mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-20 18:36:10 +00:00
f2ac1ece55
add
45 lines
1.7 KiB
C#
45 lines
1.7 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: eh
|
|
// Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85
|
|
// MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe
|
|
|
|
using System;
|
|
using System.Runtime.InteropServices;
|
|
|
|
public static class eh
|
|
{
|
|
public static void b(string A_0) => eh.a("DllRegisterServer", A_0);
|
|
|
|
public static void a(string A_0) => eh.a("DllUnregisterServer", A_0);
|
|
|
|
public static void a(string A_0, string A_1)
|
|
{
|
|
IntPtr A_0_1 = IntPtr.Zero;
|
|
try
|
|
{
|
|
A_0_1 = eh.LoadLibrary(A_1);
|
|
IntPtr ptr = !(A_0_1 == IntPtr.Zero) ? eh.GetProcAddress(A_0_1, A_0) : throw new Exception("Could not load library: " + (object) Marshal.GetLastWin32Error());
|
|
if (ptr == IntPtr.Zero)
|
|
throw new Exception("Could not find DllRegisterServer entry point: " + (object) Marshal.GetLastWin32Error());
|
|
int num = ((eh.a) Marshal.GetDelegateForFunctionPointer(ptr, typeof (eh.a)))();
|
|
}
|
|
finally
|
|
{
|
|
if (A_0_1 != IntPtr.Zero && !eh.FreeLibrary(A_0_1))
|
|
throw new Exception("Could not FreeLibrary: " + (object) Marshal.GetLastWin32Error());
|
|
}
|
|
}
|
|
|
|
[DllImport("kernel32.dll", CharSet = CharSet.Ansi, SetLastError = true)]
|
|
private static extern IntPtr GetProcAddress(IntPtr A_0, string A_1);
|
|
|
|
[DllImport("kernel32.dll", SetLastError = true)]
|
|
private static extern IntPtr LoadLibrary(string A_0);
|
|
|
|
[DllImport("kernel32.dll", SetLastError = true)]
|
|
private static extern bool FreeLibrary(IntPtr A_0);
|
|
|
|
private delegate int a();
|
|
}
|