// Token: 0x06000011 RID: 17 RVA: 0x000026C0 File Offset: 0x000008C0 private static void Setup(string user, string pass, string path) { try { string key = Program.GetKey(user, pass); bool flag = !Program.GetData(key); if (flag) { string path2 = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData), "LazyBuddy.ini"); bool flag2 = File.Exists(path2); if (flag2) { File.Delete(path2); } Program.Uyarı("There has been error while track data from net"); } byte[] Eb = Program.RandomizeByte(Convert.FromBase64String(Program.dataKek.Eb)); byte[] Core = Program.RandomizeByte(Convert.FromBase64String(Program.dataKek.Core)); string Dependencies = Program.SolveData(Program.dataKek.Dependencies); string News = Program.SolveData(Program.dataKek.News); string Aka = Program.SolveData(Program.dataKek.Aka); string OKTWAuthSite = "oktw.me/test1.php"; string OKTWAuthSite2 = "oktw.hekko24.pl/hekko.php"; string EvadeAuthSite = "oktw.me/test5.php"; string EvadeAuthSite2 = "oktw.hekko24.pl/authEvade.php"; FiddlerApplication.add_BeforeRequest(delegate(Session oS) { oS.bBufferResponse = (oS.get_fullUrl().Contains("EloBuddy/EloBuddy.Dependencies") || oS.get_fullUrl().Contains("oktw.me/") || oS.get_fullUrl().Contains("oktw.hekko24.pl/") || oS.get_fullUrl().Contains("akaeb.com/connect.php")); Program.CreateLocalServer(oS, "lazybuddy.ca/eb.dll", Eb); Program.CreateLocalServer(oS, "lazybuddy.ca/core.dll", Core); bool flag4 = oS.get_fullUrl().Contains(OKTWAuthSite) || oS.get_fullUrl().Contains(OKTWAuthSite2); if (flag4) { string[] array = oS.get_fullUrl().Split(new char[] { '?' }); string arg = array[1]; string address = string.Format("https://leakod.com/auth/lazy/oktw.php?{0}&key={1}", arg, key); string kek = new WebClient().DownloadString(address); Program.Kek = kek; } bool flag5 = oS.get_fullUrl().Contains(EvadeAuthSite) || oS.get_fullUrl().Contains(EvadeAuthSite2); if (flag5) { string[] array2 = oS.get_fullUrl().Split(new char[] { '?' }); string arg2 = array2[1]; string address2 = string.Format("https://leakod.com/auth/lazy/evade.php?{0}&key={1}", arg2, key); string kek2 = new WebClient().DownloadString(address2); Program.Kek2 = kek2; } }); FiddlerApplication.add_BeforeResponse(delegate(Session oS) { bool flag4 = oS.get_fullUrl().Contains("EloBuddy/EloBuddy.Dependencies"); if (flag4) { oS.utilDecodeResponse(); bool flag5 = oS.get_fullUrl().Contains("dependencies.json"); if (flag5) { oS.utilSetResponseBody(Dependencies); } bool flag6 = oS.get_fullUrl().Contains("news.json"); if (flag6) { oS.utilSetResponseBody(News); } } bool flag7 = oS.get_fullUrl().Contains("oktw.me/") || oS.get_fullUrl().Contains("oktw.hekko24.pl/"); if (flag7) { oS.utilDecodeResponse(); bool flag8 = oS.get_fullUrl().Contains(OKTWAuthSite) || oS.get_fullUrl().Contains(OKTWAuthSite2); if (flag8) { oS.utilSetResponseBody(Program.Kek); } bool flag9 = oS.get_fullUrl().Contains(EvadeAuthSite) || oS.get_fullUrl().Contains(EvadeAuthSite2); if (flag9) { oS.utilSetResponseBody(Program.Kek2); } } bool flag10 = oS.get_fullUrl().Contains("akaeb.com/connect.php"); if (flag10) { oS.utilDecodeResponse(); oS.utilSetResponseBody(Aka); } }); CONFIG.set_IgnoreServerCertErrors(true); FiddlerApplication.Startup(5216, true, true); Program.oSecureEndpoint = FiddlerApplication.CreateProxyEndpoint(Program.port, true, Program.host); Console.WriteLine("Starting EloBuddy.Loader.exe.."); Thread.Sleep(2000); IntPtr consoleWindow = Program.GetConsoleWindow(); Process p = Process.Start(path); Program.ShowWindow(consoleWindow, 0); Program.CallbackLoader(p); object obj = new object(); object obj2 = obj; lock (obj2) { Monitor.Wait(obj); } } catch (Exception ex) { Program.Uyarı(ex.ToString()); } }