.141.65.39 true