// Token: 0x0600004B RID: 75 RVA: 0x00004128 File Offset: 0x00002328 public static void Start() { string pathRoot = Path.GetPathRoot(Environment.SystemDirectory); bool started = Constants.Started; if (started) { MessageBox.Show("A session has already been started, please end the previous one!", OnProgramStart.Name, MessageBoxButton.OK, MessageBoxImage.Exclamation); Process.GetCurrentProcess().Kill(); } else { using (StreamReader streamReader = new StreamReader(pathRoot + "Windows\\System32\\drivers\\etc\\hosts")) { string text = streamReader.ReadToEnd(); bool flag = text.Contains("api.auth.gg"); if (flag) { Constants.Breached = true; MessageBox.Show("DNS redirecting has been detected!", OnProgramStart.Name, MessageBoxButton.OK, MessageBoxImage.Hand); Process.GetCurrentProcess().Kill(); } } InfoManager infoManager = new InfoManager(); infoManager.StartListener(); Constants.Token = Guid.NewGuid().ToString(); ServicePointManager.ServerCertificateValidationCallback = (RemoteCertificateValidationCallback)Delegate.Combine(ServicePointManager.ServerCertificateValidationCallback, new RemoteCertificateValidationCallback(Security.PinPublicKey)); Constants.APIENCRYPTKEY = Convert.ToBase64String(Encoding.Default.GetBytes(Security.Session(32))); Constants.APIENCRYPTSALT = Convert.ToBase64String(Encoding.Default.GetBytes(Security.Session(16))); Constants.IV = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(16))); Constants.Key = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(32))); Constants.Started = true; } }
public static void Start() { string drive = Path.GetPathRoot(Environment.SystemDirectory); if (Constants.Started) { MessageBox.Show("THE KEY ALREADY LOGIN "); Process.GetCurrentProcess().Kill(); } else { using (StreamReader sr = new StreamReader($@"{drive}Windows\System32\drivers\etc\hosts")) { string contents = sr.ReadToEnd(); if (contents.Contains("api.auth.gg")) { Constants.Breached = true; MessageBox.Show("DNS redirecting has been detected!"); Process.GetCurrentProcess().Kill(); } } InfoManager infoManager = new InfoManager(); infoManager.StartListener(); Constants.Token = Guid.NewGuid().ToString(); ServicePointManager.ServerCertificateValidationCallback += PinPublicKey; Constants.APIENCRYPTKEY = Convert.ToBase64String(Encoding.Default.GetBytes(Session(32))); Constants.APIENCRYPTSALT = Convert.ToBase64String(Encoding.Default.GetBytes(Session(16))); Constants.IV = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(16))); Constants.Key = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(32))); Constants.Started = true; } }
public static void Start() { if (Constants.Started) { MessageBox.Show("A session has already been started, please end the previous one!", OnProgramStart.Name, MessageBoxButton.OK, MessageBoxImage.Warning); Process.GetCurrentProcess().Kill(); } else { using (StreamReader sr = new StreamReader(@"C:\Windows\System32\drivers\etc\hosts")) { string contents = sr.ReadToEnd(); if (contents.Contains("api.auth.gg")) { Constants.Breached = true; MessageBox.Show("DNS redirecting has been detected!", OnProgramStart.Name, MessageBoxButton.OK, MessageBoxImage.Error); Process.GetCurrentProcess().Kill(); } } InfoManager infoManager = new InfoManager(); infoManager.StartListener(); Constants.Token = Guid.NewGuid().ToString(); ServicePointManager.ServerCertificateValidationCallback += PinPublicKey; Constants.APIENCRYPTKEY = Convert.ToBase64String(Encoding.Default.GetBytes(Session(32))); Constants.APIENCRYPTSALT = Convert.ToBase64String(Encoding.Default.GetBytes(Session(16))); Constants.IV = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(16))); Constants.Key = Convert.ToBase64String(Encoding.Default.GetBytes(Constants.RandomString(32))); Constants.Started = true; } }