Пример #1
0
    public static bool smethod_1(IntPtr intptr_0, Action <int> action_0 = null)
    {
        List <IntPtr> list = new GClass928(intptr_0).method_0();
        uint          num;

        GClass927.GetWindowThreadProcessId(intptr_0, out num);
        Process processById = Process.GetProcessById((int)num);

        list.Reverse();
        List <uint> list2 = list.Select(new Func <IntPtr, uint>(GClass926.< > c.< > c_0.method_0)).ToList <uint>();

        list2.Add(num);
        if (processById.ProcessName.StartsWith("chrome"))
        {
            list2 = Process.GetProcessesByName("chrome").Select(new Func <Process, uint>(GClass926.< > c.< > c_0.method_1)).ToList <uint>();
            List <uint> list3 = new List <uint>();
            foreach (uint num2 in list2)
            {
                string text = GClass927.smethod_3(num2);
                if (text != null && text.Contains("flash"))
                {
                    list3.Add(num2);
                    Debug.WriteLine(string.Format("Found chrome flash player @{0:X2}", num2));
                }
            }
            list2 = list3;
        }
        list2 = list2.GroupBy(new Func <uint, uint>(GClass926.< > c.< > c_0.method_2)).Select(new Func <IGrouping <uint, uint>, uint>(GClass926.< > c.< > c_0.method_3)).ToList <uint>();
        bool flag = false;
        long num3 = 0L;

        foreach (uint int_ in list2)
        {
            GClass925 gclass = new GClass925((int)int_);
            if (!gclass.method_6())
            {
                MessageBox.Show("Your browser is compiled for different architecture. Please use the " + (GClass927.smethod_1() ? "64" : "32") + "-bit version of PErkava.");
                return(false);
            }
            foreach (GClass927.GStruct3 gstruct in gclass.method_4())
            {
                foreach (IntPtr intptr_ in GClass926.smethod_0(gclass, gstruct, Encoding.UTF8.GetBytes("cc0306d7b0f0c671000bd655485744417a868b29dd77619e42b51f70c28e67d0bbc2caf9dd364cb0419217bcfba86c33735b543fae2b666059b59c631955962afa1f97e0f49f92bf1a5463ae89c751a661e0485c2ec6e011634abfb4a4142157")))
                {
                    flag = true;
                    gclass.method_7(intptr_, Encoding.UTF8.GetBytes("ef09b1bcec67808eeff374b1b51fb155edaac4fcc7a78ed75d5848d6e9eaabee41dec018bb5482d01acea8ce13688bfe33076dde70f06febb80cf3b7327953fb32c08889b815587ded2cdd056d0ec9965b894751848766c27fdee32c707b6fc9"));
                }
                num3 += gstruct.long_0;
                if (action_0 != null)
                {
                    action_0((int)(num3 / 1024L / 1024L));
                }
            }
            if (flag)
            {
                PErkava.hashSet_0.Add((uint)gclass.method_0());
            }
        }
        return(flag);
    }
Пример #2
0
    public List <IntPtr> method_0()
    {
        List <IntPtr> list    = new List <IntPtr>();
        GCHandle      value   = GCHandle.Alloc(list);
        IntPtr        intptr_ = GCHandle.ToIntPtr(value);

        try
        {
            GClass928.Delegate0 delegate0_ = new GClass928.Delegate0(this.method_1);
            GClass928.EnumChildWindows(this.intptr_0, delegate0_, intptr_);
        }
        finally
        {
            value.Free();
        }
        return(list);
    }