MalwareSourceCode/MSIL/Virus/Win32/E/Virus.Win32.Expiro.w-67b630ead60119692b9abbdfd8717c96904ef041127c2cae033c86b718eaa61e/Microsoft/InfoCards/InfoCardService.cs

// Decompiled with JetBrains decompiler
// Type: Microsoft.InfoCards.InfoCardService
// Assembly: infocard, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
// MVID: ADE0A079-11DB-4A46-8BDE-D2A592CA8DEA
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Expiro.w-67b630ead60119692b9abbdfd8717c96904ef041127c2cae033c86b718eaa61e.exe

using Microsoft.InfoCards.Diagnostics;
using System;
using System.ComponentModel;
using System.Net;
using System.Net.Security;
using System.Runtime.InteropServices;
using System.Security.Principal;
using System.ServiceProcess;

namespace Microsoft.InfoCards
{
  internal class InfoCardService : ServiceBase
  {
    public const int WindowsVistaMajorVersion = 6;
    public const string FullServiceName = "idsvc";
    private RpcCallbacks m_rpcCallbacks;
    public static LifeTimeMonitor LifeTimeMonitor = (LifeTimeMonitor) null;

    public static event EventHandler Stopping;

    public InfoCardService()
    {
      bool flag1 = 0 != NativeMethods.GetSystemMetrics(86);
      bool flag2 = Environment.OSVersion.Version.Major < 6;
      if (NativeMcppMethods.AdjustPrivilegesWrapper(flag1 && flag2) != 0U)
        InfoCardService.Crash((Exception) new Win32Exception());
      try
      {
        NativeMcppMethods.AdjustServiceProcessSecurity();
      }
      catch (Win32Exception ex)
      {
        InfoCardService.Crash((Exception) ex);
      }
      this.ServiceName = "idsvc";
      this.CanStop = true;
      this.CanShutdown = true;
      this.CanPauseAndContinue = false;
      this.CanHandleSessionChangeEvent = true;
      this.CanHandlePowerEvent = false;
      this.AutoLog = true;
      this.m_rpcCallbacks.uiAgentRequestAuthorize = new RpcAuthorizeCallback(UIAgentRequest.Authorize);
      this.m_rpcCallbacks.uiAgentRequestBindToService = new RpcUIAgentBindToServiceCallback(UIAgentRequest.BindToService);
      this.m_rpcCallbacks.clientRequestAuthorize = new RpcAuthorizeCallback(ClientRequest.Authorize);
      this.m_rpcCallbacks.clientRequestBindToService = new RpcClientBindToServiceCallback(ClientUIRequest.BindToService);
      this.m_rpcCallbacks.requestFactoryProcessNewRequest = new RpcProcessNewRequestCallback(RequestFactory.ProcessNewRequest);
      this.m_rpcCallbacks.allocMem = new RpcAllocMemCallback(Marshal.AllocHGlobal);
      this.m_rpcCallbacks.freeMem = new RpcFreeMemCallback(Marshal.FreeHGlobal);
      this.m_rpcCallbacks.rundownClientContext = new RpcRundownClientContextHandle(ClientUIRequest.RemoveAndDisposeContextMapping);
      InfoCardService.LifeTimeMonitor = new LifeTimeMonitor();
      ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(InfoCardX509Validator.ValidateChainOrPeerCallback);
    }

    protected override void Dispose(bool disposing) => base.Dispose(disposing);

    protected override void OnStart(string[] args)
    {
      base.OnStart(args);
      AppDomain.CurrentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal);
      using (HGlobalSafeHandle hglobalSafeHandle = HGlobalSafeHandle.Construct(Marshal.SizeOf((object) this.m_rpcCallbacks)))
      {
        Marshal.StructureToPtr((object) this.m_rpcCallbacks, hglobalSafeHandle.DangerousGetHandle(), false);
        uint error = NativeMcppMethods.InfoCardStartRpcServerWrapper(InfoCardUIAgent.UiAgentFullPath, hglobalSafeHandle.DangerousGetHandle());
        if (error != 0U)
          throw InfoCardTrace.ThrowHelperError((Exception) new Win32Exception((int) error));
      }
    }

    protected override void OnStop()
    {
      try
      {
        InfoCardUIAgent.DoShutdown();
        int num = (int) NativeMcppMethods.InfoCardStopRpcServerWrapper();
        this.OnStopping();
      }
      catch (Exception ex)
      {
        InfoCardTrace.TraceAndLogException(ex);
      }
      finally
      {
        base.OnStop();
      }
    }

    protected virtual void OnStopping()
    {
      if (InfoCardService.Stopping == null)
        return;
      InfoCardService.Stopping((object) this, new EventArgs());
    }

    protected override void OnSessionChange(SessionChangeDescription changeDescription)
    {
      if (SessionChangeReason.SessionLogoff != changeDescription.Reason)
        return;
      InfoCardUIAgent.OnLogout((uint) changeDescription.SessionId);
    }

    public static void Crash() => InfoCardService.Crash((Exception) null);

    public static void Crash(Exception e) => InfoCardTrace.FailFast(e.Message);
  }
}