MalwareSourceCode/MSIL/Trojan/Win32/P/Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba/eh.cs
2022-08-18 06:28:56 -05:00

45 lines
1.7 KiB
C#

// Decompiled with JetBrains decompiler
// Type: eh
// Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85
// MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe
using System;
using System.Runtime.InteropServices;
public static class eh
{
public static void b(string A_0) => eh.a("DllRegisterServer", A_0);
public static void a(string A_0) => eh.a("DllUnregisterServer", A_0);
public static void a(string A_0, string A_1)
{
IntPtr A_0_1 = IntPtr.Zero;
try
{
A_0_1 = eh.LoadLibrary(A_1);
IntPtr ptr = !(A_0_1 == IntPtr.Zero) ? eh.GetProcAddress(A_0_1, A_0) : throw new Exception("Could not load library: " + (object) Marshal.GetLastWin32Error());
if (ptr == IntPtr.Zero)
throw new Exception("Could not find DllRegisterServer entry point: " + (object) Marshal.GetLastWin32Error());
int num = ((eh.a) Marshal.GetDelegateForFunctionPointer(ptr, typeof (eh.a)))();
}
finally
{
if (A_0_1 != IntPtr.Zero && !eh.FreeLibrary(A_0_1))
throw new Exception("Could not FreeLibrary: " + (object) Marshal.GetLastWin32Error());
}
}
[DllImport("kernel32.dll", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern IntPtr GetProcAddress(IntPtr A_0, string A_1);
[DllImport("kernel32.dll", SetLastError = true)]
private static extern IntPtr LoadLibrary(string A_0);
[DllImport("kernel32.dll", SetLastError = true)]
private static extern bool FreeLibrary(IntPtr A_0);
private delegate int a();
}