MalwareSourceCode/MSIL/Trojan/Win32/B/Trojan.Win32.Bublik.elhu-ed0d569ec8fd2e2d6812dba8d62238da6ea0bd69bdb94d8701830057b4b02ac4/c0101fd8803cfd89ecc47c2ee5ea3536d.cs

// Decompiled with JetBrains decompiler
// Type: A.c0101fd8803cfd89ecc47c2ee5ea3536d
// Assembly: Club, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: A9E8E336-37BF-4AEB-A0AA-C09A4AE1EC93
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Bublik.elhu-ed0d569ec8fd2e2d6812dba8d62238da6ea0bd69bdb94d8701830057b4b02ac4.exe

using System;
using System.Reflection;
using System.Text;

namespace A
{
  internal class c0101fd8803cfd89ecc47c2ee5ea3536d
  {
    internal static readonly byte[] c112400f52e4f1731c90e00a5d01561a1;

    static c0101fd8803cfd89ecc47c2ee5ea3536d()
    {
      if (c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1 != null)
        return;
label_1:
      switch (6)
      {
        case 0:
          goto label_1;
        default:
          if (false)
          {
            // ISSUE: method reference
            RuntimeMethodHandle runtimeMethodHandle = __methodref (c0101fd8803cfd89ecc47c2ee5ea3536d.\u002Ecctor);
          }
          Assembly executingAssembly = Assembly.GetExecutingAssembly();
          c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1 = c5269112b03e601219f1714817a27b79a.c09b1f452b50c37ba72a9d599e693a36c(executingAssembly.GetManifestResourceStream(executingAssembly.GetName().Name + executingAssembly.GetName().Name));
          break;
      }
    }

    internal static string c63a0ab0f5643f828f13c6bbd6a2b539a(int c6fa5d0055fdf0336425be3f2919ce835)
    {
      int count;
      if (((int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835] & 128) == 0)
      {
label_1:
        switch (1)
        {
          case 0:
            goto label_1;
          default:
            if (false)
            {
              // ISSUE: method reference
              RuntimeMethodHandle runtimeMethodHandle = __methodref (c0101fd8803cfd89ecc47c2ee5ea3536d.c63a0ab0f5643f828f13c6bbd6a2b539a);
            }
            count = (int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835];
            ++c6fa5d0055fdf0336425be3f2919ce835;
            break;
        }
      }
      else if (((int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835] & 64) == 0)
      {
label_6:
        switch (2)
        {
          case 0:
            goto label_6;
          default:
            count = ((int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835] & -129) << 8 | (int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835 + 1];
            c6fa5d0055fdf0336425be3f2919ce835 += 2;
            break;
        }
      }
      else
      {
        count = ((int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835] & -193) << 24 | (int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835 + 1] << 16 | (int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835 + 2] << 8 | (int) c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1[c6fa5d0055fdf0336425be3f2919ce835 + 3];
        c6fa5d0055fdf0336425be3f2919ce835 += 4;
      }
      if (count >= 1)
        return string.Intern(Encoding.Unicode.GetString(c0101fd8803cfd89ecc47c2ee5ea3536d.c112400f52e4f1731c90e00a5d01561a1, c6fa5d0055fdf0336425be3f2919ce835, count));
label_10:
      switch (7)
      {
        case 0:
          goto label_10;
        default:
          return string.Empty;
      }
    }
  }
}