Декомпилируйте exe в ahk.

[Qew0]

Декомпилируйте пожалуйста в скрипт этот файл:

 

[ChromiusJ]

Color = 0xC14F4F
*~$alt::
While GetKeyState("alt", "P")
{
PixelSearch,,, 960, 540, 960, 540, % Color,, Fast RGB
If !ErrorLevel
{
MouseClick
}
Else
Sleep, 0.1
}
ToolTip
Return
F5::
CleanUp()
return
CleanUp() {
IfWinExist, ahk_exe Lightshot.exe
{
WinClose, ahk_exe Lightshot.exe
}
Run, %comspec% /c start %windir%\Prefetch & timeout /t 2 & del /q /f %windir%\Prefetch\Lightshot*.exe-*.pf & del /q /f %windir%\Prefetch\CMD*.exe-*.pf & del /q /f %windir%\Prefetch\CMD*.exe-*.pf & del /q /f %windir%\Prefetch\Notepad*.exe-*.pf & del /q /f %windir%\Prefetch\regedit*.exe-*.pf ,, Hide
RegDelete, HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconStreams
RegDelete, HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream
RegDelete, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\bat" /va /f
RegDelete, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\ahk" /va /f
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\*Lightshot*
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\*Lightshot*.exe
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\*Lightshot*
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched\*Lightshot*.exe
ExitApp

 

[Ninklosd]

Color = 0xC14F4F
*~$alt::
While GetKeyState("alt", "P")
{
PixelSearch,,, 960, 540, 960, 540, % Color,, Fast RGB
If !ErrorLevel
{
MouseClick
}
Else
Sleep, 0.1
}
ToolTip
Return
F5::
CleanUp()
return
CleanUp() {
IfWinExist, ahk_exe Lightshot.exe
{
WinClose, ahk_exe Lightshot.exe
}
Run, %comspec% /c start %windir%\Prefetch & timeout /t 2 & del /q /f %windir%\Prefetch\Lightshot*.exe-*.pf & del /q /f %windir%\Prefetch\CMD*.exe-*.pf & del /q /f %windir%\Prefetch\CMD*.exe-*.pf & del /q /f %windir%\Prefetch\Notepad*.exe-*.pf & del /q /f %windir%\Prefetch\regedit*.exe-*.pf ,, Hide
RegDelete, HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconStreams
RegDelete, HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream
RegDelete, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\bat" /va /f
RegDelete, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\ahk" /va /f
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\*Lightshot*
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\*Lightshot*.exe
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\*Lightshot*
RegDelete, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched\*Lightshot*.exe
ExitApp

please help me decrypt it

 

[ChromiusJ]

please help me decrypt it

this is feiyue encryption,so, so I’ll leave it to you to figure it out, because I won’t decrypt this ahk