> 文章列表 > 【某软件消息的加解密分析】

【某软件消息的加解密分析】

【某软件消息的加解密分析】

首先来熟悉一下ida的使用。

首先找到打开ida,点击"debugger"-> “run” -> “local windows debugger"后,从Application中找到程序并点击"ok”,程序停在入口处。
【某软件消息的加解密分析】

这时在右边的窗口处,输入ws2查找过滤模块ws2_32.dll:
【某软件消息的加解密分析】
鼠标双击选中ws2_32.dll后,可以在Module窗口中双击函数,这时主窗口显示的就是recv的反汇编代码了。
【某软件消息的加解密分析】

此时可以通过鼠标点击或者菜单下断点调试了。

同时,开启wireshark抓包,可以看到登录过程产生如下数据包:
【某软件消息的加解密分析】

通过对recv的反复调试,在某种执念驱使下,多次低水平重复和一点一点的推进,中间经过了多次的调试和放松,最终确定了发现数据包的处理主要在一下函数中:

这里要说明2点:

  1. 因为程序是动态加载的,所以地址并不一定跟本文的图中相同。
  2. 本文是叙述性的,有很多片段是不可描述的细节总结,不可能还原全过程的所有细节。读万卷书行万里路,只看文字是无法描绘所有场景的,某些事只能在行动中定义。
int __thiscall sub_9E3A40(int this, int a2)
{volatile signed __int32 *v3; // ebxvolatile signed __int32 *v4; // ebx_DWORD *v5; // eaxint v6; // ebxint v7; // ecxint v8; // eaxint v9; // eax_DWORD *v10; // eaxint result; // eaxint v12; // edxint Error; // eaxint v14; // ediLONG v15; // eaxint v16; // ecxunsigned int v17; // [esp-4h] [ebp-20090h]char v18; // [esp+0h] [ebp-2008Ch] BYREFint v19; // [esp+14h] [ebp-20078h]int pExceptionObject[4]; // [esp+28h] [ebp-20064h] BYREFint v21; // [esp+38h] [ebp-20054h] BYREFchar *v22; // [esp+3Ch] [ebp-20050h] BYREF_DWORD v23[4]; // [esp+40h] [ebp-2004Ch] BYREF_DWORD *v24; // [esp+50h] [ebp-2003Ch]char v25[8]; // [esp+58h] [ebp-20034h] BYREFLPVOID lpMem[3]; // [esp+60h] [ebp-2002Ch] BYREFint v27; // [esp+6Ch] [ebp-20020h] BYREFint v28; // [esp+70h] [ebp-2001Ch]unsigned int v29; // [esp+74h] [ebp-20018h]char v30[131072]; // [esp+78h] [ebp-20014h] BYREFchar *v31; // [esp+2007Ch] [ebp-10h]int v32; // [esp+20088h] [ebp-4h]v31 = &v18;v3 = *(volatile signed __int32 **)(this + 336);*(_DWORD *)(this + 336) = 0;v22 = (char *)this;*(_DWORD *)(this + 332) = 0;if ( v3 ){if ( !_InterlockedExchangeAdd(v3 + 1, 0xFFFFFFFF) ){(**(void (__thiscall ***)(volatile signed __int32 *))v3)(v3);if ( !_InterlockedExchangeAdd(v3 + 2, 0xFFFFFFFF) )(*(void (__thiscall **)(volatile signed __int32 *))(*v3 + 4))(v3);}}v4 = *(volatile signed __int32 **)(this + 348);*(_DWORD *)(this + 348) = 0;*(_DWORD *)(this + 344) = 0;if ( v4 ){if ( !_InterlockedExchangeAdd(v4 + 1, 0xFFFFFFFF) ){(**(void (__thiscall ***)(volatile signed __int32 *))v4)(v4);if ( !_InterlockedExchangeAdd(v4 + 2, 0xFFFFFFFF) )(*(void (__thiscall **)(volatile signed __int32 *))(*v4 + 4))(v4);}}v21 = 1;v29 = this - 12;v29 = sub_9E5210(sub_9E4410, 0, &v21);v32 = 1;v24 = 0;v5 = operator new(0x28u);v6 = (int)v5;if ( !v5 )unknown_libname_325();v17 = v29;*v5 = std::_Func_impl<std::_Callable_obj<nbase::WeakCallback<std::_Bind<1,void,std::_Pmf_wrap<void (__thiscall nbiz::LinkSocket::*)(int),void,nbiz::LinkSocket,int>,nbiz::LinkSocket * const &,int &>>,0>,std::allocator<std::_Func_class<void,>>,void,>::`vftable';sub_57E2A0(v17);v24 = (_DWORD *)v6;LOBYTE(v32) = 3;v7 = v19;if ( v19 && !_InterlockedDecrement((volatile signed __int32 *)(v19 + 8)) )(*(void (__thiscall **)(int))(*(_DWORD *)v7 + 4))(v7);v8 = sub_52C600(v25, v23);LOBYTE(v32) = 4;sub_52C680(v8);LOBYTE(v32) = 3;sub_52AFC0(v25);v9 = *(_DWORD *)(sub_936F30() + 176);if ( v9 >= 15 ){if ( v9 > 240 )v9 = 240;}else{v9 = 15;}v10 = (_DWORD *)sub_54DA90(v9, v9 >> 31);sub_8EBCB0(*v10, v10[1]);LOBYTE(v32) = 5;result = (*(int (__thiscall **)(int, char *, int, _DWORD))(*(_DWORD *)(this + 64) + 20))(this + 64, v30, 0x20000, 0);v12 = result;if ( result == -1 ){result = sub_9E2950();v12 = result;}v32 = 3;if ( v12 == -1 ){Error = WSAGetLastError();v14 = Error;if ( Error == 10035 || Error == 10036 )return sub_52F090(v23);v15 = sub_8EB5B0();if ( (unsigned int)(*(int (__thiscall **)(LONG))(*(_DWORD *)v15 + 16))(v15) >= 2 ){v27 = 2;v28 = 37;v29 = (unsigned int)"E:\\\\14_svn_branch\\\\src\\\\biz/network/socket_wrapper.h";sub_8EB730(&v27, "[nbiz::WouldBlock] err_code:%d", v14);}result = sub_9E3770(this - 12);v16 = *(_DWORD *)(this + 4);if ( v16 )result = (*(int (__thiscall **)(int, int))(*(_DWORD *)v16 + 4))(v16, 1);}else if ( v12 > 0 ){if ( !*(_BYTE *)(this + 24) ){sub_8EA440(2, "core\\\\link_socket_asyncsockex.cpp", 286, "Receive Message While Not Encrypted", v18);v22 = "Receive Message While Not Encrypted";std::exception::exception((std::exception *)pExceptionObject, (const char *const *)&v22);pExceptionObject[0] = (int)&nbase::NException::`vftable';pExceptionObject[3] = 5004;_CxxThrowException(pExceptionObject, (_ThrowInfo *)&_TI3_AVNException_nbase__);}v29 = 15;v28 = 0;LOBYTE(lpMem[0]) = 0;LOBYTE(v32) = 7;(*(void (__thiscall **)(_DWORD, char *, int, LPVOID *))(**(_DWORD **)(this + 8) + 24))(*(_DWORD *)(this + 8),v30,v12,lpMem);sub_55D4C0((_DWORD *)(this + 188), lpMem, 0, 0xFFFFFFFF);LOBYTE(v32) = 3;if ( v29 >= 0x10 )opus_repacketizer_destroy(lpMem[0]);sub_9E4220((_DWORD *)(this - 12));return sub_52F090(v23);}v32 = -1;if ( v24 )return (*(int (__stdcall **)(bool))(*v24 + 16))(v24 != v23);return result;
}

其中的"result = (*(int (__thiscall **)(int, char , int, _DWORD))((_DWORD *)(this + 64) + 20))(this + 64, v30, 0x20000, 0);"即跳转到recv函数中,

而" (*(void (__thiscall )(_DWORD, char *, int, LPVOID *))((_DWORD **)(this + 8) + 24))(
*(_DWORD *)(this + 8),"这一行,即进入以下函数中执行:
【某软件消息的加解密分析】
通过在接收数据的缓冲区地址中设置数据读写断点,发现最终程序经过多次跳转,进入如下函数:

_DWORD *__cdecl sub_7B4CB0(_DWORD *a1, unsigned int a2, _BYTE *a3, _BYTE *a4)
{_DWORD *result; // eaxint v5; // ecxchar v6; // blint v8; // esiint v10; // ecxint v11; // edxint v12; // esiint v13; // ebxint v14; // ecxint v15; // edxint v16; // esiint v17; // ebxint v18; // ecxint v19; // edxint v20; // esiint v21; // ebxint v22; // ecxint v23; // edxint v24; // esiint v25; // ebxint v26; // ecxint v27; // edxint v28; // esiint v29; // ebxint v30; // ecxint v31; // edxint v32; // esiint v33; // ebxint v34; // ecxint v35; // edxint v36; // esiint v37; // ebxint v38; // edxint v39; // ebxint v40; // edxint v41; // ebxbool v42; // zfint v43; // edxint v44; // ebxint v45; // edxint v46; // ebxint v47; // edxint v48; // ebxint v49; // edxint v50; // ebxint v51; // edxint v52; // ebxint v53; // edxint v54; // ebxint v55; // edxint v56; // ebxunsigned int v57; // [esp+14h] [ebp+4h]int v58; // [esp+14h] [ebp+4h]int v59; // [esp+14h] [ebp+4h]int v60; // [esp+14h] [ebp+4h]int v61; // [esp+14h] [ebp+4h]int v62; // [esp+14h] [ebp+4h]int v63; // [esp+14h] [ebp+4h]int v64; // [esp+14h] [ebp+4h]int v65; // [esp+14h] [ebp+4h]result = a1;v5 = *a1;v6 = a2;v8 = a1[1];v57 = a2 >> 3;if ( a2 >> 3 ){do{v10 = (unsigned __int8)(v5 + 1);v11 = result[v10 + 2];v12 = (unsigned __int8)(v11 + v8);v13 = result[v12 + 2];result[v10 + 2] = v13;result[v12 + 2] = v11;*a4 = *a3 ^ LOBYTE(result[(unsigned __int8)(v11 + v13) + 2]);v14 = (unsigned __int8)(v10 + 1);v15 = result[v14 + 2];v16 = (unsigned __int8)(v15 + v12);v17 = result[v16 + 2];result[v14 + 2] = v17;result[v16 + 2] = v15;a4[1] = a3[1] ^ LOBYTE(result[(unsigned __int8)(v15 + v17) + 2]);v18 = (unsigned __int8)(v14 + 1);v19 = result[v18 + 2];v20 = (unsigned __int8)(v19 + v16);v21 = result[v20 + 2];result[v18 + 2] = v21;result[v20 + 2] = v19;a4[2] = a3[2] ^ LOBYTE(result[(unsigned __int8)(v19 + v21) + 2]);v22 = (unsigned __int8)(v18 + 1);v23 = result[v22 + 2];v24 = (unsigned __int8)(v23 + v20);v25 = result[v24 + 2];result[v22 + 2] = v25;result[v24 + 2] = v23;a4[3] = a3[3] ^ LOBYTE(result[(unsigned __int8)(v23 + v25) + 2]);v26 = (unsigned __int8)(v22 + 1);v27 = result[v26 + 2];v28 = (unsigned __int8)(v27 + v24);v29 = result[v28 + 2];result[v26 + 2] = v29;result[v28 + 2] = v27;a4[4] = a3[4] ^ LOBYTE(result[(unsigned __int8)(v27 + v29) + 2]);v30 = (unsigned __int8)(v26 + 1);v31 = result[v30 + 2];v32 = (unsigned __int8)(v31 + v28);v33 = result[v32 + 2];result[v30 + 2] = v33;result[v32 + 2] = v31;v34 = (unsigned __int8)(v30 + 1);a4[5] = a3[5] ^ LOBYTE(result[(unsigned __int8)(v31 + v33) + 2]);v35 = result[v34 + 2];v36 = (unsigned __int8)(v35 + v32);v37 = result[v36 + 2];result[v34 + 2] = v37;result[v36 + 2] = v35;a4[6] = a3[6] ^ LOBYTE(result[(unsigned __int8)(v35 + v37) + 2]);v5 = (unsigned __int8)(v34 + 1);v38 = result[v5 + 2];v8 = (unsigned __int8)(v38 + v36);v39 = result[v8 + 2];result[v5 + 2] = v39;result[v8 + 2] = v38;LOBYTE(v38) = a3[7] ^ LOBYTE(result[(unsigned __int8)(v38 + v39) + 2]);a3 += 8;a4[7] = v38;a4 += 8;--v57;}while ( v57 );v6 = a2;}v58 = v6 & 7;if ( (v6 & 7) != 0 ){v5 = (unsigned __int8)(v5 + 1);v40 = result[v5 + 2];v8 = (unsigned __int8)(v40 + v8);v41 = result[v8 + 2];result[v5 + 2] = v41;result[v8 + 2] = v40;v42 = v58 == 1;v59 = v58 - 1;for ( *a4 = *a3 ^ LOBYTE(result[(unsigned __int8)(v40 + v41) + 2]);!v42;*a4 = *a3 ^ LOBYTE(result[(unsigned __int8)(v55 + v56) + 2]) ){v5 = (unsigned __int8)(v5 + 1);v43 = result[v5 + 2];v8 = (unsigned __int8)(v43 + v8);v44 = result[v8 + 2];result[v5 + 2] = v44;result[v8 + 2] = v43;v42 = v59 == 1;v60 = v59 - 1;a4[1] = a3[1] ^ LOBYTE(result[(unsigned __int8)(v43 + v44) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v45 = result[v5 + 2];v8 = (unsigned __int8)(v45 + v8);v46 = result[v8 + 2];result[v5 + 2] = v46;result[v8 + 2] = v45;v42 = v60 == 1;v61 = v60 - 1;a4[2] = a3[2] ^ LOBYTE(result[(unsigned __int8)(v45 + v46) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v47 = result[v5 + 2];v8 = (unsigned __int8)(v47 + v8);v48 = result[v8 + 2];result[v5 + 2] = v48;result[v8 + 2] = v47;v42 = v61 == 1;v62 = v61 - 1;a4[3] = a3[3] ^ LOBYTE(result[(unsigned __int8)(v47 + v48) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v49 = result[v5 + 2];v8 = (unsigned __int8)(v49 + v8);v50 = result[v8 + 2];result[v5 + 2] = v50;result[v8 + 2] = v49;v42 = v62 == 1;v63 = v62 - 1;a4[4] = a3[4] ^ LOBYTE(result[(unsigned __int8)(v49 + v50) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v51 = result[v5 + 2];v8 = (unsigned __int8)(v51 + v8);v52 = result[v8 + 2];result[v5 + 2] = v52;result[v8 + 2] = v51;v42 = v63 == 1;v64 = v63 - 1;a4[5] = a3[5] ^ LOBYTE(result[(unsigned __int8)(v51 + v52) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v53 = result[v5 + 2];v8 = (unsigned __int8)(v53 + v8);v54 = result[v8 + 2];result[v5 + 2] = v54;result[v8 + 2] = v53;v42 = v64 == 1;v65 = v64 - 1;a4[6] = a3[6] ^ LOBYTE(result[(unsigned __int8)(v53 + v54) + 2]);if ( v42 )break;v5 = (unsigned __int8)(v5 + 1);v55 = result[v5 + 2];v8 = (unsigned __int8)(v55 + v8);v56 = result[v8 + 2];result[v5 + 2] = v56;result[v8 + 2] = v55;v42 = v65 == 1;v59 = v65 - 1;}}result[1] = v8;*result = v5;return result;
}

至此,我猜测加解密函数算法是一个rc4算法,我们知道,rc4函数需要一个初始化密钥,于是在进入加解密函数之前设置断点,我在内存中找到了这个密钥,并手动抄了出来。初始的密钥如下:

const int DecryptKey[260] =
{0x00,0x00,0x34,0x6a,0x81,0xD4,0xEA,0x47,0xBC,0xC1,0x24,0xCA,0x7B,0x19,0x70,0x2F,0x1A,0x2A,0x68,0x62,0xB7,0x4E,0xFB,0x53,0x50,0x04,0x3A,0xD3,0x48,0xDD,0x71,0x4D,0x32,0x77,0x3F,0xEB,0x55,0x02,0x14,0xB6,0x93,0xA1,0xAB,0x03,0x11,0x8F,0xF1,0x57,0xB1,0xEE,0x52,0xB2,0xAC,0x7A,0xAE,0x06,0x86,0xF3,0x82,0xAA,0xBD,0x85,0xF7,0xD9,0x22,0xB0,0x8E,0x8A,0x79,0xF4,0x6C,0xE7,0xA4,0x9F,0xE3,0x96,0xFC,0x7C,0xBA,0x2C,0x4C,0xA3,0x80,0x98,0x65,0x5E,0xE6,0xAF,0xCB,0x58,0x67,0x1C,0x08,0x4F,0x3C,0x44,0xC9,0x6B,0xE4,0x7E,0x1E,0x3D,0xE8,0xA6,0xBB,0x5F,0x6F,0x59,0x97,0x9E,0xB4,0x30,0x2D,0x2B,0xF2,0x6E,0x0A,0xA7,0xE9,0x5D,0x29,0x5C,0x33,0xEF,0x91,0xE5,0x39,0x36,0x17,0xDF,0x31,0x45,0x8D,0x5B,0x05,0xF0,0xC8,0x09,0xA5,0xF9,0x84,0xC7,0x1B,0xB5,0xC6,0x9B,0xE2,0xC5,0x89,0xE0,0x9A,0x27,0xC4,0x40,0x0D,0x20,0x66,0x7F,0xA9,0xC3,0x07,0xB3,0x2E,0x49,0xFA,0xD5,0xAD,0xE1,0x83,0x6D,0x0E,0x43,0x28,0x78,0x42,0x64,0x8B,0x16,0x74,0x88,0xD8,0x1F,0xA0,0x3E,0x63,0x60,0xFD,0xA8,0xD7,0x76,0x72,0x18,0xDC,0x56,0xFE,0xD0,0x90,0xD1,0x9D,0xDB,0x94,0x8C,0xDA,0xDE,0xBE,0xCD,0xCF,0xC2,0x1D,0x51,0xCE,0xBF,0x73,0x35,0x00,0x92,0x7D,0xC0,0x12,0x69,0x26,0x38,0x4B,0xFF,0xED,0x9C,0x13,0xF5,0x15,0xD2,0xEC,0xF8,0xB9,0x46,0xA2,0x41,0xF6,0x99,0x75,0x95,0x87,0x23,0x10,0x61,0x25,0xB8,0x37,0xCC,0x0C,0xD6,0x01,0x0F,0x21,0x4A,0x54,0x3B,0x5A,0x0B,0x00,0x00
};

现在还有一个问题,因为我不知道这个初始化密钥来自何处,所以就面临一个问题,这个密钥是多变的吗?是否是跟客户指纹相关的动态密钥呢?如果是的话,那么这个密钥将毫无用处。于是我注册了两个账号,最终经过验证,发现该密钥是都一样!

忘了说一声,该软件的名字叫做某网某信,版本号4.4.1280。
【某软件消息的加解密分析】

所有测试代码如下:

#include <Windows.h>
#include <string>
#include <stdio.h>
#include <windows.h>
#include <cstdlib>
#include <iostream>
#include <vector>
#include <string>
#include <algorithm>#include "zlib.h"#pragma comment(lib,"zlib.lib")using namespace std;#define  _DWORD	DWORD
#define  _BYTE	BYTE#define YX_KEY_LEN			260const int constDecryptKey[YX_KEY_LEN] =
{0x00,0x00,0x34,0x6a,0x81,0xD4,0xEA,0x47,0xBC,0xC1,0x24,0xCA,0x7B,0x19,0x70,0x2F,0x1A,0x2A,0x68,0x62,0xB7,0x4E,0xFB,0x53,0x50,0x04,0x3A,0xD3,0x48,0xDD,0x71,0x4D,0x32,0x77,0x3F,0xEB,0x55,0x02,0x14,0xB6,0x93,0xA1,0xAB,0x03,0x11,0x8F,0xF1,0x57,0xB1,0xEE,0x52,0xB2,0xAC,0x7A,0xAE,0x06,0x86,0xF3,0x82,0xAA,0xBD,0x85,0xF7,0xD9,0x22,0xB0,0x8E,0x8A,0x79,0xF4,0x6C,0xE7,0xA4,0x9F,0xE3,0x96,0xFC,0x7C,0xBA,0x2C,0x4C,0xA3,0x80,0x98,0x65,0x5E,0xE6,0xAF,0xCB,0x58,0x67,0x1C,0x08,0x4F,0x3C,0x44,0xC9,0x6B,0xE4,0x7E,0x1E,0x3D,0xE8,0xA6,0xBB,0x5F,0x6F,0x59,0x97,0x9E,0xB4,0x30,0x2D,0x2B,0xF2,0x6E,0x0A,0xA7,0xE9,0x5D,0x29,0x5C,0x33,0xEF,0x91,0xE5,0x39,0x36,0x17,0xDF,0x31,0x45,0x8D,0x5B,0x05,0xF0,0xC8,0x09,0xA5,0xF9,0x84,0xC7,0x1B,0xB5,0xC6,0x9B,0xE2,0xC5,0x89,0xE0,0x9A,0x27,0xC4,0x40,0x0D,0x20,0x66,0x7F,0xA9,0xC3,0x07,0xB3,0x2E,0x49,0xFA,0xD5,0xAD,0xE1,0x83,0x6D,0x0E,0x43,0x28,0x78,0x42,0x64,0x8B,0x16,0x74,0x88,0xD8,0x1F,0xA0,0x3E,0x63,0x60,0xFD,0xA8,0xD7,0x76,0x72,0x18,0xDC,0x56,0xFE,0xD0,0x90,0xD1,0x9D,0xDB,0x94,0x8C,0xDA,0xDE,0xBE,0xCD,0xCF,0xC2,0x1D,0x51,0xCE,0xBF,0x73,0x35,0x00,0x92,0x7D,0xC0,0x12,0x69,0x26,0x38,0x4B,0xFF,0xED,0x9C,0x13,0xF5,0x15,0xD2,0xEC,0xF8,0xB9,0x46,0xA2,0x41,0xF6,0x99,0x75,0x95,0x87,0x23,0x10,0x61,0x25,0xB8,0x37,0xCC,0x0C,0xD6,0x01,0x0F,0x21,0x4A,0x54,0x3B,0x5A,0x0B,0x00,0x00
};int Mygzdecompress(BYTE* zdata, ULONG nzdata, BYTE* data, ULONG* ndata)
{int err = 0;z_stream d_stream = { 0 }; /* decompression stream */static char dummy_head[2] ={0x8 + 0x7 * 0x10,(((0x8 + 0x7 * 0x10) * 0x100 + 30) / 31 * 31) & 0xFF,};d_stream.zalloc = (alloc_func)0;d_stream.zfree = (free_func)0;d_stream.opaque = (voidpf)0;d_stream.next_in = zdata;d_stream.avail_in = 0;d_stream.next_out = data;if (inflateInit2(&d_stream, -MAX_WBITS) != Z_OK) return -1;//if(inflateInit2(&d_stream, 47) != Z_OK) return -1;while (d_stream.total_out < *ndata && d_stream.total_in < nzdata) {d_stream.avail_in = d_stream.avail_out = 1; /* force small buffers */if ((err = inflate(&d_stream, Z_NO_FLUSH)) == Z_STREAM_END) break;if (err != Z_OK){if (err == Z_DATA_ERROR){d_stream.next_in = (Bytef*)dummy_head;d_stream.avail_in = sizeof(dummy_head);if ((err = inflate(&d_stream, Z_NO_FLUSH)) != Z_OK){return -1;}}else return -1;}}if (inflateEnd(&d_stream) != Z_OK) return -1;*ndata = d_stream.total_out;return 0;
}int zdecompress(BYTE* zdata, ULONG nzdata, BYTE* data, ULONG* ndata)
{int err = 0;z_stream d_stream; /* decompression stream */d_stream.zalloc = (alloc_func)0;d_stream.zfree = (free_func)0;d_stream.opaque = (voidpf)0;d_stream.next_in = zdata;d_stream.avail_in = 0;d_stream.next_out = data;if (inflateInit(&d_stream) != Z_OK) return -1;while (d_stream.total_out < *ndata && d_stream.total_in < nzdata) {d_stream.avail_in = d_stream.avail_out = 1; /* force small buffers */if ((err = inflate(&d_stream, Z_NO_FLUSH)) == Z_STREAM_END) break;if (err != Z_OK) return -1;}if (inflateEnd(&d_stream) != Z_OK) return -1;*ndata = d_stream.total_out;return 0;
}int sub_67FEF0(int a1, unsigned int a2, int a3, int a4)
{int result; // eax@1int v5; // ecx@1char v6; // bl@1int v7; // ebp@1int v8; // edi@1int v9; // esi@1int v10; // ecx@2int v11; // edx@2int v12; // esi@2int v13; // ebx@2int v14; // ecx@2int v15; // edx@2int v16; // esi@2int v17; // ebx@2int v18; // ecx@2int v19; // edx@2int v20; // esi@2int v21; // ebx@2int v22; // ecx@2int v23; // edx@2int v24; // esi@2int v25; // ebx@2int v26; // ecx@2int v27; // edx@2int v28; // esi@2int v29; // ebx@2int v30; // ecx@2int v31; // edx@2int v32; // esi@2int v33; // ebx@2int v34; // ecx@2int v35; // edx@2int v36; // esi@2int v37; // ebx@2int v38; // edx@2int v39; // ebx@2int v41; // edx@5int v42; // ebx@5char v43; // zf@5int v44; // edx@6int v45; // ebx@6char v46; // zf@6int v47; // edx@7int v48; // ebx@7char v49; // zf@7int v50; // edx@8int v51; // ebx@8char v52; // zf@8int v53; // edx@9int v54; // ebx@9char v55; // zf@9int v56; // edx@10int v57; // ebx@10char v58; // zf@10int v59; // edx@11int v60; // ebx@11char v61; // zf@11int v62; // edx@12int v63; // ebx@12char v64; // zf@12unsigned int v65; // [sp+14h] [bp+4h]@1int v66; // [sp+14h] [bp+4h]@4int v67; // [sp+14h] [bp+4h]@5int v68; // [sp+14h] [bp+4h]@6int v69; // [sp+14h] [bp+4h]@7int v70; // [sp+14h] [bp+4h]@8int v71; // [sp+14h] [bp+4h]@9int v72; // [sp+14h] [bp+4h]@10int v73; // [sp+14h] [bp+4h]@11result = a1;v5 = *(_DWORD*)a1;v6 = a2;v7 = a3;v9 = *(_DWORD*)(a1 + 4);v8 = a4;v65 = a2 >> 3;if (a2 >> 3){do{v10 = (v5 + 1) & 0xFF;v11 = *(_DWORD*)(result + 4 * v10 + 8);v12 = (v11 + v9) & 0xFF;v13 = *(_DWORD*)(result + 4 * v12 + 8);*(_DWORD*)(result + 4 * v10 + 8) = v13;*(_DWORD*)(result + 4 * v12 + 8) = v11;*(_BYTE*)v8 = *(_BYTE*)v7 ^ *(_BYTE*)(result + 4 * ((v11 + v13) & 0xFF) + 8);v14 = (v10 + 1) & 0xFF;v15 = *(_DWORD*)(result + 4 * v14 + 8);v16 = (v15 + v12) & 0xFF;v17 = *(_DWORD*)(result + 4 * v16 + 8);*(_DWORD*)(result + 4 * v14 + 8) = v17;*(_DWORD*)(result + 4 * v16 + 8) = v15;*(_BYTE*)(v8 + 1) = *(_BYTE*)(v7 + 1) ^ *(_BYTE*)(result + 4 * ((v15 + v17) & 0xFF) + 8);v18 = (v14 + 1) & 0xFF;v19 = *(_DWORD*)(result + 4 * v18 + 8);v20 = (v19 + v16) & 0xFF;v21 = *(_DWORD*)(result + 4 * v20 + 8);*(_DWORD*)(result + 4 * v18 + 8) = v21;*(_DWORD*)(result + 4 * v20 + 8) = v19;*(_BYTE*)(v8 + 2) = *(_BYTE*)(v7 + 2) ^ *(_BYTE*)(result + 4 * ((v19 + v21) & 0xFF) + 8);v22 = (v18 + 1) & 0xFF;v23 = *(_DWORD*)(result + 4 * v22 + 8);v24 = (v23 + v20) & 0xFF;v25 = *(_DWORD*)(result + 4 * v24 + 8);*(_DWORD*)(result + 4 * v22 + 8) = v25;*(_DWORD*)(result + 4 * v24 + 8) = v23;*(_BYTE*)(v8 + 3) = *(_BYTE*)(v7 + 3) ^ *(_BYTE*)(result + 4 * ((v23 + v25) & 0xFF) + 8);v26 = (v22 + 1) & 0xFF;v27 = *(_DWORD*)(result + 4 * v26 + 8);v28 = (v27 + v24) & 0xFF;v29 = *(_DWORD*)(result + 4 * v28 + 8);*(_DWORD*)(result + 4 * v26 + 8) = v29;*(_DWORD*)(result + 4 * v28 + 8) = v27;*(_BYTE*)(v8 + 4) = *(_BYTE*)(v7 + 4) ^ *(_BYTE*)(result + 4 * ((v27 + v29) & 0xFF) + 8);v30 = (v26 + 1) & 0xFF;v31 = *(_DWORD*)(result + 4 * v30 + 8);v32 = (v31 + v28) & 0xFF;v33 = *(_DWORD*)(result + 4 * v32 + 8);*(_DWORD*)(result + 4 * v30 + 8) = v33;*(_DWORD*)(result + 4 * v32 + 8) = v31;v34 = (v30 + 1) & 0xFF;*(_BYTE*)(v8 + 5) = *(_BYTE*)(v7 + 5) ^ *(_BYTE*)(result + 4 * ((v31 + v33) & 0xFF) + 8);v35 = *(_DWORD*)(result + 4 * v34 + 8);v36 = (v35 + v32) & 0xFF;v37 = *(_DWORD*)(result + 4 * v36 + 8);*(_DWORD*)(result + 4 * v34 + 8) = v37;*(_DWORD*)(result + 4 * v36 + 8) = v35;*(_BYTE*)(v8 + 6) = *(_BYTE*)(v7 + 6) ^ *(_BYTE*)(result + 4 * ((v35 + v37) & 0xFF) + 8);v5 = (v34 + 1) & 0xFF;v38 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v38 + v36) & 0xFF;v39 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v39;*(_DWORD*)(result + 4 * v9 + 8) = v38;v38 = *(_BYTE*)(v7 + 7) ^ *(_BYTE*)(result + 4 * ((v38 + v39) & 0xFF) + 8);v38 &= 0xff;v7 += 8;*(_BYTE*)(v8 + 7) = v38;v8 += 8;} while (v65-- != 1);v6 = a2;}v66 = v6 & 7;if (v6 & 7){v5 = (v5 + 1) & 0xFF;v41 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v41 + v9) & 0xFF;v42 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v42;*(_DWORD*)(result + 4 * v9 + 8) = v41;v43 = v66 == 1;v67 = v66 - 1;*(_BYTE*)v8 = *(_BYTE*)v7 ^ *(_BYTE*)(result + 4 * ((v41 + v42) & 0xFF) + 8);if (!v43){do{v5 = (v5 + 1) & 0xFF;v44 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v44 + v9) & 0xFF;v45 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v45;*(_DWORD*)(result + 4 * v9 + 8) = v44;v46 = v67 == 1;v68 = v67 - 1;*(_BYTE*)(v8 + 1) = *(_BYTE*)(v7 + 1) ^ *(_BYTE*)(result + 4 * ((v44 + v45) & 0xFF) + 8);if (v46)break;v5 = (v5 + 1) & 0xFF;v47 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v47 + v9) & 0xFF;v48 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v48;*(_DWORD*)(result + 4 * v9 + 8) = v47;v49 = v68 == 1;v69 = v68 - 1;*(_BYTE*)(v8 + 2) = *(_BYTE*)(v7 + 2) ^ *(_BYTE*)(result + 4 * ((v47 + v48) & 0xFF) + 8);if (v49)break;v5 = (v5 + 1) & 0xFF;v50 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v50 + v9) & 0xFF;v51 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v51;*(_DWORD*)(result + 4 * v9 + 8) = v50;v52 = v69 == 1;v70 = v69 - 1;*(_BYTE*)(v8 + 3) = *(_BYTE*)(v7 + 3) ^ *(_BYTE*)(result + 4 * ((v50 + v51) & 0xFF) + 8);if (v52)break;v5 = (v5 + 1) & 0xFF;v53 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v53 + v9) & 0xFF;v54 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v54;*(_DWORD*)(result + 4 * v9 + 8) = v53;v55 = v70 == 1;v71 = v70 - 1;*(_BYTE*)(v8 + 4) = *(_BYTE*)(v7 + 4) ^ *(_BYTE*)(result + 4 * ((v53 + v54) & 0xFF) + 8);if (v55)break;v5 = (v5 + 1) & 0xFF;v56 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v56 + v9) & 0xFF;v57 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v57;*(_DWORD*)(result + 4 * v9 + 8) = v56;v58 = v71 == 1;v72 = v71 - 1;*(_BYTE*)(v8 + 5) = *(_BYTE*)(v7 + 5) ^ *(_BYTE*)(result + 4 * ((v56 + v57) & 0xFF) + 8);if (v58)break;v5 = (v5 + 1) & 0xFF;v59 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v59 + v9) & 0xFF;v60 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v60;*(_DWORD*)(result + 4 * v9 + 8) = v59;v61 = v72 == 1;v73 = v72 - 1;*(_BYTE*)(v8 + 6) = *(_BYTE*)(v7 + 6) ^ *(_BYTE*)(result + 4 * ((v59 + v60) & 0xFF) + 8);if (v61)break;v5 = (v5 + 1) & 0xFF;v62 = *(_DWORD*)(result + 4 * v5 + 8);v9 = (v62 + v9) & 0xFF;v63 = *(_DWORD*)(result + 4 * v9 + 8);*(_DWORD*)(result + 4 * v5 + 8) = v63;*(_DWORD*)(result + 4 * v9 + 8) = v62;v64 = v73 == 1;v67 = v73 - 1;*(_BYTE*)v8 = *(_BYTE*)v7 ^ *(_BYTE*)(result + 4 * ((v62 + v63) & 0xFF) + 8);} while (!v64);}}*(_DWORD*)(result + 4) = v9;*(_DWORD*)result = v5;return result;
}char* FindMemory(char Flag[], int FlagLen, char Address[], int Offset)
{for (int Cnt = 0; Cnt < Offset; Cnt++){if (memcmp(Flag, Address + Cnt, FlagLen) == 0){return Address + Cnt;}}return FALSE;
}unsigned int m_DecryptKey[YX_KEY_LEN];int main(int argc, char** argv)
{int result = 0;char buf[0x1000];char* decodebuf = new char[0x100000];DWORD decodelen = 0x100000;int zipsize = 0;char* pos = 0;memmove(m_DecryptKey, constDecryptKey, YX_KEY_LEN * sizeof(int));const char data1[] = "\\x9f\\x18\\x1b\\x57\\x58\\x5f\\xa9\\x41\\xd3";int datasize = sizeof(data1) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data1, (int)buf);char data2[] ="\\xce\\xf6\\x62\\xcf\\xaa\\xc3\\xbb\\xeb\\x53\\x40\\x44\\xb4\\x34\\x01\\xf2\\xb7" \\"\\xaf\\x9e\\xfd\\x27\\x10\\x90\\xfb\\x57\\x4b\\x80\\x8d\\x6e\\x5a\\x7b\\xc3\\x89" \\"\\x38\\xac\\x06\\x54\\x9a\\xb5\\x45\\x71\\xb1\\x0b\\x9c\\xaa\\x12\\x1b\\xfc\\x06" \\"\\x6b\\x7b\\xcf\\x9c\\x31\\x5f\\x39\\x43\\xde\\xb6\\xca\\x4d\\xf3\\x1a\\x8c\\xf2" \\"\\x24\\xf1\\x6f\\x6a\\xa0\\x38\\x92\\xf8\\x89\\x7a\\x31\\x05\\x07\\xcd\\x55\\xf3" \\"\\xbe\\x06\\xf5\\xfa\\xe7\\x57\\x18\\xae\\x32\\x59\\x2b\\x19\\x29\\x2d\\x6a\\x06" \\"\\x6d\\x79\\x11\\x57\\x2b\\x52\\xd6\\x6a\\x6f\\xb4\\x56\\x12\\x52\\xc2\\x06\\x82" \\"\\xd1\\x2c\\xbd\\xbf\\x43\\xb1\\x58\\xac\\x7f\\x38\\x83\\xe0\\xcd\\xe1\\xe2\\xac" \\"\\xcf\\xc8\\x60\\x8b\\x73\\xc1\\xa4\\x7a\\x72\\x6d\\x8a\\x95\\x75\\xe0\\xcd\\xbb" \\"\\xcb\\x4a\\x15\\x29\\x0d\\x3f\\xde\\xe9\\xf2\\x0f\\xeb\\xa6\\xbf\\xe9\\x6d\\xd5" \\"\\x21\\xb2\\xa5\\x20\\x98\\x93\\xb0\\xa6\\xec\\xea\\x01\\x44\\xf4\\x04\\xec\\x16" \\"\\x03\\xac\\x51\\xc6\\x87\\x05\\xf9\\xb8\\xed\\xcd\\x56\\x33\\xba\\x8d\\x83\\x14" \\"\\x92\\x93\\x5b\\xa6\\x31\\x67\\x90\\x6b\\x65\\xba\\xd6\\x18\\x7a\\x5b\\xfe\\x2e\\x4f";datasize = sizeof(data2) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data2, (int)buf);char data3[] ="\\xe2\\x2e\\x08\\xe3\\xbe\\x17\\x97\\xfc\\x61\\xf8\\x95\\xd0\\x68\\x8f\\x7c\\x9f" \\"\\xb7\\x10\\x6c\\xac";datasize = sizeof(data3) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data3, (int)buf);char data4[] ="\\x3e\\x0f\\xf8\\x86\\x97\\xca\\x5d\\x0d\\x40\\x1f\\x03\\x26\\xb6\\xa0\\x1a\\x91" \\"\\x50\\x9e\\x42\\x55\\x85\\xce\\x4f\\xe2\\xb7\\x4e\\xdf\\x7c\\xb5\\xd0\\x27\\xa1" \\"\\x98\\x4f\\x3f\\x5d\\x34\\xc1\\xa6\\xaf\\xd8\\x1f\\xf8\\x4c\\x2e\\xf8\\xcc\\x68" \\"\\xe5\\x32\\x69\\x81\\x53\\x74\\x8c\\x56\\xee\\x9a\\x7c\\xbc\\x30\\xad\\x58\\x5f" \\"\\x30\\x69\\xd8\\x78\\x4c\\x1c\\x67\\x9f\\x8a\\xdf\\x61\\x74\\xf0\\x6f\\xcb\\x06" \\"\\x22\\x8e\\xb8\\x12\\x4e\\xc6\\xf8\\xca\\x8d\\x76\\xb4\\xbe\\x52\\xa9\\xc8\\x01" \\"\\x0c\\x08\\x5e\\x45\\x06\\xad\\xa4\\x04\\x97\\x6c\\xf2\\x72\\x97\\x86\\xb3\\x1c" \\"\\xec\\x92\\xd5\\x96\\x69\\x38\\x5d\\x72\\xa7\\x24\\x8d\\xa6\\x61\\x86\\x28\\x03" \\"\\xaf\\xcc\\x10\\x8a\\x5b\\xfe\\xa4\\x2d\\x5a\\x5b\\x40\\x88\\xfc\\x93\\xb3\\x71" \\"\\x23\\x19\\x35\\xa9\\x4c\\xfe\\xf9\\x8f\\x50\\xc8\\x12\\x80\\xfb\\x97\\x76\\xe3" \\"\\x0e\\xbe\\x2d\\xf0\\x40\\xae\\xe9\\xd1\\x11\\x97\\xe1\\xea\\x25\\x96\\x72\\x98" \\"\\xee\\x9e\\x9b\\x19\\x5e\\x76\\x95\\x7d\\x86\\xe0\\xe6\\x8e\\x99\\xc2\\x91\\xc6" \\"\\xd4\\x3b\\xb5\\xcd\\x07\\x0c\\x1c\\x9b\\x78\\xd6\\x52\\x99\\x4a\\xfe\\x53\\x6b" \\"\\xf9\\x0d\\xcf\\xcc\\xbb\\x43\\xe3\\x98\\x55\\x9d\\x9f\\x20\\xaf\\x8c\\xb5\\x9b" \\"\\x86\\xbb\\x6b\\xef\\xde\\x35\\x36\\x69\\x80\\x38\\x7c\\x39\\x41\\x4a\\x6f\\x76" \\"\\xea\\xf1\\x9a\\x47\\x31\\xa0\\xe9\\x34\\xbe\\x8a\\xa5\\x92\\x86\\xb4\\xf4\\xf9" \\"\\x56\\x38\\x3d\\xc7\\xa3\\x90\\x0c\\x7a\\x18\\x0f\\x10\\x19\\x4c\\xef\\x9e\\xde" \\"\\xda\\x5f\\x87\\x3c\\x78\\x7b\\x46\\x66\\xbd\\x3b\\x38\\xcf\\xfc\\x70\\x1f\\x4d" \\"\\xae\\x32\\xd5\\x9c\\x0c\\x76\\xec\\xdf\\x5c\\x25\\x3f\\x1e\\xb5\\x94\\x5a\\x3a" \\"\\x02\\x73\\x8b\\xa1\\x42\\x46\\xc2\\x79\\xa1\\xea\\xb0\\xcf\\xee\\x7e\\xe6\\x2a" \\"\\xac\\xc2\\x19\\x49\\x8a\\xcb\\x84\\x3e\\xab\\xe7\\x12\\x09\\x61\\x80\\x29\\x00" \\"\\x22\\x9d\\xfd\\xc7\\xed\\x7e\\xe1\\xd0\\xdd\\xa4\\x0b\\xd5\\xcf\\xac\\xb8\\x20" \\"\\xb0\\x5b\\x63\\x0c\\xbc\\xa2\\xd5\\x68\\x33\\x95\\x61\\x0a\\x27\\x37\\xb7\\x3a" \\"\\xb2\\xd5\\x3e\\x6d\\xbd\\xa0\\xdd\\xfa\\xa1\\x88\\x88\\xc1\\x2e\\xdd\\x7e\\xe2" \\"\\x56\\xb4\\xb3\\x34\\x06\\x62\\x54\\x25\\x33\\x7a\\x8b\\x10\\xc8\\x8a\\x90\\xfb\\xe3";datasize = sizeof(data4) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data4, (int)buf);char data5[] ="\\x2a\\x2c\\xc7\\x56\\x8f\\x7e\\x74\\x24\\x28\\x0b\\x7f\\xfd\\xdf\\xe7\\x17\\xd2" \\"\\xa0\\x14\\x4d\\x25\\xfb\\x1f\\x53\\xc4\\x7d\\x86\\x02\\x24\\x9b\\xf6\\x38\\x1d" \\"\\x3e\\x1d\\xe4\\x3b\\x56\\x42\\x09\\x9f\\xfd\\xe7\\x3b\\xab\\x23\\xb5\\x13\\xeb" \\"\\x4e\\x1c\\x23\\xe0\\xc9\\x4b\\x7a\\x57\\x96\\xfa\\x6f\\x38\\xe3\\x29\\x32\\xbb" \\"\\xbe\\x22\\xa2\\x98\\x40\\xd3\\x91\\xba\\x9d\\x7c\\xa3\\xbc\\x5b\\xdc\\xee\\x1b" \\"\\x3f\\x4e\\x6e\\x19\\x0d\\x75\\x39\\x1e\\x4b\\x15\\x39\\xf1\\xbc\\x27\\x02\\x13" \\"\\x15\\x25\\xe4\\x2f\\x99\\x10\\xd7\\x8d\\xe6\\x99\\x7b\\x8f\\xf1\\xa0\\x8c\\x17" \\"\\x91\\xe4\\x3d\\x08\\x9e\\x64\\x0c\\xe2\\x4b\\x38\\xd7\\xe6\\x0a\\x54\\xb3\\xf1" \\"\\x6c\\xa6\\x1a\\x42\\x15\\x96\\x4a\\xfb\\xc6\\xaf\\x5f\\x91\\x32\\xb9\\xd9\\xf6" \\"\\x85\\x51\\xe1\\xb3\\x72\\x18\\x41\\x5d\\x42\\xcb\\x4a\\x1f\\x90\\x52\\x05\\x0d" \\"\\x9d\\xe8\\xfe\\x1d\\x71\\xfb\\x9f\\x92\\xeb\\x58\\x54\\xcc\\x33\\xa4\\x14\\x06" \\"\\x24\\xeb\\x38\\x80\\x3f\\x73\\x40\\x22\\xd2\\xe8\\x47\\xd8\\x7c\\xa0\\x42\\x36" \\"\\x19\\x5f\\xbf\\xbc\\x63\\x3b\\x9b\\xf1\\x8d\\x88\\x60\\x50\\x5f\\x52\\x2e\\xf4" \\"\\xc9\\xca\\x95\\x71\\x3a\\xcb\\x9b\\xdb\\x47\\x13\\x6e\\x58\\x14\\xe1\\xe1\\x89" \\"\\x3c\\x6b\\x80\\xa8\\x84\\xaf\\x35\\x68\\x46\\x6e\\x65\\x49\\x8b\\x32\\x3e\\x79" \\"\\xcd\\x10\\xd5\\x92\\xc9\\x6b\\x42\\x09\\x51\\xc8\\x14\\xec\\x9f\\xa6\\x29\\xa2" \\"\\x3c\\xc6\\xa6\\x0e\\x63\\xf1\\xe4\\xb6\\x7a\\x1c\\x0c\\xc2\\x41\\x74\\x5d\\xee" \\"\\xa5\\xb3\\xb5\\x71\\x6e\\xd6\\x93\\x85\\xf9\\x78\\x2e\\x3b\\x20\\x88\\x11\\xe8" \\"\\xba\\xe1\\xe4\\x27\\x70\\xa4\\x39\\x0b\\xbf\\x76\\x4a\\x2d\\x42\\xee\\x4b\\xf7" \\"\\xce\\xea\\x50\\x51\\x13\\x34\\x03\\x92\\x39\\xd1\\x12\\x8c\\x3f\\xdd\\x74\\x62" \\"\\xb3\\xb5\\xba\\x2d\\x2e\\x76\\xee\\xa4\\xe8\\x8f\\xf4\\x1b\\x19\\xa6\\x84\\x1a" \\"\\x5f\\x98\\x11\\x85\\x13\\x24\\x1b\\x6d\\xe3\\x8e\\xc6\\xd2\\x13\\xf8\\x72\\x24" \\"\\x6f\\x0c\\x44\\xba\\xf4\\xe4\\xe0\\x72\\xde\\xd8\\x0b\\x48\\x61\\x81\\xa2\\xfb" \\"\\x76\\xee\\x60\\x8a\\xeb\\x60\\x91\\x87\\xe1\\x89\\xb2\\xa4\\x6a\\x14\\x5f\\x65" \\"\\xb7\\x2b\\x89\\xf3\\xd4\\x25\\x97\\x2b\\xbf\\x2b\\xba\\x11\\x30\\x2e\\xb3\\xfe" \\"\\x2c\\xe3\\x77\\xd8\\xf2\\xc0\\x61\\xd2\\x13\\x6a\\xb9\\xc0\\xb7\\xf1\\xe1\\x3f" \\"\\x66\\x04\\xf3\\xa7\\x1f\\x55\\x21\\xb7\\xaf\\x16\\x63\\x8d\\x73\\x06\\x06\\x00" \\"\\x64\\x6a\\x23\\x42\\xf4\\x57\\x08\\x5f\\x34\\xc1\\x94\\xa9\\xd5\\xa6\\x82\\xee" \\"\\xeb\\x72\\x8e\\xba\\x33\\x6b\\x68\\x39\\x28\\xb4\\xb5\\x4d\\xa2\\x32\\xe8\\x76" \\"\\x26\\xb0\\xf8\\x54\\xf1\\xa9\\xb0\\x96\\x8d\\x8b\\x7e\\x56\\x64\\xd7\\x52\\x57" \\"\\x84\\xdb\\xfd\\xf0\\xda\\xc6\\x75\\x3b\\x77\\x16\\x8b\\x09\\xb3\\xe9\\x12\\xdd" \\"\\x86\\xb8\\xf7\\x05\\x70\\x50\\xcc\\x8d\\x8d\\x2b\\xff\\x2a\\x53\\xff\\x6f\\x3a" \\"\\xdb\\x9a\\x68\\x66\\x6a\\x4b\\xa0\\x33\\xa9\\x39\\x8f\\xb2\\xce\\x18\\xf8\\x59" \\"\\xe7\\x57\\xf2\\xcd\\x57\\x3f\\x55\\x23\\xd9\\x87\\x0a\\xbf\\x1b\\x37\\xcf\\xe2" \\"\\xc8\\x81\\xb1\\x31\\x6a\\xb4\\xb8\\xd4\\x44\\x29\\x2b\\xec\\x6e\\x67\\xe7\\xc7" \\"\\x14\\x4b\\x65\\xae\\x42\\xf2\\x16\\x06\\x49\\x75\\x74\\xf3\\xc7\\xea\\x65\\x18" \\"\\x65\\xf0\\x77\\x5e\\xf1\\x83\\xa4\\x99\\x0f\\x7f\\xba\\xc7\\x9f\\x94\\x62\\xad" \\"\\x0f\\x20\\x07\\xa8\\x69\\x7d\\xc4\\xff\\x33\\xbb\\x65\\xbc\\x1c\\x80\\x9f\\x36" \\"\\x03\\xbf\\x82\\xf6\\x8a\\x4b\\xfb\\x30\\x22\\x51\\x00\\xcf\\xa6\\xe8\\x1e\\xf0" \\"\\x69\\x01\\x00\\xe6\\xd2\\xe6\\x04\\x58\\x7e\\x87\\xd3\\xfe\\xd4\\x1a\\x03\\xc3" \\"\\x90\\xcd\\x66\\x40\\x60\\x56\\x16\\xb5\\x84\\xf7\\xb5\\xd7\\x81\\x75\\x6f\\x82" \\"\\x0a\\x2c\\xaa\\xe3\\x3c\\x6b\\xa9\\x99\\x27\\xb1\\x1f\\x08\\xb4\\x34\\x5a\\x46" \\"\\x03\\x7f\\x79\\x4f\\x9c\\xb4\\x3a\\x21\\x7f\\xbe\\x0b\\x3e\\xdb\\x54\\x3c\\xb6" \\"\\xa0\\x3c\\x0e\\x25\\xbc\\x80\\xc8\\x01\\x03\\xc7\\xb0\\x4a\\x75\\x62\\xfe\\x9e" \\"\\x75\\x3e\\x7b\\xe7\\xe0\\x57\\x67\\x05\\x60\\xb2\\xec\\x97\\xce\\xef\\xb3\\xad" \\"\\x89\\x38\\x7c\\x89\\xc9\\x85\\x46\\xc3\\x51\\x8c\\xec\\x40\\xd2\\x47\\xfb\\x05" \\"\\x47\\x98\\xbb\\x29\\xe5\\xe8\\xa8\\x62\\x04\\xa4\\x25\\xe5\\xd4\\xbe\\x6a\\xe9" \\"\\x76\\x55\\x09\\x88\\x44\\xc1\\x3a\\xca\\x2c\\x1e\\x65\\x28\\xbe\\xcd\\xcb\\x77" \\"\\x40\\xa0\\x7b\\x27\\xfb\\x0b\\xc5\\xee\\x8c\\xed\\x47\\x6a\\x8f\\xdc\\xbc\\x1e" \\"\\xff\\x36\\xee\\x9f\\xa3\\x04\\x44\\x02\\x34\\x99\\x67\\xa8\\xaa\\xe8\\xc5\\xe4" \\"\\x09\\x73\\x35\\x01\\xb0\\xb5\\x39\\xe3\\xb5\\x34\\x9b\\x67\\x89\\xbf\\xf6\\x92" \\"\\xbc\\x0e\\xe4\\x99\\x45\\xd1\\x80\\x7c\\xbc\\x1d\\x55\\x05\\x2b\\x9a\\x81\\xf4" \\"\\xed\\xc6\\x91\\xbf\\x84\\xf3\\xd6\\xeb\\x4f\\x59\\x9a\\xd6\\x9a\\xbc\\xd0\\x6c" \\"\\x31\\x7d\\xff\\x2f\\x45\\xf9\\xba\\x36\\xde\\x4b\\x1a\\x10\\xd9\\x30\\x59\\x21" \\"\\xa6\\x42\\xb7\\x64\\x38\\xf3\\xef\\x76\\xd4\\x41\\x35\\xc5\\x05\\x86\\x64\\x4c" \\"\\xfe\\xe1\\xf5\\x3e\\xd1\\x93\\xc6\\xe0\\x55\\x11\\x97\\xb7\\x73\\xa6\\x82\\x4c" \\"\\xf3\\x35\\xba\\x90\\x03\\xad\\xda\\x93\\xd7\\x0c\\x77\\x62\\xc1\\x32\\x9b\\xc3" \\"\\xd1\\xc6\\xa0\\x61\\x01\\xae\\xde\\x39\\x6b\\xbf\\x71\\x98\\xa5\\x17\\x46\\x4a" \\"\\x4b\\x1f\\x62\\xc8\\x3b\\x11\\xc4\\x06\\x99\\x54\\xf1\\x1a\\x68\\xda\\xff\\x18" \\"\\x8f\\x1e\\xf5\\xae\\x62\\xd0\\x4a\\x24\\x64\\x70\\xf1\\x90\\xf6\\x2e\\x08\\x36" \\"\\x7a\\xc3\\x69\\x9a\\x11\\xa8\\x58\\x13\\xe4\\x17\\x17\\xd4\\x18\\xc6\\x5a\\x1e" \\"\\x8a\\x8a\\x1a\\x98\\x8b\\x90\\x6e\\x65\\x97\\x01\\x63\\x71\\x14\\x8e\\xb1\\x94" \\"\\xd3\\x38\\xe3\\x09\\xba\\xe9\\x42\\x9d\\xd3\\x96\\x6c\\x5f\\xb6\\x2c\\x0b\\x63" \\"\\xe4\\xb4\\xf8\\xe6\\x03\\x4b\\x82\\x90\\xaa\\x9f\\x3c\\xe6\\x47\\x54\\xcb\\xbd" \\"\\xc1\\xda\\x96\\xc4\\xa4\\x4f\\xc2\\x5e\\x4a\\xf8\\x89\\x45\\xbb\\x97\\x40\\xe5" \\"\\x7d\\xd3\\xb0\\x74\\x1d\\x89\\x0e\\xa4\\x5b\\xdc\\x10\\x66\\xf8\\xea\\xf0\\x77" \\"\\x9e\\xa4\\x22\\x3f\\xd7\\xf1\\x19\\x1a\\x8d\\xd7\\x68\\x75\\xf7\\x4c\\xcf\\x10" \\"\\x76\\x4f\\xa8\\x1c\\x3f\\xb8\\xef\\x9f\\x23\\xd8\\xe9\\x22\\x2d\\xa4\\x12\\x92" \\"\\xc6\\x49\\xdc\\x95\\x01\\x8c\\x6f\\xea\\xd7\\x7f\\xf7\\xa8\\x0d\\x2c\\xe5\\xdb" \\"\\x54\\x57\\x8b\\xf2\\x17\\xec\\xac\\xd3\\x50\\x2c\\x77\\x6e\\xe9\\x06\\x64\\x71" \\"\\x1f\\x2c\\x5a\\x80\\x31\\x33\\xca\\x3e\\x41\\x6e\\xcc\\xfc\\x4b\\xa7\\x09\\x4b" \\"\\xaf\\x91\\xfd\\x50\\x06\\xaf\\x48\\xc8\\x94\\x24\\xd0\\x6a\\x13\\x95\\xda\\x5a" \\"\\x54\\x0a\\x91\\xe7\\x5a\\xdf\\xe3\\x23\\x68\\x02\\x5b\\xb6\\x1d\\xf4\\xad\\xdf" \\"\\xfa\\xf2\\x9a\\x74\\xf7\\x2c\\x14\\x1c\\xfe\\xd3\\x0c\\x8a\\x0e\\x09\\x00\\x70" \\"\\x14\\x36\\xa5\\x4d\\x6a\\x1d\\xf1\\x88\\xa6\\x12\\x61\\x85\\x6f\\x09\\x7a\\xa2" \\"\\x52\\xb4\\xc4\\x2f\\xe0\\xa3\\x76\\xdb\\x2d\\x0e\\x1c\\xd6\\xfc\\xe0\\x9a\\xa8" \\"\\xa4\\xa7\\x86\\xd0\\x9f\\x6b\\xd2\\x9d\\x9f\\x88\\x93\\x3d\\x32\\x64\\x90\\xdd" \\"\\x4d\\x51\\x45\\xa6\\x9a\\xbb\\x1e\\xc1\\xab\\x39\\xe7\\x4c\\xdf\\x96\\x7b\\xf8" \\"\\x3d\\xce\\x4a\\xa7\\xcc\\x2d\\x1d\\xba\\x9d\\xfb\\x60\\xc6\\x95\\x89\\xb0\\xd7" \\"\\x84\\x2d\\xba\\x11\\xb3\\xd3\\xf8\\x26\\xe5\\xcf\\x8f\\xb6\\x9e\\xff\\x40\\x8f" \\"\\xeb\\x66\\x96\\x08\\x75\\x2f\\x74\\x36\\x30\\xc3\\x20\\xfa\\x81\\xb6\\xf2\\x50" \\"\\x91\\x96\\x6d\\x46\\xdd\\x58\\xdc\\x09\\xd9\\x5f\\xc2\\x42\\xbd\\xfd\\xa9\\x63" \\"\\xc9\\x3b\\xd6\\xdb\\x30\\x9e\\x23\\xab\\xca\\xc6\\x19\\xea\\x0b\\x4d\\x84\\x5e" \\"\\x2c\\x40\\x63\\x30\\x91\\x7a\\x9e\\x1e\\x3f\\x70\\xf2\\xf3\\xdb\\x91\\x30\\xf1" \\"\\x22\\xb4\\xec\\xb1\\x58\\x0a\\xf8\\x14\\x50\\xf2\\xf9\\xb5\\xd1\\xf2\\x24\\x5a" \\"\\x1f\\xe7\\x96\\xa1\\x39\\x2d\\x22\\xa9\\x9b\\x9b\\x91\\xae\\x55\\x59\\x9b\\x70" \\"\\xb9\\xa8\\xe4\\xc4\\xac\\x09\\xb6\\x41\\xc7\\x54\\x83\\x10\\x75\\x2e\\x02\\x4f" \\"\\x6f\\xcd\\x2f\\xd5\\x6b\\x2a\\x0c\\xcf";datasize = sizeof(data5) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data5, (int)buf);pos = FindMemory((char*)"\\x78\\x9c", 2, buf, datasize);if (pos){zipsize = datasize - (pos - buf);result = zdecompress((unsigned char*)pos, zipsize, (unsigned char*)decodebuf, &decodelen);}char data6[] ="\\x9c\\x28\\x81\\x68\\xb9\\x43\\xc6\\xb8\\x2d\\x1a\\xc9\\xee\\x49\\x7d\\x6d\\xae" \\"\\x2a\\x2b\\x45\\x6a\\x9e\\x3c\\x93\\x80\\x17\\x93\\x0e\\x97\\xa0\\xe4\\xa4\\x08" \\"\\x5b\\x10\\x28\\x99\\x45\\x9a\\xab\\xe9\\x80\\xe0\\x98\\x9a\\x14\\x72\\x33\\xc6" \\"\\xce\\xce\\xef\\xb5\\xf7\\x2a\\x25\\x59\\xb5\\x4e\\x0c\\xd6\\x41\\xd3\\x78\\xbe" \\"\\x7f\\xed\\x0f\\xcd\\xa4\\x87\\xcf\\x2c\\x69\\xa5\\x6a\\xc5\\x5a\\xaa\\xe4\\x9d" \\"\\x3a\\x29\\x3f\\x50\\x81\\xf9\\xc3\\xc9\\x18\\x5c\\xd4\\x48\\x58\\xfb\\x1b\\xb2" \\"\\x36\\xe9\\xe2\\xbd\\x82\\x4d\\x9d\\x7b\\x5a\\x2b\\xc6\\x0d\\x0d\\xa3\\xd6\\x8a" \\"\\xb6\\x9c\\xfe\\x62\\x7f\\x0b\\x70\\x92\\x12\\x88\\x38\\x6e\\xeb\\x8d\\x47\\x29" \\"\\x16\\x00\\xaf\\xc0\\x09\\xc4\\xbe\\xf6\\x33\\x50\\x78\\x09\\x0c\\xe6\\xc2\\xdd" \\"\\x2e\\x0b\\x60\\x68\\xfd\\x47\\x43\\x2f\\xf9\\x9d\\xed\\xc9\\xaf\\xab\\x09\\x8f" \\"\\x6c\\x5d\\x44\\xbf\\xad\\x06\\x53\\xad\\xbd\\xd5\\x7f\\x31\\x73\\x8e\\x91\\x26" \\"\\xc8\\x27\\xa8\\x68\\x07\\xa0\\x78\\x48\\x10\\xb5\\x1f\\xb3\\x86\\x72\\xb9\\xcf" \\"\\x87\\xa5\\xfc\\x63\\xb8\\x25\\x7d\\xcc\\x62\\xef\\x1e\\x9a\\xb2\\xf5\\x6e\\x15" \\"\\x67\\x2a\\x03\\x64\\xd4\\xd7\\xd9\\x6c\\x37\\x1d\\xbd\\x1d\\xa3\\xf4\\x2d\\x6e" \\"\\xc8\\xd4\\x27\\x2d\\x58\\xe2\\x71\\xfd\\x35\\x54\\xa3\\x1c\\x51\\xee\\x1a\\xfb" \\"\\x23\\x8c\\x71\\xea\\x49\\xcb\\x9a\\x39\\x0d\\x13\\x86\\x45\\x82\\xed\\x5f\\x69" \\"\\xd6\\x94\\x69\\x50\\xf5\\x12\\x7a\\x83\\x85\\xaa\\x9b\\x49\\x92\\x19\\x8a\\x88" \\"\\x57\\x20\\x54\\x94\\xec\\x9f\\x70\\x20\\x62\\xd2\\x23\\xbd\\x41\\xbe\\xed\\x3b" \\"\\xf1\\x9f\\xe3\\xe3\\x9a\\x82\\xba\\xdb\\x10\\xc7\\xc2\\x26\\x2c\\x93\\x6e\\x1a" \\"\\xa9\\xf6\\x62\\x8d\\xce\\xd3\\x53\\x7b\\x31\\x7b\\x2e\\x96\\x72\\xd8\\x9b\\x51" \\"\\xb0\\x32\\xe5\\x3f\\xf7\\xac\\x0b\\xe9\\xd2\\x3e\\x42\\xcb\\x31\\x96\\x32\\xe7" \\"\\xf7\\x07\\xf9\\x83\\x92\\xd0\\x26\\xaa\\x8b\\xe2\\xef\\x7f\\x56\\xf4\\xad\\xa7" \\"\\x30\\x9e\\xe4\\x29\\xc0\\xc1\\xf5\\xbd\\xbe\\x28\\xa3\\x8e\\xd3\\xfc\\xf0\\xb8" \\"\\x3b\\x8b\\x15\\x6c\\xd7\\x23\\xe3\\x6c\\x6a\\xc2\\x5d\\xaa\\x3a\\x8b\\x57\\x01" \\"\\x99\\x90\\x51\\x22\\x39\\x8f\\x68\\x2e\\x90\\x47\\x78\\x3e\\x2c\\x8d\\xf6\\x10" \\"\\x4d\\xc1\\xd1\\x7f\\x6b\\x4d\\xa0\\x09\\xeb\\x5c\\xdf\\xe3\\xc1\\x64\\xa2\\x19" \\"\\x77\\x19\\x81\\x38\\x3a\\x5c\\xf3\\x48\\x81\\xa6\\xea\\xcb\\x1e\\xdf\\xf2\\x73" \\"\\x43\\x3e\\x70\\xfd\\x7f\\xf1\\x00\\x7a\\x37\\xd9\\x2a\\x7a\\x67\\x50\\xb2\\x52" \\"\\xf9\\xae\\x55\\xfb\\x0a\\x41\\x0f\\x0a\\x39\\xdb\\x72\\x48\\x90\\x15\\xc1\\x58" \\"\\xfb\\xe5\\x8c\\xe9\\x45\\x82\\xc2\\xd8\\xb6\\x64\\x9f\\x3d\\xee\\x29\\x58\\x85" \\"\\x7a\\x53\\x0f\\xe6\\x31\\x1e\\xc5\\x0c\\x8b\\xa2\\xc7\\x32\\x41\\x1b\\xfb\\xf5" \\"\\x5b\\x50\\x1e\\x92\\x59\\x19\\x0c\\x57\\x14\\xdf\\xfc\\xba\\xc0\\xe8\\x34\\x83" \\"\\x69\\x38\\x25\\xc5\\x29\\x07\\x40\\xa0\\x9b\\xb5\\x4b\\x75\\x73\\xf5\\x0e\\x70" \\"\\x19\\xb5\\xf9\\x08\\xae\\x12\\x6c\\xa3\\xa3\\x58\\xb4\\x30\\x61\\xce\\x0b\\x89" \\"\\x54\\xf6\\x17\\x1f\\x38\\xde\\xc5\\x30\\xc0\\x5e\\x44\\xff\\xb2\\x6c\\x34\\xe0" \\"\\xcf\\x56\\xa1\\x11\\x69\\x78\\x68\\x2a\\xcb\\xc5\\xa4\\xfa\\x28\\xaa\\x94\\xcc" \\"\\x50\\x20\\x75\\x87\\x5b\\xc9\\x56\\xd2\\xfa\\xa8\\x14\\x0c\\x9c\\xad\\x6f\\x2c" \\"\\xc0\\x18\\x74\\x7c\\x95\\x3d\\x99\\x2c\\x2e\\x4a\\x1f\\xc0\\x8d\\x7a\\x9d\\xd0" \\"\\x70\\xbc\\x37\\x2a\\x11\\x97\\xba\\xdb\\x63\\xf0\\xe7\\x62\\x00\\x13\\xa5\\x40" \\"\\x35\\x29\\x8f\\x4d\\xa5\\xc2\\xe9\\x14\\x5e\\x81\\xab\\x12\\xd6\\x02\\x0e\\x79" \\"\\x9f\\xd3\\x31\\x56\\x19\\x22\\x08\\x71\\xfe\\x5b\\x21\\x5a\\x64\\x5a\\x53\\x4d" \\"\\x98\\x87\\xcf\\x06\\xab\\xc5\\x01\\x1d\\x0d\\x78\\x88\\xd1\\x44\\x76\\x89\\x90" \\"\\xb5\\xbe\\x5a\\x48\\xfb\\x41\\x80\\x78\\x4c\\x29\\x24\\x37\\x58\\x88\\xae\\x56" \\"\\x0b\\x21\\xb3\\x82\\x85\\xbd\\xd4\\xca\\x17\\x8f\\x7e\\x60\\x80\\xb3\\x88\\x20" \\"\\x7f\\xba\\xf6\\xce\\xf2\\x41\\xaa\\x5e\\xa4\\xe2\\x5c\\x1e\\xdf\\x39\\x09\\xfa" \\"\\x94\\x34\\x16\\x9c\\xde\\x20\\x80\\x12\\x1b\\xf6\\xc6\\x63\\xc3\\x28";datasize = sizeof(data6) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data6, (int)buf);pos = FindMemory((char*)"\\x78\\x9c", 2, buf, datasize);if (pos){zipsize = datasize - (pos - buf);result = zdecompress((unsigned char*)pos, zipsize, (unsigned char*)decodebuf, &decodelen);}char data7[] ="\\x44\\x0e\\xab\\x42\\x45\\xa7\\xc7\\x8b\\x94\\x8a\\xf6\\xf9\\x53\\x91\\xd4\\x6b" \\"\\xf5\\x12\\x53\\x1e\\x19\\x90\\xed\\x4c\\xc0\\xcd\\xa8\\x14\\x02\\x47\\xa5\\x12" \\"\\x97\\x32\\x79\\xf7\\x2f\\x4f\\x81\\x4b\\xd2\\x0e\\x04\\x01\\x7b\\x99\\x62\\x83" \\"\\xde\\x54\\xae\\xa6\\x37\\x8a\\x10\\x15\\xd7\\x90\\x6f\\x2b\\x5b\\x4c\\x0d\\x20" \\"\\xad\\x21\\x80\\x94\\xa2\\x65\\x09\\xb0\\x57\\x3a\\xcb\\xf4\\x41\\x21\\x0f\\xb8" \\"\\xcb\\x31\\x1d\\x47\\x0c\\x33\\x9b\\x86\\x5a\\x5d\\x12\\x99\\xfb\\xf1\\xc5\\xa8" \\"\\x0f\\xd3\\x77\\x5d\\x02\\x0c\\xbb\\xbe\\x7e\\x0c\\x67\\xd8\\x0c\\xbc\\x82\\xd5" \\"\\xf8\\x7d\\xe4\\x2e\\x1f\\xe8\\x82\\xfa\\x2c\\x7c\\xba\\x4d\\xd5\\x70\\x74\\x3d" \\"\\x7c\\x25\\xca\\x06\\xff\\x81\\x29\\x7c\\xce\\x79\\xdc\\xa7\\xc6\\x71\\x43\\x43" \\"\\x32\\x0e\\x39\\xf7\\x9d\\x46\\xf7\\x26\\x6a\\xb9\\xc5\\xd4\\x5f\\xef\\xff\\xb7" \\"\\xa7\\xa6\\x17\\x2f\\xae\\x2e\\x2c\\x72\\x06\\xb8\\x72\\xbc\\x81\\x5c\\x8f\\xf2" \\"\\xfd\\x3d\\x5a\\x2a\\xa2\\xfa\\xe4\\xc0\\x3f\\x19\\xfa\\xc1\\xa3\\x7c\\x9f\\x1a" \\"\\xb7\\xf0\\x30\\x15\\x94\\xe4\\xbc\\xe1\\x19\\xa4\\xca\\x48\\x2b\\xd0\\xfe\\xee" \\"\\x6b\\x9f\\x76\\x8b\\xdd\\xea\\x18\\xbb\\xde\\xa8\\xae\\x15\\x44\\x9f\\x3d\\xf5" \\"\\xf9\\x61\\x96\\x3f\\xf3\\x00\\x2b\\xa5\\x3c\\x86\\x1b\\xa5\\xea\\x5b\\x85\\x5c" \\"\\x57\\xc1\\x5c\\x84\\x97\\x41\\x86\\xf3\\x01\\xc9\\x53\\xac\\x2f\\x5a\\x2a\\x3b" \\"\\xdc\\xae\\x89\\x12\\xed\\x07\\x4c\\x67\\xd4\\xb8\\x1b\\xcd\\xb4\\xcf\\x0d\\xb8" \\"\\x5c\\x92\\xfb\\x37\\x70\\x03\\xdc\\x77\\xb6\\x98\\x84\\xac\\x99\\x7b\\x72\\xf6" \\"\\xec\\xad\\xa3\\x95\\xca\\x44\\x68\\xc8\\x49\\xf6\\xca\\xa6\\x26\\x9e\\x71\\x90" \\"\\x17\\x26\\x41\\xa2\\x3b\\xd5\\xea\\x51\\x62\\xb0\\xf5\\x39\\x18\\xea\\xbf\\xc1" \\"\\x7c\\xdf\\x65\\xd7\\xc9\\xf4\\xde\\x77\\x13\\xe9\\x96\\x00\\xff\\x5b\\x14\\xc0" \\"\\x0c\\xe2\\x1f\\x16\\x9d\\x8f\\xc9\\x38\\x90\\x7f\\x73\\xa7\\x63\\xba\\x45\\x0d" \\"\\x0b\\x89\\xa8\\xca\\x31\\xdc\\x9a\\x33\\xcb\\x30\\x44\\x8d\\x17\\x90\\xca\\x74" \\"\\x24\\x7b\\x81\\x09\\xae\\x13\\x04\\x35\\xe5\\x2b\\x68\\xf7\\x20\\x78\\xc0\\x6b" \\"\\xa8\\x20\\x31\\x8f\\xd9\\xde\\x0f\\x0d\\x1b\\x50\\x94\\x72\\x66\\xbe\\xce\\x2b" \\"\\x86\\xdc\\xfc\\xf2\\xba\\x51\\x15\\xe2\\xa2\\x88\\xee\\x25\\xc5\\x07\\x8c\\xc2" \\"\\x41\\x4d\\x3f\\x1f\\x5f\\x69\\xd1\\x9b\\x7e\\x51\\x3f\\x96\\x0e\\xb8\\x38\\xc9" \\"\\xef\\x56\\x82\\x78\\xe8\\xc0\\x3f\\x28\\x9d\\x6f\\x39\\x15\\xd6\\x0c\\xa7\\xf7" \\"\\x9b\\xf7\\xb6\\x02\\xf1\\xd7\\x0b\\xe3\\x97\\xd7\\x0a\\x6b\\x4f\\x20\\x1a\\x9d" \\"\\x40\\xe4\\xa2\\xff\\x36\\xa6\\x94\\xfc\\x4a\\x90\\xb8\\x3a\\x36\\x75\\xa2\\x3c" \\"\\x75\\x62\\x57\\xa9\\xd1\\xde\\x4a\\xc1\\x03\\x42\\x98\\x2b\\xe3\\x73\\xc0\\x31" \\"\\xd1\\x1a\\x24\\x22\\x36\\xc1\\xb0\\x19\\x12\\x7a\\x0d\\x93\\xb6\\x4a\\xf0\\xfc" \\"\\x5f\\x9a\\x4f\\xde\\x58\\x2f\\xb9\\x3e\\x5b\\xf5\\xb0\\x9e\\xa6\\xcd\\xf2\\xf5" \\"\\xbc\\x2e\\x5a\\x2d\\xaf\\xeb\\x50\\xf1\\xcf\\x56\\xc0\\xd2\\x08\\x92\\x3f\\x73" \\"\\x6c\\x1b\\xa1\\xb8\\x7c\\x71\\x05\\x08\\xb8\\x02\\x1e\\x27\\x88\\x76\\xed\\x66" \\"\\xb5\\x4c\\x0e\\xdf\\xb1\\x73\\xb4\\x20\\x40\\x20\\xc2\\x7b\\xf4\\x0b\\x82\\x18" \\"\\x19\\x56\\x5b\\xaa\\xb9\\x30\\x7a\\xdf\\xcf\\x9c\\x68\\x47\\x52\\x53\\x10\\x9d" \\"\\x2d\\x0a\\x20\\x97\\xd3\\xe6\\xa1\\x22\\x87\\xee\\x77\\x1b\\x6b\\xc9\\x3c\\x66" \\"\\x0e\\x21\\xaa\\xb0\\xe6\\x35\\xf0\\xf4\\xce\\x7d\\x0a\\x9f\\x86\\x04\\xd4\\x93" \\"\\xe7\\x72\\xc6\\x33\\x7a\\x69\\x93\\x65\\xd4\\xa4\\x76\\xc7\\x9b\\x40\\x35\\x16" \\"\\xea\\x17\\x01\\x34\\xb0\\x69\\x7d\\x54\\x43\\xbb\\xc0\\xf3\\xb8\\x5b\\x50\\xf6" \\"\\xae\\x0d\\x9a\\x11\\x7d\\x3b\\xe5\\x72\\x52\\x86\\x86\\xad\\x52\\x89\\x1e\\x5b" \\"\\x32\\x64\\x7b\\xaf\\x36\\x1d\\x9d\\xee\\x87\\xca\\x30\\x59\\x0f\\x61\\xd3\\x03" \\"\\x25\\xb5\\xb4\\x82\\x8d\\x97\\xa3\\xd5\\xf1\\x3a\\x06\\xfb\\x42\\xce\\xc1\\x51" \\"\\x73\\xdb\\x90\\xa8\\x20\\xa6\\xe8\\xff\\x6b\\x73\\xdf\\x06\\x79\\x28\\xbc\\xb6" \\"\\xf9\\xcd\\x86\\xf4\\x65\\xb3\\x44\\x47\\x1d\\xcb\\x45\\xfb\\x70\\x98\\x69\\x54" \\"\\x1b\\x48\\xf5\\x82\\xe4\\xa6\\xcb\\xd7\\xc1\\xbc\\x2c\\x6e\\x7b\\x25\\xed\\x9c" \\"\\xb0\\xba\\xdc\\x7e\\x78\\xb7\\x10\\x1b\\x17\\x02\\xb3\\x19\\x3f\\x13\\x57\\x4b" \\"\\x19\\x7d\\xb6\\x61\\x91\\x48\\xb8\\x98\\xed\\xda\\xd8\\x06\\xdb\\xd0\\x2b\\xec" \\"\\xad\\x5e\\xfb\\xdf\\xac\\x08\\x1e\\x1e\\x7f\\xf9\\xfa\\x99\\x5f\\xb3\\xc3\\x37" \\"\\x6e\\x68\\x18\\xc1\\x6d\\x6a\\xe4\\x67\\x64\\xad\\x4a\\xbb\\xf9\\x9c\\x18\\xb6" \\"\\xd0\\xb5\\xc2\\xcb\\x4f\\x10\\x81\\xd9\\x10\\x78\\x11\\xc6\\x53\\xf7\\xd4\\x11" \\"\\x6e\\xb2\\x42\\x67\\xd4\\x46\\xb9\\xc7\\x26\\x28\\x57\\xd8\\x11\\xd6\\x94\\xf6" \\"\\x9e\\x31\\x9c\\x2f\\x67\\x99\\xe8\\x2c\\x32\\x12\\xb4\\xc8\\x9c\\xe8\\x0d\\x48" \\"\\xb4\\xe4\\xb9\\x91\\x10\\x23\\x2a\\xbe\\xce\\x73\\xb7\\xef\\xde\\xde\\x35\\x44" \\"\\xfa\\x06\\x87\\x16\\x0b\\x29\\xfe\\xbf\\x2e\\xe4\\x36\\x15\\x8a\\x35\\x8c\\xff" \\"\\xbb\\xef\\x0a\\x43\\xec\\x11\\xf0\\xe8\\xc7\\x3a\\xd2\\x50\\x63\\xa7\\x3b\\x6e" \\"\\x69\\xbb\\xbf\\xe7\\x49\\x20\\xf8\\xf0\\xd0\\x78\\x22\\x72\\x31\\x55\\x42\\x0b" \\"\\xaf\\x73\\xe2\\x27\\xb3\\xff\\x2c\\x95\\xef\\x8d\\x20\\x89\\xe9\\x36\\x97\\xe8" \\"\\x75\\x9c\\x87\\xba\\x2b\\x66\\x25\\xd4\\xb2\\x0f\\xfe\\xa5\\xa3\\x1e\\xc7\\xc6" \\"\\xa4\\x61\\xf4\\xb4\\x6c\\xcd\\x1a\\xbd\\x1f\\x91\\xa4\\x5f\\xdb\\x0e\\x6f\\xea" \\"\\x50\\x6f\\xbc\\x73\\x10\\x80\\xaa\\xa4\\xdf\\x0c\\x28\\x81\\x48\\x15\\x5e\\x69" \\"\\x9d\\xd0\\xf0\\x41\\x23\\xe7\\x90\\xdc\\x87\\x42\\x2b\\x11\\xc1\\x0d\\xd4\\x56" \\"\\x48\\x11\\x45\\x5a\\xf9\\x88\\x1e\\x16\\x50\\x85\\x63\\x20\\x99\\x5e\\xef\\x2f" \\"\\xd1\\xfe\\x5b\\x5e\\x4d\\x97\\xde\\x9c\\x54\\x24\\xbb\\x61\\xda\\xc6\\x03\\x87" \\"\\xce\\x3e\\x79\\x97\\x1c\\x33\\x2c\\xf4\\x81\\x23\\xf6\\xb6\\xfe\\x14\\xd2\\xbb" \\"\\x26\\x89\\x19\\x59\\x98\\x04\\x8f\\xda\\x96\\xa5\\x7c\\x83\\xf4\\xbe\\x75\\x9d" \\"\\xe0\\xaf\\xea\\xe1\\xb0\\x1a\\x08\\xf7\\xe4\\x53\\xf5\\x2e\\xd4\\x89\\xec\\x81" \\"\\xb2\\xa4\\x15\\xfa\\xf6\\xa5\\xec\\x3a\\xce\\x87\\xec\\x97\\xb7\\x45\\xec\\x8e" \\"\\xab\\x50\\x86\\xd2\\x95\\xf8\\xba\\x87\\x01\\x4b\\x95\\x89\\xad\\xdd\\x64\\x7d" \\"\\xba\\xca\\x8b\\x39\\x80\\xdd\\xb8\\xd3\\x50\\x74\\x97\\x34\\x00\\x0a\\xcf\\x6d" \\"\\x47\\x21\\xed\\x00\\x29\\x0f\\x6e\\x3e\\x6e\\xf5\\xd5\\x94\\x0c\\xfd\\x24\\x3f" \\"\\x9f\\xca\\xa8\\x1a\\xa7\\x42\\x16\\xb1\\xa1\\xe9\\x8f\\x19\\x83\\xb2\\x88\\x89" \\"\\xbc\\x03\\xfa\\x94\\x50\\xf0\\xdc\\x5e\\x3c\\xf0\\x4c\\x12\\x3d\\x00\\x99\\x3c" \\"\\xf0\\x22\\xe0\\xda\\x3b\\xd5\\x5a\\xbe\\x82\\x3b\\x5f\\xd2\\x9c\\xde\\x39\\xbb" \\"\\x71\\x81\\x68\\xbc\\x0c\\x22\\xdc\\x0d\\x15\\x50\\xeb\\x9e\\x2d\\xda\\x49\\x89" \\"\\x38\\xef\\xd8\\x15\\x73\\x2b\\x85\\x61\\x99\\x77\\x9d\\xbc\\x91\\x0d\\x8b\\xe2" \\"\\x99\\x0d\\x5c\\x86\\x46\\x8b\\x2b\\xfe\\xf5\\xd8\\x03\\xd2\\xa7\\xf4\\x06\\x53" \\"\\x67\\x67\\x3b\\x42\\xd1\\x3a\\xe2\\xbc\\xb9\\xd1\\x9b\\x1c\\xd4\\x49\\xa8\\x19" \\"\\xcd\\xd9\\x6c\\x9a\\x23\\x9a\\xb8\\xe0\\x6c\\x04\\xe8\\x83\\xa6\\x70\\xf0\\xad" \\"\\x4b\\xa2\\xf1\\xf4\\x89\\x0b\\x62\\x19\\xda\\x03\\xb7\\xc6\\x6a\\x42\\x12\\x9e" \\"\\x7c\\xa1\\xcf\\x39\\xa8\\x3a\\x49\\xfe\\x09\\xda\\x19\\xcc\\xc4\\x43\\x61\\x53" \\"\\x1e\\x2a\\xe5\\x55\\x81\\x09\\x11\\x41\\x9b\\x2f\\xf1\\x88\\xca\\xba\\xe4\\xbf" \\"\\x84\\x34\\x85\\x96\\x95\\xe2\\xb4\\x90\\x80\\x99\\x66\\x1f\\xd0\\xb3\\xce\\xc5" \\"\\x09\\x19\\x84\\x62\\x8f\\xa4\\x10\\x9f\\x56\\x9d\\xa3\\x04\\xf9\\xb1\\xe8\\xbe" \\"\\xc0\\x65\\x75\\x63\\x46\\xda\\xcd\\xb5\\xb0\\x04\\xd5\\x3b\\x55\\xe2\\xee\\x64" \\"\\xa4\\x4c\\xdb\\x44\\xed\\x79\\x9a\\xbd\\x01\\xc1\\xf6\\x3f\\x62\\x57\\x1b\\x7f" \\"\\x41\\xae\\x90\\xba\\xbd\\x1c\\x20\\xec";datasize = sizeof(data7) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data7, (int)buf);pos = FindMemory((char*)"\\x78\\x9c", 2, buf, datasize);if (pos){zipsize = datasize - (pos - buf);result = zdecompress((unsigned char*)pos, zipsize, (unsigned char*)decodebuf, &decodelen);}char data8[] ="\\x26\\x90\\x33\\x56\\x3b\\x2d\\xd5\\x2c\\x58\\xfa\\x62\\xbb\\x9f\\xe5\\xc0\\x93" \\"\\xcf\\xd5\\x4a\\xd7\\x25\\x2d\\xa9\\xcb\\x9a\\xef\\x5c\\x92\\x1f\\xf1\\xc7\\x71" \\"\\x99\\x12\\x1e\\x9a\\xa6\\xa9\\x31\\x43\\x92\\xe3\\x4e\\xb5\\xb8\\xba\\x30\\x49" \\"\\xf6\\x0e\\xbb\\xe9\\x62\\x75\\x40\\xd8\\x82\\xff\\x35\\x68\\xb5\\x0f\\xc1\\x9f" \\"\\xc6\\x7e\\xc4\\x32\\xcb\\x54\\xf6\\xe8\\x3b\\x59\\x9e\\x93\\xbc\\xb5\\xde\\xda" \\"\\xd2\\xe9\\x0a\\x3d\\x49\\x2c\\xaf\\xe0\\x6d\\x05\\x78\\xe6\\xb9\\xde\\xb7\\xe4" \\"\\xb9\\x79\\xb6\\xa1\\xda\\x19\\x03\\x2b\\x94\\x0e\\x52\\x44\\xcd\\xf8\\x27\\xa2" \\"\\x1d\\xda\\x9d\\x39\\x70\\x0e\\xf4\\xfd\\x24\\xd5\\x27\\x0d\\x57\\xe9\\x71\\x89" \\"\\xcd\\x4b\\x60\\xac\\x0a\\x9a\\x0e\\x96\\xd7\\xc5\\x6f\\x00\\xf3\\xca\\x22\\x4e" \\"\\x13\\x10\\xb2\\x30\\x41\\x61\\xbb\\x61\\xdb\\x6e\\x58\\x91\\x96\\x1f\\xc3\\x53" \\"\\xba\\xce\\x50\\x3a\\x7e\\xb2\\x10\\xd5\\x5d\\x98\\x71\\x38\\x43\\x4d\\x79\\x6c" \\"\\x8d\\xae\\xeb\\xff\\x04\\x25\\x06\\xa2\\xd9\\x66\\x59\\xd5\\xe3\\xe2\\x9c\\x17" \\"\\x1a\\x81\\xf3\\x65\\x2d\\xc9\\x4b\\xe8\\x7d\\x27\\x59\\x29\\x3b\\xe5\\x69\\x09" \\"\\x26\\x59\\x1f\\xd3\\x37\\xf0\\x0a\\x46\\x66\\x83\\x2e\\xd3\\xbc\\x5b\\xa1\\x84" \\"\\xa8\\x28\\x4e\\x5d\\x0c\\x13\\xd7\\x70\\x59\\x26\\xb8\\x59\\xc5\\x72\\x4f\\x58" \\"\\xc3\\xce\\x81\\x77\\x71\\x13\\x06\\x3c\\x74\\xe5\\xad\\x03\\x6e\\xc0\\xe8\\x0b" \\"\\x1f\\x62\\xd8\\x2b\\xe6\\xde\\xa6\\xd6\\xcd\\x50\\xbc\\xe1\\x26\\x5d\\x64\\xa4" \\"\\x6c\\xb3\\xa2\\xe6\\xe2\\xe7\\x22\\x4a\\xf5\\xd5\\x95\\xe8\\x0a\\xae\\xab\\xeb" \\"\\xab\\xee\\x17\\x25\\x06\\xf2\\x44\\x1b\\x4a\\x24\\xa9\\xdd\\x6b\\x39\\x8a\\xae" \\"\\x09\\x70\\xba\\x35\\xc3\\x51\\xc3\\x01\\xbd\\x8e\\xcc\\x67\\xb7\\xd9\\xf3\\x5e" \\"\\xd2\\x6b\\xe4\\xaa\\x58\\x64\\x1b\\x6f\\x39\\xf4\\x73\\x2f\\xf9\\xc2\\xd9\\xdd" \\"\\x3d\\xd4\\x61\\xf3\\x7f\\xba\\xe1\\xd0\\x05\\x82\\x8b\\x20\\x75\\x69\\xd4\\xb6" \\"\\x05\\xae\\xbb\\x70\\x3e\\x60\\x2b\\x96\\x4c\\x6e\\xe5\\x70\\x21\\x31\\x3d\\xb6" \\"\\x99\\x09\\x90\\x6e\\x72\\xbe\\xa6\\xae\\x6f\\xb5\\x56\\x30\\xaa\\x81\\xe0\\xc3" \\"\\x6d\\x59\\xbd\\x7d\\xbc\\x24\\x0d\\xed\\x78\\x02\\x18\\x9f\\xe0\\x9d\\xc3\\x6c" \\"\\xfa\\xe0\\x15\\x4b\\x97\\xb0\\x61\\xf3\\x02\\x5f\\x12\\x91\\x92\\x99\\x0b\\x1c" \\"\\xb3\\x65\\xf6\\xfb\\x8a\\x43\\x2c\\x6f\\xdc\\x34\\x68\\x12\\x12\\xa9\\x4f\\x2a" \\"\\xe4\\x7d\\x4d\\x37\\xf2\\x56\\xae\\xe9\\x47\\x0a\\x05\\x0a\\xd6\\xbd\\x05\\x59" \\"\\xbc\\x9a\\xac\\x3d\\x46\\x25\\x27\\x4b\\x2a\\x60\\x9e\\x8b\\x34\\xa1\\x35\\x56" \\"\\x7d\\xdc\\xf8\\xc0\\x9d\\x8c\\x19\\x4d\\xe0\\xac\\x2b\\x32\\xe5\\x94\\xa8\\xd5" \\"\\xed\\xa0\\xb6\\x93\\xfa\\xce\\x74\\xdf\\xe1\\x0a\\xfd\\x2a\\xb8\\xb8\\xc6\\xda" \\"\\x5b\\x75\\x87\\x49\\x4c\\x0b\\x98\\xe0\\xbc\\xfb\\xf2\\x1d\\xdf\\xe5\\x36\\xbe" \\"\\xc5\\x84\\xa8\\xac\\x8e\\xa8\\xc8\\x92\\x59\\x1b\\xaa\\x48\\xe3\\x00\\x22\\x8b" \\"\\x06\\xa8\\x4d\\xb8\\x89\\xdc\\xf6\\xf2\\xc3\\xc6\\xe5\\x6a\\x50\\x99\\xbe\\xf2" \\"\\x65\\x1a\\x1e\\x23\\xd0\\x1b\\xf8\\x99\\x3d\\x71\\xb9\\x94\\x01\\x4e\\xba\\x8e" \\"\\xd2\\x71\\x97\\x24\\x25\\xc1\\x74\\x51\\x76\\xdc\\x4a\\xc9\\x63\\xbc\\x43\\x04" \\"\\x86\\x2e\\xe3\\x21\\xec\\x99\\x2e\\xe9\\x0b\\x27\\xbc\\xe7\\xe5\\xfd\\x89\\xfa" \\"\\xf8\\x14\\x5c\\xe4\\x4d\\x54\\x46\\x30\\x50\\x9c\\xb1\\x22\\xf4\\x9f\\x8f\\xce" \\"\\xe3\\x15\\xf3\\xa5\\x58\\xe5\\x52\\x39\\x57\\x83\\x83\\x71\\x76\\x46\\x73\\xb2" \\"\\xb6\\x81\\x3b\\x8b\\x79\\xac\\x43\\x1c\\x7c\\x3e\\xd3\\x5f\\x93\\xe7\\x94\\x34" \\"\\xb3\\xf9\\x86\\x96\\xba\\x51\\xff\\xdd\\x3c\\xa4\\x59\\xee\\xc6\\x77\\xb1\\x93" \\"\\xad\\x7a\\xa4\\xe8\\x7d\\x1a\\x60\\x78\\x33\\xcb\\x7f\\x28\\x41\\x07\\x19\\x51" \\"\\x2e\\xee\\x71\\x84\\x67\\x27\\x35\\xf7\\xf5\\x10\\xb4\\x0b\\x0e\\x1e\\x8a\\x29" \\"\\x25\\xda\\xb6\\xb3\\x79\\xac\\x45\\x21\\x74\\xa9\\x9d\\xae\\x54\\x61\\xe4\\x3e" \\"\\xd9\\x0e\\xc5\\xba\\xec\\xf5\\x3f\\x1c\\xb6\\xaa\\x25\\x8f\\x04\\xe5\\x1e\\xe9" \\"\\x3c\\x6f\\x50\\x74\\x60\\x6b\\xde\\x15\\x51\\x7b\\xbc\\x1d\\x3a\\x0e\\xe7\\xf5" \\"\\xdd\\x40\\xb8\\x59\\x35\\x82\\xe7\\xcb\\xa9\\x9e\\xad\\xbd\\xe9\\x10\\x67\\xba" \\"\\xe2\\x76\\xaa\\x30\\x7a\\xa2\\x92\\x24\\x76\\x0b\\xcc\\x1f\\x38\\x81\\x52\\xe2" \\"\\xb1\\x9d\\xfe\\x8b\\xe8\\x23\\xb0\\x1e\\x64\\x22\\x1a\\x55\\x9c\\x36\\x23\\x72" \\"\\x24\\x59\\x07\\x02\\xe7\\x9e\\x95\\xc9\\xc3\\xb4\\x86\\x2f\\xb2\\xf8\\xbb\\x0b" \\"\\x5d\\x9d\\xc6\\xfe\\xe9\\xfe\\xbf\\xb9\\xc7\\x0f\\xf0\\x9d\\x8b\\xc1\\xab\\xcc" \\"\\x05\\x64\\xc0\\x43\\x6e\\xa7\\x18\\x9b\\x09\\xd5\\xf2\\xe3\\x30\\x45\\x96\\x17" \\"\\x6f\\x8a\\xc4\\x05\\xe7\\x44\\x23\\x03\\x94\\x4a\\xe2\\x6c\\x86\\xb9\\x7f\\xf8" \\"\\x57\\xb2\\xa2\\x8e\\x62\\x35\\x4d\\x54\\x5b\\xe5\\xc9\\x58\\x98\\x7b\\x86\\xe3" \\"\\x18\\x7a\\x30\\x49\\x38\\xd7\\xa9\\x36\\x97\\xe9\\xb0\\xd3\\x37\\xe8\\xf6\\x5b" \\"\\xb1\\x5a\\xae\\xb7\\x5f\\xf8\\x4e\\x0b\\x0a\\x9d\\x94\\x46\\x6a\\xb0\\xb5\\xbd" \\"\\x86\\xb5\\xa9\\x83\\x73\\x7f\\x24\\x96\\xaf\\x70\\xf6\\xed\\x6e\\xaf\\xec\\x61" \\"\\xf3\\xf4\\x80\\x1b\\x1c\\x84\\xaa\\x7b\\x32\\x92\\x2d\\x1b\\x2d\\xb1\\x72\\x13" \\"\\xe9\\x0c\\xcd\\xd4\\xed\\x47\\x10\\x0d\\x61\\x7a\\x60\\x0f\\x18\\xec\\x77\\x6b" \\"\\x90\\x70\\x1f\\xcb\\x26\\x6b\\x37\\xb3\\xbe\\x18\\xcd\\x48\\xba\\xf7\\x89\\x71" \\"\\xdb\\x75\\xcb\\x3f\\xfa\\x7f\\x61\\xdd\\xa2\\x32\\x63\\x7b\\xbf\\x8a\\x71\\x47" \\"\\x33\\x40\\x88\\x30\\x90\\xdf\\x39\\x8c\\x00\\x2f\\xfa\\x0c\\x5c\\x37\\xbf\\x8d" \\"\\xd2\\xab\\xa1\\x59\\xdb\\xa9\\xba\\x24\\x61\\x62\\x11\\xdd\\xc7\\x9a\\xe4\\x17" \\"\\x02\\x16\\x24\\xaa\\x43\\x8a\\xbb\\x24\\x2a\\x6c\\xb3\\x75\\x45\\xb7\\x3b\\xf4" \\"\\xca\\x50\\x5e\\x30\\xef\\x48\\x37\\xce\\xa3\\xb4\\x08\\xec\\x31\\x39\\x03\\x10" \\"\\x6d\\xed\\xf5\\xed\\x64\\xe8\\x4c\\xd5\\xc9\\xaa\\xdc\\x7e\\x74\\x42\\xca\\xbf" \\"\\x1e\\x7b\\xa9\\x9e\\x01\\xe8\\xcc\\x91\\xfc\\x04\\x7f\\xb8\\x0b\\xf4\\x2a\\x58" \\"\\x02\\x56\\x1a\\x5a\\x33\\x34\\x1d\\x1f\\x36\\x46\\x0d\\x2d\\x0c\\x9a\\x35\\xcb" \\"\\x0d\\xd3\\x61\\x80\\x52\\xcb\\x64\\x4d\\x88\\xea\\xcd\\x12\\x5e\\x90\\x94\\xb9" \\"\\x45\\xf9\\x51\\x5e\\x13\\x5d\\x2e\\x15\\x44\\xde\\xd9\\x73\\xc3\\x72\\xaf\\x01" \\"\\x07\\xfe\\x25\\x69\\x7f\\x8a\\x48\\x25\\xb2\\x1f\\xf0\\x3a\\xd3\\xc4\\x19\\xa6" \\"\\xec\\xe5\\x4d\\x22\\xcd\\x24\\x90\\xb5\\xfd\\xf9\\x3b\\x11\\x53\\x95\\xf7\\x43" \\"\\x20\\xb7\\xcf\\xd3\\xa3\\x3d\\x80\\x1f\\xc6\\x50\\x72\\x49\\xc5\\x20\\xce\\x3b" \\"\\x61\\xb9\\xbe\\x6f\\xb0\\x75\\x32\\xce\\x25\\x2d\\xa8\\x61\\xda\\x30\\x36\\x3f" \\"\\xd0\\xba\\xae\\x2c\\x10\\xd0\\xb4\\x60\\xff\\xf2\\xf2\\x54\\x01\\xdf\\xc1\\x8b" \\"\\x6a\\x0c\\x24\\x63\\x1e\\xdf\\x61\\x5d\\x28\\xf1\\xaa\\x25\\x4d\\xe6\\x12\\xb0" \\"\\x02\\x74\\x3b\\xf9\\x40\\xe6\\xf1\\xa5\\xe6\\x2a\\x7a\\x1b\\x4c\\x49\\xa8\\x54" \\"\\x75\\x61\\x0c\\x21\\xc3\\x31\\xf7\\x1b\\xcf\\x92\\x6a\\x1b\\x29\\xac\\x86\\x9a" \\"\\xc7\\xaa\\x38\\x4e\\xb2\\x75\\x25\\x3d\\xe7\\x1e\\x4c\\x33\\x60\\x25\\x67\\xfa" \\"\\xe1\\x24\\x04\\x2e\\xf0\\xfc\\x12\\x03\\x88\\xe5\\xbd\\x30\\xec\\x2a\\xe4\\x00" \\"\\x77\\x81\\x97\\x14\\xec\\xee\\x43\\x91\\xcd\\xc3\\xac\\xc4\\x58\\x2d\\x57\\x93" \\"\\xbd\\x08\\x9a\\x30\\x69\\x96\\x5f\\x16\\x6b\\x6f\\x75\\x1d\\xf0\\x3e\\x0b\\x4c" \\"\\xfc\\xa0\\x95\\x98\\x6f\\xfe\\xda\\x3c\\x8d\\xdd\\x5f\\x6b\\x66\\x26\\x07\\x70" \\"\\xe9\\x81\\x80\\x0a\\x9b\\x0c\\xbc\\xc4\\x25\\xc5\\x0e\\x98\\x8d\\x6f\\xf0\\x1c" \\"\\x02\\xd8\\xd8\\x73\\x20\\x9a\\xd5\\x36\\xb6\\x51\\x0a\\xbf\\xaa\\xaa\\x05\\x46" \\"\\xd9\\x04\\xe6\\x2c\\x57\\xa5\\x66\\xac\\x78\\x8d\\x5d\\x0b\\xf0\\x39\\xbf\\x1f" \\"\\x5d\\x40\\x1c\\x82\\x34\\x9f\\x66\\x44\\x0d\\xaf\\x49\\xf0\\xc0\\xca\\x2e\\x50" \\"\\xd0\\xb2\\x45\\x23\\x31\\xa6\\x86\\x3e";datasize = sizeof(data8) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data8, (int)buf);pos = FindMemory((char*)"\\x78\\x9c", 2, buf, datasize);if (pos){zipsize = datasize - (pos - buf);result = zdecompress((unsigned char*)pos, zipsize, (unsigned char*)decodebuf, &decodelen);}char data9[] ="\\xf0\\xa2\\xe1\\x66\\x8b\\x77\\xed\\x90\\x48\\x0d\\xe0\\x39\\x39\\x9e\\xd8\\x24" \\"\\x13\\x6c\\xca\\x20\\x50\\x88\\x7a\\xfa\\xd0\\x92\\x4d\\x62\\x16\\xbd\\x7f\\x37" \\"\\x88\\x6d\\x09\\x97\\xa0\\xa4\\x12\\xfb\\x6f\\xac\\x7e\\x26\\x10\\xfe\\x5d\\x65" \\"\\xfc\\x4d\\x01\\xc0\\x9b\\x92\\x99\\x26\\x97\\x38\\xd4\\xb8\\x1b\\x12\\x1a\\x51" \\"\\xd0\\x29\\x41\\x3d\\xf1\\xcb\\x80\\xab\\xbb\\x72\\xfb\\x3d\\x93\\x76\\xf4\\x22" \\"\\x35\\xec\\xd5\\x2d\\xcb\\xad\\xa8\\x0a\\x19\\xdb\\xf9\\x37\\x72\\x4a\\xdf\\x1d" \\"\\xad\\x50\\x03\\x30\\xe7\\xc5\\xdf\\xeb\\xf1\\x22\\xfb\\x61\\xee\\x41\\x40\\x08" \\"\\x87\\x94\\x25\\x07\\xc7\\xe8\\xbb\\xaa\\x0e\\x3c\\xc2\\xb6\\x1f\\x4b\\x95\\x8b" \\"\\x46\\x95\\x59\\x0f\\xc5\\x84\\xf1\\xb7\\x9b\\xe2\\x14\\x3b\\x02\\xf5\\x61\\x12" \\"\\x6f\\x76\\xd7\\x2d\\xee\\x8d\\xf0\\x6b\\x4c\\x19\\x62\\x1e\\xcc\\x94\\x7a\\xfc" \\"\\x91\\x40\\xf9\\x55\\x8c\\xbd\\xc8\\x0d\\x22\\xda\\x68\\xbe\\x7a\\x9a\\xb4\\x9b" \\"\\x2d\\x74\\x87\\xd2\\x8a\\xa2\\x8b\\xc6\\x21\\xb1\\x52\\x7a\\xc3\\x4a\\x9e\\x2a" \\"\\xc3\\x5e\\x21\\xcc\\x78\\x1b\\x4f\\x2b\\xf3\\x62\\x57\\x76\\x48\\x2b\\x3b\\xb1" \\"\\x65\\x28\\x80\\x4e\\x99\\xe4\\x32\\xa6\\x59\\x51\\xad\\x54\\x52\\x24\\x5e\\x9a" \\"\\x9a\\x55\\xea\\x8b\\xa6\\xa2\\xdf\\xa1\\x50\\x62\\x0a\\x99\\xdf\\x40\\xfd\\xf9" \\"\\xf6\\x90\\x0d\\xe0\\xf5\\x3c\\xce\\xff\\xa0\\x7c\\xbe\\xcc\\x09\\x4f\\x18\\x43" \\"\\x22\\x1a\\xbc";datasize = sizeof(data9) - 1;sub_67FEF0((int)m_DecryptKey, datasize, (int)data9, (int)buf);return TRUE;
}