// Token: 0x0600008D RID: 141 RVA: 0x00006478 File Offset: 0x00004678 public static void smethod_3() { string pathRoot = Path.GetPathRoot(Environment.SystemDirectory); if (Class6.bool_1) { MessageBox.Show("A session has already been started, please end the previous one!", Class10.string_3, MessageBoxButton.OK, MessageBoxImage.Exclamation); Process.GetCurrentProcess().Kill(); } else { using (StreamReader streamReader = new StreamReader(pathRoot + "Windows\\System32\\drivers\\etc\\hosts")) { string text = streamReader.ReadToEnd(); if (text.Contains("api.auth.gg")) { Class6.bool_0 = true; MessageBox.Show("DNS redirecting has been detected!", Class10.string_3, MessageBoxButton.OK, MessageBoxImage.Hand); Process.GetCurrentProcess().Kill(); } } Class17 @class = new Class17(); @class.method_0(); Class6.Token = Guid.NewGuid().ToString(); ServicePointManager.ServerCertificateValidationCallback = (RemoteCertificateValidationCallback)Delegate.Combine(ServicePointManager.ServerCertificateValidationCallback, new RemoteCertificateValidationCallback(Class12.smethod_5)); Class6.APIENCRYPTKEY = Convert.ToBase64String(Encoding.Default.GetBytes("qw5y88Ewkw5cS2Qfqe1n5Lc4o0MjYjaa")); Class6.APIENCRYPTSALT = Convert.ToBase64String(Encoding.Default.GetBytes("qw5y88Ewkw5cS2Qf")); Class6.string_4 = Convert.ToBase64String(Encoding.Default.GetBytes("o00WidLX4fpa9UjS")); Class6.string_5 = Convert.ToBase64String(Encoding.Default.GetBytes("yalxYjXpveigzvIatmvC5wMF7EAXrtZI")); Class6.bool_1 = true; } }
// Token: 0x060000AD RID: 173 RVA: 0x00006C74 File Offset: 0x00004E74 private string method_3() { string arg = Class17.smethod_0().ToString(); string pattern = string.Format("({0} [\\W]*) ([a-z0-9-]*)", arg); Regex regex = new Regex(pattern); Match match = regex.Match(this.method_2()); return(match.Groups[2].ToString()); }