mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 18:06:10 +00:00
f2ac1ece55
add
59 lines
2.1 KiB
C#
59 lines
2.1 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: Microsoft.InfoCards.GenerateDerivedKeyRequest
|
|
// Assembly: infocard, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
|
|
// MVID: 516D8B44-4448-4D2C-8B8E-FFBB3FFE472B
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Expiro.w-69bb73081eac86b8cf86f45e33515d0095855636967076e2b593d7a30cd80a07.exe
|
|
|
|
using System;
|
|
using System.Diagnostics;
|
|
using System.IO;
|
|
using System.Security.Principal;
|
|
using System.Text;
|
|
|
|
namespace Microsoft.InfoCards
|
|
{
|
|
internal class GenerateDerivedKeyRequest : ClientRequest
|
|
{
|
|
private int m_sessionId;
|
|
private byte[] m_label;
|
|
private byte[] m_nonce;
|
|
private int m_derivedKeyLength;
|
|
private int m_offset;
|
|
private string m_derivationAlgUri;
|
|
private byte[] m_key;
|
|
|
|
public GenerateDerivedKeyRequest(
|
|
Process callingProcess,
|
|
WindowsIdentity callingIdentity,
|
|
IntPtr rpcHandle,
|
|
Stream inArgs,
|
|
Stream outArgs)
|
|
: base(callingProcess, callingIdentity, rpcHandle, inArgs, outArgs)
|
|
{
|
|
this.m_key = (byte[]) null;
|
|
}
|
|
|
|
protected override void OnMarshalInArgs()
|
|
{
|
|
BinaryReader reader = (BinaryReader) new InfoCardBinaryReader(this.InArgs, Encoding.Unicode);
|
|
this.m_sessionId = reader.ReadInt32();
|
|
int count1 = reader.ReadInt32();
|
|
this.m_label = reader.ReadBytes(count1);
|
|
int count2 = reader.ReadInt32();
|
|
this.m_nonce = reader.ReadBytes(count2);
|
|
this.m_derivedKeyLength = reader.ReadInt32();
|
|
this.m_offset = reader.ReadInt32();
|
|
this.m_derivationAlgUri = Utility.DeserializeString(reader);
|
|
}
|
|
|
|
protected override void OnProcess() => this.m_key = ((SymmetricCryptoSession) CryptoSession.Find(this.m_sessionId, this.CallerPid, this.RequestorIdentity.User)).GenerateDerivedKey(this.m_derivationAlgUri, this.m_label, this.m_nonce, this.m_derivedKeyLength, this.m_offset);
|
|
|
|
protected override void OnMarshalOutArgs()
|
|
{
|
|
BinaryWriter binaryWriter = new BinaryWriter(this.OutArgs, Encoding.Unicode);
|
|
binaryWriter.Write(this.m_key.Length);
|
|
binaryWriter.Write(this.m_key);
|
|
}
|
|
}
|
|
}
|